last executing test programs: 7.168419057s ago: executing program 4 (id=5925): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r0, &(0x7f0000000840)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000800)={&(0x7f0000000080)={0x764, r1, 0x8, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x77}}}}, [@NL80211_ATTR_NAN_FUNC={0x14, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x13}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0xff}]}, @NL80211_ATTR_NAN_FUNC={0x494, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x2}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x408, 0xd, 0x0, 0x1, [{0xe5, 0x0, "ec360945c0d810cf16b3e7e037425a4bfa13683cb89b21c15a57589a26715cb1aa7f6ea8363510a5d7743de24ba5981c879f8b7509b1b21117f8bcfb0c67c3c2103e7fc4e1f3a0089ba50bdc17268ca1dd6d22d30bae081b29a470fbab3bba0c1c771ed7fc5268abfe60ba73882373217ec003321de01e9403d2236511f52a83073fe4389370fab084ba23ad6ddc5ddbebaf5f5b876503612a6ac66b33f4385584263d7ea2fb2968cd0944c5e27797184542234f847b285b891e451307510f1263e68fa209f4a7161d8c864bc5f02b8cb150ec8e281953b53a4bc5cac414027974"}, {0xb8, 0x0, "8336afae65017b079f211b136c49c69d96d68079dca2010d25e90f6c4033a6111fa63f238048411b62dba34fb1b41df0c8b1b1b8c09145157bd5ced41dc16e5c42f7ce3a16032ee3fa6d53a5455bbdba7e26fd4ad381d7dd87101d135b2138e5211b76883c8a62e328751e004788f42d989f9d8ff39305f7c60f8b06dfec1c6c4889a00ed5be1c74626d4f8a42f45da7b176f58a09568071f00acfdab26f7099834aad3417f0340b82daca53c5e8b0c7686f87b0"}, {0xd8, 0x0, "56c179ce7c779f5f0c511f7f945187203bb097c0235ba6818ec5ebef0b9a1e3504f87db38338bf7dc63ed72bb3561a7e0da137535f72f88d328e8bbd5f554692d1e5931bcefb63a80f26f14872c0cd90280d79e35f96e320035d1cd8301f2d9cd0e9fc1ace0d7a226c09fccebd9432b5ded8473161d9158d842b4983ae4d45134d453202c1d69c3cdf3ef6adaff6cb71852f5af9bbd4991e70706be16bfdb25dbd79a3b7d50a880dc1d366d139f65d21b2a51b4664e8372a471bceb06a91b3c414ac2845076005fdae5285702bd65f42c022f442"}, {0xa7, 0x0, "e0f8a9fc2f78250cecbe3279296d4d89ea326c54fc198d78aa5b50bc2123aa9b436a302357f8ce93194a17a7dc50d00414928c95960157b2c4e44cd92b80bb89b1c11b2bcf0c943db3ce6fbd75c35180ef7f5f782e0d40b4c5fbb0d06457548199623c3da9819e854d866fe6cf6da912edb1392b3cb3217e8144eea234ffc4d27aed5c7b66f822154f4bf7865ac04bed0da1e1bba8b746e2120c4c9f4a35d5ac8b4f0f"}, {0x1c, 0x0, "c468ea3a56802bab10b294489f79d2c59d32c02bdb2a5176"}, {0xc7, 0x0, "f945e5dde0bf686f57d0cd1fd56c5d739dd478d1e5ec7d73a15e8e3bb008d2471c46311ee54eec7607de6a6a9b16f285f48e68635ddc63f728b6af671316b5405235119540b5b1f4ca36fcddf6fbd7df2ae579b13219f034a8934bd4beb443328329ab8c057c88a2433e21247ff493077f6eec9360d20cd474ef6d930726928d5c11e3b8a4d0694673095b978780379f3279e3c7f6c3cc65273a470af8d6dfe91f180f8f776b2069e8a202b6b05271482c5c69d9136e1fae38dc30c26b22aee0100ae3"}]}, @NL80211_NAN_FUNC_SRF={0xc, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x3}]}, @NL80211_NAN_FUNC_SERVICE_INFO={0x52, 0xb, "10d9fcac7bd9ddbc3e5fc690845fc8fc1484b60366f18cb1e74f17c75c33e3b3b936cd11ea8f314ab758b901bc8f843a78677275813f5421535fc03f564b905b2ee9f7068c8b106ebd75ebb4f9f8"}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @broadcast}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x44, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x5}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x3}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "a6f7aba15335"}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x46}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x8679}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x110, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x100}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x8}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_SERVICE_INFO={0xeb, 0xb, "d4aa6916bf75b3f1ba4b707e3cf0c34f00b9b037c3cec74329ece6fd1cbdd80e2451b996c4e8a21ccde4167e5b3e903875db881992813a1097f4dcb3499576c1f3ade78f12ff6dbffe97cadcf5a06b70f84d9db0afcbfc475b35bb5457b465c4eedc7a626a719e57479916967e68cfcbb2ae44d1f381c9c28bfe2fce4299b79ae07b414b15bf87628a9da82dae9cbc4837e9dd0a5ee0075b91fbdd51a932f967868605c797b4462bf76be11ce05a7cd41cd5965eb5b94508e77cc5d6cfa517ba783ec8e88454b415bfe06d9f37f5f505c76f7bd534f878f13c5e5bc8818a5608b9734e28e2b274"}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x138, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa}, @NL80211_NAN_FUNC_SERVICE_INFO={0x101, 0xb, "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"}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x1}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x9}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x6}]}]}, 0x764}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r0, &(0x7f0000000840)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000800)={&(0x7f0000000080)={0x764, r1, 0x8, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x77}}}}, [@NL80211_ATTR_NAN_FUNC={0x14, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x13}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0xff}]}, @NL80211_ATTR_NAN_FUNC={0x494, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x2}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x408, 0xd, 0x0, 0x1, [{0xe5, 0x0, "ec360945c0d810cf16b3e7e037425a4bfa13683cb89b21c15a57589a26715cb1aa7f6ea8363510a5d7743de24ba5981c879f8b7509b1b21117f8bcfb0c67c3c2103e7fc4e1f3a0089ba50bdc17268ca1dd6d22d30bae081b29a470fbab3bba0c1c771ed7fc5268abfe60ba73882373217ec003321de01e9403d2236511f52a83073fe4389370fab084ba23ad6ddc5ddbebaf5f5b876503612a6ac66b33f4385584263d7ea2fb2968cd0944c5e27797184542234f847b285b891e451307510f1263e68fa209f4a7161d8c864bc5f02b8cb150ec8e281953b53a4bc5cac414027974"}, {0xb8, 0x0, "8336afae65017b079f211b136c49c69d96d68079dca2010d25e90f6c4033a6111fa63f238048411b62dba34fb1b41df0c8b1b1b8c09145157bd5ced41dc16e5c42f7ce3a16032ee3fa6d53a5455bbdba7e26fd4ad381d7dd87101d135b2138e5211b76883c8a62e328751e004788f42d989f9d8ff39305f7c60f8b06dfec1c6c4889a00ed5be1c74626d4f8a42f45da7b176f58a09568071f00acfdab26f7099834aad3417f0340b82daca53c5e8b0c7686f87b0"}, {0xd8, 0x0, "56c179ce7c779f5f0c511f7f945187203bb097c0235ba6818ec5ebef0b9a1e3504f87db38338bf7dc63ed72bb3561a7e0da137535f72f88d328e8bbd5f554692d1e5931bcefb63a80f26f14872c0cd90280d79e35f96e320035d1cd8301f2d9cd0e9fc1ace0d7a226c09fccebd9432b5ded8473161d9158d842b4983ae4d45134d453202c1d69c3cdf3ef6adaff6cb71852f5af9bbd4991e70706be16bfdb25dbd79a3b7d50a880dc1d366d139f65d21b2a51b4664e8372a471bceb06a91b3c414ac2845076005fdae5285702bd65f42c022f442"}, {0xa7, 0x0, "e0f8a9fc2f78250cecbe3279296d4d89ea326c54fc198d78aa5b50bc2123aa9b436a302357f8ce93194a17a7dc50d00414928c95960157b2c4e44cd92b80bb89b1c11b2bcf0c943db3ce6fbd75c35180ef7f5f782e0d40b4c5fbb0d06457548199623c3da9819e854d866fe6cf6da912edb1392b3cb3217e8144eea234ffc4d27aed5c7b66f822154f4bf7865ac04bed0da1e1bba8b746e2120c4c9f4a35d5ac8b4f0f"}, {0x1c, 0x0, "c468ea3a56802bab10b294489f79d2c59d32c02bdb2a5176"}, {0xc7, 0x0, "f945e5dde0bf686f57d0cd1fd56c5d739dd478d1e5ec7d73a15e8e3bb008d2471c46311ee54eec7607de6a6a9b16f285f48e68635ddc63f728b6af671316b5405235119540b5b1f4ca36fcddf6fbd7df2ae579b13219f034a8934bd4beb443328329ab8c057c88a2433e21247ff493077f6eec9360d20cd474ef6d930726928d5c11e3b8a4d0694673095b978780379f3279e3c7f6c3cc65273a470af8d6dfe91f180f8f776b2069e8a202b6b05271482c5c69d9136e1fae38dc30c26b22aee0100ae3"}]}, @NL80211_NAN_FUNC_SRF={0xc, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x3}]}, @NL80211_NAN_FUNC_SERVICE_INFO={0x52, 0xb, "10d9fcac7bd9ddbc3e5fc690845fc8fc1484b60366f18cb1e74f17c75c33e3b3b936cd11ea8f314ab758b901bc8f843a78677275813f5421535fc03f564b905b2ee9f7068c8b106ebd75ebb4f9f8"}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @broadcast}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x44, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x5}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x3}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "a6f7aba15335"}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x46}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x8679}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x110, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x100}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x8}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_SERVICE_INFO={0xeb, 0xb, "d4aa6916bf75b3f1ba4b707e3cf0c34f00b9b037c3cec74329ece6fd1cbdd80e2451b996c4e8a21ccde4167e5b3e903875db881992813a1097f4dcb3499576c1f3ade78f12ff6dbffe97cadcf5a06b70f84d9db0afcbfc475b35bb5457b465c4eedc7a626a719e57479916967e68cfcbb2ae44d1f381c9c28bfe2fce4299b79ae07b414b15bf87628a9da82dae9cbc4837e9dd0a5ee0075b91fbdd51a932f967868605c797b4462bf76be11ce05a7cd41cd5965eb5b94508e77cc5d6cfa517ba783ec8e88454b415bfe06d9f37f5f505c76f7bd534f878f13c5e5bc8818a5608b9734e28e2b274"}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x138, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa}, @NL80211_NAN_FUNC_SERVICE_INFO={0x101, 0xb, "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"}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x1}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x9}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x6}]}]}, 0x764}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$igmp(0x2, 0x3, 0x2) (async) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f0000000880)=0xa, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0x1c, &(0x7f00000008c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x4}, {}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000009c0)='GPL\x00', 0xf12, 0x1f, &(0x7f0000000a00)=""/31, 0x40f00, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000a40)={0xa, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff], 0x0, 0x10, 0x1}, 0x94) (async) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0x1c, &(0x7f00000008c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x4}, {}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000009c0)='GPL\x00', 0xf12, 0x1f, &(0x7f0000000a00)=""/31, 0x40f00, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000a40)={0xa, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff], 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000e40)={r3, 0x0, 0x82, 0xbb, &(0x7f0000000b80)="8d3b96b78e249f1b02bcdad47a38dbf81425b700aecf19e000547a3a62411da73ab4a54d6aa519a24657e0a4ffb512bac7db50d12945bf6396dab76a0a6a9b15d8e16cf8e88d9e36fc40e5697f25e11131566bbbfc0d2ae28bc5b333d971f0e8f1e443586e99038f33fab62b7b6a0404f64b08c98461f59e7355ed8f32da5be7af18", &(0x7f0000000c40)=""/187, 0x7, 0x0, 0xea, 0x1b, &(0x7f0000000d00)="f496b40b84f59ac89c9d95bd5f02b3753d1c82fc12b836da9ea9395270ce417af193df2aa253100622ba7e422b5905037c0482b530a82f07e1743c7b790b700f7cab93079ae0207a164785ae125d5d1ac5f83094fd81d10b96dc91bea5892ccd3f331ac05d8f1cbcb2f462098bfcb759de1fee1a40d678003567e1436ecc1e37ba4211139a574d3c2678ea7a421cb34f5afc7cd6355eef09830e77ffe51c7f1f346320307a790e55d1c22355664e5486a03b76f6b371c634119345c82140a91502afa62d7996090b11fec8c35c8a8f27d9971d266fb52f1eff46afcaa4801f0dd4bbd5d5e826946f3348", &(0x7f0000000e00)="23e4ad5dc792a860d26f86186c219c5c656d1accebe9bcca52f8af", 0x1, 0x0, 0x4}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000e40)={r3, 0x0, 0x82, 0xbb, &(0x7f0000000b80)="8d3b96b78e249f1b02bcdad47a38dbf81425b700aecf19e000547a3a62411da73ab4a54d6aa519a24657e0a4ffb512bac7db50d12945bf6396dab76a0a6a9b15d8e16cf8e88d9e36fc40e5697f25e11131566bbbfc0d2ae28bc5b333d971f0e8f1e443586e99038f33fab62b7b6a0404f64b08c98461f59e7355ed8f32da5be7af18", &(0x7f0000000c40)=""/187, 0x7, 0x0, 0xea, 0x1b, &(0x7f0000000d00)="f496b40b84f59ac89c9d95bd5f02b3753d1c82fc12b836da9ea9395270ce417af193df2aa253100622ba7e422b5905037c0482b530a82f07e1743c7b790b700f7cab93079ae0207a164785ae125d5d1ac5f83094fd81d10b96dc91bea5892ccd3f331ac05d8f1cbcb2f462098bfcb759de1fee1a40d678003567e1436ecc1e37ba4211139a574d3c2678ea7a421cb34f5afc7cd6355eef09830e77ffe51c7f1f346320307a790e55d1c22355664e5486a03b76f6b371c634119345c82140a91502afa62d7996090b11fec8c35c8a8f27d9971d266fb52f1eff46afcaa4801f0dd4bbd5d5e826946f3348", &(0x7f0000000e00)="23e4ad5dc792a860d26f86186c219c5c656d1accebe9bcca52f8af", 0x1, 0x0, 0x4}, 0x50) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000f00), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x24, r4, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0xadcd428ac4404e7}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x44010) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000001000)={0xffffffffffffffff, 0x0, 0x1, 0x9, @vifc_lcl_addr=@rand_addr=0x64010101, @local}, 0x10) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) r6 = getuid() setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000001040)={{{@in=@rand_addr=0x64010101, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x4e23, 0x7, 0x4e24, 0x5fc, 0x2, 0x80, 0x20, 0x2b, 0x0, r6}, {0xff, 0x8, 0x1, 0x3, 0x239d2832, 0x5, 0x0, 0x3174}, {0x5, 0x5, 0x2400000000000, 0x4}, 0x6, 0x6e6bb3, 0x0, 0x1, 0x0, 0x2}, {{@in6=@local, 0x4d2, 0x2b}, 0x2, @in6=@empty, 0x0, 0x0, 0x3, 0x61, 0x9, 0x3, 0x81}}, 0xe8) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000001040)={{{@in=@rand_addr=0x64010101, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x4e23, 0x7, 0x4e24, 0x5fc, 0x2, 0x80, 0x20, 0x2b, 0x0, r6}, {0xff, 0x8, 0x1, 0x3, 0x239d2832, 0x5, 0x0, 0x3174}, {0x5, 0x5, 0x2400000000000, 0x4}, 0x6, 0x6e6bb3, 0x0, 0x1, 0x0, 0x2}, {{@in6=@local, 0x4d2, 0x2b}, 0x2, @in6=@empty, 0x0, 0x0, 0x3, 0x61, 0x9, 0x3, 0x81}}, 0xe8) syz_genetlink_get_family_id$mptcp(&(0x7f0000001140), r0) accept4$llc(0xffffffffffffffff, &(0x7f0000001180)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f00000011c0)=0x10, 0x800) (async) r7 = accept4$llc(0xffffffffffffffff, &(0x7f0000001180)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f00000011c0)=0x10, 0x800) getpeername$llc(r7, &(0x7f0000001200)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000001240)=0x10) sendmsg$nl_generic(r0, &(0x7f0000002340)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002300)={&(0x7f00000012c0)={0x1024, 0x2b, 0x1, 0x70bd2c, 0x25dfdbfb, {0x13}, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0x3}, @nested={0x1004, 0x12c, 0x0, 0x1, [@generic="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"]}]}, 0x1024}, 0x1, 0x0, 0x0, 0x5}, 0x40) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000002380)={0xffffffffffffffff, 0x5, 0x38}, 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002800)={r3, 0xe0, &(0x7f0000002700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000002540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000002580)=[0x0, 0x0, 0x0], &(0x7f00000025c0)=[0x0], 0x0, 0xbf, &(0x7f0000002600)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000002640), &(0x7f0000002680), 0x8, 0x73, 0x8, 0x8, &(0x7f00000026c0)}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000002840)={0xffffffffffffffff, 0x8}, 0xc) (async) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000002840)={0xffffffffffffffff, 0x8}, 0xc) r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000028c0)=@o_path={&(0x7f0000002880)='./file0\x00', 0x0, 0x4018, r0}, 0x18) r13 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002900)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x800, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x1}, 0x50) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000002980)=@base={0xb, 0xae76, 0x1, 0x6, 0x208, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x4}, 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002a00)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xaec, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x4}, 0x50) (async) r15 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002a00)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xaec, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x4}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000002a80)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002b40)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000002ac0), &(0x7f0000002b00)=r3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000002c00)={0x1e, 0xa, &(0x7f00000023c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x10}, [@generic={0x16, 0x2, 0x6, 0x0, 0x2}, @map_idx={0x18, 0x2, 0x5, 0x0, 0xf}, @map_val={0x18, 0x4, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0x80000000}, @call={0x85, 0x0, 0x0, 0x1e}, @generic={0x40, 0x2, 0x9, 0x7, 0xff}]}, &(0x7f0000002440)='GPL\x00', 0x1ff, 0x3c, &(0x7f0000002480)=""/60, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x8, &(0x7f00000024c0)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000002500)={0x4, 0x4, 0xb, 0x8}, 0x10, r10, r3, 0x4, &(0x7f0000002b80)=[r7, r11, r12, r13, r14, r15, r16, r17], &(0x7f0000002bc0)=[{0x3, 0x3, 0x4, 0x6}, {0x0, 0x2, 0x2, 0xc}, {0x4, 0x4, 0xa, 0x6}, {0x3, 0x2, 0x1, 0x9}], 0x10, 0xbd2}, 0x94) r18 = accept4(r2, &(0x7f0000002cc0)=@vsock={0x28, 0x0, 0x0, @hyper}, &(0x7f0000002d40)=0x80, 0x0) r19 = syz_genetlink_get_family_id$gtp(&(0x7f0000002dc0), r18) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000002ec0)={&(0x7f0000002d80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002e80)={&(0x7f0000002e00)={0x48, r19, 0x100, 0x70bd29, 0x10, {}, [@GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_PEER_ADDR6={0x14, 0xb, @private2}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_LINK={0x8, 0x1, r9}]}, 0x48}, 0x1, 0x0, 0x0, 0x4800}, 0x40000) (async) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000002ec0)={&(0x7f0000002d80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002e80)={&(0x7f0000002e00)={0x48, r19, 0x100, 0x70bd29, 0x10, {}, [@GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_PEER_ADDR6={0x14, 0xb, @private2}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_LINK={0x8, 0x1, r9}]}, 0x48}, 0x1, 0x0, 0x0, 0x4800}, 0x40000) 7.061830676s ago: executing program 4 (id=5927): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x38}}, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0xdd86, 0x2c}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000080)='b', 0x28}], 0x1}, 0x0) close(r0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000000206010100000000000000000000000005000100070000000900020073797a3000000000000000000a000000683a6e65742c706f72742c6e65740000001400078008000840000000900800064000"/100], 0x64}}, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x6) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=ANY=[@ANYBLOB="180000001500010029bd7000fedbdf252d"], 0x18}}, 0x20000000) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000380)={0x42, 0x2, 0x3}, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYRES32=r5, @ANYRES16=r5, @ANYBLOB="010326bd6000000000002d"], 0x20}, 0x1, 0x0, 0x0, 0x40904}, 0x20040814) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bridge_slave_1\x00', 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x21, &(0x7f0000000000)='/proc/4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="180000004c8ffd64f3f5207e1e700039022cbd7000fbdbdf2507000000", @ANYRES32=r7], 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$SIOCAX25CTLCON(r2, 0x89e8, &(0x7f0000001900)={@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, 0x1, 0xfffffffffffffffc, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004002100040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r10}, &(0x7f0000000600)=0xa00, &(0x7f0000000640)}, 0x1c) r11 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000002c0), 0x2, 0x0) write$cgroup_subtree(r11, &(0x7f0000000300)=ANY=[@ANYBLOB='+cpr +devices +cpuacct +devices +pids \x00'/51], 0x33) ioctl$BTRFS_IOC_SPACE_INFO(r8, 0xc0109414, &(0x7f0000001980)={0xf2a, 0x8, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r3) sendmsg$nl_route(r8, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="300000006800000325bd7000feffffff0a0000000000000008000500", @ANYRES32=r9, @ANYBLOB="060007000700000008014c000000491e97c0a280e1c65db8ea92c3aeb550db407bd7150bad71b6ff049c0ffefa330417f0d74c5a0dbc658c54286330dfbbcaa7a0dfb6764980c7e9aea60eb5fe188af6ca3ca5dfeb904dfed9b1515c9254b973cc00e1772568a2532789ac1977143c9afa45fe91e4b2a6f8bba881", @ANYRES32=r9, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x8810}, 0x40) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0xe, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18060000000000000000000000000000711076000000000095"], &(0x7f0000000000)='syzkaller\x00', 0xfff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) 6.930176281s ago: executing program 4 (id=5928): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r1, 0x0, 0x3, &(0x7f00000001c0)=0x3, 0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e23, 0x1000, @empty, 0xe}}, 0x6, 0xa}, 0x90) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e23, 0x1000, @empty, 0xe}}, 0x6, 0xa}, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000001d00070f"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000001d00070f"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="0000000208"], 0xe) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f00000002c0)="a609a89c9edd34187123b5adceb3968557f4e107445a53c0815c9636d00f896d1e8cd8de77a79f1e3e2c53ddf1bb9f8ac5cb5257ff4e8b960026bc4244c4b09179a97dffdf02563e23546d3e78f944e7e2fee2a00b6313048fe354223318badb21d8c086669c5f7772f4a6d90d0997babdf79f7d557e055b3e6f2e4f41ec06a39a57b9ccc00bbca22395e41f9e9652af665f0e1603fb85d4799d54d44c706ff8df9bb805b182a1260b5936ae44f649b5e2fdca240984dcd0033ec28aeaaa686608c5c50538eea153", 0xc8}, {&(0x7f00000004c0)="7ee25c099579d92f8da721f68a8100b6adf04e0cd543f7d26019d57e6a3ecf7ef34486da35c482845d517dc801cca9e4f248b15413a7e252b00a3878a791f64bd79d1d7cc97eed1cb0ad91426115a3b3bf2738347b0acfb01a5aeb09818f35ba6f394fcc023050ec0fab5b7405e7ce33e50e3efb3f9373ce372307160e67a6ab876630aa7d83b5f9cc93a11ddb6849c9cc173c0f9592e1c14ee8c687710260aefc1ce06038fa1b8b2e76f29703bb5fc7549318f6f4287daef439fd58863abc71e3b186e7998b8e60aba2a4bcc76eb07d365afc639fd8b115", 0xd8}, {&(0x7f0000000180)="a0a94f8518f2e7d417de2318f9700d66104c6a93da76b8fcaa99404227f34808d6ae2a7990b2c398", 0x28}, {&(0x7f0000000000)="1aa8906070117b653eda123ec46475d65ca8b7792e6da36191f93da265e6ec803be1248a4164a7335d78a67992bd88f1a0e3b7f48636ac498ba5f4f8b47248af", 0x40}], 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x1, &(0x7f0000000280)=@raw=[@ldst={0x3, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffff5, 0xfffffffffffffff0}], &(0x7f00000002c0)='syzkaller\x00', 0xa9e4, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000340)={0x3, 0x9, 0x3}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000380)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f00000003c0)=[{0x1, 0x2, 0x6, 0x9}, {0x0, 0x5, 0x1, 0x9}, {0x3, 0x1, 0x10, 0x1}, {0x2, 0x4, 0x7, 0x4}, {0x4, 0x5, 0xc, 0xc}, {0x4, 0x3, 0x10, 0x9}], 0x10, 0x4}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)={@fallback=r0, r3, 0x12, 0x8, 0x0, @void, @value=r4}, 0x20) getsockopt$ax25_int(r0, 0x101, 0x3, &(0x7f0000000000), &(0x7f00000000c0)=0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000061129000f0efffff9500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000061129000f0efffff9500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) 6.895040202s ago: executing program 4 (id=5930): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.swap.events\x00', 0x0, 0x0) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r1, 0x400, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x21}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004}, 0x1) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x150, 0x1403, 0x400, 0x4, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6_vti0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_vlan\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'gre0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'macvtap0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bridge_slave_0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_to_batadv\x00'}}]}, 0x150}, 0x1, 0x0, 0x0, 0x40000}, 0x20000010) (async) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r1, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xfffffff9, 0x3a}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40184}, 0x80) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x18, r1, 0x400, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_PRIVACY={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40010}, 0x40000) (async) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x1, 0x4, [0x3, 0x8, 0x8, 0x5]}, &(0x7f0000000640)=0x10) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000680)=r4, 0x4) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000700), r0) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000b40)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000740)={0x3bc, r5, 0x110, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x559}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1200000}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x21eb}]}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xe}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1ff}]}, @TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xed}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67b}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa8bd}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_NODE={0x1d4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "6778aece6e1c76802849a29db4b2f257531fb9c53b61292882"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "f47111c613d8a6ef88e7aafe5b9ce36f163bdb1b7ec09b4ca187db3642cfb92c"}}, @TIPC_NLA_NODE_ID={0xe7, 0x3, "dd429aa64730369b8d8503670395689e33757f4336529b2b5dc7713269561dfa8b33610e2b1440d20eea3fcbc16cba35d0f5f4a50c8f3ee346ec614d6ec992a8f64926b5ef5b4e852d69bd5fe20bc7e25c0d82034f30b63b4321b2bd43e73c313cf4ba92b2f0eed6a87cfbb44c32f80d9ccea45f80106f5f10fc6bb033d1bcbcd988a4f9e2054ccd49244dc1474c5d63a321aed1be2fd879567ca7fe3191221a0ecbc6bbc612b36df4514baac49a22d20232e28901163afa7740c289b3365498506ff64380d1c56267f44edd063d95d674ed4ce5ebcebc87eaa38ca2eb4d5538348cd6"}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "00eed8e1c646572bebbf2012902ccdd20abd789b67c4d1b73e5a10c113a8ec"}}]}, @TIPC_NLA_NODE={0xb4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "e065955737cf2ea77c51d2ed7770e7186c0dfc0003dd482d"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "6fb16a8399dda85b3ee0f38711011bf74bc519916a"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x800}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffffffd8}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x23}]}]}, 0x3bc}, 0x1, 0x0, 0x0, 0x4008005}, 0x4000008) (async) ioctl$int_in(r3, 0x5452, &(0x7f0000000b80)=0x8) (async) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000c00), r3) sendmsg$DEVLINK_CMD_TRAP_GET(r3, &(0x7f0000000e00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000c40)={0x170, r6, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x170}, 0x1, 0x0, 0x0, 0x4040007}, 0x20000800) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e80)={&(0x7f0000000e40)='rpcb_register\x00', r0, 0x0, 0x1}, 0x18) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000ec0)={r4, 0xfffb, 0x7, 0x9, 0x1ff, 0x5}, 0x14) r7 = accept$packet(r0, &(0x7f0000000f00)={0x11, 0x0, 0x0}, &(0x7f0000000f40)=0x14) getsockname$packet(r7, &(0x7f0000000f80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000fc0)=0x14) (async) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001040), r3) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r3, &(0x7f0000001180)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001140)={&(0x7f0000001080)={0xb0, r10, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x4}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8010}, 0x20040800) (async) r11 = socket(0x1a, 0x4, 0xb) setsockopt$inet_sctp_SCTP_ASSOCINFO(r11, 0x84, 0x1, &(0x7f00000011c0)={r4, 0x7, 0x9, 0x2, 0x81}, 0x14) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000012c0)={&(0x7f0000001240)={0x4c, r6, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004004}, 0x11) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000001340)={0x0, r0}, 0x10) (async) sendmsg$NL80211_CMD_LEAVE_MESH(r3, &(0x7f0000001440)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x20, r1, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1c00000, 0x7a}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20048045}, 0x84) r12 = gettid() ioctl$sock_SIOCSPGRP(r7, 0x8902, &(0x7f0000001480)=r12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001500)={r12, r0, 0x0, 0x3, &(0x7f00000014c0)=',^\x00'}, 0x30) listen(0xffffffffffffffff, 0x10000) 6.773845387s ago: executing program 4 (id=5932): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000040)={'gretap0\x00', &(0x7f0000000280)={'ip_vti0\x00', 0x0, 0x10, 0x8, 0x0, 0x1d6, {{0x42, 0x4, 0x1, 0x35, 0x108, 0x68, 0x0, 0x6, 0x2f, 0x0, @remote, @multicast1, {[@timestamp_addr={0x44, 0x3c, 0xc5, 0x1, 0x8, [{@private=0xa010100, 0xc000000}, {@empty, 0x7}, {@private=0xa010102, 