last executing test programs: 2m16.263192171s ago: executing program 2 (id=648): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x11e, 0x80, 0x0, 0x1c6) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40081}, 0x40009) 2m16.151868123s ago: executing program 2 (id=650): syz_emit_ethernet(0x1f, &(0x7f00000000c0)={@local, @link_local={0x3}, @void, {@llc_tr={0x11, {@snap={0x0, 0xab, 'I', "282896", 0xd, "f69b32a2a5cb407308"}}}}}, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_int(r0, 0x107, 0xa, 0x0, 0x0) (async) socket$netlink(0x10, 0x3, 0x12) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$nl_generic(r0, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000100)={0x288, 0x2b, 0x300, 0x70bd2c, 0x25dfdbff, {0x1e}, [@generic="43e0cc162ecc7d75f122c0188da7205b2fcab9b2bd117ea6d578a2a424a8eaf576ce0e533ecc97f50d26cbf597c5f45133d2db3525b6c2265040b6ff8e6f172768e159a80cb221677953f10948aea87ec9feb648cdf9377c19e09f296ac24ea61b940dbc9db281e660313d9dce19", @nested={0xfe, 0x4d, 0x0, 0x1, [@typed={0x8, 0x129, 0x0, 0x0, @ipv4=@multicast1}, @generic="65ed3c0c95c454ec7351a890d8063122178fa0b179fc85d8558a44a2353a06152f76a3c9b5e16163525ecc4d93b24e0b032357fea671324836e3be9acb5262ebf4cf9e34170cf927f400c674f88b04aac3f86671b68d8dc5b7ad4f5b37579f6a7db80846ad2874af9b5e731e9a", @generic="2db4c172bdf5af3292f8e0f4c933bd72e644f81470b1bf759f4f1a1c75f2a6f5570c1c86ec8cc96d2c9d1fab2b8506a4a9ace7540ce7e91ed589192a5f5bf553e41b5a7e5b371bbe5fc47fd2ce06d562a63f4d7a3e7c93409ae3d34141abcd454ed862bc84f3da7fb2890f6cfcd267b3e38f1f63e96b049ec396a5f44b", @nested={0x4, 0x149}, @nested={0x4, 0x10}]}, @generic="54555af46a8c0b254b191ee69ded15f03baf6729756a6f1d38b03ab31beaef55315144faa913aa41aaa6394dc043e31be44e8df52ee10be54a91786879eae706f70b8a511ec5d2de6e54e404fed2c98579f2946d8644375ab25bde742575e3e18ebca2fcf429abbe74bbd19df65968e4c185bdf1d1569faa2751127b1ac8251954099698dbf32190c1f4d2bad73dd979b1e799074d8816a2bc4e6090d3731f5d30d708dee9a77e9e1eb92e126d40b658235c3a6680c9815d9812abee77", @generic="3cf9b96ef426e3cfe6e7bcb802", @nested={0x14, 0xc4, 0x0, 0x1, [@typed={0x8, 0xe2, 0x0, 0x0, @ipv4=@multicast1}, @typed={0x8, 0x2b, 0x0, 0x0, @fd}]}, @typed={0x14, 0xa0, 0x0, 0x0, @ipv6=@empty}, @typed={0x8, 0x12c, 0x0, 0x0, @uid=r1}, @typed={0x9, 0xf2, 0x0, 0x0, @str='\xaa\xaa\xaa\xaa\xaa'}]}, 0x288}, 0x1, 0x0, 0x0, 0x24000180}, 0x40818) 2m16.037317742s ago: executing program 2 (id=651): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r3) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, r4, 0x7ad71c5c2912d839, 0x70bd29, 0x25dfdbfc}, 0x14}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20305, 0x7e15}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MTU={0x8, 0x4, 0x44}]}, 0x44}, 0x1, 0x0, 0x0, 0x8840}, 0x48094) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x1, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_4ADDR={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8044}, 0x0) 2m15.865548843s ago: executing program 2 (id=653): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x29}, @mcast1, {[], {{0x4e23, 0x4622, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x2}}}}}}}, 0x0) 2m15.750582407s ago: executing program 2 (id=655): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) bind$unix(r1, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e24}, 0x6e) (async) sendmsg$nl_generic(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000280)={0x1c, 0x33, 0x1, 0x70bd2a, 0x25dbdbff, {0x2}, [@typed={0x8, 0x4, 0x0, 0x0, @u32=0x24}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24001}, 0x4000000) (async) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x2, 0x4, 0x388, 0xffffffff, 0x0, 0x1e8, 0xd0, 0xfeffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @empty, [], [], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0x6, 0x0, 0x1, 0x46}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@private0, @empty, [], [], 'sit0\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "ddabf53d9b1435965491f65318776d8001e770b667f173dfa40b58c10327e3121114449fd20ba2be6e45cae72a972f25170163232ed996b4789b9d00"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) (async) syz_emit_ethernet(0x7e, &(0x7f0000000300)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x48, 0x11, 0x0, @remote, @local, {[], {0x4e20, 0xe22, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "88c73b21f267636d01dbe5712c1c941e1cdafbbb43f09c28", "e13808ca72381f41e5fff9620915b6f78670dfaf9a2038083179cf6b7931c9b4"}}}}}}}, 0x0) (async) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x14}, 0x14}}, 0x8081) (async) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000000)=@ethtool_stats={0x1d, 0x2000000000000070}}) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={@cgroup=r4, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) (async) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCDELRT(r7, 0x890c, &(0x7f0000000480)={0x0, {0x2, 0x4e20, @multicast2}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e20, @local}, 0x80, 0x0, 0x0, 0x0, 0xe, &(0x7f0000000440)='batadv_slave_1\x00', 0x200, 0x51, 0x1}) writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f2b8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000200)="c67f0d7df9", 0x49}], 0x2) 2m15.512686375s ago: executing program 2 (id=657): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001600)=@newtfilter={0x3c, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r4, {0xfff2, 0x4}, {}, {0x5, 0x10}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0xf0}, {0x4}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400c021}, 0x20040054) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) setsockopt$SO_J1939_PROMISC(r5, 0x6b, 0x2, &(0x7f0000000200)=0x1, 0x4) bind$can_j1939(r5, &(0x7f0000000340)={0x1d, r6, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) bind$can_j1939(r5, &(0x7f0000000000)={0x1d, r6, 0x3, {0x1, 0xf0}}, 0x18) setsockopt$SO_J1939_FILTER(r5, 0x6b, 0x1, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@newtfilter={0x5c, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r6, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}, [@TCA_CHAIN={0x8, 0xb, 0x854f}, @TCA_CHAIN={0x8, 0xb, 0x5}, @filter_kind_options=@f_fw={{0x7}, {0x8, 0x2, [@TCA_FW_POLICE={0x4}]}}, @TCA_CHAIN={0x8, 0xb, 0xb8f}, @TCA_CHAIN={0x8, 0xb, 0x4}, @TCA_CHAIN={0x8, 0xb, 0xc}]}, 0x5c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) socket$nl_route(0x10, 0x3, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) socket(0x10, 0x803, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001600)=@newtfilter={0x3c, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r4, {0xfff2, 0x4}, {}, {0x5, 0x10}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0xf0}, {0x4}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400c021}, 0x20040054) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) (async) setsockopt$SO_J1939_PROMISC(r5, 0x6b, 0x2, &(0x7f0000000200)=0x1, 0x4) (async) bind$can_j1939(r5, &(0x7f0000000340)={0x1d, r6, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) (async) bind$can_j1939(r5, &(0x7f0000000000)={0x1d, r6, 0x3, {0x1, 0xf0}}, 0x18) (async) setsockopt$SO_J1939_FILTER(r5, 0x6b, 0x1, 0x0, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@newtfilter={0x5c, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r6, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}, [@TCA_CHAIN={0x8, 0xb, 0x854f}, @TCA_CHAIN={0x8, 0xb, 0x5}, @filter_kind_options=@f_fw={{0x7}, {0x8, 0x2, [@TCA_FW_POLICE={0x4}]}}, @TCA_CHAIN={0x8, 0xb, 0xb8f}, @TCA_CHAIN={0x8, 0xb, 0x4}, @TCA_CHAIN={0x8, 0xb, 0xc}]}, 0x5c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) (async) 2m0.21349668s ago: executing program 32 (id=657): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001600)=@newtfilter={0x3c, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r4, {0xfff2, 0x4}, {}, {0x5, 0x10}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0xf0}, {0x4}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400c021}, 0x20040054) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) setsockopt$SO_J1939_PROMISC(r5, 0x6b, 0x2, &(0x7f0000000200)=0x1, 0x4) bind$can_j1939(r5, &(0x7f0000000340)={0x1d, r6, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) bind$can_j1939(r5, &(0x7f0000000000)={0x1d, r6, 0x3, {0x1, 0xf0}}, 0x18) setsockopt$SO_J1939_FILTER(r5, 0x6b, 0x1, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@newtfilter={0x5c, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r6, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}, [@TCA_CHAIN={0x8, 0xb, 0x854f}, @TCA_CHAIN={0x8, 0xb, 0x5}, @filter_kind_options=@f_fw={{0x7}, {0x8, 0x2, [@TCA_FW_POLICE={0x4}]}}, @TCA_CHAIN={0x8, 0xb, 0xb8f}, @TCA_CHAIN={0x8, 0xb, 0x4}, @TCA_CHAIN={0x8, 0xb, 0xc}]}, 0x5c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) socket$nl_route(0x10, 0x3, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) socket(0x10, 0x803, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001600)=@newtfilter={0x3c, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r4, {0xfff2, 0x4}, {}, {0x5, 0x10}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0xf0}, {0x4}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400c021}, 0x20040054) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) (async) setsockopt$SO_J1939_PROMISC(r5, 0x6b, 0x2, &(0x7f0000000200)=0x1, 0x4) (async) bind$can_j1939(r5, &(0x7f0000000340)={0x1d, r6, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) (async) bind$can_j1939(r5, &(0x7f0000000000)={0x1d, r6, 0x3, {0x1, 0xf0}}, 0x18) (async) setsockopt$SO_J1939_FILTER(r5, 0x6b, 0x1, 0x0, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@newtfilter={0x5c, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r6, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}, [@TCA_CHAIN={0x8, 0xb, 0x854f}, @TCA_CHAIN={0x8, 0xb, 0x5}, @filter_kind_options=@f_fw={{0x7}, {0x8, 0x2, [@TCA_FW_POLICE={0x4}]}}, @TCA_CHAIN={0x8, 0xb, 0xb8f}, @TCA_CHAIN={0x8, 0xb, 0x4}, @TCA_CHAIN={0x8, 0xb, 0xc}]}, 0x5c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) (async) 1m20.984813453s ago: executing program 3 (id=109): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001e000100fdffffff00000000ff00", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\n\x00'], 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) sendto$packet(r0, &(0x7f0000000080)="a99c383d33c9c607b1b9d49688a8834a88a8", 0x1000e, 0x0, &(0x7f0000000000)={0x11, 0x8100, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000000)={0x4, 0x6, 0x7fff, 0x100, 0x9}) 1m18.047492322s ago: executing program 4 (id=74): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = epoll_create(0xc) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x40000000}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000200)) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x1fc, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x5e}, {0x0, 0x800, 0x0, 0x7, 0x0, 0x0, 0x3, 0x7}, {0x0, 0x0, 0x3}}, [@tmpl={0x144, 0x5, [{{@in=@remote, 0x0, 0x6c}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x8}, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x1}, {{@in6=@private2, 0x0, 0x32}, 0x0, @in6=@remote, 0x3502}, {{@in6=@loopback, 0x0, 0x3c}, 0x2, @in=@remote, 0x0, 0x1, 0x3}, {{@in6=@mcast2, 0x4d3, 0x3c}, 0x2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x2b}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x4}]}]}, 0x1fc}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x8001, {0x0, 0x0, 0x0, r5, {0x5, 0x7}, {}, {0x3, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x14, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x20}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x200c0e9}, 0x20000004) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x8001, {0x0, 0x0, 0x0, r5, {0x5, 0x7}, {}, {0x3, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x14, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x20}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x200c0e9}, 0x20000004) 1m3.877909838s ago: executing program 3 (id=109): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001e000100fdffffff00000000ff00", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\n\x00'], 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) sendto$packet(r0, &(0x7f0000000080)="a99c383d33c9c607b1b9d49688a8834a88a8", 0x1000e, 0x0, &(0x7f0000000000)={0x11, 0x8100, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000000)={0x4, 0x6, 0x7fff, 0x100, 0x9}) 1m2.595482503s ago: executing program 4 (id=74): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = epoll_create(0xc) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x40000000}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000200)) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x1fc, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x5e}, {0x0, 0x800, 0x0, 0x7, 0x0, 0x0, 0x3, 0x7}, {0x0, 0x0, 0x3}}, [@tmpl={0x144, 0x5, [{{@in=@remote, 0x0, 0x6c}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x8}, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x1}, {{@in6=@private2, 0x0, 0x32}, 0x0, @in6=@remote, 0x3502}, {{@in6=@loopback, 0x0, 0x3c}, 0x2, @in=@remote, 0x0, 0x1, 0x3}, {{@in6=@mcast2, 0x4d3, 0x3c}, 0x2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x2b}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x4}]}]}, 0x1fc}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x8001, {0x0, 0x0, 0x0, r5, {0x5, 0x7}, {}, {0x3, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x14, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x20}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x200c0e9}, 0x20000004) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x8001, {0x0, 0x0, 0x0, r5, {0x5, 0x7}, {}, {0x3, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x14, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x20}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x200c0e9}, 0x20000004) 48.439839164s ago: executing program 3 (id=109): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001e000100fdffffff00000000ff00", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\n\x00'], 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) sendto$packet(r0, &(0x7f0000000080)="a99c383d33c9c607b1b9d49688a8834a88a8", 0x1000e, 0x0, &(0x7f0000000000)={0x11, 0x8100, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000000)={0x4, 0x6, 0x7fff, 0x100, 0x9}) 46.571983232s ago: executing program 4 (id=74): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = epoll_create(0xc) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x40000000}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000200)) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x1fc, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x5e}, {0x0, 0x800, 0x0, 0x7, 0x0, 0x0, 0x3, 0x7}, {0x0, 0x0, 0x3}}, [@tmpl={0x144, 0x5, [{{@in=@remote, 0x0, 0x6c}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x8}, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x1}, {{@in6=@private2, 0x0, 0x32}, 0x0, @in6=@remote, 0x3502}, {{@in6=@loopback, 0x0, 0x3c}, 0x2, @in=@remote, 0x0, 0x1, 0x3}, {{@in6=@mcast2, 0x4d3, 0x3c}, 0x2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x2b}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x4}]}]}, 0x1fc}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x8001, {0x0, 0x0, 0x0, r5, {0x5, 0x7}, {}, {0x3, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x14, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x20}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x200c0e9}, 0x20000004) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x8001, {0x0, 0x0, 0x0, r5, {0x5, 0x7}, {}, {0x3, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x14, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x20}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x200c0e9}, 0x20000004) 33.304663485s ago: executing program 3 (id=109): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001e000100fdffffff00000000ff00", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\n\x00'], 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) sendto$packet(r0, &(0x7f0000000080)="a99c383d33c9c607b1b9d49688a8834a88a8", 0x1000e, 0x0, &(0x7f0000000000)={0x11, 0x8100, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000000)={0x4, 0x6, 0x7fff, 0x100, 0x9}) 31.70847018s ago: executing program 4 (id=74): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = epoll_create(0xc) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x40000000}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000200)) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x1fc, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x5e}, {0x0, 0x800, 0x0, 0x7, 0x0, 0x0, 0x3, 0x7}, {0x0, 0x0, 0x3}}, [@tmpl={0x144, 0x5, [{{@in=@remote, 0x0, 0x6c}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x8}, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x1}, {{@in6=@private2, 0x0, 0x32}, 0x0, @in6=@remote, 0x3502}, {{@in6=@loopback, 0x0, 0x3c}, 0x2, @in=@remote, 0x0, 0x1, 0x3}, {{@in6=@mcast2, 0x4d3, 0x3c}, 0x2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x2b}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x4}]}]}, 0x1fc}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x8001, {0x0, 0x0, 0x0, r5, {0x5, 0x7}, {}, {0x3, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x14, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x20}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x200c0e9}, 0x20000004) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x8001, {0x0, 0x0, 0x0, r5, {0x5, 0x7}, {}, {0x3, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x14, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x20}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x200c0e9}, 0x20000004) 18.552958949s ago: executing program 3 (id=109): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001e000100fdffffff00000000ff00", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\n\x00'], 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) sendto$packet(r0, &(0x7f0000000080)="a99c383d33c9c607b1b9d49688a8834a88a8", 0x1000e, 0x0, &(0x7f0000000000)={0x11, 0x8100, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000000)={0x4, 0x6, 0x7fff, 0x100, 0x9}) 16.735085619s ago: executing program 4 (id=74): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = epoll_create(0xc) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x40000000}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000200)) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x1fc, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x5e}, {0x0, 0x800, 0x0, 0x7, 0x0, 0x0, 0x3, 0x7}, {0x0, 0x0, 0x3}}, [@tmpl={0x144, 0x5, [{{@in=@remote, 0x0, 0x6c}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x8}, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x1}, {{@in6=@private2, 0x0, 0x32}, 0x0, @in6=@remote, 0x3502}, {{@in6=@loopback, 0x0, 0x3c}, 0x2, @in=@remote, 0x0, 0x1, 0x3}, {{@in6=@mcast2, 0x4d3, 0x3c}, 0x2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x2b}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x4}]}]}, 0x1fc}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x8001, {0x0, 0x0, 0x0, r5, {0x5, 0x7}, {}, {0x3, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x14, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x20}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x200c0e9}, 0x20000004) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x8001, {0x0, 0x0, 0x0, r5, {0x5, 0x7}, {}, {0x3, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x14, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x20}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x200c0e9}, 0x20000004) 6.250696004s ago: executing program 0 (id=1424): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x6f}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000280)=ANY=[@ANYBLOB='-', @ANYRESOCT, @ANYRESOCT], 0x44) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) listen(r3, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(r1, 0xc0109414, &(0x7f000000e0c0)={0xf61, 0xffffffff, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0xcb8) accept4$unix(r3, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000080)={'bridge_slave_1\x00'}) r4 