last executing test programs: 2m31.805672328s ago: executing program 4 (id=9785): bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) r0 = socket$kcm(0xa, 0x4, 0x106) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x0, @loopback, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000080)={0x4000, 0x2, 0x5, 0x1}, 0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000000000000100000024000180060005004e230000060001000200000008000300ac1414aa0800060001"], 0x38}}, 0x0) listen(r1, 0xc) r5 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r5, &(0x7f0000000040), 0x10) listen(r5, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000010000000000000000000000850000008700000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f00000001c0)="10000000000000000000000900f6", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r7, &(0x7f0000000080), 0x10) sendmmsg$alg(r7, &(0x7f0000004ec0)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000500)='\b', 0x1}], 0x1, 0x0, 0x0, 0x4000004}], 0x1, 0x20) setsockopt$sock_linger(r7, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r7, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x1}], 0x1}}], 0x1, 0x24008014) r8 = accept4$unix(r5, 0x0, 0x0, 0x0) recvmsg(r8, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000300)=""/73, 0x49}], 0x1}, 0x10000) recvfrom$unix(r8, &(0x7f0000000140)=""/263, 0x107, 0x60, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r9 = getpid() r10 = getpid() r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGPGRP(r11, 0x8904, &(0x7f0000000140)=0x0) syz_open_procfs$namespace(r12, &(0x7f0000000180)='ns/cgroup\x00') sendmsg$nl_generic(r5, &(0x7f0000001880)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0x1, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYRES64=r4, @ANYRES32=r9, @ANYBLOB="14000008800800a800", @ANYRES32=r10, @ANYRES8=r2, @ANYBLOB="4915831c41c6efd5e37ee3bdd26d5abf93dfeb9e9a2351274bd3217be25d85f27979564b3e0d", @ANYBLOB="0100352ab7282b8a9b"], 0x1038}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000d0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r2) 2m31.596435418s ago: executing program 4 (id=9789): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f00000001c0)=""/222, 0x41100, 0x8}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000500)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_ifreq(r1, 0x8932, &(0x7f00000000c0)={'netdevsim0\x00', @ifru_addrs=@tipc=@id={0x1e, 0x3, 0x1, {0x4e24, 0x4}}}) 2m31.263908577s ago: executing program 4 (id=9792): syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@mgmt_frame=@reassoc_resp={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x1}, @broadcast, @device_a, @random="6f873f1e249c", {0xa, 0x480}, @value=@ver_80211n={0x0, 0x40, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1}}, 0x804, 0x7, @default, @val, @void, [{0xdd, 0x1d, "870bb515c4f6bea6cc77d83ce71d0d233552bf31e328c268faa9f43feb"}, {0xdd, 0x54, "b5616c357a9dc902868e5f083346d5b4f210effc8698fcb7427640bfad278c93a59a1e576a3db8c8998e10bae295a09f7336badfb882346bfb234d933880f9e6a1a94910e6750c992eb21e85130e5b4b53b06d4e"}, {0xdd, 0x44, "d9c69009f76bbedee08b61370048d82202a0bbe3b286e6954b9997ba32f8d679f26547570ca2d6bb16bc622c9988f73381303f2264728e0f50989a36639082b85f7279a5"}, {0xdd, 0x2c, "c33771c21697c29d3163f0b474c5fa6683ec1b7940ca93b30168cf9eb0d6c81787e110a77f74fba08e25c4e9"}, {0xdd, 0xbb, "e9e1ae684a7af51e552dc844711df1fc6eec988119a1bf776e0e21d455ded72a5312c106ea800a6921d5bed900108d7fcd5e2dc1da52da051d327812a272b309aee14e12a60772ca1f07bd54cab21c5fbfdf1bfd3f714ad7965347ccd0e8d7a20cc673d14770b5e5eda56d246cccfec27cb50277e284d517e185b2ac8518a8398694843ad04f189d45191933304a7e91287e3ae99c5c4e36a2d8b54708c180e0d9474505f8ad3587fce35a82651d25279f75b777d3618b47707f1c"}]}, 0x1ca) r0 = socket$igmp6(0xa, 0x3, 0x2) sendto$inet6(r0, &(0x7f0000000240)="8896cd6cdcffcca9ecd7c611c2bd9d4a579edf842c95b61cd286e94da5d067b604864a6d4dd98aeed72b71edc07414bf7a8a0dac10806c770d70c1ab6ccf6484bf59", 0x42, 0x2004c854, &(0x7f00000002c0)={0xa, 0x4e21, 0xb3, @local, 0x1000}, 0x1c) r1 = socket(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000340)={@mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, @private0, 0x84, 0x8000, 0x56, 0x500, 0x81, 0x4000120, r3}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r1) sendmsg$TIPC_CMD_SET_NETID(r4, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r5, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0xb1}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x1) r6 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000500)='syz0\x00', 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000540)='cpuacct.usage_user\x00', 0x0, 0x0) sendmsg$key(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x2, 0x8, 0x40, 0x8, 0x7, 0x0, 0x70bd2b, 0x25dfdbfe, [@sadb_x_filter={0x5, 0x1a, @in=@loopback, @in=@multicast1, 0x25, 0x4, 0x14}]}, 0x38}}, 0x2000000) sendmsg$key(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000640)={0x2, 0x10, 0x0, 0x8, 0x1c, 0x0, 0x70bd29, 0x25dfdbff, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x6e6bbd, 0x7, {0x6, 0x3c, 0x7, 0x9, 0x0, 0x7, 0x0, @in=@private=0xa010102, @in6=@remote}}, @sadb_x_filter={0x5, 0x1a, @in=@broadcast, @in6=@mcast2, 0x26, 0x2a85ad00911834f6, 0x10}, @sadb_lifetime={0x4, 0x2, 0x401, 0x1000, 0x3800000000, 0x2}, @sadb_x_policy={0x8, 0x12, 0x4, 0x1, 0x0, 0x0, 0x0, {0x6, 0x3c, 0x23, 0x78, 0x0, 0x10000, 0x0, @in6=@mcast1, @in6=@empty}}, @sadb_x_nat_t_type={0x1, 0x14, 0x81}]}, 0xe0}}, 0x0) ioctl$XFS_IOC_SCRUBV_METADATA(r4, 0xc0285840, &(0x7f0000000840)={0x90000000000000, 0xb46c, 0xc, 0x0, 0xa, 0x7, 0x0, &(0x7f00000007c0)=[{0x6, 0x101}, {0x17, 0xfe, 0x5664}, {0xa, 0x101, 0xfff}, {0x2, 0x101, 0x6}, {0x5, 0xfe, 0x7c}, {0x1b, 0xfe, 0x2}, {0x12, 0xfe, 0x3}]}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f00000008c0), r7) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r8, &(0x7f0000000b80)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000900)={0x238, r9, 0x100, 0x70bd2a, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x75}, {0x5}, {0x6}, {0x8, 0xb, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x148}, {0x6, 0x16, 0x6}, {0x5}, {0x6, 0x11, 0x400}, {0x8, 0xb, 0xdbd}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x2}, {0x5}, {0x6, 0x11, 0x2}, {0x8, 0xb, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8}, {0x6, 0x16, 0x5}, {0x5}, {0x6, 0x11, 0x7fff}, {0x8, 0xb, 0xfff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0x3}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x3e}, {0x8, 0xb, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7}, {0x6}, {0x5}, {0x6, 0x11, 0x8}, {0x8, 0xb, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8}, {0x6, 0x16, 0x149e}, {0x5}, {0x6, 0x11, 0xfffc}, {0x8, 0xb, 0x7}}]}, 0x238}, 0x1, 0x0, 0x0, 0x20c4}, 0x8000) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000bc0)={r7, 0x2, 0xfffffffffffffffa, 0x8}) setsockopt$TIPC_DEST_DROPPABLE(r10, 0x10f, 0x81, &(0x7f0000000c00)=0xb, 0x4) r11 = accept4$inet(r1, 0x0, &(0x7f0000000c40), 0x80000) setsockopt$inet_int(r11, 0x0, 0x12, &(0x7f0000000c80)=0x8, 0x4) setsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0x14, &(0x7f0000000cc0)=@int=0x4, 0x4) syz_80211_inject_frame(&(0x7f0000000d00), &(0x7f0000000d40)=@data_frame={@msdu=@type01={{0x0, 0x2, 0x8, 0x0, 0x1, 0x0, 0x1}, {0x9}, @broadcast, @from_mac=@device_b, @device_b, {0x6, 0x63}, "", @value={0x8, 0x0, 0x2}}, @random="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"}, 0x38f) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), r7) sendmsg$NL80211_CMD_GET_MPP(r10, &(0x7f0000001240)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001200)={&(0x7f0000001180)={0x4c, r12, 0x10, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffffff6d, 0x55}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x4000) sendmsg$NL80211_CMD_GET_MPP(r8, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={0x74, r12, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x74}, 0x1, 0x0, 0x0, 0x800}, 0x40000) bind$l2tp(r11, &(0x7f00000013c0)={0x2, 0x0, @broadcast, 0x2}, 0x10) syz_80211_inject_frame(&(0x7f0000001400)=@broadcast, &(0x7f0000001440)=@ctrl_frame=@cts={{}, {0x9}, @device_b}, 0xa) getsockname(0xffffffffffffffff, &(0x7f00000014c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, &(0x7f0000001540)=0x80) 2m30.688691111s ago: executing program 4 (id=9799): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) getpeername$inet(r1, &(0x7f0000000140)={0x2, 0x0, @dev}, &(0x7f0000000180)=0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4002, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x4}, {0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x8, 0x1, 0xa, 0x1, 0x10, 0x4], 0x3, [0xb, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xd, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4080}, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r10, {0xf000, 0xffff}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x4, 0xfff1}}]}}]}, 0x38}}, 0x200c8080) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) 2m30.356682054s ago: executing program 4 (id=9803): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$GTP_CMD_ECHOREQ(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c8cff6e5f6a4506a2367876de0feff0000240db0f6735996ae8b1d", @ANYRES16=0x0, @ANYBLOB="20002bbd7000fcdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x2c004043}, 0x24008000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x2b, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x50) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000580)={'wg2\x00', 0x0}) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000005c0), 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x6, &(0x7f0000000680)=@raw=[@map_val={0x18, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xc613}, @ldst={0x2, 0x2, 0x0, 0x2, 0x8, 0x18, 0xffffffffffffffe8}, @map_val={0x18, 0x4, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10001}, @jmp={0x5, 0x0, 0x0, 0x5, 0xb, 0xffffffffffffffc0, 0xfffffffffffffff0}], &(0x7f00000006c0)='GPL\x00', 0x8, 0x87, &(0x7f0000000700)=""/135, 0x41000, 0x40, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000007c0)={0x0, 0xe, 0x2, 0x8}, 0x10, 0xffffffffffffffff, r1, 0x0, &(0x7f0000000800)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff], 0x0, 0x10, 0x6}, 0x94) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x5f4661a344ec6a41, 0x18, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2fa4}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000480)='GPL\x00', 0x80, 0x81, &(0x7f00000004c0)=""/129, 0x40f00, 0x4, '\x00', r3, @fallback=0x23, r4, 0x8, &(0x7f0000000600)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x5, 0x2, 0x9, 0x50}, 0x10, 0x0, r5, 0x3, &(0x7f0000000980)=[r6], &(0x7f00000009c0)=[{0x5, 0x4, 0xd}, {0x1, 0x4, 0x7, 0xd}, {0x0, 0x2, 0x1, 0x2}], 0x10, 0x3}, 0x94) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x2000884c) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c00000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000140016"], 0x4c}}, 0x0) 2m30.30021685s ago: executing program 0 (id=9805): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0xffff, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff, 0x2}, 0x9) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f00000000c0)={r0, r0, 0x206, 0x0, 0x0, 0x2, 0x6f, 0x1, 0x3, 0x92, 0x0, 0x8, 'syz0\x00'}) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x4) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000180)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) r2 = socket(0x9, 0x6, 0x101) listen(r2, 0x100) sendmsg$inet_sctp(r2, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="200000eaffffffffb5000000020000000100048005000000380b0000", @ANYRES32=0x0], 0x20, 0x4002804}, 0x0) socket(0x22, 0x5, 0x9) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000250019033752a5f76a80000005000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x24044004) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000002e00090027bd70000000000e04000000ae003b598066f5f70cc565a8b3f99f1be904b65e7f20f27016d08e83ee895421cedfa33408e676d080dfea7ad87ec9a18cc75be7a72b0000"], 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000e80), r3) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000840)={0x2, 0x0, @private=0xa010103}, 0x10) sendmsg$rds(r5, &(0x7f0000000000)={&(0x7f0000000240)={0x2, 0x200, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40004}, 0x20008090) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000080)={0x3c, 0x9, 0x5, 0x18, 0x10000}, 0x14) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x20010, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r7, &(0x7f0000000a40)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, 0x1c, &(0x7f00000002c0)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}}], 0x1, 0x40408d1) shutdown(r7, 0x1) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0x82, &(0x7f00000001c0)=@sack_info={0x0, 0xffff, 0x8}, &(0x7f0000000200)=0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) 2m30.235156321s ago: executing program 4 (id=9806): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0x5, 0xffff}, {0xffff}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) (rerun: 64) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) (async) sendto(r6, &(0x7f0000000300)="6c50fcf26b957805d8a71b783d2fed4749a8b5a911d4e53e18daab9f4aae517160d53db38080f0ea8a2dc9f02fd607d54a262678d70f881c379ee8f80ef151060b9389e780f3dce6b1c396441b88d1af04850aa83ff63c7c937cb8e12616bbd41c244e8d442bcc9db8656ada76f79f46fda5f1112d4b51108c7c706bc264393e8eff51a53ec446221cb51475995cf0ee154582d16bac1da6e173eea07dc238fcbd65951177fd8d1b50174a3f6b120c6ac2f9488df3e1936152e012f7ef92b50112576e30ff", 0xc5, 0x4080, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e23, @multicast1}, 0x1, 0x2, 0x1, 0x4}}, 0x80) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r8, &(0x7f0000000880)={&(0x7f0000000080)={0xa, 0x4e21, 0x2, @private2, 0x49}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000040)="8000e8beec9dbc13", 0x8}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000029000000040000003a00000000000000100000000000000029000000", @ANYRES32=r8], 0x30}, 0x4004000) (async) recvfrom$inet6(r8, &(0x7f00000004c0)=""/96, 0x60, 0x40, 0x0, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (rerun: 64) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x7fffe, {0x0, 0x0, 0x0, r9, {0x0, 0xffe0}, {0xb, 0xb}, {0x4, 0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048800}, 0x400c000) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r10, 0x84, 0x1f, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e24, @multicast1}}, 0x8001, 0x7}, 0x90) (async) sendto$packet(r4, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 2m29.967546218s ago: executing program 0 (id=9809): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000001140)={'sit0\x00', &(0x7f0000001040)={'syztnl0\x00', 0x0, 0x20, 0x1, 0x401, 0x7, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x64, 0x0, 0xb, 0x29, 0x0, @multicast2, @multicast1, {[@timestamp_prespec={0x44, 0x4, 0x99, 0x3, 0x3}]}}}}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'team_slave_0\x00'}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x8c}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90) r2 = socket(0x10, 0x3, 0x0) write(r2, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="020000000400000008fc230001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, 0x0, 0x0, 0xffffffff00000000}, 0x20) ioctl$FS_IOC_MEASURE_VERITY(r3, 0xc0046686, &(0x7f0000000000)={0x2, 0x5, "977f8650ce"}) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000300)={0x46aa, {{0xa, 0x4e24, 0x295, @loopback, 0x2}}}, 0x88) 2m29.893154502s ago: executing program 0 (id=9810): syz_extract_tcp_res(&(0x7f0000000240)={0x41424344, 0x41424344}, 0x1, 0x1) syz_emit_ethernet(0x10c, &(0x7f0000000440)={@link_local, @empty, @void, {@ipv4={0x800, @tcp={{0x30, 0x4, 0x0, 0x0, 0xfe, 0x67, 0x0, 0x7, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, {[@timestamp_addr={0x44, 0x2c, 0x1a, 0x1, 0x0, [{@dev={0xac, 0x14, 0x14, 0x3d}, 0xfffffff7}, {@private=0xa010101, 0x3a8780}, {@empty, 0x80000000}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@remote, 0x7}]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x3c, 0x61, 0x1, 0x6, [{@broadcast, 0x9}, {@broadcast, 0x5}, {@rand_addr=0x64010102, 0xb}, {@rand_addr=0x64010100, 0x2bac}, {@loopback, 0x4}, {@multicast2, 0x1}, {@dev={0xac, 0x14, 0x14, 0xc}, 0x2}]}, @rr={0x7, 0x23, 0x6c, [@rand_addr=0x64010100, @empty, @multicast2, @private=0xa010101, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @remote]}, @lsrr={0x83, 0xb, 0x69, [@broadcast, @multicast2]}, @generic={0x94, 0xe, "5b4e54ec40d746f3752346ee"}, @end]}}, {{0x4e23, 0x4e20, 0x41424344, r0, 0x0, 0x0, 0x6, 0x80, 0x4, 0x0, 0x5, {[@eol, @nop, @eol]}}, {"d651a294b45e97585afe64e73b83af2d1edbba6440d9ae5d56ef6ba0b0e37c30c0f308b14c14"}}}}}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@ipv4_newroute={0x30, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x8000003, {0x2, 0x0, 0x0, 0x0, 0xff, 0x1, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_SRC={0x8, 0x3, @multicast2}}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0xc4) (async) unshare(0x18000400) (async, rerun: 32) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) (async, rerun: 64) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 64) r4 = socket$packet(0x11, 0x3, 0x300) (rerun: 64) r5 = socket(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r6, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) (async) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0}, &(0x7f0000000580)=0xc) sendmsg$nl_xfrm(r3, &(0x7f0000000740)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)=@report={0x58, 0x20, 0x10, 0x70bd2a, 0x25dfdbfb, {0xff, {@in6=@ipv4={'\x00', '\xff\xff', @remote}, @in6=@remote, 0x4e21, 0x7ff, 0x4e24, 0x5, 0xa, 0x20, 0x20, 0x62, r6, r7}}, [@lastused={0xc, 0xf, 0x9}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x20004054) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}, {0x14, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x2000094}, 0x80) unshare(0x40060000) (async, rerun: 32) r8 = socket$key(0xf, 0x3, 0x2) (rerun: 32) sendmsg$key(r8, &(0x7f0000000280)={0x3, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0xfffffffffffffdc8}, 0x1, 0x7}, 0x0) 2m29.42821975s ago: executing program 0 (id=9811): socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = socket(0x400000000010, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5, 0x9}}}]}, 0x38}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000000800000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) (async, rerun: 32) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) (rerun: 32) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r6, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r4}, 0x20) (async, rerun: 