0x3}, {@multicast1, 0x3}, {@broadcast, 0x3}, {@rand_addr=0x64010102, 0x8}, {@broadcast, 0x6}]}, @timestamp={0x44, 0x14, 0x86, 0x0, 0x3, [0x1ff, 0x1af, 0x3, 0x2]}, @cipso={0x86, 0x1b, 0x2, [{0x2, 0x3, 'Z'}, {0x48dd5ec652792abf, 0x12, "91dd12bd6d3f80db3cc91e096e3ed786"}]}, @noop, @ra={0x94, 0x4}, @timestamp={0x44, 0x14, 0x83, 0x0, 0x7, [0xfffffffb, 0x7d47, 0x0, 0x5]}, @timestamp={0x44, 0x18, 0x92, 0x0, 0xd, [0xfffffff7, 0x8, 0x10001, 0xb9, 0x4]}, @ssrr={0x89, 0xf, 0xf7, [@private=0xa010101, @remote, @multicast2]}, @cipso={0x86, 0x47, 0x2, [{0x6, 0x9, "1f9132fcc2e48a"}, {0x5, 0xd, "0bb2fc6da9db2a52b28b12"}, {0x1, 0xb, "ca0dff0af6ec783463"}, {0x1, 0xf, "93a68de7a4c199920483e60785"}, {0x2, 0x11, "fe44c06d2ae42725ab939f772fa18c"}]}]}}}}}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a310000000024010000050a01020000000000000000010000000c00024000000000000000010900010073797a3100000000040004800a000700726f75746500"], 0x1ac}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) unshare(0x24060400) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x4, 0x4, 0x3, 0x0, 0x1}, 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000080)=@raw=[@map_val={0x18, 0x0, 0x2, 0x0, r3}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x2, 0xe9, &(0x7f0000000340)=""/233, 0x0, 0x11}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001780)=ANY=[@ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="00000000280000297ff3df53000041d259cf00000000000000000000000000d60c03013f40b1c65d12e38a704d7a3ec6cdbb44c86e18d839f3d54c7a4c978422f5a3646248e0f78484322b5635ef419f80380f95d389a8c11e7fc76821b34417b8c191de5968b6028aea9f48a5b726dcbba79898102c9686884b43001c2fe0726ec4df59499fe6f7f93ef0b7a3744e11721c02dcc9ca9a885f39080f6419803ef4584addd69e337ed7c52a8df2893e97f3a190dd663dc1a217f56d06d95e1b69dfae63a84151cfd7285a62794588a03e7dd9a2ef1eab97ac2fe24bb0d0aa1475024385", @ANYRES32, @ANYRES64=0x0], 0x20) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x5}, 0x94) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001880)='./cgroup.net/syz0\x00', 0x200002, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r8, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x30, r9, 0x1, 0x70bd2c, 0xffeffffe, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x14}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000018c0)={r4, r7, 0x25, 0x0, @void}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0x2d1, 0xfffffffffffffd85, &(0x7f00000000c0)="b9ff0303000d698cb89e40f086dd6000000e00ff8900630677", 0x0, 0x100, 0x2000000, 0x0, 0x0, &(0x7f0000000440)}, 0x28) r11 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r11, &(0x7f0000000a00)={&(0x7f0000000180)=@pppol2tpin6, 0x80, &(0x7f0000000900)=[{&(0x7f0000000500)=""/229, 0xe5}, {&(0x7f00000003c0)=""/49, 0x31}, {&(0x7f0000000600)=""/209, 0xd1}, {&(0x7f0000000700)=""/71, 0x47}, {&(0x7f0000000400)=""/44, 0x2c}, {&(0x7f0000000480)=""/17, 0x11}, {&(0x7f0000000780)=""/208, 0xd0}, {&(0x7f0000000880)=""/96, 0x60}], 0x8, &(0x7f0000000980)=""/67, 0x43}, 0x100) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001800010000000000000000000200000000000006000000000c00090008000000", @ANYRES32, @ANYBLOB="01000000", @ANYRES32, @ANYBLOB="e7f505"], 0x38}}, 0x0) 5.624509075s ago: executing program 4 (id=5939): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x1a, r1, 0x1, 0xf, 0x6, @multicast}, 0x14) sendto$packet(r0, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r1}, 0x14) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x18, 0x52, 0x1, 0x0, 0x0, {0x1c}, [@typed={0x4, 0x2, 0x0, 0x0, @binary}]}, 0x18}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x691, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) 4.985941418s ago: executing program 2 (id=5947): r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000001c0)={r4, 0x1, 0x6, @local}, 0x10) setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000000040)={r4, 0x1, 0x6, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00006f", @ANYRES16=r6, @ANYBLOB="01002bbd7000fedbdf250200000008000800ac141415"], 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x80) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@newqdisc={0x44, 0x24, 0x4, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xffff, 0x3}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x6, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c40)=@newtfilter={0x4e0, 0x2c, 0xd27, 0x30bd29, 0x259fdbfa, {0x0, 0x0, 0x0, r8, {0xfff0, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @filter_kind_options=@f_matchall={{0xd}, {0x49c, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x3}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff1, 0x4}}, @TCA_MATCHALL_ACT={0x488, 0x2, [@m_mirred={0xac, 0x1f, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xdd4, 0x4, 0x20000000, 0x2b2, 0x8}, 0x2, r8}}]}, {0x5f, 0x6, "b3669edee14f230c182f16b763598168c2ce32dd329586e84792491239a13bfa32daf7545c56b699a311a7434c4efc6575a8b8d7acdf62c85ec761d3d3c5839892d754d57805d70a5a0f9220e975562c11de842e7bd13b46917a33"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_ct={0x84, 0x0, 0x0, 0x0, {{0x7}, {0x18, 0x2, 0x0, 0x1, [@TCA_CT_LABELS={0x14, 0x7, "fcd10d34fe7d12926169a4f7e021313b"}]}, {0x47, 0x6, "79305e916722da850f1216879655b1f4c70f85709cda2de0e70d1dd750c0d6416ad4623b69bde94ecb98f94848e39185775ccbabe703209af57683363f1e034e53dc35"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0x150, 0x12, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x4c, 0x4, [{0xfffd, 0x3, 0xf9, 0x60ea5301}, {0x0, 0x88, 0xf7, 0x5}, {0xe26e, 0x9, 0xf1, 0xc000}, {0x4, 0x5, 0x5c, 0x40}, {0x2, 0x80, 0x3, 0x200}, {0x9, 0x8c, 0x4, 0x1}, {0x3, 0xa, 0x4, 0x7}, {0x3, 0x3, 0xd, 0xe4}, {0x81, 0x0, 0x2, 0x2}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0x8, 0x8, 0x200, 0xffffffff}}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}]}, {0xae, 0x6, "2a1188e16a32f179881065f31cdeadfbda3107339623ddbfa0b12524de2d6949b6689927f1131e1af2e3e766677dcc1be0e643932759e7d2252d0d0a9c82a3fb195823437ab5c198148aade3ea85f59cd6256db253c76bd465adccfa569097e528605967d2324558821da25e5df810300011760443cee3fba01da4a1e8b0c1c76a79fc849b4d902d6f3342d385acb4c72a06489089231dfb82b77d67dd49a21638f42eeb3004b017be24"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_mirred={0x170, 0x16, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x1, 0x2, 0x8, 0x8}, 0x4, r8}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x800, 0x7, 0x7, 0x9, 0x80000000}, 0x2}}]}, {0x102, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_ctinfo={0x94, 0x2, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x1}, @TCA_CTINFO_ACT={0x18, 0x3, {0x8, 0x3, 0x7, 0x0, 0xfc4}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x2}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x9}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x3}]}, {0x2d, 0x6, "cd7f1665d68a3504d90a8b16c71191136c12ebd1b1eaa166e487e24f6bdde39f1b0232816dbde8b958"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x4e0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) close(0x3) r12 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r12, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r13 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r13, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r13, 0x80) accept$netrom(r13, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$nl_route_sched(r11, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x14}, 0xc, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x40094}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@gettaction={0x30, 0x32, 0x8, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_gd=@TCA_ACT_TAB={0xffffffffffffffa3, 0x1, [{0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1f}}]}]}, 0x30}}, 0x2004c080) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@getchain={0x34, 0x66, 0x800, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x9, 0x3}, {0x8, 0x2}, {0xfff2, 0xfff3}}, [{0x8, 0xb, 0x9}, {0x8, 0xb, 0x804}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4004) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) 3.888192739s ago: executing program 0 (id=5954): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@delneigh={0x30, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x0, 0x96, 0x4}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, @NDA_VLAN={0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x800, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1b400}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vti={{0x8}, {0x14, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0x6}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x3}]]}}}]}, 0x40}}, 0x0) 3.830366148s ago: executing program 2 (id=5955): r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1020, 0x40000}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000001c0)={'gretap0\x00', &(0x7f0000000280)={'gre0\x00', 0x0, 0x80, 0x20, 0x3, 0x73e, {{0x11, 0x4, 0x1, 0x2, 0x44, 0x67, 0x0, 0xe, 0x2f, 0x0, @loopback, @rand_addr=0x64010100, {[@timestamp={0x44, 0x14, 0xd9, 0x0, 0xf, [0x3, 0x7, 0x2, 0x6]}, @ssrr={0x89, 0x1b, 0x4c, [@multicast1, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x11}, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}]}}}}}) r6 = socket(0x10, 0x3, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'tunl0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5}, @IFLA_IPTUN_FWMARK={0x8}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=@ipv6_delroute={0x7c, 0x19, 0x20, 0x70bd2a, 0x25dfdbff, {0xa, 0x80, 0x10, 0x8, 0x0, 0x2, 0xc8, 0xa, 0xa00}, [@RTA_METRICS={0x4}, @RTA_ENCAP_TYPE={0x6}, @RTA_OIF={0x8, 0x4, r4}, @RTA_EXPIRES={0x8, 0x17, 0x6}, @RTA_PRIORITY={0x8, 0x6, 0x15b0}, @RTA_OIF={0x8, 0x4, r5}, @RTA_GATEWAY={0x14, 0x5, @remote}, @RTA_GATEWAY={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x22}}, @RTA_MULTIPATH={0xc, 0x9, {0x6, 0x29, 0x8, r8}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x811) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000023c0)={0x2c, r3, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2001}, 0x4010000) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtaction={0x60, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x4c, 0x1, [@m_sample={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x4}, @TCA_SAMPLE_RATE, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}]}, {0x4}, {0xc}, {0x6, 0x4}}}]}]}, 0x60}}, 0x0) 3.384759045s ago: executing program 3 (id=5960): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) (async, rerun: 64) getpeername$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000140)=0x14) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) (async) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) (async) r6 = socket(0x10, 0x3, 0x0) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x3, 0x2}}}}]}, 0x44}}, 0x800) (async) socket(0x25, 0x800, 0x9) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newtfilter={0x40, 0x28, 0xd27, 0x1003ffd, 0x0, {0x0, 0x0, 0x0, r7, {0xffe0, 0x9}, {0x0, 0x9}, {0x2, 0xb}}, [@filter_kind_options=@f_fw={{0x7}, {0x14, 0x2, [@TCA_FW_POLICE={0x10, 0x2, [@TCA_POLICE_PEAKRATE64={0xc}]}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x810}, 0x200008c4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x2, 0x6, @ipv4={'\x00', '\xff\xff', @local}, @rand_addr=' \x01\x00', 0x20, 0x0, 0x5}}) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) (async, rerun: 32) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x4) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000480)={'tunl0\x00', &(0x7f00000003c0)={'gretap0\x00', 0x0, 0x7800, 0x10, 0x3fe, 0x7fffffff, {{0x20, 0x4, 0x1, 0x8, 0x80, 0x67, 0x0, 0x97, 0x4, 0x0, @multicast2, @local, {[@end, @ssrr={0x89, 0x7, 0x6, [@multicast1]}, @noop, @timestamp={0x44, 0x8, 0x91, 0x0, 0x9, [0x7]}, @timestamp_addr={0x44, 0x44, 0x14, 0x1, 0xb, [{@loopback, 0x8}, {@broadcast, 0xc}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0xf}, {@empty, 0x8}, {@remote, 0xffffff01}, {@broadcast, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@multicast1, 0x2}]}, @lsrr={0x83, 0x13, 0xca, [@multicast2, @multicast1, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @end]}}}}}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000600)={&(0x7f00000004c0)={0x134, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x480c4}, 0x4000148) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x23}, 0x38) 3.300057332s ago: executing program 0 (id=5961): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0xd, 0xffe0}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x16}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x40040) (async) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000180)={0x4, {{0xa, 0x4e23, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}}}, 0x88) 3.165829182s ago: executing program 3 (id=5962): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0xe0e40, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xc8, 0x8, 0xf0, 0x5803, 0x200, 0x2e8, 0x2e8, 0x200, 0x2e8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0xffffff00, 0xff000000], [0xff, 0x34da508f3e8fb0eb, 0xffffff00, 0xff], 'veth0_to_batadv\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x89, 0x7, 0x7, 0x38}, 0x0, 0xa8, 0xf0, 0x0, {0x0, 0x2000000000000}}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2, '\x00', {0x9}}}}, {{@ipv6={@remote, @loopback, [], [], 'macvtap0\x00', 'syzkaller1\x00', {}, {0xff}, 0x0, 0x0, 0x2}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x1ff, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00', {0xfffffffffffffffd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) socket$kcm(0x10, 0x2, 0x10) accept4$x25(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x24}}, 0x0) socket$alg(0x26, 0x5, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000300)=0xffffffffffffffff, 0x4) writev(r3, &(0x7f0000000080), 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet6_sctp(0xa, 0x1, 0x84) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1ab82efe, 0xfffffffffffffffd, 0x1, 0x300, 0xab, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x80000001}, 0x0, 0x0) 3.151399709s ago: executing program 2 (id=5963): r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0xfc, 0x0}, 0x4, 0x6, 0x0, 0x100, 0x4, 0x540000, r2}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x30, r6, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0xd}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004}, 0x10) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000000)=0x1, 0x4) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r8, 0x6, 0x14, 0x0, &(0x7f0000000180)) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r13, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000210281ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) ioctl$sock_inet6_SIOCSIFADDR(r10, 0x8916, &(0x7f0000000300)={@mcast1, 0x4, r12}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x1c}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x14c}}, 0x24004010) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}]}], {0x14}}, 0x78}}, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, @private0, 0x1, 0x6, 0x0, 0x0, 0x6, 0x180103, r2}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) 2.838255987s ago: executing program 0 (id=5965): syz_emit_ethernet(0x2a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaa270005d70200fe08060001080006040001aaaaaaaaaa26ae1414bbaaaaaaaaaa00ac1414bb81bc1c732ce387323992cd5f2c70ca45da90d6baeb946c9a1e0a30e27327583f97aa9c7b2d22008051f18254232d7459c7a4e8f8ce1fef24d28b3ddf614e2cb9c640c2281ac8ffcad0895aa5cb2d1d35c87eaa"], 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000000)=0xfffffffc, 0x4) sendto$unix(r0, &(0x7f0000000640)="00a8", 0x2, 0xd1, 0x0, 0x0) recvfrom$unix(r1, 0x0, 0x0, 0x10102, 0x0, 0x0) socketpair(0x15, 0x2, 0xe1e6, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f00000001c0)=0x5, 0x4) socket$inet(0x2, 0x4000000000000001, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f00000027c0)=""/4102, 0x1006}, {&(0x7f0000000140)=""/4092, 0xffc}, {&(0x7f00000020c0)=""/194, 0xc2}], 0x3, 0x0, 0x40}, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r3, 0x0, 0x484, &(0x7f0000001140)=""/29, &(0x7f00000003c0)=0x1d) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='blkio.bfq.io_serviced\x00', 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x4, &(0x7f0000001180)=ANY=[@ANYBLOB="02000000000000000000000d00000000850000006100000095004000000000006440e9d3ad5c62dad3c65f7376198e307e223705f4e8baaf9c64a5b3aa26c093c65c574ddd84387f7af10afa22c4c9d38445b72ae9794f186f33c171b8930cd52f5a8538af2a141fb8f5cb35f3e5e1cb8be8d710c87a04d886f306dc3e"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r5, 0x0, 0x0) bind$rds(r4, &(0x7f0000000200)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000080)=0x2) 2.81227838s ago: executing program 2 (id=5966): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000700)={@val={0x6f01, 0x800}, @val={0x0, 0x0, 0xfffe, 0x0, 0x14}, @ipv4=@udp={{0x25, 0x4, 0x0, 0x6, 0xf8, 0x66, 0x0, 0xff, 0x11, 0x0, @remote, @broadcast, {[@ssrr={0x89, 0x7, 0xc1, [@rand_addr=0x64010102]}, @timestamp_prespec={0x44, 0xc, 0x44, 0x3, 0xf, [{@empty, 0x3a8d}]}, @end, @timestamp={0x44, 0xc, 0x40, 0x0, 0x9, [0x800, 0x4]}, @cipso={0x86, 0x20, 0xffffffffffffffff, [{0x3, 0x12, "eac093e6ce1b177341e476ee67c8c237"}, {0x1, 0x8, "1af9b533cfc9"}]}, @end, @rr={0x7, 0x17, 0x90, [@empty, @dev={0xac, 0x14, 0x14, 0x12}, @local, @private=0xa010102, @private=0xa010100]}, @cipso={0x86, 0x1c, 0x1, [{0x5, 0x6, "fc0a2929"}, {0x1, 0x4, "24ff"}, {0x7, 0xc, "6f3c96e7792a5d9c019b"}]}, @ssrr={0x89, 0xb, 0x93, [@multicast1, @local]}, @end]}}, {0x4e24, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x4, 0x2, "7ab4f565728c6a5bec782d72bb3e88640c827be9e311488e3c489d83895032e1", "0cb40a57136dd27e9b17836e12a2a83d", {"82803d397903f26e92c7cfa39d21df16", "76d9dd472264acd98b9232650d5278d6"}}}}}, 0x106) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r2, 0xffff0000, 0xe, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0xc, &(0x7f0000000080)=0xb, 0x4) 2.766654541s ago: executing program 1 (id=5967): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={'dummy0\x00', {0x2, 0xfffc, @dev={0xac, 0x14, 0x14, 0x21}}}) listen(0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r5], 0x50}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) r9 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendto$inet6(r9, 0x0, 0xfffffffffffffe40, 0xc005, 0x0, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newlink={0x50, 0x10, 0x421, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x60e1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0x400}]}}}, @IFLA_LINK={0x8, 0x5, r10}]}, 0x50}}, 0x2) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd2c, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0xffff, 0xe}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x55}, 0xc010) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r11, 0x18000000000002a0, 0x2f9, 0x543, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632177fb7f0200017f020001be3e7d2a182fff", 0x0, 0x3e8, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) setsockopt(r3, 0x2, 0x0, &(0x7f00000006c0)="fae5a8ce62e3075e39598a00f87aa30b314ab5dc12f816c0bb610b0478aeac69a4851acbdac66b0a113d784f3d1ef2e4989468a51742b4202d4b18c0b0e7b7c488eae628c6c3ca073e5de4a12347afaedb46b93e349266b24f9bc16f5365d2faecb55e407f927c1c3ffacbde1051193ba1b4c25c15bb75b5827c19151383de2a57828f2ef507a5b39e061ef1666075b73f51329e5e34960b2c6c2c02c73bd59fbd518a4d5e4b8b3d3e0000000000004c121919b4b6072d9457bde3f2bd9af528", 0xc0) 2.194259403s ago: executing program 1 (id=5968): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) setsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f0000000140)=0xfff, 0x4) (async) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r2, &(0x7f0000000300)={{0x6, @rose, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}, 0x48) splice(r1, &(0x7f0000000040)=0x3, r1, 0x0, 0x4, 0x10) listen(r1, 0x1ad72f7) (async) syz_emit_ethernet(0x0, 0x0, 0x0) accept4(r1, 0x0, 0x0, 0x80000) (async) r3 = accept4$netrom(r1, 0x0, 0x0, 0x80000) writev(r3, &(0x7f0000001b40)=[{&(0x7f0000000600)="16f6", 0x2}], 0x1) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) connect$unix(r4, 0xfffffffffffffffe, 0x0) (async) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000000307010400000000000900000a000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x84) (async) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, 0x0, 0x0) (async) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000b40)={'dummy0\x00'}) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r8, 0x84, 0x11, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x100010, r7, 0x0) (async) r9 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r9, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'nicvf0\x00', 0x2}, 0x18) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d00d4a009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) 2.166991639s ago: executing program 3 (id=5969): r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r2, 0x107, 0x18, &(0x7f0000000800)={r1, 0x1, 0x6}, 0x10) sendto$packet(r2, &(0x7f0000000040)="02030007ffff0000000045", 0xff4b, 0x4000050, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='contention_end\x00', r3, 0x0, 0x4}, 0x18) (async) r4 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r4, 0x0) (async) accept4(r4, 0x0, 0x0, 0x0) (async) setsockopt$sock_int(r4, 0x1, 0x7, 0x0, 0x0) 1.998473657s ago: executing program 1 (id=5970): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000400)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd7000fbdbdf252100000008000300", @ANYRES32=r4, @ANYBLOB="1c002d8005000400010000000600020000000000050001000000000020134bf5a7c4c4f9c2e58dc3f8fd6d58"], 0x38}, 0x1, 0x0, 0x0, 0x480c4}, 0x10) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000300)={0x1f, 0x3, 0x3}, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000600)=@newtaction={0xf78, 0x30, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [{0x4e4, 0x1, [@m_mpls={0xa0, 0x12, 0x0, 0x0, {{0x9}, {0x44, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x7}, @TCA_MPLS_TTL={0x5, 0x7, 0x8}, @TCA_MPLS_PROTO={0x6, 0x4, 0x886c}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_TTL={0x5, 0x7, 0x9}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_PROTO={0x6, 0x4, 0x6003}, @TCA_MPLS_TC={0x5, 0x6, 0x6}]}, {0x33, 0x6, "867faff2de73520af6df4b16ca27020527149701fd02995caa6d4eee0799792f3f92133b4326d522a7ccadf1705ef4"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x6}}}}, @m_nat={0x184, 0x20, 0x0, 0x0, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x1, 0x0, 0x4, 0x2}, @private=0xa010102, @multicast1, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x9, 0x3, 0x7c, 0x4}, @multicast2, @private=0xa010101, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x3, 0x8, 0x5, 0xfffffeff}, @multicast1, @rand_addr=0x64010102, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x401, 0x2, 0x81, 0x4}, @multicast1, @private=0xa010100, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7fffffff, 0x8001, 0x10000000, 0x9, 0xc}, @private=0xa010102, @empty}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x0, 0x20000000, 0x8001, 0xffff}, @local, @empty, 0xffffff}}]}, {0x6c, 0x6, "18c1e4b9a9755d9bcc731b2df0a5af7e837b8142dc9b533464befec93dc28ff7966fcaa7a201975193bffeb97f935964a77e28781d9e9b5d3bbce377a73ee101fb7988725d477fa1af54cc7ec448dec9dd890d062def1441fb7a183f9927de7cb21d55b67a2a8731"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_vlan={0x13c, 0x4, 0x0, 0x0, {{0x9}, {0x60, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x1de0, 0xb2f4, 0x20000000, 0xfffeffff, 0x81}, 0x1}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x3}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}]}, {0xb3, 0x6, "066f4a93d715614eb8002bbe7e751245e0bfbbc2be32d022e12f9c80d8425d5f78b9a75d770b897020a6eb8ee73249cd1b247e0e7e4941e4e1e0b36cc011667e27f82d78ff6d593a80d5b92e502ef15049f51943667bf05acb32bcc6de5f5e217f55a4d057036f92a1047f4be6be3ab4cafb5360ddf01205c449de23dceae1d79582243efdf5fac5f21c0666029577a0708c92dc3b8e2ee7919667aee217bc171d8ef13e900290f101f6eabc199fca"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_sample={0x148, 0x14, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x9}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x10000}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x9}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x7}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x7}]}, {0xf3, 0x6, "c96d5e648d94eeec1390d448dcdc2f5316272f450208c3c6f2ae1aeeeb5dba50f189e28aa4375c8fe4998f3fabfe24f8bf685c62f5495c659ae3e5f6f6b6c1fd51d1efa060d052c542e409f4d2c2f9d554024a5a35e47dfabb5d3b381b7795e5708e1b8df1a92e3edb641fc7d12525cfdce34d56e551cbfe22d3109b64d825d476780f72bde02c1da9dca4d4d27f2a828206bf360e8f754214c6d60f46e801aacd483e6e7e802eacbc7f517c192baa07bac911bd08ac3f0b324369854915edbc6b9fcfad8e033eeae93369f945ebd7a93d1ef416d7979a4ec250b6586d4891c8c44612721bae67d89eec35a9fde3e2"}, {0xc}, {0xc, 0x8, {0x5, 0x3}}}}, @m_skbmod={0x38, 0x8, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x3}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4}}}}]}, {0xa80, 0x1, [@m_police={0x8f8, 0x10, 0x0, 0x0, {{0xb}, {0x874, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x8, 0x2, 0x2, 0x2, 0x3, 0x3, 0x6, 0x8, 0xf, 0x9, 0x200, 0x9, 0x7598b8a4, 0xecf, 0xfffffc01, 0x8b80, 0x5510, 0x7, 0x42, 0x7, 0x8, 0x6, 0x3, 0x5, 0x4, 0x3, 0x7f, 0xfff, 0x9, 0x4, 0x7, 0x4, 0x766, 0x4, 0xffffffff, 0x2, 0xe, 0x2, 0xf, 0x1, 0x7fff, 0x9, 0xfffff800, 0x9, 0x4, 0xfffffff8, 0xefba, 0x4, 0x32cd19f7, 0x5, 0x5, 0x10000, 0x9, 0x1ff, 0x4, 0x3b, 0x7, 0x80b5, 0xd3dd, 0x4, 0x7, 0x8, 0x4, 0x0, 0x7fffffff, 0x4, 0xc, 0x38f, 0x5e500000, 0x7, 0x1, 0x7, 0x2, 0xb, 0x0, 0x8c5, 0x3, 0x0, 0xff, 0xfffffffb, 0x2, 0x2, 0x137e00, 0x8000, 0x2, 0x9, 0x9, 0x4, 0xbd0c, 0x0, 0x9, 0x404, 0xb61f, 0x1, 0x2, 0x5, 0x5, 0x7, 0x3, 0x6, 0x1, 0x1, 0xff, 0x7fffffff, 0x1, 0x8, 0x9, 0x7f, 0x6d, 0xe, 0x5, 0x0, 0x4, 0x84, 0x3, 0x6, 0x8d7, 0x101, 0x401, 0x1, 0x0, 0xfffffffa, 0x7f, 0x5, 0x0, 0x1000, 0x5, 0x7, 0x7, 0x0, 0x0, 0x62, 0x3, 0x4912, 0x0, 0xbf5, 0x5, 0x400, 0x0, 0x9, 0x5cd0000, 0x3, 0x98, 0x7, 0x7, 0x4, 0xffffffff, 0x7fffffff, 0x6, 0xff, 0x3, 0x9, 0x2, 0x3d, 0x401, 0x5, 0x2, 0xa0, 0x4b0, 0x4fa, 0xb, 0x5, 0x2, 0x4, 0x10, 0x713, 0x7, 0x9, 0xbc7, 0x3, 0xfffff000, 0x9, 0x800, 0x1, 0x5, 0xff, 0xc9, 0x80, 0xf1, 0xe, 0x9, 0x81, 0x9, 0x7, 0xfffffff8, 0x4, 0x4, 0x1000, 0x2, 0x5, 0x6123, 0x8, 0x6, 0x4, 0x80, 0x5, 0x1, 0x6, 0x9, 0xcca, 0x37f, 0x9, 0x5, 0x5, 0xcbe, 0x81, 0x1000, 0x7d, 0x1, 0x0, 0x0, 0x80000000, 0x8, 0x5, 0x1000, 0x6, 0x8, 0x3, 0x8, 0x1e8, 0xffa4, 0x5, 0x2, 0x3, 0x1224, 0x4c, 0x7f, 0x5, 0x0, 0x4, 0x2, 0x1, 0x800, 0x7, 0x7f, 0x7, 0x4, 0xfffff770, 0x3, 0x8c7, 0x8, 0x7, 0x9, 0x40, 0x3, 0x5, 0x4, 0xffff6778, 0x5, 0xeb, 0x2, 0xe, 0xfc000000, 0xfffffff9]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffffff7a}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffe01, 0x8, 0xef12, 0x7fffffff, 0xff, 0x9, 0xffff, 0x3b191d0c, 0xf1f, 0x0, 0x4, 0x0, 0x0, 0x9a45, 0x6, 0xffff, 0x5, 0xd, 0x101, 0x4, 0x1, 0xffff8001, 0x9af, 0x9, 0x0, 0xffff8fef, 0xffffffc0, 0x2, 0x1, 0x0, 0x6, 0xd92, 0x2, 0x1000, 0x3, 0x0, 0x1, 0x1c0000, 0x5, 0x7, 0x200, 0xfffffffb, 0x0, 0x1, 0x20000, 0x6, 0x3, 0x970, 0x8e, 0xd6, 0x8, 0x9, 0x7f, 0x4, 0x10001, 0x3, 0x2, 0x4, 0x1, 0x2, 0xf, 0xff55, 0x6fe70258, 0xffff, 0x4, 0x5, 0x1, 0x6, 0xfffffffd, 0x2, 0x40, 0x7, 0x3, 0x6, 0xd985, 0x8000, 0x241a1dcd, 0x6, 0x6, 0xd, 0x2, 0x9, 0x6e, 0xff, 0x0, 0x9, 0x0, 0x6, 0xfffffffb, 0xfffffffe, 0xa3c, 0xb, 0x9, 0x3, 0x0, 0x8, 0xfc6, 0x1, 0x3, 0x5, 0x8001, 0x4, 0x9, 0x1, 0x5, 0x6, 0x8, 0x4, 0x6, 0x86, 0x0, 0xe31f, 0xfff, 0x1, 0x5, 0x7f, 0x7f, 0x5, 0x5, 0x8, 0x1, 0x0, 0x4, 0x2, 0x8, 0x9, 0xf4b4, 0x6, 0xff, 0x0, 0x2, 0x5, 0x1, 0x1, 0x5, 0xfff, 0x4, 0x4, 0x1721, 0x6, 0x8, 0xfffffffc, 0xfffffbb8, 0x3f, 0x4, 0x9, 0x7e52, 0x2, 0x7fff, 0x5, 0x4, 0x1, 0x5, 0x4, 0x8, 0xe, 0xff, 0x60000000, 0x7, 0x2, 0x2, 0x89a, 0x7, 0x4, 0x0, 0x0, 0xd, 0x7fffffff, 0xa, 0x2, 0x4, 0x8, 0x3, 0x3, 0x2, 0x6, 0x81a, 0xa, 0x5, 0x18c5, 0x8, 0x6, 0x7, 0x3, 0x8000, 0x6, 0x3, 0x6, 0x7, 0x101, 0x92, 0x3, 0x5a2, 0x200, 0x40, 0x5, 0x0, 0x1, 0xc, 0x4, 0x6, 0x7f, 0x4, 0x8, 0xfffffff8, 0xfffffff8, 0xe, 0x5, 0x7, 0x7fffffff, 0x4, 0x5, 0xfffffffc, 0x1, 0x1, 0x3, 0x5, 0x3, 0x6, 0x8, 0x3ff, 0x7, 0x1, 0x3ff, 0x6, 0x101, 0xf, 0x7, 0x9, 0xc0, 0x8001, 0x5, 0x6, 0x6, 0x2, 0x3ff, 0x8, 0x3, 0xfffffff0, 0x6, 0x5, 0x3, 0xa, 0xbf, 0x5, 0x4, 0x6, 0x40, 0x1, 0x7f, 0x7, 0xd22, 0x5, 0x8, 0xff, 0x8]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffffffffffffe}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x62cf62a1, 0x0, 0xfff, 0x3, 0xc1, {0xd, 0x1, 0x89, 0x6, 0x8, 0x3}, {0x4, 0x0, 0x3, 0x1ff, 0x266, 