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001340)=ANY=[@ANYBLOB="1800000000000000000000000000000071122f000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r4) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x3}, 0x1c) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=r5, @ANYBLOB="0000000040000200280012800a000100767863616e000000180002801400010000000000", @ANYRES32=r5], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000038000000000a00000a140000001100010000000000000000000700000a"], 0x28}, 0x1, 0x0, 0x0, 0x4040001}, 0x44) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 5.226901439s ago: executing program 0 (id=1428): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000940), 0x0, 0x0) 5.166028922s ago: executing program 0 (id=1429): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, r1, 0x4}, 0x38) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\x00\x00\x00 '}) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a010400000000000000000200000048000480440001800c0001007061796c6f616400340002800800044000000000080005400000000808000340000000000800024000000000080006400000000108000840000000000900010073797a30000000000900020073797a32"], 0x9c}}, 0x0) 4.902785224s ago: executing program 0 (id=1432): r0 = socket$pppoe(0x18, 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002, 0xfffffffd}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback, 0xffffffff}, 0x1c) shutdown(r2, 0x1) splice(r2, 0x0, r1, 0x0, 0x400000107ffff000, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x1, @random="0000aaedaeb6", 'macvlan1\x00'}}, 0x1e) sendmmsg$sock(r0, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="6f9d9826ef496783424e657addef3195d396a676b1cc9aad01b6b04e9b6c113914a092d6b2053746e57e88c4", 0x2c}, {&(0x7f0000000080)="4011e09251902edf3a2b438273068dac45ba", 0x12}, {&(0x7f00000000c0)="4ac3d48ab867ed008ec82664723e375acc28a47628fe53a40a5050004bc3d25538e01b171b05c232fec71686233e82852940f406f32a0f09eaee83e4f60513a5563e02a8f251ddda496107b180a58b4e4cf6bc24f39260c079f69da65e4201d95a483cf2c891c1a5", 0x68}], 0x3, &(0x7f0000000180)=[@timestamping={{0x14, 0x1, 0x25, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}], 0x48}}, {{&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x5, @private2, 0x7fff, 0x1}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000006c0)="ce1d578a7b9a32da7732336e8f85f5574584c6296e8df85f80adf444b0f5cc84cac614c3fac5b86e0fe6afbfd1d238bb10c60b20b8bfedccbfdece", 0x96}, {&(0x7f00000002c0)="b68a52163958c33858effa048e106032248499b31bdca55cdcc363b54930dabb67f6744c9f1edcf1fe8f91bda1e7c12ebae84eda0fcfade15d352328d26fcc5885c08f27b6823ea822560a2e9114ef0c80fbb612834abd493b9e013a563a696fe5", 0x61}, {&(0x7f0000000340)="bd3f98b200cb40e77713c31fd5895b656714c1545cfeba57923c792c56afb880c099611495a8876f25445bae8c08067bf4c83a0f7761648937e9317bad8bef517ffec716b12eba792e77b63f7fb5ba925b25f3010d595bef015f481cea1234f19812b8a7e180e1faf67af870c04bedc85f0919f104a38030b0861b", 0x7b}, {&(0x7f00000003c0)="5dfd1bb0144b5c0271be963dc8be7594f4c6c3e396a227b6051238a7caf374b82af2a9d0258ef99aa862c27391f487f915d126ff1fe0bb6f7102dfcc30bd8ae6e1825b3866f6d5a66dee077be379c9eb65320c90cc9569a662af822c1431cc520f3d237653f02fc3b0011804059fee2c3641f3512f405ed3a4a59aa34d03ad12d16818bb91a2c8c3627c18697b7a4f78d278a99d79c4f6823e477524597dfbe7f2a6293c9e7abb4afe", 0xa9}, {&(0x7f0000000480)="a1eb6a8d0984a9640f8a12e94c91c07645a6725f5e3f5c0fe05515399363514e6f54b9301118927304ba41c138a568b25bac45925a11d05dcee552ea34a5500811c9c2756080e75436ab3941405af0932056b2c22548119cfce283c6498aa8b68ae4317fcf495a835214f3a2f36d75f8f820ab8ed7b39d503c36ec4ac9a9793b4b952eae33a2bc9bdbe33bc3dcc045b85c0c2f55176d5ca19951bb33a1a5716f512514d06ba7abc9c65e5656536132b771b0fd94b17af50755", 0xb9}, {&(0x7f0000000540)="8c116e53ff4ceddd191a5ddc3641bcefa27f25ed66bb294042709ab789882f59d833b5fbd5728846c5ed45bd186e662b79acacf224e370c4c57197868e7854873fe02f365213654ac20175d61dfcb0df73d1b9ed1227abfab4c006e70d32e11c17dea5b082c5a22972e28919581bf31674ea9dbabe55d5a1ab", 0x79}], 0x6}}], 0x2, 0x0) 4.604243307s ago: executing program 0 (id=1434): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001480)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}]}], {0x14}}, 0x7c}}, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)={0x1c, r1, 0x1, 0x0, 0x25dfdbfd, {0x54}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, r1, 0x1, 0x0, 0x25cfdbfc, {0x54}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40010) 4.171266183s ago: executing program 1 (id=1436): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2, 0x1}}, {0x4}}]}]}, 0x48}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x2, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', r1, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r4, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000029c0)=ANY=[@ANYBLOB="140000000d0603"], 0x14}}, 0x0) sendmsg$IPSET_CMD_SWAP(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000060601"], 0x14}}, 0x810) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) socket(0x19, 0x1, 0xe4d4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x39}]}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x31, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x2f9, 0x543, &(0x7f0000000040)="b90103600040f000009e0ff088a81fffffe100004000632177fb7f02000188a80001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) (async) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2, 0x1}}, {0x4}}]}]}, 0x48}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x2, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', r1, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) socket$packet(0x11, 0x2, 0x300) (async) socket$netlink(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_TYPE(r4, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000029c0)=ANY=[@ANYBLOB="140000000d0603"], 0x14}}, 0x0) (async) sendmsg$IPSET_CMD_SWAP(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000060601"], 0x14}}, 0x810) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r4) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4) (async) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) (async) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) (async) socket(0x19, 0x1, 0xe4d4) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x39}]}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x31, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x2f9, 0x543, &(0x7f0000000040)="b90103600040f000009e0ff088a81fffffe100004000632177fb7f02000188a80001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="9209558f0c5fb25cd57f98113135c3171b8b331fbc04f0e6955a796ff8e3aae3cac46cec3030dfc999058aea01f0e6dcf2f9d480d328655aca003927bd50ed49d4843c8a0a2a4b26ceb747947200bd644c85e7a8a7d7cfce840c02a7d69c9e0bca410f64d43290abbbf3131e1fa8bd8c3e5f19d5a491d3d4c1a0fe47de9eebaf073ac3da6256bdb681d18fbd607c9b0d710442bcf78bc36fd3c035812bde582a262bff0e4d6181c818fccf542868c6e602d97bea23a101955dc76bcc984142ab305387aa348566d688edd291a3e9d08952adbdf60462bb7f7faebcdfccf17115708b0d73d0f3a469ce7d8374219b3f92c92bcec4958d474bb281c26691949d054b784a5866f081e53eb9cfd7"}, 0x28) (async) 4.111416259s ago: executing program 0 (id=1437): socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40004) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0xf, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x814}, 0x4004814) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002c40)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x16}]}}}]}]}], {0x14}}, 0x80}}, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x80, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc044}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="40000000090601020000000000000000000000000900020073797a31000000000500010007000000180007800c00018008000140fffffffe050003000c"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 3.258669103s ago: executing program 5 (id=1441): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000001c0)={0x7fffffff}, 0x10) sendmsg$kcm(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c0000004a008104e00f80ecdb4cb9020a", 0x11}, {&(0x7f0000001700)="0c74c75350f4a590e15c61", 0xb}], 0x2, 0x0, 0x0, 0x10}, 0x44004) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_DELRULE={0x2c, 0x8, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x54}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_DELRULE={0x2c, 0x8, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x54}}, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000000fffffffd000000e0"], 0x190) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000400)={0x9, 0x9, 0x6, 0xa, 0x7, 0xf2, 0x9, 0x5, 0x8f, 0x2f, 0x4, 0x0, 0x1, 0x7f}, 0xe) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000002000000e001"], 0x190) (async) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000002000000e001"], 0x190) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r1, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x19c, 0x0, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7}, {0x6, 0x16, 0x800}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x2}, {0x8, 0xb, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0x2}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x7}, {0x8, 0xb, 0xd8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x7}, {0x6, 0x16, 0x1}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x5}, {0x8, 0xb, 0x200}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x10000}, {0x6}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0xfffe}, {0x8, 0xb, 0xc90}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x7}, {0x5}, {0x6, 0x11, 0x4}, {0x8, 0xb, 0x200}}]}, 0x19c}}, 0x24004001) (async) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r1, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x19c, 0x0, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7}, {0x6, 0x16, 0x800}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x2}, {0x8, 0xb, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0x2}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x7}, {0x8, 0xb, 0xd8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x7}, {0x6, 0x16, 0x1}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x5}, {0x8, 0xb, 0x200}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x10000}, {0x6}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0xfffe}, {0x8, 0xb, 0xc90}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x7}, {0x5}, {0x6, 0x11, 0x4}, {0x8, 0xb, 0x200}}]}, 0x19c}}, 0x24004001) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000080)={0x2, {{0x2, 0x4e22, @multicast2}}}, 0x88) 3.016068953s ago: executing program 5 (id=1442): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xcb) bind$ax25(r1, &(0x7f0000000540)={{0x3, @bcast, 0x1}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) connect$ax25(r1, &(0x7f00000001c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000010000100dfffffffffffffff00000000", @ANYRES32=0x0, @ANYBLOB="0000000021000400080004000006000008001b"], 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f00000000c0), &(0x7f0000000000)=""/8, 0x2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f00000001c0)={r2, &(0x7f00000000c0), 0x0}, 0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="900000002000010000000000000000000a8010000000000118000100050015000200000014000100ff020000000000007d8d77fd000000010500130001000000140002"], 0x90}}, 0x0) unshare(0x50000000) socket$nl_route(0x10, 0x3, 0x0) (async) syz_init_net_socket$ax25(0x3, 0x2, 0xcb) (async) bind$ax25(r1, &(0x7f0000000540)={{0x3, @bcast, 0x1}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) (async) connect$ax25(r1, &(0x7f00000001c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000010000100dfffffffffffffff00000000", @ANYRES32=0x0, @ANYBLOB="0000000021000400080004000006000008001b"], 0x30}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f00000000c0), &(0x7f0000000000)=""/8, 0x2}, 0x20) (async) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f00000001c0)={r2, &(0x7f00000000c0), 0x0}, 0x20) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="900000002000010000000000000000000a8010000000000118000100050015000200000014000100ff020000000000007d8d77fd000000010500130001000000140002"], 0x90}}, 0x0) (async) unshare(0x50000000) (async) 2.924902862s ago: executing program 1 (id=1443): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10) r2 = socket$pppoe(0x18, 0x1, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000080), &(0x7f00000000c0)=0x40) sendmsg$nl_generic(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x14, 0x16, 0xa01, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000180), &(0x7f00000001c0)=0x4) listen(r0, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000480)='}', 0x1}], 0x1) r4 = accept4$unix(r0, 0x0, 0x0, 0x800) recvfrom$unix(r4, &(0x7f0000000240)=""/148, 0x94, 0x10100, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 2.702871562s ago: executing program 1 (id=1444): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@updsa={0x13c, 0x10, 0x1, 0x0, 0x0, {{@in=@remote, @in=@local}, {@in=@empty, 0x0, 0x33}, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, {}, {}, {}, 0x0, 0x0, 0x2, 0x1}, [@algo_auth_trunc={0x4c, 0x14, {{'sm3\x00'}}}]}, 0x13c}}, 0x0) 2.302669762s ago: executing program 1 (id=1445): r0 = socket(0x10, 0x80002, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="030700000000000000000800000068000480040007801300010062726f6164636173742d6c696e6b00001900078008000300000000000800020000000000080003000000000008000200000000000800030000000000040004"], 0x7c}}, 0x0) (async) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="030700000000000000000800000068000480040007801300010062726f6164636173742d6c696e6b00001900078008000300000000000800020000000000080003000000000008000200000000000800030000000000040004"], 0x7c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000017000000400006803c00040067636d2861"], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)={0x174, r4, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x44, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8c5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x97c9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_LINK={0x7c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2a7b938a}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}]}, @TIPC_NLA_LINK={0xa0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9638}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xafbf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x500000}]}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x5}, 0x24044000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x23, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x8, 0x70bd25, 0x25ffdbfc, {0x0, 0x0, 0x0, 0x0, 0x10, 0x40482}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MAX_AGE={0x8, 0x3, 0x1d}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 2.273566411s ago: executing program 5 (id=1446): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, &(0x7f0000000180)="2b7d48bb009a989af2ed049742cbc1a0f933dbaa2a5e2d30cebb9670a8e310e43ad8523caeddd2df3b079c9466093861a8275458dcece9fb87a2cd5111bc37ed189538b9336686b731469e18e43c03332518d5f3fedd67e4d73580d52a6e3a3105eae930bfb31c236ddb64c8a750db829815ae43", &(0x7f0000000200)=""/77}, 0x20) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) write$cgroup_int(r1, &(0x7f0000000040)=0xb, 0x12) (async) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9ffffc}) (async, rerun: 64) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000100)={0x0, 0x2, 0x17, 0x6b4}) (rerun: 64) mmap(&(0x7f00006a9000/0x2000)=nil, 0x2000, 0x1000005, 0x12, r0, 0xcd44a000) 2.006284652s ago: executing program 5 (id=1447): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r1, 0x4, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x4044012}, 0x48040) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) socketpair(0x21, 0x3, 0x5, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xec, r3, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, 'nl80211\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x100000001}, @NBD_ATTR_SOCKETS={0x58, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x25c}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r10}}]}, @NBD_ATTR_SOCKETS={0x28, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r11}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r13}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r14}}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x8004}, 0x8000) sendmsg$IPSET_CMD_PROTOCOL(r11, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, 0x1, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}}, 0x4000800) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r12, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x58, r1, 0x10, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x1b, 0x2a, [@rann={0x7e, 0x15, {{0x0, 0x6}, 0x4, 0x28, @device_a, 0x0, 0x10000, 0xba}}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x35}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040805}, 0x40000) r15 = accept4$llc(r12, 0x0, &(0x7f0000000800), 0x80000) close(r15) sendmsg$nl_route(r12, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)=@bridge_newvlan={0x58, 0x70, 0x302, 0x70bd2b, 0x25dfdbfc, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x4}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8, 0x2, 0x11}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x6}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0x10}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r16 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_LOOPBACK(r16, 0x65, 0x3, &(0x7f0000000980), 0x4) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r10, 0xf501, 0x0) ioctl$sock_SIOCOUTQ(r5, 0x5411, &(0x7f00000009c0)) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r18, 0x8924, &(0x7f0000000a40)={'macsec0\x00', @remote}) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x10, r16, 0xe1eee000) r19 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a80)={0x1b, 0x0, 0x0, 0x1, 0x0, r18, 0x7, '\x00', 0x0, r18, 0x3, 0x0, 0x3, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x7, 0x2e, &(0x7f0000000b00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r19}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2d}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r18}}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0xcc}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x594f}}, @func={0x85, 0x0, 0x1, 0x0, 0x6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000000c80)='syzkaller\x00', 0x800, 0x3f, &(0x7f0000000cc0)=""/63, 0x41100, 0x41, '\x00', 0x0, @fallback=0x7, r17, 0x8, &(0x7f0000000dc0)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000e00)={0x4, 0x4, 0x28c, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x7, 0x0, &(0x7f0000001000)=[{0x4, 0x3, 0x3, 0x4}, {0x5, 0x4, 0xb, 0x8}, {0x2, 0x4, 0xf, 0x8}, {0x4, 0x1, 0x3, 0xc}, {0x2, 0x2, 0x8, 0x7}, {0x2, 0x3, 0x10, 0x9}, {0x5, 0x3, 0x1, 0x6}], 0x10, 0x4, @void, @value}, 0x94) 1.963681845s ago: executing program 1 (id=1448): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448c9, 0x0) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r3, 0x6, 0x9, 0x0, &(0x7f00000000c0)) bind$bt_hci(r2, &(0x7f0000000180)={0x1f, 0x0, 0x1}, 0x6) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_PIM(r4, 0x0, 0xd1, &(0x7f0000000140)=0xfffffffb, 0x4) r5 = socket(0x15, 0x80005, 0x0) getsockopt(r5, 0x200000000114, 0x2711, 0xffffffffffffffff, &(0x7f0000000000)=0x7ffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0xffffff7d, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0x4c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x15}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x5a}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x11}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_MASQ_REG_PROTO_MAX, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x104, 0x2, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_TABLE_USERDATA={0xe5, 0x6, "c2b934ab6f771f82ad5d0dc19b42c0cfb89bb65a1f884f25e664cffcaf56f25680acf6bf06c27c738495f464d3c76a851984f12c688cb0b257e6a6737502e8ffb4a7ad78fcfac2edce93e8488ab695f4dacdf94859147636ce5fc8fcecfbaf2b9f784b4d8f7a6fac913193e25d4c5e0cdfe643fd2d822f9ffd3b9ef46d03ca8ae3f20be761817bfbe02463ac90c1d148ed3a5c5a97e7be1cbd627b9784f67afa8aedefe6aed0248166d2d29ee8b7b6ce998af681bef7bde922d8d358828941018e508639a711328547bce94464e0f354a42322b02b611149686679d767e4791b2f"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELOBJ={0x10c, 