last executing test programs: 4m5.090521112s ago: executing program 1 (id=1841): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={0x0, 0x9}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000100)={0x0, 0x8e, "69b30b0a0d9a7695a18bfbedfced93ab14bbbdcfb846f1dd81ae89c33d323048434b0519bbc1ff9e79c595b5d3b5d90eccc1f418420f77b6e2fed8293f66cef8b1a37927ebce3ed8a19b00dc453b6571b98a73cf67af59d541c7f8274d0ce53cbf33a3a465fdefc1401d31b2a7fdf712bfb6660a809dd85378dd5fca8d970e6fdf65dee5b2f4589e031fb0ed6b8c"}, &(0x7f00000001c0)=0x96) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000300)={r1, 0xff, 0xfffffec6, 0x8e, 0x6, 0x7, 0x7ff, 0x1000, {r2, @in={{0x2, 0x4e21, @multicast1}}, 0x4, 0x5, 0x1000, 0xff, 0xa}}, &(0x7f0000000200)=0xb0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000040)=[{&(0x7f00000003c0)="89a25031b0f94f0cd90348a0d21ee413fa36ee8608f0844238e86d19f73752712e44cf133f8e6f0d32d614bbc3926a2e37f261021dd991c941e3e6f1f3856cc68dfe41ae7eaf23ba91d8cbfbb99cae9c90c9dcac5cf843794592a5d408bd312d70e145a62181e3aaa9c243d775a318fc99b7", 0xfffffffffffffea6}, {&(0x7f0000000480)="b21b824db48cb6a14779dcb79214c546b4f4728c976c59e106ff28ecffa91b2e68bd67bf9882d6939c7c4e4727f8d8979ce9bb883f9213faf51834517bed4d0bfc521236439a9e127fdb471c239215fcfc4dd80b3e53f4cb004d8328aaa6b41d237e66"}, {&(0x7f0000002c40)="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"}], 0x1, 0xa) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000006c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)=@getroute={0x14, 0x1a, 0x300, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x2400c880) r6 = socket$kcm(0x10, 0x2, 0x4) ioctl$FS_IOC_SETFSLABEL(r5, 0x41009432, &(0x7f00000005c0)="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") close(r6) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x3, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800020007000c00040004c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xd, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b4020000000000006111df1800000000850000003b000000950a030000000000b88166989a2144c4935cd0a0ac5b95d50e314f5291c01024194fa3573d7c84920d37af3d720892ebc02aa51b49"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000240)={0x0, 0x0, 0x9}, 0x10}, 0x94) 4m4.956716602s ago: executing program 1 (id=1842): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000280)={'erspan0\x00', 0x0, 0x7, 0x1, 0x1, 0xba0, {{0x6, 0x4, 0x0, 0x1f, 0x18, 0x68, 0x0, 0x3d, 0x29, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x38}, {[@generic={0x44, 0x2}]}}}}}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x37}, 0x100300, 0x0, 0x3, 0x9, 0x9, 0x7}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@local, 0x0, 0x0, 0x2, 0x1, 0x5, 0xb}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x500300, 0x0, 0x2, 0x0, 0x3, 0x85}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x6, &(0x7f0000000380)=ANY=[@ANYBLOB="180200000100f1ff000000000300000085000000410000001800000002000000000000000400000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r2, 0x0, 0x122, 0x0, &(0x7f0000000680)="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", 0x0, 0x1005, 0x0, 0x0, 0x17, 0x0, 0x0, 0x2, 0x9, 0x5}, 0x50) r3 = socket$packet(0x11, 0x3, 0x300) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000000c0)=0xc) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x0, 0x5, 0xd43}, {0x6, 0x0, 0x2}]}, 0x10) 4m4.558262217s ago: executing program 1 (id=1845): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @mcast1}}, 0x5c) ioctl$SIOCGETSGCNT(r2, 0x89e1, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x25}}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="33223bb34efaff19cd710ea96bdea028f897f5e2addc1349f877aba160a4a23590042a28f9478a451e13757a", @ANYBLOB="8ff64502f98fb566053752fb400b1b67ed35b7121571c828266ac4f1bbf24f064a760e1350c57d9e35bccb290531d19a2d3ee18a8d889acffaaff0a8c917b012873731ed1bc326781543bbe79f33fa3d7eeff405378595873ece92d21a38f3a8ed8dc4406a8e7a0479b8516ca21c34df392db485ab1a6b762fdcace0a1a7125762f20382997661879db802b3355cb869925611105c276b222a63df1cb6202bd2f041713d7c7d8286f11795881d9b3ec0e939d1d3993a17c475cee4ff6d8de057220ec115f07f5f986861470f112b84ece4746b0d3247aa64d842733852908aaf2f15c534b43343e4e47856f7160bd36004b467b60921", @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005001d00000000000500010004000000050015"], 0x4c}}, 0x0) 4m4.272705979s ago: executing program 1 (id=1849): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f00000000c0)=0x7976, 0x4) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x4, 0x1, 0x0, @local}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="91104d000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={r4}, &(0x7f0000000080)=0x8) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x4, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r7, r6, 0x25, 0x4, @val=@tcx}, 0x1c) syz_emit_ethernet(0xd81, &(0x7f0000000b00)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv6={0x86dd, @gre_packet={0x8, 0x6, "12141b", 0xd4b, 0x2f, 0x1, @private1, @private0={0xfc, 0x0, '\x00', 0x1}, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0x0, 0x1}, {}, {0x8, 0x88be, 0x1, {{0x9, 0x1, 0x8, 0x3, 0x1, 0x3, 0x2}, 0x1, {0x5}}}, {0x8, 0x22eb, 0x2, {{0x0, 0x2, 0xba, 0x0, 0x1, 0x0, 0x3, 0x6}, 0x2, {0x3ff, 0x100, 0x0, 0x4, 0x0, 0x1, 0x2, 0x1}}}, {0x8, 0x6558, 0x2, "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"}}}}}}}, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r1, 0x5000940f, &(0x7f0000000880)={{r1}, "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"}) 4m4.022008822s ago: executing program 1 (id=1850): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x14, 0x3a, 0x229, 0x3, 0xfffffffd, {0xa}}, 0x14}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pim6reg0\x00', 0x2}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x200a4800) recvmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098"], 0xfc}}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffffffffffffba, &(0x7f0000000080)=[{&(0x7f0000000500)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00b17d10cc40a810c0b96648e582006e9644fb02faf23884372d474d8235b094550aff7f", 0x33fe0}], 0x1}, 0x8000) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x2, 0x3b, 0x8, 0xa3c}]}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a0103"], 0x7c}}, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000380)=ANY=[]) 4m3.563615467s ago: executing program 1 (id=1854): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket(0xa, 0x3, 0x87) sendmmsg$unix(r1, &(0x7f0000001800)=[{{&(0x7f0000000080)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000440)="fa2bf548", 0x4}], 0x1, 0x0, 0x0, 0x4800}}], 0x1, 0x2400c884) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r0, 0xc161, 0x4, 0xec8}) getsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000000040)=0xaec, &(0x7f0000000180)=0x2) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd1f, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x54, 0x2, [@TCA_FLOWER_ACT={0x50, 0x3, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x9, 0x9, 0x20000000, 0x9}}, @TCA_ACT_BPF_FD={0x8}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x8848}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0xffffffbc, 0x10}, [@ldst={0x7, 0xff05, 0x0, 0x0, 0xa}]}, &(0x7f0000000240)='GPL\x00', 0x2, 0xbc, &(0x7f000000cf3d)=""/188}, 0x67) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f00000003c0)=r2}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x13, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000001c0)='syzkaller\x00', 0x5, 0x1006, &(0x7f0000002e00)=""/4102, 0x0, 0x0, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r2) 4m3.160082101s ago: executing program 32 (id=1854): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket(0xa, 0x3, 0x87) sendmmsg$unix(r1, &(0x7f0000001800)=[{{&(0x7f0000000080)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000440)="fa2bf548", 0x4}], 0x1, 0x0, 0x0, 0x4800}}], 0x1, 0x2400c884) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r0, 0xc161, 0x4, 0xec8}) getsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000000040)=0xaec, &(0x7f0000000180)=0x2) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd1f, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x54, 0x2, [@TCA_FLOWER_ACT={0x50, 0x3, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x9, 0x9, 0x20000000, 0x9}}, @TCA_ACT_BPF_FD={0x8}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x8848}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0xffffffbc, 0x10}, [@ldst={0x7, 0xff05, 0x0, 0x0, 0xa}]}, &(0x7f0000000240)='GPL\x00', 0x2, 0xbc, &(0x7f000000cf3d)=""/188}, 0x67) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f00000003c0)=r2}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x13, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000001c0)='syzkaller\x00', 0x5, 0x1006, &(0x7f0000002e00)=""/4102, 0x0, 0x0, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r2) 5.630334881s ago: executing program 4 (id=3311): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000000)={0xe, 0x0, 0xc0, 0x9, 0xff, 0x81, 0x0, 0x6, 0x5, 0x0, 0xcd, 0x8, 0x0, 0x3}, 0xe) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x4891) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1800"], 0x18, 0x4004048}], 0x1, 0x0) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000840)={r6, @in6={{0xa, 0x4e20, 0x3aa, @empty, 0x129}}, 0x8002, 0x5, 0x614, 0x1, 0xc, 0x7, 0xe}, 0x9c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c"], 0x44}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000280)={r0, 0x7, 0x104, 0x7ff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.760113118s ago: executing program 5 (id=3321): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) bind$vsock_stream(r2, &(0x7f0000000940), 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) setsockopt$sock_int(r3, 0x28, 0x1f, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d785f3d3201c58033"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r7, 0x0, 0x1, 0x6, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000013c0)={@map=r5, 0xffffffffffffffff, 0x17, 0x1, r6, @void, @value=r6, @void, @void, r8}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r1, r4, 0x34, 0x0, @val=@tcx={@void, @value=r9, @void, @void, r8}}, 0x1c) 3.17141246s ago: executing program 2 (id=3329): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'wlan1\x00', 0x0}) ioctl(r0, 0x8b1a, &(0x7f0000000040)) socketpair(0x26, 0x1, 0xf4f, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x1, 0x1, 0x301, 0x0, 0x0, {0x1, 0x0, 0x3}, [@CTA_LABELS={0x18, 0x16, 0x1, 0x0, [0xdc, 0xe, 0x9, 0x7, 0x3280000]}, @CTA_STATUS={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 3.024090261s ago: executing program 4 (id=3330): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a40)={0x14, r1, 0x301, 0x0, 0x25dfdbfc, {0x24}}, 0x14}}, 0x20000000) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(r2, 0xc0109414, &(0x7f0000000180)={0xc4d, 0x8, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xffe0, 0x10}, {0xd}, {0xe, 0x10}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x20048091) 2.971713842s ago: executing program 2 (id=3331): ioctl$SIOCRSSL2CALL(0xffffffffffffffff, 0x89e2, 0x0) close(0xffffffffffffffff) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40938, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e000000f2a0000010000000000000000"], 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) r4 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x4e20, @local}, 0x10, 0x800) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r4, 0x28, 0x6, &(0x7f0000000180)={0x0, 0xea60}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000"], 0x48) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b36, &(0x7f0000000000)={'wlan0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001bc0)={0x30, r6, 0x1, 0x200000, 0x25dfdbfb, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_FLAGS={0x8}]}, 0x30}, 0x1, 0x500000000000000, 0x0, 0x4084}, 0x20000010) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)={0x19c, r7, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_BEARER={0x34, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'pim6reg1\x00'}}, @TIPC_NLA_BEARER_NAME={0xa, 0x1, @l2={'ib', 0x3a, 'lo\x00'}}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x101}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xb}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff8001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x86be}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_LINK={0xe4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2a8a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x4000}, 0x20040000) unshare(0x600) r8 = socket(0x1e, 0x4, 0x0) bind$qrtr(r8, &(0x7f0000000000)={0x2a, 0x2, 0x3fff}, 0xc) r9 = socket(0x10, 0x804, 0x3) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000080)={0x4000, 0x110003, 0x0, 0x9}, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a000000040000800400", @ANYRES32=r9], 0x1c}}, 0x0) 2.867998669s ago: executing program 5 (id=3332): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r1, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private2={0xfc, 0x2, '\x00', 0x1}}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x34d}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xfbf}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000010}, 0x4001) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r0) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f00000001c0)=0x3, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, r3, 0x8, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xc2, 0x56}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x25}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_IE={0xc, 0x2a, [@gcr_ga={0xbd, 0x6, @broadcast}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x11}, 0x4041) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, r3, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4010}, 0x4) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000440)={'vcan0\x00'}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000480)={0x1d0, 0x16, 0x3, 0x3}, 0x8) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, r3, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void, @val={0xc, 0x99, {0xc, 0x6f}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r5 = socket$inet_smc(0x2b, 0x1, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000005c0)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000680)={'syztnl1\x00', &(0x7f0000000600)={'ip6tnl0\x00', r7, 0x29, 0x5, 0x18, 0x9, 0x20, @mcast1, @rand_addr=' \x01\x00', 0xa0, 0x8000, 0x77, 0x401}}) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), r0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000780)=0x14) sendmsg$ETHTOOL_MSG_RINGS_GET(r2, &(0x7f0000000900)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xd4, r9, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x24000010}, 0x8000) getsockopt$inet_mreqsrc(r5, 0x0, 0xf, &(0x7f0000000940)={@local, @initdev}, &(0x7f0000000980)=0xc) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f00000009c0)={0x2, 'veth1_to_hsr\x00', {0x7}}) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a40), r2) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x1c, r11, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x80) getsockname(r5, &(0x7f0000000b40)=@rc={0x1f, @none}, &(0x7f0000000bc0)=0x80) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000c40), r2) sendmsg$TIPC_NL_BEARER_DISABLE(r4, &(0x7f0000000fc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000c80)={0x2c4, r12, 0x200, 0x4, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6c}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xd72}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x400}, @TIPC_NLA_NET_ID={0x8}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3141}]}, @TIPC_NLA_BEARER={0x50, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth1_to_bridge\x00'}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7f}]}, @TIPC_NLA_LINK={0x84, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}]}, @TIPC_NLA_NODE={0x150, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xff, 0x3, "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"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "3f27931facc0fc058f8dbe40d71e940cca7492c015"}}]}]}, 0x2c4}}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f0000001240)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001200)={&(0x7f0000001080)={0x168, r3, 0x4, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_SSID={0x14, 0x34, @random="ff8121888d8a9ad65a8c11d3df7abbca"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @random="34a6338b9943"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x5}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1000}, @NL80211_ATTR_IE={0xdb, 0x2a, [@supported_rates={0x1, 0x3, [{0x1b}, {0x30}, {0x6}]}, @supported_rates, @cf={0x4, 0x6, {0x8, 0x2, 0x81, 0xf}}, @measure_req={0x26, 0xc6, {0x4, 0x9, 0x4, "240d9d91f21095a021a7ec5012fcb37ca1e29b060d8334772458806fab7c55a47a03e47ac0901e60d796f3aa1380b1328e54ad091b9950a9fb82fb19a754546f27d3d79b906c74c5e6de89312e569826c2f0368f154fbcb191848442b5f7e8c09a3190bf01278cdfd76e08939ac017e3dea9a7225c4aa77ff63c3e18c777330fc57250abaef49a838e6e8bc9699b6c17fb151c3d3ece0830f7e6a79e7e613fd9f2587d44e872d3f0da3fd113875c2bcc0e64d8f181dae3c0755495df8475eecb8a9fd1"}}]}, @NL80211_ATTR_IE={0x25, 0x2a, [@mesh_config={0x71, 0x7, {0x0, 0x0, 0x1, 0x1, 0x0, 0x81, 0x8}}, @peer_mgmt={0x75, 0x16, {0x1, 0x3, @void, @val=0x2c, @val="ece5875847bba51cf8c1d41b6b98e54b"}}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x8000}, 0x10) bind$inet(r5, &(0x7f0000001280)={0x2, 0x4e21, @multicast2}, 0x10) 2.854551022s ago: executing program 3 (id=3333): r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1700000056000100000000000000000007"], 0x38}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_int(r3, 0x1, 0x6, 0x0, &(0x7f0000000000)) r4 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="44000000190001090000000020000000021800080002fd0100000000080012"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0x503}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x400c89c) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0x84, r5, 0x210, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x9}, @val={0x8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'netdevsim0\x00'}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ff63bc6f013cfbe4a65987bc246e198ce515c6eecd93e3eb"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x84}, 0x1, 0x0, 0x0, 0xa0}, 0x2004001) 2.198282596s ago: executing program 4 (id=3337): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 64) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) (rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)) (async) r9 = socket$inet_udplite(0x2, 0x2, 0x88) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000006000000045000000700000001"], 0x48) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000d00008500000001000000850000002a00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r11}, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) r13 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r13, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4affeeaf541d002007000000", @ANYRES32=r12, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r13, @ANYRES32=r13], 0x44}}, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000010c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x85, &(0x7f0000000880)={r14, @in6={{0x2, 0x4e1e, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x24}}, 0x1}}, 0x4}, &(0x7f0000000300)=0x90) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}}, 0x0) (async) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff038}, {0x20, 0x0, 0x0, 0xfffff024}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840) 1.75607896s ago: executing program 5 (id=3338): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in=@multicast1, @in=@private=0xf0, 0x1ffe, 0xff, 0xfffc, 0x41, 0x2}, {0x6, 0x3, 0xfffffffffffffffe, 0x10000000, 0x4, 0x0, 0x80000000000000}, {0x402, 0x3, 0x0, 0x800}, 0x4000008, 0x6e6bb1, 0x1, 0x0, 0x2, 0x2}, {{@in=@dev={0xac, 0x14, 0x14, 0xe}, 0x4d6, 0x32}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xffffffff, 0x4, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffe}}, 0xe8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xfe, 0xfffffffc, @loopback}, 0x1c) 1.75515441s ago: executing program 0 (id=3339): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x20100, 0x0) read$rfkill(r2, 0x0, 0x3a) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r3) sendmsg$IEEE802154_LIST_IFACE(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000003c0)={0x14, r4, 0x703, 0x70bd26}, 0x14}, 0x1, 0x0, 0x0, 0x8844}, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10) unshare(0x62040200) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000340)={r5, r5, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r6, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r7, &(0x7f0000000100)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x873, 0x2}, 0xe) connect$packet(r7, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0xa, 0x6, @remote}, 0x14) 1.749992617s ago: executing program 3 (id=3340): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000001c0)=0x3) ioctl$PPPIOCGIDLE(r0, 0x8010743f, &(0x7f0000000100)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 1.725655062s ago: executing program 2 (id=3341): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'pim6reg0\x00', 0x2000}) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'pim6reg0\x00', 0x2000}) r0 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@gettclass={0x24, 0x2a, 0x100, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xfff3}, {0x0, 0xf}, {0xc, 0xfff1}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r4, {0xf000, 0xffff}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x20000800) socket$netlink(0x10, 0x3, 0xe) (async) socket$netlink(0x10, 0x3, 0xe) r5 = socket(0x400000000010, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x34, 0x2c, 0xd2b, 0x800, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x9}, {}, {0x7, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x24044094) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001580)=@newtaction={0x1c84, 0x30, 0x10, 0x70bd26, 0x25dfdbfe, {}, [{0x4}, {0x1c6c, 0x1, [@m_skbmod={0x48, 0xb, 0x0, 0x0, {{0xb}, {0x4}, {0x1c, 0x6, "9115963e919cff3cbb4169cb4cb15154cefe993a677a68a3"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_tunnel_key={0x5c, 0xd, 0x0, 0x0, {{0xf}, {0x14, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x8}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}]}, {0x1b, 0x6, "9040d9c4a3185232c5b96dac68f893a950a04ee5d3f1c9"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_connmark={0x148, 0x1, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1ff, 0x0, 0x1, 0x5, 0xfff}, 0x67}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x9, 0x0, 0xfffffff5, 0x3}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7fffffff, 0x4, 0x10000000, 0x200, 0x1000}, 0x9}}]}, {0xc1, 0x6, "9da2f8166e4466d6bb64e5dc58c9a3297ad69cd3408e863f70b6f045fd7beb0a137b98aad1bb5ca0835a02afa6730a773b36d260a91e6b42440cce0613e62522b32aab64f5d8fc0c50b0585e8f99b52054212ea6fbd69b638c08f62d222d5c735cd7800f77386d001f793f6f14b40dfe6d9a67169fd6df8d27f15010d3c1c9cd284faaae26d11a3af97a6a2b0d7fbfc71fa7faea332071732228c302326aac930cce6bdfe7b02c451cc978cbc70ec746674c17282b0d93f736fffd15b7"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_police={0x19c8, 0x4, 0x0, 0x0, {{0xb}, {0x18ec, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0xfffffffc, 0x2, 0xe84, 0x3ff, 0x5, {0x80, 0x0, 0x0, 0x4726, 0x0, 0xc}, {0xeb, 0x1, 0x1, 0x4, 0xafe2, 0x3}, 0x1, 0x1000, 0x2}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x80}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x7fffffff, 0x20000000, 0x10000, 0x42a8, 0x0, {0x1, 0x1, 0xd1d4, 0x3, 0x9, 0x70}, {0x5, 0x3, 0x100, 0x1, 0x9, 0x1ff}, 0x7fffffff, 0x2, 0x7}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xb27d, 0x10000, 0x2, 0x8, 0x9, 0xaf2, 0x400, 0x6, 0xde, 0x1a30, 0xffffffc3, 0x4, 0x3, 0x1, 0x5, 0x991, 0x7422f800, 0x6, 0x2, 0x1ff, 0x971, 0x7fffffff, 0x3ff, 0x0, 0x6, 0xff, 0xa14, 0xfffffd54, 0x2, 0x7, 0x4, 0x2, 0x5, 0x80000000, 0x0, 0xa, 0x8, 0x7ff, 0x7, 0x8001, 0x7ce, 0xfee2, 0x5, 0x2, 0x62f52a86, 0x1, 0x7, 0x7, 0x400, 0x0, 0x8001, 0x9, 0x1, 0x4, 0x1, 0x6, 0x1, 0xd, 0x8000, 0x6030d676, 0x3, 0x77a5678a, 0x7ef4, 0x4, 0x2, 0x2, 0x5, 0x518d, 0x38c, 0x83a, 0x6, 0xe9, 0x6, 0xffffffff, 0x6, 0x11, 0x2, 0x7, 0x7, 0x1ff, 0xb0d3, 0x6a1a, 0x3, 0x7fff, 0x9, 0x3, 0x4, 0x6, 0xb, 0x7322cbde, 0xe3c5, 0x5, 0x10, 0x81, 0x10000, 0xa, 0x4, 0x8, 0x1000, 0x3ff, 0x9, 0xc, 0xc90a2ce, 0x0, 0x2, 0x0, 0x1, 0x0, 0x30, 0x6, 0x2000000, 0x10000, 0x2, 0xfb5c, 0xff, 0x5, 0x3ff, 0x7f, 0xa, 0x8, 0x4, 0x6, 0x200, 0x1, 0x1, 0x1, 0x5, 0x2, 0x0, 0x8000, 0x8, 0x13cd, 0x9, 0x0, 0x8, 0x9, 0x47e8, 0x9, 0x0, 0x0, 0x2, 0x5, 0x8, 0x9, 0x5, 0x4, 0x5, 0x10000, 0x7, 0x9, 0x5, 0x10, 0x4, 0x3, 0x4092, 0xa, 0x5, 0x9, 0x4, 0xffff7fff, 0x3, 0x80000001, 0x1, 0x1, 0x0, 0xc, 0x7fffffff, 0x6, 0x7fffffff, 0xfffffffc, 0xb2e0, 0x9, 0x9, 0x8, 0xe57, 0x8001, 