64) sendmsg$sock(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000080)='2', 0x1}], 0x1}, 0x24000894) (rerun: 64) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYRES32=r7], 0x7c}}, 0xc) r8 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000016000000b30000004000000000000000", @ANYRES32, @ANYBLOB="00000000000000000000d48ca6303450e9c80000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18030000000000000000000000000000851000000600000018", @ANYRES32=r8, @ANYBLOB="0000000000000000660000000000000018000000000000000000000000000000950000000000000094030100040000009500000000000000f21eb11c9417afc95db09ba8ba1593143af999"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28}, 0x94) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a010400000000000000000200000044000405400001800e000100627974656f726465720000002c000280080001400000000708000240000000000800044000000003080003400000000008000540000000080900010073797a30000000000900020073797a32613ca2eb153a641f02f8b5ba2ae83fbe07c8fefc71f546231b460af24a2c28c20dc9e986a999e91e9f3c6f240cf542c08bd99e85fd16cd44a3b44046d01c0143536c6c4ad32d0a0edcd6"], 0x98}}, 0xc4) socket$inet_mptcp(0x2, 0x1, 0x106) (async) close(0x3) (async) socket(0x2, 0x80805, 0x0) (async) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r9, 0x0) (async) close(0x3) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) (async, rerun: 32) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000004a0001ebff000000000000000a"], 0x24}}, 0x0) (rerun: 32) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010102}]}, &(0x7f0000000140)=0x10) syz_80211_join_ibss(&(0x7f00000000c0)='wlan1\x00', &(0x7f0000000100)=@random="dc3e020502cffffc59d6fccb2fd716255bde993a", 0x14, 0x0) 2m29.288163041s ago: executing program 0 (id=9813): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0x35, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xac}}, &(0x7f0000000000)='GPL\x00'}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="b70200000a000000bfa30000000000000703000000feffff7a0af0ff0000000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000001007d60b7030000010000006a0a00fe00000000850000000d000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb4500639100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e84cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fb484510bef2e4872f5c2fe6faaf75e5cc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bce5a6f087ae8f5e64be2c9d2d29db3d36dd015c7bd3f15aa6aadbeab2a01685108e61aa000000000000000000000000008b798b4f7458d1863cc67c4c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f1c6edc76609073909826151e2b42bf0ed0c8cef3ba2a730a00c87c493db845b10e9468bda6f82881eb8c9cfa72b08eecc952a3fd2c46f3c1cde71a19d1a2982492abaa96665372831210e00d2bfea3b8d188df2eff8d56aaae7d32a2e183722537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d0616a48c7957e122665c8b7e89eddf"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xf, 0x0, &(0x7f0000000280)="e0b9d5a2a00a3c6ffda2e386112192", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@getlink={0x28, 0x12, 0x200, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x3000, 0x100}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x1ff}]}, 0x28}}, 0x0) 2m29.203382066s ago: executing program 0 (id=9814): r0 = socket$inet6(0xa, 0x3, 0x9) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0xf0, 0x10, 0x1, 0xbffffffd, 0x100, {{@in=@multicast2, @in6=@empty, 0x4e21, 0xffce, 0x4e23, 0x20, 0x2, 0xe0, 0x60, 0x3c, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0x83}, {0xfffffffffffffffe, 0x7fff, 0x1f, 0x1fe}, {0x2, 0xfffffffe}, 0x70bd2a, 0x0, 0x2, 0x0, 0xfd, 0x20}}, 0xf0}, 0x1, 0x0, 0x0, 0xc801}, 0x20040810) unshare(0x22020600) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x20000804) recvmmsg(r2, &(0x7f0000007700), 0x4000267, 0xfc0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80004, 0x25dfdc00, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x48010}, 0x8840) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000080)={0x2, &(0x7f0000000100)=[{0x48, 0xff, 0xe0, 0x6a91}, {0x6, 0x60, 0x0, 0x8}]}) write$ppp(r4, &(0x7f0000000300)="5af9", 0x2) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'gretap0\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x80, 0x10, 0x9, 0x67, {{0x10, 0x4, 0x2, 0x8, 0x40, 0x65, 0x0, 0x1, 0x4, 0x0, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ssrr={0x89, 0x2b, 0x5d, [@private=0xa010102, @broadcast, @loopback, @remote, @broadcast, @rand_addr=0x64010100, @loopback, @local, @empty, @loopback]}]}}}}}) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f00000002c0)={0x4, &(0x7f00000000c0)=[{0xb, 0xf, 0x80, 0x3}, {0xe, 0x0, 0x4, 0x6}, {0x8, 0x90, 0x8, 0x1000}, {0x4, 0x6, 0x80, 0x81}]}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x1, 0x0, r4, 0xda1, '\x00', r5, r6, 0x5, 0x5}, 0x50) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) getsockopt$nfc_llcp(r7, 0x118, 0x0, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x2, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0xb8}, 0x1, 0x0, 0x0, 0x48044}, 0x14) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0) 2m15.060337453s ago: executing program 32 (id=9806): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0x5, 0xffff}, {0xffff}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) (rerun: 64) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) (async) sendto(r6, &(0x7f0000000300)="6c50fcf26b957805d8a71b783d2fed4749a8b5a911d4e53e18daab9f4aae517160d53db38080f0ea8a2dc9f02fd607d54a262678d70f881c379ee8f80ef151060b9389e780f3dce6b1c396441b88d1af04850aa83ff63c7c937cb8e12616bbd41c244e8d442bcc9db8656ada76f79f46fda5f1112d4b51108c7c706bc264393e8eff51a53ec446221cb51475995cf0ee154582d16bac1da6e173eea07dc238fcbd65951177fd8d1b50174a3f6b120c6ac2f9488df3e1936152e012f7ef92b50112576e30ff", 0xc5, 0x4080, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e23, @multicast1}, 0x1, 0x2, 0x1, 0x4}}, 0x80) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r8, &(0x7f0000000880)={&(0x7f0000000080)={0xa, 0x4e21, 0x2, @private2, 0x49}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000040)="8000e8beec9dbc13", 0x8}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000029000000040000003a00000000000000100000000000000029000000", @ANYRES32=r8], 0x30}, 0x4004000) (async) recvfrom$inet6(r8, &(0x7f00000004c0)=""/96, 0x60, 0x40, 0x0, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (rerun: 64) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x7fffe, {0x0, 0x0, 0x0, r9, {0x0, 0xffe0}, {0xb, 0xb}, {0x4, 0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048800}, 0x400c000) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r10, 0x84, 0x1f, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e24, @multicast1}}, 0x8001, 0x7}, 0x90) (async) sendto$packet(r4, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 2m14.061629229s ago: executing program 33 (id=9814): r0 = socket$inet6(0xa, 0x3, 0x9) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0xf0, 0x10, 0x1, 0xbffffffd, 0x100, {{@in=@multicast2, @in6=@empty, 0x4e21, 0xffce, 0x4e23, 0x20, 0x2, 0xe0, 0x60, 0x3c, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0x83}, {0xfffffffffffffffe, 0x7fff, 0x1f, 0x1fe}, {0x2, 0xfffffffe}, 0x70bd2a, 0x0, 0x2, 0x0, 0xfd, 0x20}}, 0xf0}, 0x1, 0x0, 0x0, 0xc801}, 0x20040810) unshare(0x22020600) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x20000804) recvmmsg(r2, &(0x7f0000007700), 0x4000267, 0xfc0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80004, 0x25dfdc00, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x48010}, 0x8840) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000080)={0x2, &(0x7f0000000100)=[{0x48, 0xff, 0xe0, 0x6a91}, {0x6, 0x60, 0x0, 0x8}]}) write$ppp(r4, &(0x7f0000000300)="5af9", 0x2) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'gretap0\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x80, 0x10, 0x9, 0x67, {{0x10, 0x4, 0x2, 0x8, 0x40, 0x65, 0x0, 0x1, 0x4, 0x0, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ssrr={0x89, 0x2b, 0x5d, [@private=0xa010102, @broadcast, @loopback, @remote, @broadcast, @rand_addr=0x64010100, @loopback, @local, @empty, @loopback]}]}}}}}) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f00000002c0)={0x4, &(0x7f00000000c0)=[{0xb, 0xf, 0x80, 0x3}, {0xe, 0x0, 0x4, 0x6}, {0x8, 0x90, 0x8, 0x1000}, {0x4, 0x6, 0x80, 0x81}]}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x1, 0x0, r4, 0xda1, '\x00', r5, r6, 0x5, 0x5}, 0x50) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) getsockopt$nfc_llcp(r7, 0x118, 0x0, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x2, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0xb8}, 0x1, 0x0, 0x0, 0x48044}, 0x14) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0) 1m47.227498966s ago: executing program 5 (id=10207): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000d80)=ANY=[@ANYBLOB="bf16000000000000b7070000060000005070000000000000480000000000e1ff95000000000000002ba7e1d30cb599e83f24b8a4efc02d459d9e32a3aa81d36bb3019c13bd23212fb56f040026fb41f2db3b1639b7bbc9af171b856de734cfe3cafafefc40056bdc17487960007102fa9ea41da123741c66be166992b2dcd72fa0fca047d41886d0d4d94f2f4e345c652fbc1626cca2a2ad35806150ae0209e62f51ee988e6e06c8cedf3ceb9fc404000000c588b277beee1cbf9b0a4def42d410f6accd3637110bec4e90a6341965c39e9ebab0e39622200e011ea661c45a3449abe802f5ab3e3101c0932ed4148d3b3e22278d00031e5388ee5c867de2c6211d6ececb0cd2b6d357b8000018ef4aafad197acc7dc1e955c685ceff7f000000000000491b8bc4748eda186872000007ce468ee23fd2f73902ebcfcf49822775985bf31b405b433a8acd715f5888b2007f00000000000000000100fb0000000000000000ff03000000000000b56780260ed652290f58fa64533500ebffffff00ca1276445432997f0000000000000008e75a89faff01210cce39bf405f1e846c12423a163b33e680846f26dc7add65873d9f87463ad6f7c2f3ee1a39244960b318778f2a047f6d0800000000000000e7a6520602a80d608df4d433623c850af895abba72bf14f6fbd7fbad2a436804eeae1de6d2c740cf0c0b74edbcb2d4b7746fa4bc5e32bd378af7c9136adf32ec7bf48cabecead649f96ea24c32872c490637c34360cb5d46ce680eeb80127eb23f9902519a693b85c6552051385e7e87a2db762cbb253fbd76b9117c1a11d18aa21a0c5f0c28999a639c0376678be35ffe99ff799a11d9b219c00c369a12bf8685b862d2000000bda1bae489bcef5ae59136aaacc59608f4d4e6067338b521eaf2e2465da053cfd5e95394e5520545364361d2c1465c5461a7c4174e5cd9c7976c9aa6342c5621dbc2dccedb5ab74e0b119252a23352fca272212d0c0104000014593d65d3f5e1e9b294669bcd2df061a4d6a835e40e7302f53f90da24cb256b34e95bca9c512f737486ecd037ce40d0a706a5b05e72f8c218366e321f9109ae4cf44b3b0104154a93394f42b4ab6125e0ba8b1a1d8c473852910b3cb7e8dc795ac01bad9a6b438b9db5f5c926940a3ac36daf2a9dc9d868ec11f51e08bc67a3d598039d328b4677229e8b587e8a00f1733adabd5d2837c084c164cf30010969c79a09ac7a9bffff5bc7e420baa9000cd49f77782205d3f6f4b6aa751f49a6b76e3d23635f1d33b906707563b8ec92dec767cc09fe9936acb43382bfc81c823ba32f25738d863cf20181208e23ce19966e729a7b4eefa68554fa4ccadac05c8eac1b52dd528b124285a16da468e3fcb3d9a24e9d670500956702fe9be5d8207d426450ca622e8e0197270cbb947231baf36e0567c0f5de639c99bb71ca0e60d2decb185cddd74d4f00000000000000000000006ed429a657a8203f6542e9dd19d7a70431aefcb9f1b673512e25503c603f19fa4c39ee9b08aadd2c7555543837770a812207bc2be9c86f94282b325e3097438594670099106f0defa59616d3d18a4c8c04a45c204edfc4cefbd94c4c034dcbc90975b097ece2484b5287105335791eb3061ac500a6728677c72b5b76c18186d6f1a5c74aaddd22dc002fd4bd1bc3409e8d7144689c89f7a5e95fce153d4e9bf0fe0aaa3dfaa443c5081606fda5059146ef94586f5d1658ef0389734108a3af432c730175a7c6e3bb997ed39a0da78527b212001e573492190000"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r0, 0xffffffffffffffff, 0x8, 0x0, @void}, 0x10) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="0400000004000000040000000500010000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r2, &(0x7f0000000080), 0x0}, 0x20) (async) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f00000002c0), 0x10) readv(r4, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1) (async) sendmsg$can_bcm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05000000030800"/16, @ANYRES64=0x0, @ANYRES64=r4], 0x80}}, 0x0) (async) r5 = socket(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001800010000000000fedbdf251d01060008000900", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x44) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r10, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) getsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f0000000780)={{{@in=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000880)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000008c0)={{{@in6=@private1, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x4e21, 0xcabc, 0x4e21, 0x80, 0x8, 0xa0, 0x0, 0x6c, r7, r11}, {0x6, 0xff, 0x1, 0xf, 0x2, 0x2181, 0x1f8, 0xc93}, {0x81, 0x0, 0x2}, 0x6, 0x0, 0x2, 0x1, 0x2, 0x3}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d3, 0x6c}, 0xdac3db2dd9cbadb0, @in=@multicast1, 0x3504, 0x1, 0x2, 0x33, 0x95, 0x3}}, 0xe8) (async) listen(r10, 0x0) (async) ppoll(&(0x7f0000000000)=[{r10, 0x228}], 0x1, 0x0, 0x0, 0x0) (async) r12 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r12, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e8, 0x0, 0x8, 0x7f02ae, 0xd8, 0x200, 0x218, 0x2e8, 0x2e8, 0x218, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0x5, 0x3}, {0xffffffffffffffff, 0x0, 0x2}, 0x0, 0x5}}}, {{@ipv6={@private2, @empty, [0x0, 0x0, 0xffffff00], [0x0, 0xffffffff, 0xff000000], 'pim6reg1\x00', 'netdevsim0\x00', {}, {0xff}, 0x84, 0x0, 0x1}, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@srh={{0x30}, {0x2b, 0x2, 0x9, 0xf4, 0xa0ec, 0x10, 0x18}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x13, 0xec, 0x8, 0x400, 'snmp\x00', 'syz0\x00', {0xffffffff8cdbbefd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x348) (async) r13 = socket$netlink(0x10, 0x3, 0x4) writev(r13, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff2, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r9, {0x8, 0xa}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_FLAGS={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 1m46.981989345s ago: executing program 5 (id=10209): r0 = socket$inet(0x2, 0x3, 0x2f) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='xfrm0\x00', 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$XFS_IOC_FSGROWFSLOG(r0, 0x4008586f, &(0x7f0000000040)={0xfff, 0x6}) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x380, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, [{0x19, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af2502"}, {0x0, 0x1, "000000050000000026000400"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x19, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f025"}, {0x21, 0x7, "b8a3e100908f61640000000200fe80ffff00000000000000ff0bc0fe00000000008879e66485201a0015ca83747357a027450004000000"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf0630af1f98aea6fb3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7596d779b8353aac33a57d79b05613a12328f6101000000634a287570af5e4e12e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e7a94fe18e88605abbbe1a02a326a63ce65f81ed0000000000"}]}}}}}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x158, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0xff0000ff, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x3, 0x100000, 0x0, 0xf0, 0x10000007}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x1, 0x4, 0x4, 0x0, 0x1, 0x4], 0x6, 0x1}, {0x2, [0x1, 0x1, 0x0, 0x6, 0x4], 0x5, 0x1}}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) sendto$inet(r0, 0x0, 0x0, 0x4004004, &(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x2004886c, &(0x7f00000000c0)={0x2, 0x4e20, @loopback}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, &(0x7f0000000080)=0x7fffffff, r0, &(0x7f0000000180)=0x9, 0xce8a, 0x2) recvmsg$unix(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x1001}], 0x1, 0x0, 0x0, 0x300}, 0x0) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000b00)="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", 0x942}], 0x1}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8) socket$inet(0x2, 0x3, 0x2f) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='xfrm0\x00', 0x10) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$XFS_IOC_FSGROWFSLOG(r0, 0x4008586f, &(0x7f0000000040)={0xfff, 0x6}) (async) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x380, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, [{0x19, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af2502"}, {0x0, 0x1, "000000050000000026000400"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x19, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f025"}, {0x21, 0x7, "b8a3e100908f61640000000200fe80ffff00000000000000ff0bc0fe00000000008879e66485201a0015ca83747357a027450004000000"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf0630af1f98aea6fb3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7596d779b8353aac33a57d79b05613a12328f6101000000634a287570af5e4e12e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e7a94fe18e88605abbbe1a02a326a63ce65f81ed0000000000"}]}}}}}}, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x158, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0xff0000ff, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x3, 0x100000, 0x0, 0xf0, 0x10000007}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x1, 0x4, 0x4, 0x0, 0x1, 0x4], 0x6, 0x1}, {0x2, [0x1, 0x1, 0x0, 0x6, 0x4], 0x5, 0x1}}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) (async) sendto$inet(r0, 0x0, 0x0, 0x4004004, &(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) (async) sendto$inet(r0, 0x0, 0x0, 0x2004886c, &(0x7f00000000c0)={0x2, 0x4e20, @loopback}, 0x10) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) (async) splice(0xffffffffffffffff, &(0x7f0000000080)=0x7fffffff, r0, &(0x7f0000000180)=0x9, 0xce8a, 0x2) (async) recvmsg$unix(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x1001}], 0x1, 0x0, 0x0, 0x300}, 