0x14, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_USERDATA={0xc9, 0x8, "2c6f46dba231a3bdefb31ee238df2c87fb7b6b0e199b63a74739fcbbebd3c061b042a3608eae74767ee8b8a2483f0c0fcc71757e4146235af236bdba2d33b802529ea2f2a8df3d4dc50ba9348fe54e413330fcb588bbaf9f7c15cd085019df67a08d5785310501a7307f4d783b514645e9cd716dd5eb0891c915f10b5f90914fdddbaf06121514ed84978ba586add69591d45b76367610c26cc9904e7604393e9ce1e53a357d596157f56306fe5c300e0ca164e6c5a74f71d39a12bfba753a740e364d7b49"}]}, @NFT_MSG_DELTABLE={0xe4, 0x2, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_USERDATA={0x0, 0x6, "9cb6b96e00fa4d06b76f0fbc308c29a02c1d172b6d4e177825cc9d7dd79d7451556519ef6ce0c3903231bfa864b55062d220a7ae8c8a2a04e3750956e86960dc77ac0bcfa9ba471088636c823850d7ed6043035c4fe2cb245f114fa5bd271e7aa42e2914f1aceec9f7d955dbe3998ea4d90a8306f8f34b656d536876653a9c58480dbdd426e7c5790670a55ef5e7129c95fc828dee5fa1b93e371f7fead948cacea4f8cfc61d288ce4821be5b5dd0066"}, @NFTA_TABLE_FLAGS={0x0, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0xa3, 0x6, "f3308d502113cc5d38a8be1d794e18ef8358e11696d9be35ca470f0f192cad3bd90b7b1ecb43d21ee2ab9e5b5f4762e40f228aae25a862d186a620eeb865a5084f437f5570f388baee54fc11302e62342adba6e4e5d7a5c2df27bcbc4b382324120a31db18836480257f83eebdb5b4fe1626c0ed3d3a46fa907aea69cfaef55f5dfe39961525862aabd5f85f268c4abbe45f8791815d01340920a806b1e5bc"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xc}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}, @NFT_MSG_DELTABLE={0x34, 0x2, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x8}}}, 0x408}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x701, 0x3, 0x258, 0x0, 0xb, 0x108, 0x0, 0x0, 0x1c0, 0x1c8, 0x1c8, 0x1c0, 0x1c8, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'veth1_to_batadv\x00', '\x00', {}, {}, 0x32}, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@inet=@esp={{0x30}, {[], 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x15, 0x1, 0x619, 0x6, 'snmp\x00', 'syz0\x00', {0x631}}}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'veth1_to_batadv\x00', 'ip6erspan0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x5, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) write(r0, &(0x7f00000002c0)="29000000140005b7ff00000004eabdeb0101b6ff02159f7e5520756b0f33b49db96ad24d12595fbea5", 0x29) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) 1.849182768s ago: executing program 5 (id=1449): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x11, 0xa, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f0000000100)={'macvlan0\x00', {0x2, 0x0, @initdev}}) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x2c, 0x3e, 0x107, 0x0, 0x25dfdbfc, {0x4, 0x7c}, [@typed={0x4}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x18, 0x0, 0x0, @ipv4=@multicast1}]}]}, 0x2c}}, 0x0) r3 = socket$inet6(0xa, 0x80001, 0x0) r4 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback, 0xffffff81}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) close(0x3) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=r5, @ANYRES32=r5, @ANYBLOB='.'], 0x20) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x2d, &(0x7f0000001280)=ANY=[], 0x90) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x49920d862a92153b, 0x4, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x4}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x48}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0xc4, 0x5, [{{@in=@private, 0x0, 0x2b}, 0x0, @in=@empty}, {{@in=@broadcast, 0x0, 0x3c}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {{@in=@multicast2, 0x0, 0x33}}]}]}, 0x17c}}, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000000c0)={0x42, 0x4, 0x3}, 0x10) write(r0, &(0x7f00000001c0)="c58a903fb541197ff0a26ea8f0cade90c127965eb955aa8690ba5680d1bb701944d278cc352a13298308f05e6a6546e661b600da94617614d9993f359455bf67672f7bba902809f63802492ae213f1481a39ce8cd971e8a21c121d2699f0846c55a3e7efb6515990eb4de92a259984b9f0ddc06a118b915bd37fb5463eedcd3cdb54af9089347a3a6dc5e1eae07f2432c53e4a3e198a2f86e17ce993fb054ee8a16d4cbb37e5286af336a13a059137c2f53ea16cfbefeabb93611d6b7614", 0xbe) 1.718313015s ago: executing program 3 (id=109): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001e000100fdffffff00000000ff00", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\n\x00'], 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) sendto$packet(r0, &(0x7f0000000080)="a99c383d33c9c607b1b9d49688a8834a88a8", 0x1000e, 0x0, &(0x7f0000000000)={0x11, 0x8100, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000000)={0x4, 0x6, 0x7fff, 0x100, 0x9}) 4.914762ms ago: executing program 1 (id=1450): r0 = socket(0x11, 0x800000003, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000006440)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="300000001100010000000000000000000400000008"], 0x30}], 0x1}, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)={r1}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x2f00, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="e3ff0000000000002400128009000100626f6e64000000001400028005001b00000000000500010006"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe], [0x0, 0xff, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) socket$packet(0x11, 0x2, 0x300) 929.498µs ago: executing program 5 (id=1451): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RADAR_DETECT(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000012c0)={0x1c, r3, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="58040000", @ANYRES16=r1, @ANYBLOB="010027bd7000fedbdf253e0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c008200736f757263655f6d61635f69735f6d756c746963617374000500830000000000"], 0x58}, 0x1, 0x0, 0x0, 0x48001}, 0x8054) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 0s ago: executing program 4 (id=74): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = epoll_create(0xc) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x40000000}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000200)) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x1fc, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x5e}, {0x0, 0x800, 0x0, 0x7, 0x0, 0x0, 0x3, 0x7}, {0x0, 0x0, 0x3}}, [@tmpl={0x144, 0x5, [{{@in=@remote, 0x0, 0x6c}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x8}, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x1}, {{@in6=@private2, 0x0, 0x32}, 0x0, @in6=@remote, 0x3502}, {{@in6=@loopback, 0x0, 0x3c}, 0x2, @in=@remote, 0x0, 0x1, 0x3}, {{@in6=@mcast2, 0x4d3, 0x3c}, 0x2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x2b}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x4}]}]}, 0x1fc}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x8001, {0x0, 0x0, 0x0, r5, {0x5, 0x7}, {}, {0x3, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x14, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x20}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x200c0e9}, 0x20000004) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x8001, {0x0, 0x0, 0x0, r5, {0x5, 0x7}, {}, {0x3, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x14, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x20}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x200c0e9}, 0x20000004) kernel console output (not intermixed with test programs): lan: left promiscuous mode [ 214.247980][ T12] veth0_vlan: left promiscuous mode [ 214.891614][ T5155] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 214.904156][ T5155] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 214.913279][ T5155] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 214.921442][ T5155] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 214.944043][ T5155] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 215.056975][ T12] team0 (unregistering): Port device team_slave_1 removed [ 215.100233][ T12] team0 (unregistering): Port device team_slave_0 removed [ 215.589604][ T9001] chnl_net:caif_netlink_parms(): no params data found [ 215.678113][ T9022] netlink: 16 bytes leftover after parsing attributes in process `syz.0.781'. [ 215.734052][ T5155] Bluetooth: hci1: command tx timeout [ 216.077037][ T9001] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.095421][ T9001] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.130178][ T9001] bridge_slave_0: entered allmulticast mode [ 216.150675][ T9001] bridge_slave_0: entered promiscuous mode [ 216.160772][ T9001] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.178560][ T9001] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.195645][ T9001] bridge_slave_1: entered allmulticast mode [ 216.237079][ T9001] bridge_slave_1: entered promiscuous mode [ 216.435946][ T9001] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.491581][ T9001] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.651379][ T9001] team0: Port device team_slave_0 added [ 216.694980][ T9074] netlink: 36 bytes leftover after parsing attributes in process `syz.0.795'. [ 216.732057][ T9069] (unnamed net_device) (uninitialized): down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 216.753196][ T9069] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 216.768080][ T9001] team0: Port device team_slave_1 added [ 216.966617][ T9001] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.987639][ T9001] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.016366][ T9001] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.024711][ T5155] Bluetooth: hci4: command tx timeout [ 217.034920][ T9087] netlink: 20 bytes leftover after parsing attributes in process `syz.0.797'. [ 217.078798][ T9083] macvtap1: entered promiscuous mode [ 217.092450][ T9083] vlan0: entered promiscuous mode [ 217.099470][ T9083] macvtap1: entered allmulticast mode [ 217.106224][ T9083] vlan0: entered allmulticast mode [ 217.111511][ T9083] veth0_vlan: entered allmulticast mode [ 217.121823][ T9083] vlan0: left allmulticast mode [ 217.128005][ T9083] veth0_vlan: left allmulticast mode [ 217.133646][ T9083] vlan0: left promiscuous mode [ 217.180049][ T9001] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.197260][ T9001] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.240599][ T9001] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.267954][ T9094] netlink: 4 bytes leftover after parsing attributes in process `syz.5.801'. [ 217.345756][ T9099] netlink: 12 bytes leftover after parsing attributes in process `syz.5.801'. [ 217.406771][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.586725][ T9106] netlink: 'syz.1.805': attribute type 32 has an invalid length. [ 217.594816][ T9106] netlink: 8 bytes leftover after parsing attributes in process `syz.1.805'. [ 217.621192][ T9111] netlink: 20 bytes leftover after parsing attributes in process `syz.0.807'. [ 217.681947][ T9001] hsr_slave_0: entered promiscuous mode [ 217.692846][ T9001] hsr_slave_1: entered promiscuous mode [ 217.700458][ T9001] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 217.709180][ T9001] Cannot create hsr debugfs directory [ 217.716901][ T9106] (unnamed net_device) (uninitialized): option coupled_control: invalid value (52) [ 217.742195][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.813888][ T5155] Bluetooth: hci1: command tx timeout [ 217.824759][ T9019] chnl_net:caif_netlink_parms(): no params data found [ 217.870264][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.086931][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.310105][ T9141] netlink: 'syz.1.814': attribute type 11 has an invalid length. [ 218.318976][ T9141] netlink: 224 bytes leftover after parsing attributes in process `syz.1.814'. [ 218.343014][ T9142] netlink: 'syz.1.814': attribute type 11 has an invalid length. [ 218.350963][ T9142] netlink: 224 bytes leftover after parsing attributes in process `syz.1.814'. [ 218.374502][ T9141] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 218.381831][ T9141] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 218.437660][ T9140] tc_dump_action: action bad kind [ 218.448817][ T9019] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.470134][ T9019] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.488997][ T9019] bridge_slave_0: entered allmulticast mode [ 218.497478][ T9019] bridge_slave_0: entered promiscuous mode [ 218.544300][ T9019] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.551882][ T9019] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.571728][ T9019] bridge_slave_1: entered allmulticast mode [ 218.580298][ T9019] bridge_slave_1: entered promiscuous mode [ 218.676510][ T9151] netlink: 210228 bytes leftover after parsing attributes in process `syz.5.817'. [ 218.719444][ T9019] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.821267][ T9019] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.883622][ T12] bridge_slave_1: left allmulticast mode [ 218.897133][ T12] bridge_slave_1: left promiscuous mode [ 218.912154][ T9159] netlink: 'syz.5.821': attribute type 1 has an invalid length. [ 218.914470][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.937672][ T12] bridge_slave_0: left allmulticast mode [ 218.944665][ T9159] netlink: 'syz.5.821': attribute type 3 has an invalid length. [ 218.944677][ T12] bridge_slave_0: left promiscuous mode [ 218.944895][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.972663][ T9159] netlink: 216 bytes leftover after parsing attributes in process `syz.5.821'. [ 218.992980][ T9159] NCSI netlink: No device for ifindex 813332851 [ 219.093547][ T5155] Bluetooth: hci4: command tx timeout [ 219.430376][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 219.441818][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 219.459133][ T12] bond0 (unregistering): Released all slaves [ 219.507217][ T9172] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 219.525067][ T9019] team0: Port device team_slave_0 added [ 219.638253][ T9019] team0: Port device team_slave_1 added [ 219.741677][ T9019] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.748848][ T9019] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.776856][ T9019] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.846356][ T9177] team0: left allmulticast mode [ 219.851651][ T9177] team_slave_0: left allmulticast mode [ 219.860801][ T9177] team_slave_1: left allmulticast mode [ 219.869234][ T9177] geneve0: left allmulticast mode [ 219.876004][ T9177] team0: left promiscuous mode [ 219.880963][ T9177] team_slave_0: left promiscuous mode [ 219.887239][ T9177] team_slave_1: left promiscuous mode [ 219.894861][ T5155] Bluetooth: hci1: command tx timeout [ 219.901494][ T9177] geneve0: left promiscuous mode [ 219.907882][ T9177] bridge0: port 3(team0) entered disabled state [ 219.926890][ T9177] bridge_slave_0: left allmulticast mode [ 219.932833][ T9177] bridge_slave_0: left promiscuous mode [ 219.938880][ T9177] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.950950][ T9177] bridge_slave_1: left allmulticast mode [ 219.957768][ T9177] bridge_slave_1: left promiscuous mode [ 219.965017][ T9177] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.981774][ T9177] bond0: (slave bond_slave_0): Releasing backup interface [ 219.997809][ T9177] bond0: (slave bond_slave_1): Releasing backup interface [ 220.020794][ T9177] team0: Port device team_slave_0 removed [ 220.034166][ T9177] team0: Port device team_slave_1 removed [ 220.040517][ T9177] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.048445][ T9177] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.057410][ T9177] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.065273][ T9177] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.079537][ T9177] team0: Port device geneve0 removed [ 220.110144][ T9019] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 220.133155][ T9019] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.171127][ T9019] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 220.179279][ T9183] openvswitch: netlink: Actions may not be safe on all matching packets [ 220.204435][ T9176] team0: Mode changed to "activebackup" [ 220.333186][ T12] hsr_slave_0: left promiscuous mode [ 220.342375][ T12] hsr_slave_1: left promiscuous mode [ 220.349658][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.370575][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.396609][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.408167][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.438683][ T12] veth1_macvtap: left promiscuous mode [ 220.453443][ T12] veth0_macvtap: left promiscuous mode [ 220.459267][ T12] veth1_vlan: left promiscuous mode [ 220.471306][ T12] veth0_vlan: left promiscuous mode [ 221.007339][ T12] team0 (unregistering): Port device team_slave_1 removed [ 221.049705][ T12] team0 (unregistering): Port device team_slave_0 removed [ 221.173687][ T5155] Bluetooth: hci4: command tx timeout [ 221.717511][ T9019] hsr_slave_0: entered promiscuous mode [ 221.735531][ T9019] hsr_slave_1: entered promiscuous mode [ 221.741943][ T9019] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 221.759904][ T9019] Cannot create hsr debugfs directory [ 221.975402][ T5155] Bluetooth: hci1: command tx timeout [ 222.040824][ T9211] batadv_slave_1: entered promiscuous mode [ 222.047840][ T9211] macsec1: entered promiscuous mode [ 222.060717][ T9211] macsec1: entered allmulticast mode [ 222.067687][ T9211] batadv_slave_1: entered allmulticast mode [ 222.122577][ T9001] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 222.208551][ T9001] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 222.247420][ T9213] __nla_validate_parse: 1 callbacks suppressed [ 222.247440][ T9213] netlink: 8 bytes leftover after parsing attributes in process `syz.5.840'. [ 222.252472][ T9001] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 222.286673][ T9207] netlink: 12 bytes leftover after parsing attributes in process `syz.1.836'. [ 222.328754][ T9001] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 222.344322][ T9207] netlink: 8 bytes leftover after parsing attributes in process `syz.1.836'. [ 222.363926][ T9207] netlink: 4 bytes leftover after parsing attributes in process `syz.1.836'. [ 222.382463][ T9207] netlink: 'syz.1.836': attribute type 1 has an invalid length. [ 222.390170][ T9207] nbd: error processing sock list [ 222.801211][ T9001] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.862525][ T9238] netlink: 24 bytes leftover after parsing attributes in process `syz.1.844'. [ 222.943515][ T9001] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.961737][ T9019] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 222.997415][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.004618][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.051709][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.058860][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.070224][ T9019] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 223.114876][ T9240] gtp1: entered promiscuous mode [ 223.119995][ T9240] gtp1: entered allmulticast mode [ 223.132608][ T9019] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 223.171288][ T9019] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 223.252637][ T5155] Bluetooth: hci4: command tx timeout [ 223.579173][ T9019] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.645497][ T9019] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.654979][ T9269] netlink: 4 bytes leftover after parsing attributes in process `syz.5.852'. [ 223.673999][ T9270] netlink: 4 bytes leftover after parsing attributes in process `syz.0.851'. [ 223.709942][ T9270] netlink: 4 bytes leftover after parsing attributes in process `syz.0.851'. [ 223.721891][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.729654][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.781607][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.788826][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.155990][ T9001] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.278117][ T9297] openvswitch: netlink: Missing key (keys=40, expected=80) [ 224.308697][ T9297] netlink: 12 bytes leftover after parsing attributes in process `syz.1.858'. [ 224.330517][ T9001] veth0_vlan: entered promiscuous