0x3f, 0x1, 0x6, 0xac18, 0x3ff, 0x2, 0x3, 0x5, 0x52c, 0x1, 0xb9bb, 0x0, 0x4, 0xd88, 0xf3, 0x4, 0x9, 0x0, 0x7, 0xa08, 0xf3c, 0xf251, 0x401, 0x4, 0x5ff, 0xffffffff, 0xe, 0x100, 0x401, 0x7fffffff, 0xd, 0x6, 0xf081, 0xffffffff, 0x9, 0xffffffff, 0x1, 0x5, 0xcce2, 0x7, 0x4, 0x6955fc25, 0x63, 0xc8, 0x0, 0x0, 0x400, 0x2, 0x5, 0x5, 0x6, 0x40800000, 0x2, 0x6, 0x7f, 0x8058, 0x4, 0x1, 0x3, 0x3544, 0xfffffff0, 0xbef8, 0x1, 0x9, 0x10, 0x0, 0x5, 0x0, 0x8, 0x800, 0x2dd2c492, 0x5, 0x2, 0x1, 0x701, 0x4e, 0x8, 0xf, 0x1ff, 0x8]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x60, 0x81, 0x80000000, 0xf, 0x8, 0x3ff, 0x0, 0x7f, 0x6, 0x1, 0x6, 0xda, 0xfffffffc, 0x2, 0x8, 0x7, 0x5, 0x8f47, 0x7ff, 0xccd, 0x6, 0x4, 0xaa40, 0x7c, 0x5dc, 0x8, 0x3, 0x2, 0x10001, 0x6, 0x9, 0x3, 0xc41a, 0x3ff, 0x9, 0x6, 0x6e11, 0x6, 0x7, 0x4, 0xfffffff7, 0x5e, 0x3800, 0x3, 0x6, 0x10001, 0x5, 0x3ff, 0x1, 0x4, 0x917, 0x2, 0x5, 0x7, 0x8, 0xc2d5, 0x0, 0xcee, 0x2, 0x64c6, 0x9, 0xffffffff, 0x1, 0x10001, 0xa, 0x7, 0x1, 0x2, 0x7, 0x2, 0x6, 0x9, 0x8, 0x80000001, 0xc1a, 0x5, 0x81, 0x10001, 0x0, 0x48, 0x4, 0x4, 0x62b2, 0x0, 0x80000001, 0xe8, 0x5, 0x2, 0xfff, 0x1, 0x5, 0x50, 0xfffffaf2, 0x8, 0xb5d, 0x7, 0x8001, 0x2, 0x7, 0x7f, 0x3, 0x7, 0x7, 0xd, 0x9, 0x4896, 0xa, 0xc5, 0x4, 0x7769, 0x0, 0x2, 0x4, 0x0, 0xff, 0x2, 0x400, 0xfffffffb, 0x1, 0x9, 0x8001, 0x0, 0x9, 0x3, 0xc1b9, 0x5, 0x6, 0x9, 0x7e2a, 0x4, 0x6, 0x8, 0x0, 0x6, 0x6, 0x3, 0x7, 0xa, 0x3, 0x9, 0x7, 0x4, 0x1, 0x2000, 0x8, 0x0, 0x200, 0xfffffff7, 0xc, 0x0, 0x5, 0x6, 0x401, 0x2, 0x7, 0x800, 0x8, 0x5, 0xbea9, 0x8, 0x9, 0x0, 0x80, 0x4, 0x4, 0x8, 0x401, 0x3, 0x9, 0xfffffc00, 0x7, 0x4, 0x6, 0x4, 0x4, 0x39, 0x9, 0x3, 0x5e, 0x3, 0x8, 0x5, 0x3, 0x6, 0xd, 0x3, 0x10000, 0x1, 0x40, 0x23, 0x7, 0x5, 0x80000001, 0x9, 0x7, 0x2, 0x6, 0x80000000, 0x2, 0x1, 0x1, 0x81, 0xb5, 0x80, 0x8, 0x9, 0x1, 0xca3b, 0x6, 0x5, 0x8, 0x2, 0x0, 0xf0e, 0x9, 0x10, 0x200, 0x0, 0x401, 0x5, 0x7, 0xd59f, 0x7, 0x2, 0x3, 0xec3, 0x496, 0x6a9f, 0x81, 0xffff, 0x4, 0x3, 0x9, 0x8, 0x5, 0x1, 0x7, 0x1, 0x1, 0x4, 0xa5e0, 0x5, 0x20000000, 0x1, 0x80000001, 0x80, 0x22a, 0x9, 0x663, 0x0, 0xd0, 0x4, 0x10, 0x300000, 0x3ff]}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x8, 0x97, 0x3, 0x7, 0x3, 0x100, 0x100, 0xab8, 0x55ef4961, 0x0, 0x0, 0x2, 0x7, 0x6, 0x1, 0xd60, 0x58, 0x1000, 0x4, 0x3, 0xe, 0x8001, 0x0, 0x200, 0x0, 0x7ff, 0x0, 0xe2d, 0xc89, 0xc, 0x4, 0x4, 0x9, 0x100, 0x9, 0x80000001, 0x2, 0x1, 0xe, 0x3, 0x4, 0x8, 0x1, 0x1, 0x4, 0x6, 0x800, 0x81, 0x4, 0xa, 0x20, 0xfffffffb, 0x401, 0x90000, 0x9, 0x1, 0x4, 0x7f, 0x2f01, 0x9, 0x7, 0x7, 0x10000, 0x7, 0x4, 0x7, 0x10, 0xfffffff8, 0x2, 0xd, 0xe, 0x7, 0x9, 0xcbbc, 0xa3, 0x7, 0xfd39, 0x6fe, 0x4, 0x6, 0x8, 0x6, 0x4, 0xd, 0x0, 0x7fffffff, 0x9, 0x1, 0x3, 0x4, 0xca8, 0xfff, 0x14cb, 0x4, 0xff, 0x10000, 0x4, 0xfff, 0x8, 0xf, 0x3295, 0x8, 0x7, 0xc, 0x0, 0x1, 0xfffffffb, 0x7, 0xd, 0x6, 0x7, 0x8000, 0x2, 0x0, 0xb, 0x7, 0x6, 0x408d18e2, 0x8001, 0x5, 0x5, 0x4, 0xc, 0xffff, 0x9000, 0x54517673, 0x10001, 0x9, 0x97d, 0x4, 0x100, 0xffffffff, 0x100, 0x9, 0x7, 0x5, 0x4, 0x956, 0x48, 0xe4, 0xfffff5a7, 0x1, 0x3ff, 0x0, 0xc, 0x9, 0x8, 0xa, 0x3, 0x8, 0x101, 0x5, 0x5, 0xfffffffb, 0x10000, 0xc6ec, 0xb, 0x9, 0x8001, 0x400000, 0x7f, 0x6, 0x8, 0x8, 0x1, 0x2, 0x7, 0x3ff, 0x2, 0x2, 0x6, 0x9, 0x0, 0x1, 0x6, 0x4, 0x800, 0x9, 0xf4, 0x6, 0x0, 0xf, 0xfffffff5, 0xfffffff7, 0x8000, 0x8, 0x2, 0xf, 0x8, 0x5, 0x9, 0x3, 0x8, 0x1, 0x3, 0x2, 0x0, 0x9, 0x9, 0x61, 0xfff, 0xfffffffd, 0x9e700000, 0x4, 0x9, 0x8, 0x2, 0x8e, 0x8, 0x2, 0xd, 0x14, 0x0, 0xd3f, 0x7, 0x8, 0x0, 0x6, 0x8, 0x9, 0xa0, 0xffffffff, 0x157, 0xd78, 0x9c2, 0x7, 0x10001, 0x9, 0x80000000, 0x8, 0x36, 0x9, 0x5, 0x8, 0x4, 0x9, 0x96, 0x5, 0x8, 0x9, 0x8001, 0x9, 0x8001, 0x5, 0x9, 0xff, 0x93e3, 0x8, 0x3, 0xcac6, 0x3, 0xa9e, 0x2, 0x8, 0x8]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x400, 0xe1, 0x401, 0x2, 0x5fa, 0x5, 0x7ff, 0x80000001, 0x4, 0x1, 0xdd3, 0x1, 0x2, 0x6, 0x8, 0x5ea, 0x5521f067, 0x7f, 0x0, 0xc7, 0x8000, 0x1, 0x6, 0x2, 0xfcdd, 0x4, 0x7, 0x8, 0x0, 0x4, 0x3, 0x0, 0xffff6945, 0x0, 0x81, 0x8000, 0xd, 0x80000000, 0x6, 0x5, 0x5, 0x4, 0x4, 0x9, 0x4, 0x0, 0x60, 0xe4b, 0xffffff76, 0xb, 0x7, 0x4, 0x5, 0xc0, 0x54, 0x9, 0x5, 0x80000001, 0xfb3f, 0xfffffffa, 0x3, 0x9, 0x7, 0xd, 0x0, 0x1, 0xa66, 0x6, 0x9, 0x6, 0xfff, 0x3, 0x7, 0x6, 0x4, 0x3, 0x5, 0x4, 0x3, 0x7, 0x1000, 0x6, 0x7, 0x6, 0x1, 0x8b, 0x6, 0x3ff, 0x5, 0xffffffff, 0xfffffff7, 0xb5, 0x8, 0x7fff, 0x8, 0xff, 0xa40, 0x8, 0xb2, 0x7, 0x200, 0x5, 0x7f, 0xfffffff8, 0xff, 0x2, 0x7, 0xb1dc, 0x3, 0x1, 0x4, 0x0, 0xfffffffb, 0xe, 0x2, 0x1, 0x91, 0x0, 0x200, 0x7, 0xd, 0x9, 0x36d, 0x21, 0x24e1, 0xc57, 0x3, 0x2, 0x6, 0x4, 0xc0, 0x7, 0x2, 0xe3e, 0x0, 0x70, 0x3c67c6f9, 0x0, 0x7, 0x800, 0xfff, 0x8, 0xb, 0x3, 0x4, 0x7, 0xb62, 0x5, 0x3, 0xe, 0x24000, 0x14000, 0x2, 0x7, 0x4, 0x7ff, 0x8001, 0x7f, 0x1, 0x5e6, 0x81, 0x0, 0xfffff3a2, 0x40, 0x2f, 0x8, 0x5, 0x8, 0x9, 0x1, 0xa, 0xd, 0xb, 0x8, 0xfff, 0x1, 0x9, 0x6, 0x2b, 0x1, 0x20000, 0x269, 0x1, 0x26b, 0x7fffffff, 0xfffffff7, 0x7ff, 0xc1, 0xb487, 0x5, 0x100, 0x0, 0x7, 0x80000000, 0x5, 0x10001, 0x9, 0x3, 0x1, 0x1, 0x7, 0x5, 0x4, 0x4, 0x8, 0x4, 0x4ad, 0x3, 0x200, 0x2, 0xa27, 0x12, 0x6, 0x5, 0x2, 0xffffffff, 0x5423, 0xff, 0x7, 0x4e8, 0x800, 0x8001, 0xff, 0xd5, 0x2, 0xc0, 0x0, 0x3ff, 0xfffffffe, 0x5, 0x800, 0x10, 0x7, 0x407e, 0xfff, 0x9, 0x101, 0xf, 0x40, 0xfffffffd, 0x8, 0x2cc80, 0x587e, 0x8, 0x3, 0x4, 0x0, 0x40, 0x1, 0x33d7, 0x0, 0xfff, 0x7, 0xb77a, 0x7]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x142, 0xd, 0x1000, 0x3ff, 0x2, 0x5, 0x0, 0x666a, 0x80000000, 0x6, 0x4, 0x7f, 0x8001, 0x5, 0xf, 0x7f, 0xfffffffe, 0x0, 0x0, 0x1800, 0x0, 0xffffffff, 0x4, 0x0, 0x2, 0x3, 0xb, 0x0, 0xfb40, 0x8, 0xb36, 0x53, 0x8001, 0x3, 0xe1, 0x1, 0x8, 0x0, 0x7, 0x3d, 0x4, 0x800, 0x9, 0x9, 0x7d, 0x6, 0x7, 0x800, 0xffff, 0xfffffff3, 0x3, 0x9974, 0x800, 0x800000, 0x1200, 0x8, 0x0, 0x1, 0x1ff, 0x5, 0xfffffffb, 0x2, 0x6216691f, 0xfffffff9, 0x0, 0x4, 0x2, 0x4, 0x6, 0x8, 0x1, 0x4, 0xfffffffb, 0x0, 0x3, 0xfffff1a4, 0x1, 0x5, 0x3, 0x4, 0x69e5, 0x0, 0x97, 0x48, 0x0, 0xfff, 0xd24, 0xe, 0x9, 0x5, 0x0, 0xe, 0x8fe, 0x101, 0x2, 0x9, 0xffffff8f, 0xfffffffc, 0x7f, 0x1, 0x3, 0x7, 0xffffffff, 0x10000, 0x1, 0xff, 0x3, 0xfffff7cf, 0x6, 0x9, 0x7fff, 0xe, 0x2, 0x100000, 0xfff, 0xfffffffa, 0x3ff, 0x6, 0x8, 0x5, 0x7fffffff, 0x8, 0x8b, 0xfff, 0x8, 0x5, 0x0, 0x1, 0x6, 0x81, 0x4, 0x7ff, 0x5ee, 0x10001, 0x6, 0x0, 0xfffffffe, 0x147640, 0x1, 0x8, 0x9, 0x1000, 0x5, 0xc7, 0x0, 0x8, 0x3, 0x5, 0xe, 0xf, 0x9, 0xfffffff7, 0x8001, 0x8, 0xffffffff, 0x7fff, 0x9, 0x9, 0x7fff, 0x0, 0x9, 0x3, 0x10, 0x3, 0x2a94, 0x7ff, 0x2, 0x6, 0x486f, 0xa3d, 0x6, 0xce2, 0x6, 0x1ff, 0x55, 0x80000001, 0x0, 0xff, 0xb3, 0x6, 0xff, 0x9d7, 0x2, 0x5, 0xe, 0xff, 0x7, 0xe65, 0x1000, 0x4, 0x8000, 0x1, 0x9, 0x3, 0x7, 0x1, 0x8, 0x0, 0x2, 0x0, 0x81, 0x8000, 0xffffff2c, 0x5, 0x2d6, 0x8, 0xbfc, 0x7, 0x6, 0x2, 0x83, 0x1, 0xffffffff, 0x8, 0x1000, 0x240d38d9, 0x6, 0x81, 0x7, 0x735, 0x2, 0x10000, 0x0, 0x1, 0x7, 0x8716, 0x2, 0xffffff80, 0x9, 0x3, 0x8, 0x4, 0x5, 0x81, 0x6, 0xf41, 0x7, 0x9, 0x6, 0x1, 0x3, 0x4, 0x6, 0x40, 0x3e38, 0x6, 0x3, 0x0, 0x4, 0x2f5c, 0xc, 0x463, 0x1, 0x5a9c, 0xfff]}], [@TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_RATE64={0xc, 0x8, 0xf}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x9, 0x0, 0x9, 0x7, 0x5, 0x7f, 0x4, 0x81, 0x7f, 0x100, 0xe71, 0x5, 0x7ff, 0x10000, 0x80000001, 0x1456, 0x1, 0x1ff, 0x9, 0x3, 0x2, 0x1, 0x7f, 0x80000000, 0x7, 0x80000000, 0x8, 0x7, 0xbdf, 0xc55, 0x3, 0x0, 0x100, 0x0, 0x8, 0xd3, 0x9, 0x2c9db28d, 0x401, 0x4, 0x0, 0x553, 0x2, 0x9, 0x5b, 0xffffffff, 0x7, 0x1, 0x9, 0x10, 0x7, 0x6, 0x7ff, 0xb83, 0x9, 0x8, 0x3, 0x101, 0x5, 0xf9cc, 0x8, 0x7, 0x6, 0x7, 0x3, 0x5, 0x8, 0x6, 0x1, 0x0, 0x7, 0x6, 0xff, 0x10001, 0x0, 0x184, 0x4, 0xfff, 0x4da, 0x9, 0x8, 0x1, 0x401, 0x401, 0x8, 0xd, 0x4, 0x5, 0x1, 0x1, 0x0, 0x5, 0xffff, 0x9, 0xfffffff9, 0x8, 0x5, 0x6300, 0x10001, 0x9, 0x9, 0xfffffff6, 0x101, 0x7fffffff, 0xffffffff, 0xdf93, 0x5, 0x9, 0xfff, 0x6, 0x5, 0xd, 0xff, 0x3, 0xe, 0x6, 0x9275, 0x2, 0x3, 0x1, 0xfffffffb, 0x9, 0x800, 0x5, 0x0, 0x400, 0x42, 0x4, 0xa5e, 0x6, 0x401, 0x8, 0x78, 0x909, 0x9, 0x8, 0x10, 0x7, 0x9, 0x400, 0x0, 0x5, 0x5, 0x5b3, 0x4, 0x442, 0xa, 0xcf, 0x9, 0xfffffffb, 0x2, 0x9, 0x9, 0x3, 0x5, 0x6, 0x7, 0xf343, 0x4, 0x9, 0x3, 0xa, 0xa, 0x5, 0x5, 0x101, 0x401, 0x2, 0xf9a, 0x80, 0x401, 0x6, 0x1, 0x0, 0x4, 0x48, 0x7f, 0x9, 0x7, 0x3, 0x2, 0xe20, 0xd, 0x6, 0x9, 0x7, 0x81, 0x5, 0x3, 0x30000, 0xff, 0x4, 0xfffffff9, 0x3, 0xfc3f, 0x3, 0x24a9bfd3, 0x81c6, 0x8, 0x1000, 0xff, 0x1, 0x43ef, 0x80, 0x6, 0x6, 0x40, 0x1, 0x1, 0x0, 0x10000, 0x3, 0x9, 0x7, 0x3, 0x1046, 0x4, 0x2, 0x10f, 0x8, 0x5f, 0xf1a, 0xcc5e, 0x8000, 0x8535, 0xf5e3, 0xd60, 0x4, 0x8, 0x5, 0x0, 0x0, 0x4, 0x200, 0x4, 0x100, 0xd, 0x3, 0x5e, 0x8, 0x9, 0x8, 0x47, 0x3, 0x9ad5, 0x1, 0x0, 0x6, 0x4, 0x0, 0x2, 0x7, 0x81, 0xb]}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x401}]]}, {0xb3, 0x6, "f812620a5f17f1cfdffb032f1981afa41d5f168b09eca3505feb04aae0d8477044c9c3bd71fc485124f4306bf85fa788798eb11170f931e44cf3285869367e3e82a0f8bfbaa7d87996abe1d2ce085ffcff5bb1a6c138e1316469c4c5cf55e57135ae6afde5e7292bf11eafea4050bb3eb961ffacaa400b72ca365067820e2791cd54ec74056e7adeaa81df398b47fe3c73ed9c92f0a064315b9b093bca3144112dee15da716d44848b3edc800b1512"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_tunnel_key={0xb4, 0x1b, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @empty}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @local}]}, {0x60, 0x6, "0c34a1df28fb91c8c833617d1fd0aaf31ab590094ac7c444a003c521e54f45993697f7a528bb641dfe95059203a427d570b267a85274aadb6e3124f150956685c482fc4101ff21e2adff539eb003efeb2079bafe7f4354acb5afa659"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x1c84}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000398bfb0db48d9a4c0000000000"], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000398bfb0db48d9a4c0000000000"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) socket$packet(0x11, 0xa, 0x300) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r9, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r10 = socket$inet_smc(0x2b, 0x1, 0x0) close(r10) r11 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000240)={'syz_tun\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r11, &(0x7f0000000300)={0x11, 0xc, r12, 0x1, 0x8, 0x6, @remote}, 0x14) 1.644626157s ago: executing program 4 (id=3342): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xc4, r1, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x34, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x149}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x39}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffff95}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xb}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfff}]}, @TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x15e}, @TIPC_NLA_PROP_TOL={0x8}]}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x48884}, 0x440c4) syz_emit_ethernet(0x82, &(0x7f0000001bc0)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x3d, 0x0, 0x0, 0xfffc, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3, 0xfc}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@loopback, 0x10001}, {@empty}, {@local}, {@remote}, {@local}, {@dev}, {@private}]}]}}}}}}}, 0x0) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="19517b", @ANYRES16=0x0, @ANYBLOB="000400000000000000000d0000000500190005000000050018004d00000006000a0001"], 0x2c}, 0x1, 0x0, 0x0, 0x18000}, 0x4004011) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{0x11}, {0x0, 0x100000000000000}]}, 0x68) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="700000001000030500000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="35c60100ef000000500012800e0001006970366772657461700000003c00028014000600fe88000000000000000000000000010114000700ff"], 0x70}, 0x1, 0x0, 0x0, 0x240488c0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002006007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001900000095000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) 1.360190299s ago: executing program 3 (id=3343): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000000)='|=', 0x2}], 0x1) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x8032, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000062102000100000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00]'], 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r1, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) (async) accept$alg(r1, 0x0, 0x0) (async) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000000)='|=', 0x2}], 0x1) (async) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x8032, 0xffffffffffffffff, 0x0) (async) pipe(&(0x7f0000000080)) (async) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000062102000100000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00]'], 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) 1.294023108s ago: executing program 2 (id=3344): r0 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0x3a, &(0x7f0000000500)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x2, 0x10, 0x11, 0x0, @empty, @empty}, {0x4e22, 0x4e23, 0x18, 0x0, @wg=@data={0x4, 0x101, 0x430a}}}}}}, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)=0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r3, 0x0, 0x0, 0x20010004, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0xffffffff, 0x401, 0xffff, 0x2, 0xc, 0xe, 0x4}}]}}]}, 0x14c}}, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000002, 0x100010, r0, 0x83e41000) r5 = socket(0x2, 0x80805, 0x0) r6 = socket$inet(0x2, 0x80001, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000140)) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r7, 0x0, 0x1, &(0x7f0000000180)=0x2, 0x4) getsockopt$WPAN_SECURITY(r7, 0x0, 0x1, 0x0, &(0x7f0000000540)) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x74, &(0x7f0000000200)={r8, 0x5, 0x20}, &(0x7f00000001c0)=0x18) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000100)={r8, 0x3ff, 0x10}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f00000000c0)={@dev={0xac, 0x14, 0x14, 0x22}, @initdev={0xac, 0x1e, 0x1, 0x0}, r4}, 0xc) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000040)=r1) 1.167600937s ago: executing program 2 (id=3345): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x4044004}, 0x94) 1.112428751s ago: executing program 3 (id=3346): socket$inet(0xa, 0x801, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x1843}, 0x18) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x38, 0x1403, 0x1, 0x70bd26, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wg1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4008010) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) (async) writev(r3, &(0x7f0000000500)=[{&(0x7f0000000080)="2e9b690007e03dd6446ce8880000000000", 0x11}, {&(0x7f0000000200)="b7", 0x1}], 0x2) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYRES16=r5], 0x7c}}, 0x10) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a90000000060a0b0400000000000000000200000064000480600001800b0001006c6f6f6b7570000050000280080002400000001308000240000000120800054000000001080004400000000108000240000000130800024000000008080002400000000b08000440000000010900010073797a31000000000900010073797a30000000000900020073797a3200"], 0xb8}}, 0x0) (async) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{0x1}, &(0x7f0000000100), &(0x7f0000000180)='%pS \x00'}, 0x20) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x68, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xa}, {0xffff, 0xffff}, {0x1a, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x3c, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0xff}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x9}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x7}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x5, 0x7ff}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x7}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xffe0, 0xa}, {0xf, 0x10}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x24, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0xffffffff}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x3}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x101}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x8}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x55}, 0x4000) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x3, 0x7, @loopback, 0x800000}, 0x1c) r9 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000001a40)=@raw={'raw\x00', 0x8, 0x3, 0x248, 0x98, 0x8, 0xfa04, 0x1b0, 0x6c02, 0x1b0, 0x194, 0x194, 0x1b0, 0x194, 0x3, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x32}, 0x0, 0x0, 'veth0_to_hsr\x00', 'dvmrp1\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x74020000}}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'vlan0\x00', {}, {}, 0x0, 0x1, 0x44}, 0x0, 0xb0, 0x118, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x4, 0x5, 0x3, 0x1, 0x2, 0x4], 0x4}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1b, 0x5, 0x1, 0x9, 'syz0\x00', 'syz1\x00', {0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a8) (async) socket$nl_netfilter(0x10, 0x3, 0xc) 1.111645997s ago: executing program 0 (id=3347): r0 = socket$netlink(0x10, 0x3, 0x8000000004) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003b00)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a840100001500010200000000000000000a0000098800048014000300776c616e3100000000000000000000000800024052f5e19b140003007767300000000000000000000000000008000140000000010800014000000001140003"], 0x21f4}, 0x1, 0x0, 0x0, 0x2004d004}, 0x8800) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="a0010000100013070000000000000000ac1414aa000000000000000000000000000000000000000000000000000000010000000000040000000000005e000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"/364], 0x1a0}, 0x1, 0x0, 0x0, 0x24004040}, 0x0) 902.02752ms ago: executing program 0 (id=3348): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x120, r2, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_KEY={0x20, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x1c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x100}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_KEY={0xc, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3}]}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_KEY={0xb8, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "226767acff496ed496b2814cc4630c06"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "24451b9abd90e96b31f76f4474548f80f0c468423a9959eb8c17ce3f72fa358b"}, @NL802154_KEY_ATTR_ID={0x10, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "eb726379d213d7b045226ce4e6c10bccf0c5b141f874eb01135ee9ae078b715b"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "f6ccfc9eb15372e19362b7f4a98eccdb9a9b9d5b55bf18d1b2a933c97ab8ed2d"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "b0b126ab8ed1812a2a7ab825774c58a3faccb5a1c27deb05b4341de107e39da9"}]}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x120}, 0x1, 0x0, 0x0, 0x40}, 0x40) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x24, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_PER_PORT={0x5, 0x2d, 0x20}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 900.394081ms ago: executing program 2 (id=3349): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050200000000fddbdf251200000008000700010000001800018014000200626f6e645f736c6176655f310000000008000800000000007f55d78f6115697dcad25e1141b8828e56bfe8ddb4e023699ff00eb4de0a"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtaction={0x18, 0x30, 0x48b, 0x0, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x980) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c000180060006006558000008000280040011"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000900)={0x0, 0x0, 0x2, 0x7, 0x1ffd, 0x2}, 0x14) listen(r0, 0x1ff) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b80)=ANY=[@ANYBLOB="54000000100003052dbd70000007000000000000", @ANYRES64=r1, @ANYRES8=r4, @ANYRES32=0x0, @ANYBLOB="34a88187ee9ec5257b8bf0c5c7038a3b8f0fa9e9187277a26e9133a9cca6b82a565434e0e6d255baf196491e2599c36cf5ca31474262efb5a2db92330f9e3a6c0dd9c8daffb3c691bda23664c36240ea55ad372561e08ac85e7afdf71e7b5e17e496e48389175a6516e5a68edc79e4f00da64ba8bd14460292a96a8279f7a0f85c909ea1cda42fd08a435b7339758d96f6de0186bd93618ef519ff46058300000000000000091c05b308e9d32b95e80e62b2402172b0d3f0d07f149bf777682bade9ebbe6729547f4f727d"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x2204c091) r6 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES8=r6, @ANYRESOCT=r0, @ANYRESDEC=r4], 0x3c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4040004}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x2f}]}}]}, 0x3c}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r10, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r10, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000940)=ANY=[@ANYBLOB="24bfffe4", @ANYRESDEC=r8, @ANYBLOB="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", @ANYRES8=r9], 0x22c}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000680)=ANY=[@ANYBLOB="a0010000", @ANYRES16=r3, @ANYBLOB="00022cbd7000ffdbdf2504000000580001801400020069705f767469300000000000000000001400020076657468315f766c616e000000000000080003003d26b7cd140002006272696467655f736c6176655f300000080003000200000008000300020000007800018008000100", @ANYRES32=0x0, @ANYBLOB="080003000000000014000200766972745f7769666930000000000000080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080003000200000008020000000000000000020076657468305f746f5f7465616d0000001400020076657468305f746f5f687372000000000c000180080001009167a45c54bf5efdc0d152ecf45fd62511946acfc61014badc87fb42946dda8086408d7a45e61a8577c0ea490b48a1ace1a42b6b8c44e5ebe79b256695f31898469d8f66f06f8a398f1113111985c16ec06ab11c9673a7cdb135cebb6d1d51c9672596d096f0b8cb01c5be5589d2b227c0147c", @ANYRES32=0x0, @ANYBLOB="4000018008000100", @ANYRES32=0x0, @ANYBLOB="0800030001000000140002006e696376663000000000000000000000080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="08000300000000005c00018008000300020000001400020076657468315f746f5f6272696467650008000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="08000300030000000800030000000000140002006e69637666300000000000000000000008000100", @ANYRES32=r11, @ANYBLOB="1400018008000100", @ANYRES32=0x0, @ANYBLOB="0800030002000000"], 0x1a0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r12 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r12, &(0x7f0000000000)="ab", 0x1, 0x0, &(0x7f0000000280)={0x2, 0x4e22, @private=0xa010100}, 0x39) 845.631779ms ago: executing program 5 (id=3350): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r1, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000280)={0x28, 0x0, 0xffffd8ee}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0xfffffffffffffd83, &(0x7f0000000080)={&(0x7f0000000200)=@newtaction={0x60, 0x30, 0xfff7, 0x10, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0x0, 0x4, @multicast}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000005580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x60, 0x16, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) 534.839158ms ago: executing program 0 (id=3351): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000400000002000000000000110400000000000000000000000000000200000000020000000000000602000000020000000000000e0300000000000000000061"], 0x0, 0x54}, 0x28) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={0xffffffffffffffff, 0x6, 0x1000, 0x2}) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f00000003c0)=0x8, 0x2) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e23, 0x6, @empty, 0x6}}}, &(0x7f00000001c0)=0x84) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000700)='notify_on_release\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000780)={r1}, &(0x7f00000007c0)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000800)={r4}, 0x8) write$cgroup_int(r3, &(0x7f00000003c0)=0x202, 0x12) mkdirat$cgroup(r2, &(0x7f00000001c0)='syz0\x00', 0x1ff) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={r1, 0x7}, &(0x7f0000000240)=0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001b40)=ANY=[@ANYBLOB="681000002c00070100000000ffdbdf25027c000009000180bf35517eed0000000c100280081001"], 0x1068}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r6) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)={0xa0, r8, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_WOL_SOPASS={0x5e, 0x3, "82dea5b7644bc81d8fb758f05e9307de2813f0dfdcb1fbaaad4096c0c31b8df3abba36cc41fa07f03e22141207eec0040aa95ff16fe01fe9cb291fef18fa3cfa902db0165623e31cf64548a592ccdcfeae599d25ba2061ef64fc"}, @ETHTOOL_A_WOL_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x81}, 0x20004000) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a09040000000000000000020000000900020073797a32000000000900010073797a3000000000400004803c0001800b00010065787468647200002c000280080007400000000c0500020000000000080003400000004a08000640000000010800044000000002"], 0x94}}, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x118, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @generic="3232c7eb4cf8d3343ca0cbbc04561c9e09", @nested={0xec, 0x2, 0x0, 0x1, [@nested={0xe6, 0x2, 0x0, 