0x0) (async) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000b00)="9b174c71ddc0ff70da89cebb1985e5aa6e2218ad71a09310e007e786c1eb3485db015be60d4a00474a8973fc08d7a6274de654cbd1a787e0946198bd6eeb78c4f684b110d1dd5d2260844e6abdca4819b84c32fa99588cd0993a204b8ecde4ce3614cc78454beef9db6202c267272cdc91eed07bb8f27993f4af613c6ae67162bc9d0f537a0e0f60af0c4a21b01e4aa656fdc7260a86613c5d1ffce2f5319cb34054a895b9be7a4b812fbb7c83fb999fb4c8f41ac5e100519c4c125fd68949f7ef053401acd65051e963b108d9ac8d302aa3d27d2a39e9142584a1388c4c300a76bd28cecc47e95c65d5f0775a55c68d5c8640faded3723e32b1d01a26021567e853d1d85382b3700b3e9e6d26673ddc63f5f2464c1ca3ccf82eb8d21eb31572e286cff03c9e347df61270ca628e3c302a4bb4e8ca5d9da18227928eeaa0c3fe37cac8bb1a8b10b47427ec3f24a5f497ae1d5d5998fa0052040b8c3e32a5b89e266f0b53ba2689708e3ef62ea793382e2a3e0e027fe5d23003b874a00272c5f704f5694289f07360814f1eb16fd8a3b61c2f3c53c42a6eedb76977e35defa4f7a5d8af33e187ea35ac1e7300c4fed435385b8d98a4edb7b54545593dd1b260d70a9be726c3805715e73ebb6f3e480e97f8694efbf5e2b54e7fdbded3ab4cd7f84aab807264e275d4872a1382466765c91031ce05a9e5f529a7399f5f58c6e6d381864b0982f8df5a503fa5e064b0d70ec5de908e51d47a24ea0a8f4549f0bcdb37f7107033a38040248815a1afaeca241bcb6836dfd64ed07113bc6a484840430540a9cabcac3a18dbd49c11383b58106d583f451cbb6949d07f9f5503c6938faefb8f3b1a976adbdbd3c6a6c4184f26c03f1d7cf34e36697775c4b81adb19142f86241c4c802c1dba77b57d78a99913dd58c13aea10d107c1190d8c9ce89c993ace3f0d31214cce7206d435aea6085c44d7d2488c6d588370cd6a01cda8cd0b4905d3d3e392e793184708c164fd8ef1c5db16a0183c144bc4487a2555afabca3507bdc80a0442645bcafd8ff1f5f32ef512d18af9c51ed2f4830c08b3e21aa51db8c787c32430765963b5225af1659a9c76a111eb83497ca6639e7c69aea8c613f9df3d64a12563889b1268f2d721e67f09753aa91db8a6c4c5c0a1eddfb941e2439a357ec833b3a5618a17c00ed59dc9453a889e2eea6cc9aceec2144ea241643f3093c7d02b74886eecc5bd40a3f684a142db57bd64630a94a5e55ada8a31ad8f2f5a1b28cb2d7ce83f2746560c445fe46fef79ea21af454c059f1e3ca7d1dda514dcc5fbc4462fae593132907f4bb79828d807327450daff4506db66442ecc4f2a8d6f16dde6c166fb119506d6f749580753b8b6c3eb4c8de80b3329f592e72e1da0918b9d959be3faeafdf966c7fa715b82f278f2facdd2ad5a7e96ed9806a545b312e3fbcbf16883d10688185200ab506b757bda75bcb2a086d5bbc97035849c6492429831bb61d2dcc47746a03061f5d51f19efa53f676fbeb4c9cf6c92007cd91d1ef13fd0d748070952a9ca72b048441a74f1daec44c0e3dda6e25623154fbd807d883aab6f8c5373ec5c6720f5cd826742f5167e17b435b6791cdaee9511757fd8fd88eb2035559425ffa6fc16c60f3069f83d403853886f879a118409ae2b9bb402fd83e15e3eda764d152a1dea31972e4494c6cf045cf8c6202e4746d34270720e4f24a0a6091f2a8d046deacc1edba580555b861f16edaf1a067d6e7554d3e4d37d62010b60b4cd3dd2eba96908b063935eafa86f96d29a92a1953a7f8da43f476501a1085c0087f3316fd9eed2206b676b985b6a5179d3936157d47e34fe5d0ff3bdc573058463ad8e4b4c24b5a1a68d5c7a3587288c6f427ba8ed2affd9627e4a6f3cf660b3a8f8c57e638b759f3cf1e6c2dde0fbea23f8c7823a380c684beb4a3da2671bd443407eccc5273a40cafa2f9e4aebf6011bb27060ff3232238da67db2917fa60cd8609ce363d0ba92377ec24eacc222354d66e1ea964b44d7631d9e9ecb50139644246457bf914c5a8520cca972a3738c7cb7b1555bb0b201c3a3cc03b295c19d9bbda5cf8a222bffd5d518e4ca8600e3aa5b3a939d44e746a7d3fc3e9bad656df9f37aeaec5eef3ef49318ca68a1299d5c9f1a78ff852e0375a9c30d08daa22752e64a3abd1286c0188f216446a8e3c244b6bf809a665de9fe5229d2946dff5750cbdcba5f2836ebc1485b80a5d0a72e79f694bd69edb5413e3c293f74208421f3373ced03701d77cc5d4b1d1d9675f7a040fe6ac4169d599b07e34e46aee6840275f972d3a5ad8843c0a8fdde283cd69eb37602692ab97dd8fbb5907027af6e48bce2d255d5514b1332e5e521503470dc44f29c603dedd984764e9a96b4cb75de17d99133da66b9c83e0ae35fae2dba789a4879a77c12cae3c0cc3b36c5175fe9e3d7a622dd17f4f6da22e3b7e84b3aba75ab3be000a103fd5ec139191f1a25e25058505aac74513fe4143591231cec070a77839918f9a341f217f929a77ca0ea72c93763301d5d470a6f921165d26848802d910d0083f9ce68b4c20a50c70e504823a94cb842036954adaff1aa5aae7156484b2fb3fb1bbe3fab5d8b0685746c4ce13e26719e18d59debd1af0bf31fb494cd766c91145cbf315eed267996fcead1b0d859973709c0079f3fb89728ba1764cdcef008a30b97377d6d71e3ada0832cffc3271ecc5f0a3476eb1899b31fb0c465d0fc55aeb3ca5da121db8103dc68a2c35628d5dd29cb6a392b7a929eee6da59a13c94043b1a4137cac4a7b8371fbf7670da1e2bcddc5125e16262cc733125944d7d95500a49a748cb4635ef5249b57590f0c9b92d881c0ac6dfb3c54688cc33bef9c9e84d86edd83e085a5ba60106b623715e6737fc40d9b899d9d34f9589cc724e81531e101140d2227d2036d25ee50b8b3380058cee74c7e490b33716a8adcc1ee33ffe9d66592495c571854a2eb4135a91ff2f0afd70914feb4a3e21486c4e0c3557413c298aaf4ab51324505ffce8b88f3512cece196a5950a3cdab2aa524a3eb680365bead934acb7ef7885f41f2cf627f36553f2b7233e1812269618ea68b1dd600a9c3474ea0b9cbaa657ecb169401acd7b10157bbfb75179a41d660d876dc52f7831aeb880d96116a16466186eb877c887724c115ad58651212472fad0385a5f95d87aa3cf3ed69a0feff52b9aac2aa013d78059ad0498ced2688df4b94df974174fd05a4321c7b2338065556fca02584c1779c0e38fb35f33fb58e509b327b0573f9048d24fb5fd1ddd3043ea01000a28bb23f8c50b730dbde3d12930b8", 0x942}], 0x1}, 0x0) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8) (async) 1m46.698519935s ago: executing program 5 (id=10213): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x29, 0x5, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000001c0)='ns/net\x00') r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000b000140020003600e41b0000900ac0000001101a80016000b00014002000000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) r8 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=r6, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r8, 0x4) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r10 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r9, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r10, 0x0, 0x0}, 0x10) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) sendfile(r2, r3, 0x0, 0xffffffff000) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r1) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000", @ANYRES16=r11, @ANYBLOB="f5af24bd7000000000000e000000946af5ab66ee4272e57340c1255479fd715187e5c96acb8b"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r13 = socket(0x10, 0x80002, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r13, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) sendmsg$nl_route(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r12], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) r14 = socket(0x2, 0x3, 0xff) sendmmsg$inet(r14, &(0x7f0000000840)=[{{&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000000680)=[{&(0x7f00000001c0)="8dbe9de29a1823474186f72aea11678235a71ee4828c75d76df69110ae2b2baa4ca3f238a147af68c7999e831fc3594436dea27d", 0x34}], 0x1, &(0x7f0000001500)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @local}}}], 0x20}}, {{&(0x7f00000000c0)={0x2, 0x4e24, @multicast2}, 0x10, 0x0}}], 0x2, 0x20044000) syz_genetlink_get_family_id$gtp(&(0x7f0000000300), 0xffffffffffffffff) 1m45.818319888s ago: executing program 5 (id=10224): r0 = socket$igmp(0x2, 0x3, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000300)='cgroup.events\x00', 0x275a, 0x0) preadv(r2, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/23, 0x17}], 0x1, 0x4, 0x7dd3) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x9f66}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x3}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x3}, 0x10}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x3}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x3}, 0x10}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) close(0x3) (async) close(0x3) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={0xffffffffffffffff, r4, 0x4, r4}, 0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000000020701010000000000000000020000050c00064000000000000000001c0007"], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x44000000) socket$inet_tcp(0x2, 0x1, 0x0) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x3c8, 0x0, 0x11, 0x148, 0x0, 0x0, 0x330, 0x2a8, 0x2a8, 0x330, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x2, 0x3, 0x2, 0x1}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x3}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00', {}, {}, 0x2e, 0x2, 0x2}, 0x0, 0xf8, 0x220, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x4, 0x2000, 0x2}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0xffffffffffffffff}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x4, 'system_u:object_r:systemd_logind_sessions_t:s0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) (async) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x3c8, 0x0, 0x11, 0x148, 0x0, 0x0, 0x330, 0x2a8, 0x2a8, 0x330, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x2, 0x3, 0x2, 0x1}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x3}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00', {}, {}, 0x2e, 0x2, 0x2}, 0x0, 0xf8, 0x220, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x4, 0x2000, 0x2}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0xffffffffffffffff}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x4, 'system_u:object_r:systemd_logind_sessions_t:s0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) ioctl$SIOCGETVIFCNT(r0, 0x89e0, 0x0) (async) ioctl$SIOCGETVIFCNT(r0, 0x89e0, 0x0) 1m45.526845426s ago: executing program 5 (id=10228): sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, 0x0, 0x20008004) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000002) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 1m45.005742273s ago: executing program 5 (id=10231): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"/1423], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x49, 0x10, &(0x7f0000000340)}, 0x42) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r2, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newlink={0x60, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, r2, 0x42035, 0xad85}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_LIMIT={0x5, 0xb, 0x5}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000040000000000a40000000160a01080000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip_vti0\x00'}) 2.496276072s ago: executing program 3 (id=11280): r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x2, 0x0, &(0x7f0000000000)=0x45) recvmmsg(r0, &(0x7f0000000800)=[{{&(0x7f0000000300)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)=""/219, 0xdb}, {&(0x7f0000000540)=""/219, 0xdb}, {&(0x7f0000000640)=""/127, 0x7f}, {&(0x7f00000006c0)=""/31, 0x1f}], 0x4, &(0x7f0000000740)=""/170, 0xaa}, 0x1}], 0x1, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb01002000000000000000000005000000f2ffff010256280000000000"], 0x0, 0x36, 0x0, 0x1, 0x9}, 0x28) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000100001000000c02500000000050000fd6d56994b0a20000000000a010200000000000000000a001e080900010073797a3100000000140000001100010000000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001f9ff0000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r4], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmsg$IPVS_CMD_DEL_DEST(r4, &(0x7f0000000a80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x74, 0x0, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6c}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x16}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xcd06}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x27}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}]}, 0x74}, 0x1, 0x0, 0x0, 0x20040081}, 0x40) setsockopt$inet_sctp6_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f0000000400)=@assoc_value={0x0, 0x1c7}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x38, 0x1403, 0x1, 0x70bd27, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'xfrm0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48d1}, 0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$tipc(0x1e, 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r8], 0xc4}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000008c0)={'tunl0\x00', &(0x7f0000000840)={'sit0\x00', 0x0, 0x80, 0x8, 0x37d, 0x10000, {{0xa, 0x4, 0x3, 0x3, 0x28, 0x65, 0x0, 0xf, 0x4, 0x0, @loopback, @private=0xa010100, {[@lsrr={0x83, 0xb, 0x63, [@local, @broadcast]}, @timestamp={0x44, 0x8, 0x7, 0x0, 0x8, [0x8]}]}}}}}) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newlink={0x98, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x68520, 0x10044}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6}, @IFLA_GRE_LINK={0x8, 0x1, r10}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x3}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x6e}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0xff9d}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}]}}}, @IFLA_MASTER={0x8}, @IFLA_IFALIAS={0x14, 0x14, 'lo\x00'}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x74f}, @IFLA_TXQLEN={0x8}]}, 0x98}}, 0x4040) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000002c0)={'vxcan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x70, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x1, 0x6d}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_HANDLE_DFS={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1f9}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x4c}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16c1}]]}, 0x70}, 0x1, 0x0, 0x0, 0x20040004}, 0x40) 2.245855339s ago: executing program 2 (id=11283): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="20000000035000001c00f87f0b00010067656e65766500000c00028008000100020000001400430067656e65766531000000000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x2000000) socket(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000040), 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0x50b, 0x8, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0x1, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x200, 0x5, 0x0, 0x0, 0xf407}, 0xfffffffb, 0x1, 0x0, 0x4, 0x7, 0x4, 0x40, 0x9, 0x0, 0x1ff, {0x0, 0x0, 0x0, 0x4}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0x50b, 0x8, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0x1, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x200, 0x5, 0x0, 0x0, 0xf407}, 0xfffffffb, 0x1, 0x0, 0x4, 0x7, 0x4, 0x40, 0x9, 0x0, 0x1ff, {0x0, 0x0, 0x0, 0x4}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2.167278057s ago: executing program 2 (id=11285): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@getnexthop={0x20, 0x76, 0xb0d, 0x4000, 0x0, {0x3}, [@NHA_ID={0x8, 0x1, 0x1}]}, 0x20}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="a013000040000701fcffffff00000100017c0000040042800c00018006000600801c00007c13028078131480731311"], 0x13a0}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 2.08904571s ago: executing program 2 (id=11287): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) close(0xffffffffffffffff) r1 = socket$kcm(0x29, 0x5, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) r3 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="b6bd7e4983a45b31f79d80060400000000000000a33734d88229acf96457ad59d0b87f8659b614043e3d21a7cacecab8bbd26251b93b28b4d83e618673f9c74d0a28a5146c5511549fa617e908352c87d8ddff2ce0", 0x55}, {&(0x7f0000000880)="3aa854", 0x3}, {&(0x7f0000000a40)="746b9120a32aaf78043a9b07000000000000003c44", 0x15}], 0x3}, 0xc854) setsockopt$sock_int(r3, 0x1, 0x12, &(0x7f0000000180)=0x4c, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendfile(r1, r2, 0x0, 0xffffffff000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000008c03010000000000000000000100000a14000000000a01040000000000030a05000000000000000000010000000900010073797a7a320000000078000000060a010400000000000000000100000008934a400000000050000480340001800b0001006578746864720000400000003146330e0800034000000000080004400000002205000200890000001800018011fa0000666c6f775f6f66666c6f616400000000090001007386a96d925d77b0e40000001100010000000000000000000000000000000000066c2e0251fc29d9d9c923334e3c6455bde439410ad3e028bd4fc25f7ab049cbd2dbd9af220fd54cb1c5a4515cf1864185059477a68133f1a7239ff5497553e9c27d3be537cc46842f7ef5fba190311c609016751126e6898dddfb1f90a349800ba76002dd0fefb2ee00"/318], 0xe0}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r2, 0x0, 0x40000) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x14, r5, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3) recvfrom$inet(r6, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f00000019c0)=@delchain={0x22f8, 0x65, 0x100, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x2, 0xfff3}, {0x5, 0x8}, {0x1f, 0x3}}, [@TCA_CHAIN={0x8, 0xb, 0xd76}, @filter_kind_options=@f_bpf={{0x8}, {0x22c4, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_OPS={{0x6, 0x4, 0x4}, {0x24, 0x5, [{0x4, 0x4, 0xd9, 0x3ff}, {0x8, 0x98, 0x8, 0x9}, {0x4, 0x3, 0x9, 0xfffffff4}, {0x5, 0x1, 0x2, 0x6}]}}, @TCA_BPF_ACT={0x226c, 0x1, [@m_csum={0x160, 0xb, 0x0, 0x0, {{0x9}, {0x90, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x9, 0x7, 0xc, 0x8000}, 0x36}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x6, 0x2, 0x2, 0xffffffff}, 0x66}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x7, 0x1, 0x7, 0x401}, 0x2c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0xff, 0x20000000, 0x4, 0x1}, 0x21}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x3ff, 0x20000000, 0x7ff, 0xfffffe5a}, 0x5f}}]}, {0xa6, 0x6, "7248d3ec12973d09fcd027791dae7e2f903439d3a94e9eb7adf72919ec4c43895d5713f19521b6324a537841f1ebc41db34c02bab7cd31fca7f71778c8a4c2b2b35c29cc299424d4bdb1f7005f8e0bcf48d1627fcf40755ab429e041fefbed1968b849aa35d510281cfa8dd35c3b334b628a8f94a14fae1c71694d35b1ee1e35c959b609e0f82b156b61bf6a460ac478758b430e9f29ada12c95a015637c0cc3394b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0x1cf4, 0x5, 0x0, 0x0, {{0xa}, {0x1ca4, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{0x5, 0xfffffff8, 0x5, 0x8, 0x1}, 0xa, 0x2, [{0x1, 0x1, 0x2, 0x24000, 0x1, 0x7}, {0xfffffffd, 0x8, 0x5, 0x7023, 0x7ff, 0x3}]}, [{0x8, 0x2, 0x4, 0x9, 0x2, 0x5}, {0xffffffff, 0x1571, 0x7, 0x2, 0x1, 0x6}, {0x1, 0x7, 0x0, 0x2, 0x3, 0x8}, {0x80000001, 0x8, 0x8, 0x4, 0x1, 0x73}, {0x3, 0x6, 0xe, 0x7, 0x7918f95c, 0x4}, {0x1b, 0x9, 0x62b1dada, 0xfff, 0x7fff, 0x6b}, {0x6, 0x3, 0x1, 0x10001, 0x44, 0x3}, {0x4, 0x4, 0x1, 0xe31, 0x4, 0x68}, {0xffff7b7a, 0x5, 0xffffffff, 0x9, 0x10, 0x1}, {0x1126, 0x4, 0xffffffff, 0x0, 0x2}, {0x40, 0x7, 0xbcc, 0x7, 0x0, 0x3ff}, {0xa, 0x2, 0x4, 0x8001, 0x2, 0x6}, {0xe46, 0x4, 0x7, 0x2, 0x2, 0x57}, {0x7, 0x3d27, 0x4, 0x5, 0x2, 0x4}, {0x3, 0x3, 0x3, 0x3, 0x7, 0x5}, {0x5, 0x4d5, 0x7, 0x2, 0x5, 0x9}, {0x8, 0x2, 0xa5, 0x8, 0xfff, 0x7}, {0x3, 0x5, 0x8001, 0x8}, {0x200, 0x2, 0x1, 0x8, 0xff, 0x5c7b}, {0x28, 0x7, 0x6, 0x10, 0x2}, {0x2, 0x2, 0xffff8000, 0x6, 0x0, 0x3a}, {0x800, 0x2, 0x7, 0x5, 0x7fffffff, 0x8}, {0xc9, 0x3, 0xb, 0x3, 0x7fffffff, 0xff}, {0xfffffffe, 0x5c4, 0x9, 0x0, 0xfffffbff, 0xfffffff7}, {0x1fffc000, 0xffffbf54, 0xea, 0x6, 0x8d7, 0x1}, {0x8, 0x5, 0x6c2, 0x8, 0x7ff, 0x3}, {0x0, 0x3, 0x5, 0x40, 0x4, 0x6}, {0xffffffff, 0x730, 0x4, 0x8001, 0xe0, 0x1ff}, {0xfffffff7, 0x3, 0x8, 0x62f3, 0x4, 0x3}, {0x800, 0x1, 0x1ff, 0x35547e4, 0x6, 0x1000}, {0x1, 0x5, 0x0, 0x4, 0x81, 0x9}, {0x400, 0x101, 0x9, 0x0, 0x2, 0x3}, {0x4, 0x7, 0x401, 0xb, 0x1}, {0x1317, 0x1, 0x0, 0x80000001, 0x7, 0x94d}, {0x2, 0x40, 0x6, 0x19c, 0x9, 0x5}, {0x1, 0xc0fa, 0x2, 0x80, 0x0, 0xff}, {0x81, 0x0, 0x44c, 0x3, 0x1, 0x6}, {0x3, 0xff, 0x5eac1937, 0x100, 0x1}, {0xfffffffe, 0xfff, 0x4, 0x2, 0x28000, 0x7fffffff}, {0x5, 0x1, 0x8, 0x3, 0x1, 0x80}, {0x101, 0x889c, 0xb, 0x8000, 0x0, 0x5}, {0x8, 0x300, 0x1, 0x9, 0x5f80c74e, 0xa59}, {0x6, 0x4, 0x4, 0x4, 0x3, 0x2}, {0x8, 0x0, 0x1, 0x6, 0xade7, 0xfffffffc}, {0x574b, 0x7, 0x4, 0x8}, {0xc, 0x10000, 0x8, 0xc1f, 0xf, 0x8000}, {0x5, 0x37f, 0x1000, 0x4, 0x1fc, 0x9}, {0xffff3ecd, 0xffffff45, 0x7f, 0xaee, 0xb, 0x7}, {0x3ff, 0x0, 0xc3, 0x7, 0x80}, {0xc9, 0x9, 0x1, 0x7b0a7f11, 0x200, 0x9}, {0x8, 0xf37, 0x80000001, 0xe, 0x2, 0x500}, {0x0, 0x3, 0x2a81, 0x8001, 0x2, 0x9}, {0x5, 0x6, 0x1000, 0xfffffff9, 0x8, 0x4}, {0x7, 0x1, 0x5, 0x9, 0xc34, 0x8001}, {0x4, 0x7, 0xcd89, 0x565f, 0x6, 0x1000}, {0x5, 0x3f29cd3c, 0x81, 0x6, 0x6, 0x1ef}, {0x6, 0x9, 0x2, 0x9, 0x1, 0x800}, {0x8ab, 0xd3a, 0x4, 0x3, 0xa, 0x3}, {0x80, 0x7fff, 0xc2c000, 0x1, 0x5f3c, 0x1}, {0x10000, 0x8, 0xffffffff, 0xcf, 0x2, 0x1}, {0x9, 0x86af, 0x7a, 0x3e, 0x1}, {0x2, 0x8000, 0x2, 0x7c, 0x80000001, 0xffffc3d8}, {0xa, 0xb, 0x4, 0x2, 0x4, 