mode [ 224.354947][ T9001] veth1_vlan: entered promiscuous mode [ 224.485768][ T9001] veth0_macvtap: entered promiscuous mode [ 224.520738][ T9001] veth1_macvtap: entered promiscuous mode [ 224.571048][ T9019] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.616954][ T9307] netlink: 'syz.5.862': attribute type 16 has an invalid length. [ 224.627879][ T9001] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.636208][ T9307] netlink: 'syz.5.862': attribute type 17 has an invalid length. [ 224.759085][ T9001] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.826511][ T9001] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.855712][ T9001] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.871521][ T9001] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.885389][ T9001] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.924425][ T9318] netlink: 80 bytes leftover after parsing attributes in process `syz.5.864'. [ 224.961787][ T9318] nbd: illegal input index 61504 [ 224.968123][ T9318] nbd: illegal input index 61504 [ 224.980515][ T9318] nbd: illegal input index 61504 [ 224.988254][ T9318] nbd: illegal input index 61504 [ 225.026252][ T9318] nbd: illegal input index 61504 [ 225.117177][ T9318] nbd: illegal input index 61504 [ 225.122881][ T9318] nbd: illegal input index 61504 [ 225.148490][ T6658] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.177234][ T6658] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.245175][ T9318] nbd: illegal input index 61504 [ 225.262637][ T9318] nbd: illegal input index 61504 [ 225.275660][ T9318] nbd: illegal input index 61504 [ 225.280952][ T9318] nbd: illegal input index 61504 [ 225.300141][ T9318] nbd: illegal input index 61504 [ 225.308233][ T6649] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.327339][ T9318] nbd: illegal input index 61504 [ 225.344498][ T9318] nbd: illegal input index 61504 [ 225.359643][ T6649] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.372968][ T9318] nbd: illegal input index 61504 [ 225.378100][ T9318] nbd: illegal input index 61504 [ 225.408805][ T9019] veth0_vlan: entered promiscuous mode [ 225.443631][ T9318] nbd: illegal input index 61504 [ 225.448849][ T9318] nbd: illegal input index 61504 [ 225.464211][ T9318] nbd: illegal input index 61504 [ 225.473478][ T9019] veth1_vlan: entered promiscuous mode [ 225.496821][ T9318] nbd: illegal input index 61504 [ 225.502038][ T9318] nbd: illegal input index 61504 [ 225.542039][ T9318] nbd: illegal input index 61504 [ 225.615158][ T9318] nbd: illegal input index 61504 [ 225.636301][ T9318] nbd: illegal input index 61504 [ 225.641556][ T9019] veth0_macvtap: entered promiscuous mode [ 225.652101][ T9318] nbd: illegal input index 61504 [ 225.665515][ T9318] nbd: illegal input index 61504 [ 225.680425][ T9318] nbd: illegal input index 61504 [ 225.691187][ T9318] nbd: illegal input index 61504 [ 225.707240][ T9318] nbd: illegal input index 61504 [ 225.712831][ T9318] nbd: illegal input index 61504 [ 225.718101][ T9318] nbd: illegal input index 61504 [ 225.740019][ T9341] hsr_slave_0: left promiscuous mode [ 225.749929][ T9341] hsr_slave_1: left promiscuous mode [ 225.857135][ T9019] veth1_macvtap: entered promiscuous mode [ 225.924115][ T9346] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 225.936094][ T9019] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 225.978828][ T9019] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.112900][ T9019] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.141276][ T9019] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.172615][ T9019] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.193277][ T9019] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.265944][ T6655] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.345471][ T6655] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.411895][ T6649] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.427203][ T6649] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.465201][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.478461][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.544999][ T6655] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.669160][ T6655] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.798195][ T6655] bridge_slave_1: left allmulticast mode [ 226.804151][ T6655] bridge_slave_1: left promiscuous mode [ 226.809856][ T6655] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.823590][ T6655] bridge_slave_0: left allmulticast mode [ 226.842306][ T6655] bridge_slave_0: left promiscuous mode [ 226.848173][ T6655] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.566660][ T6655] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 227.584232][ T6655] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 227.599478][ T6655] bond0 (unregistering): Released all slaves [ 227.626277][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 227.635767][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 227.662151][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 227.673947][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 227.688602][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 227.849549][ T6649] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 227.992397][ T6655] hsr_slave_0: left promiscuous mode [ 227.998639][ T6655] hsr_slave_1: left promiscuous mode [ 228.006872][ T6655] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 228.014636][ T6655] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 228.026274][ T6655] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 228.035390][ T6655] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 228.059296][ T6655] veth1_macvtap: left promiscuous mode [ 228.065196][ T6655] veth0_macvtap: left promiscuous mode [ 228.070903][ T6655] veth1_vlan: left promiscuous mode [ 228.076922][ T6655] veth0_vlan: left promiscuous mode [ 228.214839][ T9390] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 228.266591][ T9396] __nla_validate_parse: 34 callbacks suppressed [ 228.266610][ T9396] netlink: 36 bytes leftover after parsing attributes in process `syz.5.878'. [ 228.591539][ T5839] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 228.611172][ T5839] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 228.621252][ T5839] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 228.637596][ T5839] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 228.645950][ T5839] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 228.884805][ T6655] team0 (unregistering): Port device team_slave_1 removed [ 228.927399][ T6655] team0 (unregistering): Port device team_slave_0 removed [ 229.367017][ T9379] chnl_net:caif_netlink_parms(): no params data found [ 229.515163][ T9405] netlink: 12 bytes leftover after parsing attributes in process `syz.5.881'. [ 229.555762][ T9409] netlink: 8 bytes leftover after parsing attributes in process `syz.1.880'. [ 229.654301][ T9405] 8021q: adding VLAN 0 to HW filter on device bond1 [ 229.732994][ T5839] Bluetooth: hci1: command tx timeout [ 229.866190][ T9379] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.873681][ T9379] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.885728][ T9379] bridge_slave_0: entered allmulticast mode [ 229.894002][ T9379] bridge_slave_0: entered promiscuous mode [ 229.921458][ T9379] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.934900][ T9379] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.943460][ T9379] bridge_slave_1: entered allmulticast mode [ 229.951243][ T9379] bridge_slave_1: entered promiscuous mode [ 230.053981][ T9428] xt_hashlimit: size too large, truncated to 1048576 [ 230.121117][ T9379] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.168136][ T9379] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.320424][ T9379] team0: Port device team_slave_0 added [ 230.352108][ T9379] team0: Port device team_slave_1 added [ 230.484676][ T9438] netlink: 12 bytes leftover after parsing attributes in process `syz.1.888'. [ 230.488740][ T6655] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.559612][ T9379] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 230.571216][ T9379] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.623480][ T9379] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 230.644199][ T9444] netlink: 'syz.1.888': attribute type 12 has an invalid length. [ 230.693617][ T5839] Bluetooth: hci4: command tx timeout [ 230.837386][ T6655] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.864462][ T9379] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 230.871960][ T9379] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.899717][ T9379] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 230.971005][ T6655] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.024278][ T9400] chnl_net:caif_netlink_parms(): no params data found [ 231.245590][ T6655] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.372873][ T9470] netlink: 'syz.1.896': attribute type 1 has an invalid length. [ 231.400307][ T9379] hsr_slave_0: entered promiscuous mode [ 231.407723][ T9379] hsr_slave_1: entered promiscuous mode [ 231.420700][ T9379] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 231.430885][ T9379] Cannot create hsr debugfs directory [ 231.812469][ T5839] Bluetooth: hci1: command tx timeout [ 231.999352][ T9400] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.028501][ T9400] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.049313][ T9400] bridge_slave_0: entered allmulticast mode [ 232.070447][ T9400] bridge_slave_0: entered promiscuous mode [ 232.081721][ T9400] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.098368][ T9400] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.106795][ T9400] bridge_slave_1: entered allmulticast mode [ 232.124717][ T9400] bridge_slave_1: entered promiscuous mode [ 232.324124][ T9400] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 232.337209][ T9501] netlink: 8 bytes leftover after parsing attributes in process `syz.0.903'. [ 232.371768][ T9400] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 232.481922][ T6655] bridge_slave_1: left allmulticast mode [ 232.491285][ T9507] netlink: 104 bytes leftover after parsing attributes in process `syz.5.906'. [ 232.501338][ T6655] bridge_slave_1: left promiscuous mode [ 232.514053][ T6655] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.578888][ T6655] bridge_slave_0: left allmulticast mode [ 232.588268][ T6655] bridge_slave_0: left promiscuous mode [ 232.595529][ T6655] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.782867][ T5839] Bluetooth: hci4: command tx timeout [ 233.048436][ T6655] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 233.061616][ T6655] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 233.077849][ T6655] bond0 (unregistering): Released all slaves [ 233.114199][ T9400] team0: Port device team_slave_0 added [ 233.160803][ T9400] team0: Port device team_slave_1 added [ 233.321667][ T9524] netlink: 'syz.5.911': attribute type 1 has an invalid length. [ 233.355896][ T9400] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 233.369441][ T9400] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.438909][ T9400] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 233.495929][ T9526] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 233.531417][ T9400] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 233.539673][ T9400] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.568540][ T9400] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.622179][ T9537] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.915'. [ 233.761109][ T9543] netlink: 'syz.1.917': attribute type 21 has an invalid length. [ 233.769371][ T9543] IPv6: NLM_F_CREATE should be specified when creating new route [ 233.777983][ T9543] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 233.785298][ T9543] IPv6: NLM_F_CREATE should be set when creating new route [ 233.792603][ T9543] IPv6: NLM_F_CREATE should be set when creating new route [ 233.798790][ T9539] netlink: 'syz.5.916': attribute type 1 has an invalid length. [ 233.799832][ T9543] IPv6: NLM_F_CREATE should be set when creating new route [ 233.821281][ T6655] hsr_slave_0: left promiscuous mode [ 233.828266][ T6655] hsr_slave_1: left promiscuous mode [ 233.834893][ T6655] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.843330][ T6655] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 233.851946][ T6655] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.859984][ T6655] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 233.881666][ T6655] veth1_macvtap: left promiscuous mode [ 233.887362][ T6655] veth0_macvtap: left promiscuous mode [ 233.897959][ T6655] veth1_vlan: left promiscuous mode [ 233.902535][ T5839] Bluetooth: hci1: command tx timeout [ 233.903476][ T6655] veth0_vlan: left promiscuous mode [ 233.935278][ T9546] netlink: 'syz.1.917': attribute type 1 has an invalid length. [ 233.949896][ T9546] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.917'. [ 234.355478][ T6655] team0 (unregistering): Port device team_slave_1 removed [ 234.396100][ T6655] team0 (unregistering): Port device team_slave_0 removed [ 234.829875][ T9540] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 234.858432][ T5839] Bluetooth: hci4: command tx timeout [ 234.876140][ T9543] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 235.000570][ T9555] netlink: 12 bytes leftover after parsing attributes in process `syz.1.920'. [ 235.035211][ T9400] hsr_slave_0: entered promiscuous mode [ 235.053839][ T9400] hsr_slave_1: entered promiscuous mode [ 235.059952][ T9400] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 235.061661][ T9556] netlink: 8 bytes leftover after parsing attributes in process `syz.1.920'. [ 235.087209][ T9400] Cannot create hsr debugfs directory [ 235.088294][ T9556] netlink: 16 bytes leftover after parsing attributes in process `syz.1.920'. [ 235.104913][ T9558] netlink: 60 bytes leftover after parsing attributes in process `syz.5.921'. [ 235.505096][ T9570] netlink: 76 bytes leftover after parsing attributes in process `syz.1.925'. [ 235.608498][ T9379] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 235.685925][ T9379] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 235.721817][ T9379] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 235.780707][ T9379] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 235.973023][ T5839] Bluetooth: hci1: command tx timeout [ 236.241665][ T9379] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.288963][ T9599] netlink: 12 bytes leftover after parsing attributes in process `syz.0.929'. [ 236.357788][ T9379] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.407910][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.415179][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.436303][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.443576][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.521831][ T9379] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 236.555484][ T9379] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 236.915984][ T9400] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 236.936811][ T5839] Bluetooth: hci4: command tx timeout [ 236.960544][ T9400] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 237.010841][ T9400] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 237.059146][ T9400] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 237.199535][ T9379] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 237.547557][ T9400] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.654536][ T9643] netlink: 4 bytes leftover after parsing attributes in process `syz.5.940'. [ 237.657413][ T9379] veth0_vlan: entered promiscuous mode [ 237.717734][ T9400] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.770304][ T9379] veth1_vlan: entered promiscuous mode [ 237.808724][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.816074][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.898452][ T6655] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.905726][ T6655] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.029532][ T9659] netlink: 40 bytes leftover after parsing attributes in process `syz.1.945'. [ 238.044140][ T9379] veth0_macvtap: entered promiscuous mode [ 238.087287][ T9379] veth1_macvtap: entered promiscuous mode [ 238.140622][ T9400] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 238.195413][ T9379] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 238.219513][ T9379] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 238.266537][ T9379] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.277302][ T9379] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.287438][ T9379] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.301039][ T9379] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.436873][ T9669] xt_CT: No such helper "syz0" [ 238.573773][ T3467] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.591931][ T3467] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.710860][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.736899][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.746774][ T9400] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 238.894333][ T9687] __nla_validate_parse: 4 callbacks suppressed [ 238.894352][ T9687] netlink: 44 bytes leftover after parsing attributes in process `syz.1.954'. [ 238.942914][ T9687] netlink: 43 bytes leftover after parsing attributes in process `syz.1.954'. [ 238.962611][ T9687] netlink: 'syz.1.954': attribute type 5 has an invalid length. [ 238.991004][ T9687] netlink: 43 bytes leftover after parsing attributes in process `syz.1.954'. [ 239.091005][ T9694] netlink: 104 bytes leftover after parsing attributes in process `syz.0.956'. [ 239.117743][ T9691] netlink: 'syz.5.955': attribute type 2 has an invalid length. [ 239.126770][ T9694] xt_socket: unknown flags 0x50 [ 239.142001][ T9691] netlink: 12 bytes leftover after parsing attributes in process `syz.5.955'. [ 239.259715][ T9697] dvmrp1: entered allmulticast mode [ 239.466253][ T3467] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.644444][ T3467] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.816036][ T3467] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.865607][ T9400] veth0_vlan: entered promiscuous mode [ 239.899177][ T9400] veth1_vlan: entered promiscuous mode [ 239.937284][ T9400] veth0_macvtap: entered promiscuous mode [ 239.948919][ T9400] veth1_macvtap: entered promiscuous mode [ 239.988845][ T9400] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 240.004349][ T9400] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 240.021385][ T9400] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.048578][ T9400] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.065932][ T9400] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.078603][ T9400] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.152122][ T3467] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.321047][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.350164][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.423615][ T3467] bridge_slave_1: left allmulticast mode [ 240.429743][ T3467] bridge_slave_1: left promiscuous mode [ 240.436167][ T3467] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.448718][ T3467] bridge_slave_0: left allmulticast mode [ 240.457747][ T3467] bridge_slave_0: left promiscuous mode [ 240.465585][ T3467] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.952822][ T9709] netlink: 108 bytes leftover after parsing attributes in process `syz.0.959'. [ 240.973047][ T9711] netlink: 4 bytes leftover after parsing attributes in process `syz.1.960'. [ 241.223774][ T9715] netlink: 16 bytes leftover after parsing attributes in process `syz.1.961'. [ 241.433459][ T3467] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 241.458753][ T3467] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 241.501548][ T3467] bond0 (unregistering): Released all slaves [ 241.544023][ T6649] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.555118][ T6649] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.558683][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 