0x1, [@generic="7358906869b6a64a291b77b3dc24549fb68f5bda7b2b3998241036fa6feebcde45edfdb90067bf6e572e78bd27edaac811419abd2f85166beaf1f41b8aaddec5645b69b59be75dcb7a6dc303fdcd2cad17d3241c8f3a6ed1d21a0f8a10431582b76f2f5c344f0d5b3e7591cbf4f134452349e32e53cebe79793f3337adaf5f5791111b463013b0000bb5e4ac74c4e0dda55ac54e8f731dc697b39ad116d01ec59edc4d73cf3c1c4168567cbb8c8a5fcb91f566ffe0a70d5bf30263b8f7787d81bdb536c91a80e885f9f1255b8912a673b74690269fcdbc3c3ee4eb22058f5b54a7e2"]}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x880}, 0xc000) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000740)) 518.964707ms ago: executing program 5 (id=3352): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) syz_init_net_socket$ax25(0x3, 0x6, 0xc4) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x9) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40938, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e01a00027f00000100000000000000bf"], 0x10) socket$inet(0x2, 0x2, 0x0) (async) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) (async) syz_init_net_socket$ax25(0x3, 0x6, 0xc4) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x9) (async) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) (async) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40938, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) (async) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e01a00027f00000100000000000000bf"], 0x10) (async) 390.317816ms ago: executing program 3 (id=3353): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r1, &(0x7f00000005c0)={&(0x7f00000008c0)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000000)="0800b1e688b8867d", 0x8}], 0x1, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x401}}], 0x18}, 0x240040c4) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) accept4(r2, 0x0, 0x0, 0x800) sendmmsg$inet(r2, &(0x7f0000000c40)=[{{&(0x7f0000000000)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000040)="8d34670278b92eecd483fadaf1341e3c1b425b8f8fc7860c4a29fd33779648ba199bc7971b50", 0x26}, {&(0x7f0000000080)="79e3bd8dba655b594008c320b341925c825a3ab010058cab2bbee2cc8eea81033c9f3f8cc797878426b502eb6ef18c649d6c59bfeea2cb06897ed7e72e760b1d0ac7ba5b862b8ae00a9c6b4925d6581a2f63770cc599553e84bf33bb78e7c861813dee3ca2184a76b43ddc80011b2d50b7cc9aa2532e9a21fc34f6a5d5be1350711ecb3fc3934016a150c91464caf815050a06aeb94cdf1e0cb9133bbd4ed333c51f4f220670d7f42f3b9ecbe83b517c1c9904c2a62b5ee2a3a7d2f291a726faa5034380f588fcbeaf9594f8ed15752ba0aca592357936e1a105a095df18428f6726c95e703a95d9e0555c438b8bbdcb2f21dd0dd05a131c", 0xf8}, {&(0x7f00000001c0)="51b5e0607a6bfb4e45abc10d21043b38deb2a04650a7176667c855c0463597382ffbeeb790838acc8e5c47c116ac19f39e974bf61215e89e33d9444121f67efbb152e992ec9c84a769d4b839f71eca2f601963b5725df4b9ed31ea0d7696248115959c62b54396f4722a164fd7347d87797278528be6303aba9b8227e650f72d4592637a53cbb6ec3b4c78b456d01d81ab0f988da8aa3f8d726096242401dc0c488f7307c64f1adf05f65f283ee45e8745feb8e366bfdf28673103c9a39146da94d0d0841e50dc43adfb92a2124335d9e2235b39c478", 0xd6}, {&(0x7f00000002c0)="515440cc197a1e02e9f156b2c241ba5b7672dd5a47a977667c909df60afb53e439ef8849caf4c38c782d028fccd5f724aa8d1ccd32bd15edbe7ce8237aefbb84e2519cabe249b870eb4054a5447baae18f996041142a6e79eea58a02b6b1814f4483d4f57eaf91accd841f790df0d9d2511560837d850ec3385e33bcead0fc3eb28ed1d4bfb6e58030825c2e551b8273538d", 0x92}, {&(0x7f0000000380)="5a45355728f9e50f7e470577b6c17a9517491563f37c8e2a25bc025123064d9b53e39b361ec718bf2575dbdd177f3dd5a805af221bb59770649b139eeb762fc06c25321ee78e372ac726a49e4b9eacfd181a002dc61965a4ae1bca807b7a7de16dc7dbb0fd213beaeb7e97dc95b39e4739daafa136ababe243163f25916b", 0x7e}], 0x5}}, {{&(0x7f0000000480)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10, &(0x7f0000000b80)=[{&(0x7f00000004c0)="6316591d595410e4b78469bfabc7caaa1f28d0979e4f0970c07504afa695e5768e26bd6fb00ddf0f4b417741a685606cf451ea0ddf5ac57a0147b5c04d913134f1287f10f28ada5cb54bdbf21d388a504f9aeafdaa2d6431dd4453d7c4a499d89fb73915a8ffbfb0d610f894972077d20345bc824ac913d378e6b68a40240eb97c6fdb0da34c39cd6d9489b6e16059069176c95895469344fdcc97053584c90b649c678e4a94170f9d0704081f13d78d128c2952cdfeab610d534282bbcf819cd1cd1e39", 0xc4}, {&(0x7f00000005c0)="22d32a84918c797f52ff95de68b64da762cb750eb25a3f2b51edf2d726ca0f90ec84bcc8e5ea472edf55ea70b676d54ab56cbe282a1ef6d4a856769bcfe6d3cf9575479ba1e3ec99b783423fc14e5d1eb475fe5efd8f7c4ce8fbfb6c7e9330f11bb3f64ee7d301cfa9ee65a34fc1054eab28c55f7a2a97dc132e360b4584513720c2abbe1b3cde2f283eec7b6349e1122327a90e676b4a3b191c24920ea8374a32649a5a4096408dbc538e72bef8f99b6a931fc8697fd7751c177ef09d11e32955e8a2543079e5af106f2ef02b5226202e4c1d2635836680d31382509baaaba717c182db5b3e94b885f63499a640", 0xee}, {&(0x7f0000000800)="ce53ed8439a16f06e32e0e9da55a41fadf689878dae3c866ab4f1423b1087b68b8ea739af580f50d7c2552e0bad953f5fe1e58aae9790643101267b204e28ecdc12cc1780706fdc64fba868454614c7976d8e35b4805840cd21d9d406e31717c928d629cceaa05fe5b315d0a42cad79c95e3c63aad8d9d87d3e67a035a29e49062edd1fe8909ad7a8c327ce275527030c80a54e3470c9e38cff8267fecdbe221341e90f2d18da2923e9809d4b85ac6caa89069b92e35f55a42edbc305eb1a80aa7694a00d67bb61be310fe23ccd708e6ab0a616eefe0436a6e018ccff8d75e2b9c9d62a1c2aa19a039ef3f", 0xeb}, {&(0x7f00000006c0)="83d679270f436e0db6d06efe7ffac90fdd845c155a9fffd76c573d304941a5ff893cfcc6e785a4b074724c9f", 0x2c}, {&(0x7f0000000700)="b92ebae096f2d89de99c44d5875db870ead6e9fc41a055fb4f868784457ee8274d1e50c296238e2fb2856ae078a0b1461bf12bd5c534e18bdf941052780c538200c35accb85b9f2ac9a256d9f157eefb5c5444a6171fee154dfc0594399a1457ea2da211a49621", 0x67}, {&(0x7f0000000900)="8a7aaa0d4412ea15684d2bd2bc45b7e90365fce8f3b8bf08ddeff13572d91cb4f4ae6bc80c52bc705869d0bf74de6a4426d57d595831d60f3cc9078ef9357a1ef056ae6b4f6150cd5b00f6511d02a524a5818660c0291a8230ac0b858c05cbf372a07946112130f721d65bb99f7ff2d2588db45389c4c84faa7f888e7a8ea927d3f5000d27321341411fb656f0e08c93bfe6afee413a416a1d5cc430665d1acd8bf13c3dc13c910e175d34c76bbe4cfa0c73c6b2afdf90182207227723bb7c229a09d4e12893ce65e0d39ef16122e7387b9e791ee18aac07c07ec2496d82", 0xde}, {&(0x7f0000000a00)="3e6016b2aec4faa3c265303683f22f4ea6ee1508f777c40c2e1ab1146e0b5b792ae61955eeabe02cc06a4f7f9a801cef9ce15c1126a1b8d7950fa3d9c2427e38bdeb803d5405397eb6d34c7d785e2887124bac363ec43803e5cb6c8e1fe4689f5832889c230872a51f90423b86d302f1d7d0b2c67946e030", 0x78}, {&(0x7f0000000a80)="da27af20b1d7fd69d6129a4a4b3b00eecc98a404c26bc7f933ed04512c40674e8a2d218511f097880ce38b93f83be841bcb0830469c0b1316cd9da1ee8ab69b72c6b97a876d0e5d3ba1843281628bd331f46a1843b8c7e0b35999bbcabb4c0d58a16d7ed33fcb2a968db636692491666e531724c909888ceaa377053c1f52d3ef1388e3e75abe8bac4e114e803876648ee1ef66c3117eeb97d6bdd7fdb39b53ece1f203705d503a685f2cd61c14ecf6fad63f592dfbfa8ce41a30cfba2c2e4f87e321febfc673d93a32d18cc8d9cc9f02fb95752d1b1ca3e033e185f0636117276471bb40278693aa8939309de1a05ba82db1bea", 0xf4}], 0x8, &(0x7f0000000c00)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x8}}], 0x18}}], 0x2, 0x854) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000013c0)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x5}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x64, 0x2, {{0x7fff, 0x7f, 0x192, 0xf, 0x7fff, 0x205}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x8, 0x5, 0x1, 0x3, 0xfd}}]}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0x1, 0xfffffffd, 0x0, 0x1bb, 0x4}}]}}}]}, 0x94}}, 0x0) 260.251498ms ago: executing program 0 (id=3354): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_emit_ethernet(0x12, &(0x7f0000000000)=ANY=[@ANYBLOB="910418166421b54fa0aaaa050004424203"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000640)=[{0x6, 0x83, 0xfc, 0x2}]}, 0x10) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_SIOCDELDLCI(r2, 0x8981, 0x0) close(r1) 201.58971ms ago: executing program 4 (id=3355): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T4(r2, 0x103, 0x6, 0x0, &(0x7f0000000080)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x8c4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x890, 0x2, [@TCA_MATCHALL_ACT={0x88c, 0x2, [@m_police={0x888, 0x1, 0x0, 0x0, {{0xb}, {0x85c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0xfffffffb, 0x4, 0x2, 0xffffffc0, 0x5, 0x2234, 0x7f, 0x81b, 0x800, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x4, 0x58b, 0x85a, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x5, 0xab2, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x5, 0x1, 0x5b1f, 0x7b0, 0x7, 0x100, 0x6, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1ff, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0x1, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d24, 0x2, 0x9, 0x0, 0x7f, 0x7, 0x863c, 0xff, 0x24, 0x5, 0x7, 0x6, 0x7a, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x9, 0x61, 0x200, 0x6, 0x2, 0x2, 0x6, 0x10001, 0x8, 0x7, 0xf, 0xda56, 0x7ffffffe, 0x80, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x2, 0x1, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0x0, 0xac, 0x9, 0x6, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x2, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0x9, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xfca, 0x399d, 0x6, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x1, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x7, 0x1, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1080, 0x4, 0xec2, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xffffff01, 0x5, 0x37f, 0x8, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x4, 0x4, 0x5, 0x7, 0x12, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0xa6, 0x3, 0x10000, 0x5, 0x4, 0x0, 0x3, 0x0, 0xd, 0x6, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94d, 0x9, 0x8, 0x6, 0x100, 0xec0, 0xffff, 0x4, 0x2, 0x3ff, 0x3e, 0xb828, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7ff, 0x92, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0x4, 0x3, 0x9, 0xc, 0x0, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x101, 0xadd9, 0x1, 0x0, 0x7, 0x7fffffff, 0x2, 0x4, 0x0, 0x5, 0x4, 0x3, 0x8, 0x9, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x401, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x4, 0xffffdbb7, 0x50, 0xf, 0xf, 0xe, 0x3, 0x0, 0x81, 0xfff80000, 0x7a7, 0x1, 0x6, 0x3, 0x8, 0x7, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x3, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x6, 0x40, 0x2, 0xfff, 0x8, 0x3, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x3, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0x7, 0x59, 0x9, 0x2, 0x101, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0x3, 0xffffff97, 0x2, 0xfff, 0x1, 0x40, 0x8, 0x3, 0x710, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0x3, 0xe, 0x10000, 0x9, 0x9, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x20000000, 0x5, 0x1, 0xdbec, {0x8, 0x0, 0xb55, 0x5, 0x7, 0x5}, {0x6, 0x0, 0xd, 0x5, 0x1, 0x5d17}, 0x2, 0x0, 0x6}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x886}, @TCA_POLICE_RESULT={0x8, 0x5, 0x187}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8c4}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x4, 0x83, 0x5, 0x4, 0x6c, @loopback, @mcast2={0xff, 0x3}, 0x8000, 0x80, 0x8, 0x3}}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x1e8, 0x10, 0x503, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000003}]}}}, @IFLA_VF_PORTS={0x1a8, 0x18, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "529e7419e4f3c427ab87fa62a6a6c541"}]}, {0xc, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x100}]}, {0x6c, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x90}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "9c571c61338c8d03a52c61db423ccb40"}, @IFLA_PORT_VF={0x8, 0x1, 0x401}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x4}, @IFLA_PORT_VF={0x8, 0x1, 0x80000000}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "9b0d0402e0284d131cfb64e5d8059878"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x7}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x6}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x3}]}, {0x44, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "de5bf7dc2e5e642e99b145dd8fb13bf9"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x4}, @IFLA_PORT_VF={0x8, 0x1, 0x7}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "379525019ab659b7bcc2d8f3761d8827"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x10}]}, {0x44, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xd, 0x2, '@*/]:\\-.\x00'}, @IFLA_PORT_PROFILE={0xc, 0x2, 'syztnl2\x00'}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_PROFILE={0x7, 0x2, '+{\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "40665bba15b8f7699addc099be40775b"}]}, {0x3c, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x9}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x5}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "849bc536862139a40017550a2c43db37"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "809cf9f3e3a3e4775dbc17ee47a9ab35"}]}, {0xc, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x6}]}, {0x38, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "f2cdaf7010f6d8a952f37fc15392c4f8"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x57}, @IFLA_PORT_VF={0x8, 0x1, 0x5}, @IFLA_PORT_VF={0x8, 0x1, 0x2}, @IFLA_PORT_VF={0x8, 0x1, 0x9}]}, {0xc, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x9}]}]}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x10}, 0x0) 153.009273ms ago: executing program 0 (id=3356): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x54, r1, 0x1, 0xfffffffe, 0xfffffffe, {}, [@NBD_ATTR_SOCKETS={0x28, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c191f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x54}}, 0x20000000) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) 59.336739ms ago: executing program 5 (id=3357): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x1}, 0x50) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x14, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}, [@map_val={0x18, 0x8, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x6}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x5}]}, &(0x7f0000000180)='syzkaller\x00', 0x6, 0x9d, &(0x7f00000001c0)=""/157, 0x41000, 0x6, '\x00', r2, 0x0, r3, 0x8, &(0x7f0000000300)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x4, 0xa, 0x1ff, 0x1}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000380)=[{0x5, 0x2, 0x5, 0x6}, {0x5, 0x4, 0x0, 0x3}], 0x10, 0x1}, 0x94) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000480)='tunl0\x00', 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f00000004c0)=0xfffffff8, 0x4) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f0000000500), 0x4) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000540)={0x0, 0xc4, "2808299c0ccbdb1f2dcffc6ee5228b9e87fb2af40b4ea0d5b8e83205cec4bf416d5d1d7422f4f60bb501d937f220d53dd4af518ac820b8caa42e31c6879331c400bbf63de3c3ebce116108e65f21dbe4571c58853db55dd2657cff931a1a1336f90e3545efddf35dfb5def95c0aacc788cd13a22b30f950aac60e6744ea57e9ebcc8a8e1b35237e5eb36a4f65973560b086e171bd66952849fc8650d84d7d30086f24c8055a06aa77c778695bfac961dbd6b666c973bdf0a936f7f70e34eec07f783946d"}, &(0x7f0000000640)=0xcc) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000680)=@assoc_value={r4, 0x7}, &(0x7f00000006c0)=0x8) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000700)='ns/user\x00') r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000780), r1) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000880)={&(0x7f00000007c0)={0xb0, r5, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x4}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0xdefd}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0xa0bf}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x11}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0xfffffffc}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x8b0}, @ETHTOOL_A_RINGS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_RINGS_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40045}, 0xc090) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000900)={r4, 0x1, '+'}, &(0x7f0000000940)=0x9) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x30, 0x4, 0x8, 0x3, 0x0, 0x0, {0x5}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8c25}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x898}, 0x20048804) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000a80)={r4, 0x6}, 0x8) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r6, 0xf504, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000ac0)={r4, 0xffff8681}, &(0x7f0000000b00)=0x8) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000b40)=""/181, 0xb5}, {&(0x7f0000000c00)=""/141, 0x8d}, {&(0x7f0000000cc0)=""/214, 0xd6}, {&(0x7f0000000dc0)=""/254, 0xfe}, {&(0x7f0000000ec0)=""/90, 0x5a}], 0x5, &(0x7f0000000fc0)=""/245, 0xf5}, 0x9}], 0x1, 0x20, &(0x7f0000001100)={0x77359400}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r6, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x20, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xfffffe00, 0x74}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000000) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000001240)=@buf) r8 = syz_genetlink_get_family_id$devlink(&(0x7f00000012c0), r6) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000001440)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001400)={&(0x7f0000001300)={0xf8, r8, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x800}, 0x40880) sendmsg$TIPC_CMD_GET_MAX_PORTS(r6, &(0x7f0000001540)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x1c, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20004000) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000001580)={r7, @in={{0x2, 0x4e20, @private=0xa010101}}, 0x814, 0x2, 0xffff, 0x7, 0x60, 0x0, 0x3}, &(0x7f0000001640)=0x9c) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000001680)={r9, 0x2, 0x30}, 0xc) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001740), 0x4) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001800)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x4, '\x00', r2, 0xffffffffffffffff, 0x5, 0x2, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x1f, 0x5, &(0x7f00000016c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, [@map_fd={0x18, 0xb, 0x1, 0x0, r0}]}, &(0x7f0000001700)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x2, '\x00', r2, @fallback=0x12, r10, 0x8, &(0x7f0000001780)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000017c0)={0x3, 0x0, 0x80000000, 0x7}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000001880)=[r11], 0x0, 0x10, 0x1}, 0x94) 50.673216ms ago: executing program 3 (id=3358): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000800000000000003000000000000000000000000000000fdfffffffbffffff"], 0xfc}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)={0x5c, 0x12, 0x0, 0x70bd26, 0x25dfdbfc, {0x8, 0x6, 0xa, 0x1, {0x4e24, 0x4e23, [0xfffffff8, 0x3, 0x6], [0x400, 0x9, 0x8, 0x9], 0x0, [0x1, 0x3]}, 0x4, 0xb}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "f102dcf29effae15cd"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0x10000000}) sendmmsg$alg(r2, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000"], 0x18}], 0x1, 0x0) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x27, &(0x7f0000000000)=""/114}, 0xa8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x10, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9, 0x1, "facaf7719c"}]}, @NFTA_CMP_OP={0x8}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xd0}}, 0x0) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x3c, r6, 0x821, 0x70bd2c, 0x2ddfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x10}]}, 0x3c}, 0x1, 0x0, 0x0, 0x41}, 0x40480c4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='rcu_stall_warning\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) 0s ago: executing program 4 (id=3359): socket(0x10, 0x3, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (rerun: 32) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000d30000000800000002"], 0x48) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x28, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1, 0xffffffffffffffff}, &(0x7f0000001d80), &(0x7f0000001d40)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000000000003000000008510000002000000850000004900000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) (async) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) (async) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="5801000040000701feffffff00000000017c0000040042800c00018006000600800a0000340102802e011480080007"], 0x158}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r6 = socket(0x10, 0x803, 0x0) (async) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x94, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r8, {0xc, 0xfff1}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_EMATCHES={0x60, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x54, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x20, 0x2, 0x0, 0x0, {{0xfffb, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x2}, {0x0, 0x7, 0x2}}}, @TCA_EM_META_RVALUE={0x6, 0x3, [@TCF_META_TYPE_VAR="5bb4"]}]}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x92c9, 0x3, 0x8}, {0xfffffffc, 0xffffff2c, 0x5, 0x8000}}}]}]}]}}]}, 0x94}}, 0x20040054) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0x4, 0x2, 0x800, 0x48010, 0x1, 0x7ff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x5, 0xe}, 0x50) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x0, 0x7, 0x7, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg$unix(r9, &(0x7f00000016c0)=[{{&(0x7f0000000340)=@abs, 0x6e, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/205, 0xcd}, {&(0x7f0000000600)=""/202, 0xca}, {&(0x7f00000004c0)=""/53, 0x35}], 0x3, &(0x7f0000000800)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x108}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000940)=""/233, 0xe9}, {&(0x7f0000000a40)=""/207, 0xcf}, {&(0x7f0000000b40)=""/152, 0x98}, {&(0x7f0000000c00)=""/175, 0xaf}, {&(0x7f0000000700)=""/56, 0x38}, {&(0x7f0000000cc0)=""/224, 0xe0}], 0x6}}, {{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000e40)=""/234, 0xea}, {&(0x7f0000000f40)=""/109, 0x6d}, {&(0x7f0000000fc0)=""/223, 0xdf}, {&(0x7f00000010c0)=""/169, 0xa9}, {&(0x7f0000001180)=""/172, 0xac}, {&(0x7f0000001240)=""/50, 0x32}, {&(0x7f0000001300)=""/126, 0x7e}, {&(0x7f0000001380)=""/193, 0xc1}, {&(0x7f0000001480)=""/70, 0x46}], 0x9, &(0x7f00000015c0)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc8}}], 0x3, 0x1, &(0x7f0000001280)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001780)={0x1b, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0xa, '\x00', r8, r10, 0x5, 0x1, 0x1}, 0x50) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r3, &(0x7f0000000500), 0x0}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081140000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071106b00000000001d300500000000004704000001ed00000f030000000000001d44020000000000620a00fe040400007203000000000000b500f7ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a8641aa05a1336b3b4c4becea710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3380d28e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343cccc953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93020000000000000080e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6032399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c9102"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) (async, rerun: 64) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) (rerun: 64) r12 = openat$cgroup_devices(r11, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) (async) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r10, 0x6, 0x21, &(0x7f0000001800)="bfd90ccfe38c40c11136dfd8e48c47d1", 0x10) write$cgroup_devices(r12, &(0x7f0000000100)=ANY=[@ANYBLOB='c ', @ANYRES32=r11], 0xa) kernel console output (not intermixed with test programs): 0.2123 (pid 14630) Use of struct sctp_assoc_value in delayed_ack socket option. [ 399.477518][T14630] Use struct sctp_sack_info instead [ 399.881723][T14648] netlink: 'syz.5.2124': attribute type 10 has an invalid length. [ 400.698409][T14675] __nla_validate_parse: 3 callbacks suppressed [ 400.698430][T14675] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2130'. [ 400.742863][T14675] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 400.750552][T14675] IPv6: NLM_F_CREATE should be set when creating new route [ 400.757900][T14675] IPv6: NLM_F_CREATE should be set when creating new route [ 400.782803][T14683] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2130'. [ 400.833306][T14682] lo speed is unknown, defaulting to 1000 [ 400.869264][T14685] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2133'. [ 400.913967][T14682] wg1 speed is unknown, defaulting to 1000 [ 400.964988][T14687] syz.3.2134: vmalloc error: size 69206016, failed to allocated page array size 135168, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 401.007636][T14687] CPU: 1 UID: 0 PID: 14687 Comm: syz.3.2134 Not tainted syzkaller #0 PREEMPT(full) [ 401.007667][T14687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 401.007687][T14687] Call Trace: [ 401.007695][T14687] [ 401.007705][T14687] dump_stack_lvl+0x189/0x250 [ 401.007743][T14687] ? __pfx_dump_stack_lvl+0x10/0x10 [ 401.007771][T14687] ? __pfx__printk+0x10/0x10 [ 401.007793][T14687] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 401.007825][T14687] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 401.007858][T14687] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 