0x9}, {0x1, 0x7ff, 0x24, 0x1e, 0x7, 0x1}, {0xffffffff, 0x8, 0x0, 0x8001, 0x89, 0x3}, {0xc, 0x1, 0xfffff182, 0x400, 0x2, 0x7fff}, {0xcc, 0x8000, 0x9, 0xfffffff7, 0x4, 0xd08f}, {0xe, 0x9, 0x8, 0xb, 0x0, 0x8}, {0xdb15, 0x40, 0x46fe, 0x5, 0x4, 0x80}, {0x2, 0x200, 0x3, 0x1, 0xe0, 0xcbc1}, {0x7, 0x3, 0x0, 0xed0, 0x3, 0x8}, {0x3, 0x2, 0x8, 0x1, 0xffffffc0, 0x8}, {0x7, 0x3, 0x5, 0xffffffff, 0x400}, {0x14a, 0x7, 0x0, 0x4df6, 0x2, 0x7}, {0x10, 0x0, 0x4, 0xfffffffc, 0x2, 0x101}, {0x4, 0x6, 0x608d, 0x9427, 0x9, 0x1}, {0x40, 0x3, 0x11, 0x9, 0x80000000, 0x8000}, {0x4, 0x3, 0x32c8, 0xef, 0x9346, 0x800}, {0xf, 0x4, 0xfa6, 0x1, 0x7ff, 0x5}, {0x8, 0x5, 0xc, 0x6, 0x4, 0x7}, {0x0, 0x400, 0x1ff, 0x53, 0x10, 0x7f}, {0x4, 0x8, 0x2, 0x7, 0x40, 0x4}, {0x2, 0x6e, 0x4, 0x7, 0x2, 0xffff0399}, {0x6, 0x7, 0x80000000, 0x5, 0x6d, 0x8}, {0x9, 0x6, 0x7, 0xf1, 0x3, 0x1}, {0x10, 0x2, 0x745, 0xfffffff9, 0x7, 0x7}, {0x8, 0x9, 0x17e6, 0x8, 0x101, 0x9}, {0xd, 0x9, 0x61, 0x0, 0x916, 0xf8}, {0xfffff870, 0x2, 0x4, 0x89, 0x8, 0x8}, {0x1, 0x9, 0x0, 0x0, 0x6, 0x1}, {0x5a, 0xffff0000, 0x80000001, 0x81, 0x1, 0xfffffff4}, {0x1, 0x4, 0x3, 0x0, 0x4, 0xfffffffc}, {0x1, 0x2, 0xe, 0xcd33, 0x9, 0x8}, {0x5, 0x400, 0x1, 0xd, 0x80000001, 0xf}, {0xffff, 0x4, 0x3, 0x6b, 0x5, 0x3}, {0x2, 0x100000, 0x5, 0xcc, 0x88e, 0x2}, {0x7fffffff, 0x80, 0x5de1d231, 0x6, 0x3, 0x3}, {0x0, 0x6, 0x200, 0x2, 0x9, 0x9}, {0x400, 0xd, 0x5, 0x7, 0xfffffffd, 0xd9}, {0xf238, 0x4, 0x1, 0xffff, 0xf99, 0x8}, {0x3, 0x401, 0x1, 0xfffffffa, 0x8000}, {0x5, 0xfff, 0x8100000, 0x100, 0x3, 0x2}, {0x39, 0x5, 0x5, 0x9, 0xffffffff, 0x6}, {0x0, 0xb3df, 0x8, 0xffff, 0x2, 0xa1c7}, {0x800, 0x1, 0x2, 0xb8, 0x4, 0x7}, {0xc1, 0x6, 0x8, 0x6, 0x6}, {0x2, 0x8, 0xfffff001, 0x2, 0x10000, 0x53}, {0xd3, 0x10001, 0xf1, 0x9, 0xa9, 0x7b2f}, {0x76, 0x4, 0xb06e, 0x9, 0x70, 0x1}, {0xf, 0x1, 0x8, 0x9668, 0x1fcf, 0xb70}, {0x6, 0xffffffff, 0xfffffff5, 0x7, 0x80000001, 0x3}, {0x8, 0x8, 0x6ad, 0x1fa1, 0x29, 0x1ff}, {0x2e90, 0xffff, 0x58, 0xab, 0x3, 0x5}, {0x7, 0x5, 0x5, 0xffffffff, 0x1, 0x6}, {0xfbbb, 0x0, 0x7, 0x5, 0x8, 0x9}, {0x7, 0x5, 0x2, 0x1000, 0xc}, {0x401, 0xee1, 0xfffffe00, 0x0, 0x2, 0x4}, {0x0, 0x480000, 0x282, 0x6, 0xffff2d43, 0x8}, {0x7, 0x4, 0x9, 0xac6, 0x6, 0x9}, {0xfffffff7, 0x0, 0xd, 0x2, 0x4, 0x6}, {0x7fff, 0x10001, 0x1000, 0xffff, 0x4, 0x4}, {0xffff, 0xecb, 0x9, 0x81, 0xfffffe01, 0x10001}, {0x9, 0x8e01, 0xc5, 0xae06, 0x4000, 0x7f}, {0x2, 0x8, 0x5, 0x2, 0x0, 0x5}, {0x0, 0x3225, 0x41, 0x8, 0x1, 0x4}, {0x3, 0x8, 0x8, 0x1, 0x2c1d, 0x6}, {0xe, 0x1, 0xc, 0x8, 0x8, 0xfffffe01}, {0x1d, 0x2, 0x7, 0x0, 0x159, 0x1}], [{0x1}, {0x4}, {0x0, 0x1}, {0x6, 0x1}, {0x1}, {0x0, 0x1}, {0x1}, {0x3}, {0x1, 0x1}, {0x6f430f49ed6ac6bd}, {}, {0x3, 0x1}, {0x1, 0x1}, {0x4}, {0x1, 0x1}, {}, {0x1, 0xf61cabe603c30892}, {0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x5}, {0x1}, {0x3, 0x1}, {0x6}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x4}, {0x1}, {}, {0x4, 0xc6ccb7e81ed9de50}, {0x3, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x2, 0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x4}, {0x2}, {0x2}, {0x3}, {0x2}, {0x3, 0x1}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x2}, {0x1}, {0x3, 0x1}, {}, {0x4, 0x1}, {0x2}, {0x1}, {0xb28d00a83ffcc2c7}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x4}, {}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x3}, {0x1}, {0x3, 0x2}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x3}, {0x3}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x4}, {}, {0x3}, {}, {0x1}, {0x0, 0x1}, {0x6, 0x1}, {0x5}, {0x3, 0x119e686731f243b4}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x3}], 0x1}}, @TCA_PEDIT_PARMS={0xe50, 0x2, {{{0xf9, 0xc, 0x0, 0x0, 0x6}, 0xc5, 0x5, [{0x4, 0x1d9, 0x6f37, 0x3, 0x1}, {0x0, 0x67497ca5, 0x6ba6, 0x80000000, 0x4, 0x3001}]}, [{0xffffffff, 0x8, 0x8, 0x7, 0x5, 0xfffffe74}, {0x1, 0x6, 0x9, 0xfffffffe, 0x7, 0x9}, {0x0, 0x21a, 0x9, 0x1, 0x800, 0x40}, {0x6, 0x24, 0x111, 0xf, 0x1}, {0x7, 0x6a0, 0x400, 0xc7f, 0x5, 0x71}, {0xb40, 0x8, 0xe, 0x9, 0x45a47ecd, 0x5}, {0x3, 0x6b, 0x880, 0x8, 0x1, 0x1000}, {0x9, 0x3, 0xd, 0xfffffff7, 0x4a77, 0x10001}, {0x9, 0x8b5f, 0x2, 0x9, 0xf1a, 0x7}, {0x200, 0xf0000000, 0x3, 0xa6f, 0xb49, 0x7}, {0x8790, 0xffffffb0, 0x7, 0x8, 0xfffff000, 0xffff8000}, {0x3, 0x7, 0x9, 0x7313f36f, 0x1, 0x7ff}, {0xcd9, 0x5c, 0x3ff, 0x7, 0xc0e3, 0xf93e}, {0x4, 0xffffffff, 0x9e, 0xd, 0x3, 0x4}, {0x5, 0xf6, 0x7, 0x1, 0x5, 0x5}, {0x1, 0x1, 0xe, 0x7, 0x2}, {0x82, 0x7c17, 0x770c, 0x4, 0x1, 0x7fff}, {0x5, 0x9, 0x522, 0x7, 0xd23, 0x4}, {0x1, 0x8b29, 0x1, 0x8, 0x2, 0x8}, {0x9, 0x9, 0x9, 0xffff, 0x669, 0xe}, {0x8000, 0x0, 0x6, 0xfb13, 0x291, 0x6}, {0x6, 0x0, 0xc, 0x9}, {0x5658747, 0x3, 0x0, 0x10000008, 0x6, 0x8}, {0x6, 0x89, 0x5, 0xea, 0x800, 0x7}, {0x4, 0xa, 0x6, 0x3, 0x76, 0x1ff}, {0x7e7, 0x1, 0xd, 0xb9, 0x8, 0x7ff}, {0x3, 0x2, 0x9, 0x7, 0xf72}, {0xe0f, 0x5, 0x800, 0x5, 0x44f5, 0x3}, {0x8, 0x9, 0x1, 0x2a, 0x4, 0x6}, {0x8, 0x9, 0x2, 0x7, 0x3, 0x3}, {0x5, 0x5, 0x1, 0x8, 0x9, 0xfffffffd}, {0x9, 0xe, 0x5, 0x5, 0xfffffe47}, {0x1, 0x8000, 0xf, 0x1, 0x8, 0x7ef}, {0x0, 0x5ae, 0x10, 0x4, 0xd8f, 0x6}, {0x9, 0xc, 0x6, 0xd, 0x8, 0x5}, {0x10000, 0x2, 0x4, 0x80, 0x4, 0x2}, {0x100, 0xc, 0x10000, 0x9, 0x6, 0x7fff}, {0x6, 0x3ff800, 0x0, 0xd, 0x8, 0x1d}, {0x80000000, 0x4, 0x8, 0x7819, 0x400, 0x10}, {0x596, 0x1, 0x1, 0x0, 0x4c81ae93, 0x5d4c}, {0x101, 0x0, 0xe, 0x1948, 0x111, 0x1ff}, {0x7, 0x3, 0x5f31, 0x8, 0x8, 0x8a6b}, {0xf1, 0xffffff80, 0x5, 0x8000, 0x5, 0x10000}, {0x5, 0xfffff38e, 0x8, 0x0, 0x2, 0xda}, {0x7, 0x5, 0x95, 0x10f, 0xffffffff, 0x8001}, {0x1, 0x6, 0x0, 0x0, 0x1, 0xa}, {0x5, 0x1, 0x0, 0x0, 0x1000, 0x7}, {0x8, 0x2, 0x5, 0xf4, 0xf8, 0xe}, {0x80, 0x8f7, 0x5714, 0x6, 0x7fffffff, 0x7}, {0x8, 0x3, 0xb708, 0x80000001, 0x5, 0xff}, {0x6, 0x80000000, 0x354, 0x1ff, 0x3, 0x1}, {0x1, 0x10, 0x758, 0x1, 0xa, 0xfffffffa}, {0x9, 0x0, 0x5, 0xc15, 0x80000001, 0x9}, {0x3, 0x8, 0x4, 0x6, 0x9, 0x5}, {0x101, 0x9, 0x87, 0x1000, 0x8, 0x1}, {0x9, 0x0, 0xfffff000, 0x9, 0x10, 0x7}, {0x86a7, 0x1dbe, 0x6e41, 0xfffffff6, 0x7, 0x101}, {0x7, 0x2, 0x2, 0x7, 0x7, 0xdd9a}, {0x3, 0x4, 0x4, 0x5, 0x2, 0x7}, {0x2, 0x9, 0x2d, 0x2, 0x2, 0x8}, {0xded8, 0x6, 0x9a3, 0xffff, 0x67, 0xa}, {0x4, 0x7, 0x1, 0xffffffff, 0xb, 0x9a2}, {0x21641a49, 0x3, 0x1ff, 0x40, 0x5, 0x2}, {0x18e000, 0x6, 0x8001, 0xffffffff, 0x10001, 0x1}, {0x0, 0x7fff, 0x0, 0xffffffb0, 0x0, 0x140000}, {0x9, 0x101, 0x80000000, 0x2, 0xc39, 0x7}, {0x5, 0x1, 0x8000, 0x4, 0x2, 0x3f3}, {0x7, 0x8000, 0x1, 0x0, 0x1, 0x3}, {0xf, 0x9, 0xb, 0x0, 0xfffffffc, 0xc}, {0x1, 0x5, 0x7, 0x8001, 0x0, 0xb}, {0x6b9, 0x4, 0x7, 0x4, 0x9, 0x2}, {0x2, 0x3, 0x4d147f5d, 0x3, 0x7fc00, 0x2}, {0x4, 0x1, 0x9, 0x3ff, 0x3, 0x81}, {0x101, 0x7fff, 0x5, 0x7fff, 0x8, 0x6}, {0x6cc, 0xd, 0xe880, 0x1, 0x3, 0x4}, {0x74f2, 0x1c, 0x5, 0x1aa, 0x1000, 0xc0000000}, {0x9, 0x1, 0x7fffffff, 0x1, 0x3, 0x6}, {0x100, 0x8, 0x4, 0x7, 0x4, 0x8000000}, {0x4, 0x926, 0x1ff, 0xfffffffb, 0x1, 0x3}, {0x5, 0x6, 0xb, 0x3ff, 0xfffeffff, 0x5}, {0x8, 0x5, 0x6ad, 0x0, 0x5, 0x7}, {0x7, 0x6348, 0xc20, 0xffff7fff, 0xfffffffe, 0x800}, {0x6, 0xa655, 0x7, 0xf4, 0x7, 0x10}, {0x6, 0x5, 0xffff, 0x40, 0x60a45124, 0xd}, {0xec, 0xffffffff, 0x1128, 0x192c, 0xa, 0x800}, {0x5, 0x9, 0x100, 0x8, 0xfffffffa, 0x8}, {0xfff, 0xfff, 0x4, 0x8001, 0x5, 0xe289}, {0xe, 0x1ff, 0x4, 0x4, 0x0, 0x8}, {0x1, 0x9, 0x9, 0x0, 0x6, 0xbfb5}, {0x40000, 0x96, 0xbe5, 0x1ff, 0x8, 0x9}, {0x0, 0x67, 0xff, 0x5, 0x10, 0x8}, {0x20000000, 0x0, 0x7, 0x7, 0x0, 0x8000}, {0x9, 0x4, 0x1, 0x9, 0x3, 0x8000}, {0xb, 0x3, 0x0, 0x8, 0x8b4, 0x7}, {0x86f, 0x1, 0x1, 0x2, 0x3, 0x3}, {0x47, 0x6012, 0x8001, 0xfffffff8, 0x0, 0x5}, {0x0, 0x100, 0x9, 0x6, 0x5, 0x7}, {0xffffffff, 0x8, 0x5a6, 0x8000, 0x2, 0x2}, {0x2e, 0xc7c, 0x4, 0x8000, 0xd, 0xfff}, {0x9, 0x9, 0x0, 0x7, 0x3, 0x6}, {0x4, 0xb3, 0x1, 0x8, 0x7fffffff, 0x2}, {0x28a, 0x5, 0x8, 0x4, 0x7, 0x5}, {0x38, 0x4, 0x4, 0x6, 0x81, 0x3}, {0x80000000, 0x1000, 0x8, 0x5, 0x5, 0x2}, {0x400, 0xbb, 0x8, 0x5, 0x5, 0x2}, {0x8, 0x9, 0x1, 0xfff, 0x200, 0x471}, {0x2, 0x0, 0x0, 0x1, 0x0, 0xfffffffe}, {0x1, 0xa, 0x3a, 0x3ff, 0x7, 0x1137}, {0x0, 0x0, 0x8000, 0x5, 0x5, 0x9}, {0x8001, 0x8e2, 0x7, 0x8, 0x4, 0x1b43}, {0x400, 0x4, 0xc, 0x6, 0x698, 0x6}, {0x6314, 0x0, 0x10001, 0x3ff, 0x8000, 0x7fff}, {0x6, 0x1, 0x5, 0x8, 0x88}, {0x2, 0xf22a, 0xe475, 0xa, 0x4, 0x744b8102}, {0x7, 0x2a6, 0x8, 0x5, 0x1, 0xd}, {0x5, 0x2, 0x5, 0x9, 0xd9eb12d, 0x5}, {0xd8, 0x1, 0x7, 0x3d, 0x100}, {0xe, 0x0, 0x10000, 0x3, 0x800, 0x6}, {0x68000000, 0x1, 0xfff, 0x3, 0x67, 0x8}, {0x101, 0x4, 0x8, 0x4, 0x1000, 0xfffffffe}, {0xa28d, 0x4, 0xffffff7e, 0xcf, 0x7fffffff, 0x2}, {0x80b, 0x54, 0xe02, 0xd90a, 0xd, 0x3}, {0x7645, 0x2, 0x4c9, 0x800, 0x3, 0x1}, {0x8, 0x37, 0x3, 0x9, 0x2, 0x3}, {0x3, 0x3, 0xfffffff8, 0x3, 0x0, 0xfffffdbc}, {0xfffffffe, 0x1, 0xd89e, 0x1000, 0x3, 0xffff}, {0x9, 0xf574e1e, 0x3, 0x0, 0x8, 0xb}, {0xfffffff2, 0x8, 0x3, 0x6, 0x5, 0x7ff}], [{0x3}, {0x3, 0x1}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {}, {0x2}, {0x5}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x3}, {0x2}, {}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x1, 0x1}, {0x3}, {0x3}, {0xaf8bba8d0517b9e0}, {0x2}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x5}, {0x3}, {0x4, 0x1}, {0x4, 0x1}, {0x3}, {0x5}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x2}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x3}, {0x2, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x2, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {}, {0x1, 0x1}, {0x1}, {0x2}, {}, {0x1}, {0x3}, {0x5}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x46ad83950480526d}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x1}, {0x1, 0x1}, {0x3}, {0x4}, {0x1}, {0x5}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x3}, {0x3}, {0x5}, {0x5, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x3}, {0x1}, {0x5}, {0x4, 0x1}, {0x2}, {0x1}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x4}, {0x5, 0x1}], 0x3}}]}, {0x25, 0x6, "ad708099198a0ec1c38872c6b6baebd4c106afa40a3f91a999ddfd290aff460197"}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_bpf={0x88, 0xb, 0x0, 0x0, {{0x8}, {0x40, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x6, 0x6, 0x2, 0x4, 0x400}}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x0, 0xff, 0xfe, 0x8}]}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x0, 0x7, 0x2, 0x80}]}]}, {0x22, 0x6, "6d36347a1242181465b574a64f520300c253db69f9aaae8e13306c1ee24b"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbmod={0x130, 0x5, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x3f800000, 0x5, 0x20000000, 0x9, 0x5}, 0x8}}]}, {0xde, 0x6, "69deacbdb4d5354b30928698782d736f79e7c689cee4c3027b569f62a841f2be5fc5fa659f7c79d435fdb9eb4130bd9a6e3eb3200751586ff5ebdbe62df3b5244259af3f5ab21497e550eb025982bb3aa9d76283e85cc2b6f4eba308b31283715dd3781e328e5a49c8fc610eb9a8974697a5f320053b221f97769a90b0caea859a8a0cbe58102aaff47f853d9ee7bf8f72ca959b7262a0819604a2d6ba6413d1e50f9c88ed91e089a5c2afb38e863f46d780a1b627ed66d93754d9a23cc9588ffebf1dd4753859e1a9c0d2ed16fd969b8d5943a06cfc9b822dcf"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_mirred={0x25c, 0x15, 0x0, 0x0, {{0xb}, {0x144, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xc, 0x72523fe1, 0x7, 0x0, 0x6}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x9, 0x4, 0x5, 0x2}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1ff, 0x3, 0x20000004, 0xb, 0x3}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4674, 0xa444, 0x2, 0x7d2b, 0xb}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x81, 0x6, 0xffffffffffffffff, 0x2, 0x9}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x6366, 0x5, 0xc, 0x4}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x7, 0x2, 0x2, 0x4}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x7, 0x20000003, 0x6, 0x8}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xa3c, 0x967, 0x5, 0x6, 0x80000001}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xd, 0x480, 0x3, 0x8001, 0x2d5}, 0x1}}]}, {0xee, 0x6, "d5ef8b5f42f53bb630ae6a50d648f8db0da6ec9de7b6ed4b891485781d2737a05144751ea216feb8fea7f028badf7d9963b01a1342cb62d463074d2b2a31fda8391398621e9540f33c7156ca45fda84d4f64296dcbd827f37628708490db199c49ad999ec23719dfa8575af2554fde2bc5a24ea7eca62ed49122be5e79147a6b087cda880c7b4cfd2a29f74807ee36fe5c6584c9e5aa2d114b4d0dbc2a672d21e1f20f6acee403ac8599a3095cd44241a7ca22609226f1108b4d2467c57efec0af77b76e2326fcb8b5c378501c0d2a914d28304beac051584d3f064e9f573a85b5b42c8dd95d94696b4d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_BPF_FLAGS={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x7}]}}]}, 0x22f8}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) 1.750124972s ago: executing program 1 (id=11289): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000005800)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000057c0)={&(0x7f0000001c40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELSETELEM={0x994, 0xe, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x120, 0x3, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_DATA={0x18, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x13, 0x1, "98ae1b892cc6383c85eb3281d6f05b"}]}]}, {0xf4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xe0, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xdc, 0x1, "0f0b84dc8ce741d1b213677df87a3c45d35f6fd178d9aff0ceea5906bcc93dc6f78a1f6cf00071e9d0b4e47e1ea65335ee62c2efa698efac3e9a38611a5619acd0be5ac43dc2a5cc4207317cd448fdf680244808083d98810cbd580f73d6024b3ff254a0e207bdb7827acd0ed4ed0a60b6995b9f9ed36c10cc6173eee764e9a52e5f65ea8a4e0ed278d831e68dd35ed8c206fd0d5237bc6ae57d6f2e010693810f333323c3967240bda771718725a28f51aa57006d227b4d04ad0d811e3bbb29489eed044b3d6887fb92afee4c205d228333cc3de75b4d55"}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @tproxy={{0xb}, @void}}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x68c, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x2}]}, {0x3c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x38, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}]}, {0xc0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x48, 0x7, 0x0, 0x1, @nat={{0x8}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_NAT_FAMILY={0x8}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x1f}, @NFTA_NAT_REG_PROTO_MAX={0x8}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x12}, @NFTA_NAT_TYPE={0x8}, @NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x14}]}}}, @NFTA_SET_ELEM_EXPRESSIONS={0x68, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}, {0x38, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x16}]}}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8001}]}, {0x57c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_DATA={0x354, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xea, 0x1, "7b7060f9dfd6c9618fe30850f675b4c4cac90bb096e1bfeec7f86cc98990079a0c0c57f903d7d9236f660caee14ef952c0cbdd536b549179ae3f7eec678b18cd39bcf354b22717eeb9779e9ee2c6779bc37efd7051a8c9624a36cec63f8f27e260fe8acad5fe48be27caa2cc859a21c628b3f6d5f1e7c6f2ce0c82bf6668b6a6d8905f254c5d1b38d7f1181883d842dac471b6440aaa54fd73fa2ea62281c57b0e62a4da43636790eb28e9960ea5fb65112355a038bf44ef5568c995e549597c25d18f1f2633d5556a8f88c898dfba327edcabf08849243844f5b65940fd3cf30229d5ac4dd8"}, @NFTA_DATA_VALUE={0x9b, 0x1, "c36948beccd5fb4e8ab48c7a750c62daf857fab27f01388691a550c8218d689d4d7cf4a6ef26c9dccfba92eabb7bfe342cb42d45acb42c46f2ed11e705acdf111a8638f1a5f70efa6b8a8f8f121a34be5990f563c5bf7f42b7c826f1cc8a06faae587adb73aefe28bd078f1722be0dc2bf5be029d1657c2f15b544fc96d63b729c58c643ded807af3a69bf12eefef883f9a64214946f9a"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x2e, 0x1, "fb22cb32c0c5a6a21ef37f982b5e09ae54756b6cb5195679674f41ad7cee3c718b46e26d4b8beafa14c7"}, @NFTA_DATA_VALUE={0xa7, 0x1, "f4a70def62c73b9c97e4a35494be3aa89814f55a639c6cecb2d5181883e7ab259d5ea5ac2563d2463ff54cd3a8deff86681efa2b0e04377320aaf3dc161211d4a40cf5029fc403a4f3d35035d10b87138d2e79faacd9d1f3f803e071c305c36dfd02753e94741bf8889eebb82186dddb50201aa52a5b9f4af12278dd1bf59be6cdcdd7c94d95cfd73fef8ba2414ab2c526c15096e9fbbdc044dcb683ffab5ff15bb790"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_KEY_END={0x124, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xcb, 0x1, "ec2e1c16b077989271239af95f3bb865b8cc5f1f23090022bca9b8d413b94b3b9598ca5f303d9516a29f48adb9066ac756bec25fb47acee95fc98c7b3842cc96d4fb4de9e1df8d6df373df2768e9b77f73c288f40d30abdfe363a3123ce9ed951b1ec792527bb371d815bf4819e3a1ffd5d94c50f2db2eb3261b5f9d42abbf835cafca57711084a8f161d4b051b19388d35611f7513306e25776f8b653c6c9389d6186153a9abc96638f5f7cfded0b3baab6cda4b3d84b79d0495e294a40e834f47b699bf2ea73"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x3a, 0x1, "c88f4085c111598a65cf5a0138d1013444682f0a1a33ebc34b3f71626fab496fe8ef40e11ddbfe125b1eca02afa8c4e1715a2ba128a0"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_DATA={0xb4, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x62, 0x1, "1d6ae62d2b98f9ac4a26f21d9c6fd646465f9f6b470576b2df0b890b8b20cff5c8e166f68bed9eee2c9f5cd72a669f9f061e054febd86543d73f8de1696b54999dd98f409f510f6c21ebd69a03b64a0f56b5482bb69b59f3115ea3472147"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xf}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xa12}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x188, 0x3, 0x0, 0x1, [{0x184, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x38, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x31, 0x1, "4219799d3c4e94f415ed58700e7122e21c21d6ff0028246c55032041cdd3b047d9d88f7d9131093b4cef2e083e"}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @numgen={{0xb}, @void}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x800}, @NFTA_SET_ELEM_EXPRESSIONS={0x9c, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}, {0x1c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_NG_TYPE={0x8}, @NFTA_NG_TYPE={0x8}]}}}, {0x20, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz0\x00'}]}}}, {0x20, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_RANGE_OP={0x8}, @NFTA_RANGE_TO_DATA={0x4}]}}}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x84, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x4}}}, {0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}, {0x44, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_XFRM_SPNUM={0x8}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xc81874079469a108}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}]}]}]}]}, @NFT_MSG_DELFLOWTABLE={0x28, 0x18, 0xa, 0x304, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}]}, @NFT_MSG_NEWTABLE={0x30, 0x0, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x28, 0x5, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x6}}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x201, 0x0, 0x0, {0x7}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xa84}, 0x1, 0x0, 0x0, 0x40000}, 0x24000000) 1.696044407s ago: executing program 1 (id=11290): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000190001002cbd7000000000001c"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffdffd, 0x0, 0x0, 0x0, 