241.571356][ T9714] netlink: 96 bytes leftover after parsing attributes in process `syz.1.961'. [ 241.605035][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 241.632378][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 241.652625][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 241.663321][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 242.349107][ T3467] hsr_slave_0: left promiscuous mode [ 242.363363][ T3467] hsr_slave_1: left promiscuous mode [ 242.370072][ T9731] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 242.379137][ T3467] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 242.391395][ T9731] netlink: 'syz.0.965': attribute type 1 has an invalid length. [ 242.410173][ T3467] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 242.411270][ T9731] netlink: 228 bytes leftover after parsing attributes in process `syz.0.965'. [ 242.431289][ T3467] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 242.450683][ T3467] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 242.502273][ T3467] veth1_macvtap: left promiscuous mode [ 242.528503][ T3467] veth0_macvtap: left promiscuous mode [ 242.542433][ T5838] Bluetooth: hci3: command 0x0406 tx timeout [ 242.552617][ T3467] veth1_vlan: left promiscuous mode [ 242.558016][ T3467] veth0_vlan: left promiscuous mode [ 243.735982][ T5839] Bluetooth: hci1: command tx timeout [ 243.797933][ T3467] team0 (unregistering): Port device team_slave_1 removed [ 243.851697][ T3467] team0 (unregistering): Port device team_slave_0 removed [ 244.685223][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 244.694949][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 244.705531][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 244.721886][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 244.731312][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 244.849531][ T9691] Set syz1 is full, maxelem 65536 reached [ 245.190086][ T9751] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 245.254352][ T9756] sctp: [Deprecated]: syz.1.972 (pid 9756) Use of int in maxseg socket option. [ 245.254352][ T9756] Use struct sctp_assoc_value instead [ 245.288196][ T9752] syzkaller1: entered allmulticast mode [ 245.697615][ T9716] chnl_net:caif_netlink_parms(): no params data found [ 245.824090][ T5839] Bluetooth: hci1: command tx timeout [ 245.985284][ T9780] netlink: 4 bytes leftover after parsing attributes in process `syz.1.975'. [ 246.022477][ T9742] chnl_net:caif_netlink_parms(): no params data found [ 246.239091][ T3467] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.348569][ T9802] netlink: 'syz.5.981': attribute type 1 has an invalid length. [ 246.362082][ T9802] netlink: 'syz.5.981': attribute type 3 has an invalid length. [ 246.388253][ T9802] netlink: 224 bytes leftover after parsing attributes in process `syz.5.981'. [ 246.590652][ T3467] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.636890][ T9716] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.644935][ T9716] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.655861][ T9716] bridge_slave_0: entered allmulticast mode [ 246.663995][ T9716] bridge_slave_0: entered promiscuous mode [ 246.741164][ T9816] openvswitch: netlink: Flow key attribute not present in set flow. [ 246.770441][ T9716] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.782909][ T5839] Bluetooth: hci4: command tx timeout [ 246.820487][ T9817] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 246.859255][ T9716] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.878177][ T9716] bridge_slave_1: entered allmulticast mode [ 246.899297][ T9716] bridge_slave_1: entered promiscuous mode [ 246.987161][ T3467] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.017345][ T9742] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.030679][ T9742] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.044153][ T9742] bridge_slave_0: entered allmulticast mode [ 247.062551][ T9742] bridge_slave_0: entered promiscuous mode [ 247.229967][ T3467] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.269096][ T9742] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.287340][ T9742] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.313235][ T9742] bridge_slave_1: entered allmulticast mode [ 247.338621][ T9742] bridge_slave_1: entered promiscuous mode [ 247.459130][ T9830] netlink: 'syz.0.990': attribute type 2 has an invalid length. [ 247.526626][ T9716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 247.576230][ T9716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 247.820041][ T9837] netlink: 8 bytes leftover after parsing attributes in process `syz.1.992'. [ 247.830457][ T9840] netlink: 176 bytes leftover after parsing attributes in process `syz.0.990'. [ 247.866719][ T9742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 247.893863][ T5839] Bluetooth: hci1: command tx timeout [ 247.907944][ T9716] team0: Port device team_slave_0 added [ 247.926064][ T9742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 247.980645][ T9716] team0: Port device team_slave_1 added [ 247.996068][ T9844] netlink: 4 bytes leftover after parsing attributes in process `syz.5.991'. [ 248.201651][ T9742] team0: Port device team_slave_0 added [ 248.264124][ T9716] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 248.271131][ T9716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.311775][ T9716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 248.323996][ T9854] netlink: 72 bytes leftover after parsing attributes in process `syz.5.995'. [ 248.345557][ T9742] team0: Port device team_slave_1 added [ 248.394097][ T9716] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 248.401110][ T9716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.428478][ T9716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 248.475584][ T9860] netlink: 4 bytes leftover after parsing attributes in process `syz.5.997'. [ 248.487414][ T9742] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 248.494676][ T9742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.521008][ T9742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 248.538089][ T9742] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 248.555419][ T9742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.589558][ T9742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 248.609804][ T3467] bridge_slave_1: left allmulticast mode [ 248.624433][ T3467] bridge_slave_1: left promiscuous mode [ 248.630277][ T3467] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.646540][ T3467] bridge_slave_0: left allmulticast mode [ 248.652435][ T3467] bridge_slave_0: left promiscuous mode [ 248.658225][ T3467] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.863457][ T5839] Bluetooth: hci4: command tx timeout [ 249.089701][ T3467] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 249.100717][ T3467] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 249.111086][ T3467] bond0 (unregistering): Released all slaves [ 249.243737][ T9874] xt_hashlimit: size too large, truncated to 1048576 [ 249.537175][ T9742] hsr_slave_0: entered promiscuous mode [ 249.547549][ T9742] hsr_slave_1: entered promiscuous mode [ 249.560451][ T9742] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 249.579015][ T9742] Cannot create hsr debugfs directory [ 249.603058][ T9716] hsr_slave_0: entered promiscuous mode [ 249.612746][ T9716] hsr_slave_1: entered promiscuous mode [ 249.620265][ T9716] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 249.628123][ T9716] Cannot create hsr debugfs directory [ 249.951628][ T3467] hsr_slave_0: left promiscuous mode [ 249.958745][ T3467] hsr_slave_1: left promiscuous mode [ 249.972749][ T5839] Bluetooth: hci1: command tx timeout [ 249.978305][ T3080] IPVS: starting estimator thread 0... [ 249.982403][ T9901] IPVS: set_ctl: invalid protocol: 2 10.1.1.1:0 [ 249.993758][ T3467] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 250.001298][ T3467] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 250.009592][ T3467] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 250.017360][ T3467] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 250.044189][ T3467] veth1_macvtap: left promiscuous mode [ 250.049865][ T3467] veth0_macvtap: left promiscuous mode [ 250.056879][ T3467] veth1_vlan: left promiscuous mode [ 250.062924][ T3467] veth0_vlan: left promiscuous mode [ 250.082596][ T9906] IPVS: using max 27 ests per chain, 64800 per kthread [ 250.321481][ T9911] netlink: 'syz.1.1011': attribute type 1 has an invalid length. [ 250.331048][ T9911] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1011'. [ 250.747649][ T3467] team0 (unregistering): Port device team_slave_1 removed [ 250.795702][ T3467] team0 (unregistering): Port device team_slave_0 removed [ 250.946564][ T5839] Bluetooth: hci4: command tx timeout [ 252.240375][ T9951] netlink: 'syz.5.1018': attribute type 2 has an invalid length. [ 252.541825][ T9967] netlink: 'syz.0.1024': attribute type 9 has an invalid length. [ 252.571377][ T9971] netlink: 248 bytes leftover after parsing attributes in process `syz.5.1025'. [ 252.596989][ T9967] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1024'. [ 252.607821][ T9967] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1024'. [ 252.617486][ T9967] netlink: 'syz.0.1024': attribute type 9 has an invalid length. [ 252.735321][ T9977] netlink: 'syz.1.1027': attribute type 4 has an invalid length. [ 252.757701][ T9977] netlink: 'syz.1.1027': attribute type 4 has an invalid length. [ 252.764143][ T9982] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1029'. [ 253.013026][ T5839] Bluetooth: hci4: command tx timeout [ 253.046850][ T9716] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 253.085192][ T9716] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 253.119739][ T9716] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 253.140543][ T9716] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 253.299906][ T9742] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 253.367030][ T9742] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 253.426471][ T9742] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 253.455906][ T9742] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 253.600993][ T9716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.661326][ T9716] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.696056][ T6650] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.703297][ T6650] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.740622][ T6650] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.747879][ T6650] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.901120][ T9742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.969976][ T9742] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.990473][ T6655] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.997687][ T6655] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.038447][T10017] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 254.074883][ T6655] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.082087][ T6655] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.110626][T10020] bridge0: entered allmulticast mode [ 254.124360][T10020] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1038'. [ 254.154336][T10020] bridge_slave_1: left allmulticast mode [ 254.160479][T10020] bridge_slave_1: left promiscuous mode [ 254.178568][T10020] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.198140][T10020] bridge_slave_0: left allmulticast mode [ 254.207136][T10020] bridge_slave_0: left promiscuous mode [ 254.215716][T10020] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.243502][T10020] bridge0 (unregistering): left allmulticast mode [ 254.460861][T10012] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 254.467222][T10018] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 254.549036][ T9716] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 254.574218][T10030] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1039'. [ 254.739107][ T9716] veth0_vlan: entered promiscuous mode [ 254.806796][ T9716] veth1_vlan: entered promiscuous mode [ 254.943972][ T9716] veth0_macvtap: entered promiscuous mode [ 254.963991][ T9742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 254.977344][ T9716] veth1_macvtap: entered promiscuous mode [ 255.049934][ T9716] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 255.080846][T10050] bridge0: entered promiscuous mode [ 255.114246][T10050] bridge0: entered allmulticast mode [ 255.144232][ T9716] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 255.192480][T10053] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1046'. [ 255.239635][T10053] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1046'. [ 255.244635][ T9716] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.283688][ T9716] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.302638][ T9716] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.311468][ T9716] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.341406][T10056] netlink: 'syz.0.1046': attribute type 1 has an invalid length. [ 255.487801][T10065] netlink: 'syz.1.1050': attribute type 1 has an invalid length. [ 255.502969][T10065] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1050'. [ 255.560454][T10066] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 255.566189][T10069] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1050'. [ 255.662509][ T5838] Bluetooth: hci0: command 0x0401 tx timeout [ 255.699837][ T6650] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.752457][ T6650] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.820672][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.865022][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.919443][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.003929][T10082] netlink: zone id is out of range [ 256.033344][T10082] netlink: get zone limit has 8 unknown bytes [ 256.077514][ T9742] veth0_vlan: entered promiscuous mode [ 256.085739][T10076] xt_ecn: cannot match TCP bits for non-tcp packets [ 256.090578][ T9742] veth1_vlan: entered promiscuous mode [ 256.335534][ T9742] veth0_macvtap: entered promiscuous mode [ 256.359445][ T9742] veth1_macvtap: entered promiscuous mode [ 256.389399][T10092] netlink: 'syz.0.1057': attribute type 11 has an invalid length. [ 256.590319][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.624615][T10101] sctp: [Deprecated]: syz.5.1060 (pid 10101) Use of struct sctp_assoc_value in delayed_ack socket option. [ 256.624615][T10101] Use struct sctp_sack_info instead [ 256.665112][ T9742] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 256.744443][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.778409][ T9742] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 256.812873][ T9742] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.840821][ T9742] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.850141][ T9742] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.869073][ T5838] Bluetooth: hci4: command 0x0405 tx timeout [ 256.878514][ T9742] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.922025][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.000512][ T6650] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.008878][ T6650] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.044431][ T6649] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.052758][ T6649] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.120899][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.250916][ T12] bridge_slave_1: left allmulticast mode [ 257.257621][ T12] bridge_slave_1: left promiscuous mode [ 257.263719][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.275105][ T12] bridge_slave_0: left allmulticast mode [ 257.280782][ T12] bridge_slave_0: left promiscuous mode [ 257.286763][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.722687][T10105] IPVS: set_ctl: invalid protocol: 44 224.0.0.2:0 [ 257.733413][ T5839] Bluetooth: hci0: command 0x0401 tx timeout [ 257.764103][T10108] __nla_validate_parse: 4 callbacks suppressed [ 257.764124][T10108] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1061'. [ 257.765502][T10105] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1063'. [ 257.873175][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 257.887769][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 257.900298][ T12] bond0 (unregistering): Released all slaves [ 258.177460][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 258.186423][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 258.196146][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 258.207237][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 258.216040][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 258.371378][ T12] hsr_slave_0: left promiscuous mode [ 258.381093][ T12] hsr_slave_1: left promiscuous mode [ 258.387456][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 258.401274][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 258.410836][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 258.418637][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 258.446138][ T12] veth1_macvtap: left promiscuous mode [ 258.451760][ T12] veth0_macvtap: left promiscuous mode [ 258.458241][ T12] veth1_vlan: left promiscuous mode [ 258.464263][ T12] veth0_vlan: left promiscuous mode [ 258.795680][ T3467] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 258.812855][T10119] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1065'. [ 259.061952][T10126] x_tables: duplicate underflow at hook 1 [ 259.206086][ T12] team0 (unregistering): Port device team_slave_1 removed [ 259.228255][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 259.244838][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 259.253785][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 259.261963][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 259.272153][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 259.297427][ T12] team0 (unregistering): Port device team_slave_0 removed [ 259.731804][T10117] net veth1_virt_wifi .: renamed from virt_wifi0 [ 259.753136][T10123] netlink: 'syz.5.1066': attribute type 9 has an invalid length. [ 259.954222][T10135] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 260.293278][ T5838] Bluetooth: hci1: command tx timeout [ 260.510764][T10112] chnl_net:caif_netlink_parms(): no params data found [ 260.753793][T10127] chnl_net:caif_netlink_parms(): no params data found [ 260.780221][T10168] netlink: 'syz.5.1080': attribute type 23 has an invalid length. [ 260.895518][T10172] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1081'. [ 260.920624][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.244712][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.319529][T10112] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.327271][T10112] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.346890][ T5838] Bluetooth: hci4: command tx timeout [ 261.351999][T10112] bridge_slave_0: entered allmulticast mode [ 261.399289][T10112] bridge_slave_0: entered promiscuous mode [ 261.541120][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.599028][T10112] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.606459][T10112] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.623942][T10112] bridge_slave_1: entered allmulticast mode [ 261.643789][T10112] bridge_slave_1: entered promiscuous mode [ 261.736203][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.875831][T10198] team0: Mode changed to "loadbalance" [ 261.953285][T10127] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.961666][T10127] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.983104][T10127] bridge_slave_0: entered allmulticast mode [ 261.991287][T10127] bridge_slave_0: entered promiscuous mode [ 262.023937][T10127] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.031157][T10127] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.062875][T10127] bridge_slave_1: entered allmulticast mode [ 262.070962][T10127] bridge_slave_1: entered promiscuous mode [ 