401.007892][T14687] warn_alloc+0x214/0x310 [ 401.007932][T14687] ? __pfx_warn_alloc+0x10/0x10 [ 401.007976][T14687] ? __get_vm_area_node+0x28f/0x300 [ 401.008009][T14687] ? nf_tables_newset+0x1330/0x2540 [ 401.008044][T14687] __vmalloc_node_range_noprof+0x690/0x12d0 [ 401.008112][T14687] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 401.008146][T14687] ? nf_tables_newset+0x1330/0x2540 [ 401.008183][T14687] ? rcu_is_watching+0x15/0xb0 [ 401.008209][T14687] ? nf_tables_newset+0x1330/0x2540 [ 401.008242][T14687] __kvmalloc_node_noprof+0x674/0x910 [ 401.008277][T14687] ? nf_tables_newset+0x1330/0x2540 [ 401.008323][T14687] ? nft_set_lookup+0x128/0x150 [ 401.008343][T14687] ? nft_hash_privsize+0x4f/0xf0 [ 401.008374][T14687] nf_tables_newset+0x1330/0x2540 [ 401.008422][T14687] ? __pfx_nf_tables_newset+0x10/0x10 [ 401.008481][T14687] ? __nla_parse+0x40/0x60 [ 401.008512][T14687] nfnetlink_rcv+0x11d9/0x2590 [ 401.008577][T14687] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 401.008621][T14687] ? ref_tracker_free+0x63a/0x7d0 [ 401.008677][T14687] ? __netlink_deliver_tap+0x807/0x850 [ 401.008704][T14687] ? netlink_deliver_tap+0x2e/0x1b0 [ 401.008751][T14687] netlink_unicast+0x82f/0x9e0 [ 401.008785][T14687] ? __pfx_netlink_unicast+0x10/0x10 [ 401.008811][T14687] ? netlink_sendmsg+0x642/0xb30 [ 401.008834][T14687] ? skb_put+0x11b/0x210 [ 401.008864][T14687] netlink_sendmsg+0x805/0xb30 [ 401.008902][T14687] ? __pfx_netlink_sendmsg+0x10/0x10 [ 401.008933][T14687] ? aa_sock_msg_perm+0xf1/0x1d0 [ 401.008970][T14687] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 401.008992][T14687] ? __pfx_netlink_sendmsg+0x10/0x10 [ 401.009020][T14687] __sock_sendmsg+0x21c/0x270 [ 401.009058][T14687] ____sys_sendmsg+0x505/0x830 [ 401.009098][T14687] ? __pfx_____sys_sendmsg+0x10/0x10 [ 401.009138][T14687] ? import_iovec+0x74/0xa0 [ 401.009172][T14687] ___sys_sendmsg+0x21f/0x2a0 [ 401.009202][T14687] ? __pfx____sys_sendmsg+0x10/0x10 [ 401.009273][T14687] ? __fget_files+0x2a/0x420 [ 401.009294][T14687] ? __fget_files+0x3a0/0x420 [ 401.009335][T14687] __x64_sys_sendmsg+0x19b/0x260 [ 401.009366][T14687] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 401.009414][T14687] ? do_syscall_64+0xbe/0xfa0 [ 401.009443][T14687] do_syscall_64+0xfa/0xfa0 [ 401.009465][T14687] ? lockdep_hardirqs_on+0x9c/0x150 [ 401.009488][T14687] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.009511][T14687] ? clear_bhb_loop+0x60/0xb0 [ 401.009537][T14687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.009565][T14687] RIP: 0033:0x7f761b18f749 [ 401.009586][T14687] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 401.009606][T14687] RSP: 002b:00007f76193f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 401.009629][T14687] RAX: ffffffffffffffda RBX: 00007f761b3e5fa0 RCX: 00007f761b18f749 [ 401.009645][T14687] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 401.009659][T14687] RBP: 00007f761b213f91 R08: 0000000000000000 R09: 0000000000000000 [ 401.009673][T14687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 401.009686][T14687] R13: 00007f761b3e6038 R14: 00007f761b3e5fa0 R15: 00007ffdb5043478 [ 401.009723][T14687] [ 401.009738][T14687] Mem-Info: [ 401.153246][T14702] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2133'. [ 401.224908][T14687] active_anon:5853 inactive_anon:0 isolated_anon:0 [ 401.224908][T14687] active_file:3335 inactive_file:39995 isolated_file:0 [ 401.224908][T14687] unevictable:768 dirty:301 writeback:0 [ 401.224908][T14687] slab_reclaimable:11757 slab_unreclaimable:161471 [ 401.224908][T14687] mapped:31478 shmem:1415 pagetables:1261 [ 401.224908][T14687] sec_pagetables:0 bounce:0 [ 401.224908][T14687] kernel_misc_reclaimable:0 [ 401.224908][T14687] free:1258917 free_pcp:18427 free_cma:0 [ 401.450898][T14687] Node 0 active_anon:23428kB inactive_anon:0kB active_file:13340kB inactive_file:159784kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:126008kB dirty:1204kB writeback:0kB shmem:4128kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13840kB pagetables:4812kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 401.487177][T14687] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 401.554539][T14687] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 401.602849][T14708] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2138'. [ 401.635382][T14687] lowmem_reserve[]: 0 2504 2505 2505 2505 [ 401.641846][T14687] Node 0 DMA32 free:1128516kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23128kB inactive_anon:0kB active_file:13340kB inactive_file:159784kB unevictable:1536kB writepending:1204kB zspages:0kB present:3129332kB managed:2565100kB mlocked:0kB bounce:0kB free_pcp:56856kB local_pcp:35696kB free_cma:0kB [ 401.676859][T14687] lowmem_reserve[]: 0 0 0 0 0 [ 401.681651][T14687] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 401.709972][T14708] macvtap3: entered promiscuous mode [ 401.735023][T14687] lowmem_reserve[]: 0 0 0 0 0 [ 401.739187][T14708] syz_tun: entered promiscuous mode [ 401.741384][T14687] Node 1 Normal free:3895744kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:13952kB local_pcp:6464kB free_cma:0kB [ 401.779719][T14711] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2139'. [ 401.791289][T14711] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2139'. [ 401.802776][T14711] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2139'. [ 401.831752][T14687] lowmem_reserve[]: 0 0 0 0 0 [ 401.863536][T14687] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 401.945727][T14687] Node 0 DMA32: 528*4kB (UM) 559*8kB (ME) 384*16kB (M) 136*32kB (UME) 96*64kB (UM) 33*128kB (UM) 23*256kB (UM) 18*512kB (UME) 28*1024kB (UE) 4*2048kB (UME) 256*4096kB (UM) = 1127992kB [ 402.018066][T14687] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 402.050888][T14687] Node 1 Normal: 172*4kB (UM) 54*8kB (UME) 56*16kB (UME) 157*32kB (UME) 29*64kB (UME) 8*128kB (UME) 9*256kB (UME) 5*512kB (UME) 4*1024kB (UME) 1*2048kB (U) 946*4096kB (M) = 3895744kB [ 402.106030][T14687] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 402.138081][T14687] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 402.150906][T14687] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 402.175189][T14687] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 402.188674][T14687] 44691 total pagecache pages [ 402.193413][T14687] 0 pages in swap cache [ 402.198229][T14687] Free swap = 124996kB [ 402.202410][T14687] Total swap = 124996kB [ 402.207047][T14687] 2097051 pages RAM [ 402.210884][T14687] 0 pages HighMem/MovableOnly [ 402.215573][T14687] 424134 pages reserved [ 402.236549][T14687] 0 pages cma reserved [ 402.496525][T14741] lo speed is unknown, defaulting to 1000 [ 402.515558][T14740] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2144'. [ 402.533179][T14741] wg1 speed is unknown, defaulting to 1000 [ 402.957917][T14754] syzkaller0: entered promiscuous mode [ 402.963671][T14754] syzkaller0: entered allmulticast mode [ 405.048070][T14794] netlink: 124 bytes leftover after parsing attributes in process `syz.3.2159'. [ 405.054693][T14791] IPVS: set_ctl: invalid protocol: 51 100.1.1.2:20000 [ 405.491000][T14827] x_tables: duplicate underflow at hook 2 [ 405.522848][T14827] netlink: 'syz.0.2165': attribute type 1 has an invalid length. [ 405.780941][T14837] __nla_validate_parse: 34 callbacks suppressed [ 405.780973][T14837] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2168'. [ 405.922951][T14843] netlink: 'syz.0.2170': attribute type 21 has an invalid length. [ 405.948245][T14843] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2170'. [ 405.967829][T14843] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2170'. [ 405.993718][T14847] netlink: 'syz.4.2171': attribute type 10 has an invalid length. [ 406.017884][T14847] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2171'. [ 406.074122][T14847] team0: Port device geneve0 added [ 406.081027][ T9286] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.145924][ T9286] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.156827][ T9286] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.237213][ T9286] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.337314][T14864] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 406.369371][T14870] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2175'. [ 406.705898][T14890] syzkaller1: entered promiscuous mode [ 406.713570][T14890] syzkaller1: entered allmulticast mode [ 406.760954][T14894] tipc: Enabled bearer , priority 0 [ 406.779706][T14894] syzkaller0: entered promiscuous mode [ 406.806228][T14894] syzkaller0: entered allmulticast mode [ 406.951822][T14900] lo speed is unknown, defaulting to 1000 [ 406.962500][T14891] tipc: Resetting bearer [ 407.023313][T14891] tipc: Disabling bearer [ 407.092196][T14900] wg1 speed is unknown, defaulting to 1000 [ 407.115114][T14912] dummy0: entered promiscuous mode [ 407.134367][T14911] dummy0: left promiscuous mode [ 407.299699][T14917] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2189'. [ 407.449256][T14927] netlink: 'syz.2.2191': attribute type 1 has an invalid length. [ 407.530453][T14922] lo speed is unknown, defaulting to 1000 [ 407.550355][T14922] wg1 speed is unknown, defaulting to 1000 [ 407.830098][T14934] tipc: Enabling of bearer rejected, failed to enable media [ 407.977378][T14940] lo speed is unknown, defaulting to 1000 [ 407.985172][T14940] wg1 speed is unknown, defaulting to 1000 [ 408.609642][T14975] netlink: 'syz.5.2201': attribute type 13 has an invalid length. [ 408.634523][T14964] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2199'. [ 408.691333][T14982] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2203'. [ 409.161372][T15002] netlink: 'syz.2.2204': attribute type 1 has an invalid length. [ 409.302590][T15008] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2207'. [ 409.448793][T15019] netlink: 'syz.4.2209': attribute type 1 has an invalid length. [ 409.481124][T15007] ip6gre1: entered allmulticast mode [ 409.511237][T15020] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2209'. [ 409.589541][T15019] bond6: entered promiscuous mode [ 409.595146][T15019] 8021q: adding VLAN 0 to HW filter on device bond6 [ 409.610990][T15019] bond6: entered allmulticast mode [ 409.674996][T15019] bond6: (slave bridge4): making interface the new active one [ 409.682901][T15019] bridge4: entered promiscuous mode [ 409.711788][T15019] bridge4: entered allmulticast mode [ 409.719257][T15019] bond6: (slave bridge4): Enslaving as an active interface with an up link [ 410.504950][T15054] syzkaller1: entered promiscuous mode [ 410.511269][T15054] syzkaller1: entered allmulticast mode [ 410.530029][T15054] netlink: 'syz.4.2216': attribute type 3 has an invalid length. [ 410.615159][T15059] netlink: 'syz.5.2218': attribute type 3 has an invalid length. [ 410.635328][T15061] IPv6: addrconf: prefix option has invalid lifetime [ 410.773971][T15055] lo speed is unknown, defaulting to 1000 [ 410.782427][T15055] wg1 speed is unknown, defaulting to 1000 [ 410.827815][T15068] tipc: Enabled bearer , priority 0 [ 410.840061][T15068] syzkaller0: entered promiscuous mode [ 410.846015][T15068] syzkaller0: entered allmulticast mode [ 410.882635][T15068] tipc: Resetting bearer [ 410.892504][T15067] tipc: Resetting bearer [ 410.928026][T15067] tipc: Disabling bearer [ 411.606304][T15108] sctp: [Deprecated]: syz.4.2230 (pid 15108) Use of int in max_burst socket option. [ 411.606304][T15108] Use struct sctp_assoc_value instead [ 411.764879][T15114] IPVS: set_ctl: invalid protocol: 0 0.32.0.0:4096 [ 411.766242][T15116] __nla_validate_parse: 3 callbacks suppressed [ 411.766263][T15116] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2234'. [ 411.777040][T15114] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 411.797688][T15116] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2234'. [ 412.026749][T15121] openvswitch: netlink: Key type 254 is out of range max 32 [ 412.047427][T15122] openvswitch: netlink: Key type 254 is out of range max 32 [ 412.307344][T15141] tipc: Enabled bearer , priority 10 [ 412.492952][T15157] tipc: Enabled bearer , priority 10 [ 412.504906][T15158] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2245'. [ 412.532648][T15159] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2246'. [ 412.561050][T15157] bridge6: entered allmulticast mode [ 412.578677][T15159] team0: No ports can be present during mode change [ 412.589266][T15159] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2246'. [ 412.601410][T15159] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2246'. [ 412.885098][T15173] warn_alloc: 1 callbacks suppressed [ 412.885117][T15173] syz.2.2250: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 412.938932][T15173] CPU: 1 UID: 0 PID: 15173 Comm: syz.2.2250 Not tainted syzkaller #0 PREEMPT(full) [ 412.938962][T15173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 412.938977][T15173] Call Trace: [ 412.938986][T15173] [ 412.938996][T15173] dump_stack_lvl+0x189/0x250 [ 412.939033][T15173] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 412.939071][T15173] ? __pfx_dump_stack_lvl+0x10/0x10 [ 412.939112][T15173] ? __pfx__printk+0x10/0x10 [ 412.939136][T15173] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 412.939167][T15173] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 412.939221][T15173] warn_alloc+0x214/0x310 [ 412.939263][T15173] ? __pfx_warn_alloc+0x10/0x10 [ 412.939309][T15173] ? __get_vm_area_node+0x28f/0x300 [ 412.939341][T15173] ? hash_ipmac_create+0x358/0xfe0 [ 412.939381][T15173] __vmalloc_node_range_noprof+0x690/0x12d0 [ 412.939417][T15173] ? __alloc_frozen_pages_noprof+0x9f/0x370 [ 412.939468][T15173] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 412.939501][T15173] ? hash_ipmac_create+0x358/0xfe0 [ 412.939537][T15173] ? rcu_is_watching+0x15/0xb0 [ 412.939568][T15173] ? hash_ipmac_create+0x358/0xfe0 [ 412.939600][T15173] __kvmalloc_node_noprof+0x674/0x910 [ 412.939635][T15173] ? hash_ipmac_create+0x358/0xfe0 [ 412.939666][T15173] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 412.939698][T15173] ? hash_ipmac_create+0x2fe/0xfe0 [ 412.939737][T15173] hash_ipmac_create+0x358/0xfe0 [ 412.939776][T15173] ? __nla_parse+0x40/0x60 [ 412.939794][T15173] ? __pfx_hash_ipmac_create+0x10/0x10 [ 412.939822][T15173] ip_set_create+0xa97/0x1940 [ 412.939839][T15173] ? ip_set_create+0x4a2/0x1940 [ 412.939866][T15173] ? __pfx_ip_set_create+0x10/0x10 [ 412.939915][T15173] nfnetlink_rcv_msg+0xb4d/0x1130 [ 412.939933][T15173] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 412.939967][T15173] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 412.940013][T15173] ? __lock_acquire+0xab9/0xd20 [ 412.940044][T15173] netlink_rcv_skb+0x208/0x470 [ 412.940065][T15173] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 412.940084][T15173] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 412.940116][T15173] ? bpf_lsm_capable+0x9/0x20 [ 412.940138][T15173] ? security_capable+0x7e/0x2e0 [ 412.940169][T15173] nfnetlink_rcv+0x282/0x2590 [ 412.940188][T15173] ? unwind_get_return_address+0x4d/0x90 [ 412.940217][T15173] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 412.940240][T15173] ? arch_stack_walk+0xfc/0x150 [ 412.940273][T15173] ? stack_trace_save+0x9c/0xe0 [ 412.940298][T15173] ? stack_depot_save_flags+0x40/0x860 [ 412.940327][T15173] ? stack_trace_save+0x9c/0xe0 [ 412.940353][T15173] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 412.940368][T15173] ? kasan_save_track+0x4f/0x80 [ 412.940393][T15173] ? kasan_save_track+0x3e/0x80 [ 412.940417][T15173] ? __kasan_slab_alloc+0x6c/0x80 [ 412.940443][T15173] ? kmem_cache_alloc_node_noprof+0x433/0x710 [ 412.940469][T15173] ? kmalloc_reserve+0xbd/0x290 [ 412.940486][T15173] ? __alloc_skb+0x27e/0x430 [ 412.940503][T15173] ? netlink_sendmsg+0x5c6/0xb30 [ 412.940529][T15173] ? __lock_acquire+0xab9/0xd20 [ 412.940573][T15173] ? __lock_acquire+0xab9/0xd20 [ 412.940606][T15173] ? netlink_deliver_tap+0x2e/0x1b0 [ 412.940639][T15173] ? netlink_deliver_tap+0x2e/0x1b0 [ 412.940675][T15173] netlink_unicast+0x82f/0x9e0 [ 412.940707][T15173] ? __pfx_netlink_unicast+0x10/0x10 [ 412.940731][T15173] ? netlink_sendmsg+0x642/0xb30 [ 412.940753][T15173] ? skb_put+0x11b/0x210 [ 412.940781][T15173] netlink_sendmsg+0x805/0xb30 [ 412.940818][T15173] ? __pfx_netlink_sendmsg+0x10/0x10 [ 412.940848][T15173] ? aa_sock_msg_perm+0xf1/0x1d0 [ 412.940883][T15173] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 412.940904][T15173] ? __pfx_netlink_sendmsg+0x10/0x10 [ 412.940931][T15173] __sock_sendmsg+0x21c/0x270 [ 412.940969][T15173] ____sys_sendmsg+0x505/0x830 [ 412.941003][T15173] ? __pfx_____sys_sendmsg+0x10/0x10 [ 412.941041][T15173] ? import_iovec+0x74/0xa0 [ 412.941074][T15173] ___sys_sendmsg+0x21f/0x2a0 [ 412.941105][T15173] ? __pfx____sys_sendmsg+0x10/0x10 [ 412.941176][T15173] ? __fget_files+0x2a/0x420 [ 412.941197][T15173] ? __fget_files+0x3a0/0x420 [ 412.941243][T15173] __x64_sys_sendmsg+0x19b/0x260 [ 412.941274][T15173] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 412.941323][T15173] ? do_syscall_64+0xbe/0xfa0 [ 412.941351][T15173] do_syscall_64+0xfa/0xfa0 [ 412.941373][T15173] ? lockdep_hardirqs_on+0x9c/0x150 [ 412.941397][T15173] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.941419][T15173] ? clear_bhb_loop+0x60/0xb0 [ 412.941446][T15173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.941468][T15173] RIP: 0033:0x7fe382d8f749 [ 412.941489][T15173] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 412.941508][T15173] RSP: 002b:00007fe383c1d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 412.941532][T15173] RAX: ffffffffffffffda RBX: 00007fe382fe6090 RCX: 00007fe382d8f749 [ 412.941548][T15173] RDX: 0000000020000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 412.941563][T15173] RBP: 00007fe382e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 412.941576][T15173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 412.941589][T15173] R13: 00007fe382fe6128 R14: 00007fe382fe6090 R15: 00007ffff0379508 [ 412.941624][T15173] [ 412.941752][T15173] Mem-Info: [ 413.052751][T15169] netlink: 'syz.0.2249': attribute type 27 has an invalid length. [ 413.067007][T15173] active_anon:6787 inactive_anon:0 isolated_anon:0 [ 413.067007][T15173] active_file:3335 inactive_file:40001 isolated_file:0 [ 413.067007][T15173] unevictable:768 dirty:78 writeback:0 [ 413.067007][T15173] slab_reclaimable:11917 slab_unreclaimable:184821 [ 413.067007][T15173] mapped:30485 shmem:2340 pagetables:1235 [ 413.067007][T15173] sec_pagetables:0 bounce:0 [ 413.067007][T15173] kernel_misc_reclaimable:0 [ 413.067007][T15173] free:1230302 free_pcp:24904 free_cma:0 [ 413.535467][T15173] Node 0 active_anon:31312kB inactive_anon:0kB active_file:13340kB inactive_file:159808kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:129992kB dirty:312kB writeback:0kB shmem:12068kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13948kB pagetables:5132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 413.575478][ T3097] tipc: Node number set to 3388680506 [ 413.582501][T15173] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 413.643607][T15173] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 413.676014][T15173] lowmem_reserve[]: 0 2504 2505 2505 2505 [ 413.681834][T15173] Node 0 DMA32 free:1007116kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:31412kB inactive_anon:0kB active_file:13340kB inactive_file:159808kB unevictable:1536kB writepending:312kB zspages:0kB present:3129332kB managed:2565100kB mlocked:0kB bounce:0kB free_pcp:84548kB local_pcp:65132kB free_cma:0kB [ 413.723226][T15191] tipc: Enabled bearer , priority 0 [ 413.733948][T15193] syzkaller0: entered promiscuous mode [ 413.734011][T15173] lowmem_reserve[]: [ 413.741865][T15193] syzkaller0: entered allmulticast mode [ 413.742509][T15173] 0 0 0 0 0 [ 413.757253][T15173] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 413.758646][T15191] tipc: Resetting bearer [ 413.844584][T15173] lowmem_reserve[]: 0 0 0 0 0 [ 413.855435][T15173] Node 1 Normal free:3896256kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:13440kB local_pcp:6976kB free_cma:0kB [ 413.889278][T15173] lowmem_reserve[]: 0 0 0 0 0 [ 413.894074][T15173] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 413.907953][T15190] tipc: Resetting bearer [ 413.957855][T15190] tipc: Disabling bearer [ 413.961175][T15173] Node 0 DMA32: 751*4kB (UME) 466*8kB (UME) 1*16kB (E) 341*32kB (UM) 78*64kB (UME) 40*128kB (UME) 26*256kB (UM) 10*512kB (UME) 19*1024kB (UE) 8*2048kB (UME) 228*4096kB (UM) = 1009276kB [ 414.039611][T15173] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 414.076798][T15173] Node 1 Normal: 172*4kB (UM) 54*8kB (UME) 56*16kB (UME) 163*32kB (UME) 32*64kB (UME) 9*128kB (UME) 9*256kB (UME) 5*512kB (UME) 4*1024kB (UME) 1*2048kB (U) 946*4096kB (M) = 3896256kB [ 414.136011][T15173] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 414.164541][T15173] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 414.208439][T15173] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 414.231451][T15173] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 414.241650][T15173] 44697 total pagecache pages [ 414.288009][T15173] 0 pages in swap cache [ 414.292222][T15173] Free swap = 124996kB [ 414.328450][T15173] Total swap = 124996kB [ 414.332672][T15173] 2097051 pages RAM [ 414.342633][T15173] 0 pages HighMem/MovableOnly [ 414.369164][T15173] 424134 pages reserved [ 414.379749][T15227] openvswitch: netlink: nsh attr 60 is out of range max 3 [ 414.396695][T15173] 0 pages cma reserved [ 414.407463][T15227] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 414.745211][T15237] bond6: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 414.809663][T15237] bond6 (unregistering): Released all slaves [ 414.856479][T15246] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2265'. [ 414.892281][T15242] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 415.083095][T15254] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2268'. [ 415.161190][T15254] netlink: 'syz.3.2268': attribute type 1 has an invalid length. [ 415.165104][T15252] lo speed is unknown, defaulting to 1000 [ 415.256706][T15261] x_tables: duplicate underflow at hook 1 [ 415.427270][T15252] wg1 speed is unknown, defaulting to 1000 [ 415.444818][T15261] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2267'. [ 415.743529][T15273] bond6: option miimon: invalid value (18446744073709551607) [ 415.753969][T15273] bond6: option miimon: allowed values 0 - 2147483647 [ 415.808068][T15273] bond6 (unregistering): Released all slaves [ 416.010371][T15293] x_tables: duplicate underflow at hook 1 [ 416.155431][T15298] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2277'. [ 417.184045][T15334] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2287'. [ 417.277367][T15342] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 417.297918][T15334] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2287'. [ 417.491112][T15350] netlink: 'syz.2.2292': attribute type 13 has an invalid length. [ 417.654883][T15358] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2293'. [ 417.724939][T15360] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2294'. [ 417.755320][T15362] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2295'. [ 417.973861][T15376] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2299'. [ 417.986783][T15374] batman_adv: batadv0: Adding interface: macsec1 [ 417.993370][T15374] batman_adv: batadv0: The MTU of interface macsec1 is too small (1052) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 418.019697][T15374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.031771][T15374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.043407][T15374] batman_adv: batadv0: Interface activated: macsec1 [ 418.054448][T15376] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 418.080151][T15377] ip6tnl1: entered promiscuous mode [ 418.492554][T15402] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2308'. [ 418.564247][T15405] netlink: 'syz.5.2307': attribute type 8 has an invalid length. [ 418.593337][T15405] sch_fq: defrate 0 ignored. [ 418.634052][T15408] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2309'. [ 418.790235][T15421] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2314'. [ 419.870919][T15443] tipc: Started in network mode [ 419.885779][T15443] tipc: Node identity b6c3d0b00a0c, cluster identity 4711 [ 419.893126][T15443] tipc: Enabled bearer , priority 0 [ 419.963719][T15454] Cannot find set identified by id 1 to match [ 420.027976][T15453] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2323'. [ 420.644835][T15441] tipc: Disabling bearer [ 420.680379][T15477] lo speed is unknown, defaulting to 1000 [ 420.691721][T15484] xt_TCPMSS: Only works on TCP SYN packets [ 420.701186][T15477] wg1 speed is unknown, defaulting to 1000 [ 420.839677][T15493] Cannot find del_set index 4 as target [ 420.855331][T15491] ipvlan2: entered promiscuous mode [ 420.862231][T15491] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 420.871970][T15491] team0: Device ipvlan2 is already an upper