0x13397e61}, 0x3, 0xd, 0x40}}]]}, {0x5a, 0x6, "72d068c23841c846e2f8a9e02df0791b9161b26982424fcf6dc889575c3de1e98380d265ea73df110d816e3fe9144d15e309c141143cdba3eff7cc84e70234c4cc2fd9107c3132f6993dcdd7c7b873be8f6c821b7b3b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x6, 0x2}}}}, @m_nat={0xd4, 0xf, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x80000000, 0x2, 0x6, 0xffffffff}, @rand_addr=0x64010101, @local}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x4, 0x2, 0x79f, 0x4}, @empty, @broadcast}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x6, 0xffffffffffffffff, 0xd, 0x48}, @remote, @multicast2, 0xffffff00, 0x1}}]}, {0x32, 0x6, "9ffd94fd3855139c5e97ca6088ecd2e878b845c21cfbf539d1e4dbe27d30c1c832c63b2e86bbf5495ad08fa8f9ad"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_sample={0xb0, 0xb, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x79e799fc}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x200, 0x8, 0xffffffffffffffff, 0x1, 0x7fff}}]}, {0x63, 0x6, "eecc4371910fdb57af983c22883a176639855400828c67b6bd5af990ac3cdd8581872bb7b0e18b4d6f33505adfd8e0a4bc4f58b9d8e424e242e9212400853ef2e1e9be2ef088f19bdc82e83cba0795420be347fbed475142e38a8050e4dbe6"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x4, 0x1}}}}]}]}, 0xf78}}, 0x1) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e20, 0x3, @private2, 0xa}}}, &(0x7f0000000000)=0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={r6, 0x0, &(0x7f0000000180)}, &(0x7f0000002100)=0x10) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0xc, 0x0, &(0x7f0000000080)) 1.202484915s ago: executing program 3 (id=5971): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000080)=0xfffffff7, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)={0x18, 0x7a, 0x601, 0x70bd2a, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x00\x00\x00'}]}, 0x18}], 0x1}, 0x0) sendmmsg$inet6(r0, &(0x7f0000000e40)=[{{&(0x7f0000000000)={0xa, 0x4e1c, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="24000000000000002900000032000000ff010000000000000000000000000001", @ANYRES32=0x0, @ANYBLOB="0000000018"], 0x40, 0x7ffffff7}}], 0x1, 0x0) 799.646058ms ago: executing program 1 (id=5972): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00', @ANYRES16=r1, @ANYBLOB="25020000000000000000010000000800010000000000"], 0x1c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket(0x2a, 0x2, 0x0) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000680)="b9ff03316844268cb89e14f00800", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001000)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newtfilter={0x7c, 0x2c, 0x605, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffe0}, {}, {0x5, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4c, 0x2, [@TCA_CGROUP_ACT={0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x10, 0x7ff, 0x6, 0x1, 0xff}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x7c}}, 0x20004084) (async) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x1c, r3, 0x331, 0x70bd29, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x1c}}, 0x4000) 763.969044ms ago: executing program 2 (id=5973): r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$tun(r1, &(0x7f0000000080)={@val={0x0, 0x6006}, @void, @ipv4=@tipc={{0x29, 0x4, 0x2, 0x4, 0xcd, 0x67, 0x0, 0xa7, 0x6, 0x0, @empty, @private=0xa010100, {[@timestamp={0x44, 0x18, 0xf3, 0x0, 0xe, [0x4, 0x2, 0xfffffffe, 0x9, 0xfffffff7]}, @cipso={0x86, 0x30, 0x3, [{0x6, 0x9, "c4d7cc48fd1056"}, {0x7, 0x5, "2896c5"}, {0x2, 0x2}, {0x7, 0xa, "bb8c56e19d780b23"}, {0x66f3092c554929c7, 0xe, "8c700793d7298e34a250210d"}, {0x6, 0x2}]}, @ssrr={0x89, 0xb, 0x94, [@empty, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ssrr={0x89, 0x1f, 0x2b, [@rand_addr=0x64010100, @empty, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @local, @remote]}, @ssrr={0x89, 0x1b, 0x1d, [@local, @dev={0xac, 0x14, 0x14, 0x3c}, @multicast2, @remote, @empty, @loopback]}]}}, @payload_named={{{{{0x29, 0x0, 0x0, 0x1, 0x1, 0xa, 0x0, 0x2, 0x9, 0x0, 0x3, 0x1, 0x5, 0x2, 0x5, 0x0, 0x4, 0x4e24, 0x4e23}, 0x4, 0x2}, 0x1}}, [0x0]}}}, 0xd1) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000200)={'tunl0\x00', &(0x7f0000000180)={'erspan0\x00', 0x0, 0x80, 0x700, 0x4, 0x0, {{0x16, 0x4, 0x0, 0x7, 0x58, 0x66, 0x0, 0xf0, 0x29, 0x0, @multicast2, @multicast2, {[@timestamp_addr={0x44, 0x44, 0xf6, 0x1, 0xe, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x10001}, {@empty, 0x3fc0000}, {@local, 0x2}, {@private=0xa010101, 0xb}, {@empty, 0xc000}, {@local, 0x8}, {@dev={0xac, 0x14, 0x14, 0x42}}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000240)={'syztnl0\x00', r3, 0x2f, 0x6, 0x5, 0x1, 0x18, @loopback, @mcast1, 0x0, 0x7, 0xff79, 0x1000}}) r5 = openat$cgroup_procs(r2, &(0x7f0000000300)='cgroup.threads\x00', 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000340)={0x0}, &(0x7f0000000380)=0xc) write$cgroup_pid(r5, &(0x7f00000003c0)=r6, 0x12) syz_open_procfs$namespace(r6, &(0x7f0000000400)='ns/mnt\x00') ioctl$BTRFS_IOC_DEV_INFO(r5, 0xd000941e, &(0x7f0000000440)={0x0, "21903e7e779b48c4047b8adb21258455"}) ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f0000001440)={{r1}, {@val={r7}, @actul_num={@void, 0x80000001, 0x6b}}}) getpeername(r2, &(0x7f0000001480)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @initdev}}, &(0x7f0000001500)=0x80) bpf$MAP_CREATE(0x0, &(0x7f0000001540)=@base={0x9, 0x1, 0x0, 0x200, 0x411, 0x1, 0xfffffff7, '\x00', r4, r1, 0x0, 0x2, 0x4}, 0x50) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000001600)={0x0, {0x2, 0x4e23, @broadcast}, {0x2, 0x4e20, @remote}, {0x2, 0x4e24, @multicast1}, 0x20, 0x0, 0x0, 0x0, 0x4, &(0x7f00000015c0)='team_slave_1\x00', 0x8, 0x956, 0x6}) write$cgroup_netprio_ifpriomap(r2, &(0x7f0000001680)={'macvtap0', 0x32, 0x30}, 0xb) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001780)={&(0x7f0000001700)={0x70, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_RULES={0x34, 0x22, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x6}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x340}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x5}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x6}]}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x6f}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x4}]}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) connect$inet(r0, &(0x7f0000001800)={0x2, 0x4e22, @multicast1}, 0x10) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000001840)) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r8, 0x84, 0x20, &(0x7f0000001880)=0x9, 0x4) connect$vsock_stream(r1, &(0x7f00000018c0)={0x28, 0x0, 0xffffffff}, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001940), r1) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000001a00)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x38, r9, 0x120, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x2e}}}}, [@NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x108}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x8}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x13b}]}, 0x38}, 0x1, 0x0, 0x0, 0xdbca7f50236fd207}, 0x0) r10 = socket$inet(0x2, 0x2, 0x2) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r8, 0x84, 0x1b, &(0x7f0000001a40)={0x0, 0x6c, "147fdb6e31be9cfc3fa97bd422f063c16b5a849b4956ab417ec039d12a02f08a9e9a2c82f3d37e607ee8eb556de3b7d7f0057786e79689971a1a9414ffb53046db0d3e2a5a6ae87f95aeb77084b87e83cff03279c19f3906e19c597e0372063eba513f6b2028e12362850f04"}, &(0x7f0000001ac0)=0x74) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r10, 0x84, 0xf, &(0x7f0000001b00)={r11, @in6={{0xa, 0x4e20, 0x5, @local, 0xd}}, 0x7, 0xfff, 0x8, 0x8}, &(0x7f0000001bc0)=0x98) write$tun(r1, &(0x7f0000001c00)={@void, @val={0x6, 0x2, 0x0, 0x80, 0x9}, @ipv6=@udp={0xb, 0x6, '{~M', 0x10b, 0x11, 0xff, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}, {[@hopopts={0xc8, 0x13, '\x00', [@generic={0x6, 0x9b, "ffe6cdb346d14193a5ded52361afb8a1d50f4bbb99ba68a08a86c73c547746c5d7b60b87232f71d4f93b862dba5d1758c35d0968380fae59495e4777115cb29f5dd16c25b856942f1a6fdaa598081b42f16c306f96abff46cb209d92030eb27d8cf8f0f5dd953267bba72fe469786c5159aa214dcaf3c62255a8d2009fc0d5cfc7f98e32bfc38a42bb789c123784166b98997356069f6811edf008"}]}, @routing={0x62, 0x8, 0x0, 0x4, 0x0, [@rand_addr=' \x01\x00', @loopback, @ipv4={'\x00', '\xff\xff', @multicast2}, @dev={0xfe, 0x80, '\x00', 0x3c}]}], {0x4e22, 0x4e24, 0x1b, 0x0, @wg=@data={0x4, 0x78e9, 0x7fff, "64ad05"}}}}}, 0x13d) sendmsg$NL80211_CMD_JOIN_MESH(r10, &(0x7f00000020c0)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002080)={&(0x7f0000001d80)={0x2c4, r9, 0x10, 0x70bd29, 0x1, {{}, {@void, @val={0xc, 0x99, {0x6, 0x33}}}}, [@NL80211_ATTR_TX_RATES={0x29c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x23, 0x1, [0x1b, 0x9, 0x6c, 0x6c, 0x18, 0x9, 0x18, 0x48, 0x3e, 0x18, 0xc, 0x48, 0x2a, 0xc, 0x5, 0x6c, 0x30, 0x5a, 0x60, 0x20, 0x18, 0x48, 0x23, 0x1b, 0x1, 0x36, 0x5, 0x60, 0x30, 0x30, 0xb]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x64, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x20, 0x2, [{0x5}, {0x0, 0x3}, {0x2, 0x8}, {0x2}, {0x6, 0xa}, {0x3, 0x9}, {0x0, 0x8}, {0x2, 0x5}, {0x2, 0x6}, {0x7, 0x5}, {0x5, 0x3}, {0x7, 0x1}, {0x5}, {0x2, 0x1}, {0x5, 0x8}, {0x6, 0xa}, {0x0, 0x5}, {0x0, 0x7}, {0x3}, {0x0, 0x2}, {0x7, 0x3}, {0x5, 0x5}, {0x3, 0x8}, {0x7}, {0x0, 0x7}, {0x0, 0x4}, {0x7, 0x1}, {0x5, 0x2}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x0, 0x1b, 0xc, 0x1, 0x1b, 0x36, 0x1, 0x1]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x9, 0x3, 0x172, 0x0, 0x0, 0xf5, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x0, 0x4}, {0x6, 0x5}, {0x4, 0x6}, {0x2, 0x4}, {0x1, 0x8}, {0x4, 0x6}, {0x1, 0x5}, {0x0, 0xa}, {0x5, 0x5}, {0x5, 0xa}, {0x6, 0x2}, {0x6, 0x4}, {0x1, 0x3}, {0x7, 0xa}, {0x4, 0x4}, {0x6, 0x8}, {0x2, 0x4}, {}, {0x2, 0x6}, {0x5, 0x7}, {0x1, 0x1}, {0x3, 0x2}, {0x5, 0x2}, {0x0, 0x7}, {0x5, 0x7}, {0x7, 0x9}, {0x7, 0xa}, {0x1, 0x4}, {0x6, 0x5}, {0x7, 0x4}, {0x2, 0x3}, {0x0, 0x4}, {0x5, 0xa}, {0x4, 0xa}, {0x0, 0x1}, {0x6}, {0x0, 0x5}, {0x4}, {0x0, 0x4}, {0x1, 0x6}, {0x6, 0x5}, {0x4}, {0x1}, {0x4, 0x2}, {0x3, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x6, 0x5}, {0x1, 0x9}, {0x5, 0x2}, {0x1, 0x1}, {0x2, 0x4}, {0x4, 0x3}, {0x5, 0x6}, {0x6, 0xa}, {0x7, 0x4}, {0x4, 0x4}, {0x6, 0x9}, {0x0, 0x6}, {0x7, 0x3}, {0x2}, {0x5, 0x1}, {0x5, 0x9}]}]}, @NL80211_BAND_2GHZ={0xf8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x5, 0x9, 0x6, 0xffff, 0x1, 0x9, 0xd217]}}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x48, 0x48, 0x0, 0x6c, 0x60, 0xc, 0x24, 0xc, 0x16, 0xb, 0x12, 0x1, 0x30, 0x1, 0x16, 0x6c, 0x48, 0x1, 0x16, 0x26, 0x3, 0x0, 0x1b, 0x48, 0x18, 0xc, 0x24, 0x1b, 0x16, 0x6c, 0x1b]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xff, 0x2, 0x4, 0x8, 0xa, 0x4, 0xb15, 0xa1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffa, 0x9, 0xfffb, 0x1ff, 0x8, 0x6, 0xffff, 0xc]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x1, 0x2, 0x3ff, 0x6, 0x0, 0x3ff, 0x7]}}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x4, 0x6}, {0x3, 0x1}, {0x0, 0x6}, {0x4, 0x4}, {0x0, 0x3}, {0x3, 0x4}, {0x1, 0x9}, {0x2, 0x1}, {0x1, 0x3}, {0x7, 0x2}, {0x6, 0xa}, {0x6, 0x2}, {0x1}, {0x3, 0x3}, {}, {0x6, 0x5}, {0x1, 0x1}, {0x7, 0x7}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {0x5, 0x4}, {0x2, 0x8}, {0x4, 0x3}, {0x1, 0x3}, {0x4, 0x4}, {0x2, 0x9}, {0x1, 0x2}, {0x3, 0x2}, {0x3, 0x9}, {0x0, 0x6}, {0x7, 0x3}, {0x5, 0x3}, {0x7, 0x1}, {0x1, 0xa}, {0x2}, {0x1, 0x8}, {0x7, 0x1}, {0x7}, {0x6, 0x4}, {0x0, 0x4}, {0x1, 0x9}, {0x4, 0x4}, {0x1, 0x7}, {0x3, 0x9}, {0x7, 0x5}]}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x7, 0x1}, {0x4, 0x6}, {0x0, 0x2}, {0x3, 0x6}, {0x1, 0x1}, {0x4, 0x2}, {0x7, 0x4}, {0x5, 0xa}, {0x5}, {0x0, 0x6}, {0x1, 0x7}, {0x3, 0x8}, {0x4, 0x3}, {0x7, 0x6}, {0x2, 0x5}, {0x7}, {0x5, 0x8}, {0x1, 0x9}, {0x6, 0x9}, {0x3, 0x1}, {0x1}, {0x7, 0x9}, {0x3, 0x6}, {0x5, 0x1}, {0x5, 0x4}, {0x2, 0xa}, {0x7, 0x8}, {0x7, 0x3}, {0x2, 0x9}, {0x6, 0x3}, {0x7, 0x5}, {0x7, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x2}, {0x1, 0x7}, {0x5, 0x8}, {0x2, 0x2}, {0x2, 0x9}, {0x5, 0x2}, {0x4, 0xa}, {0x1, 0x7}, {0x3, 0x6}, {0x6, 0x3}, {0x6, 0x9}, {0x5, 0x4}, {0x0, 0x1}, {0x6, 0x3}, {0x4}, {0x1, 0x9}, {0x1, 0x9}, {0x5, 0x2}, {0x4, 0x9}, {0x7}]}]}, @NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x36, 0x2, [{0x5, 0xa}, {0x4, 0xa}, {0x1, 0x5}, {0x1, 0x7}, {0x7}, {0x0, 0x9}, {0x6, 0x8}, {0x4, 0x6}, {0x7, 0xa}, {0x2, 0x5}, {0x1, 0x6}, {0x3, 0x5}, {0x1, 0x5}, {0x0, 0x7}, {0x5, 0x4}, {0x3, 0xa}, {0x2}, {0x7, 0x3}, {0x4, 0x5}, {0x0, 0x1}, {0x6, 0xa}, {0x2, 0x9}, {0x2, 0x7}, {0x3, 0x8}, {0x0, 0x1}, {0x0, 0x9}, {0x7, 0x4}, {0x6, 0x4}, {0x1, 0x4}, {0x1}, {0x1}, {0x3, 0x4}, {0x4, 0x4}, {0x0, 0xa}, {0x6, 0x7}, {0x7}, {0x1, 0x7}, {0x2}, {0x3, 0x8}, {0x4, 0x3}, {0x0, 0x6}, {0x5, 0xa}, {0x0, 0x2}, {0x5, 0x1}, {0x4, 0x3}, {0x1, 0x2}, {0x1, 0x8}, {0x4, 0x1}, {0x1, 0x5}, {0x6, 0x5}]}]}, @NL80211_BAND_5GHZ={0x70, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x40, 0x7f, 0xc, 0x7, 0x2, 0x7, 0x3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x6, 0x1000, 0xa, 0xfffd, 0x1000, 0x9, 0x3ff]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x1b, 0x12, 0x9, 0x36, 0x16]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x1b, 0x24, 0x18, 0x3, 0x6c, 0x24, 0xc, 0x6c, 0x12]}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x7, 0x8}, {0x6, 0x4}]}]}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x10}]}, 0x2c4}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) 710.055915ms ago: executing program 3 (id=5974): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x10, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000001000000000000000000000089120e000000000095"], &(0x7f0000000100)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x63, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3fffffc}, 0x94) r1 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) (async) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x31, &(0x7f0000001600), 0x4) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) (async) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000400)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x2, 0x5, 0x84) (async) r5 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r5, &(0x7f0000002980)={&(0x7f0000000180)={0x2, 0x0, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f00000004c0)="5f74a874eec639d0a431865ae40232b2c254da19197c3cca19", 0x19}], 0x1}, 0x4000000) setsockopt$sock_attach_bpf(r5, 0x84, 0x1e, &(0x7f0000000000), 0x10) r6 = socket$kcm(0x2, 0x3, 0x2) socket$kcm(0x2, 0x3, 0x2) (async) r7 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8916, &(0x7f0000000040)={'wg1\x00', @random="0200ac7f7f00"}) ioctl$SIOCSIFHWADDR(r6, 0x8916, &(0x7f0000000040)={'veth1_macvtap\x00', @random="0200ac7f7f00"}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}]}}]}, 0x3c}}, 0x24000000) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}]}}]}, 0x3c}}, 0x24000000) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) 645.51777ms ago: executing program 0 (id=5975): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x10, 0x2}, 0x10) connect$inet(r1, &(0x7f00000000c0)={0x10, 0x2}, 0x10) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_mtu(r2, 0x29, 0x4e, &(0x7f0000000400)=0x2, 0x4) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="680000000714010025bd7000ffdbdf25080001000100000008000100000000000900020073797a32000000000900020073797a300000000005004200050000000800010001000000090002007379b6bf000000000900020073797a3000000000080001"], 0x68}}, 0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000000)={{r3}, 0x2, 0x8, 0x4}) unshare(0xca060100) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000000180)={'bridge0\x00', &(0x7f0000000080)=@ethtool_ringparam={0x7, 0x0, 0x20040001, 0xfffffffe, 0xfffffffe, 0x0, 0x0, 0x400, 0x3a}}) syz_emit_ethernet(0x46, &(0x7f0000001640)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "b81923", 0x10, 0x0, 0x0, @local, @remote, {[@dstopts={0x0, 0x1, '\x00', [@calipso={0x7, 0x0, {0x1, 0x0, 0x7, 0x5e4, [0x9, 0x6, 0xad1000]}}, @padn={0x1, 0x2}, @padn={0x1, 0x5a}]}]}}}}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WDS_PEER(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x80, r5, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x9, 0x3}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004000) 557.660076ms ago: executing program 1 (id=5976): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f8483f0000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000440)={0x0, 0x1, 0x1, 0x5, @vifc_lcl_addr=@private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="010028bd7000fedbdf25140000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000039fd0b000000000006001100070000000800150005000000"], 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x4800) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x6}, {0x4, 0x10}}}, 0x24}}, 0x40004) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) bind$can_j1939(r4, &(0x7f0000000040)={0x1d, r5, 0x0, {0x1, 0x0, 0x4}, 0x1}, 0x5c) sendmsg$can_j1939(r4, &(0x7f0000001680)={&(0x7f0000000000)={0x1d, r5, 0x0, {0x2, 0xfe, 0x4}}, 0x18, &(0x7f0000000240)={&(0x7f0000002ac0)="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", 0xffffff55}}, 0x20000845) 382.290041ms ago: executing program 3 (id=5977): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'wlan0\x00', &(0x7f0000000080)=@ethtool_drvinfo={0x3, "2ea101ab090c0a75e57de560ecd9e9980fa794b73644cc05cd4d079809556e06", "777f7aef52eb9fa85d4b788af65280a2d857f95d446f1ee8049e26b9751e9b78", "4db01cdef103294f3acb7a7dfed1411e139c0e05d8c80fa87a21705be3111664", "2bd1f1e94cf5344e6dc0d0b93043a7096d44905b996ba7c55518eac44aaa3163", "e0f569720c553c0a577f8f99e81dd584822ed1f66d1024ba5d75fdc1591cab2d", "68fc0fe43b73999d43efb405", 0x2, 0xe, 0x4, 0x200, 0x7}}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, &(0x7f0000000000), &(0x7f0000000100)=0x4) r3 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), r3) r4 = socket(0xa, 0x3, 0x4) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, 0x0, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r3) sendmsg$ETHTOOL_MSG_WOL_SET(r4, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="a528f64eb2909d1806884db9af0fdb0228799e856d3f4ff6eebd05c7a2c7dbe932de9cb09f94096e7b7c16cf2f897e3bb4190e87597c21c0b8e723e3ccc1dd22c8bc12b0a3a566095ace6f55a7a929efd86db97959ce645942e00a4984259ab6e73cada9aed00f23dcdee698140fceb503cf6ea104119dbcaa256768005c6f32a8da7fbdde152374ca5834cc3ce9", @ANYRES16=r5, @ANYBLOB="010027bd7000fcdbdf250a0000000c000180080003000100000068000280280003801000018004000300040003000400030014000180040003000400030008000100060000000800020000000000330004003d77de6b28200a8855a667f6abe96d019b0e5dfe4dd71e8f136a246a41a4bc331d5bc738ca8c69e1178f00e885f22f00"], 0x88}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 368.605349ms ago: executing program 2 (id=5978): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0xe0e40, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xc8, 0x8, 0xf0, 0x5803, 0x200, 0x2e8, 0x2e8, 0x200, 0x2e8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0xffffff00, 0xff000000], [0xff, 0x34da508f3e8fb0eb, 0xffffff00, 0xff], 'veth0_to_batadv\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x89, 0x7, 0x7, 0x38}, 0x0, 0xa8, 0xf0, 0x0, {0x0, 0x2000000000000}}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2, '\x00', {0x9}}}}, {{@ipv6={@remote, @loopback, [], [], 'macvtap0\x00', 'syzkaller1\x00', {}, {0xff}, 0x0, 0x0, 0x2}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x1ff, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00', {0xfffffffffffffffd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) socket$kcm(0x10, 0x2, 0x10) accept4$x25(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x24}}, 0x0) socket$alg(0x26, 0x5, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000300)=0xffffffffffffffff, 0x4) writev(r3, &(0x7f0000000080), 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet6_sctp(0xa, 0x1, 0x84) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1ab82efe, 0xfffffffffffffffd, 0x1, 0x900, 0xab, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x80000001}, 0x0, 0x0) 318.141331ms ago: executing program 0 (id=5979): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, r1, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'bridge0\x00'}, @NL80211_ATTR_4ADDR={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x8010}, 0x20004000) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xe, 0x49, 0x4, 0x401, 0x8, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f0000000440)}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000500)='%pK \x00'}, 0x20) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x4}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000680)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f0000000640)='%pi6 \x00'}, 0x20) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000006c0)={0x0, 0x3, 0x8}, 0xc) (async) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000006c0)={0x0, 0x3, 0x8}, 0xc) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x4}, 0x50) (async) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x4}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000780)={0x1}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000780)={0x1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0xe, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe00, 0x0, 0x0, 0x0, 0x93}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000280)='GPL\x00', 0xa, 0x6b, &(0x7f00000002c0)=""/107, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x4, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[r4, r5, r6, r7, r8, r9, r10, r11, 0x1], &(0x7f0000000800), 0x10, 0x4}, 0x94) accept4$llc(r3, &(0x7f0000000900)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000940)=0x10, 0x80000) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000980)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000009c0)=0x20) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000a00)=@sack_info={r12, 0x9, 0x5}, 0xc) socket$nl_route(0x10, 0x3, 0x0) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f00000010c0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001080)={&(0x7f0000000ac0)={0x58c, r14, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x1, 0x3f}}}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd2}]}]}, @NL80211_ATTR_TID_CONFIG={0x1e8, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x71}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x3d}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x6b}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa2}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa7}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x41}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x3c}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfffffffffffffeff}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x4}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x7e}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd3}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xaf}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0xd4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x91}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xb4, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xa4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x7, 0x5, 0x9, 0xe8b8, 0x1, 0x400, 0x2ce]}}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x1, 0x4}, {0x2, 0x7}, {0x0, 0x5}, {0x1, 0x3}, {0x0, 0x2}, {0x1, 0x9}, {0x7, 0x6}, {0x3, 0x7}, {0x1, 0x9}, {0x7, 0x3}, {0x6, 0x4}, {0x0, 0x2}, {0x7, 0x1}, {0x6, 0x9}, {0x0, 0x9}, {0x7, 0x5}, {0x4, 0x7}, {0x5, 0xa}, {0x3}, {0x0, 0x4}, {0x0, 0x5}, {0x1}, {}, {0x3, 0x6}, {0x7}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x7, 0x9}, {}, {0x1, 0x7}, {0x7, 0x8}, {0x7, 0x1}]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x1, 0x1b, 0x2, 0x9, 0x48, 0x3, 0x2, 0x6c, 0x2, 0x60, 0x18, 0x16, 0x9, 0x4, 0x1b, 0x12, 0x48, 0xc, 0x1, 0x1, 0x4, 0x6, 0x2, 0x17ed913d353e9c17, 0x4, 0x60, 0x9, 0x9, 0x33]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x2f, 0x2, [{0x4, 0x4}, {0x1, 0x6}, {0x4, 0x1}, {0x1}, {0x5}, {0x1, 0x6}, {0x3, 0x1}, {0x4, 0x9}, {0x6, 0x4}, {0x5, 0x5}, {0x7}, {0x2, 0x9}, {0x1, 0x5}, {0x0, 0x8}, {0x6, 0x6}, {0x4, 0x4}, {0x4}, {0x0, 0x5}, {0x0, 0x9}, {0x1, 0x2}, {0x3}, {0x3, 0x6}, {0x0, 0x2}, {0x4, 0x6}, {0x1, 0x2}, {0x0, 0xa}, {0x1, 0x1}, {0x5, 0x9}, {0x7, 0x8}, {0x0, 0x9}, {0x1}, {0x2, 0x3}, {0x1, 0x1}, {0x0, 0xa}, {0x0, 0x6}, {0x0, 0xa}, {0x6, 0x1}, {0x6, 0x5}, {0x2, 0x7}, {0x5, 0x4}, {0x3}, {0x4, 0x1}, {0x4, 0xa}]}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x308, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xf6}]}, {0x294, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x270, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x6f, 0x1, 0x4, 0x1b, 0x0, 0x18, 0x1b, 0x24, 0x48, 0x616081aa09e666d5, 0x18, 0x16]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x2, 0x1, 0xa9c, 0x81, 0x9, 0x1, 0x1]}}]}, @NL80211_BAND_5GHZ={0x70, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xfff0, 0x4, 0x7, 0x76, 0xf, 0x9, 0xfff8, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x369, 0x9, 0x6, 0x4, 0xe, 0xa043, 0x6]}}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x2, 0x2}, {0x4, 0x1}, {0x2, 0x6}, {0x0, 0xa}, {0x5, 0x9}, {0x3, 0x4}, {0x4}, {0x1, 0x6}, {0x5, 0x5}, {0x0, 0x2}, {0x6, 0x8}, {0x2, 0x1}, {0x1, 0x6}, {0x6, 0x6}, {0x0, 0x7}, {0x0, 0x9}, {0x0, 0x5}, {0x7, 0x5}, {0x1, 0x1}, {0x7, 0x5}, {0x5, 0x7}, {0x3, 0x5}, {0x1, 0x7}, {0x5, 0xa}, {0x4, 0x9}, {0x4, 0x9}, {0x3}, {0x1, 0x8}, {0x1}, {0x7, 0x5}, {0x7, 0x2}, {0x0, 0xa}, {0x3, 0x1}, {0x6, 0x6}, {0x5, 0x2}, {0x2}, {0x2, 0x1}, {0x3, 0x6}, {0x2, 0x3}, {0x1, 0x9}, {0x3, 0x3}, {0x1, 0x8}, {0x3, 0xa}, {0x0, 0x3}, {0x6, 0x4}, {0x3, 0x6}, {0x1, 0x2}, {0x1, 0x5}]}]}, @NL80211_BAND_6GHZ={0xac, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x12, 0x6a, 0x5, 0x36, 0xc, 0x4, 0x3, 0x18, 0x1, 0x12, 0x3, 0x48, 0x1a, 0x1c, 0x60, 0x5, 0x12]}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x4, 0x6}, {0x2}, {0x5, 0x3}, {0x1, 0x5}, {0x4, 0x3}, {0x3, 0x1}, {0x1}, {0x7, 0x4}, {0x2, 0x9}, {0x2, 0x3}, {0x6, 0x9}, {0x6, 0x5}, {0x3, 0x7}, {}, {0x2, 0x6}, {0x1, 0x2}, {0x7, 0x4}, {0x6}, {0x2, 0x5}, {0x4, 0x3}, {0x2}, {0x2, 0x9}, {0x2, 0x6}, {0x2, 0x9}, {0x4, 0x8}, {0x7, 0x9}, {0x5, 0x1}, {0x1, 0x4}, {0x2, 0x5}, {0x4, 0x5}, {0x3, 0x6}, {0x0, 0xa}, {0x0, 0x6}, {0x4, 0xa}, {0x5, 0x2}, {0x4}, {0x4, 0xa}, {0x6, 0x3}, {0x0, 0x3}, {0x3, 0x1}, {0x0, 0x3}, {0x4, 0x9}, {0x7, 0x6}, {0x5, 0x6}, {0x2, 0x7}, {0x1, 0x4}, {0x6, 0x7}, {0x5, 0x8}, {0x2, 0x8}, {0x5, 0x1}, {0x0, 0x6}, {0x0, 0x4}, {0x3, 0x1}, {0x1, 0x8}, {0x1, 0x1}, {0x1, 0x1}, {0x5}, {0x0, 0x4}, {0x7, 0x8}, {0x0, 0x8}, {0x5, 0x2}, {0x1, 0x4}, {0x2, 0x3}, {0x4, 0x9}, {0x0, 0x3}, {0x7, 0x6}, {0x1, 0xa}, {0x7, 0x7}, {0x5, 0x6}, {0x7, 0xa}, {0x7, 0x3}, {0x3, 0x5}]}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x16, 0x12, 0x60, 0x0, 0x30, 0x4, 0x50, 0x6a, 0x1, 0x1, 0x18]}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x24, 0x18, 0x16, 0x4, 0x36, 0x9, 0x1b, 0x9, 0x4, 0x48, 0x6, 0x36, 0x1, 0x2]}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x48, 0x1, 0x6, 0x18, 0x36, 0x60, 0xa, 0x9, 0x2d, 0x24, 0x1b]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x8c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x16, 0x0, 0x4ca1a6932acf6c0c, 0x9, 0x31, 0xc, 0x48, 0xc]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x4ad, 0x12, 0x9, 0x7, 0x3, 0xa9f1, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x7d2, 0x2, 0xfff7, 0x8000, 0x5, 0x8525]}}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x1, 0xc, 0x6, 0x30, 0x4, 0x48, 0x36, 0x16, 0x0, 0x1, 0x6c, 0x2, 0x5, 0x36, 0x36, 0x2]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x9, 0xc, 0x1, 0x8, 0x5, 0x1, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x9eef, 0xb5, 0x8, 0x7ff, 0xfeff, 0x8, 0x5]}}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0x90, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x1, 0x4}, {0x0, 0x7}, {0x2, 0x8}, {0x7, 0x8}, {0x7, 0x2}, {0x1, 0x1}, {0x3, 0x5}, {0x0, 0x4}, {0x6}, {0x2}, {0x6, 0x6}, {0x2, 0x9}, {0x6, 0x1}, {0x4, 0x3}, {0x0, 0x7}, {0x2, 0x1}, {0x7, 0x2}, {0x7, 0x5}, {0x1, 0x7}, {0x6}, {0x4, 0x7}, {0x7, 0x2}, {0x6, 0x4}, {0x0, 0xa}, {0x0, 0x1}, {0x5, 0x4}, {0x5}, {0x4, 0x1}, {0x5, 0x2}, {0x2, 0x1}, {0x0, 0x6}, {}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x5, 0x2, 0xfff, 0x3, 0x58ce, 0x0, 0x67]}}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x1b, 0x5, 0xc, 0x6c, 0x2, 0x16, 0x48, 0x6]}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x7, 0x8}, {0x4, 0x6}, {0x2}, {0x0, 0x9}, {0x1, 0x6}, {0x0, 0x6}, {0x3, 0x2}, {0x4, 0x5}, {0x6, 0x3}, {0x4}, {0x2, 0x2}, {0x0, 0x2}, {0x0, 