262.098456][T10112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.126342][T10112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.315562][T10218] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1094'. [ 262.350321][T10112] team0: Port device team_slave_0 added [ 262.372772][ T5838] Bluetooth: hci1: command tx timeout [ 262.382621][T10127] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.436716][T10112] team0: Port device team_slave_1 added [ 262.517459][T10127] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.636649][T10112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.648469][T10112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.677219][T10112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.727755][T10112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.735506][T10112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.820313][T10112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.855997][T10127] team0: Port device team_slave_0 added [ 262.947099][T10127] team0: Port device team_slave_1 added [ 262.963060][ T12] bridge_slave_1: left allmulticast mode [ 262.981276][ T12] bridge_slave_1: left promiscuous mode [ 262.999610][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.023639][ T12] bridge_slave_0: left allmulticast mode [ 263.029500][ T12] bridge_slave_0: left promiscuous mode [ 263.035882][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.422621][ T5838] Bluetooth: hci4: command tx timeout [ 263.477355][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 263.492388][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 263.507415][ T12] bond0 (unregistering): Released all slaves [ 263.541703][T10249] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1101'. [ 263.685059][T10127] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.706866][T10127] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.745044][T10127] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.786800][T10112] hsr_slave_0: entered promiscuous mode [ 263.796689][T10112] hsr_slave_1: entered promiscuous mode [ 263.799785][T10264] netlink: 'syz.5.1104': attribute type 3 has an invalid length. [ 263.803687][T10112] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 263.819639][T10112] Cannot create hsr debugfs directory [ 263.829531][T10127] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.837498][T10127] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.864135][T10127] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.987428][T10268] openvswitch: netlink: Key type 30 is not supported [ 264.175687][T10277] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1109'. [ 264.282097][T10288] sctp: [Deprecated]: syz.1.1110 (pid 10288) Use of struct sctp_assoc_value in delayed_ack socket option. [ 264.282097][T10288] Use struct sctp_sack_info instead [ 264.300718][T10288] sctp: [Deprecated]: syz.1.1110 (pid 10288) Use of struct sctp_assoc_value in delayed_ack socket option. [ 264.300718][T10288] Use struct sctp_sack_info instead [ 264.402336][ T12] hsr_slave_0: left promiscuous mode [ 264.427566][ T12] hsr_slave_1: left promiscuous mode [ 264.441242][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 264.453383][ T5838] Bluetooth: hci1: command tx timeout [ 264.466798][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 264.478964][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 264.491527][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 264.549254][ T12] veth1_macvtap: left promiscuous mode [ 264.555053][ T12] veth0_macvtap: left promiscuous mode [ 264.564252][ T12] veth1_vlan: left promiscuous mode [ 264.572502][ T12] veth0_vlan: left promiscuous mode [ 264.735302][T10306] xt_hashlimit: max too large, truncated to 1048576 [ 264.980241][T10313] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1117'. [ 265.268615][ T12] team0 (unregistering): Port device team_slave_1 removed [ 265.311461][ T12] team0 (unregistering): Port device team_slave_0 removed [ 265.502485][ T5838] Bluetooth: hci4: command tx timeout [ 265.731958][T10127] hsr_slave_0: entered promiscuous mode [ 265.741646][T10127] hsr_slave_1: entered promiscuous mode [ 265.748090][T10127] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 265.758914][T10127] Cannot create hsr debugfs directory [ 265.777886][T10300] 8021q: VLANs not supported on ip_vti0 [ 265.807325][T10313] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 266.187859][T10325] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1122'. [ 266.269550][T10332] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1123'. [ 266.532884][ T5838] Bluetooth: hci1: command tx timeout [ 266.644021][T10344] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1127'. [ 266.755000][T10346] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 266.797708][T10348] pim6reg: entered allmulticast mode [ 266.804601][T10348] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1129'. [ 266.831425][T10349] netlink: 636 bytes leftover after parsing attributes in process `syz.5.1128'. [ 266.833763][T10348] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1129'. [ 266.856898][T10346] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 266.876163][T10348] pim6reg: left allmulticast mode [ 266.930740][T10346] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 266.946656][T10346] netlink: 'syz.5.1128': attribute type 18 has an invalid length. [ 266.983955][T10346] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 266.992772][T10346] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 267.001552][T10346] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 267.010405][T10346] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 267.195128][T10112] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 267.233457][T10112] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 267.287460][T10112] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 267.308655][T10112] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 267.321259][T10127] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 267.338970][T10127] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 267.339136][T10364] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1132'. [ 267.374353][T10127] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 267.396878][T10127] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 267.572574][ T5838] Bluetooth: hci4: command tx timeout [ 267.609004][T10112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.695062][T10127] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.759022][T10112] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.781891][T10127] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.817897][ T6650] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.825150][ T6650] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.838744][ T6650] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.845999][ T6650] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.867603][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.874857][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.907518][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.914796][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.311830][T10407] netlink: 'syz.5.1140': attribute type 1 has an invalid length. [ 268.372664][T10407] netlink: 'syz.5.1140': attribute type 2 has an invalid length. [ 268.720219][T10127] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 268.776349][T10112] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 268.971726][T10431] __nla_validate_parse: 3 callbacks suppressed [ 268.971748][T10431] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1145'. [ 269.196232][T10441] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1148'. [ 269.473141][T10450] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.1150'. [ 269.475511][T10112] veth0_vlan: entered promiscuous mode [ 269.539551][T10112] veth1_vlan: entered promiscuous mode [ 269.756428][T10127] veth0_vlan: entered promiscuous mode [ 269.785473][T10112] veth0_macvtap: entered promiscuous mode [ 269.806117][T10127] veth1_vlan: entered promiscuous mode [ 269.824676][T10112] veth1_macvtap: entered promiscuous mode [ 269.910669][T10112] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 269.927346][T10127] veth0_macvtap: entered promiscuous mode [ 269.952809][T10112] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.984959][T10127] veth1_macvtap: entered promiscuous mode [ 270.010250][T10112] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.022126][T10112] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.038644][T10112] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.049523][T10112] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.070675][T10467] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1155'. [ 270.074955][T10465] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1154'. [ 270.103931][T10127] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 270.126794][T10127] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 270.204352][T10127] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.231694][T10127] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.260925][T10127] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.271336][T10127] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.684216][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.702524][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.743101][T10498] netlink: 100 bytes leftover after parsing attributes in process `syz.5.1161'. [ 270.747369][T10496] macvlan3: entered allmulticast mode [ 270.762187][T10496] bond0: entered allmulticast mode [ 270.772015][T10496] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 270.795702][T10496] bond0: left allmulticast mode [ 270.926930][ T6655] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.959823][ T6655] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.967190][T10506] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1166'. [ 270.969142][T10506] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1166'. [ 271.087575][ T6649] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.102420][ T6649] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.160917][ T6650] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.202823][ T6650] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.335580][T10517] netlink: 'syz.1.1170': attribute type 1 has an invalid length. [ 271.384041][T10515] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1170'. [ 271.481730][T10520] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 272.149086][ T6655] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.337325][ T6655] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.488986][ T6655] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.609527][ T6655] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.714313][ T6655] bridge_slave_1: left allmulticast mode [ 272.720013][ T6655] bridge_slave_1: left promiscuous mode [ 272.725916][ T6655] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.736293][ T6655] bridge_slave_0: left allmulticast mode [ 272.741963][ T6655] bridge_slave_0: left promiscuous mode [ 272.748128][ T6655] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.073926][ T6655] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 273.085289][ T6655] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 273.098278][ T6655] bond0 (unregistering): Released all slaves [ 273.369910][ T6655] hsr_slave_0: left promiscuous mode [ 273.376461][ T6655] hsr_slave_1: left promiscuous mode [ 273.382632][ T6655] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 273.390058][ T6655] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 273.399499][ T6655] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 273.407697][ T6655] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 273.428443][ T6655] veth1_macvtap: left promiscuous mode [ 273.434285][ T6655] veth0_macvtap: left promiscuous mode [ 273.439890][ T6655] veth1_vlan: left promiscuous mode [ 273.445289][ T6655] veth0_vlan: left promiscuous mode [ 273.934439][T10547] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1176'. [ 274.009397][T10549] netlink: 112 bytes leftover after parsing attributes in process `syz.5.1177'. [ 274.192863][ T6655] team0 (unregistering): Port device team_slave_1 removed [ 274.244215][ T6655] team0 (unregistering): Port device team_slave_0 removed [ 274.273283][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 274.289721][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 274.301806][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 274.310746][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 274.328794][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 275.021984][T10556] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 275.063033][T10561] netlink: 15 bytes leftover after parsing attributes in process `syz.0.1178'. [ 275.105701][T10550] chnl_net:caif_netlink_parms(): no params data found [ 275.220276][T10563] bond0: option mode: unable to set because the bond device is up [ 275.340538][T10569] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1181'. [ 275.389619][T10574] netlink: 'syz.5.1182': attribute type 1 has an invalid length. [ 275.576981][T10550] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.591263][T10550] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.609624][T10550] bridge_slave_0: entered allmulticast mode [ 275.618954][T10550] bridge_slave_0: entered promiscuous mode [ 275.636254][ T5839] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 275.646238][ T5839] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 275.655870][ T5839] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 275.665713][ T5155] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 275.674138][T10550] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.675916][ T5155] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 275.681388][T10550] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.703080][T10550] bridge_slave_1: entered allmulticast mode [ 275.716477][T10550] bridge_slave_1: entered promiscuous mode [ 275.934164][ T6655] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.945955][T10589] set match dimension is over the limit! [ 275.960275][T10550] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 276.013914][T10550] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 276.070095][T10586] tipc: Enabled bearer , priority 0 [ 276.100669][T10593] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1188'. [ 276.115843][ T6655] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.127256][T10586] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1185'. [ 276.189013][T10590] syzkaller0: entered promiscuous mode [ 276.194670][T10590] syzkaller0: entered allmulticast mode [ 276.201024][T10590] tipc: Resetting bearer [ 276.274920][ T6655] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.299652][T10585] tipc: Resetting bearer [ 276.384306][ T5155] Bluetooth: hci1: command tx timeout [ 277.711504][T10585] tipc: Disabling bearer [ 277.730001][T10550] team0: Port device team_slave_0 added [ 277.732609][ T5155] Bluetooth: hci4: command tx timeout [ 277.740155][T10550] team0: Port device team_slave_1 added [ 277.819120][ T6655] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.897128][T10606] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1191'. [ 278.091475][T10550] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 278.109139][T10550] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.152649][T10550] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 278.278418][T10619] netlink: 'syz.5.1194': attribute type 39 has an invalid length. [ 278.377482][T10550] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 278.389007][T10550] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.402461][T10606] infiniband syz1: set down [ 278.422186][T10550] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 278.432430][T10606] infiniband syz1: added ipvlan0 [ 278.456132][ T5155] Bluetooth: hci1: command tx timeout [ 278.626457][T10606] RDS/IB: syz1: added [ 278.631018][T10606] smc: adding ib device syz1 with port count 1 [ 278.651805][T10606] smc: ib device syz1 port 1 has pnetid [ 278.708894][T10550] hsr_slave_0: entered promiscuous mode [ 278.726297][T10550] hsr_slave_1: entered promiscuous mode [ 278.739111][T10550] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 278.750581][T10550] Cannot create hsr debugfs directory [ 278.839880][T10629] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1196'. [ 278.989979][T10634] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1197'. [ 279.002836][T10629] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 279.065720][T10629] batadv_slave_1 (unregistering): left allmulticast mode [ 279.216163][T10629] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 279.292733][T10580] chnl_net:caif_netlink_parms(): no params data found [ 279.535937][ T6655] bridge_slave_1: left allmulticast mode [ 279.541656][ T6655] bridge_slave_1: left promiscuous mode [ 279.547989][ T6655] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.601021][ T6655] bridge_slave_0: left allmulticast mode [ 279.611818][ T6655] bridge_slave_0: left promiscuous mode [ 279.619233][ T6655] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.818338][ T5155] Bluetooth: hci4: command tx timeout [ 280.096896][ T6655] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 280.107864][ T6655] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 280.118574][ T6655] bond0 (unregistering): Released all slaves [ 280.532925][ T5155] Bluetooth: hci1: command tx timeout [ 280.685621][T10580] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.700889][T10580] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.708911][T10580] bridge_slave_0: entered allmulticast mode [ 280.717687][T10580] bridge_slave_0: entered promiscuous mode [ 280.727873][T10580] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.741703][T10580] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.751344][T10580] bridge_slave_1: entered allmulticast mode [ 280.777943][T10580] bridge_slave_1: entered promiscuous mode [ 280.865809][T10656] xt_policy: too many policy elements [ 281.031381][T10580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 281.070530][T10580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 281.249545][T10580] team0: Port device team_slave_0 added [ 281.279629][T10580] team0: Port device team_slave_1 added [ 281.395353][T10580] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 281.410247][T10580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.451138][T10580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 281.483386][T10580] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 281.490382][T10580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.547562][T10580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 281.586506][T10669] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1206'. [ 281.609299][T10669] netlink: 3988 bytes leftover after parsing attributes in process `syz.5.1206'. [ 281.748822][T10580] hsr_slave_0: entered promiscuous mode [ 281.760875][T10580] hsr_slave_1: entered promiscuous mode [ 281.767752][T10580] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 281.776310][T10580] Cannot create hsr debugfs directory [ 281.893839][ T5155] Bluetooth: hci4: command tx timeout [ 281.951066][T10550] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 282.038932][T10550] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 282.097224][T10550] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 282.147999][T10550] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 282.552862][T10550] 8021q: adding VLAN 0 to HW filter on device bond0 [ 282.614145][ T5155] Bluetooth: hci1: command tx timeout [ 282.659744][T10550] 8021q: adding VLAN 0 to HW filter on device team0 [ 282.675974][ T6649] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.683215][ T6649] bridge0: port 1(bridge_slave_0) entered forwarding state [ 282.715630][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.722885][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 282.923430][T10580] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 