device of the team interface [ 421.243126][T15511] IPVS: length: 29 != 24 [ 421.381353][T15512] bond7: down delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 421.406669][T15512] bond7: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-alb(6) [ 421.437437][T15512] bond7 (unregistering): Released all slaves [ 421.588170][T15534] netlink: 'syz.0.2344': attribute type 15 has an invalid length. [ 421.623826][T15537] dvmrp1: entered allmulticast mode [ 421.683244][T15534] dvmrp1: left allmulticast mode [ 421.779470][T15518] lo speed is unknown, defaulting to 1000 [ 421.810379][T15518] wg1 speed is unknown, defaulting to 1000 [ 422.026202][T15547] lo: Caught tx_queue_len zero misconfig [ 422.263537][T15563] RDS: rds_bind could not find a transport for fc01::1, load rds_tcp or rds_rdma? [ 422.367815][T15563] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 423.015400][T15591] __nla_validate_parse: 4 callbacks suppressed [ 423.015428][T15591] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2359'. [ 423.131334][T15601] netlink: 'syz.4.2362': attribute type 8 has an invalid length. [ 423.207358][T15605] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 1, id = 0 [ 423.265857][T15612] netlink: 'syz.4.2365': attribute type 4 has an invalid length. [ 423.433129][T15621] siw: device registration error -23 [ 423.805306][T15646] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2375'. [ 423.822116][T15647] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2375'. [ 423.852311][T15646] netlink: 'syz.2.2375': attribute type 26 has an invalid length. [ 424.019207][T15659] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2380'. [ 424.054295][T15658] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2379'. [ 424.064807][T15658] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2379'. [ 424.074453][T15658] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2379'. [ 424.687279][T15699] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2390'. [ 424.722749][T15699] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2390'. [ 424.728447][T15704] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2387'. [ 425.087663][T15708] netlink: set zone limit has 4 unknown bytes [ 426.519326][T15715] vxcan2: entered allmulticast mode [ 426.855407][T15734] netlink: 'syz.0.2401': attribute type 10 has an invalid length. [ 426.881292][T15734] batman_adv: batadv0: Adding interface: macvtap0 [ 426.889776][T15734] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 426.920570][T15730] netlink: 'syz.2.2399': attribute type 178 has an invalid length. [ 426.932533][T15734] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active [ 426.984555][T15734] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 427.016836][T15734] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 427.036127][T15734] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 427.315158][T15756] lo speed is unknown, defaulting to 1000 [ 427.463403][T15757] lo speed is unknown, defaulting to 1000 [ 427.509185][T15756] wg1 speed is unknown, defaulting to 1000 [ 427.608318][T15757] wg1 speed is unknown, defaulting to 1000 [ 427.771169][T15773] 8021q: adding VLAN 0 to HW filter on device bond7 [ 427.871783][T15772] x_tables: ip_tables: osf match: only valid for protocol 6 [ 428.297419][T15795] __nla_validate_parse: 6 callbacks suppressed [ 428.297441][T15795] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2414'. [ 428.358165][T15792] bridge7: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 428.447425][T15772] lo speed is unknown, defaulting to 1000 [ 428.521281][T15772] wg1 speed is unknown, defaulting to 1000 [ 428.619107][T15798] lo speed is unknown, defaulting to 1000 [ 428.648765][T15798] wg1 speed is unknown, defaulting to 1000 [ 429.450709][T15829] netlink: 'syz.4.2420': attribute type 6 has an invalid length. [ 429.468681][T15828] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2422'. [ 429.561466][T15833] netlink: 'syz.5.2424': attribute type 15 has an invalid length. [ 429.596470][T15833] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2424'. [ 429.905547][ T7645] lo speed is unknown, defaulting to 1000 [ 429.916856][T15845] netlink: 67 bytes leftover after parsing attributes in process `syz.3.2429'. [ 429.916856][T15846] netlink: 67 bytes leftover after parsing attributes in process `syz.3.2429'. [ 429.917031][ T7645] syz2: Port: 1 Link DOWN [ 430.284127][T15857] netlink: 'syz.5.2433': attribute type 13 has an invalid length. [ 430.336344][T15857] netlink: 'syz.5.2433': attribute type 17 has an invalid length. [ 430.381096][T15857] erspan0: entered promiscuous mode [ 430.438481][T15857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 430.470959][T15857] 8021q: adding VLAN 0 to HW filter on device team0 [ 430.481510][T15864] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 430.517346][T15875] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2435'. [ 430.548025][T15857] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 430.591067][T15861] netlink: 'syz.3.2435': attribute type 1 has an invalid length. [ 430.639484][T15866] lo speed is unknown, defaulting to 1000 [ 430.646257][T15861] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2435'. [ 430.648468][T15866] wg1 speed is unknown, defaulting to 1000 [ 430.968985][T15879] netlink: 'syz.4.2437': attribute type 11 has an invalid length. [ 431.008732][T15886] lo speed is unknown, defaulting to 1000 [ 431.018076][T15886] wg1 speed is unknown, defaulting to 1000 [ 431.253325][T15903] netlink: 'syz.2.2442': attribute type 3 has an invalid length. [ 431.738434][T15932] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.2448'. [ 432.029764][T15942] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2451'. [ 432.047128][T15943] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2450'. [ 432.054806][T15942] mac80211_hwsim hwsim10 wlan1: Device is already in use. [ 432.127447][T15942] mac80211_hwsim hwsim10 wlan1 (unregistering): left promiscuous mode [ 432.145236][T15946] tipc: Failed to remove unknown binding: 66,1,1/3388680506:3931110896/3931110898 [ 432.194428][T15946] tipc: Failed to remove unknown binding: 66,1,1/3388680506:3931110896/3931110898 [ 432.218704][T15946] tipc: Failed to remove unknown binding: 66,1,1/3388680506:3931110896/3931110898 [ 432.350728][T15957] macvlan2: entered promiscuous mode [ 432.371741][T15957] bond0: entered promiscuous mode [ 432.386956][T15957] macvlan2: entered allmulticast mode [ 432.421799][T15957] bond0: entered allmulticast mode [ 432.439876][T15957] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 432.465453][T15957] bond0: left allmulticast mode [ 432.486344][T15957] bond0: left promiscuous mode [ 432.634577][T15966] Bluetooth: MGMT ver 1.23 [ 432.786990][T15976] IPVS: set_ctl: invalid protocol: 50 224.0.0.1:20004 [ 432.806296][T15981] IPVS: set_ctl: invalid protocol: 50 224.0.0.1:20004 [ 432.864248][T15987] syzkaller0: entered promiscuous mode [ 432.871222][T15987] syzkaller0: entered allmulticast mode [ 433.267787][T16017] openvswitch: netlink: nsh attribute has 996 unknown bytes. [ 433.299525][T16017] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 433.439397][T16024] __nla_validate_parse: 4 callbacks suppressed [ 433.439416][T16024] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2471'. [ 433.738748][T16041] bond1: up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 433.748824][T16041] bond1: down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 433.773910][T16041] netlink: 356 bytes leftover after parsing attributes in process `syz.5.2475'. [ 433.806031][T16050] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2478'. [ 433.857537][T16056] tipc: Enabled bearer , priority 0 [ 433.865787][T16055] syzkaller0: entered promiscuous mode [ 433.871306][T16055] syzkaller0: entered allmulticast mode [ 433.942718][T16057] tipc: Resetting bearer [ 434.012720][T16057] tipc: Disabling bearer [ 434.026155][T16065] netlink: 200 bytes leftover after parsing attributes in process `syz.4.2482'. [ 434.041120][T16065] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2482'. [ 434.263244][T16073] lo speed is unknown, defaulting to 1000 [ 434.280156][T16073] wg1 speed is unknown, defaulting to 1000 [ 434.684774][T16087] netlink: 'syz.0.2488': attribute type 27 has an invalid length. [ 434.984873][T16087] veth1_vlan: left allmulticast mode [ 434.991378][T16087] macvlan0: left allmulticast mode [ 435.023893][T16087] macsec1: left promiscuous mode [ 435.052769][T16087] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 435.072044][T16087] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 435.093307][T16087] ip6gre2: left promiscuous mode [ 435.126698][T16087] geneve2: left allmulticast mode [ 435.202247][T16087] vlan3: left promiscuous mode [ 435.232284][T16087] veth5: left promiscuous mode [ 435.250358][T16087] bond5: left promiscuous mode [ 435.255540][T16087] bridge5: left promiscuous mode [ 435.261469][T16087] bond5: left allmulticast mode [ 435.267242][T16087] bridge5: left allmulticast mode [ 435.334294][T16089] bridge0: left promiscuous mode [ 435.342600][T16089] 8021q: adding VLAN 0 to HW filter on device bond0 [ 435.351265][T16089] 8021q: adding VLAN 0 to HW filter on device team0 [ 435.360750][T16089] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 435.557731][T16116] bridge4: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 435.621982][T16124] bridge9: entered allmulticast mode [ 435.743810][T16129] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2496'. [ 435.769724][T16129] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2496'. [ 435.861187][T16135] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2497'. [ 435.898894][T16137] tipc: Enabled bearer , priority 0 [ 435.916880][T16137] syzkaller0: entered promiscuous mode [ 435.936321][T16137] syzkaller0: entered allmulticast mode [ 435.954880][T16139] I°Qþ¿: renamed from veth0_macvtap [ 436.013544][T16137] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 436.052562][T16137] tipc: Resetting bearer [ 436.068494][T16136] tipc: Resetting bearer [ 436.092118][T16136] tipc: Disabling bearer [ 436.277835][T16143] lo speed is unknown, defaulting to 1000 [ 436.285529][T16143] wg1 speed is unknown, defaulting to 1000 [ 436.926887][T16164] tipc: Enabling of bearer rejected, already enabled [ 437.398199][T16179] lo speed is unknown, defaulting to 1000 [ 437.425357][T16182] lo speed is unknown, defaulting to 1000 [ 437.433745][T16182] wg1 speed is unknown, defaulting to 1000 [ 437.447853][T16179] wg1 speed is unknown, defaulting to 1000 [ 437.468013][T16190] IPVS: set_ctl: invalid protocol: 60 0.0.0.0:20002 [ 438.019629][T16214] openvswitch: netlink: nsh attribute has 65288 unknown bytes. [ 438.058137][T16214] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 438.187810][T16205] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2518'. [ 438.199270][T16205] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2518'. [ 438.279798][T16209] lo speed is unknown, defaulting to 1000 [ 438.300176][T16209] wg1 speed is unknown, defaulting to 1000 [ 438.570142][T16222] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 438.802715][T16237] lo speed is unknown, defaulting to 1000 [ 438.819705][T16237] wg1 speed is unknown, defaulting to 1000 [ 438.929649][T16246] __nla_validate_parse: 4 callbacks suppressed [ 438.929672][T16246] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2529'. [ 439.048685][T16251] netlink: 'syz.5.2530': attribute type 1 has an invalid length. [ 439.068263][T16251] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2530'. [ 439.148094][T16253] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2531'. [ 439.807065][T16297] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2543'. [ 439.883836][T16295] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2542'. [ 439.936732][T16301] sctp: [Deprecated]: syz.4.2542 (pid 16301) Use of int in max_burst socket option. [ 439.936732][T16301] Use struct sctp_assoc_value instead [ 440.121649][T16319] netlink: 'syz.5.2547': attribute type 10 has an invalid length. [ 440.130034][T16319] netlink: 2 bytes leftover after parsing attributes in process `syz.5.2547'. [ 440.139756][T16319] bridge0: port 3(bond0) entered blocking state [ 440.148442][T16319] bridge0: port 3(bond0) entered disabled state [ 440.155110][T16319] bond0: entered allmulticast mode [ 440.160595][T16319] bond_slave_0: entered allmulticast mode [ 440.167017][T16319] bond_slave_1: entered allmulticast mode [ 440.181485][T16319] bridge0: port 3(bond0) entered blocking state [ 440.188008][T16319] bridge0: port 3(bond0) entered listening state [ 440.369935][T16329] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2550'. [ 440.424205][T16329] netlink: 'syz.0.2550': attribute type 1 has an invalid length. [ 440.433370][T16329] netlink: 'syz.0.2550': attribute type 2 has an invalid length. [ 440.689173][T16349] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.745441][T16350] syzkaller0: entered promiscuous mode [ 440.758359][T16350] syzkaller0: entered allmulticast mode [ 440.776590][T16349] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.850095][T16349] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.923450][T16349] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.091435][ T6694] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.144326][ T5937] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.171935][ T5937] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.194371][ T5937] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.234213][T16373] openvswitch: netlink: IP tunnel dst address not specified [ 441.288456][T16373] bond5: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 441.306279][T16378] netlink: 'syz.0.2563': attribute type 3 has an invalid length. [ 441.308074][T16373] bond5 (unregistering): Released all slaves [ 441.333376][T16378] netlink: 'syz.0.2563': attribute type 1 has an invalid length. [ 441.572519][T16395] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2567'. [ 441.621954][T16397] netlink: 'syz.4.2569': attribute type 1 has an invalid length. [ 441.706231][T16397] 8021q: adding VLAN 0 to HW filter on device bond7 [ 441.767970][T16402] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2570'. [ 441.804288][T16399] 8021q: adding VLAN 0 to HW filter on device bond7 [ 441.815412][T16399] bond7: (slave vxcan1): The slave device specified does not support setting the MAC address [ 441.827640][T16399] bond7: (slave vxcan1): Error -95 calling set_mac_address [ 441.901478][T16397] veth11: entered promiscuous mode [ 441.911760][T16397] bond7: (slave veth11): Enslaving as an active interface with a down link [ 442.042141][T16411] can: request_module (can-proto-4) failed. [ 442.188346][T16416] dvmrp1: tun_chr_ioctl cmd 2148553947 [ 442.569637][T16438] netlink: 'syz.5.2577': attribute type 10 has an invalid length. [ 442.581509][T16438] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 442.595333][T16438] batadv0: entered promiscuous mode [ 442.602251][T16438] batadv0: entered allmulticast mode [ 442.609411][T16438] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 442.714890][T16445] lo speed is unknown, defaulting to 1000 [ 442.743136][T16445] wg1 speed is unknown, defaulting to 1000 [ 442.835462][ T9289] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 442.845398][ T9289] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 442.878254][T16452] netlink: 'syz.2.2583': attribute type 11 has an invalid length. [ 442.888510][T16452] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2583'. [ 443.441700][T16481] netlink: 'syz.0.2593': attribute type 3 has an invalid length. [ 443.654846][T16491] bond0: Caught tx_queue_len zero misconfig [ 443.941453][T16506] __nla_validate_parse: 4 callbacks suppressed [ 443.941474][T16506] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2602'. [ 444.082803][T16514] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2605'. [ 444.092230][T16514] nbd: illegal input index 65508 [ 444.125559][T16516] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2604'. [ 444.134982][T16516] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2604'. [ 444.145951][T16516] netlink: 'syz.2.2604': attribute type 11 has an invalid length. [ 444.154717][T16516] netlink: 199828 bytes leftover after parsing attributes in process `syz.2.2604'. [ 444.172785][T16516] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2604'. [ 444.201034][T16516] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2604'. [ 444.227795][T16519] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2604'. [ 444.254082][T16520] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2606'. [ 444.271738][T16520] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2606'. [ 444.281566][T16520] netlink: 'syz.5.2606': attribute type 1 has an invalid length. [ 444.409039][T16524] macsec2: entered promiscuous mode [ 444.414737][T16524] macsec2: entered allmulticast mode [ 444.626646][T16528] lo speed is unknown, defaulting to 1000 [ 444.638039][T16528] wg1 speed is unknown, defaulting to 1000 [ 444.700468][T16532] netlink: 'syz.5.2609': attribute type 11 has an invalid length. [ 444.713099][T16532] netlink: 'syz.5.2609': attribute type 11 has an invalid length. [ 445.272911][T16536] lo speed is unknown, defaulting to 1000 [ 445.283313][T16543] tipc: Enabled bearer , priority 0 [ 445.304732][T16543] syzkaller0: entered promiscuous mode [ 445.348352][T16543] syzkaller0: entered allmulticast mode [ 445.370222][T16536] wg1 speed is unknown, defaulting to 1000 [ 445.443780][T16529] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 445.515100][T16546] tipc: Resetting bearer [ 445.593889][T16537] tipc: Resetting bearer [ 445.684713][T16537] tipc: Disabling bearer [ 446.089350][T16569] IPVS: Scheduler module ip_vs_sip not found [ 446.668777][T16603] batman_adv: batadv0: Removing interface: macvtap0 [ 446.682380][T16603] bond5: (slave bridge5): Releasing backup interface [ 446.694512][T16603] bond6: (slave gretap1): Releasing active interface [ 446.951305][T16621] IPv6: Can't replace route, no match found [ 447.003086][T16622] syzkaller1: entered promiscuous mode [ 447.019088][T16622] syzkaller1: entered allmulticast mode [ 447.068773][T16626] netlink: 'syz.0.2638': attribute type 12 has an invalid length. [ 447.100424][T16626] netlink: 'syz.0.2638': attribute type 4 has an invalid length. [ 448.111229][T16666] bridge5: entered allmulticast mode [ 448.388750][T16678] vlan3: entered promiscuous mode [ 448.429029][T16678] vlan3: entered allmulticast mode [ 448.441825][T16678] hsr_slave_1: entered allmulticast mode [ 448.868825][T16697] lo speed is unknown, defaulting to 1000 [ 448.909092][T16697] wg1 speed is unknown, defaulting to 1000 [ 449.173458][T16711] __nla_validate_parse: 12 callbacks suppressed [ 449.173481][T16711] netlink: 180 bytes leftover after parsing attributes in process `syz.5.2659'. [ 449.496349][T16729] bond8: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 449.535556][T16729] bond8 (unregistering): Released all slaves [ 449.844754][T16748] atomic_op ffff888031e3c198 conn xmit_atomic 0000000000000000 [ 449.869842][T16742] nbd1: detected capacity change from 0 to 127 [ 449.948074][T16752] netlink: 240 bytes leftover after parsing attributes in process `syz.2.2665'. [ 449.989355][T16755] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2668'. [ 450.007425][ T5835] block nbd1: Receive control failed (result -32) [ 450.033420][T16756] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2668'. [ 450.730358][T16771] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2673'. [ 450.780077][T16773] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2674'. [ 450.808441][T16773] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2674'. [ 450.829726][T16776] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2675'. [ 450.954011][T16780] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2676'. [ 451.103431][T16785] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2678'. [ 451.232818][T16780] Cannot find set identified by id 1 to match [ 451.330142][T16788] lo speed is unknown, defaulting to 1000 [ 451.386419][T16788] wg1 speed is unknown, defaulting to 1000 [ 451.961704][T16810] netlink: 'syz.5.2685': attribute type 15 has an invalid length. [ 452.268533][T16820] netlink: 'syz.2.2690': attribute type 4 has an invalid length. [ 452.318493][T16820] netlink: 'syz.2.2690': attribute type 4 has an invalid length. [ 452.623282][T16820] syz_tun: left promiscuous mode [ 452.671457][T16820] batman_adv: batadv0: Interface deactivated: macsec1 [ 452.695732][ T9289] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 452.705157][ T9289] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 452.714442][ T9289] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 452.742589][T16844] tipc: Enabled bearer , priority 10 [ 452.761388][T16836] tipc: Enabling of bearer rejected, failed to enable media [ 452.794952][ T9289] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 452.817357][ T9289] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 452.828197][ T9289] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 452.851112][ T9289] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 452.866792][ T9289] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 452.902869][ T9289] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 452.915525][ T9289] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 452.925251][ T9289] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 452.934117][ T9289] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 453.000364][T16859] tipc: Enabled bearer , priority 0 [ 453.022273][T16854] syzkaller0: entered promiscuous mode [ 453.080992][T16854] syzkaller0: entered allmulticast mode [ 453.151649][T16866] macvtap1: entered promiscuous mode [ 453.175950][T16866] batadv0: entered promiscuous mode [ 453.196931][T16866] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 453.226996][T16866] batadv0: left promiscuous mode [ 453.314391][T16854] tipc: Resetting bearer [ 453.360068][T16854] tipc: Disabling bearer [ 453.448382][T16884] lo speed is unknown, defaulting to 1000 [ 453.456791][T16884] wg1 speed is unknown, defaulting to 1000 [ 453.666154][T16890] tipc: Enabling of bearer rejected, already enabled [ 453.689309][T16905] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 453.705690][T16905] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 453.982256][T16924] pimreg: entered allmulticast mode [ 454.044642][T16924] pimreg: left allmulticast mode [ 454.129006][T16923] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 454.451270][T16946] __nla_validate_parse: 13 callbacks suppressed [ 454.451292][T16946] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2724'. [ 454.569057][T16961] netlink: 'syz.3.2730': attribute type 1 has an invalid length. [ 454.579801][T16961] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2730'. [ 454.595292][T16964] tipc: Enabling of bearer rejected, failed to enable media [ 454.607403][T16961] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 455.090590][T16977] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 455.304529][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 455.335215][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 455.345957][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 455.357793][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 455.367261][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 455.388923][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 455.396861][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 455.407968][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 455.418446][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 455.428775][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 455.442125][T16988] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2736'. [ 455.453213][T16988] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2736'. [ 455.546786][T16993] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2738'. [ 455.557231][T16993] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2738'. [ 455.694152][T16982] lo speed is unknown, defaulting to 1000 [ 455.699246][ C0] bridge0: port 3(bond0) entered learning state [ 455.704824][T16982] wg1 speed is unknown, defaulting to 1000 [ 455.934932][T17009] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 64993 [ 455.992672][T17007] lo speed is unknown, defaulting to 1000 [ 456.010457][T17014] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2741'. [ 456.030354][T17014] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2741'. [ 456.040036][T17012] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2740'. [ 456.098540][T17007] wg1 speed is unknown, defaulting to 1000 [ 456.275559][T17027] nbd: must specify at least one socket [ 456.302598][T16982] chnl_net:caif_netlink_parms(): no params data found [ 456.391246][T17033] netlink: 'syz.2.2747': attribute type 2 has an invalid length. [ 456.403658][T17033] netlink: 'syz.2.2747': attribute type 2 has an invalid length. [ 456.411938][T17033] netlink: 23 bytes