0x800}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x4a, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 1.604716174s ago: executing program 1 (id=11291): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800006a0e8c4f09461dd62c389e9700", @ANYRES16=r1, @ANYBLOB="010025bd7000fbdbdf250800000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x24048011}, 0xc0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@deltaction={0x4c, 0x18, 0x1, 0x70bd2c, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x8d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x14, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44000}, 0x20048844) 1.579977611s ago: executing program 1 (id=11292): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYRES16=r0, @ANYRES64=r0, @ANYRES8=0x0], 0x50) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) unshare(0xa020480) (async) unshare(0x6a040000) (async) r2 = socket(0x1e, 0x805, 0x0) bind$vsock_stream(r2, &(0x7f0000000000)={0x1e, 0x0, 0xffffffff, @my=0x0}, 0x10) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) (async) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) (async, rerun: 64) connect$inet(r4, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) (async, rerun: 64) shutdown(r4, 0x1) (async) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000004900e928ddcb001a00"/24, @ANYRES32=0x0, @ANYBLOB="0200000008000200020000001400010020010000000000000000000000000001"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) (async) socket(0x29, 0x2, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000003c0)=@udp6=r2, 0x4}, 0x20) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) (async, rerun: 64) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000001840), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r7, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000001880)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000000000070000210000000e00b2ef6e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f7073000000000500830000000000"], 0x4c}}, 0x0) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x400c000}, 0x20000000) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r6}, &(0x7f00000007c0), &(0x7f0000000640)=r5}, 0x20) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r6}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) r9 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$sock_timeval(r9, 0x1, 0x15, 0x0, &(0x7f0000000080)) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r6, &(0x7f00000004c0)}, 0x20) (async) sendmsg$nl_route(r0, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000038c0)=ANY=[@ANYBLOB="3c00000010000108fdffff010000000000000000", @ANYRES32=0x0, @ANYBLOB="000000002000000008001b000000000014001a80100002800c00018008001a0001"], 0x3c}}, 0x0) 1.080164774s ago: executing program 3 (id=11294): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x8, 0x3, 0x348, 0x270, 0x1000000, 0xffffffff, 0x0, 0xffffffff, 0x308, 0xffffffff, 0xffffffff, 0x308, 0xffffffff, 0x3, 0x0, {[{{@ip={@loopback, @private=0xa010100, 0x0, 0xff000000, 'bond_slave_1\x00', 'geneve1\x00', {}, {0xff}, 0x84, 0x0, 0x28}, 0x0, 0x1b8, 0x218, 0x0, {0x0, 0x1c8}, [@common=@inet=@sctp={{0x148}, {[0x4e24, 0x4e21], [0x4e24, 0x4e21], [0x101, 0x81c, 0x4, 0x3041800, 0x10000, 0x8, 0x7f, 0x3, 0x8000, 0xe4, 0x5e9c90b, 0x4b, 0x5, 0x2, 0x5, 0x6, 0x0, 0xea, 0x8001, 0x4, 0x6937, 0x7598, 0x4, 0x5, 0x1, 0x9, 0x7, 0x81, 0x0, 0xba11, 0x4, 0x2, 0x3d, 0x10001, 0x3ff, 0xffffffff, 0xffff, 0x8000, 0x1000, 0x0, 0x28, 0x800, 0x6, 0xfffffffa, 0xd721, 0x80000000, 0x0, 0xfff, 0x0, 0x10001, 0x2, 0x3, 0x7575bec7, 0x8cdf, 0x3, 0x4, 0x1000, 0x24, 0xd8e, 0x4, 0x8, 0x4, 0xe1, 0x8a], 0x0, [{0x80, 0xb}, {0xac, 0xc, 0x5}, {0x10, 0x4f, 0x4}, {0x4, 0x80, 0x4}], 0x4, 0x4, 0x4}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, 0x5, 0x0, [0x25, 0x5, 0x28, 0x23, 0x12, 0x34, 0x16, 0x3, 0x10, 0x39, 0x27, 0x2a, 0x6, 0xe, 0x36, 0x10], 0x27b02525726059f5, 0x7, 0x4}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x3a8) (async) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x2, 0x6, 0x628, 0x0, 0x340, 0x120, 0x120, 0x340, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, 0x0, {[{{@uncond, 0x0, 0xf8, 0x120, 0x0, {0x7a00000010000000}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [0x0, 0x0, 0x0, 0xff000000], [0x0, 0x0, 0xffffff00], 'bridge0\x00', 'veth1_vlan\x00', {}, {0xff}}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x1f, @ipv6=@empty, 0x4e22}}}, {{@ipv6={@ipv4, @dev={0xfe, 0x80, '\x00', 0x32}, [0x0, 0x0, 0x0, 0xff000000], [], 'nicvf0\x00', 'bond_slave_0\x00', {0xff}, {}, 0x0, 0x2}, 0x0, 0xa8, 0xe8, 0x48000000}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x9b, 0x4, 0x9, 0x4, 0x3, 0x1000, 0x3, 0x9]}}}, {{@ipv6={@loopback, @local, [0xffffff00, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'pimreg\x00', 'veth1_to_bridge\x00', {0xff}, {}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'team_slave_0\x00', {0x1, 0x7, 0x7, 0x2, 0xb, 0x1, 0x5}, {0x400}}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688) writev(r0, &(0x7f0000000400), 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xb6) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="28000000180001002cbd7000000000000a0000000002c800630008000000000008000300000000007403592ee746b163fcb08bf6e45b2828a7cb7bceccd6c5bca5ec2b771d9e3048db6b4224a95c8dfded28bc88f5fda25297be1c87c1525aed29bc8eb08f2b952146339d1c"], 0x28}}, 0x48800) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x304, 0x10, &(0x7f0000000000), 0xfffffea2}, 0x48) 1.011021921s ago: executing program 3 (id=11295): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000140)=0xfffff908, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000009c0)=ANY=[@ANYBLOB="d83900001000010000000000fedbdf25070000001300000008000000", @ANYRES32, @ANYBLOB="18001a800c000200060000000000000008000200", @ANYRES32=0x0, @ANYBLOB="9f3937"], 0x39d8}], 0x1}, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 884.610465ms ago: executing program 2 (id=11297): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="ffffff8d00"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000100)={{0x0, 0x44d, 0x4, 0x4, 0x1, 0x6, 0x5b27, 0x0, 0x8, 0x9203, 0x401, 0x2, 0x80000000, 0x6, 0x3}, 0x18, [0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000200)={{r2, 0x0, 0x6, 0x84ba, 0x19b, 0x8, 0xcd9, 0xffff, 0x5, 0x4, 0xfffffffb, 0x5, 0x5, 0x3}, 0x8, [0x0]}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)) (async) ioctl$SIOCSIFHWADDR(r1, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="ffffff8d00"}) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000100)={{0x0, 0x44d, 0x4, 0x4, 0x1, 0x6, 0x5b27, 0x0, 0x8, 0x9203, 0x401, 0x2, 0x80000000, 0x6, 0x3}, 0x18, [0x0, 0x0, 0x0]}) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000200)={{r2, 0x0, 0x6, 0x84ba, 0x19b, 0x8, 0xcd9, 0xffff, 0x5, 0x4, 0xfffffffb, 0x5, 0x5, 0x3}, 0x8, [0x0]}) (async) 763.510412ms ago: executing program 3 (id=11299): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xa, &(0x7f0000000180)=0x8, 0x4) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000000)) getsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000300), &(0x7f0000001080)=0x4) (async) getsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000300), &(0x7f0000001080)=0x4) 700.565652ms ago: executing program 1 (id=11301): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) (async) r1 = socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)={0x64, r3, 0x1, 0x170bd25, 0x25dfdbfc, {0x39}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x7}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40848}, 0x4004810) r4 = getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000140)=0x0) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.swap.events\x00', 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000240)={r0, 0x12, 0x1628, 0x3}) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0xcc, r3, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r7}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x8851}, 0x40048d0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0) sendmsg$inet(r1, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0xffff, @private=0xe0000000}, 0x10, &(0x7f00000000c0)=[{&(0x7f00000001c0)="080032427e15a330", 0x8}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0xfffe) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="a013000040000701fcffffff00000100017c0000040042800c00018006000600801c00007c13028078131480731311"], 0x13a0}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 691.965381ms ago: executing program 3 (id=11302): openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x6, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000140)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x11fe726f7e78fcf0}, 0x28) close(r2) r5 = socket(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x9, 0x4, 0x4, 0x14, 0x15, 0x4, 0x6}}, @TCA_CHOKE_STAB={0x104, 0x2, "18040a0700200000000000b8d4ef60c9b3b201ad412d10413208ddeec3ca63150ca2e8e88d626d21967b5f9bd6b2ca299da7e933b9de68b10c358ceb836b1269874d68178d5ca2a60691b8b8e54035c75794ef929a921ba80fe335e76deda6606f266cad000e1e9f949c533252624fbdb25e28a005a01da7a07e844a72943d4959681afcb9a2b3b3c4b2b552ae3ab78abf8be2fc63130f4387fb8c00ce678ba03763da61a574abbc59b728aa3c02eedb176afb984194f31696e2b3357c57578ce6ac6e3d2a149abd76a0fe9a44165ad7ea8d792273206fc444294e3bae3fc553bc9bd6d0b67ea837b7a0b7f9ef000008000000000000001f00"}]}}]}, 0x14c}}, 0x0) write(r0, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r3, 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r8, 0x11c, 0x1, &(0x7f00000003c0)=""/153, &(0x7f0000000080)=0x99) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r9, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x4fe7d000) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xeb, 0x0) 631.278338ms ago: executing program 1 (id=11303): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x8000, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xfff7fff7}], 0x1c) listen(r0, 0x3) r1 = accept(r0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x9, 0x8, 0x0, 0x0, 0xd0, 0x6, 0x2}, 0x9c) 626.484566ms ago: executing program 6 (id=11304): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000076000d2e00520000000000000300000000f5ffff070001"], 0x20}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x17d4}}, 0x0) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000540)={0x88, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9cf}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x60a}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2eb}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_MEDIA={0x24, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xec}]}]}, @TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x800}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha3-512)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="ee94f1711cf60e4416475ab9e5c5899416383372a69786e56ac2f0b482d8e1e740d4fbff9fe88b53f82f48d6482ebd154f184f47a53c73129f777018a0746b1a42b80833cd7884f0b8", 0x49) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r3, &(0x7f00000009c0)=ANY=[@ANYBLOB="0800080003000400fdff1400000047890fc0006900006002907800000000ffffffff09029405d507c00014f3305280f125e6e11a9314b296b53b5d25867c0a8c27b6478984da4eb5a28ada390a7b0a58177e7d56be4ee0efb45c215a64d718cb6f639e60026f3fcd218590d2fd47a1803f67d8c3c5ebe25ed9991203e04d3bdc1e70ef759d8f6ca8744bd9d672c1c9368faa9f538c1e6d3f741c022ddc02e6d3e1881c4ebf6d62df9fc11edf041909cea12539f7b05232c1cd9a748ff7e4a6b7ce7420bab33b3ce6da2742316d128730875e8c1d068a59aef9030e56546effdf83fe2b6fcadf2a73552e77d9cfdb452639cae6aa8f5c7aba74516be0a290f60c30c51e8de293376c07b999d87ac564e47f21f28fda4d277beb21a78ab228bfa2b84461fc73b9a82c9ac29bf066fa44f3f676ef64edab4c6dcaa57c48c0065817b0cbf3263361e93334a400fd74ae663ccc959da070390c833a3dc9381a771d719ae9417cd07b43c30e6a10ae8a59c4fd0a9004cc3f9cb772a64d240d7a0d0dac57f4d7978a304adf48f94ce0b7d6a2dff5d3ff8738a81daad9df5b8d6f361e7032c0d2cc84c73a7a2f07a35b1b26966bb08fe07ecb2438006de2d9ff9b9ca0b94bc44c858e785a261bbfbf5f6cfa78b017d671ee8180312522c8031744591711d0517fb8b120e27fb7752f0a0e85bbf1e7059aa2711bf2355fe98e3df0d7cece9741623e2fa492af8287e0fa75daea5725e0519e70aba398c00ae69c572e327755ba2fa81dc47bdcd4e5b722e0ecc8f92f4cd821d575f5f8421dc2e2994621d17da042fd59a2c3ee0ba998a771e066fcf3646007ef3c731edb9472baaa6a5722b09aa6a4da93d855fee7bc2a4db816880160449c576ed46b4ca1e299595f0116946b841308bbd9c2d8e82ce9bcd9173476523bfa8abb82cbd16ddf2efb4aeb5476ab0f5dadbe2528360195a317f3106d25b016901b65b6eed65062083234f205cf4fefe2ee0af15a86feb5d7473d1cdf202387127171d633c02dc39faca7d69721074c0e7eee28ff71fb9e75d80d8fa6bc70a50bd71f60569cb9a30b0cf5599c790353590fd3fb91f77ec89257faa66ff3d13913906166604af616d8de1b92b9cc459a05daad927ebf023c53afdf5ebad5e1d73632777374dfe33b0b90e0cc4cf85bbba301ffe94b26b9f792bdde6d5a9c644bd15ad45c373f768a3a3868ed96c112f2429a27a97bd7756cec800e4ed644a22a81f1010ec376a5726e530d5bcecc635db756ff9a6e2ee89248949d52f88c84cf71be5428a4675430ecef15f1c8ff6a786e5b74eeb76fd26b53dd6287b8e9134b8096b9425f650039af1b3465ab57662ce70c5e29c559e6ffed62f731fd95d31c2f7fa57d98a8aa0b30e454ea73d4f8ba1242bb511e2d0d0e7a764f87cc6b208f85b79b980285cd890dacf77dc2668e3c2ad211998f5e3f15be32a3600a2c59821e7e48d46974d17d642ff7b3f1334057c88bea888120095582d257ccaa903d341c850bd2b446c31980acc6f02f0c559a895614f62aea0eee4a904bd1b35193fd2cbff4354834b5f7e8698bad049cfea27a76ec83dfbe2071ff1523bf127713b062ee3ebf6986bd12c31ab386a490734a47466cdde3a82dc7535b1b068a1aa585322c4bf8dd8cf0ca2b8eb56fcf98cf8129148142344d00fca2cd5611e42c607168abcf92c94be28c15be3485375290b825136e0f4047212a866831bc670b9b038355e0c976673b80584c640ec6681ae724ea58685581d493c809fc8861c60ff245cdc486228b0c3c0ac562a3fd777b7d3d43dcc4cf031b70a101bc64a3727d1f5890890070dfc14847f225a82f5a1b3c702970a25a672aa8c4a24bd7d414bb52c839611e48afe3a9022aa9eeedb2dc4cb20aaeb244b0e438f28d3c6cac9fb16171a8b66b93e48d1afb3feae84bb6a4ed0d00ba862dc6fd474fe210faa0d6d51132dcdc4dcdd5d4f94f1ba7dc8b5712188b0f80bd7f6cc211c1a2796d5c8568a97dbfb9e1bcc6e43858342767ffe5d648873215971e968382870afb0f0b33e3a0dbfe70b982abd73b340abaedd3f71ea30c90544b6a3fb8ce0c240d0bc9da7c12a927223185e5ba907d93c30089ca68525983f04ff85ef98314f69e5c9b4a388ca67813fcd0a9b2c083defac488cb3f7e4ebabc7bf6f4f7601a6c4c1a8d10c2fb13f6863c29cf3dcb8bd56768bb0a9e642bb6b94e5957deaeab3e24223e03764bbb16a7084a05735a8d188cbfabcccfce95848a804b56bd5e2051b1755a0e4262044ea2b037113af2e4e90bfed33bdcdc33824245cad3f94c4c9ea0f414a539c36b55d423fbfe4461774696012ee12e9d9c1d645d6dd72b57cca7e8526cc98b2f9e97e23503428642bd8793a87ab120f20092b6e4cbcbb52ec9a406dbb893e303077b675ecbd48e6bec13b700ab09d55e17c8815077a31cd75057c9cd65e7a881924a50bed228517be9c0abb19c3d24c458160405dab3ad0deb989a4e1b2e509b7fa57bcddbe8292512c9656df46acc62a028bb484ad0a6548ed9efdff0e83ca82a1d4c86c7d8810d1e4ff1846d1dc8e80f8206c6834bf9c433bc92ce73560d22ba0c8030b694d737fa0f4deb8b59ea9a35147efc891e993b6489a1ed86bbbf159c590bad0b5892c72383f5afedd58b7fa5e11271b35381dbf4a14daf70505b346cbd83b3258b1b413f7247d04e30e1a9eddbf82e8a25a70903c21e6a16ea34f6d7fe3cad0d51812e827596d50549153e394c4926e5e87b78d0faf440472c12929bb7fd49c959e5b06eb48c51915d80f003c2019525c91bdd4efc0e58d7811b083af3164f254c9c6cf3f8345525770033901308d02a9439131e632d073705e7a28312f8c1ccbeec064113009a34f177d7cd953c9a635f6bb12f0ed871a1d80ba86011e13df3220bda5e49c7c3d70f8c49397f69720f31b38cac3ddc7758f7bd1c99dca967a5aa5c788faf18eb2d996be835c3e5901349104ea63bdf1c195f4d29b8c63a0dcf58d501a102b8ac34709e82c0b0d19f762b1d3c40f01e0cb05b0909b90fb587ea260cdc0a043ac67f649486d3c57b9dbf94e44334fd8034218f82c937e6b8c97b627e8803cab0a27f33ebf0e447ab198cdbfc81371fdb6061dcf8c87c24084614ddfdc71cc2a5324e0ea9a1f7cb21ec46d7e5fd936a2a9224e5fe3c39051eb7269f51832751a36814db4aa01eb1a79eca73480c12b1d7f79bb20ba7b957f7e8343af7c38c81edb6aa48eeb82e17f47f5335f4086ef2cb57c4e70e847a77362271e16158e010f95c3227162caa7f911e94893d3bdf17fb914dddddf7f982ae898914378e3f5a4bc810f246d84ae977290d20773761b8d52bb493076052022586b8ce915b1f4c8f6ef6093e3e12f56e642b1cde9dda220fd7fb26f40ba08899e0217cf2a0883ab552c9432a7d60c6316f936b57c271e13b35d5cc4f20dfbe5fb1b13e916e62cd39e5bec37d0885f6fb5523860f8ae09592d32574e3d9c570c651fa9f4db0d4b9fbd002af8b6919d7587504989123533804e4a496def7d1d9740ec83e0670233a732d55425014276efcf6b6634c5ed5a97f25deaab14fe934efe0eb13992ef48e29a7f190f253d3cce9929f3183c01c72315b6a36998016af08f84155ca1ad18acf1a54d23fe605957f7016873187a47d7ded54667d3ba4aab222319c5968d0192a1af47be415fce025329b81d5034d2c608ddb108d7acac2c145bf4abadb97cc6a05398c04a8385dab86979a0c857d2b27eeb7bdcd154e9f3ea7e394d3a41d81b0410356e252f5d0fba83d85411d7ea0d780d7934212d5099ede64b20d4a865fc359092ed619f0e3e6728acc69ce41b585e3c54f73fac28c38aa41ea53440cec35cebf03caaef987b18d9942c644c3f6a389970f3d7d18db8ea1f2c5ab2c0bb84478ce5e439c10749b278dfe8348391cb2bd4c7634a3ac813a6ea36f95bdd80c87fae037775834eb5029854cfe59c99a9597944e7cbce895d14ed0ee8b84ea586e77dc12fe709cf9a083c2a4806913d8914b379b4ecf27525e84fc1df3ff520f79ec244da60f680b59d848e591c89f069cec4b497d9579a86c19a710c5cc00239d6cf3c8596c924561843ae20ad5cac9bc92bf42157ab35329cd62242fec48117f1f6f801c68f9f3ec9677875916ceea7795dfbdd23121cfb3bb1813fe1ee14ddbd5a45985bc496449f82a2cc200905eaaadd1333bf79128459f47b580fdd5a10787094b08418c1dac843ab0e15d824aff2b3d242fe78d9762d39c713ded38cf972c227831ba6fb963c956458eef5689180baa3ef2aef3d3e57c63c2d4509759fb711dfe2772341ae308a7892e583be0917ef5355bfe68becce5bc5971733ca260055ee6481c0998698a49a1f03a0f537145d051179601c04cd887a64917480ba96ac046638dd6977599f72a7235506737e7e81a03095cc7e102586ec33b79eff0d1dc2b34912fa89dfb434f0256be53f6695685688af05361d3b6954d416f4be06b9ab7846a44ce25b39c7c79012b2f16159fdf96a3998098691364dbbf930a8e224701ee6f8b899fcde632077a03f649bcfad6f506924db17558b708d38d0b286d6f16f286b26cbf11094def0d017eda65328fe2a24d129bd7ac28679f2a98999e6ae508c3bb31b4e384de7593cf8ac46727cb8a07c30d97c87b638f154e1ae2223a8158e292d9467049cd9115051d3dc0c090f9e9ff6cc425f2fbcd3a4471af5182c0e45485194b6627839d356adf2cf7159b6360f7983a5c50f5cdfcf253cc40a413ed280b9ce7d9d70bef8233fbc8f6e0f5e9100f110519088ce84b41d861171f607338f5acf0664f56c88dd50e86851f59e81c2601f66ee9ced3ecae2dcbd37c55f6058390d6237837ff601900971806e987abbca25221d08f7ccb11a41b3a6246efffaff359e04fa52d7ac630f7d96bc5976817f8a347ddacfe079da0633d855343884bf4d2eb58638cd29d499de7af8490a6d9db3922363839371e819e49e54ef7dc953aa8125e053e3689a22d785c3c1729936eedccf682fd56e0aa6069c1ac88d46b0c06c1f43e631f74f9c8b4557678e90ad7788d25caca67b70da4470cc8d28606acf1fed5d4585085449ced76b1a871ebe8ede8d86570d505010c4f6f4656d2195b6190a1dfe423860b5f767f96c1e0fbf1194b9cab5c87dc2f6ce5f408681e2af319ada237e4232cd356574d7a5edbf7c292acc0c0ca04303614e46b6875f2b58f8b400fda08e24020739c2493ecf7c5d0695ecac14e486bc36a575e6a765d43313c4a4c43c5cc32488c045466504cc690f6b14f12e0a669b701d305a056c610b5f3e696e002bd5b940abac2edde34dbadc88881a5a5fc1d7db4389f33eed574ff8ed69eaf3a656635963e297cf2915c2da4bc7739c5d24017c4757a4aaca2b3323bd4fefefc004d2a675a40b7b31a221d825f79fc12f12b9d6637ca48fc2b55c9e982db14d8cce59172d7d7ee6a1f98a2839d263d7382e81ee306d27e7463a3a0cc71c74df84060ca69331afa4e19e0b124ddf430f4323e682d99f7d77854ba416162182dc161a41af02c75eef1688bef190ca86f712994db24d81831cfe4f54229ba2f5df634e45c2d2980cec96d8aefecdb35dcd7fb360c6117af12bcf894ada94069ba44814334ba4b4d487a866e484b45d7348e07a49460ab64c89f45f8b6f74507179fb6b5f03c"], 