282.946370][T10580] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 282.970225][T10580] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 282.997972][T10580] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 283.289914][T10580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 283.377382][T10580] 8021q: adding VLAN 0 to HW filter on device team0 [ 283.555268][ T3467] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.562490][ T3467] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.606571][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.613813][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.739896][T10550] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 283.983202][ T5155] Bluetooth: hci4: command tx timeout [ 284.123541][ T6655] hsr_slave_0: left promiscuous mode [ 284.143476][ T6655] hsr_slave_1: left promiscuous mode [ 284.149767][ T6655] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 284.192321][ T6655] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 284.221343][ T6655] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 284.245629][ T6655] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 284.311897][ T6655] veth1_macvtap: left promiscuous mode [ 284.327781][ T6655] veth0_macvtap: left promiscuous mode [ 284.337002][ T6655] veth1_vlan: left promiscuous mode [ 284.347306][ T6655] veth0_vlan: left promiscuous mode [ 284.935162][ T6655] team0 (unregistering): Port device team_slave_1 removed [ 284.977526][ T6655] team0 (unregistering): Port device team_slave_0 removed [ 285.467810][T10550] veth0_vlan: entered promiscuous mode [ 285.515825][T10550] veth1_vlan: entered promiscuous mode [ 285.695492][T10550] veth0_macvtap: entered promiscuous mode [ 285.740333][T10550] veth1_macvtap: entered promiscuous mode [ 285.796575][T10580] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 285.855087][T10550] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 285.917527][T10550] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 285.959979][T10738] xt_NFQUEUE: number of total queues is 0 [ 285.985963][T10550] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.002059][T10550] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.059602][T10550] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.085600][T10550] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.272031][T10745] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1223'. [ 286.417338][ T6655] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.436038][ T6655] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.505860][ T6656] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.521259][ T6656] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.677882][T10580] veth0_vlan: entered promiscuous mode [ 286.695719][T10764] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1227'. [ 286.710488][T10580] veth1_vlan: entered promiscuous mode [ 286.730837][T10764] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1227'. [ 286.799683][T10580] veth0_macvtap: entered promiscuous mode [ 286.817129][T10580] veth1_macvtap: entered promiscuous mode [ 286.857737][T10580] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 286.878747][T10580] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 286.895592][T10580] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.905107][T10580] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.918764][T10580] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.935422][T10580] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.043557][T10770] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1229'. [ 287.094991][T10768] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 287.124481][ T6656] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.283981][ T6656] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.385049][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.402898][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.456064][ T6656] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.489902][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.499320][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.561346][ T6656] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.695969][ T6656] bridge_slave_1: left allmulticast mode [ 287.701641][ T6656] bridge_slave_1: left promiscuous mode [ 287.707894][ T6656] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.717420][ T6656] bridge_slave_0: left allmulticast mode [ 287.723327][ T6656] bridge_slave_0: left promiscuous mode [ 287.729024][ T6656] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.338354][ T6656] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 288.350850][ T6656] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 288.370653][ T6656] bond0 (unregistering): Released all slaves [ 288.567064][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 288.579314][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 288.587979][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 288.597109][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 288.610304][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 289.057028][ T6656] hsr_slave_0: left promiscuous mode [ 289.063447][ T6656] hsr_slave_1: left promiscuous mode [ 289.069226][ T6656] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 289.085877][ T6656] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 289.098450][ T6656] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 289.106336][ T6656] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 289.125573][ T6656] veth1_macvtap: left promiscuous mode [ 289.131389][ T6656] veth0_macvtap: left promiscuous mode [ 289.137240][ T6656] veth1_vlan: left promiscuous mode [ 289.142681][ T6656] veth0_vlan: left promiscuous mode [ 289.641904][T10803] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 289.801218][ T49] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 289.906446][ T6656] team0 (unregistering): Port device team_slave_1 removed [ 289.967639][ T5155] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 289.967771][ T6656] team0 (unregistering): Port device team_slave_0 removed [ 289.982934][ T5155] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 289.992719][ T5155] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 290.004630][ T5155] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 290.014947][ T5155] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 290.436249][T10796] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1235'. [ 290.447713][T10799] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1235'. [ 290.704137][ T5155] Bluetooth: hci1: command tx timeout [ 290.932087][T10827] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1245'. [ 291.067212][T10785] chnl_net:caif_netlink_parms(): no params data found [ 291.291024][T10836] netlink: 19 bytes leftover after parsing attributes in process `syz.0.1249'. [ 291.482834][T10852] netlink: 'syz.0.1251': attribute type 1 has an invalid length. [ 291.489497][ T1146] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.545896][T10855] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1251'. [ 291.720677][ T1146] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.740928][T10785] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.752071][T10785] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.761740][T10785] bridge_slave_0: entered allmulticast mode [ 291.770537][T10785] bridge_slave_0: entered promiscuous mode [ 291.888292][ T1146] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.921654][T10785] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.927219][T10872] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1255'. [ 291.931866][T10785] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.946605][T10785] bridge_slave_1: entered allmulticast mode [ 291.956017][T10873] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 3261 [ 291.956977][T10785] bridge_slave_1: entered promiscuous mode [ 292.054282][ T5155] Bluetooth: hci4: command tx timeout [ 292.117309][T10868] SET target dimension over the limit! [ 292.144848][ T1146] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.218489][T10785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 292.232692][T10785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 292.300078][T10883] netlink: 146840 bytes leftover after parsing attributes in process `syz.0.1260'. [ 292.310072][T10785] team0: Port device team_slave_0 added [ 292.338313][T10785] team0: Port device team_slave_1 added [ 292.474664][T10785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 292.481780][T10785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.522404][T10785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 292.595050][T10785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 292.602055][T10785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.649032][T10785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 292.782531][ T5155] Bluetooth: hci1: command tx timeout [ 292.846064][ T1146] bridge_slave_1: left allmulticast mode [ 292.851845][ T1146] bridge_slave_1: left promiscuous mode [ 292.860320][ T1146] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.874496][ T1146] bridge_slave_0: left allmulticast mode [ 292.880554][ T1146] bridge_slave_0: left promiscuous mode [ 292.886425][ T5155] block nbd0: Receive control failed (result -32) [ 292.895506][ T1146] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.306750][ T1146] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 293.318136][ T1146] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 293.328576][ T1146] bond0 (unregistering): Released all slaves [ 293.356091][T10808] chnl_net:caif_netlink_parms(): no params data found [ 293.504725][T10785] hsr_slave_0: entered promiscuous mode [ 293.511056][T10785] hsr_slave_1: entered promiscuous mode [ 293.533604][T10785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 293.557654][T10785] Cannot create hsr debugfs directory [ 293.777798][T10935] netlink: 'syz.5.1272': attribute type 10 has an invalid length. [ 293.868299][ T30] audit: type=1804 audit(1750551687.534:3): pid=10939 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1274" name="/newroot/450/cgroup.controllers" dev="tmpfs" ino=2313 res=1 errno=0 [ 293.900219][ T30] audit: type=1800 audit(1750551687.534:4): pid=10940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1274" name="cgroup.controllers" dev="tmpfs" ino=2313 res=0 errno=0 [ 293.928090][ T30] audit: type=1800 audit(1750551687.534:5): pid=10939 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1274" name="cgroup.controllers" dev="tmpfs" ino=2313 res=0 errno=0 [ 294.023310][T10942] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 294.132513][ T5155] Bluetooth: hci4: command tx timeout [ 294.296580][T10808] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.313490][T10808] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.324305][T10808] bridge_slave_0: entered allmulticast mode [ 294.339063][T10808] bridge_slave_0: entered promiscuous mode [ 294.414857][T10808] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.434000][T10808] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.492618][T10808] bridge_slave_1: entered allmulticast mode [ 294.580820][T10808] bridge_slave_1: entered promiscuous mode [ 294.762558][ T1146] hsr_slave_0: left promiscuous mode [ 294.775519][ T1146] hsr_slave_1: left promiscuous mode [ 294.787204][ T1146] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 294.798121][T10974] netlink: 'syz.5.1284': attribute type 1 has an invalid length. [ 294.806144][ T1146] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 294.814565][T10974] netlink: 'syz.5.1284': attribute type 3 has an invalid length. [ 294.824048][T10974] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1284'. [ 294.834347][ T1146] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 294.842167][ T1146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 294.860433][ T5155] Bluetooth: hci1: command tx timeout [ 294.897978][ T1146] veth1_macvtap: left promiscuous mode [ 294.911213][T10979] xt_hashlimit: invalid interval [ 294.944802][ T1146] veth0_macvtap: left promiscuous mode [ 294.950690][ T1146] veth1_vlan: left promiscuous mode [ 294.957740][ T1146] veth0_vlan: left promiscuous mode [ 295.747475][ T1146] team0 (unregistering): Port device team_slave_1 removed [ 295.794784][ T1146] team0 (unregistering): Port device team_slave_0 removed [ 296.204006][T10808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 296.212661][ T5155] Bluetooth: hci4: command tx timeout [ 296.338323][T10808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 296.608287][T10808] team0: Port device team_slave_0 added [ 296.662387][T10808] team0: Port device team_slave_1 added [ 296.730844][T11016] netlink: 'syz.1.1291': attribute type 1 has an invalid length. [ 296.738876][T11016] netlink: 'syz.1.1291': attribute type 1 has an invalid length. [ 296.794363][T11018] dvmrp1: left allmulticast mode [ 296.862088][T10808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 296.870599][T10808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 296.902127][T10808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 296.942344][ T5155] Bluetooth: hci1: command tx timeout [ 297.003026][T10808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 297.010027][T10808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.025978][T11027] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1298'. [ 297.089973][T10808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 297.246788][T11036] netlink: 'syz.0.1301': attribute type 21 has an invalid length. [ 297.288103][T11036] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1301'. [ 297.385087][T10808] hsr_slave_0: entered promiscuous mode [ 297.405867][T11041] netlink: 'syz.5.1303': attribute type 10 has an invalid length. [ 297.413008][T10808] hsr_slave_1: entered promiscuous mode [ 297.417758][T11041] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1303'. [ 297.420108][T10808] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 297.447699][T10808] Cannot create hsr debugfs directory [ 297.495998][T11041] team0: Port device geneve0 added [ 297.557461][T11045] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 297.792149][T11049] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1306'. [ 297.948049][T11050] xt_socket: unknown flags 0x2 [ 297.963900][T11052] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1307'. [ 297.985135][T10785] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 298.035346][T10785] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 298.126684][T10785] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 298.137831][T11056] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1308'. [ 298.159482][T10785] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 298.292610][ T5155] Bluetooth: hci4: command tx timeout [ 298.399538][T11072] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1313'. [ 298.417017][T11075] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1314'. [ 298.526981][T11077] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1315'. [ 298.671245][T10785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 298.731814][T10785] 8021q: adding VLAN 0 to HW filter on device team0 [ 298.754871][ T6655] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.762086][ T6655] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.810829][ T6655] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.818091][ T6655] bridge0: port 2(bridge_slave_1) entered forwarding state [ 298.835216][T11088] sctp: [Deprecated]: syz.0.1318 (pid 11088) Use of struct sctp_assoc_value in delayed_ack socket option. [ 298.835216][T11088] Use struct sctp_sack_info instead [ 298.865225][T11089] sctp: [Deprecated]: syz.0.1318 (pid 11089) Use of struct sctp_assoc_value in delayed_ack socket option. [ 298.865225][T11089] Use struct sctp_sack_info instead [ 298.865308][T11088] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1318'. [ 299.129263][T10808] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 299.158090][T10808] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 299.189888][T10808] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 299.229375][T10808] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 299.529745][T11119] geneve2: entered promiscuous mode [ 299.548906][T11119] geneve2: entered allmulticast mode [ 299.688452][T10808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.717230][T10785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 299.786485][T10808] 8021q: adding VLAN 0 to HW filter on device team0 [ 299.845663][ T6649] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.852913][ T6649] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.880760][T11130] team0: entered promiscuous mode [ 299.890644][T11130] team_slave_0: entered promiscuous mode [ 299.900954][T11130] team_slave_1: entered promiscuous mode [ 299.934847][T11130] geneve0: entered promiscuous mode [ 299.978512][ T6656] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.985769][ T6656] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.026908][T11134] team0: left promiscuous mode [ 300.032134][T11134] team_slave_0: left promiscuous mode [ 300.048290][T11134] team_slave_1: left promiscuous mode [ 300.055210][T11134] geneve0: left promiscuous mode [ 300.150965][T10785] veth0_vlan: entered promiscuous mode [ 300.300128][T10785] veth1_vlan: entered promiscuous mode [ 300.451302][T11150] netlink: 'syz.0.1333': attribute type 1 has an invalid length. [ 300.480685][T11150] netlink: 'syz.0.1333': attribute type 2 has an invalid length. [ 300.556914][T10785] veth0_macvtap: entered promiscuous mode [ 300.611243][T10785] veth1_macvtap: entered promiscuous mode [ 300.744791][T10785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 300.777734][T10785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 300.798182][T10785] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.826410][T10785] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.836522][T10785] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.870591][T10785] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.173143][ T6655] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.182724][ T6655] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.239656][T10808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 301.279023][ T6656] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.334382][ T6656] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.970538][ T6649] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.321810][ T6649] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.351703][T10808] veth0_vlan: entered promiscuous mode [ 302.367831][T10808] veth1_vlan: entered promiscuous mode [ 302.427116][T10808] veth0_macvtap: entered promiscuous mode [ 302.438922][T10808] veth1_macvtap: entered promiscuous mode [ 302.457975][T10808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 302.471734][T10808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 302.491724][T10808] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.501544][T10808] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.511659][T10808] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.521407][T10808] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.588232][ T6655] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.603205][ T6655] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.628710][ T3467] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.636851][ T3467] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.769148][ T6649] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.846554][ T6649] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.977343][ T6649] bridge_slave_1: left allmulticast mode [ 302.983392][ T6649] bridge_slave_1: left promiscuous mode [ 302.989106][ T6649] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.998622][ T6649] bridge_slave_0: left allmulticast mode [ 303.004682][ T6649] bridge_slave_0: left promiscuous mode [ 303.011822][ T6649] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.389423][ T6649] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 