leftover after parsing attributes in process `syz.2.2747'. [ 456.616562][T17044] ip6gre1: entered promiscuous mode [ 456.630098][T17044] ip6gre1: entered allmulticast mode [ 456.764056][T16982] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.796544][T16982] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.823169][T16982] bridge_slave_0: entered allmulticast mode [ 456.837294][T16982] bridge_slave_0: entered promiscuous mode [ 456.853655][T16982] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.873902][T16982] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.890927][T16982] bridge_slave_1: entered allmulticast mode [ 456.916441][T16982] bridge_slave_1: entered promiscuous mode [ 457.060220][T16982] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 457.084630][T16982] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 457.098907][T17075] syzkaller0: entered promiscuous mode [ 457.115482][T17075] syzkaller0: entered allmulticast mode [ 457.283296][T16982] team0: Port device team_slave_0 added [ 457.308106][T16982] team0: Port device team_slave_1 added [ 457.394009][T16982] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 457.414775][T16982] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 457.423865][T17082] netlink: 'syz.4.2758': attribute type 3 has an invalid length. [ 457.452021][T16982] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 457.487189][T16982] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 457.504632][T16982] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 457.539222][ T5843] Bluetooth: hci0: command tx timeout [ 457.566796][T16982] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 457.748167][T17094] netlink: 'syz.4.2762': attribute type 14 has an invalid length. [ 457.803523][T16982] hsr_slave_0: entered promiscuous mode [ 457.822972][T16982] hsr_slave_1: entered promiscuous mode [ 457.829963][T16982] debugfs: 'hsr0' already exists in 'hsr' [ 457.836137][T16982] Cannot create hsr debugfs directory [ 459.402681][T17131] xt_CT: No such helper "netbios-ns" [ 459.626051][ T5843] Bluetooth: hci0: command tx timeout [ 460.057257][T17122] tipc: Enabling of bearer rejected, failed to enable media [ 460.078499][T17114] lo speed is unknown, defaulting to 1000 [ 460.153347][ T6694] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.268887][T17114] wg1 speed is unknown, defaulting to 1000 [ 460.269918][ T6694] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.304366][T17144] __nla_validate_parse: 6 callbacks suppressed [ 460.304385][T17144] netlink: 6 bytes leftover after parsing attributes in process `syz.4.2773'. [ 460.320626][T17144] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 460.339782][T17148] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.2775'. [ 460.359922][ T6694] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.387761][ T6694] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.419325][T17147] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 460.513766][T17150] lo speed is unknown, defaulting to 1000 [ 460.553534][T17150] wg1 speed is unknown, defaulting to 1000 [ 460.897445][T16982] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 460.975521][T16982] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 461.001408][T16982] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 461.039382][T16982] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 461.145843][T17161] : renamed from bond_slave_0 [ 461.283054][T17172] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2780'. [ 461.329952][T17175] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2779'. [ 461.353254][T17176] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2781'. [ 461.629850][T17185] netlink: 'syz.3.2783': attribute type 1 has an invalid length. [ 461.695853][ T5843] Bluetooth: hci0: command tx timeout [ 461.703706][T17185] 8021q: adding VLAN 0 to HW filter on device bond8 [ 461.768958][T17183] vlan3: entered allmulticast mode [ 461.797956][T17183] bond8: entered allmulticast mode [ 461.887443][T17191] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2785'. [ 461.988692][T16982] 8021q: adding VLAN 0 to HW filter on device bond0 [ 462.071270][T16982] 8021q: adding VLAN 0 to HW filter on device team0 [ 462.133311][ T9290] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.140530][ T9290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 462.198533][ T9288] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.205816][ T9288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 462.217777][T17203] syz.4.2790 uses old SIOCAX25GETINFO [ 462.463740][T17216] netlink: 'syz.2.2794': attribute type 1 has an invalid length. [ 462.875107][T17233] netlink: 'syz.4.2797': attribute type 6 has an invalid length. [ 462.889012][T17235] lo speed is unknown, defaulting to 1000 [ 462.906571][T17233] netlink: 'syz.4.2797': attribute type 6 has an invalid length. [ 462.957512][T17235] wg1 speed is unknown, defaulting to 1000 [ 463.235318][T16982] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 463.637267][T16982] veth0_vlan: entered promiscuous mode [ 463.663279][T16982] veth1_vlan: entered promiscuous mode [ 463.750764][T16982] veth0_macvtap: entered promiscuous mode [ 463.759209][T17265] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2805'. [ 463.772759][T16982] veth1_macvtap: entered promiscuous mode [ 463.784773][ T5843] Bluetooth: hci0: command tx timeout [ 463.795089][T17265] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2805'. [ 463.817192][T17265] netlink: 212096 bytes leftover after parsing attributes in process `syz.4.2805'. [ 463.851229][T16982] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 463.892161][T16982] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 463.949337][ T5937] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.970471][ T5937] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.000244][ T5937] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.050770][ T5937] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.203490][ T5937] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 464.212533][T17279] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2809'. [ 464.223085][ T5937] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 464.324267][ T5937] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 464.334376][ T5937] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 464.483809][T17290] lo speed is unknown, defaulting to 1000 [ 464.514118][T17290] wg1 speed is unknown, defaulting to 1000 [ 464.528255][T17295] lo speed is unknown, defaulting to 1000 [ 464.533345][T17297] netlink: 'syz.0.2731': attribute type 4 has an invalid length. [ 464.609266][T17297] nbd: couldn't find a device at index 0 [ 464.609549][T17295] wg1 speed is unknown, defaulting to 1000 [ 464.721930][T17298] lo speed is unknown, defaulting to 1000 [ 464.828237][T17298] wg1 speed is unknown, defaulting to 1000 [ 465.481970][T17324] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 465.490353][T17324] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 465.541741][T17324] __nla_validate_parse: 5 callbacks suppressed [ 465.541762][T17324] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2815'. [ 465.619937][T17328] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2818'. [ 465.651673][ T9288] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 465.652054][T17333] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2815'. [ 465.694152][ T9288] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 465.765974][T17338] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2817'. [ 465.983960][T17353] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2821'. [ 465.996653][T17351] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2819'. [ 466.027599][T17353] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2821'. [ 466.041372][T17353] netlink: 'syz.2.2821': attribute type 2 has an invalid length. [ 466.051089][T17353] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2821'. [ 466.809480][T17401] netlink: 'syz.4.2834': attribute type 11 has an invalid length. [ 466.991940][T17415] team0: Caught tx_queue_len zero misconfig [ 467.015268][T17413] netlink: 'syz.3.2837': attribute type 1 has an invalid length. [ 467.216934][T17434] mac80211_hwsim hwsim27 wlan1: entered allmulticast mode [ 467.264748][T17434] bond0: left allmulticast mode [ 467.281965][T17434] bond_slave_0: left allmulticast mode [ 467.293185][T17434] bond_slave_1: left allmulticast mode [ 467.303903][T17434] batadv0: left allmulticast mode [ 467.310088][T17434] bridge0: port 3(bond0) entered disabled state [ 467.339086][T17434] bond0: (slave batadv0): Releasing backup interface [ 467.363960][T17434] batadv0: left promiscuous mode [ 467.414414][T17443] IPv6: addrconf: prefix option has invalid lifetime [ 467.435488][T17434] bridge_slave_0: left allmulticast mode [ 467.441558][T17434] bridge_slave_0: left promiscuous mode [ 467.448214][T17434] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.471223][T17434] bridge_slave_1: left allmulticast mode [ 467.479487][T17434] bridge_slave_1: left promiscuous mode [ 467.485473][T17434] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.500964][T17434] bond0: (slave bond_slave_0): Releasing backup interface [ 467.510170][T17434] bond_slave_0: left promiscuous mode [ 467.550909][T17434] bond0: (slave bond_slave_1): Releasing backup interface [ 467.582579][T17434] bond_slave_1: left promiscuous mode [ 467.597402][T17434] team0: Port device team_slave_0 removed [ 467.609238][T17434] team0: Port device team_slave_1 removed [ 467.620855][T17434] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 467.630715][T17434] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 467.642845][T17434] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 467.714339][T17444] lo speed is unknown, defaulting to 1000 [ 467.722424][T17444] wg1 speed is unknown, defaulting to 1000 [ 468.114933][T17453] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 468.122257][T17453] IPv6: NLM_F_CREATE should be set when creating new route [ 468.133685][T17452] netlink: zone id is out of range [ 468.148915][T17452] netlink: zone id is out of range [ 468.167077][T17452] tunl0: Caught tx_queue_len zero misconfig [ 468.173037][T17452] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2849'. [ 468.220669][T17457] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2851'. [ 468.550432][T17485] Cannot find set identified by id 0 to match [ 468.641803][T17489] netlink: 'syz.4.2859': attribute type 6 has an invalid length. [ 468.683589][T17489] netlink: 'syz.4.2859': attribute type 6 has an invalid length. [ 469.007132][T17511] macsec3: entered promiscuous mode [ 469.012650][T17511] macsec3: entered allmulticast mode [ 469.310747][T17521] veth1_to_bond: entered allmulticast mode [ 469.377290][T17527] veth1_to_bond: left allmulticast mode [ 469.535914][T17533] lo speed is unknown, defaulting to 1000 [ 469.555115][T17533] wg1 speed is unknown, defaulting to 1000 [ 470.073527][T17526] lo speed is unknown, defaulting to 1000 [ 470.082914][T17526] wg1 speed is unknown, defaulting to 1000 [ 470.174198][T17554] lo speed is unknown, defaulting to 1000 [ 470.217072][T17565] sock: sock_set_timeout: `syz.0.2877' (pid 17565) tries to set negative timeout [ 470.230303][T17554] wg1 speed is unknown, defaulting to 1000 [ 470.749284][T17590] __nla_validate_parse: 33 callbacks suppressed [ 470.749306][T17590] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2882'. [ 470.786557][T17590] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2882'. [ 470.817553][T17590] tipc: Invalid UDP bearer configuration [ 470.817620][T17590] tipc: Enabling of bearer rejected, failed to enable media [ 471.196757][T17595] netlink: 'syz.5.2883': attribute type 1 has an invalid length. [ 471.236347][T17595] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2883'. [ 471.330545][T17599] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.339511][T17599] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.369629][T17601] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 471.420689][T17612] netlink: 'syz.3.2888': attribute type 1 has an invalid length. [ 471.544764][T17612] bond9: entered promiscuous mode [ 471.550325][T17612] 8021q: adding VLAN 0 to HW filter on device bond9 [ 471.682813][T17634] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2891'. [ 471.728690][T17635] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2891'. [ 471.760646][T17634] bridge_slave_1: left allmulticast mode [ 471.789555][T17634] bridge_slave_1: left promiscuous mode [ 471.795416][T17634] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.826451][T17643] trusted_key: syz.5.2894 sent an empty control message without MSG_MORE. [ 471.867827][T17643] netlink: 156 bytes leftover after parsing attributes in process `syz.5.2894'. [ 471.879292][T17634] bridge_slave_0: left allmulticast mode [ 471.885082][T17634] bridge_slave_0: left promiscuous mode [ 471.899158][T17634] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.020337][T17632] lo speed is unknown, defaulting to 1000 [ 472.035124][T17632] wg1 speed is unknown, defaulting to 1000 [ 472.075413][T17658] Bluetooth: MGMT ver 1.23 [ 472.142727][T17661] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2897'. [ 472.158266][T17662] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2897'. [ 472.181796][T17665] netlink: 'syz.5.2899': attribute type 1 has an invalid length. [ 472.225496][T17665] 8021q: adding VLAN 0 to HW filter on device bond3 [ 472.381051][T17665] bond3: (slave veth7): Enslaving as an active interface with a down link [ 472.398094][T17676] vlan4: entered allmulticast mode [ 472.403387][T17676] veth1: entered allmulticast mode [ 472.409978][T17676] bond3: (slave vlan4): Opening slave failed [ 472.460287][T17680] syzkaller0: entered promiscuous mode [ 472.466796][T17680] syzkaller0: entered allmulticast mode [ 472.869134][T17708] netlink: 'syz.4.2906': attribute type 10 has an invalid length. [ 472.929211][T17708] team0: Port device syz_tun added [ 472.965288][T17714] IPv6: Can't replace route, no match found [ 472.984173][T17704] lo speed is unknown, defaulting to 1000 [ 473.029292][T17704] wg1 speed is unknown, defaulting to 1000 [ 473.377143][T17739] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2912'. [ 473.599321][T17737] lo speed is unknown, defaulting to 1000 [ 473.609593][T17737] wg1 speed is unknown, defaulting to 1000 [ 473.853149][T17753] xt_HMARK: proto mask must be zero with L3 mode [ 474.935506][T17774] xt_recent: hitcount (262144) is larger than allowed maximum (65535) [ 474.937097][T17773] xt_recent: hitcount (262144) is larger than allowed maximum (65535) [ 476.232231][T17802] lo speed is unknown, defaulting to 1000 [ 476.268584][T17802] wg1 speed is unknown, defaulting to 1000 [ 476.380421][T17817] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.2928'. [ 476.428260][T17817] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 476.568623][T17819] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2926'. [ 476.614449][T17807] lo speed is unknown, defaulting to 1000 [ 476.718742][T17807] wg1 speed is unknown, defaulting to 1000 [ 477.097264][T17840] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2933'. [ 477.152490][T17842] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2934'. [ 477.381533][T17856] lo speed is unknown, defaulting to 1000 [ 477.422423][T17854] lo speed is unknown, defaulting to 1000 [ 477.434147][T17856] wg1 speed is unknown, defaulting to 1000 [ 477.473444][T17861] vlan4: entered promiscuous mode [ 477.493448][T17861] vlan4: entered allmulticast mode [ 477.504960][T17861] hsr_slave_1: entered allmulticast mode [ 477.651833][T17854] wg1 speed is unknown, defaulting to 1000 [ 477.652542][T17871] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2939'. [ 477.888804][T17879] batman_adv: batadv0: Adding interface: ip6gretap1 [ 477.895466][T17879] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 477.924423][T17879] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 477.953176][T17866] lo speed is unknown, defaulting to 1000 [ 477.968410][T17884] syzkaller0: entered allmulticast mode [ 477.992325][T17866] wg1 speed is unknown, defaulting to 1000 [ 478.214703][T17888] team0: Port device team_slave_1 removed [ 478.340722][T17896] veth0: entered promiscuous mode [ 478.348359][T17895] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2945'. [ 478.509563][T17895] veth0 (unregistering): left promiscuous mode [ 478.669101][T17898] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2946'. [ 478.880923][T17905] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2949'. [ 479.541386][T17925] lo speed is unknown, defaulting to 1000 [ 479.558202][T17924] lo speed is unknown, defaulting to 1000 [ 479.580772][T17925] wg1 speed is unknown, defaulting to 1000 [ 479.604789][T17938] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2958'. [ 479.618915][T17924] wg1 speed is unknown, defaulting to 1000 [ 479.711847][T17943] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2959'. [ 479.802274][T17945] æÿîÿ: entered promiscuous mode [ 480.215346][T17965] xfrm1: entered allmulticast mode [ 480.379178][T17967] netlink: 'syz.5.2968': attribute type 12 has an invalid length. [ 481.147991][T17993] syzkaller0: entered promiscuous mode [ 481.153526][T17993] syzkaller0: entered allmulticast mode [ 481.250064][T18011] geneve2: entered promiscuous mode [ 481.276528][ T9290] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.424227][T18019] netlink: 'syz.4.2978': attribute type 10 has an invalid length. [ 481.497746][T18023] __nla_validate_parse: 4 callbacks suppressed [ 481.497768][T18023] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2978'. [ 481.547176][T18023] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2978'. [ 481.602153][T18026] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2981'. [ 483.154294][ T9290] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.163109][ T9290] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.179484][T18012] tipc: Enabling of bearer rejected, failed to enable media [ 483.217773][T18023] macvlan0: entered allmulticast mode [ 483.223513][T18023] veth1_vlan: entered allmulticast mode [ 483.413443][T18035] lo speed is unknown, defaulting to 1000 [ 483.423661][T18040] netlink: 'syz.5.2984': attribute type 21 has an invalid length. [ 483.438240][T18035] wg1 speed is unknown, defaulting to 1000 [ 483.448912][T18034] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 483.450431][T18040] netlink: 'syz.5.2984': attribute type 22 has an invalid length. [ 483.545927][T18040] netlink: 'syz.5.2984': attribute type 23 has an invalid length. [ 483.567298][T18040] netlink: 'syz.5.2984': attribute type 25 has an invalid length. [ 483.575446][T18040] netlink: 'syz.5.2984': attribute type 26 has an invalid length. [ 483.583973][T18040] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2984'. [ 483.808483][T18055] macvlan0: entered promiscuous mode [ 484.000140][T18065] netlink: 124 bytes leftover after parsing attributes in process `syz.5.2991'. [ 484.010740][T18065] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2991'. [ 484.294127][T18084] x_tables: duplicate underflow at hook 1 [ 484.632838][T18100] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3001'. [ 484.643647][T18100] netlink: 6 bytes leftover after parsing attributes in process `syz.4.3001'. [ 484.774071][T18011] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.864681][T18011] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.960730][T18011] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.141192][ T6687] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.286616][T18117] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3005'. [ 485.314859][T18133] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3007'. [ 485.384888][T18011] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.512523][T18145] lo speed is unknown, defaulting to 1000 [ 485.528636][T18145] wg1 speed is unknown, defaulting to 1000 [ 485.748537][T18139] atm:sigd_send: bad message type 36 [ 485.995373][T18168] tipc: New replicast peer: 255.255.255.255 [ 486.004068][T18168] tipc: Enabled bearer , priority 10 [ 486.012204][T18168] netlink: 'syz.5.3017': attribute type 11 has an invalid length. [ 486.022004][T18168] netlink: 'syz.5.3017': attribute type 11 has an invalid length. [ 486.124505][T18171] netlink: 'syz.5.3018': attribute type 13 has an invalid length. [ 486.143088][T18171] netlink: 'syz.5.3018': attribute type 1 has an invalid length. [ 486.198526][T18174] lo speed is unknown, defaulting to 1000 [ 486.207316][T18174] wg1 speed is unknown, defaulting to 1000 [ 486.457925][T18186] .70·: renamed from hsr0 [ 486.468183][T18186] .70·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 486.480753][T18186] .70·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 486.513110][T18186] .70·: entered allmulticast mode [ 486.534657][T18186] hsr_slave_0: entered allmulticast mode [ 486.542952][T18186] hsr_slave_1: entered allmulticast mode [ 486.553490][T18186] A link change request failed with some changes committed already. Interface .70· may have been left with an inconsistent configuration, please check. [ 486.845165][T18198] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 486.958385][T18199] __nla_validate_parse: 7 callbacks suppressed [ 486.958405][T18199] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3028'. [ 486.964963][T18198] lo speed is unknown, defaulting to 1000 [ 486.997617][T18198] wg1 speed is unknown, defaulting to 1000 [ 487.011593][T18199] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3028'. [ 487.085926][ T5828] team0: Port device syz_tun removed [ 487.120412][T16837] tipc: Node number set to 3167735984 [ 487.128558][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 487.140881][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 487.149393][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 487.160451][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 487.169967][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 487.264460][T18205] netlink: 'syz.5.3030': attribute type 1 has an invalid length. [ 487.320506][T18205] 8021q: adding VLAN 0 to HW filter on device bond4 [ 487.330282][T18201] lo speed is unknown, defaulting to 1000 [ 487.411271][T18209] ip6gretap2: entered allmulticast mode [ 487.429492][T18209] bond4: (slave ip6gretap2): making interface the new active one [ 487.439877][T18209] bond4: (slave ip6gretap2): Enslaving as an active interface with an up link [ 487.467382][T18201] wg1 speed is unknown, defaulting to 1000 [ 487.800270][T18232] sit0: Caught tx_queue_len zero misconfig [ 487.844965][T18232] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3034'. [ 487.850952][T18201] chnl_net:caif_netlink_parms(): no params data found [ 487.907490][T18232] netlink: 35 bytes leftover after parsing attributes in process `syz.2.3034'. [ 488.104123][T18244] macvlan1: entered promiscuous mode [ 488.110430][T18201] bridge0: port 1(bridge_slave_0) entered blocking state [ 488.118768][T18201] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.127817][T18201] bridge_slave_0: entered allmulticast mode [ 488.136427][T18201] bridge_slave_0: entered promiscuous mode [ 488.152119][T18201] bridge0: port 2(bridge_slave_1) entered blocking state [ 488.153781][T18248] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg2, syncid = 0, id = 0 [ 488.171857][T18201] bridge0: port 2(bridge_slave_1) entered disabled state [ 488.207900][T18201] bridge_slave_1: entered allmulticast mode [ 488.229441][T18201] bridge_slave_1: entered promiscuous mode [ 488.339884][T18257] veth1_to_bond: entered allmulticast mode [ 488.349301][T18257] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3043'. [ 488.365194][T18201] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 488.365466][T18262] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3044'. [ 488.389423][T18201] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 488.400962][T18263] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3044'. [ 488.468344][T18257] veth1_to_bond (unregistering): left allmulticast mode [ 488.572506][T18201] team0: Port device team_slave_0 added [ 488.619840][T18201] team0: Port device team_slave_1 added [ 488.631029][T18271] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3045'. [ 488.706083][T18201] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 488.713081][T18201] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 488.747884][T18201] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 488.750704][T18271] netlink: 'syz.3.3045': attribute type 10 has an invalid length. [ 488.762575][T18201] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 488.774107][T18201] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 488.833303][T18201] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 488.983397][T18290] ip6gre0: Caught tx_queue_len zero misconfig [ 489.161459][T18201] hsr_slave_0: entered promiscuous mode [ 489.174423][T18201] hsr_slave_1: entered promiscuous mode [ 489.183596][T18201] debugfs: 'hsr0' already