0xfce) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="4801000042000100fffffffffddbdf250200000004003880100001800c00c8000200000000000000200104801c01"], 0x148}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) r5 = epoll_create1(0x80000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x2000884c) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c00000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000140016"], 0x4c}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r0, &(0x7f0000000080)={0x40000000}) 368.655869ms ago: executing program 2 (id=11305): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DISABLE_SE(r0, &(0x7f0000003c80)={0x0, 0x0, &(0x7f0000003c40)={&(0x7f0000000000)={0x14, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4008011}, 0x40080c4) (async) sendmsg$NFC_CMD_DISABLE_SE(r0, &(0x7f0000003c80)={0x0, 0x0, &(0x7f0000003c40)={&(0x7f0000000000)={0x14, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4008011}, 0x40080c4) 366.877173ms ago: executing program 6 (id=11306): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000240)={0x4001, 0x7ff, 0x1000, 0x5}, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r3, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40d5}, 0x20040080) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r3, 0xc4f3de8be76d38b4, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4012}, 0x20000000) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=@ipv6_getaddr={0x2c, 0x16, 0x3c2be10bca706f15, 0x70bd27, 0x27dfdffd, {}, [@IFA_LOCAL={0x14, 0x2, @loopback}]}, 0x2c}, 0x1, 0x0, 0x0, 0x620080d4}, 0x24080) 313.161523ms ago: executing program 6 (id=11307): r0 = socket(0x10, 0x803, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) pread64(r3, &(0x7f0000003880)=""/4112, 0x1010, 0x1) readv(r2, &(0x7f0000001800)=[{&(0x7f0000000680)=""/42, 0x2a}], 0x1) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r5 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f00000048c0)={0xfb8, 0xffffffffffffffff, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000c00)={'ip6_vti0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x7c, 0x10, 0x401, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1001}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0xd, 0x1, 'BATMAN_IV'}, @IFLA_BATADV_ALGO_NAME={0xc, 0x1, 'BATMAN_V'}, @IFLA_BATADV_ALGO_NAME={0xd, 0x1, 'BATMAN_IV'}, @IFLA_BATADV_ALGO_NAME={0xc, 0x1, 'BATMAN_V'}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4045000}, 0x4008010) 232.314359ms ago: executing program 6 (id=11308): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{0xa00}, {0x0, 0x100000000000000}]}, 0xa50) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x30}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x40000000015, 0x5, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x28, 0x25, 0x319, 0x70bd26, 0x8000, {0x5}, [@typed={0x14, 0x12c, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008045}, 0x4044084) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_crypto(0x10, 0x3, 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x19, 0xe, &(0x7f00000008c0)=ANY=[@ANYRESOCT], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x8}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0x2}, 0x10}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3000005, 0x28011, r3, 0x638f0000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000497000/0x2000)=nil, 0x2000, 0x100000a, 0x13, r4, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r5, 0x913e0000) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d5000/0x2000)=nil, 0x2000, 0x3, 0x28011, r6, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305829, &(0x7f0000000540)={0x1100, 0x1, 0x2e38, 0x10000}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x4}, [@cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffffd}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000dc0), r8) sendmsg$IEEE802154_LLSEC_SETPARAMS(r8, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYRESHEX=r7], 0x30}, 0x1, 0x0, 0x0, 0x400c000}, 0x20000014) 124.534932ms ago: executing program 6 (id=11309): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x2b0, 0x118, 0x11, 0x148, 0x118, 0x0, 0x218, 0x2a8, 0x2a8, 0x218, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@addrtype={{0x30}, {0x10, 0xa, 0x3}}, @common=@unspec=@cluster={{0x30}, {0x2, 0xfff, 0x2}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0xfffffffc, 0x19ecd463}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000000)="f68ded77286c53e27a617e528624", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x24, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x1d, 0x0, 0x0, @binary}, @typed={0xc, 0x11, 0x0, 0x0, @u64=0xe0000000000000}]}, 0x24}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 123.050209ms ago: executing program 3 (id=11310): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a0000020000002400018014000180"], 0x64}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x94, 0x2c, 0x400, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r7, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xfffffbb4, 0x5, 0x5, 0x6e0, 0x5}, 0x52}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x40) close(r5) r8 = socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_bt_hci(r8, 0x400448e6, &(0x7f0000000200)="7deb0ffc63aa39b8a0b5") setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f0000000600), 0x56) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f00000004c0)=@xdp={0x2c, 0x0, r7, 0x18}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000001c0)="27030200dc0f14000e0005000014c10200000002125ce882cbf400930bf4533f00429c65112a093bbf60b85bcb06", 0x2e}], 0x1}, 0x4005) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 79.523867ms ago: executing program 2 (id=11311): r0 = socket$pppl2tp(0x18, 0x1, 0x1) (async) close(0x3) (async) r1 = socket(0x2, 0x80805, 0x0) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) (async) close(0x3) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000001280)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f00000002c0)=0x84) (async) sendmmsg$inet_sctp(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x492492492492775, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f00000005c0)={r4, 0x1}, &(0x7f0000000600)=0x8) (async) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) (async, rerun: 32) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 32) getsockopt$sock_cred(r6, 0x1, 0x4d, 0x0, &(0x7f0000000040)) (async, rerun: 64) r7 = socket$alg(0x26, 0x5, 0x0) (async, rerun: 64) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[], 0x32600) (async, rerun: 64) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) (rerun: 64) bind$alg(r8, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0xfd7b) (async) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt(r9, 0x400000000000003a, 0x7, 0x0, 0x0) (async) accept4(r7, 0x0, 0x0, 0x0) (async, rerun: 32) pselect6(0x40, &(0x7f0000000000)={0x7f, 0x8, 0x3, 0x7, 0x5, 0x80000000, 0x7fc, 0x6}, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) connect$inet6(r5, &(0x7f0000000180)={0xa, 0xe1d, 0xffffffff, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5f}, 0x1c) (async) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) (async, rerun: 64) r11 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000007910a800000000005d0a0000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79, 0x0, 0xffffffffffffffff, 0x51}, 0x2a) sendmsg$L2TP_CMD_SESSION_DELETE(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002cbd701004000000050000000600010005000000080009000200000008a80a0000"], 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 0s ago: executing program 6 (id=11312): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.numa_stat\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r3, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback}, @FOU_ATTR_PORT={0x6}]}, 0x4c}}, 0x0) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r3, 0x300, 0x70bd25, 0x25dfdbff, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000001c0)={{{@in6=@private1, @in6=@empty, 0x4e20, 0x101, 0x4e21, 0xffe4, 0xa, 0xa0, 0x30, 0x2c, 0x0, r4}, {0x6, 0x9, 0x800, 0x10, 0xda4, 0xe, 0x5, 0x6}, {0xd2e2, 0x2ee8, 0x8, 0x11ba710e}, 0x5, 0x6e6bb1, 0x1, 0x0, 0x2, 0x1}, {{@in6=@private0, 0x4d6, 0x32}, 0x2, @in6=@mcast2, 0x3500, 0x2, 0x0, 0xdc, 0x8, 0x7, 0x9}}, 0xe8) kernel console output (not intermixed with test programs): : adding VLAN 0 to HW filter on device team2 [ 863.704375][T12301] 8021q: adding VLAN 0 to HW filter on device bond5 [ 863.723652][T12301] bond6: left promiscuous mode [ 863.729651][T12301] bridge4: left promiscuous mode [ 863.737261][T12301] 8021q: adding VLAN 0 to HW filter on device bond6 [ 863.749354][T12301] bond7: left allmulticast mode [ 863.755199][T12301] 8021q: adding VLAN 0 to HW filter on device bond7 [ 863.775902][ T6281] bridge0: port 1(bridge_slave_0) entered blocking state [ 863.783459][ T6281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 863.807219][ T6281] bridge0: port 2(bridge_slave_1) entered blocking state [ 863.814753][ T6281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 863.952238][ T6281] bridge0: port 3(team0) entered blocking state [ 863.959039][ T6281] bridge0: port 3(team0) entered forwarding state [ 864.051649][T12323] hsr_slave_1 (unregistering): left promiscuous mode [ 864.051662][ T5305] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 864.068955][T10247] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 864.080382][ T5305] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 864.095780][ T5305] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 864.108001][ T5305] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 864.116262][ T5305] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 864.597766][T12326] xfrm0 speed is unknown, defaulting to 1000 [ 864.616109][T12326] lo speed is unknown, defaulting to 1000 [ 864.650872][T12361] tunl0: left allmulticast mode [ 864.665668][T12361] team0: Port device tunl0 removed [ 865.011739][T12869] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 865.019921][T12869] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 865.032096][T12869] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 865.048235][T12869] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 865.057682][T12869] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 865.227130][T12326] bridge0: port 1(bridge_slave_0) entered blocking state [ 865.236171][T12326] bridge0: port 1(bridge_slave_0) entered disabled state [ 865.244066][T12326] bridge_slave_0: entered allmulticast mode [ 865.253013][T12326] bridge_slave_0: entered promiscuous mode [ 865.263960][T12326] bridge0: port 2(bridge_slave_1) entered blocking state [ 865.273463][T12326] bridge0: port 2(bridge_slave_1) entered disabled state [ 865.281688][T12326] bridge_slave_1: entered allmulticast mode [ 865.290693][T12326] bridge_slave_1: entered promiscuous mode [ 865.349968][T12326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 865.364976][T12326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 865.420477][T12326] team0: Port device team_slave_0 added [ 865.439151][T12326] team0: Port device team_slave_1 added [ 865.497881][T12326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 865.506001][T12326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 865.535067][T12326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 865.548824][T12326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 865.556826][T12326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 865.584477][T12326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 865.596076][T12384] syzkaller1: entered allmulticast mode [ 865.632000][T12326] hsr_slave_0: entered promiscuous mode [ 865.640296][T12326] hsr_slave_1: entered promiscuous mode [ 865.647833][T12326] debugfs: 'hsr0' already exists in 'hsr' [ 865.654058][T12326] Cannot create hsr debugfs directory [ 865.676833][T12369] xfrm0 speed is unknown, defaulting to 1000 [ 865.698285][T12369] lo speed is unknown, defaulting to 1000 [ 865.991830][T12399] netlink: 'syz.1.9953': attribute type 1 has an invalid length. [ 866.010511][T12399] __nla_validate_parse: 57 callbacks suppressed [ 866.010541][T12399] netlink: 3 bytes leftover after parsing attributes in process `syz.1.9953'. [ 866.034068][T12399] netlink: 'syz.1.9953': attribute type 1 has an invalid length. [ 866.046936][T12399] netlink: 3 bytes leftover after parsing attributes in process `syz.1.9953'. [ 866.057887][T12399] netlink: 'syz.1.9953': attribute type 1 has an invalid length. [ 866.094897][T12399] netlink: 3 bytes leftover after parsing attributes in process `syz.1.9953'. [ 866.104810][T12399] netlink: 'syz.1.9953': attribute type 1 has an invalid length. [ 866.113040][T12399] netlink: 3 bytes leftover after parsing attributes in process `syz.1.9953'. [ 866.124329][T12399] netlink: 'syz.1.9953': attribute type 1 has an invalid length. [ 866.134090][T12399] netlink: 3 bytes leftover after parsing attributes in process `syz.1.9953'. [ 866.155059][T12399] netlink: 'syz.1.9953': attribute type 1 has an invalid length. [ 866.171814][T12869] Bluetooth: hci1: command tx timeout [ 866.180138][T12399] netlink: 3 bytes leftover after parsing attributes in process `syz.1.9953'. [ 866.207513][T12399] netlink: 'syz.1.9953': attribute type 1 has an invalid length. [ 866.220381][T12399] netlink: 3 bytes leftover after parsing attributes in process `syz.1.9953'. [ 866.230967][T12399] netlink: 'syz.1.9953': attribute type 1 has an invalid length. [ 866.239553][T12399] netlink: 3 bytes leftover after parsing attributes in process `syz.1.9953'. [ 866.254138][T12326] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 866.255361][T12399] netlink: 'syz.1.9953': attribute type 1 has an invalid length. [ 866.270837][T12399] netlink: 3 bytes leftover after parsing attributes in process `syz.1.9953'. [ 866.281637][T12399] netlink: 'syz.1.9953': attribute type 1 has an invalid length. [ 866.287831][T12326] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 866.290306][T12399] netlink: 3 bytes leftover after parsing attributes in process `syz.1.9953'. [ 866.331375][T12411] netlink: 'syz.3.9957': attribute type 11 has an invalid length. [ 866.341761][T12326] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 866.404031][T12326] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 866.436302][T12326] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 866.488464][T12326] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 866.505283][T12326] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 866.518787][T12326] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 866.562203][T12419] xfrm0 speed is unknown, defaulting to 1000 [ 866.566243][T30425] net_ratelimit: 31 callbacks suppressed [ 866.566274][T30425] bond5: (slave dummy0): failed to get link speed/duplex [ 866.613384][T12419] lo speed is unknown, defaulting to 1000 [ 866.720184][T12326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 866.746065][T12326] 8021q: adding VLAN 0 to HW filter on device team0 [ 866.799442][T12326] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 866.811613][T12326] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 866.877874][ T3355] bridge0: port 1(bridge_slave_0) entered blocking state [ 866.885580][ T3355] bridge0: port 1(bridge_slave_0) entered forwarding state [ 866.918862][ T3355] bridge0: port 2(bridge_slave_1) entered blocking state [ 866.926448][ T3355] bridge0: port 2(bridge_slave_1) entered forwarding state [ 866.995747][T30431] bond5: (slave dummy0): failed to get link speed/duplex [ 867.119556][T12369] bridge0: port 1(bridge_slave_0) entered blocking state [ 867.127196][T12869] Bluetooth: hci6: command tx timeout [ 867.139213][T12369] bridge0: port 1(bridge_slave_0) entered disabled state [ 867.148508][T12369] bridge_slave_0: entered allmulticast mode [ 867.160114][T12369] bridge_slave_0: entered promiscuous mode [ 867.191075][T12369] bridge0: port 2(bridge_slave_1) entered blocking state [ 867.205075][T12369] bridge0: port 2(bridge_slave_1) entered disabled state [ 867.219001][T12369] bridge_slave_1: entered allmulticast mode [ 867.228668][T12369] bridge_slave_1: entered promiscuous mode [ 867.295536][T30431] bond5: (slave dummy0): failed to get link speed/duplex [ 867.324428][T12369] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 867.377309][T12369] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 867.415089][T30431] bond5: (slave dummy0): failed to get link speed/duplex [ 867.566391][T12451] batadv_slave_1: entered promiscuous mode [ 867.603045][T12454] nbd: nbd1 already in use [ 867.635091][ T6281] bond5: (slave dummy0): failed to get link speed/duplex [ 867.654804][T12369] team0: Port device team_slave_0 added [ 867.695510][T12369] team0: Port device team_slave_1 added [ 867.741287][T12451] batadv_slave_1: left promiscuous mode [ 867.902875][T12369] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 867.931127][T12369] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 867.983598][T12369] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 868.021833][T12326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 868.034927][T30425] bond5: (slave dummy0): failed to get link speed/duplex [ 868.056112][T12369] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 868.074756][T12369] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 868.134827][T12369] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 868.175263][T30429] bond5: (slave dummy0): failed to get link speed/duplex [ 868.248266][T12869] Bluetooth: hci1: command tx timeout [ 868.308227][T12369] hsr_slave_0: entered promiscuous mode [ 868.324185][T12369] hsr_slave_1: entered promiscuous mode [ 868.334337][T12369] debugfs: 'hsr0' already exists in 'hsr' [ 868.341299][T12369] Cannot create hsr debugfs directory [ 868.404738][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 868.407598][T10247] bond5: (slave dummy0): failed to get link speed/duplex [ 868.654786][T30431] bond5: (slave dummy0): failed to get link speed/duplex [ 868.774969][T10247] bond5: (slave dummy0): failed to get link speed/duplex [ 868.794100][T12487] bridge3: entered promiscuous mode [ 868.801039][T12487] bridge3: entered allmulticast mode [ 868.833193][T12369] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 868.846682][T12369] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 868.858186][T12326] veth0_vlan: entered promiscuous mode [ 868.865944][T12369] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 