0xa}, {0x3, 0x4}, {0x5, 0x7}, {0x1, 0x1}, {0x7, 0x3}, {0x1, 0x4}, {0x0, 0x1}, {0x5, 0x7}, {0x5}, {0x7, 0x3}, {0x6, 0x9}, {0x2, 0xa}, {0x6, 0x4}, {0x0, 0xa}, {}, {0x6, 0x9}, {0x6, 0x6}, {0x7, 0x3}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x7}, {0x6, 0x6}, {0x4, 0x3}, {0x0, 0x9}, {0x3, 0x4}, {0x3, 0x9}, {0x2, 0x2}, {0x5, 0x4}, {0x0, 0x1}, {0x3, 0x8}, {0x0, 0x2}, {0x4, 0x3}, {0x2, 0x1}, {0x0, 0x6}, {0x2, 0x9}, {0x5, 0x4}, {0x1, 0x1}, {0x1, 0x7}, {0x2, 0x1}]}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}]}, {0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb0}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x10}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xb57}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x3f}]}]}, @NL80211_ATTR_TID_CONFIG={0x54, 0x11d, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x6b}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x54}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x27}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x58c}, 0x1, 0x0, 0x0, 0x10000}, 0x0) accept4$phonet_pipe(r3, &(0x7f0000001100), &(0x7f0000001140)=0x10, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r15, &(0x7f0000001640)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001600)={&(0x7f00000011c0)={0x43c, r14, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6951, 0x1f}}}}, [@NL80211_ATTR_TID_CONFIG={0x414, 0x11d, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x220, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x1f0, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5937, 0x2, 0x8, 0x7, 0x5, 0xdb3, 0x0, 0x2]}}]}, @NL80211_BAND_60GHZ={0xa4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x1b, 0x8000, 0x6, 0x1, 0x101, 0xe7e, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x3ff, 0x0, 0x5, 0x8, 0xd, 0x800, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xa, 0x7, 0x0, 0x8, 0xd, 0x9, 0xe]}}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x1b, 0x4, 0x5]}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x4, 0x24, 0xc, 0x2, 0x2, 0x3, 0x1, 0x9, 0x16, 0xb, 0x2, 0x12, 0x1, 0x9, 0x5, 0xc, 0x4, 0x6, 0x60, 0x24, 0x18, 0x1, 0x6, 0x4, 0x1, 0x4c, 0x9, 0x5]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4f, 0x5, 0x3, 0x6, 0x676, 0x5, 0x2, 0x1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xa, 0x800, 0x7fff, 0x2, 0x6, 0x3, 0x800]}}]}, @NL80211_BAND_2GHZ={0x64, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x48, 0x4, 0x48, 0x48, 0x18, 0x60, 0x36, 0x6, 0x5, 0x1b, 0x24, 0x16, 0x48, 0xb, 0x9, 0x18, 0x16, 0x3, 0x6c, 0x1, 0xc, 0x12, 0x48, 0x4, 0x1, 0xb, 0x6, 0x5]}, @NL80211_TXRATE_HT={0xb, 0x2, [{0x2, 0x5}, {0x3, 0x9}, {0x6, 0x5}, {0x1, 0x1}, {0x0, 0x9}, {0x2, 0x5}, {0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x90ac, 0x4, 0x8000, 0x3, 0x8000, 0xea7c, 0x573]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x9, 0x1, 0x3, 0x30, 0x9, 0x9, 0x24, 0x30, 0x3, 0x12, 0xb, 0x2, 0xd, 0xb, 0x4, 0x9, 0x48, 0x2, 0x36, 0x18, 0x48, 0x60, 0x1, 0x18, 0x36, 0x6c, 0x6, 0x13]}]}, @NL80211_BAND_60GHZ={0xac, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x6, 0x8}, {0x1, 0x6}, {0x1, 0x3}, {0x1, 0xa}, {0x3, 0x3}, {0x7, 0xa}, {0x1}, {0x0, 0x1}, {0x4, 0x4}, {0x7, 0x4}, {0x1, 0x8}, {0x1, 0xa}, {0x1, 0x3}, {0x3, 0x7}, {0x0, 0x5}, {0x1, 0x5}, {0x1}, {0x3}, {0x6, 0x5}, {0x6, 0x9}, {0x3, 0x4}, {0x4, 0x3}, {0x6, 0xa}, {0x2, 0x2}, {0x0, 0xa}, {0x2, 0x4}, {0x4, 0x3}, {0x1, 0x4}, {0x1, 0x1}, {0x7, 0x6}, {0x5, 0x6}, {0x2, 0x2}, {0x5, 0x2}, {0x4, 0x3}, {0x7, 0x5}, {0x0, 0x9}, {0x7, 0x1}, {0x1, 0x5}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x440, 0x4, 0x4, 0x7, 0xc527, 0x5, 0x5, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x36, 0x3, 0xb, 0x2, 0xb, 0xc, 0x19, 0x60, 0x9, 0x4, 0x30, 0x60, 0x36, 0x24, 0x1b, 0x1b, 0x6, 0x48, 0xb]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x3, 0xf6, 0x8, 0x5550, 0x4, 0x3, 0xffd]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8b, 0x3, 0x7, 0x7, 0x1, 0x8c85, 0x6, 0x9]}}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x158, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x134, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x48, 0x2, [{0x1, 0x4}, {0x0, 0x8}, {0x1, 0x2}, {0x4, 0x3}, {0x3}, {0x0, 0x2}, {0x1, 0x9}, {0x1}, {0x6}, {0x6, 0x8}, {0x2, 0x2}, {0x5, 0x8}, {0x5, 0x2}, {0x0, 0x6}, {0x6, 0x1}, {0x7, 0x5}, {0x2, 0x3}, {0x4, 0x3}, {0x0, 0x4}, {0x6, 0x8}, {0x0, 0x2}, {0x5}, {0x2, 0x2}, {0x4, 0x4}, {0x4, 0x7}, {0x0, 0x5}, {0x2, 0x2}, {0x7}, {0x1}, {0x2, 0x8}, {0x5, 0x5}, {0x1, 0x1}, {0x7, 0x8}, {0x3, 0x5}, {0x4, 0x8}, {0x6, 0x7}, {0x0, 0x6}, {0x0, 0x8}, {0x7}, {0x3, 0x8}, {0x6, 0x4}, {0x6, 0x4}, {0x2, 0x6}, {0x0, 0x1}, {0x4, 0xa}, {0x1, 0x7}, {0x1, 0x6}, {0x0, 0x1}, {0x5, 0x7}, {0x5}, {0x5, 0x5}, {}, {0x4}, {0x2, 0xa}, {0x3, 0x1}, {0x5, 0x4}, {0x0, 0x4}, {0x5, 0x4}, {0x3, 0x2}, {}, {0x1, 0x4}, {0x0, 0xa}, {0x2, 0x8}, {0x0, 0x2}, {0x6, 0x5}, {0x1, 0x9}, {0x1, 0x2}, {0x1, 0xa}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x6, 0x5, 0x9, 0x9, 0x0, 0x1000, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x1000, 0x4, 0x100, 0x3, 0x5, 0x1, 0x1]}}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x13, 0x2, [{0x1, 0x9}, {0x7, 0x9}, {0x3, 0x8}, {0x7, 0x6}, {0x6, 0x6}, {0x6, 0x1}, {0x4, 0x9}, {0x0, 0x9}, {0x6, 0xa}, {0x4, 0x8}, {0x3, 0x4}, {0x2, 0x7}, {0x6, 0x6}, {}, {0x1, 0x6}]}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x7, 0xa}, {0x2, 0xa}, {0x1, 0x5}, {0x1, 0x4}, {0x3, 0x7}, {0x5}, {0x0, 0x7}, {0x2, 0x1}, {0x6, 0xa}, {0x4, 0x1}, {0x5, 0x8}, {0x0, 0xa}, {0x7, 0x1}, {0x1}, {0x3, 0x7}, {0x5, 0x6}, {0x5}, {0x7, 0x3}, {0x5, 0x7}, {0x2, 0x7}, {0x1, 0x1}, {0x7, 0x9}, {0x2}, {0x0, 0x3}, {0x6, 0x5}, {0x1}, {0x0, 0xa}, {0x1, 0x4}, {0x1, 0x6}, {0x4}, {0x0, 0x7}, {0x2, 0x7}, {0x0, 0xa}, {0x0, 0x3}, {0x5, 0x1}, {0x1, 0x6}, {}, {0x0, 0x1}, {0x0, 0x2}, {0x3, 0x8}, {0x2, 0x8}]}]}, @NL80211_BAND_6GHZ={0x24, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x5, 0x5}, {0x7, 0x6}, {0x1}, {0x7, 0x7}, {0x7, 0x6}, {0x4, 0x3}, {0x0, 0x9}, {0x7, 0x1}, {0x0, 0x5}, {0x3, 0x5}]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x38, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x60, 0x4, 0x16, 0x4, 0x1, 0x60, 0x16, 0x2, 0x3, 0x36, 0x1b, 0x60, 0x34, 0xc, 0x9, 0x6, 0x3, 0x1b, 0x0, 0x18, 0x18, 0x0, 0x1, 0x4, 0x4]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3a8, 0xc, 0x6, 0x400, 0x9, 0x9, 0x81, 0x5]}}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xfffffffffffffff9}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xc2}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x7a}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9c}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x21}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x75}]}]}]}, 0x43c}, 0x1, 0x0, 0x0, 0x4010}, 0xc840) (async) sendmsg$NL80211_CMD_SET_TID_CONFIG(r15, &(0x7f0000001640)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001600)={&(0x7f00000011c0)={0x43c, r14, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6951, 0x1f}}}}, [@NL80211_ATTR_TID_CONFIG={0x414, 0x11d, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x220, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x1f0, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5937, 0x2, 0x8, 0x7, 0x5, 0xdb3, 0x0, 0x2]}}]}, @NL80211_BAND_60GHZ={0xa4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x1b, 0x8000, 0x6, 0x1, 0x101, 0xe7e, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x3ff, 0x0, 0x5, 0x8, 0xd, 0x800, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xa, 0x7, 0x0, 0x8, 0xd, 0x9, 0xe]}}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x1b, 0x4, 0x5]}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x4, 0x24, 0xc, 0x2, 0x2, 0x3, 0x1, 0x9, 0x16, 0xb, 0x2, 0x12, 0x1, 0x9, 0x5, 0xc, 0x4, 0x6, 0x60, 0x24, 0x18, 0x1, 0x6, 0x4, 0x1, 0x4c, 0x9, 0x5]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4f, 0x5, 0x3, 0x6, 0x676, 0x5, 0x2, 0x1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xa, 0x800, 0x7fff, 0x2, 0x6, 0x3, 0x800]}}]}, @NL80211_BAND_2GHZ={0x64, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x48, 0x4, 0x48, 0x48, 0x18, 0x60, 0x36, 0x6, 0x5, 0x1b, 0x24, 0x16, 0x48, 0xb, 0x9, 0x18, 0x16, 0x3, 0x6c, 0x1, 0xc, 0x12, 0x48, 0x4, 0x1, 0xb, 0x6, 0x5]}, @NL80211_TXRATE_HT={0xb, 0x2, [{0x2, 0x5}, {0x3, 0x9}, {0x6, 0x5}, {0x1, 0x1}, {0x0, 0x9}, {0x2, 0x5}, {0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x90ac, 0x4, 0x8000, 0x3, 0x8000, 0xea7c, 0x573]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x9, 0x1, 0x3, 0x30, 0x9, 0x9, 0x24, 0x30, 0x3, 0x12, 0xb, 0x2, 0xd, 0xb, 0x4, 0x9, 0x48, 0x2, 0x36, 0x18, 0x48, 0x60, 0x1, 0x18, 0x36, 0x6c, 0x6, 0x13]}]}, @NL80211_BAND_60GHZ={0xac, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x6, 0x8}, {0x1, 0x6}, {0x1, 0x3}, {0x1, 0xa}, {0x3, 0x3}, {0x7, 0xa}, {0x1}, {0x0, 0x1}, {0x4, 0x4}, {0x7, 0x4}, {0x1, 0x8}, {0x1, 0xa}, {0x1, 0x3}, {0x3, 0x7}, {0x0, 0x5}, {0x1, 0x5}, {0x1}, {0x3}, {0x6, 0x5}, {0x6, 0x9}, {0x3, 0x4}, {0x4, 0x3}, {0x6, 0xa}, {0x2, 0x2}, {0x0, 0xa}, {0x2, 0x4}, {0x4, 0x3}, {0x1, 0x4}, {0x1, 0x1}, {0x7, 0x6}, {0x5, 0x6}, {0x2, 0x2}, {0x5, 0x2}, {0x4, 0x3}, {0x7, 0x5}, {0x0, 0x9}, {0x7, 0x1}, {0x1, 0x5}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x440, 0x4, 0x4, 0x7, 0xc527, 0x5, 0x5, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x36, 0x3, 0xb, 0x2, 0xb, 0xc, 0x19, 0x60, 0x9, 0x4, 0x30, 0x60, 0x36, 0x24, 0x1b, 0x1b, 0x6, 0x48, 0xb]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x3, 0xf6, 0x8, 0x5550, 0x4, 0x3, 0xffd]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8b, 0x3, 0x7, 0x7, 0x1, 0x8c85, 0x6, 0x9]}}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x158, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x134, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x48, 0x2, [{0x1, 0x4}, {0x0, 0x8}, {0x1, 0x2}, {0x4, 0x3}, {0x3}, {0x0, 0x2}, {0x1, 0x9}, {0x1}, {0x6}, {0x6, 0x8}, {0x2, 0x2}, {0x5, 0x8}, {0x5, 0x2}, {0x0, 0x6}, {0x6, 0x1}, {0x7, 0x5}, {0x2, 0x3}, {0x4, 0x3}, {0x0, 0x4}, {0x6, 0x8}, {0x0, 0x2}, {0x5}, {0x2, 0x2}, {0x4, 0x4}, {0x4, 0x7}, {0x0, 0x5}, {0x2, 0x2}, {0x7}, {0x1}, {0x2, 0x8}, {0x5, 0x5}, {0x1, 0x1}, {0x7, 0x8}, {0x3, 0x5}, {0x4, 0x8}, {0x6, 0x7}, {0x0, 0x6}, {0x0, 0x8}, {0x7}, {0x3, 0x8}, {0x6, 0x4}, {0x6, 0x4}, {0x2, 0x6}, {0x0, 0x1}, {0x4, 0xa}, {0x1, 0x7}, {0x1, 0x6}, {0x0, 0x1}, {0x5, 0x7}, {0x5}, {0x5, 0x5}, {}, {0x4}, {0x2, 0xa}, {0x3, 0x1}, {0x5, 0x4}, {0x0, 0x4}, {0x5, 0x4}, {0x3, 0x2}, {}, {0x1, 0x4}, {0x0, 0xa}, {0x2, 0x8}, {0x0, 0x2}, {0x6, 0x5}, {0x1, 0x9}, {0x1, 0x2}, {0x1, 0xa}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x6, 0x5, 0x9, 0x9, 0x0, 0x1000, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x1000, 0x4, 0x100, 0x3, 0x5, 0x1, 0x1]}}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x13, 0x2, [{0x1, 0x9}, {0x7, 0x9}, {0x3, 0x8}, {0x7, 0x6}, {0x6, 0x6}, {0x6, 0x1}, {0x4, 0x9}, {0x0, 0x9}, {0x6, 0xa}, {0x4, 0x8}, {0x3, 0x4}, {0x2, 0x7}, {0x6, 0x6}, {}, {0x1, 0x6}]}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x7, 0xa}, {0x2, 0xa}, {0x1, 0x5}, {0x1, 0x4}, {0x3, 0x7}, {0x5}, {0x0, 0x7}, {0x2, 0x1}, {0x6, 0xa}, {0x4, 0x1}, {0x5, 0x8}, {0x0, 0xa}, {0x7, 0x1}, {0x1}, {0x3, 0x7}, {0x5, 0x6}, {0x5}, {0x7, 0x3}, {0x5, 0x7}, {0x2, 0x7}, {0x1, 0x1}, {0x7, 0x9}, {0x2}, {0x0, 0x3}, {0x6, 0x5}, {0x1}, {0x0, 0xa}, {0x1, 0x4}, {0x1, 0x6}, {0x4}, {0x0, 0x7}, {0x2, 0x7}, {0x0, 0xa}, {0x0, 0x3}, {0x5, 0x1}, {0x1, 0x6}, {}, {0x0, 0x1}, {0x0, 0x2}, {0x3, 0x8}, {0x2, 0x8}]}]}, @NL80211_BAND_6GHZ={0x24, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x5, 0x5}, {0x7, 0x6}, {0x1}, {0x7, 0x7}, {0x7, 0x6}, {0x4, 0x3}, {0x0, 0x9}, {0x7, 0x1}, {0x0, 0x5}, {0x3, 0x5}]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x38, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x60, 0x4, 0x16, 0x4, 0x1, 0x60, 0x16, 0x2, 0x3, 0x36, 0x1b, 0x60, 0x34, 0xc, 0x9, 0x6, 0x3, 0x1b, 0x0, 0x18, 0x18, 0x0, 0x1, 0x4, 0x4]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3a8, 0xc, 0x6, 0x400, 0x9, 0x9, 0x81, 0x5]}}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xfffffffffffffff9}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xc2}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x7a}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9c}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x21}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x75}]}]}]}, 0x43c}, 0x1, 0x0, 0x0, 0x4010}, 0xc840) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r16 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r16, 0x84, 0x10, &(0x7f0000001680)=@assoc_value={r13, 0x81}, &(0x7f00000016c0)=0x8) (async) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r16, 0x84, 0x10, &(0x7f0000001680)=@assoc_value={r13, 0x81}, &(0x7f00000016c0)=0x8) ioctl$sock_ifreq(r15, 0x8943, &(0x7f0000001700)={'veth0_macvtap\x00', @ifru_flags=0x2}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000017c0)={{r8}, &(0x7f0000001740), &(0x7f0000001780)='%+9llu \x00'}, 0x20) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000017c0)={{r8}, &(0x7f0000001740), &(0x7f0000001780)='%+9llu \x00'}, 0x20) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000001800)=@sack_info={r13, 0x5, 0x9}, &(0x7f0000001840)=0xc) (async) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000001800)=@sack_info={r13, 0x5, 0x9}, &(0x7f0000001840)=0xc) ioctl$AUTOFS_IOC_PROTOSUBVER(r6, 0x80049367, &(0x7f0000001880)) (async) ioctl$AUTOFS_IOC_PROTOSUBVER(r6, 0x80049367, &(0x7f0000001880)) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r10, 0x80489439, &(0x7f00000018c0)) 1.628806ms ago: executing program 1 (id=5980): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0xfffd, 'syz0\x00', @default, 0xfffffdb8, 0x2, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f00000001c0)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x2, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) r5 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r5, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000024c0)=0x80) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=@newtfilter={0x34, 0x2c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0x0, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x10000, 'syz0\x00', @default, 0xfffffdb6, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x10001, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) setsockopt(r0, 0x84, 0x81, &(0x7f00000003c0)="1a00000002000100", 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x1b, &(0x7f0000000380)={0x0, 0x5}, &(0x7f0000000180)=0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x2, 0x5, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4aef6a06}, [@call={0x85, 0x0, 0x0, 0x43}, @ldst={0x6, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x93, &(0x7f00000005c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96, 0x0, 0xfffffffffffffc8d}, 0x4c) 0s ago: executing program 0 (id=5981): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000080)='z', 0x1}], 0x1) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x2, 0x9, 0x0, 0x9, 0x2, 0x0, 0xffffffff, 0x25dfdc01}, 0x10}}, 0x0) accept4(r0, 0x0, 0x0, 0x800) kernel console output (not intermixed with test programs): over after parsing attributes in process `syz.4.3701'. [ 455.111199][T19350] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3715'. [ 455.422545][T19359] netlink: 'syz.4.3720': attribute type 4 has an invalid length. [ 455.511473][T19365] tipc: Enabled bearer , priority 0 [ 455.538629][T19365] syzkaller0: entered promiscuous mode [ 455.571020][T19365] syzkaller0: entered allmulticast mode [ 455.682009][T19365] tipc: Resetting bearer [ 455.699664][T19362] tipc: Resetting bearer [ 455.766603][T19382] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3726'. [ 455.813563][T19362] tipc: Disabling bearer [ 455.825908][T19385] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3722'. [ 456.196379][T19397] : renamed from bridge_slave_0 (while UP) [ 456.264692][T19397] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 456.326971][T19407] smc: net device bond0 erased user defined pnetid SYZ0 [ 456.517660][T19417] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 456.765308][T19419] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.773136][T19419] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.917597][T19419] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 456.933968][T19419] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 457.077384][T19430] pimreg: entered allmulticast mode [ 457.118936][ T155] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 457.158805][ T155] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.178438][ T155] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 457.218027][ T155] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.256827][ T155] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 457.279854][ T155] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.318164][ T155] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 457.345540][ T155] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.585449][T19470] netlink: 'syz.2.3751': attribute type 4 has an invalid length. [ 457.677657][T19476] netlink: 'syz.2.3754': attribute type 1 has an invalid length. [ 457.766386][T19480] netlink: 'syz.3.3755': attribute type 10 has an invalid length. [ 458.035697][T19486] 0ªî{X¹¦: left allmulticast mode [ 458.413959][T19505] netlink: 'syz.4.3761': attribute type 1 has an invalid length. [ 458.488138][T19486] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.495976][T19486] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.690715][T19520] netlink: 'syz.2.3764': attribute type 16 has an invalid length. [ 458.706175][T19520] netlink: 'syz.2.3764': attribute type 17 has an invalid length. [ 458.770032][T19525] openvswitch: netlink: Flow key attr not present in new flow. [ 458.855560][T19527] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 459.024891][T19486] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 459.056330][T19486] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 459.456139][T19518] tipc: Enabled bearer , priority 0 [ 459.496462][T19520] ip6tnl0: left promiscuous mode [ 459.508605][T19520] ip6tnl0: left allmulticast mode [ 459.558989][T19520] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 459.661058][ T59] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.671059][ T59] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.680908][ T59] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.690802][ T59] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.710575][T19515] tipc: Disabling bearer [ 459.913152][T19541] netlink: 'syz.2.3767': attribute type 11 has an invalid length. [ 459.929872][T19541] __nla_validate_parse: 7 callbacks suppressed [ 459.929893][T19541] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3767'. [ 459.994109][T19549] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 460.114876][T19558] netlink: 'syz.4.3773': attribute type 58 has an invalid length. [ 460.132790][T19558] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3773'. [ 460.193168][T19560] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3774'. [ 460.466648][T19576] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 460.791361][T19591] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3785'. [ 460.809448][T19591] !: renamed from dummy0 [ 460.824098][T19592] syzkaller0: entered promiscuous mode [ 460.835214][T19592] syzkaller0: entered allmulticast mode [ 461.243689][T19600] netlink: 'syz.3.3788': attribute type 1 has an invalid length. [ 461.281183][T19600] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3788'. [ 461.423648][T19605] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3790'. [ 461.473148][T19609] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3792'. [ 461.487954][T19605] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3790'. [ 461.522552][T19612] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input6 [ 461.744771][T19624] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 461.806459][T19629] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.3798'. [ 462.124254][T19648] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3802'. [ 462.206068][T19652] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 462.278815][T19654] netlink: 'syz.2.3804': attribute type 62 has an invalid length. [ 462.406203][T19661] : left allmulticast mode [ 462.422212][T19661] : left promiscuous mode [ 462.427203][T19661] bridge0: port 1() entered disabled state [ 462.447730][T19661] bridge_slave_1: left allmulticast mode [ 462.456923][T19661] bridge_slave_1: left promiscuous mode [ 462.465323][T19661] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.508796][T19661] bond0: (slave bond_slave_0): Releasing backup interface [ 462.534935][T19661] bond0: (slave bond_slave_1): Releasing backup interface [ 462.602161][T19661] team0: Port device team_slave_0 removed [ 462.652594][T19661] team0: Port device team_slave_1 removed [ 462.663619][T19661] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 462.671528][T19661] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 462.686119][T19661] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 462.696781][T19661] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 462.728118][T19661] bond1: left promiscuous mode [ 462.733529][T19661] bridge0: port 3(bond1) entered disabled state [ 463.110660][T19698] netlink: 'syz.1.3816': attribute type 21 has an invalid length. [ 463.358769][T19713] netlink: 'syz.1.3820': attribute type 10 has an invalid length. [ 463.388438][T19713] team0: Device ipvlan1 failed to register rx_handler [ 464.303376][T19756] Dead loop on virtual device ip6_vti0, fix it urgently! [ 464.355414][T19759] Dead loop on virtual device ip6_vti0, fix it urgently! [ 464.394536][T19760] tipc: Started in network mode [ 464.422302][T19760] tipc: Node identity ac14140f, cluster identity 4711 [ 464.440889][T19760] tipc: New replicast peer: 255.255.255.255 [ 464.448820][T19760] tipc: Enabled bearer , priority 10 [ 464.457140][T19763] netlink: 'syz.3.3835': attribute type 64 has an invalid length. [ 464.530895][T19766] netlink: 'syz.0.3837': attribute type 1 has an invalid length. [ 464.720469][T19777] IPVS: set_ctl: invalid protocol: 51 127.0.0.1:20002 [ 464.811325][T19787] Unsupported ieee802154 address type: 0 [ 464.967508][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 464.983363][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 465.091659][T19794] __nla_validate_parse: 11 callbacks suppressed [ 465.091680][T19794] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3844'. [ 465.185902][T19811] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3850'. [ 465.265393][T19817] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3850'. [ 465.285445][T19811] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3850'. [ 465.302865][T19817] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3850'. [ 465.560684][ T9344] tipc: Node number set to 2886997007 [ 465.656358][T19829] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 466.222837][T19871] netlink: 'syz.1.3867': attribute type 1 has an invalid length. [ 466.312310][T19874] : renamed from bridge_slave_0 [ 466.466119][T19883] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3874'. [ 466.608473][T19883] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 466.630446][T19892] team0: Device vti0 is of different type [ 466.680748][T19893] team0: Device vti0 is of different type [ 466.969147][T19915] netlink: 'syz.1.3882': attribute type 3 has an invalid length. [ 466.993381][T19915] netlink: 666 bytes leftover after parsing attributes in process `syz.1.3882'. [ 467.190443][T19926] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3884'. [ 467.206367][T19920] netlink: 'syz.2.3884': attribute type 5 has an invalid length. [ 467.556225][T19943] netlink: 'syz.2.3889': attribute type 10 has an invalid length. [ 467.602000][T19943] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 467.663172][T19943] netlink: 'syz.2.3889': attribute type 10 has an invalid length. [ 467.678584][T19943] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 467.711929][T19952] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3891'. [ 468.086835][T19966] ip6gre0: entered promiscuous mode [ 468.218081][T19978] netlink: 'syz.3.3898': attribute type 21 has an invalid length. [ 468.261344][T19978] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3898'. [ 468.316233][T19978] netlink: 'syz.3.3898': attribute type 18 has an invalid length. [ 468.426423][ T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 468.426590][T19978] netlink: 'syz.3.3898': attribute type 18 has an invalid length. [ 468.451081][ T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 468.471097][ T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 468.506981][ T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 468.689120][ T929] IPVS: starting estimator thread 0... [ 468.794214][T20014] netlink: 'syz.1.3907': attribute type 83 has an invalid length. [ 468.809443][T20012] IPVS: using max 27 ests per chain, 64800 per kthread [ 469.377349][T20047] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 469.945111][T20084] netlink: 'syz.1.3925': attribute type 21 has an invalid length. [ 470.140817][T20093] __nla_validate_parse: 16 callbacks suppressed [ 470.140840][T20093] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.3929'. [ 470.164670][T20093] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3929'. [ 470.502665][T20111] bridge2: entered promiscuous mode [ 470.508527][T20111] bridge2: entered allmulticast mode [ 470.753466][T20119] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3939'. [ 470.805530][T20119] pim6reg1: entered promiscuous mode [ 470.812635][T20119] pim6reg1: entered allmulticast mode [ 470.971487][T20134] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3942'. [ 471.102793][T20139] netlink: 'syz.3.3944': attribute type 11 has an invalid length. [ 471.129008][T20137] netlink: 'syz.3.3944': attribute type 11 has an invalid length. [ 471.184281][T20137] netlink: 766 bytes leftover after parsing attributes in process `syz.3.3944'. [ 471.244827][T20137] validate_nla: 1 callbacks suppressed [ 471.244851][T20137] netlink: 'syz.3.3944': attribute type 10 has an invalid length. [ 471.269963][T20139] netlink: 'syz.3.3944': attribute type 10 has an invalid length. [ 471.277867][T20139] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3944'. [ 471.314648][T20137] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3944'. [ 471.354804][T20137] team0: Port device geneve0 added [ 472.094701][T20190] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3958'. [ 472.718082][T20212] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:20002 [ 472.985544][T20225] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3968'. [ 473.132324][T20229] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3969'. [ 473.215215][T20229] ip6gretap0: entered promiscuous mode [ 473.257994][T20229] ip6gretap0: left promiscuous mode [ 473.406411][T20247] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 473.442324][T20247] openvswitch: netlink: Duplicate key (type 0). [ 473.580806][T20259] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 473.835862][T20274] netlink: 'syz.2.3986': attribute type 10 has an invalid length. [ 473.890550][T20274] bridge0: port 3(team0) entered blocking state [ 473.897205][T20274] bridge0: port 3(team0) entered disabled state [ 473.904301][T20274] team0: entered allmulticast mode [ 473.919511][T20274] team_slave_0: entered allmulticast mode [ 473.925292][T20274] team_slave_1: entered allmulticast mode [ 473.953783][T20274] team0: entered promiscuous mode [ 473.967639][T20274] team_slave_0: entered promiscuous mode [ 473.981716][T20274] team_slave_1: entered promiscuous mode [ 473.999087][T20274] bridge0: port 3(team0) entered blocking state [ 474.005552][T20274] bridge0: port 3(team0) entered forwarding state [ 474.051145][ T59] batman_adv: batadv0: MLD Querier appeared [ 474.318259][T20294] ipvlan1: entered promiscuous mode [ 474.329858][T20294] ipvlan1: entered allmulticast mode [ 474.340014][T20294] veth0_vlan: entered allmulticast mode [ 474.684242][T20307] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap0 [ 474.777795][T20307] gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 474.789916][T20307] gretap0: entered promiscuous mode [ 474.795295][T20307] gretap0: entered allmulticast mode [ 475.105784][T20318] netlink: 'syz.0.3999': attribute type 1 has an invalid length. [ 475.122197][T20320] netlink: 'syz.0.3999': attribute type 1 has an invalid length. [ 475.134134][T20320] netlink: 'syz.0.3999': attribute type 3 has an invalid