303.401844][ T6649] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 303.424086][ T6649] bond0 (unregistering): Released all slaves [ 303.635347][T11203] ieee802154 phy0 wpan0: encryption failed: -22 [ 303.717942][T11207] __nla_validate_parse: 3 callbacks suppressed [ 303.717963][T11207] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1348'. [ 304.101928][ T6649] hsr_slave_0: left promiscuous mode [ 304.119688][ T6649] hsr_slave_1: left promiscuous mode [ 304.121770][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 304.130811][ T6649] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 304.141378][ T6649] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 304.148158][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 304.157139][ T6649] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 304.163477][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 304.164988][ T6649] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 304.174501][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 304.189021][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 304.207997][ T6649] veth1_macvtap: left promiscuous mode [ 304.216742][ T6649] veth0_macvtap: left promiscuous mode [ 304.222824][ T6649] veth1_vlan: left promiscuous mode [ 304.228131][ T6649] veth0_vlan: left promiscuous mode [ 304.651840][ T6649] team0 (unregistering): Port device team_slave_1 removed [ 304.690460][ T6649] team0 (unregistering): Port device team_slave_0 removed [ 305.353851][T11224] tipc: Resetting bearer [ 305.467073][T11226] tipc: Resetting bearer [ 305.793197][T11231] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1354'. [ 305.894337][ T5155] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 305.903758][ T5155] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 305.916397][ T5155] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 305.935221][ T5155] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 305.953797][ T5155] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 306.212834][ T5838] Bluetooth: hci1: command tx timeout [ 306.480118][T11254] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1360'. [ 306.507032][ T6649] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.662881][ T6649] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.777700][ T6649] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.872811][T11270] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1364'. [ 306.915993][T11272] netlink: 'syz.0.1366': attribute type 62 has an invalid length. [ 306.929499][ T6649] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.967127][T11274] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1367'. [ 307.210335][T11210] chnl_net:caif_netlink_parms(): no params data found [ 307.231464][T11282] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1370'. [ 307.391504][T11238] chnl_net:caif_netlink_parms(): no params data found [ 307.658074][T11304] netlink: 'syz.5.1376': attribute type 30 has an invalid length. [ 307.760889][ T6649] bridge_slave_1: left allmulticast mode [ 307.775503][ T6649] bridge_slave_1: left promiscuous mode [ 307.781371][ T6649] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.798998][ T6649] bridge_slave_0: left allmulticast mode [ 307.806591][ T6649] bridge_slave_0: left promiscuous mode [ 307.817831][ T6649] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.052416][ T5155] Bluetooth: hci4: command tx timeout [ 308.229473][ T6649] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 308.248175][ T6649] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 308.258605][ T6649] bond0 (unregistering): Released all slaves [ 308.292515][ T5155] Bluetooth: hci1: command tx timeout [ 308.300172][T11304] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 308.312059][T11304] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 308.400211][T11210] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.420508][T11210] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.437999][T11210] bridge_slave_0: entered allmulticast mode [ 308.448091][T11210] bridge_slave_0: entered promiscuous mode [ 308.478311][T11313] gre2: entered promiscuous mode [ 308.492265][T11313] gre2: entered allmulticast mode [ 308.616478][T11210] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.630899][T11210] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.638686][T11210] bridge_slave_1: entered allmulticast mode [ 308.653747][T11210] bridge_slave_1: entered promiscuous mode [ 308.662775][T11326] netlink: 'syz.0.1380': attribute type 10 has an invalid length. [ 308.721862][T11326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 308.730290][T11326] team0: Device bond0 failed to register rx_handler [ 308.790195][T11238] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.812404][T11238] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.819706][T11238] bridge_slave_0: entered allmulticast mode [ 308.830411][T11238] bridge_slave_0: entered promiscuous mode [ 308.891375][T11210] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 308.904321][T11238] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.911450][T11238] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.932913][T11238] bridge_slave_1: entered allmulticast mode [ 308.940582][T11238] bridge_slave_1: entered promiscuous mode [ 309.054905][T11210] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 309.124069][T11337] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1383'. [ 309.158118][T11238] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 309.191013][T11339] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1383'. [ 309.387414][T11210] team0: Port device team_slave_0 added [ 309.400107][T11238] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 309.636792][T11210] team0: Port device team_slave_1 added [ 309.673816][ T6649] hsr_slave_0: left promiscuous mode [ 309.685309][ T6649] hsr_slave_1: left promiscuous mode [ 309.691675][ T6649] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 309.704358][ T6649] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 309.716950][ T6649] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 309.726057][ T6649] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 309.749141][ T6649] veth1_macvtap: left promiscuous mode [ 309.755171][ T6649] veth0_macvtap: left promiscuous mode [ 309.760859][ T6649] veth1_vlan: left promiscuous mode [ 309.766726][ T6649] veth0_vlan: left promiscuous mode [ 310.133090][ T5155] Bluetooth: hci4: command 0x041b tx timeout [ 310.219941][T11365] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 310.350339][ T6649] team0 (unregistering): Port device team_slave_1 removed [ 310.373476][ T5838] Bluetooth: hci1: command tx timeout [ 310.398987][ T6649] team0 (unregistering): Port device team_slave_0 removed [ 310.850668][T11238] team0: Port device team_slave_0 added [ 310.861717][T11238] team0: Port device team_slave_1 added [ 310.940139][T11210] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 310.954956][T11210] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.029675][T11210] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.036966][T11372] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 311.050069][T11210] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.064280][T11373] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 311.065344][T11210] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.109304][T11368] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1390'. [ 311.119063][T11368] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1390'. [ 311.128361][T11210] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.139432][T11368] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1390'. [ 311.151675][T11368] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1390'. [ 311.168297][T11370] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1390'. [ 311.181796][T11370] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1390'. [ 311.196265][T11370] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1390'. [ 311.209099][T11370] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1390'. [ 311.301597][T11238] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.311889][T11238] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.376810][T11238] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.393251][T11238] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.400711][T11238] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.428084][T11238] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.558625][T11210] hsr_slave_0: entered promiscuous mode [ 311.579410][T11210] hsr_slave_1: entered promiscuous mode [ 311.586475][T11210] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 311.595592][T11210] Cannot create hsr debugfs directory [ 311.635274][T11391] netlink: 'syz.0.1395': attribute type 4 has an invalid length. [ 311.744482][T11391] : renamed from bond0 [ 311.878249][T11397] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 312.063002][T11238] hsr_slave_0: entered promiscuous mode [ 312.069889][T11238] hsr_slave_1: entered promiscuous mode [ 312.094412][T11238] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 312.112577][T11238] Cannot create hsr debugfs directory [ 312.212683][ T5838] Bluetooth: hci4: command 0x041b tx timeout [ 312.452768][ T5838] Bluetooth: hci1: command tx timeout [ 312.941320][T11442] netlink: 'syz.1.1412': attribute type 4 has an invalid length. [ 313.388723][T11464] x_tables: duplicate underflow at hook 3 [ 313.538337][T11210] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 313.577889][T11210] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 313.631918][T11210] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 313.741150][T11210] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 313.906374][T11238] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 313.954597][T11238] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 314.261274][T11238] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 314.292433][ T5838] Bluetooth: hci4: command 0x041b tx timeout [ 314.344064][T11238] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 314.587936][T11210] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.641138][T11210] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.700330][ T6650] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.707739][ T6650] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.739090][T11238] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.769892][ T3467] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.777562][ T3467] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.927860][T11518] __nla_validate_parse: 5 callbacks suppressed [ 314.927882][T11518] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1426'. [ 314.946923][T11238] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.964101][ T3467] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.971290][ T3467] bridge0: port 1(bridge_slave_0) entered forwarding state [ 315.010003][T11520] vxcan1: tx address claim with different name [ 315.047945][T11518] macvtap0: entered promiscuous mode [ 315.054172][T11518] vlan0: entered promiscuous mode [ 315.059687][T11518] macvtap0: entered allmulticast mode [ 315.069956][T11518] vlan0: entered allmulticast mode [ 315.075614][T11518] veth0_vlan: entered allmulticast mode [ 315.100135][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.107354][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 316.344031][T11210] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 316.372789][ T5838] Bluetooth: hci4: command 0x041b tx timeout [ 316.481565][T11238] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 316.578192][T11210] veth0_vlan: entered promiscuous mode [ 316.617629][T11210] veth1_vlan: entered promiscuous mode [ 316.737747][T11210] veth0_macvtap: entered promiscuous mode [ 316.814654][T11210] veth1_macvtap: entered promiscuous mode [ 316.825795][T11576] netlink: 'syz.5.1440': attribute type 4 has an invalid length. [ 316.932909][T11210] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 316.999620][T11210] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 317.040083][T11210] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.092452][T11210] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.121619][T11210] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.143379][T11210] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.268853][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.475050][ T6656] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.500037][T11588] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1442'. [ 317.514311][ T6656] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.086477][T11238] veth0_vlan: entered promiscuous mode [ 318.109979][ T3467] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.119745][T11599] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1445'. [ 318.130281][ T3467] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.156281][T11238] veth1_vlan: entered promiscuous mode [ 318.187748][T11599] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1445'. [ 318.219450][T11599] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1445'. [ 318.281510][T11238] veth0_macvtap: entered promiscuous mode [ 318.309244][T11238] veth1_macvtap: entered promiscuous mode [ 318.484615][T11238] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 318.518385][T11238] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 318.575439][T11238] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.608098][T11238] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.637675][T11238] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.656967][T11238] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.805827][ T3467] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.931353][ T3467] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.168362][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.186443][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.241706][T11609] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 319.318868][ T3467] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.386437][ T1146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.398198][ T1146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.526645][ T3467] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.670340][ T3467] bridge_slave_1: left allmulticast mode [ 319.676428][ T3467] bridge_slave_1: left promiscuous mode [ 319.682703][ T3467] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.704552][ T3467] bridge_slave_0: left allmulticast mode [ 319.710269][ T3467] bridge_slave_0: left promiscuous mode [ 319.728379][ T3467] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.635796][ T3467] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 320.653088][ T3467] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 320.668679][ T3467] bond0 (unregistering): Released all slaves [ 320.828627][ T6656] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 320.841650][T11620] bond7: entered promiscuous mode [ 320.847471][T11620] bond7: entered allmulticast mode [ 320.854984][T11620] 8021q: adding VLAN 0 to HW filter on device bond7 [ 320.900054][ T6656] ------------[ cut here ]------------ [ 320.907412][ T6656] UBSAN: array-index-out-of-bounds in net/mac80211/scan.c:1223:5 [ 320.921089][ T6656] index 11 is out of range for type 'struct ieee80211_channel *[] __counted_by(n_channels)' (aka 'struct ieee80211_channel *[]') [ 321.027672][ T6656] CPU: 0 UID: 0 PID: 6656 Comm: kworker/u8:14 Not tainted 6.16.0-rc2-syzkaller-00161-g714db279942b #0 PREEMPT(full) [ 321.027701][ T6656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 321.027714][ T6656] Workqueue: events_unbound cfg80211_wiphy_work [ 321.027741][ T6656] Call Trace: [ 321.027749][ T6656] [ 321.027757][ T6656] dump_stack_lvl+0x189/0x250 [ 321.027793][ T6656] ? __pfx_dump_stack_lvl+0x10/0x10 [ 321.027823][ T6656] ? __pfx__printk+0x10/0x10 [ 321.027859][ T6656] ubsan_epilogue+0xa/0x40 [ 321.027878][ T6656] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 321.027916][ T6656] ieee80211_request_ibss_scan+0x600/0x8b0 [ 321.027962][ T6656] ieee80211_ibss_work+0xd85/0x1060 [ 321.027988][ T6656] ? lockdep_hardirqs_on+0x9c/0x150 [ 321.028018][ T6656] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 321.028044][ T6656] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 321.028067][ T6656] ? kcov_remote_stop+0x17e/0x6d0 [ 321.028091][ T6656] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 321.028125][ T6656] ? skb_dequeue+0x10e/0x150 [ 321.028141][ T6656] ? ieee80211_iface_work+0xcd4/0xfe0 [ 321.028173][ T6656] ? ieee80211_iface_work+0xf39/0xfe0 [ 321.028212][ T6656] cfg80211_wiphy_work+0x2dc/0x460 [ 321.028233][ T6656] ? process_scheduled_works+0x9ef/0x17b0 [ 321.028262][ T6656] process_scheduled_works+0xae1/0x17b0 [ 321.028326][ T6656] ? __pfx_process_scheduled_works+0x10/0x10 [ 321.028376][ T6656] worker_thread+0x8a0/0xda0 [ 321.028428][ T6656] kthread+0x70e/0x8a0 [ 321.028464][ T6656] ? __pfx_worker_thread+0x10/0x10 [ 321.028491][ T6656] ? __pfx_kthread+0x10/0x10 [ 321.028515][ T6656] ? _raw_spin_unlock_irq+0x23/0x50 [ 321.028540][ T6656] ? lockdep_hardirqs_on+0x9c/0x150 [ 321.028564][ T6656] ? __pfx_kthread+0x10/0x10 [ 321.028587][ T6656] ret_from_fork+0x3f9/0x770 [ 321.028618][ T6656] ? __pfx_ret_from_fork+0x10/0x10 [ 321.028652][ T6656] ? __switch_to_asm+0x39/0x70 [ 321.028670][ T6656] ? __switch_to_asm+0x33/0x70 [ 321.028687][ T6656] ? __pfx_kthread+0x10/0x10 [ 321.028710][ T6656] ret_from_fork_asm+0x1a/0x30 [ 321.028750][ T6656] [ 321.028758][ T6656] ---[ end trace ]--- [ 321.250745][ T6656] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 321.257992][ T6656] CPU: 0 UID: 0 PID: 6656 Comm: kworker/u8:14 Not tainted 6.16.0-rc2-syzkaller-00161-g714db279942b #0 PREEMPT(full) [ 321.270285][ T6656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 321.280380][ T6656] Workqueue: events_unbound cfg80211_wiphy_work [ 321.286674][ T6656] Call Trace: [ 321.290062][ T6656] [ 321.293026][ T6656] dump_stack_lvl+0x99/0x250 [ 321.297658][ T6656] ? __asan_memcpy+0x40/0x70 [ 321.302286][ T6656] ? __pfx_dump_stack_lvl+0x10/0x10 [ 321.307524][ T6656] ? __pfx__printk+0x10/0x10 [ 321.312162][ T6656] panic+0x2db/0x790 [ 321.316098][ T6656] ? __pfx_panic+0x10/0x10 [ 321.320550][ T6656] ? _printk+0xcf/0x120 [ 321.324737][ T6656] ? __pfx__printk+0x10/0x10 [ 321.329365][ T6656] check_panic_on_warn+0x89/0xb0 [ 321.334339][ T6656] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 321.340100][ T6656] ieee80211_request_ibss_scan+0x600/0x8b0 [ 321.345956][ T6656] ieee80211_ibss_work+0xd85/0x1060 [ 321.351190][ T6656] ? lockdep_hardirqs_on+0x9c/0x150 [ 321.356423][ T6656] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 321.362361][ T6656] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 321.368724][ T6656] ? kcov_remote_stop+0x17e/0x6d0 [ 321.373782][ T6656] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 321.379471][ T6656] ? skb_dequeue+0x10e/0x150 [ 321.384083][ T6656] ? ieee80211_iface_work+0xcd4/0xfe0 [ 321.389498][ T6656] ? ieee80211_iface_work+0xf39/0xfe0 [ 321.394919][ T6656] cfg80211_wiphy_work+0x2dc/0x460 [ 321.400062][ T6656] ? process_scheduled_works+0x9ef/0x17b0 [ 321.405822][ T6656] process_scheduled_works+0xae1/0x17b0 [ 321.411435][ T6656] ? __pfx_process_scheduled_works+0x10/0x10 [ 321.417490][ T6656] worker_thread+0x8a0/0xda0 [ 321.422135][ T6656] kthread+0x70e/0x8a0 [ 321.426248][ T6656] ? __pfx_worker_thread+0x10/0x10 [ 321.431397][ T6656] ? __pfx_kthread+0x10/0x10 [ 321.436039][ T6656] ? _raw_spin_unlock_irq+0x23/0x50 [ 321.441268][ T6656] ? lockdep_hardirqs_on+0x9c/0x150 [ 321.446514][ T6656] ? __pfx_kthread+0x10/0x10 [ 321.451150][ T6656] ret_from_fork+0x3f9/0x770 [ 321.455780][ T6656] ? __pfx_ret_from_fork+0x10/0x10 [ 321.460935][ T6656] ? __switch_to_asm+0x39/0x70 [ 321.465726][ T6656] ? __switch_to_asm+0x33/0x70 [ 321.470510][ T6656] ? __pfx_kthread+0x10/0x10 [ 321.475135][ T6656] ret_from_fork_asm+0x1a/0x30 [ 321.479947][ T6656] [ 321.483237][ T6656] Kernel Offset: disabled [ 321.487611][ T6656] Rebooting in 86400 seconds..