exists in 'hsr' [ 489.195480][T18201] Cannot create hsr debugfs directory [ 489.219351][T18301] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3053'. [ 489.229769][ T5835] Bluetooth: hci1: command tx timeout [ 490.121406][ T30] audit: type=1804 audit(1763970270.331:4): pid=18328 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3060" name="/newroot/576/memory.events" dev="tmpfs" ino=2953 res=1 errno=0 [ 490.216510][ T30] audit: type=1800 audit(1763970270.331:5): pid=18328 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3060" name="memory.events" dev="tmpfs" ino=2953 res=0 errno=0 [ 490.376135][ T30] audit: type=1800 audit(1763970270.331:6): pid=18328 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3060" name="memory.events" dev="tmpfs" ino=2953 res=0 errno=0 [ 490.468430][ T30] audit: type=1804 audit(1763970270.341:7): pid=18329 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.3060" name="/newroot/576/memory.events" dev="tmpfs" ino=2953 res=1 errno=0 [ 490.538665][ T30] audit: type=1800 audit(1763970270.381:8): pid=18328 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3060" name="memory.events" dev="tmpfs" ino=2953 res=0 errno=0 [ 490.664363][ T30] audit: type=1804 audit(1763970270.401:9): pid=18329 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.3060" name="/newroot/576/memory.events" dev="tmpfs" ino=2953 res=1 errno=0 [ 490.756388][ T30] audit: type=1800 audit(1763970270.411:10): pid=18328 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3060" name="memory.events" dev="tmpfs" ino=2953 res=0 errno=0 [ 490.892798][ T30] audit: type=1804 audit(1763970270.421:11): pid=18329 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.3060" name="/newroot/576/memory.events" dev="tmpfs" ino=2953 res=1 errno=0 [ 490.951614][T18323] lo speed is unknown, defaulting to 1000 [ 490.969014][T18323] wg1 speed is unknown, defaulting to 1000 [ 491.072231][T18324] lo speed is unknown, defaulting to 1000 [ 491.142040][T18335] lo speed is unknown, defaulting to 1000 [ 491.161624][T18324] wg1 speed is unknown, defaulting to 1000 [ 491.208191][T18335] wg1 speed is unknown, defaulting to 1000 [ 491.298457][ T5835] Bluetooth: hci1: command tx timeout [ 491.333469][T18352] No such timeout policy "syz1" [ 491.725477][ T9289] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.779461][T18201] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 491.793721][T18201] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 491.808959][ T9289] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.817345][ T9289] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.829436][T18201] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 491.889491][ T9286] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.900655][T18201] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 492.053151][T18372] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3068'. [ 492.100358][T18201] 8021q: adding VLAN 0 to HW filter on device bond0 [ 492.150768][T18201] 8021q: adding VLAN 0 to HW filter on device team0 [ 492.168168][ T9286] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.175434][ T9286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 492.184918][T18376] netlink: 'syz.3.3069': attribute type 1 has an invalid length. [ 492.365221][T18379] bridge11: entered promiscuous mode [ 492.424150][ T5937] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.431433][ T5937] bridge0: port 2(bridge_slave_1) entered forwarding state [ 492.432232][T18391] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3072'. [ 492.555419][T18394] netlink: 128 bytes leftover after parsing attributes in process `syz.5.3073'. [ 492.753410][T18402] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3075'. [ 492.904853][T18409] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3077'. [ 492.918180][T18411] netlink: 'syz.5.3077': attribute type 14 has an invalid length. [ 492.926407][T18409] netlink: 'syz.5.3077': attribute type 14 has an invalid length. [ 492.935433][T18409] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3077'. [ 492.945398][T18411] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3077'. [ 492.955258][T18411] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3077'. [ 492.966350][T18411] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3077'. [ 493.032627][T18201] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 493.108991][T18417] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 493.184391][T18422] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3080'. [ 493.202794][T18422] nbd: couldn't find a device at index 0 [ 493.218007][T18425] netlink: 'syz.0.3081': attribute type 12 has an invalid length. [ 493.376460][ T5835] Bluetooth: hci1: command tx timeout [ 493.760283][T18458] syzkaller1: entered promiscuous mode [ 493.766841][T18458] syzkaller1: entered allmulticast mode [ 493.826476][T18201] veth0_vlan: entered promiscuous mode [ 493.894057][T18201] veth1_vlan: entered promiscuous mode [ 494.078838][T18201] veth0_macvtap: entered promiscuous mode [ 494.140062][T18201] veth1_macvtap: entered promiscuous mode [ 494.224498][T18201] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 494.291243][T18201] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 494.348743][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.362786][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.373708][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.398839][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.535522][ T5937] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 494.553008][ T5937] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 494.574198][T18486] Unsupported ieee802154 address type: 0 [ 494.608087][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 494.616233][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 494.877245][T18499] RDS: rds_bind could not find a transport for ::ffff:172.30.1.5, load rds_tcp or rds_rdma? [ 495.210443][T18509] 8021q: adding VLAN 0 to HW filter on device bond1 [ 495.457207][ T5835] Bluetooth: hci1: command tx timeout [ 495.673182][ T5843] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 495.684907][ T5843] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 495.706694][ T5843] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 495.722432][ T5843] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 495.732725][ T5843] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 496.417913][T18515] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 496.450095][T18515] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 496.982432][ T12] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.072775][ T5937] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.104446][ T5937] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.115247][T18562] __nla_validate_parse: 11 callbacks suppressed [ 497.115270][T18562] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3110'. [ 497.152554][T18562] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 497.160431][ T12] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.193514][ T5937] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.220578][ T5937] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.332341][ T12] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.487280][T18526] lo speed is unknown, defaulting to 1000 [ 497.560502][ T12] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.591819][T18574] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3117'. [ 497.595196][T18571] netlink: set zone limit has 4 unknown bytes [ 497.636345][T18526] wg1 speed is unknown, defaulting to 1000 [ 497.776357][ T5843] Bluetooth: hci5: command tx timeout [ 497.850093][T18583] syzkaller0: entered promiscuous mode [ 497.860232][T18584] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3116'. [ 497.874297][T18583] syzkaller0: entered allmulticast mode [ 497.881171][T18586] netlink: 'syz.0.3120': attribute type 10 has an invalid length. [ 497.897011][T18586] veth0_vlan: entered allmulticast mode [ 497.902999][T18586] veth0_vlan: left promiscuous mode [ 497.911121][T18586] veth0_vlan: entered promiscuous mode [ 497.922976][T18586] team0: Device veth0_vlan failed to register rx_handler [ 497.948562][T18590] IPVS: set_ctl: invalid protocol: 92 10.1.1.0:20001 [ 498.109685][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055d33000: rx timeout, send abort [ 498.609866][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055d32000: rx timeout, send abort [ 498.618407][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055d33000: abort rx timeout. Force session deactivation [ 499.041545][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 499.052925][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 499.063233][ T12] bond0 (unregistering): Released all slaves [ 499.080277][ T12] bond1 (unregistering): Released all slaves [ 499.096365][ T12] bond2 (unregistering): Released all slaves [ 499.111030][ T12] bond3 (unregistering): Released all slaves [ 499.118194][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055d32000: abort rx timeout. Force session deactivation [ 499.227921][ T12] bond4 (unregistering): Released all slaves [ 499.329811][ T12] bond5 (unregistering): Released all slaves [ 499.344340][ T12] bond6 (unregistering): Released all slaves [ 499.451908][ T12] bond7 (unregistering): Released all slaves [ 499.561310][ T12] bond8 (unregistering): Released all slaves [ 499.663880][ T12] bond9 (unregistering): Released all slaves [ 499.782612][ T12] !: left promiscuous mode [ 499.856032][ T5843] Bluetooth: hci5: command tx timeout [ 499.990842][ T12] tipc: Disabling bearer [ 500.002529][ T12] tipc: Disabling bearer [ 500.023610][T18607] netlink: 'syz.4.3125': attribute type 10 has an invalid length. [ 500.024203][ T12] tipc: Left network mode [ 500.031671][T18607] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3125'. [ 500.125773][T18607] dummy0: entered promiscuous mode [ 500.132179][T18607] bridge0: port 3(dummy0) entered blocking state [ 500.178136][T18607] bridge0: port 3(dummy0) entered disabled state [ 500.185392][T18607] dummy0: entered allmulticast mode [ 500.223500][T18607] bridge0: port 3(dummy0) entered blocking state [ 500.230115][T18607] bridge0: port 3(dummy0) entered forwarding state [ 500.252275][T18526] chnl_net:caif_netlink_parms(): no params data found [ 500.342553][T18621] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3128'. [ 500.389508][T18620] syzkaller0: left promiscuous mode [ 500.397942][T18620] syzkaller0: left allmulticast mode [ 500.409348][T18625] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3130'. [ 500.550339][T18627] bridge0: entered promiscuous mode [ 500.558738][T18627] bridge0: port 1(macvtap1) entered blocking state [ 500.574009][T18627] bridge0: port 1(macvtap1) entered disabled state [ 500.582370][T18627] macvtap1: entered allmulticast mode [ 500.589416][T18627] bridge0: entered allmulticast mode [ 500.598117][T18627] macvtap1: left allmulticast mode [ 500.603259][T18627] bridge0: left allmulticast mode [ 500.611464][T18627] bridge0: left promiscuous mode [ 500.644789][T18629] netdevsim netdevsim5: Direct firmware load for . failed with error -2 [ 500.714995][T18629] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 500.719548][T18637] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3131'. [ 500.790296][T18526] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.825075][T18526] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.833398][T18526] bridge_slave_0: entered allmulticast mode [ 500.843115][T18526] bridge_slave_0: entered promiscuous mode [ 500.861668][T18526] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.883548][T18526] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.892687][T18526] bridge_slave_1: entered allmulticast mode [ 500.902924][T18526] bridge_slave_1: entered promiscuous mode [ 500.909104][T18643] netlink: 'syz.0.3133': attribute type 9 has an invalid length. [ 500.989810][T18649] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3132'. [ 501.019831][T18526] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 501.058954][T18526] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 501.134005][T18526] team0: Port device team_slave_0 added [ 501.170972][T18526] team0: Port device team_slave_1 added [ 501.192933][ T12] hsr_slave_0: left promiscuous mode [ 501.204401][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 501.860723][T18671] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3141'. [ 501.942110][ T5843] Bluetooth: hci5: command tx timeout [ 502.177763][T18667] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3139'. [ 502.349244][T18686] netlink: 'syz.5.3144': attribute type 2 has an invalid length. [ 502.400669][T18691] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3146'. [ 502.484982][T18526] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 502.500253][T18698] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3146'. [ 502.513003][T18526] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 502.562168][T18526] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 502.583042][T18526] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 502.591973][T18526] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 502.661094][T18526] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 502.675505][T18689] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3145'. [ 502.695487][T18705] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3146'. [ 503.001549][T18717] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3150'. [ 503.115187][T18719] netlink: 'syz.4.3150': attribute type 10 has an invalid length. [ 503.123835][T18719] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3150'. [ 503.292401][T18719] team0: Failed to send options change via netlink (err -105) [ 503.352323][T18719] team0: Port device geneve0 added [ 503.453049][T18526] hsr_slave_0: entered promiscuous mode [ 503.474031][T18719] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3150'. [ 503.486407][T18732] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3152'. [ 503.510006][T18526] hsr_slave_1: entered promiscuous mode [ 503.525257][T18526] debugfs: 'hsr0' already exists in 'hsr' [ 503.531839][T18526] Cannot create hsr debugfs directory [ 503.558538][T18693] wg1 speed is unknown, defaulting to 1000 [ 503.586107][T18689] netlink: 'syz.0.3145': attribute type 6 has an invalid length. [ 503.634291][T18729] syzkaller0: entered promiscuous mode [ 503.657002][T18728] macvtap1: entered promiscuous mode [ 503.662436][T18728] veth1_to_hsr: entered promiscuous mode [ 503.672140][T18728] macvtap1: entered allmulticast mode [ 503.678388][T18728] veth1_to_hsr: entered allmulticast mode [ 503.786282][ T12] IPVS: stop unused estimator thread 0... [ 504.017395][ T5843] Bluetooth: hci5: command tx timeout [ 504.330783][T18753] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3160'. [ 504.536511][T18764] netlink: 'syz.2.3164': attribute type 83 has an invalid length. [ 504.643522][T18526] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 504.667145][T18526] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 504.681384][T18526] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 504.700262][T18526] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 504.751847][T18774] wg1 speed is unknown, defaulting to 1000 [ 504.991208][T18526] 8021q: adding VLAN 0 to HW filter on device bond0 [ 505.007497][T17136] IPVS: starting estimator thread 0... [ 505.040653][T18526] 8021q: adding VLAN 0 to HW filter on device team0 [ 505.065235][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.072442][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 505.105743][T18791] IPVS: using max 25 ests per chain, 60000 per kthread [ 505.118554][ T9288] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.125815][ T9288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 505.183061][T18788] wg1 speed is unknown, defaulting to 1000 [ 505.650233][T18808] syzkaller1: entered promiscuous mode [ 505.690456][T18808] syzkaller1: entered allmulticast mode [ 505.727919][T18817] syzkaller0: Caught tx_queue_len zero misconfig [ 505.951678][T18526] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 506.074615][T18526] veth0_vlan: entered promiscuous mode [ 506.135331][T18526] veth1_vlan: entered promiscuous mode [ 506.378378][T18526] veth0_macvtap: entered promiscuous mode [ 506.410728][T18526] veth1_macvtap: entered promiscuous mode [ 506.463486][T18526] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 506.520491][T18526] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 506.554047][ T9290] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.571714][ T9290] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.608087][ T9290] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.623888][ T9290] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.051860][ T5937] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 507.071787][T18875] wg1 speed is unknown, defaulting to 1000 [ 507.079945][ T5937] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 507.300460][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 507.327235][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 507.336880][T18874] __nla_validate_parse: 7 callbacks suppressed [ 507.336900][T18874] netlink: 27 bytes leftover after parsing attributes in process `syz.2.3194'. [ 507.603069][T18900] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3199'. [ 507.708800][T18900] ip6gre1: entered promiscuous mode [ 507.823743][T18906] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3201'. [ 507.981753][T18906] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 508.541954][T18927] tipc: Enabled bearer , priority 0 [ 508.770135][ T5835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 508.781241][ T5835] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 508.792107][ T5835] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 508.803339][ T5835] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 508.812391][ T5835] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 508.833256][T18929] tipc: Resetting bearer [ 508.911560][T18936] wg1 speed is unknown, defaulting to 1000 [ 509.206422][T18941] wg1 speed is unknown, defaulting to 1000 [ 509.308879][T18947] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 509.403518][T18947] vlan4: entered allmulticast mode [ 509.459912][T18947] dummy0: entered allmulticast mode [ 509.703375][T18936] chnl_net:caif_netlink_parms(): no params data found [ 509.724426][T18958] xt_CT: No such helper "netbios-ns" [ 509.952820][T18959] vxcan3: entered allmulticast mode [ 510.546810][T18980] syzkaller0: left promiscuous mode [ 510.552284][T18980] syzkaller0: left allmulticast mode [ 510.850643][T18982] syzkaller1: entered promiscuous mode [ 510.867550][T18982] syzkaller1: entered allmulticast mode [ 510.878560][T18959] Cannot find set identified by id 0 to match [ 510.906092][ T5835] Bluetooth: hci3: command tx timeout [ 511.111585][T18936] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.120723][T18936] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.128955][T18936] bridge_slave_0: entered allmulticast mode [ 511.140442][T18936] bridge_slave_0: entered promiscuous mode [ 511.182269][T18936] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.197538][T18936] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.205241][T18936] bridge_slave_1: entered allmulticast mode [ 511.231280][T18936] bridge_slave_1: entered promiscuous mode [ 511.292433][T18989] wg1 speed is unknown, defaulting to 1000 [ 511.319281][T18998] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3220'. [ 511.343237][T18999] SET target dimension over the limit! [ 511.345833][T19000] SET target dimension over the limit! [ 511.372245][T18936] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 511.474685][T18936] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 511.673979][T18936] team0: Port device team_slave_0 added [ 511.700613][T18936] team0: Port device team_slave_1 added [ 511.730577][T19008] syzkaller1: entered promiscuous mode [ 511.745244][T19008] syzkaller1: entered allmulticast mode [ 512.000516][T18936] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 512.011681][T18936] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 512.042934][T18936] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 512.064370][T19026] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3227'. [ 512.077045][T18936] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 512.084107][T18936] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 512.117898][T18936] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 512.202196][T19024] wg1 speed is unknown, defaulting to 1000 [ 512.243088][T19031] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3230'. [ 512.319291][T19033] netlink: 'syz.4.3231': attribute type 1 has an invalid length. [ 512.362020][T18936] hsr_slave_0: entered promiscuous mode [ 512.372519][T18936] hsr_slave_1: entered promiscuous mode [ 512.379634][T19033] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3231'. [ 512.380264][T18936] debugfs: 'hsr0' already exists in 'hsr' [ 512.396718][T18936] Cannot create hsr debugfs directory [ 512.701490][T19049] tipc: Started in network mode [ 512.710887][T19049] tipc: Node identity 8eff6e13bfaf, cluster identity 4711 [ 512.721761][T19049] tipc: Enabled bearer , priority 0 [ 512.730628][T19052] syzkaller0: entered promiscuous mode [ 512.738807][T19052] syzkaller0: entered allmulticast mode [ 512.860506][T19039] tipc: Resetting bearer [ 512.880650][T19039] netlink: 112 bytes leftover after parsing attributes in process `syz.4.3233'. [ 512.892596][T19038] tipc: Resetting bearer [ 512.923040][T19038] tipc: Disabling bearer [ 512.976224][ T5835] Bluetooth: hci3: command tx timeout [ 513.615448][T18936] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 513.631847][T18936] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 513.650691][T19071] wg1 speed is unknown, defaulting to 1000 [ 513.668603][T18936] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 513.690533][T18936] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 514.094773][T19107] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3251'. [ 514.187432][T19107] bond0: entered promiscuous mode [ 514.192611][T19107] bond_slave_0: entered promiscuous mode [ 514.200215][T19107] bond_slave_1: entered promiscuous mode [ 514.210390][T19107] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 514.221472][T19107] bond0: left promiscuous mode [ 514.227940][T19107] bond_slave_0: left promiscuous mode [ 514.238142][T19107] bond_slave_1: left promiscuous mode [ 514.327303][T19112] netlink: 'syz.3.3253': attribute type 1 has an invalid length. [ 514.335097][T19112] netlink: 264 bytes leftover after parsing attributes in process `syz.3.3253'. [ 514.389057][T19116] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3253'. [ 514.427473][T19112] netlink: 'syz.3.3253': attribute type 1 has an invalid length. [ 514.444298][T19112] netlink: 264 bytes leftover after parsing attributes in process `syz.3.3253'. [ 514.477864][T19116] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3253'. [ 514.571318][T19123] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3256'. [ 514.741917][T19121] wg1 speed is unknown, defaulting to 1000 [ 514.960790][T19131] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3258'. [ 515.055812][ T5835] Bluetooth: hci3: command tx timeout [ 515.073151][T19113] wg1 speed is unknown, defaulting to 1000 [ 515.080446][T18936] 8021q: adding VLAN 0 to HW filter on device bond0 [ 515.141817][T19126] wg1 speed is unknown, defaulting to 1000 [ 515.195223][T19137] ªªªªªª: renamed from wg2 (while UP) [ 515.276467][T18936] 8021q: adding VLAN 0 to HW filter on device team0 [ 515.346804][ T9290] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.354034][ T9290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 515.592908][ T5937] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.600308][ T5937] bridge0: port 2(bridge_slave_1) entered forwarding state [ 515.793806][T19153] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.918850][T19153] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.954767][T18936] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 516.046824][T19153] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.161596][T19153] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.296776][T19163] 8021q: adding VLAN 0 to HW filter on device bond0 [ 516.309991][T19163] 8021q: adding VLAN 0 to HW filter on device team0 [ 516.356201][T19163] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 516.462189][ T9289] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.519127][ T9289] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.574873][ T6687] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.603660][ T6687] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.623968][T18936] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 516.725180][T18936] veth0_vlan: entered promiscuous mode [ 516.768691][T18936] veth1_vlan: entered promiscuous mode [ 