length. [ 475.145693][T20318] netlink: 'syz.0.3999': attribute type 3 has an invalid length. [ 475.160848][T20318] __nla_validate_parse: 11 callbacks suppressed [ 475.160868][T20318] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3999'. [ 475.164323][T20319] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 475.195265][T20327] netlink: 208 bytes leftover after parsing attributes in process `syz.1.4002'. [ 475.390193][ T55] block nbd1: Possible stuck request ffff8880254a5080: control (read@0,1024B). Runtime 210 seconds [ 475.401651][ T55] block nbd1: Possible stuck request ffff8880254a5240: control (read@1024,1024B). Runtime 210 seconds [ 475.413313][ T55] block nbd1: Possible stuck request ffff8880254a5400: control (read@2048,1024B). Runtime 210 seconds [ 475.425855][ T55] block nbd1: Possible stuck request ffff8880254a55c0: control (read@3072,1024B). Runtime 210 seconds [ 476.570494][T20383] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 476.583526][T20388] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4016'. [ 476.627979][T20388] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4016'. [ 476.730075][T20391] syzkaller1: entered promiscuous mode [ 476.741260][T20391] syzkaller1: entered allmulticast mode [ 476.758820][T20391] netlink: 'syz.2.4017': attribute type 1 has an invalid length. [ 476.882870][T20397] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 476.901643][T20397] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 476.912968][T20403] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4022'. [ 476.952452][T20391] gretap1: entered promiscuous mode [ 476.962653][T20391] bond1: (slave gretap1): making interface the new active one [ 476.973196][T20391] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 476.983121][T20407] netlink: 'syz.1.4022': attribute type 1 has an invalid length. [ 476.991810][T20407] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4022'. [ 477.047487][T20403] hsr_slave_1 (unregistering): left promiscuous mode [ 477.068820][T20409] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4021'. [ 477.071435][T20406] macvlan2: entered promiscuous mode [ 477.097512][T20406] macvlan2: entered allmulticast mode [ 477.105008][T20406] bond1: entered promiscuous mode [ 477.111946][T20406] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 477.125700][T20406] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 477.146388][T20406] bond1: left promiscuous mode [ 477.358039][T20420] netlink: 'syz.3.4025': attribute type 10 has an invalid length. [ 477.378481][T20420] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4025'. [ 477.514449][T20424] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4026'. [ 477.561970][T20424] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4026'. [ 479.032656][T20495] netlink: 'syz.2.4047': attribute type 28 has an invalid length. [ 479.045878][T20495] netlink: 'syz.2.4047': attribute type 3 has an invalid length. [ 479.313874][T20511] pim6reg1: entered promiscuous mode [ 479.326673][T20511] pim6reg1: entered allmulticast mode [ 479.417246][T20515] nbd: must specify a device to reconfigure [ 479.601073][T20525] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 479.644357][T20525] tap0: tun_chr_ioctl cmd 2148553947 [ 479.654537][T20525] syzkaller0: entered promiscuous mode [ 479.660782][T20525] syzkaller0: entered allmulticast mode [ 479.961785][T20547] syzkaller0: entered promiscuous mode [ 479.967471][T20547] syzkaller0: entered allmulticast mode [ 480.403424][T20571] __nla_validate_parse: 5 callbacks suppressed [ 480.403447][T20571] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4072'. [ 480.477566][T20571] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4072'. [ 480.507010][T20572] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4073'. [ 480.532147][T20572] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4073'. [ 480.603684][T20576] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4075'. [ 480.836060][T20585] netlink: 'syz.1.4078': attribute type 29 has an invalid length. [ 480.882058][T20588] netlink: 'syz.1.4078': attribute type 29 has an invalid length. [ 480.911992][T20585] netlink: 596 bytes leftover after parsing attributes in process `syz.1.4078'. [ 481.132807][T20592] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 481.631110][T20616] netlink: 'syz.2.4088': attribute type 10 has an invalid length. [ 481.848692][T20627] netlink: 108 bytes leftover after parsing attributes in process `syz.3.4092'. [ 481.858445][T20627] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4092'. [ 481.876851][T20627] netlink: 'syz.3.4092': attribute type 29 has an invalid length. [ 481.896244][T20627] netlink: 'syz.3.4092': attribute type 29 has an invalid length. [ 481.923849][T20627] netlink: 500 bytes leftover after parsing attributes in process `syz.3.4092'. [ 482.337713][T20647] dvmrp0: entered allmulticast mode [ 482.480710][T20653] sctp: [Deprecated]: syz.4.4101 (pid 20653) Use of int in max_burst socket option deprecated. [ 482.480710][T20653] Use struct sctp_assoc_value instead [ 482.533526][T20653] netlink: 'syz.4.4101': attribute type 1 has an invalid length. [ 482.541627][T20653] netlink: 236 bytes leftover after parsing attributes in process `syz.4.4101'. [ 482.566898][T20658] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 482.752673][T20666] 8021q: adding VLAN 0 to HW filter on device bond0 [ 482.778193][T20666] bond0: (slave rose0): Enslaving as an active interface with an up link [ 482.958886][T20684] netlink: 'syz.2.4109': attribute type 4 has an invalid length. [ 483.298717][T20702] vlan3: entered allmulticast mode [ 483.320043][T20702] gretap0: entered allmulticast mode [ 483.440860][T20713] C: renamed from lo [ 483.607939][T20722] netlink: 'syz.4.4123': attribute type 1 has an invalid length. [ 483.622065][T20722] netlink: 'syz.4.4123': attribute type 1 has an invalid length. [ 483.638415][T20722] netlink: 'syz.4.4123': attribute type 2 has an invalid length. [ 483.775891][T20732] syzkaller1: entered promiscuous mode [ 483.800121][T20732] syzkaller1: entered allmulticast mode [ 483.898932][T20740] netlink: 'syz.2.4128': attribute type 1 has an invalid length. [ 483.925312][T20740] netlink: 'syz.2.4128': attribute type 2 has an invalid length. [ 484.153308][T20752] tipc: Enabled bearer , priority 0 [ 484.183339][T20752] syzkaller0: entered promiscuous mode [ 484.188884][T20752] syzkaller0: entered allmulticast mode [ 484.278040][T20752] tipc: Resetting bearer [ 484.323862][T20750] tipc: Resetting bearer [ 484.421346][T20750] tipc: Disabling bearer [ 484.694837][T20790] netlink: 'syz.4.4145': attribute type 10 has an invalid length. [ 484.736486][T20790] veth0_macvtap: left promiscuous mode [ 485.265854][T20816] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 485.298678][T20823] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 485.555290][T20834] __nla_validate_parse: 14 callbacks suppressed [ 485.555315][T20834] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4159'. [ 485.616419][T20838] netlink: 100 bytes leftover after parsing attributes in process `syz.2.4161'. [ 485.927994][T20849] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4164'. [ 485.966062][T20849] wg1: entered promiscuous mode [ 486.060208][T20862] geneve2: entered promiscuous mode [ 486.179460][T20869] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4171'. [ 486.442469][T20885] dvmrp0: left allmulticast mode [ 486.447644][T20885] pimreg: left allmulticast mode [ 486.950040][T20912] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4182'. [ 487.138859][T20925] validate_nla: 5 callbacks suppressed [ 487.138880][T20925] netlink: 'syz.2.4186': attribute type 10 has an invalid length. [ 487.263296][T20925] veth0_vlan: left promiscuous mode [ 487.286593][T20925] veth0_vlan: entered promiscuous mode [ 487.318939][T20925] team0: Device veth0_vlan failed to register rx_handler [ 487.513472][ T30] audit: type=1107 audit(1755604546.154:7): pid=20944 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ÿñb:„«‘×–FÞ%©¼Ùumzÿ¥)ØÁ°¾‚ÚJ’lö>£©V Äfdsõ*«¸‹ÍT@éïWfai?®RæVå' [ 487.715684][T20960] netlink: 'syz.0.4195': attribute type 2 has an invalid length. [ 487.806434][T20964] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4196'. [ 488.022451][T20972] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4199'. [ 488.106824][T20977] netlink: 'syz.0.4200': attribute type 7 has an invalid length. [ 488.132759][T20977] : entered promiscuous mode [ 488.390534][T20986] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 488.611442][T20996] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4206'. [ 488.703635][T20996] IPv6: sit2: Disabled Multicast RS [ 488.725518][T20996] sit2: entered allmulticast mode [ 488.738572][T21002] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4208'. [ 488.889873][T21007] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4209'. [ 489.088811][T21017] netlink: 'syz.4.4212': attribute type 19 has an invalid length. [ 489.130233][T21017] netlink: 'syz.4.4212': attribute type 19 has an invalid length. [ 489.208633][T21025] team0: left allmulticast mode [ 489.234066][T21025] team_slave_0: left allmulticast mode [ 489.269052][T21025] team_slave_1: left allmulticast mode [ 489.311157][T21025] team0: left promiscuous mode [ 489.315990][T21025] team_slave_0: left promiscuous mode [ 489.336425][T21025] team_slave_1: left promiscuous mode [ 489.349044][T21025] bridge0: port 3(team0) entered disabled state [ 489.406239][T21025] bridge_slave_0: left allmulticast mode [ 489.424723][T21025] bridge_slave_0: left promiscuous mode [ 489.438964][T21025] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.456863][T21025] bridge_slave_1: left allmulticast mode [ 489.465454][T21025] bridge_slave_1: left promiscuous mode [ 489.475019][T21025] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.498884][T21025] bond0: (slave bond_slave_0): Releasing backup interface [ 489.515303][T21025] bond0: (slave bond_slave_1): Releasing backup interface [ 489.535335][T21025] team0: Port device team_slave_0 removed [ 489.552133][T21025] team0: Port device team_slave_1 removed [ 489.559597][T21025] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 489.567136][T21025] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 489.578674][T21025] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 489.586961][T21025] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 489.603408][T21025] bond0: (slave wlan1): Releasing backup interface [ 489.627614][T21025] bond1: (slave gretap1): Releasing active interface [ 489.835193][T21050] smc: adding net device bond0 with user defined pnetid SYZ2 [ 490.310401][T21079] netlink: zone id is out of range [ 490.327493][T21082] netlink: 'syz.2.4231': attribute type 11 has an invalid length. [ 490.340720][T21079] netlink: get zone limit has 8 unknown bytes [ 490.924852][T21116] netlink: 'syz.1.4243': attribute type 1 has an invalid length. [ 490.933576][T21116] __nla_validate_parse: 9 callbacks suppressed [ 490.933598][T21116] netlink: 244 bytes leftover after parsing attributes in process `syz.1.4243'. [ 491.058829][T21122] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 491.215996][T21132] netlink: 63266 bytes leftover after parsing attributes in process `syz.4.4247'. [ 491.535970][T21147] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4252'. [ 491.569962][T21147] syzkaller1: entered promiscuous mode [ 491.575659][T21147] syzkaller1: entered allmulticast mode [ 491.627371][T21153] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4254'. [ 491.702316][T21156] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4256'. [ 491.889198][T21165] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4258'. [ 492.027027][T21173] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 492.139527][T21176] sctp: [Deprecated]: syz.3.4263 (pid 21176) Use of int in maxseg socket option. [ 492.139527][T21176] Use struct sctp_assoc_value instead [ 492.181995][T21183] netlink: 'syz.0.4264': attribute type 10 has an invalid length. [ 492.196945][T21184] netlink: 'syz.0.4264': attribute type 10 has an invalid length. [ 492.205211][ T929] IPVS: starting estimator thread 0... [ 492.212481][T21184] team0: Device hsr_slave_0 failed to register rx_handler [ 492.282439][T21183] team0: Device hsr_slave_0 failed to register rx_handler [ 492.299589][T21185] IPVS: using max 26 ests per chain, 62400 per kthread [ 492.351323][T21193] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4267'. [ 492.506158][T21198] netlink: 'syz.3.4269': attribute type 21 has an invalid length. [ 492.542627][T21198] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4269'. [ 492.583053][T21198] netlink: 'syz.3.4269': attribute type 4 has an invalid length. [ 492.596946][T21198] netlink: 'syz.3.4269': attribute type 5 has an invalid length. [ 492.622512][T21198] netlink: 3 bytes leftover after parsing attributes in process `syz.3.4269'. [ 492.685235][T21198] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4269'. [ 494.305800][T21258] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 494.314508][T21265] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 495.182118][T21284] netlink: 'syz.2.4293': attribute type 1 has an invalid length. [ 495.268396][T21291] netlink: 'syz.0.4297': attribute type 1 has an invalid length. [ 495.279073][T21292] netlink: 'syz.4.4294': attribute type 11 has an invalid length. [ 495.383766][T21284] bond2: (slave geneve3): making interface the new active one [ 495.393373][T21284] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 495.419432][ T36] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 495.428325][ T36] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 495.469578][ T36] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 495.478749][T21304] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 495.523709][ T36] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 495.735846][T21316] netlink: 'syz.4.4304': attribute type 21 has an invalid length. [ 495.750578][T21322] netlink: 'syz.0.4302': attribute type 10 has an invalid length. [ 495.803034][T21322] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 495.821815][ T3510] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.842472][ T3510] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.865534][ T3510] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.905414][ T3510] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.057256][T21335] __nla_validate_parse: 11 callbacks suppressed [ 496.057280][T21335] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4310'. [ 496.125661][T21339] netlink: 10 bytes leftover after parsing attributes in process `syz.0.4313'. [ 496.131186][T21338] netlink: 'syz.1.4311': attribute type 1 has an invalid length. [ 496.165504][T21338] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4311'. [ 496.312279][T21351] tipc: Enabled bearer , priority 0 [ 496.387667][T21351] tipc: Disabling bearer [ 496.614005][T21365] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4321'. [ 496.950449][T21391] Can't find ip_set type  [ 496.958711][T21389] tipc: Enabled bearer , priority 0 [ 497.112246][T21404] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4330'. [ 497.122138][T21389] syzkaller0: entered promiscuous mode [ 497.127649][T21389] syzkaller0: entered allmulticast mode [ 497.165649][T21389] tipc: Resetting bearer [ 497.193754][T21406] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 497.239800][T21388] tipc: Resetting bearer [ 497.959636][ T9352] tipc: Node number set to 679319653 [ 499.267870][T21388] tipc: Disabling bearer [ 499.539919][T21446] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.4343'. [ 499.633710][T21451] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4344'. [ 499.912595][T21462] netlink: 'syz.1.4348': attribute type 21 has an invalid length. [ 499.932833][T21462] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4348'. [ 500.192872][T21473] netlink: 'syz.4.4351': attribute type 1 has an invalid length. [ 500.256431][T21476] IPVS: length: 98 != 8 [ 500.269748][T21476] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4352'. [ 500.570806][T21491] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4354'. [ 500.924126][T21499] tipc: Enabled bearer , priority 0 [ 500.960718][T21499] syzkaller0: entered promiscuous mode [ 500.966427][T21499] syzkaller0: entered allmulticast mode [ 501.048353][T21498] tipc: Resetting bearer [ 501.165984][T21516] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4361'. [ 501.176658][T21498] tipc: Disabling bearer [ 501.179199][T21516] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4361'. [ 501.622862][T21545] wg1: entered promiscuous mode [ 501.635579][T21545] wg1: entered allmulticast mode [ 501.641452][T21541] netlink: 240 bytes leftover after parsing attributes in process `syz.4.4369'. [ 501.643280][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.660834][ T1306] clip:clip_start_xmit: skb_dst(skb) == NULL [ 501.688812][T21545] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4370'. [ 503.116683][T21576] sock: sock_timestamping_bind_phc: sock not bind to device [ 503.126825][T21577] sock: sock_timestamping_bind_phc: sock not bind to device [ 503.251736][ T62] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 503.407699][T21584] netlink: 'syz.3.4379': attribute type 21 has an invalid length. [ 503.419434][T21584] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4379'. [ 504.178724][T21583] sch_tbf: burst 4 is lower than device ip6tnl0 mtu (1452) ! [ 504.241198][T21584] netlink: 'syz.3.4379': attribute type 5 has an invalid length. [ 504.289619][T21584] netlink: 3 bytes leftover after parsing attributes in process `syz.3.4379'. [ 505.483151][ T55] block nbd1: Possible stuck request ffff8880254a5080: control (read@0,1024B). Runtime 240 seconds [ 505.494267][ T55] block nbd1: Possible stuck request ffff8880254a5240: control (read@1024,1024B). Runtime 240 seconds [ 505.505422][ T55] block nbd1: Possible stuck request ffff8880254a5400: control (read@2048,1024B). Runtime 240 seconds [ 505.516628][ T55] block nbd1: Possible stuck request ffff8880254a55c0: control (read@3072,1024B). Runtime 240 seconds [ 505.523431][T21604] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4387'. [ 505.564836][T21604] netlink: 'syz.2.4387': attribute type 5 has an invalid length. [ 505.587587][T21604] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4387'. [ 505.685512][T21604] geneve4: entered promiscuous mode [ 505.713727][T21604] geneve4: entered allmulticast mode [ 505.722006][T21611] tipc: MTU too low for tipc bearer [ 505.727460][ T155] netdevsim netdevsim2 netdevsim0: set [1, 2] type 2 family 0 port 256 - 0 [ 505.748233][ T155] netdevsim netdevsim2 netdevsim1: set [1, 2] type 2 family 0 port 256 - 0 [ 505.791211][ T155] netdevsim netdevsim2 netdevsim2: set [1, 2] type 2 family 0 port 256 - 0 [ 505.834802][ T155] netdevsim netdevsim2 netdevsim3: set [1, 2] type 2 family 0 port 256 - 0 [ 505.857202][T21617] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4391'. [ 505.892091][T21617] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 505.943396][T21617] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4391'. [ 506.164145][T21630] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (3) [ 506.548364][T21656] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 506.605344][T21654] syzkaller1: entered promiscuous mode [ 506.614839][T21654] syzkaller1: entered allmulticast mode [ 506.716937][T21662] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4404'. [ 506.735833][T21662] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 506.747103][T21662] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 506.804621][T21664] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4405'. [ 506.815294][T21664] netlink: 'syz.2.4405': attribute type 8 has an invalid length. [ 507.136521][T21683] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4414'. [ 507.157239][T21682] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340 [ 507.185515][T21687] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4414'. [ 507.623420][T21712] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4419'. [ 508.020967][T21725] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4423'. [ 508.269072][T21731] netlink: 'syz.0.4425': attribute type 1 has an invalid length. [ 508.322457][T21731] veth3: entered promiscuous mode [ 508.398568][T21741] openvswitch: netlink: Key type 1040 is out of range max 32 [ 508.585165][T21747] netlink: 'syz.3.4430': attribute type 83 has an invalid length. [ 508.723806][T21754] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4432'. [ 508.758155][T21754] netlink: 'syz.4.4432': attribute type 7 has an invalid length. [ 508.768562][T21754] netlink: 'syz.4.4432': attribute type 8 has an invalid length. [ 508.780673][T21754] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4432'. [ 508.845229][ T5869] Bluetooth: hci4: command 0x0406 tx timeout [ 508.928498][T21761] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4433'. [ 509.219435][T21770] tipc: Enabled bearer , priority 0 [ 509.265200][T21770] syzkaller0: entered promiscuous mode [ 509.289392][T21770] syzkaller0: entered allmulticast mode [ 509.327157][T21774] tipc: Enabled bearer , priority 0 [ 509.400640][T21780] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4439'. [ 509.460254][T21770] tipc: Resetting bearer [ 509.536274][T21768] tipc: Resetting bearer [ 509.672748][T21768] tipc: Disabling bearer [ 510.512820][T21810] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 510.547737][T21773] tipc: Disabling bearer [ 511.103191][T21827] tipc: Enabled bearer , priority 0 [ 511.110986][T21827] syzkaller0: entered promiscuous mode [ 511.116508][T21827] syzkaller0: entered allmulticast mode [ 511.126523][T21827] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 511.148312][T21827] tipc: Resetting bearer [ 511.157726][T21826] tipc: Resetting bearer [ 511.180059][T21826] tipc: Disabling bearer [ 511.289879][T21830] gtp0: entered promiscuous mode [ 511.294892][T21830] gtp0: entered allmulticast mode [ 511.962722][T21850] __nla_validate_parse: 3 callbacks suppressed [ 511.962742][T21850] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4458'. [ 512.031368][T21850] hsr_slave_0: left promiscuous mode [ 512.463185][T21873] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 512.630577][T21883] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4469'. [ 513.609539][T21903] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4473'. [ 513.705915][T21911] netlink: 'syz.4.4475': attribute type 16 has an invalid length. [ 513.720094][T21911] netlink: 'syz.4.4475': attribute type 17 has an invalid length. [ 513.757167][T21913] netlink: 'syz.1.4474': attribute type 10 has an invalid length. [ 513.870001][T21911] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 513.911684][T21913] team0: Device ipvlan1 failed to register rx_handler [ 513.950206][ T5869] Bluetooth: hci3: command 0x0405 tx timeout [ 514.144690][T21921] bond2: entered promiscuous mode [ 514.150910][T21921] bond2: entered allmulticast mode [ 514.156596][T21921] 8021q: adding VLAN 0 to HW filter on device bond2 [ 514.478520][T21904] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 514.555785][T21698] Set syz1 is full, maxelem 65536 reached [ 514.658247][T21939] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4481'. [ 514.988047][T21967] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4487'. [ 515.072154][T21971] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4488'. [ 515.425614][T21991] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4493'. [ 515.815841][T22013] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4499'. [ 515.827758][T22011] bond3: entered promiscuous mode [ 515.834327][T22011] bond3: entered allmulticast mode [ 515.840506][T22011] 8021q: adding VLAN 0 to HW filter on device bond3 [ 516.287180][T22038] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 516.294500][T22038] IPv6: NLM_F_CREATE should be set when creating new route [ 517.113755][T22074] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 517.435719][T22083] team0: Cannot enslave team device to itself [ 517.531175][T22091] netlink: 'syz.1.4526': attribute type 1 has an invalid length. [ 517.620794][T22091] 8021q: adding VLAN 0 to HW filter on device bond1 [ 517.658592][T22099] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4527'. [ 517.703815][T22101] netlink: 'syz.3.4528': attribute type 21 has an invalid length. [ 517.745021][T22103] openvswitch: netlink: Duplicate or invalid key (type 0). [ 517.752394][T22103] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 517.772510][T22101] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4528'. [ 517.996048][T22111] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4532'. [ 518.024976][T22112] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4531'. [ 518.043683][T22111] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4532'. [ 518.231926][T22116] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4534'. [ 518.243888][T22116] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4534'. [ 518.595460][T22133] netlink: 10 bytes leftover after parsing attributes in process `syz.0.4539'. [ 518.726048][T22146] netlink: 176064 bytes leftover after parsing attributes in process `syz.2.4542'. [ 519.179818][T22164] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4550'. [ 519.442697][T22164] bridge_slave_1: left allmulticast mode [ 519.452360][T22164] bridge_slave_1: left promiscuous mode [ 519.468163][T22164] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.493075][T22164] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.676401][T22168] tipc: Started in network mode [ 519.681771][T22168] tipc: Node identity e2f514524556, cluster identity 4711 [ 519.689992][T22168] tipc: Enabled bearer , priority 0 [ 519.860437][T22168] tipc: Disabling bearer [ 519.988004][T22205] netlink: 'syz.2.4559': attribute type 1 has an invalid length. [ 520.156768][T22205] 8021q: adding VLAN 0 to HW filter on device bond3 [ 520.370475][T22223] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 521.022167][T22259] tipc: Enabled bearer , priority 0 [ 521.029961][T22259] syzkaller0: entered promiscuous mode [ 521.035475][T22259] syzkaller0: entered allmulticast mode [ 521.083395][T22259] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 521.157025][T22259] tipc: Resetting bearer [ 521.199227][T22270] netlink: 'syz.2.4578': attribute type 1 has an invalid length. [ 521.274066][T22270] 8021q: adding VLAN 0 to HW filter on device bond4 [ 521.346468][T22277] bond4: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 521.418564][T22267] tipc: Resetting bearer [ 521.486710][T22267] tipc: Disabling bearer [ 521.628454][T22271] bond4: (slave veth3): Enslaving as an active interface with a down link [ 522.017057][T22307] syzkaller1: entered promiscuous mode [ 522.039004][T22307] syzkaller1: entered allmulticast mode [ 522.824246][T22353] openvswitch: netlink: Flow key attr not present in new flow. [ 522.873793][T22353] netlink: 'syz.4.4602': attribute type 1 has an invalid length. [ 522.926663][T22353] tipc: Trying to set illegal importance in message [ 523.067513][ T30] audit: type=1800 audit(1755604581.704:8): pid=22360 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4605" name="memory.events" dev="tmpfs" ino=1458 res=0 errno=0 [ 523.160588][ T30] audit: type=1804 audit(1755604581.744:9): pid=22360 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.4605" name="/newroot/284/memory.events" dev="tmpfs" ino=1458 res=1 errno=0 [ 523.229557][ T30] audit: type=1804 audit(1755604581.744:10): pid=22360 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.4605" name="/newroot/284/memory.events" dev="tmpfs" ino=1458 res=1 errno=0 [ 523.303841][T22371] __nla_validate_parse: 8 callbacks suppressed [ 523.303862][T22371] netlink: 88 bytes leftover after parsing attributes in process `syz.3.4609'. [ 523.326972][ T30] audit: type=1800 audit(1755604581.744:11): pid=22360 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4605" name="memory.events" dev="tmpfs" ino=1458 res=0 errno=0 [ 523.357336][T22371] netem: invalid attributes len -24 [ 523.368589][T22378] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4611'. [ 523.370524][T22371] netem: change failed [ 523.382826][T22381] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4611'. [ 523.396294][T22374] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4610'. [ 523.669785][T22391] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4613'. [ 523.703725][T22396] IPVS: length: 222 != 8 [ 523.797649][T22388] syzkaller0: entered promiscuous mode [ 523.811347][T22388] syzkaller0: entered allmulticast mode [ 523.850151][T22397] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4612'. [ 523.887839][T22408] netlink: 'syz.3.4619': attribute type 11 has an invalid length. [ 523.938665][T22410] openvswitch: netlink: Unknown key attributes 2 [ 524.192572][ T5866] Bluetooth: hci5: command 0x0406 tx timeout [ 524.600440][T22430] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4624'. [ 526.000823][T22415] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4621'. [ 526.188037][T22433] netlink: 'syz.0.4625': attribute type 9 has an invalid length. [ 526.223285][T22433] netlink: 212260 bytes leftover after parsing attributes in process `syz.0.4625'. [ 526.392517][T22444] netlink: 'syz.3.4628': attribute type 1 has an invalid length. [ 526.450203][T22441] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4628'. [ 526.552184][T22451] netlink: 'syz.1.4632': attribute type 13 has an invalid length. [ 526.603396][T22451] netlink: 'syz.1.4632': attribute type 58 has an invalid length. [ 527.037744][T22482] bridge0: entered allmulticast mode [ 527.091015][T22482] gretap0: left allmulticast mode [ 527.142725][T22482] ip6gre0: left promiscuous mode [ 527.155467][T22482] 8021q: adding VLAN 0 to HW filter on device team0 [ 527.184472][T22482] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 527.480792][T22500] netlink: 'syz.3.4644': attribute type 10 has an invalid length. [ 527.557027][T22500] bond0: (slave wlan1): Enslaving as an active interface with a down link [ 527.772842][T22518] tipc: Enabled bearer , priority 10 [ 528.259439][T22543] netlink: 'syz.1.4656': attribute type 12 has an invalid length. [ 528.714543][T22567] __nla_validate_parse: 7 callbacks suppressed [ 528.714564][T22567] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4663'. [ 529.220792][T22596] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4672'. [ 529.283833][T22598] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4673'. [ 529.405523][T22600] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 529.503785][T22614] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 529.558694][T22614] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 529.586293][T22616] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4677'. [ 529.682655][T22622] tipc: Enabled bearer , priority 0 [ 529.713518][T22622] ip6tnl0: entered promiscuous mode [ 529.718837][T22622] ip6tnl0: entered allmulticast mode [ 529.742923][T22622] tipc: Resetting bearer [ 529.765006][T22628] bond0: option ad_select: unable to set because the bond device is up [ 529.825580][T22633] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4683'. [ 529.917691][T22629] tipc: Disabling bearer [ 530.026786][T22640] pim6reg1: entered promiscuous mode [ 530.038141][T22640] pim6reg1: entered allmulticast mode [ 530.080842][T22651] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4688'. [ 530.125857][T22656] netlink: 776 bytes leftover after parsing attributes in process `syz.0.4684'. [ 530.178405][T22643] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 530.253750][T22662] IPVS: set_ctl: invalid protocol: 27 224.0.0.1:20003 [ 530.475083][T22678] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4693'. [ 530.530906][T22678] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4693'. [ 530.588361][T22678] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4693'. [ 530.668488][T22678] tipc: Enabled bearer , priority 24 [ 530.713922][T22693] FAULT_INJECTION: forcing a failure. [ 530.713922][T22693] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 530.753584][T22693] CPU: 1 UID: 0 PID: 22693 Comm: syz.3.4697 Not tainted syzkaller #0 PREEMPT(full) [ 530.753616][T22693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 530.753637][T22693] Call Trace: [ 530.753646][T22693] [ 530.753656][T22693] dump_stack_lvl+0x189/0x250 [ 530.753687][T22693] ? __pfx____ratelimit+0x10/0x10 [ 530.753718][T22693] ? __pfx_dump_stack_lvl+0x10/0x10 [ 530.753744][T22693] ? __pfx__printk+0x10/0x10 [ 530.753775][T22693] ? __might_fault+0xb0/0x130 [ 530.753818][T22693] should_fail_ex+0x414/0x560 [ 530.753853][T22693] _copy_from_user+0x2d/0xb0 [ 530.753878][T22693] ___sys_sendmsg+0x158/0x2a0 [ 530.753903][T22693] ? __pfx____sys_sendmsg+0x10/0x10 [ 530.753969][T22693] ? __fget_files+0x2a/0x420 [ 530.754001][T22693] ? __fget_files+0x3a0/0x420 [ 530.754045][T22693] __x64_sys_sendmsg+0x19b/0x260 [ 530.754071][T22693] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 530.754110][T22693] ? __pfx_ksys_write+0x10/0x10 [ 530.754146][T22693] ? do_syscall_64+0xbe/0x3b0 [ 530.754181][T22693] do_syscall_64+0xfa/0x3b0 [ 530.754210][T22693] ? lockdep_hardirqs_on+0x9c/0x150 [ 530.754242][T22693] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.754264][T22693] ? clear_bhb_loop+0x60/0xb0 [ 530.754291][T22693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.754315][T22693] RIP: 0033:0x7f87a138ebe9 [ 530.754335][T22693] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 530.754354][T22693] RSP: 002b:00007f87a2182038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 530.754377][T22693] RAX: ffffffffffffffda RBX: 00007f87a15b6090 RCX: 00007f87a138ebe9 [ 530.754393][T22693] RDX: 00000000200080c0 RSI: 0000200000000c80 RDI: 0000000000000004 [ 530.754407][T22693] RBP: 00007f87a2182090 R08: 0000000000000000 R09: 0000000000000000 [ 530.754420][T22693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 530.754432][T22693] R13: 00007f87a15b6128 R14: 00007f87a15b6090 R15: 00007ffc44086f68 [ 530.754467][T22693] [ 531.874406][T22739] tipc: Enabled bearer , priority 0 [ 531.895023][T22739] syzkaller0: entered promiscuous mode [ 531.908099][T22739] syzkaller0: entered allmulticast mode [ 531.945531][T22745] FAULT_INJECTION: forcing a failure. [ 531.945531][T22745] name failslab, interval 1, probability 0, space 0, times 1 [ 531.989632][T22745] CPU: 1 UID: 0 PID: 22745 Comm: syz.1.4711 Not tainted syzkaller #0 PREEMPT(full) [ 531.989664][T22745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 531.989677][T22745] Call Trace: [ 531.989686][T22745] [ 531.989696][T22745] dump_stack_lvl+0x189/0x250 [ 531.989727][T22745] ? __pfx____ratelimit+0x10/0x10 [ 531.989757][T22745] ? __pfx_dump_stack_lvl+0x10/0x10 [ 531.989784][T22745] ? __pfx__printk+0x10/0x10 [ 531.989825][T22745] ? __pfx___might_resched+0x10/0x10 [ 531.989853][T22745] should_fail_ex+0x414/0x560 [ 531.989887][T22745] should_failslab+0xa8/0x100 [ 531.989923][T22745] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 531.989953][T22745] ? __alloc_skb+0x112/0x2d0 [ 531.989991][T22745] __alloc_skb+0x112/0x2d0 [ 531.990029][T22745] netlink_sendmsg+0x5c6/0xb30 [ 531.990072][T22745] ? __pfx_netlink_sendmsg+0x10/0x10 [ 531.990108][T22745] ? aa_sock_msg_perm+0xf1/0x1d0 [ 531.990145][T22745] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 531.990168][T22745] ? __pfx_netlink_sendmsg+0x10/0x10 [ 531.990202][T22745] __sock_sendmsg+0x219/0x270 [ 531.990233][T22745] ____sys_sendmsg+0x505/0x830 [ 531.990269][T22745] ? __pfx_____sys_sendmsg+0x10/0x10 [ 531.990302][T22745] ? import_iovec+0x74/0xa0 [ 531.990332][T22745] ___sys_sendmsg+0x21f/0x2a0 [ 531.990357][T22745] ? __pfx____sys_sendmsg+0x10/0x10 [ 531.990424][T22745] ? __fget_files+0x2a/0x420 [ 531.990455][T22745] ? __fget_files+0x3a0/0x420 [ 531.990499][T22745] __x64_sys_sendmsg+0x19b/0x260 [ 531.990525][T22745] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 531.990559][T22745] ? __pfx_ksys_write+0x10/0x10 [ 531.990585][T22745] ? rcu_is_watching+0x15/0xb0 [ 531.990614][T22745] ? do_syscall_64+0xbe/0x3b0 [ 531.990650][T22745] do_syscall_64+0xfa/0x3b0 [ 531.990680][T22745] ? lockdep_hardirqs_on+0x9c/0x150 [ 531.990708][T22745] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.990730][T22745] ? clear_bhb_loop+0x60/0xb0 [ 531.990757][T22745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.990778][T22745] RIP: 0033:0x7fa1b198ebe9 [ 531.990798][T22745] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 531.990818][T22745] RSP: 002b:00007fa1b2836038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 531.990840][T22745] RAX: ffffffffffffffda RBX: 00007fa1b1bb6090 RCX: 00007fa1b198ebe9 [ 531.990857][T22745] RDX: 00000000200080c0 RSI: 0000200000000c80 RDI: 0000000000000004 [ 531.990871][T22745] RBP: 00007fa1b2836090 R08: 0000000000000000 R09: 0000000000000000 [ 531.990884][T22745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 531.990897][T22745] R13: 00007fa1b1bb6128 R14: 00007fa1b1bb6090 R15: 00007fffd8f510f8 [ 531.990932][T22745] [ 532.415088][T22738] tipc: Resetting bearer [ 532.515180][T22738] tipc: Disabling bearer [ 532.643514][T22757] 8021q: adding VLAN 0 to HW filter on device bond0 [ 532.861458][T22769] netlink: 'syz.1.4721': attribute type 1 has an invalid length. [ 532.919217][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880557ca000: rx timeout, send abort [ 532.929674][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880557ca000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 533.470138][T22796] netlink: 'syz.2.4730': attribute type 8 has an invalid length. [ 533.866936][ T4936] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 533.883582][ T4936] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.906443][ T4936] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 533.956007][ T4936] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 533.968659][ T4936] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.996704][ T4936] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 534.019103][ T4936] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 534.048903][ T4936] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.062894][T22814] netlink: 'syz.4.4738': attribute type 6 has an invalid length. [ 534.077578][ T4936] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 534.130409][T22815] syzkaller1: entered promiscuous mode [ 534.152709][T22815] syzkaller1: entered allmulticast mode [ 534.190675][ T4936] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 534.211884][ T4936] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.239629][ T4936] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 534.258118][T22826] __nla_validate_parse: 9 callbacks suppressed [ 534.258142][T22826] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4739'. [ 534.286609][T22826] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4739'. [ 534.305249][T22826] netlink: 'syz.1.4739': attribute type 18 has an invalid length. [ 534.512647][ T5869] Bluetooth: hci0: command 0x0406 tx timeout [ 534.817606][T22852] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4747'. [ 534.862846][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805aa43400: rx timeout, send abort [ 534.871591][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805aa43400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 535.237882][T22867] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4750'. [ 535.330290][T22872] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4752'. [ 535.509525][T22875] tipc: Enabling of bearer rejected, failed to enable media [ 535.569442][ T55] block nbd1: Possible stuck request ffff8880254a5080: control (read@0,1024B). Runtime 270 seconds [ 535.580936][ T55] block nbd1: Possible stuck request ffff8880254a5240: control (read@1024,1024B). Runtime 270 seconds [ 535.592433][ T55] block nbd1: Possible stuck request ffff8880254a5400: control (read@2048,1024B). Runtime 270 seconds [ 535.604190][ T55] block nbd1: Possible stuck request ffff8880254a55c0: control (read@3072,1024B). Runtime 270 seconds [ 535.621808][T22883] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4754'. [ 535.876259][T22889] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.4756'. [ 535.938995][T22905] netlink: 'syz.2.4758': attribute type 2 has an invalid length. [ 535.962860][T22905] netlink: 244 bytes leftover after parsing attributes in process `syz.2.4758'. [ 536.734713][T22936] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4767'. [ 536.870776][T22945] pimreg3: entered allmulticast mode [ 537.109472][T22954] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20003 [ 537.268686][T22965] netlink: 'syz.0.4776': attribute type 11 has an invalid length. [ 537.320386][T22965] netlink: 'syz.0.4776': attribute type 11 has an invalid length. [ 537.338878][T22965] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4776'. [ 537.776131][T22989] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 538.261871][T23017] netlink: 'syz.2.4791': attribute type 1 has an invalid length. [ 538.417339][T23022] netlink: 'syz.3.4793': attribute type 1 has an invalid length. [ 538.437940][T23022] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 538.524890][T23032] netlink: 'syz.1.4794': attribute type 1 has an invalid length. [ 539.428201][T23073] __nla_validate_parse: 4 callbacks suppressed [ 539.428223][T23073] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4807'. [ 539.449997][T23073] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4807'. [ 539.460020][T23073] netlink: 'syz.1.4807': attribute type 7 has an invalid length. [ 539.470679][T23075] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4808'. [ 539.504566][T23077] netlink: 'syz.4.4809': attribute type 1 has an invalid length. [ 539.527191][T23077] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4809'. [ 539.541356][T23073] tipc: Enabled bearer , priority 0 [ 539.745552][T23073] syzkaller0: entered promiscuous mode [ 539.754681][T23073] syzkaller0: entered allmulticast mode [ 539.775647][T23073] tipc: Resetting bearer [ 539.817138][T23072] tipc: Resetting bearer [ 539.830435][T23075] netlink: 84 bytes leftover after parsing attributes in process `syz.0.4808'. [ 542.166054][T23072] tipc: Disabling bearer [ 542.301588][T23127] 8021q: adding VLAN 0 to HW filter on device bond5 [ 542.346099][T23127] netlink: 'syz.2.4819': attribute type 1 has an invalid length. [ 542.354871][T23132] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4820'. [ 542.395839][T23132] netlink: 92 bytes leftover after parsing attributes in process `syz.3.4820'. [ 542.502177][T23140] nbd: device at index 3 is going down [ 542.511606][T23141] nbd: device at index 3 is going down [ 542.631296][T23141] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4825'. [ 542.682786][T23156] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4827'. [ 542.741722][T23150] tipc: Enabling of bearer rejected, failed to enable media [ 542.851343][T23156] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 543.140485][T23181] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4834'. [ 543.351493][T23190] tipc: Enabled bearer , priority 0 [ 543.372889][T23192] tipc: Enabling of bearer rejected, already enabled [ 543.410179][T23188] syzkaller0: entered promiscuous mode [ 543.419318][T23188] syzkaller0: entered allmulticast mode [ 543.538033][T23200] tipc: Resetting bearer [ 543.608171][T23200] tipc: Disabling bearer [ 544.208373][T23238] netdevsim netdevsim1 ÿÿÿÿÿÿ: renamed from netdevsim0 [ 544.260763][T23236] nbd4: detected capacity change from 0 to 549764202496 [ 544.292255][ T5869] block nbd4: Receive control failed (result -32) [ 544.784544][T23270] __nla_validate_parse: 5 callbacks suppressed [ 544.784564][T23270] netlink: 11 bytes leftover after parsing attributes in process `syz.2.4862'. [ 544.998922][T23270] 8021q: adding VLAN 0 to HW filter on device bond6 [ 545.077609][T23290] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 545.174973][T23294] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4868'. [ 545.285459][T23301] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4870'. [ 545.326364][T23303] can: request_module (can-proto-0) failed. [ 546.534398][T23366] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4885'. [ 546.660635][T23374] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4888'. [ 546.730452][T23375] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4890'. [ 546.751973][T23379] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4891'. [ 546.787567][T23379] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4891'. [ 546.791668][T23382] netlink: 'syz.3.4893': attribute type 1 has an invalid length. [ 546.809332][T23375] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4890'. [ 546.857297][T23379] bond3: entered allmulticast mode [ 546.871384][T23379] 8021q: adding VLAN 0 to HW filter on device bond3 [ 546.878934][T23379] bridge0: port 1(bond3) entered blocking state [ 546.908637][T23379] bridge0: port 1(bond3) entered disabled state [ 546.923089][T23379] bond3: entered promiscuous mode [ 546.984419][T23382] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 546.986086][T23383] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 547.182887][T23404] netlink: 252 bytes leftover after parsing attributes in process `syz.0.4895'. [ 547.390295][T23422] veth0: entered promiscuous mode [ 547.789508][T23442] netlink: 'syz.4.4905': attribute type 11 has an invalid length. [ 547.880765][T23447] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 547.915618][T23454] IPVS: set_ctl: invalid protocol: 8 0.0.0.0:20004 [ 548.364302][T23479] netlink: 'syz.1.4916': attribute type 8 has an invalid length. [ 548.400258][T23477] netlink: 'syz.1.4916': attribute type 5 has an invalid length. [ 548.425413][T23477] geneve2: entered promiscuous mode [ 548.435378][T23477] geneve2: entered allmulticast mode [ 548.446268][ T3510] netdevsim netdevsim1 ÿÿÿÿÿÿ: set [1, 0] type 2 family 0 port 256 - 0 [ 548.457093][ T3510] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 548.468529][ T3510] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 548.478466][ T3510] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 548.529427][T23482] ieee802154 phy1 wpan1: encryption failed: -22 [ 549.167615][T23520] netlink: 'syz.2.4923': attribute type 4 has an invalid length. [ 549.214828][T23520] `: renamed from bond0 (while UP) [ 549.325659][T23523] ip6erspan0: entered promiscuous mode [ 549.951203][T23563] __nla_validate_parse: 10 callbacks suppressed [ 549.951225][T23563] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4938'. [ 549.964709][T23562] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 549.995950][T23562] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4937'. [ 550.007446][T23562] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4937'. [ 550.106672][T23570] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4942'. [ 550.116594][T23570] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4942'. [ 550.136267][T23570] erspan0: entered promiscuous mode [ 550.170403][T23570] erspan0: left promiscuous mode [ 550.193089][T23576] netlink: 'syz.0.4942': attribute type 1 has an invalid length. [ 550.205960][T23576] netlink: 244 bytes leftover after parsing attributes in process `syz.0.4942'. [ 550.512099][T23599] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4951'. [ 550.527003][T23599] bridge0: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 550.591513][T23604] syzkaller1: entered promiscuous mode [ 550.597040][T23604] syzkaller1: entered allmulticast mode [ 551.438756][T23633] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4960'. [ 551.558135][T23641] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4964'. [ 551.776111][T23656] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4966'. [ 551.991540][T23664] netlink: 'syz.2.4968': attribute type 25 has an invalid length. [ 552.231865][T23679] tipc: Enabled bearer , priority 0 [ 552.265421][T23679] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 552.302112][T23679] tipc: Resetting bearer [ 552.341474][T23678] tipc: Disabling bearer [ 553.119785][T23736] openvswitch: netlink: Missing valid actions attribute. [ 553.126907][T23736] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 553.680558][T23767] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 553.690938][T23767] netlink: 'syz.3.5000': attribute type 4 has an invalid length. [ 553.966302][T23781] netlink: 'syz.3.5006': attribute type 1 has an invalid length. [ 554.061522][ T929] IPVS: starting estimator thread 0... [ 554.073942][T23783] IPVS: dh: SCTP 172.20.20.187:0 - no destination available [ 554.149938][T23785] IPVS: using max 23 ests per chain, 55200 per kthread [ 554.191924][T23781] netlink: 'syz.3.5006': attribute type 1 has an invalid length. [ 554.648624][T23805] dvmrp0: left allmulticast mode [ 554.699484][T23805] lo: left allmulticast mode [ 554.930138][T23818] tipc: Enabling of bearer rejected, already enabled [ 554.974967][T23823] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 555.253836][T23845] : entered promiscuous mode [ 555.313497][T23849] __nla_validate_parse: 11 callbacks suppressed [ 555.313521][T23849] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5023'. [ 555.646465][T23868] netlink: 'syz.1.5029': attribute type 33 has an invalid length. [ 555.811588][T23874] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 555.876579][T23874] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5032'. [ 555.966345][T23886] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5034'. [ 556.238433][T23910] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5037'. [ 556.665713][T23933] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5049'. [ 556.681064][T23933] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5049'. [ 556.721846][T23933] openvswitch: netlink: IP tunnel dst address not specified [ 556.767751][T23941] netlink: 'syz.1.5051': attribute type 5 has an invalid length. [ 556.857410][T23945] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 556.891367][T23941] netlink: 'syz.1.5051': attribute type 5 has an invalid length. [ 556.893664][T23945] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 557.221529][T23962] IPVS: set_ctl: invalid protocol: 59 172.20.20.28:20001 [ 557.237370][T23962] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5058'. [ 557.268754][T23962] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (32767) [ 557.287226][T23962] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 557.378404][T23964] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5059'. [ 557.818980][T23986] macsec0: entered promiscuous mode [ 557.834373][T23986] macsec0: entered allmulticast mode [ 557.843396][T23986] veth1_macvtap: entered allmulticast mode [ 557.850198][T23986] macsec0: left promiscuous mode [ 557.855539][T23986] macsec0: left allmulticast mode [ 557.860871][T23986] veth1_macvtap: left allmulticast mode [ 558.243944][T23996] netlink: 404 bytes leftover after parsing attributes in process `syz.2.5072'. [ 558.284455][T23996] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5072'. [ 558.304403][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806ac17c00: rx timeout, send abort [ 558.313034][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88806ac17c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 558.842600][T24025] netlink: 'syz.3.5076': attribute type 30 has an invalid length. [ 559.091429][T24041] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 559.506713][T24060] netlink: 'syz.2.5088': attribute type 10 has an invalid length. [ 559.556340][T24060] `: (slave geneve1): Enslaving as an active interface with an up link [ 559.928276][T24084] netlink: 'syz.2.5096': attribute type 83 has an invalid length. [ 560.323775][T24104] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 560.365005][T24108] netlink: 'syz.0.5105': attribute type 11 has an invalid length. [ 560.442492][T24112] __nla_validate_parse: 8 callbacks suppressed [ 560.442515][T24112] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5106'. [ 560.547959][ C1] vcan0: j1939_tp_rxtimer: 0xffff888024495c00: rx timeout, send abort [ 560.558148][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888024495c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 560.609012][T24123] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5104'. [ 560.619813][T24123] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5104'. [ 560.628926][T24123] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5104'. [ 560.633416][T24122] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5107'. [ 560.825046][T24133] netlink: 'syz.3.5109': attribute type 4 has an invalid length. [ 560.887413][T24135] delete_channel: no stack [ 561.122964][T24141] netlink: 'syz.3.5113': attribute type 23 has an invalid length. [ 561.624292][T24169] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5123'. [ 561.673321][T24173] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5124'. [ 561.674671][T24172] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5123'. [ 561.862838][T24186] netlink: 'syz.0.5128': attribute type 11 has an invalid length. [ 561.889149][T24186] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5128'. [ 562.056008][T24198] tipc: Enabled bearer , priority 0 [ 562.064612][T24198] syzkaller0: entered promiscuous mode [ 562.070179][T24198] syzkaller0: entered allmulticast mode [ 562.116652][T24198] tipc: Resetting bearer [ 562.143385][T24196] tipc: Resetting bearer [ 562.187032][T24196] tipc: Disabling bearer [ 562.548678][T24232] netlink: 'syz.3.5139': attribute type 1 has an invalid length. [ 562.576843][T24232] netlink: 'syz.3.5139': attribute type 2 has an invalid length. [ 562.634410][ C1] vcan0: j1939_tp_rxtimer: 0xffff888059847000: rx timeout, send abort [ 562.643077][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888059847000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 562.651483][T24232] netlink: 1172 bytes leftover after parsing attributes in process `syz.3.5139'. [ 562.875656][T24245] netlink: 'syz.1.5143': attribute type 1 has an invalid length. [ 562.983682][T24256] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 563.035555][T24250] can: request_module (can-proto-0) failed. [ 563.049018][T24258] netlink: 'syz.2.5147': attribute type 1 has an invalid length. [ 563.080329][ T1306] clip:clip_start_xmit: skb_dst(skb) == NULL [ 563.150434][T24266] syzkaller1: entered promiscuous mode [ 563.156100][T24266] syzkaller1: entered allmulticast mode [ 563.245638][T24258] bond0: (slave bridge7): making interface the new active one [ 563.288608][T24258] bond0: (slave bridge7): Enslaving as an active interface with an up link [ 564.144127][T24313] IPVS: set_ctl: invalid protocol: 50 255.255.255.255:20003 [ 564.339749][T24323] Bluetooth: MGMT ver 1.23 [ 564.350133][ T5869] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 564.351740][ T5866] Bluetooth: hci0: command 0x0406 tx timeout [ 564.390571][T24328] netlink: 'syz.2.5166': attribute type 7 has an invalid length. [ 564.427177][T24328] netlink: 'syz.2.5166': attribute type 8 has an invalid length. [ 564.654029][T24337] sctp: [Deprecated]: syz.1.5172 (pid 24337) Use of struct sctp_assoc_value in delayed_ack socket option. [ 564.654029][T24337] Use struct sctp_sack_info instead [ 565.312032][T24376] openvswitch: netlink: Duplicate or invalid key (type 0). [ 565.328792][T24376] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 565.586496][T24385] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 565.630364][ T55] block nbd1: Possible stuck request ffff8880254a5080: control (read@0,1024B). Runtime 300 seconds [ 565.640998][T24398] netlink: 'syz.2.5190': attribute type 10 has an invalid length. [ 565.642149][ T55] block nbd1: Possible stuck request ffff8880254a5240: control (read@1024,1024B). Runtime 300 seconds [ 565.661114][ T55] block nbd1: Possible stuck request ffff8880254a5400: control (read@2048,1024B). Runtime 300 seconds [ 565.661505][T24397] netlink: 'syz.2.5190': attribute type 10 has an invalid length. [ 565.673237][ T55] block nbd1: Possible stuck request ffff8880254a55c0: control (read@3072,1024B). Runtime 300 seconds [ 565.705462][T24400] __nla_validate_parse: 10 callbacks suppressed [ 565.705482][T24400] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5191'. [ 565.751593][T24400] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5191'. [ 565.794680][T24400] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5191'. [ 565.956677][T24410] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 566.316404][T24433] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 566.362027][T24433] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5201'. [ 566.466274][T24445] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 566.469546][T24440] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 566.499705][T24432] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5201'. [ 566.528943][T24432] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5201'. [ 566.553892][T24453] netlink: 