516.791980][T19180] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3267'. [ 516.802769][T19183] C: renamed from team_slave_0 (while UP) [ 516.825356][T19183] netlink: 'syz.3.3269': attribute type 1 has an invalid length. [ 516.834171][T19183] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 517.042992][T18936] veth0_macvtap: entered promiscuous mode [ 517.067875][T18936] veth1_macvtap: entered promiscuous mode [ 517.094191][T18936] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 517.145934][ T5835] Bluetooth: hci3: command tx timeout [ 517.180490][T18936] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 517.194039][T19201] netlink: 'syz.4.3274': attribute type 1 has an invalid length. [ 517.292662][T19201] 8021q: adding VLAN 0 to HW filter on device bond2 [ 517.345358][T19206] bond2: (slave geneve2): making interface the new active one [ 517.363511][T19206] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 517.830654][T19231] __nla_validate_parse: 4 callbacks suppressed [ 517.830676][T19231] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3278'. [ 517.899897][T19235] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3278'. [ 518.112321][T19240] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3287'. [ 520.022794][ T12] bond0 (unregistering): Released all slaves [ 520.038796][ T12] bond1 (unregistering): Released all slaves [ 520.054110][ T12] bond2 (unregistering): Released all slaves [ 520.073395][ T12] bond3 (unregistering): Released all slaves [ 520.202686][ T12] bond4 (unregistering): Released all slaves [ 520.316969][ T12] bond5 (unregistering): Released all slaves [ 520.436337][ T12] bond6 (unregistering): Released all slaves [ 520.470688][T19226] tipc: Enabling of bearer rejected, failed to enable media [ 520.482076][ T5937] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.527865][ T5937] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.570422][ T5937] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.617210][ T5937] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.692292][T19250] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3280'. [ 520.770118][T19254] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3281'. [ 520.780063][T19254] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3281'. [ 520.820870][ T12] : left promiscuous mode [ 520.826321][T19257] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3283'. [ 520.850944][T19253] syz_tun: entered promiscuous mode [ 520.860184][T19253] syz_tun: entered allmulticast mode [ 520.890232][ T12] tipc: Disabling bearer [ 520.915075][ T12] tipc: Left network mode [ 521.015954][ T6687] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 521.038330][ T6687] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 521.060705][ T12] IPVS: stopping backup sync thread 14086 ... [ 521.111664][ T9290] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 521.122401][ T9290] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 521.163671][T19270] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3285'. [ 521.277004][T19275] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3288'. [ 521.344814][T19272] netlink: 'syz.3.3285': attribute type 10 has an invalid length. [ 521.353193][T19272] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3285'. [ 521.414334][T19272] team0: Port device geneve0 added [ 521.422027][T19278] netlink: 'syz.2.3202': attribute type 14 has an invalid length. [ 521.439389][T19278] netlink: 'syz.2.3202': attribute type 13 has an invalid length. [ 522.131125][T19300] Bluetooth: MGMT ver 1.23 [ 523.127418][T19299] C: entered promiscuous mode [ 523.132564][T19299] team_slave_1: entered promiscuous mode [ 523.138541][T19299] geneve0: entered promiscuous mode [ 523.383137][T19311] __nla_validate_parse: 3 callbacks suppressed [ 523.383158][T19311] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3296'. [ 523.419953][T19311] : entered promiscuous mode [ 523.471198][T19311] netlink: 'syz.0.3296': attribute type 1 has an invalid length. [ 523.555468][T19315] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3296'. [ 523.590772][T19315] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3296'. [ 523.604489][T19315] netlink: 536 bytes leftover after parsing attributes in process `syz.0.3296'. [ 523.671029][ T12] IPVS: stop unused estimator thread 0... [ 523.729954][T19322] syzkaller0: entered promiscuous mode [ 523.741344][T19322] syzkaller0: entered allmulticast mode [ 523.771275][T19324] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3300'. [ 523.958592][T19339] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3304'. [ 523.989659][T19341] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3305'. [ 524.187741][T19346] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3306'. [ 524.362236][T19358] netlink: 'syz.2.3310': attribute type 21 has an invalid length. [ 524.373528][T19358] netlink: 'syz.2.3310': attribute type 22 has an invalid length. [ 524.390347][T19358] netlink: 'syz.2.3310': attribute type 23 has an invalid length. [ 524.401975][T19358] netlink: 'syz.2.3310': attribute type 25 has an invalid length. [ 524.411855][T19358] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3310'. [ 525.333805][T19377] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3315'. [ 525.456507][T19374] can: request_module (can-proto-5) failed. [ 526.434696][T19402] lo speed is unknown, defaulting to 1000 [ 526.507404][T19402] lo speed is unknown, defaulting to 1000 [ 526.547086][T19402] lo speed is unknown, defaulting to 1000 [ 526.672374][T19402] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 526.779047][T19402] lo speed is unknown, defaulting to 1000 [ 526.797715][T19417] netlink: 'syz.0.3328': attribute type 1 has an invalid length. [ 526.806848][T19402] lo speed is unknown, defaulting to 1000 [ 526.874945][T19402] lo speed is unknown, defaulting to 1000 [ 526.887864][T19402] lo speed is unknown, defaulting to 1000 [ 526.906667][T19402] lo speed is unknown, defaulting to 1000 [ 526.925122][T19402] lo speed is unknown, defaulting to 1000 [ 526.947860][T19402] lo speed is unknown, defaulting to 1000 [ 526.958554][T19402] lo speed is unknown, defaulting to 1000 [ 527.022869][T19424] netlink: 'syz.4.3330': attribute type 16 has an invalid length. [ 527.034715][T19424] netlink: 'syz.4.3330': attribute type 17 has an invalid length. [ 527.271668][T19424] bridge0: port 3(dummy0) entered disabled state [ 527.278326][T19424] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.286204][T19424] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.485400][T19424] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 527.508316][T19424] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 527.782735][T19428] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.790606][T19428] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.921918][T19428] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 527.939308][T19428] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 528.076199][ T9284] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.096115][ T9284] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.117331][ T9284] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.189672][ T9284] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.221680][ T9284] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.256872][ T9284] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.266536][ T9284] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.275465][ T9284] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.393035][T19465] lo speed is unknown, defaulting to 1000 [ 528.438530][T19473] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 528.451077][T19478] __nla_validate_parse: 8 callbacks suppressed [ 528.451097][T19478] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3342'. [ 528.698389][T19487] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3343'. [ 528.984636][T19498] netlink: 176 bytes leftover after parsing attributes in process `syz.0.3347'. [ 529.013341][T19500] wg1 speed is unknown, defaulting to 1000 [ 529.096483][T19500] wg1 speed is unknown, defaulting to 1000 [ 529.113720][T19500] wg1 speed is unknown, defaulting to 1000 [ 529.158904][T19500] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 529.182100][T19506] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3349'. [ 529.240549][T19509] netlink: 'syz.2.3349': attribute type 1 has an invalid length. [ 529.284983][T19509] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3349'. [ 529.305173][T19506] : entered promiscuous mode [ 529.312024][T19508] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3350'. [ 529.322694][T19508] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3350'. [ 529.334098][T19508] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3350'. [ 529.343628][T19500] wg1 speed is unknown, defaulting to 1000 [ 529.352805][T19500] wg1 speed is unknown, defaulting to 1000 [ 529.362819][T19500] wg1 speed is unknown, defaulting to 1000 [ 529.397097][T19500] wg1 speed is unknown, defaulting to 1000 [ 529.415484][T19500] wg1 speed is unknown, defaulting to 1000 [ 529.438366][T19500] wg1 speed is unknown, defaulting to 1000 [ 529.447299][T19500] wg1 speed is unknown, defaulting to 1000 [ 529.469737][T19500] wg1 speed is unknown, defaulting to 1000 [ 529.510015][T19512] netlink: 'syz.0.3351': attribute type 1 has an invalid length. [ 529.520041][T19512] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3351'. [ 529.530341][T19512] netlink: 'syz.0.3351': attribute type 1 has an invalid length. [ 529.551872][T19514] netlink: 'syz.5.3352': attribute type 4 has an invalid length. [ 529.568020][T19512] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3351'. [ 529.578288][T19512] openvswitch: netlink: Flow key attr not present in new flow. [ 529.592427][T18551] lo speed is unknown, defaulting to 1000 [ 529.601737][T19514] netlink: 'syz.5.3352': attribute type 4 has an invalid length. [ 529.616797][T18551] syz2: Port: 1 Link DOWN [ 529.631536][T18551] lo speed is unknown, defaulting to 1000 [ 529.737309][T19514] tipc: Resetting bearer [ 529.793262][T18551] lo speed is unknown, defaulting to 1000 [ 529.999003][T19525] [ 530.001396][T19525] ====================================================== [ 530.008446][T19525] WARNING: possible circular locking dependency detected [ 530.012318][T19534] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 530.015501][T19525] syzkaller #0 Not tainted [ 530.015517][T19525] ------------------------------------------------------ [ 530.015535][T19525] syz.0.3356/19525 is trying to acquire lock: [ 530.015549][T19525] ffff8880245bca98 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1e5/0x4c0 [ 530.051403][T19525] [ 530.051403][T19525] but task is already holding lock: [ 530.058786][T19525] ffff8880245bc558 (&q->q_usage_counter(io)#51){++++}-{0:0}, at: elevator_change+0x1ca/0x4c0 [ 530.069020][T19525] [ 530.069020][T19525] which lock already depends on the new lock. [ 530.069020][T19525] [ 530.079435][T19525] [ 530.079435][T19525] the existing dependency chain (in reverse order) is: [ 530.088544][T19525] [ 530.088544][T19525] -> #6 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 530.097171][T19525] lock_acquire+0x120/0x360 [ 530.102211][T19525] blk_alloc_queue+0x538/0x620 [ 530.107606][T19525] __blk_mq_alloc_disk+0x15c/0x340 [ 530.113336][T19525] nbd_dev_add+0x46c/0xae0 [ 530.118276][T19525] nbd_init+0x1c6/0x240 [ 530.122965][T19525] do_one_initcall+0x236/0x820 [ 530.128280][T19525] do_initcall_level+0x104/0x190 [ 530.133747][T19525] do_initcalls+0x59/0xa0 [ 530.138598][T19525] kernel_init_freeable+0x334/0x4b0 [ 530.144333][T19525] kernel_init+0x1d/0x1d0 [ 530.149198][T19525] ret_from_fork+0x4bc/0x870 [ 530.154317][T19525] ret_from_fork_asm+0x1a/0x30 [ 530.159630][T19525] [ 530.159630][T19525] -> #5 (fs_reclaim){+.+.}-{0:0}: [ 530.166857][T19525] lock_acquire+0x120/0x360 [ 530.171894][T19525] fs_reclaim_acquire+0x72/0x100 [ 530.177358][T19525] kmem_cache_alloc_node_noprof+0x48/0x710 [ 530.183692][T19525] __alloc_skb+0x255/0x430 [ 530.188638][T19525] __ip6_append_data+0x2c16/0x3f30 [ 530.194280][T19525] ip6_append_data+0x1c1/0x380 [ 530.199572][T19525] rawv6_sendmsg+0x1286/0x1830 [ 530.204863][T19525] __sock_sendmsg+0x19c/0x270 [ 530.210079][T19525] ____sys_sendmsg+0x505/0x830 [ 530.215375][T19525] ___sys_sendmsg+0x21f/0x2a0 [ 530.220579][T19525] __x64_sys_sendmsg+0x19b/0x260 [ 530.226135][T19525] do_syscall_64+0xfa/0xfa0 [ 530.231165][T19525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.237673][T19525] [ 530.237673][T19525] -> #4 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 530.245423][T19525] lock_acquire+0x120/0x360 [ 530.250459][T19525] lock_sock_nested+0x48/0x100 [ 530.255766][T19525] inet_shutdown+0x6a/0x390 [ 530.260807][T19525] nbd_mark_nsock_dead+0x2e9/0x560 [ 530.266446][T19525] sock_shutdown+0x15e/0x260 [ 530.271566][T19525] nbd_config_put+0x342/0x790 [ 530.277115][T19525] nbd_genl_connect+0x167c/0x18f0 [ 530.282682][T19525] genl_family_rcv_msg_doit+0x215/0x300 [ 530.288773][T19525] genl_rcv_msg+0x60e/0x790 [ 530.293814][T19525] netlink_rcv_skb+0x208/0x470 [ 530.299113][T19525] genl_rcv+0x28/0x40 [ 530.303630][T19525] netlink_unicast+0x82f/0x9e0 [ 530.308917][T19525] netlink_sendmsg+0x805/0xb30 [ 530.314214][T19525] __sock_sendmsg+0x21c/0x270 [ 530.319431][T19525] ____sys_sendmsg+0x505/0x830 [ 530.324722][T19525] ___sys_sendmsg+0x21f/0x2a0 [ 530.330013][T19525] __x64_sys_sendmsg+0x19b/0x260 [ 530.335481][T19525] do_syscall_64+0xfa/0xfa0 [ 530.340524][T19525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.346960][T19525] [ 530.346960][T19525] -> #3 (&nsock->tx_lock){+.+.}-{4:4}: [ 530.354619][T19525] lock_acquire+0x120/0x360 [ 530.359650][T19525] __mutex_lock+0x187/0x1350 [ 530.364773][T19525] nbd_queue_rq+0x257/0xf10 [ 530.369821][T19525] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 530.375909][T19525] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 530.382796][T19525] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 530.389359][T19525] blk_mq_run_hw_queue+0x348/0x4f0 [ 530.395019][T19525] blk_mq_dispatch_list+0xd0c/0xe00 [ 530.400761][T19525] blk_mq_flush_plug_list+0x469/0x550 [ 530.406685][T19525] __blk_flush_plug+0x3d3/0x4b0 [ 530.412080][T19525] __submit_bio+0x2d3/0x5a0 [ 530.417117][T19525] submit_bio_noacct_nocheck+0x2fb/0xa50 [ 530.423296][T19525] block_read_full_folio+0x599/0x830 [ 530.429117][T19525] filemap_read_folio+0x117/0x380 [ 530.434682][T19525] do_read_cache_folio+0x350/0x590 [ 530.440327][T19525] read_part_sector+0xb6/0x2b0 [ 530.445644][T19525] adfspart_check_ICS+0xa4/0xa50 [ 530.451127][T19525] bdev_disk_changed+0x75f/0x14b0 [ 530.456689][T19525] blkdev_get_whole+0x380/0x510 [ 530.462083][T19525] bdev_open+0x31e/0xd30 [ 530.466859][T19525] blkdev_open+0x457/0x600 [ 530.471820][T19525] do_dentry_open+0x953/0x13f0 [ 530.477118][T19525] vfs_open+0x3b/0x340 [ 530.481734][T19525] path_openat+0x2ee5/0x3830 [ 530.486859][T19525] do_filp_open+0x1fa/0x410 [ 530.491892][T19525] do_sys_openat2+0x121/0x1c0 [ 530.497097][T19525] __x64_sys_openat+0x138/0x170 [ 530.502478][T19525] do_syscall_64+0xfa/0xfa0 [ 530.507509][T19525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.513932][T19525] [ 530.513932][T19525] -> #2 (&cmd->lock){+.+.}-{4:4}: [ 530.521153][T19525] lock_acquire+0x120/0x360 [ 530.526180][T19525] __mutex_lock+0x187/0x1350 [ 530.531299][T19525] nbd_queue_rq+0xc8/0xf10 [ 530.536269][T19525] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 530.542351][T19525] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 530.549242][T19525] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 530.555765][T19525] blk_mq_run_hw_queue+0x348/0x4f0 [ 530.561421][T19525] blk_mq_dispatch_list+0xd0c/0xe00 [ 530.567159][T19525] blk_mq_flush_plug_list+0x469/0x550 [ 530.573081][T19525] __blk_flush_plug+0x3d3/0x4b0 [ 530.578838][T19525] __submit_bio+0x2d3/0x5a0 [ 530.583878][T19525] submit_bio_noacct_nocheck+0x2fb/0xa50 [ 530.590056][T19525] block_read_full_folio+0x599/0x830 [ 530.595882][T19525] filemap_read_folio+0x117/0x380 [ 530.601454][T19525] do_read_cache_folio+0x350/0x590 [ 530.607100][T19525] read_part_sector+0xb6/0x2b0 [ 530.612408][T19525] adfspart_check_ICS+0xa4/0xa50 [ 530.617884][T19525] bdev_disk_changed+0x75f/0x14b0 [ 530.623442][T19525] blkdev_get_whole+0x380/0x510 [ 530.628831][T19525] bdev_open+0x31e/0xd30 [ 530.633636][T19525] blkdev_open+0x457/0x600 [ 530.638576][T19525] do_dentry_open+0x953/0x13f0 [ 530.643878][T19525] vfs_open+0x3b/0x340 [ 530.648477][T19525] path_openat+0x2ee5/0x3830 [ 530.653607][T19525] do_filp_open+0x1fa/0x410 [ 530.658662][T19525] do_sys_openat2+0x121/0x1c0 [ 530.663878][T19525] __x64_sys_openat+0x138/0x170 [ 530.669265][T19525] do_syscall_64+0xfa/0xfa0 [ 530.674320][T19525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.680741][T19525] [ 530.680741][T19525] -> #1 (set->srcu){.+.+}-{0:0}: [ 530.687875][T19525] lock_sync+0xba/0x160 [ 530.692554][T19525] __synchronize_srcu+0x96/0x3a0 [ 530.698019][T19525] elevator_switch+0x12b/0x640 [ 530.703324][T19525] elevator_change+0x315/0x4c0 [ 530.708620][T19525] elevator_set_default+0x186/0x260 [ 530.714441][T19525] blk_register_queue+0x34e/0x3f0 [ 530.720085][T19525] __add_disk+0x677/0xd50 [ 530.724938][T19525] add_disk_fwnode+0xfc/0x480 [ 530.730150][T19525] nbd_dev_add+0x717/0xae0 [ 530.735108][T19525] nbd_init+0x1c6/0x240 [ 530.739799][T19525] do_one_initcall+0x236/0x820 [ 530.745102][T19525] do_initcall_level+0x104/0x190 [ 530.750569][T19525] do_initcalls+0x59/0xa0 [ 530.755428][T19525] kernel_init_freeable+0x334/0x4b0 [ 530.761162][T19525] kernel_init+0x1d/0x1d0 [ 530.766031][T19525] ret_from_fork+0x4bc/0x870 [ 530.771150][T19525] ret_from_fork_asm+0x1a/0x30 [ 530.776441][T19525] [ 530.776441][T19525] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 530.784281][T19525] validate_chain+0xb9b/0x2140 [ 530.789580][T19525] __lock_acquire+0xab9/0xd20 [ 530.794781][T19525] lock_acquire+0x120/0x360 [ 530.799809][T19525] __mutex_lock+0x187/0x1350 [ 530.804937][T19525] elevator_change+0x1e5/0x4c0 [ 530.810236][T19525] elevator_set_none+0x42/0xb0 [ 530.815545][T19525] blk_mq_update_nr_hw_queues+0x598/0x1ab0 [ 530.821909][T19525] nbd_start_device+0x17f/0xb10 [ 530.827290][T19525] nbd_genl_connect+0x135b/0x18f0 [ 530.832845][T19525] genl_family_rcv_msg_doit+0x215/0x300 [ 530.838928][T19525] genl_rcv_msg+0x60e/0x790 [ 530.843967][T19525] netlink_rcv_skb+0x208/0x470 [ 530.849266][T19525] genl_rcv+0x28/0x40 [ 530.853784][T19525] netlink_unicast+0x82f/0x9e0 [ 530.859075][T19525] netlink_sendmsg+0x805/0xb30 [ 530.864374][T19525] __sock_sendmsg+0x21c/0x270 [ 530.869586][T19525] ____sys_sendmsg+0x505/0x830 [ 530.874898][T19525] ___sys_sendmsg+0x21f/0x2a0 [ 530.880108][T19525] __x64_sys_sendmsg+0x19b/0x260 [ 530.885581][T19525] do_syscall_64+0xfa/0xfa0 [ 530.890612][T19525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.897029][T19525] [ 530.897029][T19525] other info that might help us debug this: [ 530.897029][T19525] [ 530.907261][T19525] Chain exists of: [ 530.907261][T19525] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#51 [ 530.907261][T19525] [ 530.921012][T19525] Possible unsafe locking scenario: [ 530.921012][T19525] [ 530.928475][T19525] CPU0 CPU1 [ 530.933842][T19525] ---- ---- [ 530.939290][T19525] lock(&q->q_usage_counter(io)#51); [ 530.944676][T19525] lock(fs_reclaim); [ 530.951186][T19525] lock(&q->q_usage_counter(io)#51); [ 530.959102][T19525] lock(&q->elevator_lock); [ 530.963704][T19525] [ 530.963704][T19525] *** DEADLOCK *** [ 530.963704][T19525] [ 530.971846][T19525] 6 locks held by syz.0.3356/19525: [ 530.977043][T19525] #0: ffffffff8f332630 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 530.985275][T19525] #1: ffffffff8f332448 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 530.994260][T19525] #2: ffff8880246e69c8 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xa7/0x1ab0 [ 531.005673][T19525] #3: ffff8880246e68d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xba/0x1ab0 [ 531.016686][T19525] #4: ffff8880245bc558 (&q->q_usage_counter(io)#51){++++}-{0:0}, at: elevator_change+0x1ca/0x4c0 [ 531.027338][T19525] #5: ffff8880245bc590 (&q->q_usage_counter(queue)#35){+.+.}-{0:0}, at: elevator_change+0x1ca/0x4c0 [ 531.038348][T19525] [ 531.038348][T19525] stack backtrace: [ 531.044243][T19525] CPU: 0 UID: 0 PID: 19525 Comm: syz.0.3356 Not tainted syzkaller #0 PREEMPT(full) [ 531.044265][T19525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 531.044277][T19525] Call Trace: [ 531.044285][T19525] [ 531.044292][T19525] dump_stack_lvl+0x189/0x250 [ 531.044322][T19525] ? __pfx_dump_stack_lvl+0x10/0x10 [ 531.044346][T19525] ? __pfx__printk+0x10/0x10 [ 531.044364][T19525] ? print_lock_name+0xde/0x100 [ 531.044383][T19525] print_circular_bug+0x2ee/0x310 [ 531.044408][T19525] check_noncircular+0x134/0x160 [ 531.044432][T19525] validate_chain+0xb9b/0x2140 [ 531.044463][T19525] __lock_acquire+0xab9/0xd20 [ 531.044483][T19525] ? elevator_change+0x1e5/0x4c0 [ 531.044508][T19525] lock_acquire+0x120/0x360 [ 531.044524][T19525] ? elevator_change+0x1e5/0x4c0 [ 531.044556][T19525] __mutex_lock+0x187/0x1350 [ 531.044576][T19525] ? elevator_change+0x1e5/0x4c0 [ 531.044604][T19525] ? xa_find_after+0xae/0x430 [ 531.044627][T19525] ? xa_find_after+0x402/0x430 [ 531.044647][T19525] ? elevator_change+0x1e5/0x4c0 [ 531.044673][T19525] ? xa_find_after+0xae/0x430 [ 531.044694][T19525] ? __pfx___mutex_lock+0x10/0x10 [ 531.044716][T19525] ? __pfx_blk_mq_cancel_work_sync+0x10/0x10 [ 531.044738][T19525] elevator_change+0x1e5/0x4c0 [ 531.044767][T19525] elevator_set_none+0x42/0xb0 [ 531.044796][T19525] blk_mq_update_nr_hw_queues+0x598/0x1ab0 [ 531.044823][T19525] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 531.044850][T19525] ? sysfs_add_file_mode_ns+0x259/0x300 [ 531.044873][T19525] nbd_start_device+0x17f/0xb10 [ 531.044895][T19525] ? device_create_file+0xf4/0x1c0 [ 531.044916][T19525] nbd_genl_connect+0x135b/0x18f0 [ 531.044938][T19525] ? __pfx_nbd_genl_connect+0x10/0x10 [ 531.044958][T19525] ? rcu_is_watching+0x15/0xb0 [ 531.044981][T19525] ? __nla_parse+0x40/0x60 [ 531.045001][T19525] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 531.045033][T19525] genl_family_rcv_msg_doit+0x215/0x300 [ 531.045063][T19525] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 531.045094][T19525] ? __pfx_stack_trace_save+0x10/0x10 [ 531.045122][T19525] genl_rcv_msg+0x60e/0x790 [ 531.045150][T19525] ? __pfx_genl_rcv_msg+0x10/0x10 [ 531.045174][T19525] ? __pfx_nbd_genl_connect+0x10/0x10 [ 531.045198][T19525] netlink_rcv_skb+0x208/0x470 [ 531.045216][T19525] ? __lock_acquire+0xab9/0xd20 [ 531.045239][T19525] ? __pfx_genl_rcv_msg+0x10/0x10 [ 531.045264][T19525] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 531.045290][T19525] ? down_read+0x1ad/0x2e0 [ 531.045312][T19525] genl_rcv+0x28/0x40 [ 531.045336][T19525] netlink_unicast+0x82f/0x9e0 [ 531.045356][T19525] ? __pfx_netlink_unicast+0x10/0x10 [ 531.045373][T19525] ? netlink_sendmsg+0x642/0xb30 [ 531.045392][T19525] ? skb_put+0x11b/0x210 [ 531.045412][T19525] netlink_sendmsg+0x805/0xb30 [ 531.045436][T19525] ? __pfx_netlink_sendmsg+0x10/0x10 [ 531.045457][T19525] ? aa_sock_msg_perm+0xf1/0x1d0 [ 531.045485][T19525] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 531.045502][T19525] ? __pfx_netlink_sendmsg+0x10/0x10 [ 531.045523][T19525] __sock_sendmsg+0x21c/0x270 [ 531.045554][T19525] ____sys_sendmsg+0x505/0x830 [ 531.045580][T19525] ? __pfx_____sys_sendmsg+0x10/0x10 [ 531.045605][T19525] ? import_iovec+0x74/0xa0 [ 531.045629][T19525] ___sys_sendmsg+0x21f/0x2a0 [ 531.045651][T19525] ? __pfx____sys_sendmsg+0x10/0x10 [ 531.045686][T19525] ? __fget_files+0x2a/0x420 [ 531.045702][T19525] ? __fget_files+0x3a0/0x420 [ 531.045722][T19525] __x64_sys_sendmsg+0x19b/0x260 [ 531.045745][T19525] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 531.045786][T19525] ? do_syscall_64+0xbe/0xfa0 [ 531.045805][T19525] do_syscall_64+0xfa/0xfa0 [ 531.045823][T19525] ? lockdep_hardirqs_on+0x9c/0x150 [ 531.045841][T19525] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.045858][T19525] ? clear_bhb_loop+0x60/0xb0 [ 531.045878][T19525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.045895][T19525] RIP: 0033:0x7fb0dbd8f749 [ 531.045912][T19525] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 531.045928][T19525] RSP: 002b:00007fb0dccec038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 531.045947][T19525] RAX: ffffffffffffffda RBX: 00007fb0dbfe5fa0 RCX: 00007fb0dbd8f749 [ 531.045960][T19525] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000004 [ 531.045972][T19525] RBP: 00007fb0dbe13f91 R08: 0000000000000000 R09: 0000000000000000 [ 531.045984][T19525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 531.045995][T19525] R13: 00007fb0dbfe6038 R14: 00007fb0dbfe5fa0 R15: 00007ffd0a0c0eb8 [ 531.046015][T19525] [ 531.576801][ T5843] block nbd2: Receive control failed (result -32) [ 531.576816][ T5835] block nbd2: Receive control failed (result -32) [ 531.576978][ T5835] block nbd2: Receive control failed (result -32) [ 531.626034][T19525] nbd2: detected capacity change from 0 to 127