'syz.1.5204': attribute type 2 has an invalid length. [ 566.571969][T24453] netlink: 119 bytes leftover after parsing attributes in process `syz.1.5204'. [ 566.835962][T24468] netlink: del zone limit has 4 unknown bytes [ 566.980490][T24474] netlink: 'syz.2.5210': attribute type 16 has an invalid length. [ 567.020308][T24474] netlink: 'syz.2.5210': attribute type 17 has an invalid length. [ 567.047269][T24474] 8021q: adding VLAN 0 to HW filter on device ` [ 567.084558][T24481] openvswitch: netlink: Flow key attr not present in new flow. [ 567.098119][T24474] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 567.098819][T24480] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5213'. [ 567.195394][T24484] netlink: 'syz.4.5214': attribute type 11 has an invalid length. [ 567.203875][T24484] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5214'. [ 567.214012][T24481] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5210'. [ 567.224605][T24481] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 567.688105][T24519] sctp: [Deprecated]: syz.1.5219 (pid 24519) Use of struct sctp_assoc_value in delayed_ack socket option. [ 567.688105][T24519] Use struct sctp_sack_info instead [ 568.036061][T24527] gretap0: entered promiscuous mode [ 568.238832][T24536] FAULT_INJECTION: forcing a failure. [ 568.238832][T24536] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 568.266074][T24536] CPU: 1 UID: 0 PID: 24536 Comm: syz.2.5225 Not tainted syzkaller #0 PREEMPT(full) [ 568.266105][T24536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 568.266118][T24536] Call Trace: [ 568.266127][T24536] [ 568.266136][T24536] dump_stack_lvl+0x189/0x250 [ 568.266167][T24536] ? __pfx____ratelimit+0x10/0x10 [ 568.266197][T24536] ? __pfx_dump_stack_lvl+0x10/0x10 [ 568.266222][T24536] ? __pfx__printk+0x10/0x10 [ 568.266253][T24536] ? __might_fault+0xb0/0x130 [ 568.266299][T24536] should_fail_ex+0x414/0x560 [ 568.266334][T24536] _copy_from_user+0x2d/0xb0 [ 568.266360][T24536] core_sys_select+0x604/0xa20 [ 568.266415][T24536] ? __pfx_core_sys_select+0x10/0x10 [ 568.266474][T24536] ? __pfx_set_user_sigmask+0x10/0x10 [ 568.266509][T24536] __se_sys_pselect6+0x27a/0x300 [ 568.266544][T24536] ? __pfx___se_sys_pselect6+0x10/0x10 [ 568.266570][T24536] ? __pfx_ksys_write+0x10/0x10 [ 568.266591][T24536] ? rcu_is_watching+0x15/0xb0 [ 568.266614][T24536] ? __x64_sys_pselect6+0x21/0xf0 [ 568.266642][T24536] do_syscall_64+0xfa/0x3b0 [ 568.266666][T24536] ? lockdep_hardirqs_on+0x9c/0x150 [ 568.266690][T24536] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.266707][T24536] ? clear_bhb_loop+0x60/0xb0 [ 568.266729][T24536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.266745][T24536] RIP: 0033:0x7fb09698ebe9 [ 568.266762][T24536] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 568.266776][T24536] RSP: 002b:00007fb0977ca038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 568.266797][T24536] RAX: ffffffffffffffda RBX: 00007fb096bb5fa0 RCX: 00007fb09698ebe9 [ 568.266813][T24536] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 568.266827][T24536] RBP: 00007fb0977ca090 R08: 0000000000000000 R09: 0000000000000000 [ 568.266838][T24536] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 568.266848][T24536] R13: 00007fb096bb6038 R14: 00007fb096bb5fa0 R15: 00007ffecc24f908 [ 568.266875][T24536] [ 568.611592][T24542] netlink: 'syz.2.5226': attribute type 16 has an invalid length. [ 568.649453][T24542] netlink: 'syz.2.5226': attribute type 17 has an invalid length. [ 568.707547][T24542] gretap0: left promiscuous mode [ 568.842590][T24542] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 568.922929][T24561] netlink: 'syz.3.5231': attribute type 1 has an invalid length. [ 568.933426][T24561] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 569.708144][T24606] netlink: 'syz.3.5244': attribute type 7 has an invalid length. [ 569.772614][T24594] bond0 (unregistering): Released all slaves [ 569.826641][T24606] : entered promiscuous mode [ 570.035403][T24572] FAULT_INJECTION: forcing a failure. [ 570.035403][T24572] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 570.065127][T24572] CPU: 0 UID: 0 PID: 24572 Comm: syz.0.5236 Not tainted syzkaller #0 PREEMPT(full) [ 570.065158][T24572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 570.065171][T24572] Call Trace: [ 570.065180][T24572] [ 570.065189][T24572] dump_stack_lvl+0x189/0x250 [ 570.065219][T24572] ? __pfx____ratelimit+0x10/0x10 [ 570.065249][T24572] ? __pfx_dump_stack_lvl+0x10/0x10 [ 570.065274][T24572] ? __pfx__printk+0x10/0x10 [ 570.065304][T24572] ? __might_fault+0xb0/0x130 [ 570.065348][T24572] should_fail_ex+0x414/0x560 [ 570.065381][T24572] core_sys_select+0x724/0xa20 [ 570.065426][T24572] ? __pfx_core_sys_select+0x10/0x10 [ 570.065487][T24572] ? __pfx_set_user_sigmask+0x10/0x10 [ 570.065522][T24572] __se_sys_pselect6+0x27a/0x300 [ 570.065558][T24572] ? __pfx___se_sys_pselect6+0x10/0x10 [ 570.065589][T24572] ? __pfx_ksys_write+0x10/0x10 [ 570.065615][T24572] ? rcu_is_watching+0x15/0xb0 [ 570.065641][T24572] ? __x64_sys_pselect6+0x21/0xf0 [ 570.065674][T24572] do_syscall_64+0xfa/0x3b0 [ 570.065703][T24572] ? lockdep_hardirqs_on+0x9c/0x150 [ 570.065732][T24572] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 570.065753][T24572] ? clear_bhb_loop+0x60/0xb0 [ 570.065780][T24572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 570.065801][T24572] RIP: 0033:0x7fad14d8ebe9 [ 570.065821][T24572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 570.065840][T24572] RSP: 002b:00007fad15c50038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 570.065863][T24572] RAX: ffffffffffffffda RBX: 00007fad14fb5fa0 RCX: 00007fad14d8ebe9 [ 570.065879][T24572] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 570.065892][T24572] RBP: 00007fad15c50090 R08: 0000000000000000 R09: 0000000000000000 [ 570.065905][T24572] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 570.065918][T24572] R13: 00007fad14fb6038 R14: 00007fad14fb5fa0 R15: 00007ffcc305d788 [ 570.065951][T24572] [ 571.165660][T24668] __nla_validate_parse: 7 callbacks suppressed [ 571.165682][T24668] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5269'. [ 571.200652][T24673] netlink: 'syz.0.5272': attribute type 10 has an invalid length. [ 571.225983][T24673] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5272'. [ 571.377838][T24681] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5274'. [ 571.441441][T24685] netlink: 100 bytes leftover after parsing attributes in process `syz.1.5275'. [ 571.467665][T24682] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5274'. [ 571.512126][T24695] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5277'. [ 571.967679][T24711] sctp: [Deprecated]: syz.1.5280 (pid 24711) Use of struct sctp_assoc_value in delayed_ack socket option. [ 571.967679][T24711] Use struct sctp_sack_info instead [ 572.249492][T24720] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 572.448516][T24723] tipc: Enabled bearer , priority 0 [ 572.455302][T24728] netlink: 696 bytes leftover after parsing attributes in process `syz.3.5286'. [ 572.486503][T24723] syzkaller0: entered promiscuous mode [ 572.497877][T24723] syzkaller0: entered allmulticast mode [ 572.529961][T24731] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5284'. [ 572.572575][T24731] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5284'. [ 572.667985][T24731] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 572.798404][T24722] tipc: Resetting bearer [ 572.916443][T24748] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5290'. [ 572.935828][T24722] tipc: Disabling bearer [ 573.149906][T24760] netlink: 'syz.0.5295': attribute type 4 has an invalid length. [ 573.198742][T24760] netlink: 'syz.0.5295': attribute type 4 has an invalid length. [ 573.374472][T24773] 8021q: adding VLAN 0 to HW filter on device bond9 [ 573.404584][T24773] bond9: (slave bridge8): Enslaving as an active interface with an up link [ 573.708355][T24790] netlink: 'syz.4.5306': attribute type 1 has an invalid length. [ 574.092595][ T9959] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 574.106618][ T9959] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 574.138431][T24812] netlink: 'syz.4.5313': attribute type 32 has an invalid length. [ 574.154252][T24812] (unnamed net_device) (uninitialized): option coupled_control: invalid value (52) [ 574.172611][T24812] netlink: 'syz.4.5313': attribute type 32 has an invalid length. [ 574.183205][T24812] (unnamed net_device) (uninitialized): option coupled_control: invalid value (52) [ 574.732101][T24845] veth7: entered promiscuous mode [ 574.746565][T24845] veth7: entered allmulticast mode [ 575.674325][T24912] netlink: 'syz.0.5339': attribute type 1 has an invalid length. [ 575.694211][T24912] netlink: 'syz.0.5339': attribute type 1 has an invalid length. [ 575.716128][T24902] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 575.767185][T24917] veth0_to_bond: entered allmulticast mode [ 575.837014][T24924] tipc: Enabled bearer , priority 0 [ 575.868887][T24918] syzkaller0: entered promiscuous mode [ 575.888310][T24918] syzkaller0: entered allmulticast mode [ 575.939854][T24918] tipc: Resetting bearer [ 575.957400][T24915] tipc: Resetting bearer [ 575.991676][T24915] tipc: Disabling bearer [ 576.066788][T24928] openvswitch: netlink: Actions may not be safe on all matching packets [ 576.186620][T24938] netlink: 'syz.2.5351': attribute type 10 has an invalid length. [ 576.209652][T24940] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 576.219097][T24938] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 576.250660][T24940] __nla_validate_parse: 17 callbacks suppressed [ 576.250684][T24940] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5352'. [ 576.294269][T24943] netlink: 248 bytes leftover after parsing attributes in process `syz.3.5354'. [ 576.376795][T24949] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 576.753152][T24976] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5363'. [ 576.754689][T24977] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5363'. [ 576.916451][T24987] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5366'. [ 576.966718][T24992] tipc: Enabled bearer , priority 0 [ 577.030351][T24991] netlink: 332 bytes leftover after parsing attributes in process `syz.1.5367'. [ 577.046731][T24996] tipc: Disabling bearer [ 577.054767][T24991] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 577.067630][T24999] netlink: 'syz.2.5369': attribute type 1 has an invalid length. [ 577.075857][T24999] netlink: 228 bytes leftover after parsing attributes in process `syz.2.5369'. [ 577.258738][T25007] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5373'. [ 577.342255][T25014] netlink: 'syz.2.5374': attribute type 11 has an invalid length. [ 577.350397][T25014] netlink: 'syz.2.5374': attribute type 11 has an invalid length. [ 577.358242][T25014] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5374'. [ 577.567944][T25020] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5376'. [ 577.815026][T25037] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 579.325590][T25109] only policy match revision 0 supported [ 579.325613][T25109] unable to load match [ 580.033704][T25133] syzkaller0: entered promiscuous mode [ 580.049452][T25133] syzkaller0: entered allmulticast mode [ 580.192913][T25142] netlink: 'syz.2.5409': attribute type 27 has an invalid length. [ 582.311364][T25169] __nla_validate_parse: 2 callbacks suppressed [ 582.311388][T25169] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5417'. [ 582.354947][T25173] tipc: Enabled bearer , priority 0 [ 582.362484][T25172] syzkaller0: entered promiscuous mode [ 582.367996][T25172] syzkaller0: entered allmulticast mode [ 582.393325][T25173] tipc: Resetting bearer [ 582.453627][T25178] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5417'. [ 582.525237][T25178] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5417'. [ 582.567586][T25170] tipc: Resetting bearer [ 582.605474][T25170] tipc: Disabling bearer [ 582.804688][T25194] netlink: 'syz.3.5424': attribute type 1 has an invalid length. [ 582.839555][T25194] netlink: 784 bytes leftover after parsing attributes in process `syz.3.5424'. [ 582.863272][T25194] netlink: 'syz.3.5424': attribute type 11 has an invalid length. [ 582.898155][T25194] netlink: 'syz.3.5424': attribute type 11 has an invalid length. [ 582.912942][T25194] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5424'. [ 583.057638][T25207] syzkaller0: entered promiscuous mode [ 583.067358][T25207] syzkaller0: entered allmulticast mode [ 583.153344][T25213] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5428'. [ 583.405667][T25222] netlink: 'syz.3.5433': attribute type 10 has an invalid length. [ 583.425937][T25222] bridge0: port 1(batadv0) entered disabled state [ 583.466542][T25227] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5434'. [ 583.492249][T25222] bridge0: port 1(batadv0) entered blocking state [ 583.498928][T25222] bridge0: port 1(batadv0) entered forwarding state [ 583.523662][T25222] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 583.726598][ T13] batman_adv: batadv0: MLD Querier disappeared - multicast optimizations disabled [ 584.374479][T25259] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5444'. [ 584.438686][T25262] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5446'. [ 584.460321][T25259] vlan3: entered allmulticast mode [ 584.462715][T25263] ksmbd: Unknown IPC event: 3, ignore. [ 584.465496][T25259] bridge0: entered allmulticast mode [ 584.487079][T25259] bridge5: port 1(vlan3) entered blocking state [ 584.496843][T25259] bridge5: port 1(vlan3) entered disabled state [ 584.563487][T25259] vlan3: entered promiscuous mode [ 584.584851][T25259] bridge0: entered promiscuous mode [ 584.590760][T25270] netlink: 256 bytes leftover after parsing attributes in process `syz.3.5447'. [ 584.660572][T25270] netlink: 'syz.3.5447': attribute type 11 has an invalid length. [ 585.127995][T25291] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 585.162120][T25291] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 586.243429][T25343] netlink: 'syz.1.5472': attribute type 29 has an invalid length. [ 586.359359][T25348] netlink: 'syz.3.5474': attribute type 10 has an invalid length. [ 586.570540][T25363] netlink: 'syz.3.5477': attribute type 1 has an invalid length. [ 586.662422][T25363] bond4: (slave vxcan1): The slave device specified does not support setting the MAC address [ 586.738781][T25363] bond4: (slave vxcan1): Error -95 calling set_mac_address [ 586.867129][T25366] team1: entered promiscuous mode [ 586.878327][T25366] team1: entered allmulticast mode [ 586.893843][T25367] gretap2: entered promiscuous mode [ 586.903593][T25367] bond4: (slave gretap2): making interface the new active one [ 586.913490][T25367] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 586.964948][T25368] macvlan2: entered promiscuous mode [ 586.986205][T25368] macvlan2: entered allmulticast mode [ 586.997266][T25368] bond4: entered promiscuous mode [ 587.007638][T25368] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 587.026753][T25368] bond4: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap2 [ 587.050578][T25368] bond4: left promiscuous mode [ 587.077989][T25377] netlink: 'syz.1.5482': attribute type 13 has an invalid length. [ 587.120679][T25377] macvtap0: entered allmulticast mode [ 587.126624][T25377] macvtap0: refused to change device tx_queue_len [ 587.174898][T25379] netlink: 'syz.2.5483': attribute type 1 has an invalid length. [ 587.219365][T25379] netlink: 'syz.2.5483': attribute type 1 has an invalid length. [ 587.526301][T25393] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 587.808811][T25413] __nla_validate_parse: 15 callbacks suppressed [ 587.808832][T25413] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5492'. [ 588.388818][T25433] unknown channel width for channel at 909000KHz? [ 588.407311][T25433] unknown channel width for channel at 909000KHz? [ 588.871247][T25464] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5506'. [ 589.093604][T25473] netlink: 'syz.0.5508': attribute type 7 has an invalid length. [ 589.197337][T25475] netlink: 'syz.3.5509': attribute type 1 has an invalid length. [ 589.376010][T25485] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5512'. [ 589.748205][T25501] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5515'. [ 590.215265][T25503] team0 (unregistering): Port device team_slave_0 removed [ 590.230275][T25503] team0 (unregistering): Port device team_slave_1 removed [ 590.250623][T25503] team0 (unregistering): Port device geneve0 removed [ 590.334516][T25511] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 590.553330][T25527] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5526'. [ 590.810106][T25538] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5528'. [ 591.227041][T25555] bond0: (slave bridge0): Releasing backup interface [ 591.256161][T25555] bridge0: port 1(batadv0) entered disabled state [ 591.287016][T25555] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 591.564453][T25568] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5540'. [ 591.580520][T25572] netlink: 'syz.3.5542': attribute type 1 has an invalid length. [ 591.619385][T25572] netlink: 'syz.3.5542': attribute type 1 has an invalid length. [ 591.806513][T25576] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 592.043808][T25589] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5543'. [ 592.544727][T25601] mac80211_hwsim hwsim34 ÿ: renamed from wlan1 (while UP) [ 592.869745][T25610] syzkaller1: entered promiscuous mode [ 592.875542][T25610] syzkaller1: entered allmulticast mode [ 592.890755][T25614] pim6reg1: entered promiscuous mode [ 592.910131][T25614] pim6reg1: entered allmulticast mode [ 593.633854][T25636] macvtap1: entered promiscuous mode [ 593.658177][T25636] vlan0: entered promiscuous mode [ 593.674353][T25636] macvtap1: entered allmulticast mode [ 593.687749][T25636] vlan0: entered allmulticast mode [ 593.697634][T25636] veth0_vlan: entered allmulticast mode [ 593.736498][T25649] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.895963][T25655] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5562'. [ 593.911807][T25656] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5561'. [ 594.005466][T25664] netlink: 'syz.2.5564': attribute type 6 has an invalid length. [ 594.049504][T25663] netlink: 'syz.2.5564': attribute type 6 has an invalid length. [ 594.096387][T25666] netlink: 'syz.2.5564': attribute type 6 has an invalid length. [ 594.109865][T25668] netlink: 'syz.0.5563': attribute type 1 has an invalid length. [ 594.174589][T25675] netlink: 'syz.4.5567': attribute type 1 has an invalid length. [ 594.191411][T25675] netlink: 172 bytes leftover after parsing attributes in process `syz.4.5567'. [ 594.472867][T25691] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5570'. [ 594.483770][T25691] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5570'. [ 594.681749][T25699] netlink: 164 bytes leftover after parsing attributes in process `syz.2.5573'. [ 594.693992][T25679] veth9: entered promiscuous mode [ 595.029863][T25705] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 595.045887][T25705] tipc: Enabled bearer , priority 12 [ 595.152661][T25707] netlink: 'syz.3.5576': attribute type 39 has an invalid length. [ 595.464383][T25720] tipc: Enabled bearer , priority 0 [ 595.473982][T25722] syzkaller0: entered promiscuous mode [ 595.480456][T25722] syzkaller0: entered allmulticast mode [ 595.501087][T25724] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5579'. [ 595.530054][T25724] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5579'. [ 595.569875][T25722] tipc: Resetting bearer [ 595.620953][T25722] tipc: Disabling bearer [ 595.710354][ T55] block nbd1: Possible stuck request ffff8880254a5080: control (read@0,1024B). Runtime 330 seconds [ 595.723030][ T55] block nbd1: Possible stuck request ffff8880254a5240: control (read@1024,1024B). Runtime 330 seconds [ 595.734931][ T55] block nbd1: Possible stuck request ffff8880254a5400: control (read@2048,1024B). Runtime 330 seconds [ 595.746944][ T55] block nbd1: Possible stuck request ffff8880254a55c0: control (read@3072,1024B). Runtime 330 seconds [ 595.837359][T25735] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5582'. [ 595.938225][T25743] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5585'. [ 596.161132][T25753] netlink: 'syz.1.5587': attribute type 33 has an invalid length. [ 596.230683][T25755] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 596.659861][T25772] netlink: 'syz.1.5594': attribute type 1 has an invalid length. [ 597.032120][T25780] bond5: (slave gretap1): making interface the new active one [ 597.065610][T25780] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 597.468288][T25792] netlink: 'syz.2.5598': attribute type 10 has an invalid length. [ 597.525893][T25792] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 597.597980][T25792] `: (slave netdevsim0): Enslaving as an active interface with an up link [ 598.091030][T25828] openvswitch: netlink: Actions may not be safe on all matching packets [ 598.235307][T25836] tipc: Enabled bearer , priority 0 [ 598.277362][T25836] syzkaller0: entered promiscuous mode [ 598.296065][T25836] syzkaller0: entered allmulticast mode [ 598.333158][T25836] tipc: Resetting bearer [ 598.355972][T25833] tipc: Resetting bearer [ 598.390070][T25833] tipc: Disabling bearer [ 598.556462][T25846] tipc: Enabled bearer , priority 13 [ 598.611560][T25849] netlink: 'syz.0.5616': attribute type 2 has an invalid length. [ 598.923395][T25862] __nla_validate_parse: 5 callbacks suppressed [ 598.923417][T25862] netlink: 10 bytes leftover after parsing attributes in process `syz.1.5621'. [ 599.011920][T25863] netlink: 'syz.2.5620': attribute type 1 has an invalid length. [ 599.033316][T25863] netlink: 220 bytes leftover after parsing attributes in process `syz.2.5620'. [ 599.669601][ T9347] tipc: Node number set to 2812482642 [ 599.906458][T25907] netlink: 'syz.2.5630': attribute type 1 has an invalid length. [ 600.033178][T25908] netlink: 96 bytes leftover after parsing attributes in process `syz.3.5631'. [ 600.157718][T25911] 8021q: adding VLAN 0 to HW filter on device bond11 [ 600.185432][T25911] bond10: (slave bond11): making interface the new active one [ 600.198908][T25911] bond10: (slave bond11): Enslaving as an active interface with an up link [ 600.226139][T25913] bond10: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 600.247406][T25913] bond10: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 600.453527][T25926] sctp: [Deprecated]: syz.0.5635 (pid 25926) Use of int in max_burst socket option. [ 600.453527][T25926] Use struct sctp_assoc_value instead [ 600.495680][T25926] sctp: [Deprecated]: syz.0.5635 (pid 25926) Use of int in max_burst socket option. [ 600.495680][T25926] Use struct sctp_assoc_value instead [ 600.568760][T25927] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5636'. [ 600.796499][T25937] netlink: 'syz.2.5639': attribute type 1 has an invalid length. [ 600.862284][T25937] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5639'. [ 600.874210][T25945] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5642'. [ 600.905500][T25942] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5642'. [ 600.917509][T25948] xt_socket: unknown flags 0x50 [ 600.943710][T25948] netlink: 'syz.4.5641': attribute type 16 has an invalid length. [ 600.966864][T25948] netlink: 'syz.4.5641': attribute type 17 has an invalid length. [ 601.177818][T25959] openvswitch: netlink: Multiple metadata blocks provided [ 601.198207][T25948] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 601.215349][T25956] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5644'. [ 601.366761][T25968] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5646'. [ 601.376228][T25968] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5646'. [ 601.602080][T25983] netlink: 'syz.3.5652': attribute type 4 has an invalid length. [ 601.625611][T25984] netlink: 'syz.3.5652': attribute type 4 has an invalid length. [ 601.771470][T25991] gre2: entered promiscuous mode [ 601.788916][T25991] gre2: entered allmulticast mode [ 601.865014][T25993] netlink: 'syz.3.5655': attribute type 10 has an invalid length. [ 601.923509][T25993] team0: Device hsr_slave_0 failed to register rx_handler [ 602.001531][T26000] netlink: 'syz.4.5657': attribute type 5 has an invalid length. [ 602.033797][T26000] geneve5: entered promiscuous mode [ 602.038310][T26002] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 602.052944][T26000] geneve5: entered allmulticast mode [ 602.077224][ T37] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 602.095727][ T37] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 602.122081][ T37] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 602.158172][ T37] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 604.033675][T26099] __nla_validate_parse: 6 callbacks suppressed [ 604.033696][T26099] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5680'. [ 604.298113][T26103] tipc: Enabled bearer , priority 0 [ 604.315648][T26103] mac80211_hwsim hwsim40 syzkaller0: entered promiscuous mode [ 604.329152][T26103] mac80211_hwsim hwsim40 syzkaller0: entered allmulticast mode [ 604.337956][T26103] tipc: Resetting bearer [ 604.430561][ T12] tipc: Resetting bearer [ 604.584655][T26115] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5685'. [ 604.701566][T26120] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5686'. [ 604.715781][T26120] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5686'. [ 604.761747][T26125] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5688'. [ 604.790694][T26125] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5688'. [ 604.900948][ T24] tipc: Resetting bearer [ 605.136962][T26146] netlink: 'syz.2.5694': attribute type 10 has an invalid length. [ 605.188928][T26146] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 605.236050][T26149] netlink: 212288 bytes leftover after parsing attributes in process `syz.4.5695'. [ 605.309504][ T5869] Bluetooth: hci1: command 0x0405 tx timeout [ 605.408684][T26160] openvswitch: netlink: IP tunnel dst address not specified [ 605.448943][T26167] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 605.697474][T26185] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5706'. [ 605.762375][T26187] netlink: 'syz.4.5707': attribute type 1 has an invalid length. [ 605.763020][T26185] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5706'. [ 605.774782][T26187] netlink: 212 bytes leftover after parsing attributes in process `syz.4.5707'. [ 605.788505][T26187] netlink: 'syz.4.5707': attribute type 1 has an invalid length. [ 606.069464][T26194] netlink: 'syz.2.5709': attribute type 2 has an invalid length. [ 606.237478][T26202] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 606.397396][T26212] netlink: 'syz.4.5714': attribute type 10 has an invalid length. [ 606.424606][T26212] batadv0: entered promiscuous mode [ 606.449707][T26212] batadv0: entered allmulticast mode [ 606.463851][T26212] bridge0: port 1(batadv0) entered blocking state [ 606.483621][T26212] bridge0: port 1(batadv0) entered disabled state [ 606.562432][ T13] batman_adv: batadv0: IGMP Querier appeared [ 606.568516][ T13] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 606.741263][T26231] netlink: 'syz.1.5719': attribute type 1 has an invalid length. [ 606.983196][T26231] veth7: entered promiscuous mode [ 607.006649][T26231] bond6: (slave veth7): Enslaving as a backup interface with a down link [ 607.624310][T26269] bridge8: entered promiscuous mode [ 607.667617][T26269] bridge8: entered allmulticast mode [ 607.894566][T26277] netlink: 'syz.0.5732': attribute type 1 has an invalid length. [ 608.001097][T26277] 8021q: adding VLAN 0 to HW filter on device bond3 [ 608.530814][T26312] netlink: 'syz.3.5741': attribute type 12 has an invalid length. [ 608.859145][T26326] netlink: 'syz.4.5746': attribute type 10 has an invalid length. [ 609.068435][T26338] netlink: 'syz.4.5750': attribute type 1 has an invalid length. [ 609.183403][T26344] tipc: Enabled bearer , priority 0 [ 609.191382][T26344] syzkaller0: entered promiscuous mode [ 609.196894][T26344] syzkaller0: entered allmulticast mode [ 609.316349][T26344] tipc: Resetting bearer [ 609.418601][T26341] tipc: Resetting bearer [ 609.477806][T26364] __nla_validate_parse: 21 callbacks suppressed [ 609.477829][T26364] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5756'. [ 609.588513][T26341] tipc: Disabling bearer [ 609.646741][T26357] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5756'. [ 609.823921][T26379] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5760'. [ 609.835511][T26379] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5760'. [ 609.870568][T26379] 8021q: VLANs not supported on wg1 [ 609.973687][T26382] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_tx_wq": -EINTR [ 610.168563][T26401] erspan0: entered allmulticast mode [ 610.246984][T26403] dvmrp0: left allmulticast mode [ 610.289624][T26407] validate_nla: 1 callbacks suppressed [ 610.289645][T26407] netlink: 'syz.1.5766': attribute type 1 has an invalid length. [ 610.320882][T26407] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5766'. [ 610.393437][T26415] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5767'. [ 610.816522][T26434] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5774'. [ 610.826907][T26440] netlink: 256 bytes leftover after parsing attributes in process `syz.2.5776'. [ 610.864656][T26440] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5776'. [ 611.067146][T26451] netlink: 51 bytes leftover after parsing attributes in process `syz.3.5774'. [ 611.274513][T26467] mac80211_hwsim hwsim40 syzkaller0: Caught tx_queue_len zero misconfig [ 611.452283][T26475] bridge9: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 611.596351][T26484] netlink: 'syz.2.5790': attribute type 1 has an invalid length. [ 611.604441][T26484] netlink: 'syz.2.5790': attribute type 2 has an invalid length. [ 611.722857][T26487] syzkaller1: entered promiscuous mode [ 611.728390][T26487] syzkaller1: entered allmulticast mode [ 612.232230][T26519] 8021q: adding VLAN 0 to HW filter on device bond12 [ 612.576418][T26538] tipc: Resetting bearer [ 612.587137][T26538] tipc: Resetting bearer [ 612.637000][T26540] netlink: 'syz.2.5803': attribute type 16 has an invalid length. [ 612.668046][T26540] netlink: 'syz.2.5803': attribute type 17 has an invalid length. [ 612.723917][T26540] erspan0: left allmulticast mode [ 612.758325][T26540] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 612.884362][T26552] tap0: tun_chr_ioctl cmd 2148553947 [ 613.035239][T26559] netlink: zone id is out of range [ 613.040534][T26559] netlink: zone id is out of range [ 613.045972][T26559] netlink: zone id is out of range [ 613.054408][T26559] netlink: zone id is out of range [ 613.059732][T26559] netlink: zone id is out of range [ 613.064900][T26559] netlink: zone id is out of range [ 613.070631][T26559] netlink: get zone limit has 8 unknown bytes [ 613.213121][T26565] syzkaller0: create flow: hash 650661673 index 1 [ 613.272871][ T13] syzkaller0: tun_net_xmit 76 [ 613.278275][ T13] syzkaller0: tun_net_xmit 48 [ 613.293837][ T929] syzkaller0: tun_net_xmit 76 [ 613.365497][T26572] netlink: 'syz.0.5813': attribute type 16 has an invalid length. [ 613.423938][T26560] syzkaller0: delete flow: hash 650661673 index 1 [ 614.017458][T26596] netlink: 'syz.1.5819': attribute type 10 has an invalid length. [ 614.174590][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803bc17400: rx timeout, send abort [ 614.183631][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88803bc17400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 614.546485][T26605] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 614.557166][T26606] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 615.686039][T26594] syz_tun: entered allmulticast mode [ 615.693689][T26595] syz_tun: left allmulticast mode [ 615.706012][T26596] veth0_vlan: entered allmulticast mode [ 615.727904][T26596] veth0_vlan: left promiscuous mode [ 615.735295][T26596] veth0_vlan: entered promiscuous mode [ 615.742713][T26596] team0: Device veth0_vlan failed to register rx_handler [ 616.161721][T26641] bridge0: port 1(batadv0) entered disabled state [ 617.000624][T26678] __nla_validate_parse: 17 callbacks suppressed [ 617.000645][T26678] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5844'. [ 617.100475][T26686] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5847'. [ 617.366658][T26701] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5851'. [ 617.619064][T26711] netlink: 'syz.0.5854': attribute type 1 has an invalid length. [ 617.637323][T26711] netlink: 15 bytes leftover after parsing attributes in process `syz.0.5854'. [ 617.678622][T26714] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5855'. [ 617.706467][T26713] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5855'. [ 617.828378][T26726] netlink: 96 bytes leftover after parsing attributes in process `syz.3.5858'. [ 617.840681][T26719] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5857'. [ 617.858161][T26726] vlan4: entered allmulticast mode [ 617.885212][T26726] erspan0: entered allmulticast mode [ 618.007097][T26737] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5863'. [ 618.017714][T26736] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5863'. [ 618.167870][T26745] netlink: 'syz.2.5865': attribute type 39 has an invalid length. [ 618.188627][T26747] xfrm2: entered promiscuous mode [ 618.194119][T26747] xfrm2: entered allmulticast mode [ 618.276905][T26752] tipc: Enabled bearer , priority 0 [ 618.322504][T26753] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 618.375034][T26752] syzkaller0: entered promiscuous mode [ 618.392353][T26752] syzkaller0: entered allmulticast mode [ 618.504761][T26752] tipc: Resetting bearer [ 618.513611][T26751] tipc: Resetting bearer [ 618.597282][T26751] tipc: Disabling bearer [ 619.719754][T26841] nbd6: detected capacity change from 0 to 549764202496 [ 619.730568][ T5869] block nbd6: Receive control failed (result -32) [ 620.050955][T26867] tipc: Enabling of bearer rejected, already enabled [ 620.061575][T26867] batadv_slave_1: Device is already in use. [ 620.171390][T26873] smc: net device bond0 applied user defined pnetid SYZ2 [ 620.305237][T26879] smc: removing net device bond0 with user defined pnetid SYZ2 [ 620.318483][T26879] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 620.337428][T26879] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 620.358948][T26879] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 620.383624][T26879] bond0 (unregistering): Released all slaves [ 620.456915][ T62] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.474787][ T62] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.486294][ T62] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.584022][T26892] tipc: Enabling of bearer rejected, failed to enable media [ 620.881284][T26903] geneve2: entered promiscuous mode [ 620.894320][T26903] geneve2: entered allmulticast mode [ 620.920668][ T37] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 620.942662][ T37] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 621.107511][T26903] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 621.120013][T26903] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.176140][ T37] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 621.196793][T26912] netlink: 'syz.2.5917': attribute type 12 has an invalid length. [ 621.633084][T26933] netlink: 'syz.2.5922': attribute type 39 has an invalid length. [ 622.066114][T26937] netlink: 'syz.2.5924': attribute type 29 has an invalid length. [ 622.074447][T26937] __nla_validate_parse: 20 callbacks suppressed [ 622.074467][T26937] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5924'. [ 622.196640][T26945] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5927'. [ 622.401909][T26903] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 622.425256][T26903] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.440016][T26903] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 622.467750][T26958] netlink: 232 bytes leftover after parsing attributes in process `syz.4.5932'. [ 622.546945][T26903] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 622.558026][T26903] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.570879][T26903] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 622.596080][T26964] tipc: Enabled bearer , priority 27 [ 622.627011][T26903] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 622.637796][T26903] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.651767][T26903] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 622.757293][ T12] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 622.771123][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 622.785454][ T12] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 622.947554][T26966] tipc: Resetting bearer [ 623.112416][T26972] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5936'. [ 623.133080][T26972] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5936'. [ 623.425670][T26981] netlink: 'syz.0.5937': attribute type 4 has an invalid length. [ 623.504199][T26982] netlink: 'syz.0.5937': attribute type 4 has an invalid length. [ 623.547335][ T12] netdevsim netdevsim1 ÿÿÿÿÿÿ: unset [1, 0] type 2 family 0 port 256 - 0 [ 623.698789][ T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 256 - 0 [ 623.770269][T26991] netlink: 13 bytes leftover after parsing attributes in process `syz.2.5941'. [ 623.770832][T26988] team0: Port device team_slave_0 removed [ 623.803735][T26993] netlink: 'syz.4.5939': attribute type 13 has an invalid length. [ 623.838612][T26988] team0: Port device team_slave_1 removed [ 623.862515][T26988] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 623.900779][T26988] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 623.924573][T26988] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 623.927942][T26997] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5943'. [ 623.958681][ T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 256 - 0 [ 623.968894][ T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 256 - 0 [ 624.033279][T26993] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 624.099427][ T12] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 624.107926][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 624.153188][ T12] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 624.200485][ T12] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 624.208895][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 624.250426][ T12] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 624.258693][ T12] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 624.338739][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 624.380268][ T12] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 624.437462][T27017] veth0: entered promiscuous mode [ 624.494642][T27017] veth0: left promiscuous mode [ 624.518467][ T1306] clip:clip_start_xmit: skb_dst(skb) == NULL [ 625.088602][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 625.103440][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 625.133147][ T5870] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 625.144889][ T5870] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 625.182134][ T5870] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 625.195681][ T5870] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 625.206799][ T5870] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 625.413756][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 625.433405][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 625.796978][ T55] block nbd1: Possible stuck request ffff8880254a5080: control (read@0,1024B). Runtime 360 seconds [ 625.808840][ T55] block nbd1: Possible stuck request ffff8880254a5240: control (read@1024,1024B). Runtime 360 seconds [ 625.823319][ T55] block nbd1: Possible stuck request ffff8880254a5400: control (read@2048,1024B). Runtime 360 seconds [ 625.837476][ T55] block nbd1: Possible stuck request ffff8880254a55c0: control (read@3072,1024B). Runtime 360 seconds [ 625.879511][T27058] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5955'. [ 625.888548][T27058] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5955'. [ 625.899879][T27058] netlink: 'syz.2.5955': attribute type 3 has an invalid length. [ 625.916273][T27062] veth0: entered promiscuous mode [ 625.984379][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 626.037871][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 626.120755][T27063] veth0: left promiscuous mode [ 626.184784][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 626.209399][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 627.232151][ T5869] Bluetooth: hci2: command tx timeout [ 628.234231][ T12] bond1 (unregistering): Released all slaves [ 628.254891][ T12] bond2 (unregistering): Released all slaves [ 628.417385][T27040] chnl_net:caif_netlink_parms(): no params data found [ 628.498456][ T12] tipc: Disabling bearer [ 628.531012][ T12] tipc: Left network mode [ 628.754344][T27149] netlink: 'syz.1.5976': attribute type 10 has an invalid length. [ 628.885632][T27149] macvtap0: left allmulticast mode [ 628.917998][T27154] dvmrp0: entered allmulticast mode [ 628.998893][T27154] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 629.027044][T27163] sctp: [Deprecated]: syz.0.5979 (pid 27163) Use of struct sctp_assoc_value in delayed_ack socket option. [ 629.027044][T27163] Use struct sctp_sack_info instead [ 629.079171][T27165] sctp: [Deprecated]: syz.0.5979 (pid 27165) Use of struct sctp_assoc_value in delayed_ack socket option. [ 629.079171][T27165] Use struct sctp_sack_info instead [ 629.115250][T27040] bridge0: port 1(bridge_slave_0) entered blocking state [ 629.123090][T27040] bridge0: port 1(bridge_slave_0) entered disabled state [ 629.132164][T27040] bridge_slave_0: entered allmulticast mode [ 629.144107][T27040] bridge_slave_0: entered promiscuous mode [ 629.158443][T27040] bridge0: port 2(bridge_slave_1) entered blocking state [ 629.187724][T27040] bridge0: port 2(bridge_slave_1) entered disabled state [ 629.207299][T27040] bridge_slave_1: entered allmulticast mode [ 629.224391][T27040] bridge_slave_1: entered promiscuous mode [ 629.255396][T27169] [ 629.257795][T27169] ====================================================== [ 629.264966][T27169] WARNING: possible circular locking dependency detected [ 629.272029][T27169] syzkaller #0 Not tainted [ 629.276479][T27169] ------------------------------------------------------ [ 629.283548][T27169] syz.1.5980/27169 is trying to acquire lock: [ 629.289626][T27169] ffffffff8f68d258 (nr_neigh_list_lock){+...}-{3:3}, at: nr_remove_neigh+0x25/0xe0 [ 629.298996][T27169] [ 629.298996][T27169] but task is already holding lock: [ 629.306408][T27169] ffff888039971c70 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570 [ 629.315834][T27169] [ 629.315834][T27169] which lock already depends on the new lock. [ 629.315834][T27169] [ 629.326351][T27169] [ 629.326351][T27169] the existing dependency chain (in reverse order) is: [ 629.335422][T27169] [ 629.335422][T27169] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 629.343449][T27169] lock_acquire+0x120/0x360 [ 629.348515][T27169] _raw_spin_lock_bh+0x36/0x50 [ 629.353930][T27169] nr_rt_device_down+0x12a/0x720 [ 629.359438][T27169] nr_device_event+0x137/0x150 [ 629.364751][T27169] notifier_call_chain+0x1b3/0x3e0 [ 629.370401][T27169] __dev_notify_flags+0x18d/0x2e0 [ 629.375987][T27169] netif_change_flags+0xe8/0x1a0 [ 629.381453][T27169] dev_change_flags+0x130/0x260 [ 629.386844][T27169] dev_ioctl+0x7b4/0x1150 [ 629.391709][T27169] sock_do_ioctl+0x22c/0x300 [ 629.396830][T27169] sock_ioctl+0x576/0x790 [ 629.401686][T27169] __se_sys_ioctl+0xfc/0x170 [ 629.406821][T27169] do_syscall_64+0xfa/0x3b0 [ 629.411861][T27169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.418283][T27169] [ 629.418283][T27169] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 629.426118][T27169] lock_acquire+0x120/0x360 [ 629.431161][T27169] _raw_spin_lock_bh+0x36/0x50 [ 629.436461][T27169] nr_rt_device_down+0xa9/0x720 [ 629.441840][T27169] nr_device_event+0x137/0x150 [ 629.447220][T27169] notifier_call_chain+0x1b3/0x3e0 [ 629.452947][T27169] __dev_notify_flags+0x18d/0x2e0 [ 629.458587][T27169] netif_change_flags+0xe8/0x1a0 [ 629.464052][T27169] dev_change_flags+0x130/0x260 [ 629.469444][T27169] dev_ioctl+0x7b4/0x1150 [ 629.474303][T27169] sock_do_ioctl+0x22c/0x300 [ 629.479424][T27169] sock_ioctl+0x576/0x790 [ 629.484294][T27169] __se_sys_ioctl+0xfc/0x170 [ 629.489474][T27169] do_syscall_64+0xfa/0x3b0 [ 629.494551][T27169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.500989][T27169] [ 629.500989][T27169] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 629.508921][T27169] validate_chain+0xb9b/0x2140 [ 629.514223][T27169] __lock_acquire+0xab9/0xd20 [ 629.519451][T27169] lock_acquire+0x120/0x360 [ 629.524533][T27169] _raw_spin_lock_bh+0x36/0x50 [ 629.529849][T27169] nr_remove_neigh+0x25/0xe0 [ 629.534986][T27169] nr_add_node+0x1d9f/0x2570 [ 629.540112][T27169] nr_rt_ioctl+0xc12/0xd50 [ 629.545090][T27169] sock_do_ioctl+0xd9/0x300 [ 629.550134][T27169] sock_ioctl+0x576/0x790 [ 629.555007][T27169] __se_sys_ioctl+0xfc/0x170 [ 629.560143][T27169] do_syscall_64+0xfa/0x3b0 [ 629.565188][T27169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.571881][T27169] [ 629.571881][T27169] other info that might help us debug this: [ 629.571881][T27169] [ 629.582127][T27169] Chain exists of: [ 629.582127][T27169] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 629.582127][T27169] [ 629.596496][T27169] Possible unsafe locking scenario: [ 629.596496][T27169] [ 629.603954][T27169] CPU0 CPU1 [ 629.609325][T27169] ---- ---- [ 629.614700][T27169] lock(&nr_node->node_lock); [ 629.619480][T27169] lock(nr_node_list_lock); [ 629.626618][T27169] lock(&nr_node->node_lock); [ 629.634019][T27169] lock(nr_neigh_list_lock); [ 629.638716][T27169] [ 629.638716][T27169] *** DEADLOCK *** [ 629.638716][T27169] [ 629.646883][T27169] 1 lock held by syz.1.5980/27169: [ 629.651994][T27169] #0: ffff888039971c70 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570 [ 629.661766][T27169] [ 629.661766][T27169] stack backtrace: [ 629.667655][T27169] CPU: 1 UID: 0 PID: 27169 Comm: syz.1.5980 Not tainted syzkaller #0 PREEMPT(full) [ 629.667678][T27169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 629.667689][T27169] Call Trace: [ 629.667699][T27169] [ 629.667708][T27169] dump_stack_lvl+0x189/0x250 [ 629.667734][T27169] ? __pfx_dump_stack_lvl+0x10/0x10 [ 629.667756][T27169] ? __pfx__printk+0x10/0x10 [ 629.667779][T27169] ? stack_trace_save+0x9c/0xe0 [ 629.667806][T27169] print_circular_bug+0x2ee/0x310 [ 629.667827][T27169] check_noncircular+0x134/0x160 [ 629.667849][T27169] validate_chain+0xb9b/0x2140 [ 629.667867][T27169] ? do_syscall_64+0xfa/0x3b0 [ 629.667904][T27169] __lock_acquire+0xab9/0xd20 [ 629.667932][T27169] ? nr_remove_neigh+0x25/0xe0 [ 629.667954][T27169] lock_acquire+0x120/0x360 [ 629.667978][T27169] ? nr_remove_neigh+0x25/0xe0 [ 629.668003][T27169] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 629.668025][T27169] ? nr_remove_neigh+0x25/0xe0 [ 629.668047][T27169] _raw_spin_lock_bh+0x36/0x50 [ 629.668067][T27169] ? nr_remove_neigh+0x25/0xe0 [ 629.668089][T27169] nr_remove_neigh+0x25/0xe0 [ 629.668112][T27169] nr_add_node+0x1d9f/0x2570 [ 629.668134][T27169] ? dev_get_by_name+0x21/0x200 [ 629.668154][T27169] ? dev_get_by_name+0x21/0x200 [ 629.668172][T27169] ? dev_get_by_name+0x21/0x200 [ 629.668191][T27169] ? nr_call_to_digi+0x136/0x1b0 [ 629.668212][T27169] nr_rt_ioctl+0xc12/0xd50 [ 629.668238][T27169] ? kasan_quarantine_put+0xdd/0x220 [ 629.668260][T27169] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 629.668286][T27169] ? apparmor_capable+0x137/0x1b0 [ 629.668310][T27169] ? capable+0x89/0xe0 [ 629.668326][T27169] ? nr_ioctl+0x1b1/0x3b0 [ 629.668344][T27169] sock_do_ioctl+0xd9/0x300 [ 629.668366][T27169] ? __pfx_sock_do_ioctl+0x10/0x10 [ 629.668386][T27169] ? __lock_acquire+0xab9/0xd20 [ 629.668419][T27169] sock_ioctl+0x576/0x790 [ 629.668440][T27169] ? __pfx_sock_ioctl+0x10/0x10 [ 629.668460][T27169] ? __fget_files+0x2a/0x420 [ 629.668491][T27169] ? __fget_files+0x3a0/0x420 [ 629.668517][T27169] ? __fget_files+0x2a/0x420 [ 629.668545][T27169] ? bpf_lsm_file_ioctl+0x9/0x20 [ 629.668567][T27169] ? __pfx_sock_ioctl+0x10/0x10 [ 629.668587][T27169] __se_sys_ioctl+0xfc/0x170 [ 629.668609][T27169] do_syscall_64+0xfa/0x3b0 [ 629.668634][T27169] ? lockdep_hardirqs_on+0x9c/0x150 [ 629.668657][T27169] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.668674][T27169] ? clear_bhb_loop+0x60/0xb0 [ 629.668693][T27169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.668710][T27169] RIP: 0033:0x7fa1b198ebe9 [ 629.668726][T27169] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 629.668742][T27169] RSP: 002b:00007fa1b2857038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 629.668760][T27169] RAX: ffffffffffffffda RBX: 00007fa1b1bb5fa0 RCX: 00007fa1b198ebe9 [ 629.668774][T27169] RDX: 0000200000000000 RSI: 000000000000890b RDI: 0000000000000005 [ 629.668786][T27169] RBP: 00007fa1b1a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 629.668797][T27169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 629.668808][T27169] R13: 00007fa1b1bb6038 R14: 00007fa1b1bb5fa0 R15: 00007fffd8f510f8 [ 629.668830][T27169] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 629.999075][ T5869] Bluetooth: hci2: command tx timeout [ 630.790052][ T12] hsr_slave_0: left promiscuous mode [ 630.809383][ T12] hsr_slave_1: left promiscuous mode [ 631.657271][ T12] IPVS: stop unused estimator thread 0... [ 631.756818][ T12] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 631.767269][ T12] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 631.778194][ T12] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 631.813943][ T12] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 631.823804][ T12] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 631.834033][ T12] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 631.893133][ T12] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 631.903077][ T12] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 631.913182][ T12] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 631.954185][ T12] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 631.964104][ T12] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 631.974061][ T12] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 632.044878][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 632.055502][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.065845][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 632.076348][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 632.136932][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 632.147460][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.158048][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 632.168765][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 632.235443][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 632.246119][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.256515][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 632.266915][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 632.342474][ T12] `: (slave netdevsim0): Releasing backup interface [ 632.351077][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 632.361797][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.372929][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 632.383659][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 632.454424][ T12] bridge0: port 1(batadv0) entered disabled state [ 632.466209][ T12] bridge_slave_1: left allmulticast mode [ 632.473303][ T12] bridge_slave_1: left promiscuous mode [ 632.479008][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 632.487428][ T12] bridge_slave_0: left allmulticast mode [ 632.493628][ T12] bridge_slave_0: left promiscuous mode [ 632.499619][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 632.522572][ T12] tipc: Resetting bearer [ 632.529053][ T12] tipc: Resetting bearer [ 632.705683][ T12] tipc: Disabling bearer [ 632.728512][ T12] bond4 (unregistering): (slave gretap2): Releasing active interface [ 632.767670][ T12] team0: Port device geneve0 removed [ 632.985231][ T12] bond0 (unregistering): (slave team0): Releasing backup interface [ 632.995403][ T12] bond0 (unregistering): (slave ÿ): Releasing backup interface [ 633.006273][ T12] bond0 (unregistering): Released all slaves [ 633.106240][ T12] bond1 (unregistering): Released all slaves [ 633.201374][ T12] bond2 (unregistering): Released all slaves [ 633.297508][ T12] bond3 (unregistering): Released all slaves [ 633.307271][ T12] bond4 (unregistering): Released all slaves [ 633.381326][ T12] bond0 (unregistering): Released all slaves [ 633.446937][ T12] tipc: Disabling bearer [ 633.476641][ T12] bond2 (unregistering): (slave geneve3): Releasing active interface [ 633.503026][ T12] ` (unregistering): (slave geneve1): Releasing backup interface [ 633.822670][ T12] bond0 (unregistering): (slave bridge7): Releasing active interface [ 633.892403][ T12] bond9 (unregistering): (slave bridge8): Releasing backup interface [ 634.071214][ T12] ` (unregistering): Released all slaves [ 634.082064][ T12] bond1 (unregistering): Released all slaves [ 634.092028][ T12] bond2 (unregistering): Released all slaves [ 634.203916][ T12] bond3 (unregistering): Released all slaves [ 634.310891][ T12] bond4 (unregistering): (slave veth0_to_bond): Releasing active interface [ 634.321892][ T12] bond4 (unregistering): (slave veth3): Releasing active interface [ 634.333040][ T12] bond4 (unregistering): Released all slaves [ 634.436036][ T12] bond5 (unregistering): Released all slaves [ 634.538440][ T12] bond6 (unregistering): Released all slaves [ 634.548254][ T12] bond7 (unregistering): Released all slaves [ 634.558935][ T12] bond0 (unregistering): Released all slaves [ 634.568992][ T12] bond8 (unregistering): Released all slaves [ 634.584704][ T12] bond9 (unregistering): Released all slaves [ 634.597393][ T12] bond10 (unregistering): (slave bond11): Releasing backup interface [ 634.607566][ T12] bond10 (unregistering): Released all slaves [ 634.713223][ T12] bond11 (unregistering): Released all slaves [ 634.821346][ T12] bond12 (unregistering): Released all slaves [ 634.878037][ T12] bond6 (unregistering): (slave gretap1): Releasing active interface [ 634.914463][ T12] dvmrp0 (unregistering): left allmulticast mode [ 635.238371][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 635.248725][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 635.261663][ T12] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 635.271399][ T12] bond0 (unregistering): Released all slaves [ 635.282175][ T12] bond1 (unregistering): Released all slaves [ 635.292894][ T12] bond2 (unregistering): Released all slaves [ 635.307059][ T12] bond3 (unregistering): (slave vlan2): Releasing active interface [ 635.317207][ T12] bond3 (unregistering): Released all slaves [ 635.418021][ T12] bond4 (unregistering): Released all slaves [ 635.428164][ T12] bond5 (unregistering): Released all slaves [ 635.441503][ T12] bond6 (unregistering): Released all slaves [ 635.559017][ T12] bond7 (unregistering): Released all slaves [ 635.570028][ T12] bond8 (unregistering): Released all slaves [ 637.052609][ T12] : left promiscuous mode [ 637.090460][ T12] : left promiscuous mode [ 637.139510][ T12] tipc: Disabling bearer [ 637.144968][ T12] tipc: Left network mode [ 637.156802][ T12] tipc: Disabling bearer [ 637.163994][ T12] tipc: Left network mode [ 637.174298][ T12] tipc: Left network mode [ 637.703215][ T12] hsr_slave_0: left promiscuous mode [ 637.709822][ T12] hsr_slave_1: left promiscuous mode [ 637.715932][ T12] dummy0: left promiscuous mode [ 637.724176][ T12] batadv_slave_1: left promiscuous mode [ 637.733366][ T12] hsr_slave_0: left promiscuous mode [ 637.740211][ T12] hsr_slave_1: left promiscuous mode [ 637.747674][ T12] hsr_slave_0: left promiscuous mode [ 637.753831][ T12] hsr_slave_1: left promiscuous mode [ 637.774225][ T12] vlan0: left allmulticast mode [ 637.779157][ T12] veth0_vlan: left allmulticast mode [ 637.784699][ T12] vlan0: left promiscuous mode [ 637.790122][ T12] veth1_macvtap: left promiscuous mode [ 637.795664][ T12] veth1_vlan: left promiscuous mode [ 637.801466][ T12] veth0_vlan: left promiscuous mode [ 637.807418][ T12] veth1_macvtap: left promiscuous mode [ 637.813092][ T12] veth0_macvtap: left promiscuous mode [ 637.819092][ T12] team_slave_0: left promiscuous mode [ 637.824534][ T12] team_slave_1: left promiscuous mode [ 637.830242][ T12] veth1_macvtap: left promiscuous mode [ 637.835740][ T12] veth0_macvtap: left promiscuous mode [ 638.823042][ T12] team0 (unregistering): Port device team_slave_1 removed [ 638.850855][ T12] team0 (unregistering): Port device team_slave_0 removed