868.894013][T12369] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 868.923460][T12369] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 868.944273][T12369] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 868.971299][T12326] veth1_vlan: entered promiscuous mode [ 868.980249][T12369] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 868.995856][T12369] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 869.081246][T12326] veth0_macvtap: entered promiscuous mode [ 869.128698][T12326] veth1_macvtap: entered promiscuous mode [ 869.205680][T12869] Bluetooth: hci6: command tx timeout [ 869.240529][T12326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 869.289029][T12326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 869.338727][T30431] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.376967][ T6281] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.408869][ T6281] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.433710][ T6281] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.482041][T12369] 8021q: adding VLAN 0 to HW filter on device bond0 [ 869.543594][T12369] 8021q: adding VLAN 0 to HW filter on device team0 [ 869.640496][T30429] bridge0: port 1(bridge_slave_0) entered blocking state [ 869.648111][T30429] bridge0: port 1(bridge_slave_0) entered forwarding state [ 869.678340][ T3355] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 869.690683][ T3355] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 869.733825][T12528] bridge0: port 4(vlan2) entered blocking state [ 869.741953][T12528] bridge0: port 4(vlan2) entered disabled state [ 869.750702][T12528] vlan2: entered allmulticast mode [ 869.756633][T12528] geneve0: entered allmulticast mode [ 869.764409][T12528] vlan2: entered promiscuous mode [ 869.771281][T12528] geneve0: entered promiscuous mode [ 869.785886][ T6281] bridge0: port 2(bridge_slave_1) entered blocking state [ 869.793688][ T6281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 869.868476][ T6281] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 869.878962][ T6281] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 870.263015][T12544] bridge0: port 2(bridge_slave_1) entered disabled state [ 870.271305][T12544] bridge0: port 1(bridge_slave_0) entered disabled state [ 870.325790][T12869] Bluetooth: hci1: command tx timeout [ 870.396470][T12544] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 870.417171][T12544] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 870.564502][T12552] 8021q: VLANs not supported on lo [ 870.599607][T12535] tipc: Enabling of bearer rejected, already enabled [ 870.682099][T12558] 8021q: adding VLAN 0 to HW filter on device bond6 [ 870.697304][T12562] bond4: (slave dummy0): Releasing active interface [ 870.704377][T12562] dummy0: left allmulticast mode [ 870.728581][T12562] bond6: (slave dummy0): Enslaving as a backup interface with an up link [ 870.738554][ T3355] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.750683][ T3355] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.830209][ T3355] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.880603][ T3355] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 871.053777][T12586] __nla_validate_parse: 66 callbacks suppressed [ 871.053811][T12586] netlink: 40 bytes leftover after parsing attributes in process `syz.5.9990'. [ 871.188464][T12590] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9992'. [ 871.287490][T12869] Bluetooth: hci6: command tx timeout [ 871.397285][T12369] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 871.540736][T12608] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9996'. [ 871.540797][T12609] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9996'. [ 871.595082][T30425] net_ratelimit: 15 callbacks suppressed [ 871.595129][T30425] bond5: (slave dummy0): failed to get link speed/duplex [ 871.601186][T12608] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9996'. [ 871.601287][T12608] validate_nla: 57 callbacks suppressed [ 871.601313][T12608] netlink: 'syz.3.9996': attribute type 19 has an invalid length. [ 871.601326][T12608] netlink: 'syz.3.9996': attribute type 20 has an invalid length. [ 871.631347][T12609] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9996'. [ 871.687227][T12609] netlink: 'syz.3.9996': attribute type 19 has an invalid length. [ 871.725036][T12609] netlink: 'syz.3.9996': attribute type 20 has an invalid length. [ 871.734932][ T6281] bond5: (slave dummy0): failed to get link speed/duplex [ 871.855300][ T6281] bond5: (slave dummy0): failed to get link speed/duplex [ 871.939650][T12620] pim6reg1: entered promiscuous mode [ 871.956762][T12620] pim6reg1: entered allmulticast mode [ 872.136644][T30425] bond5: (slave dummy0): failed to get link speed/duplex [ 872.151550][T12630] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10002'. [ 872.173304][T12369] veth0_vlan: entered promiscuous mode [ 872.231978][T12369] veth1_vlan: entered promiscuous mode [ 872.296354][ T6281] bond5: (slave dummy0): failed to get link speed/duplex [ 872.392340][T12369] veth0_macvtap: entered promiscuous mode [ 872.408917][T12869] Bluetooth: hci1: command tx timeout [ 872.422503][T12369] veth1_macvtap: entered promiscuous mode [ 872.447906][T30431] bond5: (slave dummy0): failed to get link speed/duplex [ 872.501196][T12369] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 872.540173][T12369] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 872.576738][T30425] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 872.606069][ T6281] bond5: (slave dummy0): failed to get link speed/duplex [ 872.642011][T30425] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 872.655242][T30425] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 872.681513][T30425] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 872.746470][T30425] bond5: (slave dummy0): failed to get link speed/duplex [ 872.905772][T30431] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 872.938209][T30431] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 873.019575][T30431] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 873.036394][ T3355] bond5: (slave dummy0): failed to get link speed/duplex [ 873.041813][T30431] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 873.046125][T12869] Bluetooth: hci0: command 0x0c20 tx timeout [ 873.167714][ T6281] bond5: (slave dummy0): failed to get link speed/duplex [ 873.364727][ T5305] Bluetooth: hci6: command tx timeout [ 873.452224][T12659] bond1: ARP target 9.0.0.0 is already present [ 873.459630][T12659] bond1: option arp_ip_target: invalid value (9) [ 873.470515][T12659] bond1 (unregistering): Released all slaves [ 873.632189][T12669] netlink: 'syz.6.10014': attribute type 1 has an invalid length. [ 873.654408][T12669] netlink: 224 bytes leftover after parsing attributes in process `syz.6.10014'. [ 873.865851][T12682] netlink: 211856 bytes leftover after parsing attributes in process `syz.6.10016'. [ 874.293199][T12690] 8021q: adding VLAN 0 to HW filter on device bond0 [ 874.304056][T12690] 8021q: adding VLAN 0 to HW filter on device team0 [ 874.342067][T12690] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 874.410398][T12690] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 874.422823][T12690] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 874.444097][T12690] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 874.455860][T12690] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 874.477554][T12690] veth1_vlan: left promiscuous mode [ 874.490318][T12690] veth0_vlan: left promiscuous mode [ 874.498228][T12690] veth0_vlan: entered promiscuous mode [ 874.511245][T12690] veth1_vlan: entered promiscuous mode [ 874.526933][T12690] veth1_macvtap: left promiscuous mode [ 874.536301][T12690] veth0_macvtap: left promiscuous mode [ 874.544440][T12690] veth0_macvtap: entered promiscuous mode [ 874.554284][T12690] veth1_macvtap: entered promiscuous mode [ 874.572226][T12690] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 874.577392][T12707] netlink: 'syz.2.10024': attribute type 2 has an invalid length. [ 874.582228][T12690] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 874.598026][T12690] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 874.608019][T12690] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 874.810803][ T6281] bridge0: port 1(bridge_slave_0) entered blocking state [ 874.818612][ T6281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 874.860229][ T6281] bridge0: port 2(bridge_slave_1) entered blocking state [ 874.867929][ T6281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 875.119816][T30425] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.167458][T30425] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.193818][T30425] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.218282][T30425] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.229348][T12732] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10029'. [ 875.365110][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 875.446402][ T5305] Bluetooth: hci6: command 0x0405 tx timeout [ 876.376034][T12788] __nla_validate_parse: 1 callbacks suppressed [ 876.376077][T12788] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10048'. [ 876.418483][T12779] syzkaller0: entered promiscuous mode [ 876.425863][T12779] syzkaller0: entered allmulticast mode [ 876.695437][T30425] net_ratelimit: 34 callbacks suppressed [ 876.695568][T30425] bond5: (slave dummy0): failed to get link speed/duplex [ 876.765224][T30431] bond6: (slave dummy0): failed to get link speed/duplex [ 876.854763][T10247] bond5: (slave dummy0): failed to get link speed/duplex [ 876.889209][T30431] bond6: (slave dummy0): failed to get link speed/duplex [ 877.055192][T30431] bond5: (slave dummy0): failed to get link speed/duplex [ 877.087426][T30431] bond6: (slave dummy0): failed to get link speed/duplex [ 877.166219][T12821] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10058'. [ 877.188858][T10247] bond5: (slave dummy0): failed to get link speed/duplex [ 877.205735][T12821] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10058'. [ 877.225161][T30430] bond6: (slave dummy0): failed to get link speed/duplex [ 877.285028][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 877.298920][T12823] netlink: 6024 bytes leftover after parsing attributes in process `syz.5.10059'. [ 877.314757][T10247] bond5: (slave dummy0): failed to get link speed/duplex [ 877.330493][T12828] netlink: 'syz.1.10060': attribute type 1 has an invalid length. [ 877.349348][T12823] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10059'. [ 877.370860][T12828] 8021q: adding VLAN 0 to HW filter on device bond7 [ 877.382077][T12823] openvswitch: netlink: Flow actions attr not present in new flow. [ 877.500711][T12828] netlink: 'syz.1.10060': attribute type 7 has an invalid length. [ 877.592139][T12828] bond7: (slave geneve2): making interface the new active one [ 877.612757][T12828] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 877.691000][T30430] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 877.714802][T30430] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 877.737950][T30430] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 877.770781][T30430] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 877.827593][T12836] xfrm0 speed is unknown, defaulting to 1000 [ 877.853264][ T30] audit: type=1804 audit(1782412368.175:41): pid=12844 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.10064" name="/newroot/25/cgroup.controllers" dev="tmpfs" ino=147 res=1 errno=0 [ 877.856892][T12836] lo speed is unknown, defaulting to 1000 [ 877.941991][ T30] audit: type=1800 audit(1782412368.175:42): pid=12844 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.10064" name="cgroup.controllers" dev="tmpfs" ino=147 res=0 errno=0 [ 878.481487][T12858] netlink: 'syz.5.10069': attribute type 13 has an invalid length. [ 878.497034][T12858] netlink: 'syz.5.10069': attribute type 17 has an invalid length. [ 878.539686][T12862] netlink: 44 bytes leftover after parsing attributes in process `syz.5.10069'. [ 878.673987][T12858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 878.813700][T12875] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10072'. [ 878.868449][T12877] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10072'. [ 879.179878][T12884] netlink: 16 bytes leftover after parsing attributes in process `syz.6.10075'. [ 879.219333][T12885] netlink: 'syz.5.10074': attribute type 1 has an invalid length. [ 879.233448][T12884] netlink: 36 bytes leftover after parsing attributes in process `syz.6.10075'. [ 879.277789][T12882] netlink: 'syz.5.10074': attribute type 7 has an invalid length. [ 879.314459][T12885] 8021q: adding VLAN 0 to HW filter on device bond1 [ 879.343433][T12882] bond1: (slave geneve2): making interface the new active one [ 879.356077][T12882] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 879.383326][T12888] ip6t_srh: unknown srh invflags 4000 [ 879.486811][T12890] netlink: 'syz.6.10076': attribute type 13 has an invalid length. [ 879.528039][T12890] netlink: 'syz.6.10076': attribute type 17 has an invalid length. [ 879.633963][T12888] bridge0: port 2(bridge_slave_1) entered disabled state [ 879.642536][T12888] bridge0: port 1(bridge_slave_0) entered disabled state [ 879.764290][T12901] nft_compat: unsupported protocol 0 [ 879.921824][T12888] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 879.972640][T12888] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 880.478065][T12890] 8021q: adding VLAN 0 to HW filter on device bond0 [ 880.505519][T12890] 8021q: adding VLAN 0 to HW filter on device team0 [ 880.548076][T12890] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 880.634555][T12890] bridge0: port 1(bridge_slave_0) entered blocking state [ 880.642217][T12890] bridge0: port 1(bridge_slave_0) entered forwarding state [ 880.684308][T12890] bridge0: port 2(bridge_slave_1) entered blocking state [ 880.692097][T12890] bridge0: port 2(bridge_slave_1) entered forwarding state [ 880.782871][T12890] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 880.797676][T12890] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 880.862926][T12890] veth1_vlan: left promiscuous mode [ 880.868231][ T5744] hid (null): unknown global tag 0xb4 [ 880.868269][ T5744] hid (null): unknown global tag 0xd [ 880.870762][ T5744] hid-generic 0005:15C2:000B.0003: unexpected long global item [ 880.890251][ T5744] hid-generic 0005:15C2:000B.0003: probe with driver hid-generic failed with error -22 [ 880.901914][T12890] veth0_vlan: left promiscuous mode [ 880.911252][T12890] veth0_vlan: entered promiscuous mode [ 880.927373][T12890] veth1_vlan: entered promiscuous mode [ 880.948620][T12890] veth1_macvtap: left promiscuous mode [ 880.959229][T12890] veth0_macvtap: left promiscuous mode [ 880.969814][T12890] veth0_macvtap: entered promiscuous mode [ 881.008441][T12890] veth1_macvtap: entered promiscuous mode [ 881.027711][T12890] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 881.051298][T12890] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 881.078878][T12890] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 881.096907][T12890] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 881.191494][T12921] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 881.330631][ T6281] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 881.388537][T12955] __nla_validate_parse: 1 callbacks suppressed [ 881.388584][T12955] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10090'. [ 881.418225][T12955] netlink: 168 bytes leftover after parsing attributes in process `syz.5.10090'. [ 881.439654][T12955] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10090'. [ 881.750551][T12974] netlink: 'syz.6.10096': attribute type 1 has an invalid length. [ 881.849568][T12971] bridge0: port 2(bridge_slave_1) entered disabled state [ 881.857736][T12971] bridge0: port 1(bridge_slave_0) entered disabled state [ 881.931608][T12979] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 882.009809][T12971] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 882.043295][T12971] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 882.153475][T12990] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10099'. [ 882.259388][T12976] syzkaller1: entered promiscuous mode [ 882.268105][T12976] syzkaller1: entered allmulticast mode [ 882.583597][T12986] gretap1: left allmulticast mode [ 882.590310][T12986] ip6tnl1: left allmulticast mode [ 882.599055][T12986] bond2: left promiscuous mode [ 882.604330][T12986] bond2: left allmulticast mode [ 882.623791][T12992] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10099'. [ 882.639179][T12986] vlan2: left allmulticast mode [ 882.647597][T12986] bond4: left allmulticast mode [ 882.653295][T12986] batadv0: left promiscuous mode [ 882.660044][T12986] batadv0: left allmulticast mode [ 882.669778][T12986] macsec1: left promiscuous mode [ 882.678565][T12986] bond5: left promiscuous mode [ 882.686950][T12986] bridge3: left promiscuous mode [ 882.692362][T12986] bridge3: left allmulticast mode [ 882.714281][T12986] syzkaller1: left promiscuous mode [ 882.721280][T12986] syzkaller1: left allmulticast mode [ 882.730582][T12991] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1280) ! [ 882.767322][ T507] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 882.778858][ T507] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 882.790176][ T507] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 882.818411][T13002] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 882.907692][ T507] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 882.932917][ T507] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 882.954956][ T507] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 882.958907][T13010] netlink: 56 bytes leftover after parsing attributes in process `syz.5.10104'. [ 882.977886][T13010] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10104'. [ 882.983110][ T507] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 882.999654][ T507] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 883.009985][ T507] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.021110][ T507] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 883.032488][ T507] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.046215][T13007] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 883.056321][ T507] net_ratelimit: 28 callbacks suppressed [ 883.056362][ T507] bond5: (slave dummy0): failed to get link speed/duplex [ 883.071126][T13007] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 883.082843][T13007] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 883.184971][T30430] bond5: (slave dummy0): failed to get link speed/duplex [ 883.305702][T30430] bond5: (slave dummy0): failed to get link speed/duplex [ 883.364048][T13024] bond2: Unable to set up delay as MII monitoring is disabled [ 883.388602][T13024] bond2 (unregistering): Released all slaves [ 883.533170][T13027] bridge0: port 2(bridge_slave_1) entered disabled state [ 883.541048][T13027] bridge0: port 1(bridge_slave_0) entered disabled state [ 883.686173][T13027] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 883.702886][T13027] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 883.871543][T13039] macvlan2: entered promiscuous mode [ 883.898369][ T507] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.916809][ T507] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.950919][ T5283] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 883.960814][ T507] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.972117][ T507] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.984739][ T507] bond5: (slave dummy0): failed to get link speed/duplex [ 884.115096][ T507] bond5: (slave dummy0): failed to get link speed/duplex [ 884.225990][ T507] bond5: (slave dummy0): failed to get link speed/duplex [ 884.320375][T13061] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10113'. [ 884.355093][ T507] bond5: (slave dummy0): failed to get link speed/duplex [ 884.361539][T13061] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10113'. [ 884.374039][T30431] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 884.394859][T30431] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 884.406265][T30431] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 884.418801][T13063] tipc: Enabled bearer , priority 0 [ 884.443421][T13063] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 884.476662][T13063] tipc: Resetting bearer [ 884.484974][T30430] bond5: (slave dummy0): failed to get link speed/duplex [ 884.554011][T13062] tipc: Disabling bearer [ 884.595210][T30430] bond5: (slave dummy0): failed to get link speed/duplex [ 884.716128][T30431] bond5: (slave dummy0): failed to get link speed/duplex [ 884.831613][T13079] netlink: 92 bytes leftover after parsing attributes in process `syz.1.10117'. [ 884.918051][T13079] netlink: 'syz.1.10117': attribute type 1 has an invalid length. [ 885.000402][T13079] bond8: option mode: invalid value (7) [ 885.118206][T13079] bond8 (unregistering): Released all slaves [ 885.992498][T13130] netlink: 'syz.5.10133': attribute type 11 has an invalid length. [ 886.005313][T13130] siw: device registration error -23 [ 886.458791][T13151] __nla_validate_parse: 4 callbacks suppressed [ 886.458832][T13151] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10140'. [ 887.101625][T13188] netlink: 44 bytes leftover after parsing attributes in process `syz.1.10153'. [ 887.256422][T13196] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 887.257721][T13196] netlink: 'syz.5.10156': attribute type 2 has an invalid length. [ 887.276635][T13196] netlink: 'syz.5.10156': attribute type 8 has an invalid length. [ 887.285454][T13196] netlink: 132 bytes leftover after parsing attributes in process `syz.5.10156'. [ 887.298914][T13196] netlink: 'syz.5.10156': attribute type 1 has an invalid length. [ 887.685258][T13109] Bluetooth: hci0: command 0x0c20 tx timeout [ 887.693126][T13109] Bluetooth: hci4: command 0x0406 tx timeout [ 887.804278][T13211] netlink: 'syz.6.10160': attribute type 11 has an invalid length. [ 887.822725][T13211] siw: device registration error -23 [ 888.124216][T13224] xfrm0 speed is unknown, defaulting to 1000 [ 888.129468][T30431] net_ratelimit: 28 callbacks suppressed [ 888.129507][T30431] bond5: (slave dummy0): failed to get link speed/duplex [ 888.154220][T13224] lo speed is unknown, defaulting to 1000 [ 888.256520][ T6281] bond5: (slave dummy0): failed to get link speed/duplex [ 888.386907][ T3355] bond5: (slave dummy0): failed to get link speed/duplex [ 888.765704][ T3355] bond5: (slave dummy0): failed to get link speed/duplex [ 888.792659][T13260] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10172'. [ 888.891190][ T3355] bond5: (slave dummy0): failed to get link speed/duplex [ 889.070199][ T507] bond5: (slave dummy0): failed to get link speed/duplex [ 889.195592][T30431] bond5: (slave dummy0): failed to get link speed/duplex [ 889.334895][T30431] bond5: (slave dummy0): failed to get link speed/duplex [ 889.375455][T13290] netlink: 'syz.1.10181': attribute type 11 has an invalid length. [ 889.386898][T13290] siw: device registration error -23 [ 889.446117][ T6281] bond5: (slave dummy0): failed to get link speed/duplex [ 889.564703][ T3355] bond5: (slave dummy0): failed to get link speed/duplex [ 889.631962][T13300] syzkaller1: entered promiscuous mode [ 889.638745][T13300] syzkaller1: entered allmulticast mode [ 889.848741][T13307] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10186'. [ 889.866616][T13308] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10186'. [ 889.868373][T13307] netlink: 'syz.2.10186': attribute type 1 has an invalid length. [ 889.914313][T13307] bond8: entered promiscuous mode [ 889.921365][T13307] 8021q: adding VLAN 0 to HW filter on device bond8 [ 889.983001][T13313] netlink: 280 bytes leftover after parsing attributes in process `syz.5.10187'. [ 890.022126][T13318] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.10188'. [ 890.163593][T13323] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 890.261622][T13325] xfrm0 speed is unknown, defaulting to 1000 [ 890.275473][T13325] lo speed is unknown, defaulting to 1000 [ 890.768926][T13355] bridge0: entered allmulticast mode [ 890.796393][T13355] bridge_slave_1: left allmulticast mode [ 890.812905][T13355] bridge_slave_1: left promiscuous mode [ 890.829420][T13355] bridge0: port 2(bridge_slave_1) entered disabled state [ 890.848043][T13357] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10199'. [ 890.860191][T13355] bridge_slave_0: left allmulticast mode [ 890.870511][T13355] bridge_slave_0: left promiscuous mode [ 890.888243][T13355] bridge0: port 1(bridge_slave_0) entered disabled state [ 890.917820][T13360] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 890.942104][T13360] netlink: 'syz.6.10198': attribute type 4 has an invalid length. [ 890.993679][T13362] netlink: 'syz.6.10198': attribute type 4 has an invalid length. [ 891.067100][T13329] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10191'. [ 891.099064][T13367] mac80211_hwsim hwsim151 wlan1: entered allmulticast mode [ 891.337324][T13377] netlink: 'syz.6.10203': attribute type 1 has an invalid length. [ 891.358729][T13377] netlink: 'syz.6.10203': attribute type 1 has an invalid length. [ 891.552723][T13384] netlink: 'syz.1.10204': attribute type 11 has an invalid length. [ 891.586267][T13384] siw: device registration error -23 [ 892.016727][T13402] Cannot find add_set index 4 as target [ 892.255553][T13412] netlink: 'syz.5.10213': attribute type 11 has an invalid length. [ 892.692886][T13429] netlink: 'syz.3.10217': attribute type 1 has an invalid length. [ 892.954329][T13438] __nla_validate_parse: 5 callbacks suppressed [ 892.954377][T13438] netlink: 112 bytes leftover after parsing attributes in process `syz.2.10210'. [ 893.184452][T13455] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma? [ 893.286361][T13461] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10224'. [ 893.316541][T13461] xt_l2tp: invalid flags combination: 0 [ 893.327702][T13462] xt_l2tp: invalid flags combination: 0 [ 893.488285][T13473] netlink: 'syz.2.10210': attribute type 1 has an invalid length. [ 893.704734][T30429] net_ratelimit: 25 callbacks suppressed [ 893.704771][T30429] bond5: (slave dummy0): failed to get link speed/duplex [ 893.753603][T13473] 8021q: adding VLAN 0 to HW filter on device bond9 [ 893.815387][T13481] tipc: Started in network mode [ 893.820826][T13481] tipc: Node identity ac14140f, cluster identity 4711 [ 893.829318][T13481] tipc: New replicast peer: 255.255.255.255 [ 893.839543][T13481] tipc: Enabled bearer , priority 26 [ 893.868950][ T3355] bond5: (slave dummy0): failed to get link speed/duplex [ 894.016045][ T3355] bond5: (slave dummy0): failed to get link speed/duplex [ 894.145950][ T6281] bond5: (slave dummy0): failed to get link speed/duplex [ 894.265750][ T6281] bond5: (slave dummy0): failed to get link speed/duplex [ 894.385527][T13497] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10234'. [ 894.395789][ T6281] bond5: (slave dummy0): failed to get link speed/duplex [ 894.424706][T13497] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10234'. [ 894.505716][ T3355] bond5: (slave dummy0): failed to get link speed/duplex [ 894.574486][ T5305] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 894.587633][ T5305] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 894.602664][ T5305] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 894.634733][ T507] bond5: (slave dummy0): failed to get link speed/duplex [ 894.647883][ T5305] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 894.661058][ T5305] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 894.780801][T13521] FAULT_INJECTION: forcing a failure. [ 894.780801][T13521] name failslab, interval 1, probability 0, space 0, times 0 [ 894.795884][ T6281] bond5: (slave dummy0): failed to get link speed/duplex [ 894.818596][T13520] netlink: 'syz.3.10238': attribute type 5 has an invalid length. [ 894.955805][ T5803] tipc: Node number set to 2886997007 [ 894.985402][T30431] bond5: (slave dummy0): failed to get link speed/duplex [ 895.088669][T13536] netlink: 68 bytes leftover after parsing attributes in process `syz.6.10241'. [ 895.157251][T13538] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10240'. [ 895.231414][T13521] CPU: 0 UID: 0 PID: 13521 Comm: syz.2.10235 Not tainted syzkaller #0 PREEMPT(full) [ 895.231444][T13521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 895.231455][T13521] Call Trace: [ 895.231462][T13521] [ 895.231470][T13521] dump_stack_lvl+0xe8/0x150 [ 895.231498][T13521] should_fail_ex+0x40c/0x560 [ 895.231521][T13521] should_failslab+0xa8/0x100 [ 895.231546][T13521] __kmalloc_cache_node_noprof+0x8c/0x690 [ 895.231571][T13521] ? __get_vm_area_node+0x136/0x300 [ 895.231602][T13521] __get_vm_area_node+0x136/0x300 [ 895.231619][T13521] ? is_bpf_text_address+0x26/0x2b0 [ 895.231646][T13521] __vmalloc_node_range_noprof+0x358/0x1730 [ 895.231666][T13521] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 895.231687][T13521] ? lock_release+0x4b/0x3c0 [ 895.231710][T13521] ? lock_release+0x4b/0x3c0 [ 895.231733][T13521] ? is_bpf_text_address+0x292/0x2b0 [ 895.231757][T13521] ? lock_release+0x4b/0x3c0 [ 895.231783][T13521] ? arch_stack_walk+0xfb/0x150 [ 895.231801][T13521] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 895.231819][T13521] ? __might_fault+0xaf/0x130 [ 895.231836][T13521] ? rcu_is_watching+0x15/0xb0 [ 895.231853][T13521] ? lock_acquire+0x5f/0x350 [ 895.231873][T13521] ? aa_file_perm+0x18b/0x15f0 [ 895.231892][T13521] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 895.231910][T13521] __vmalloc_noprof+0xd2/0x120 [ 895.231928][T13521] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 895.231955][T13521] bpf_prog_alloc_no_stats+0x47/0x4f0 [ 895.231975][T13521] ? bpf_prog_alloc+0x2a/0x1a0 [ 895.231996][T13521] bpf_prog_alloc+0x3c/0x1a0 [ 895.232017][T13521] bpf_prog_load+0x788/0x1a10 [ 895.232040][T13521] ? rcu_is_watching+0x15/0xb0 [ 895.232055][T13521] ? get_pid_task+0x20/0x1f0 [ 895.232072][T13521] ? get_pid_task+0x20/0x1f0 [ 895.232087][T13521] ? __pfx_bpf_prog_load+0x10/0x10 [ 895.232106][T13521] ? __might_fault+0xaf/0x130 [ 895.232130][T13521] ? __might_fault+0xaf/0x130 [ 895.232148][T13521] ? __might_fault+0xcb/0x130 [ 895.232166][T13521] ? bpf_lsm_bpf+0x9/0x20 [ 895.232188][T13521] ? security_bpf+0x7e/0x2d0 [ 895.232213][T13521] __sys_bpf+0x618/0x950 [ 895.232234][T13521] ? __pfx___sys_bpf+0x10/0x10 [ 895.232261][T13521] ? ksys_write+0x242/0x270 [ 895.232283][T13521] ? __pfx_ksys_write+0x10/0x10 [ 895.232304][T13521] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 895.232320][T13521] __x64_sys_bpf+0x7c/0x90 [ 895.232339][T13521] do_syscall_64+0x174/0x580 [ 895.232360][T13521] ? clear_bhb_loop+0x40/0x90 [ 895.232379][T13521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 895.232394][T13521] RIP: 0033:0x7fd4c2d9ce59 [ 895.232412][T13521] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 895.232426][T13521] RSP: 002b:00007fd4c3c32028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 895.232446][T13521] RAX: ffffffffffffffda RBX: 00007fd4c3016090 RCX: 00007fd4c2d9ce59 [ 895.232458][T13521] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 895.232469][T13521] RBP: 00007fd4c3c32090 R08: 0000000000000000 R09: 0000000000000000 [ 895.232479][T13521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 895.232489][T13521] R13: 00007fd4c3016128 R14: 00007fd4c3016090 R15: 00007ffd63b21878 [ 895.232508][T13521] [ 895.700125][T13513] xfrm0 speed is unknown, defaulting to 1000 [ 895.709404][T13513] lo speed is unknown, defaulting to 1000 [ 895.847748][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 896.500994][T13521] syz.2.10235: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 896.524651][T13568] netlink: 'syz.2.10235': attribute type 11 has an invalid length. [ 896.535607][T13568] siw: device registration error -23 [ 896.541499][T13521] CPU: 1 UID: 0 PID: 13521 Comm: syz.2.10235 Not tainted syzkaller #0 PREEMPT(full) [ 896.541527][T13521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 896.541537][T13521] Call Trace: [ 896.541546][T13521] [ 896.541554][T13521] dump_stack_lvl+0xe8/0x150 [ 896.541580][T13521] warn_alloc+0x249/0x340 [ 896.541603][T13521] ? __pfx_warn_alloc+0x10/0x10 [ 896.541625][T13521] ? __get_vm_area_node+0x136/0x300 [ 896.541647][T13521] ? __get_vm_area_node+0x2af/0x300 [ 896.541667][T13521] __vmalloc_node_range_noprof+0x37d/0x1730 [ 896.541687][T13521] ? lock_release+0x4b/0x3c0 [ 896.541709][T13521] ? lock_release+0x4b/0x3c0 [ 896.541732][T13521] ? is_bpf_text_address+0x292/0x2b0 [ 896.541759][T13521] ? lock_release+0x4b/0x3c0 [ 896.541779][T13521] ? arch_stack_walk+0xfb/0x150 [ 896.541798][T13521] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 896.541817][T13521] ? __might_fault+0xaf/0x130 [ 896.541835][T13521] ? rcu_is_watching+0x15/0xb0 [ 896.541853][T13521] ? lock_acquire+0x5f/0x350 [ 896.541873][T13521] ? aa_file_perm+0x18b/0x15f0 [ 896.541893][T13521] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 896.541913][T13521] __vmalloc_noprof+0xd2/0x120 [ 896.541932][T13521] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 896.541954][T13521] bpf_prog_alloc_no_stats+0x47/0x4f0 [ 896.541975][T13521] ? bpf_prog_alloc+0x2a/0x1a0 [ 896.541996][T13521] bpf_prog_alloc+0x3c/0x1a0 [ 896.542017][T13521] bpf_prog_load+0x788/0x1a10 [ 896.542038][T13521] ? rcu_is_watching+0x15/0xb0 [ 896.542053][T13521] ? get_pid_task+0x20/0x1f0 [ 896.542071][T13521] ? get_pid_task+0x20/0x1f0 [ 896.542094][T13521] ? __pfx_bpf_prog_load+0x10/0x10 [ 896.542114][T13521] ? __might_fault+0xaf/0x130 [ 896.542137][T13521] ? __might_fault+0xaf/0x130 [ 896.542154][T13521] ? __might_fault+0xcb/0x130 [ 896.542172][T13521] ? bpf_lsm_bpf+0x9/0x20 [ 896.542194][T13521] ? security_bpf+0x7e/0x2d0 [ 896.542218][T13521] __sys_bpf+0x618/0x950 [ 896.542240][T13521] ? __pfx___sys_bpf+0x10/0x10 [ 896.542266][T13521] ? ksys_write+0x242/0x270 [ 896.542288][T13521] ? __pfx_ksys_write+0x10/0x10 [ 896.542309][T13521] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 896.542326][T13521] __x64_sys_bpf+0x7c/0x90 [ 896.542345][T13521] do_syscall_64+0x174/0x580 [ 896.542369][T13521] ? clear_bhb_loop+0x40/0x90 [ 896.542388][T13521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 896.542405][T13521] RIP: 0033:0x7fd4c2d9ce59 [ 896.542421][T13521] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 896.542436][T13521] RSP: 002b:00007fd4c3c32028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 896.542456][T13521] RAX: ffffffffffffffda RBX: 00007fd4c3016090 RCX: 00007fd4c2d9ce59 [ 896.542469][T13521] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 896.542480][T13521] RBP: 00007fd4c3c32090 R08: 0000000000000000 R09: 0000000000000000 [ 896.542490][T13521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 896.542501][T13521] R13: 00007fd4c3016128 R14: 00007fd4c3016090 R15: 00007ffd63b21878 [ 896.542520][T13521] [ 896.542910][T13521] Mem-Info: [ 896.844646][ T5305] Bluetooth: hci1: command tx timeout [ 896.902211][T13521] active_anon:6740 inactive_anon:0 isolated_anon:0 [ 896.902211][T13521] active_file:3261 inactive_file:40656 isolated_file:0 [ 896.902211][T13521] unevictable:3832 dirty:126 writeback:0 [ 896.902211][T13521] slab_reclaimable:14485 slab_unreclaimable:306046 [ 896.902211][T13521] mapped:47230 shmem:4496 pagetables:1467 [ 896.902211][T13521] sec_pagetables:0 bounce:0 [ 896.902211][T13521] kernel_misc_reclaimable:0 [ 896.902211][T13521] free:1057215 free_pcp:28119 free_cma:0 [ 896.959490][T13521] Node 0 active_anon:26960kB inactive_anon:0kB active_file:13044kB inactive_file:162416kB unevictable:13792kB isolated(anon):0kB isolated(file):0kB mapped:37464kB dirty:500kB writeback:0kB shmem:16448kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:19692kB pagetables:5740kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 897.001580][T13521] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:151552kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 897.039481][T13521] Node 0 DMA free:11172kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:92kB local_pcp:76kB free_cma:0kB [ 897.078309][T13521] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 897.085951][T13521] Node 0 DMA32 free:1132828kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26912kB inactive_anon:0kB active_file:13044kB inactive_file:162416kB unevictable:13824kB writepending:504kB zspages:0kB present:3129332kB managed:2552592kB mlocked:12288kB bounce:0kB free_pcp:45948kB local_pcp:16704kB free_cma:0kB [ 897.123472][T13521] lowmem_reserve[]: 0 0 0 0 0 [ 897.129379][T13521] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:664kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 897.165582][T13521] lowmem_reserve[]: 0 0 0 0 0 [ 897.170852][T13521] Node 1 Normal free:3087788kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:63520kB local_pcp:32528kB free_cma:0kB [ 897.214370][T13521] lowmem_reserve[]: 0 0 0 0 0 [ 897.220205][T13521] Node 0 DMA: 3*4kB (U) 1*8kB (U) 1*16kB (U) 2*32kB (U) 1*64kB (U) 2*128kB (U) 2*256kB (U) 2*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (U) = 11172kB [ 897.238926][T13521] Node 0 DMA32: 4429*4kB (UME) 9152*8kB (UME) 5322*16kB (UM) 436*32kB (UME) 616*64kB (UME) 428*128kB (UME) 551*256kB (UME) 406*512kB (UM) 300*1024kB (UM) 94*2048kB (UM) 0*4096kB = 1132884kB [ 897.260223][T13521] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 897.274829][T13521] Node 1 Normal: 6*4kB (U) 13*8kB (UM) 6*16kB (UM) 6*32kB (UM) 19*64kB (UM) 13*128kB (UM) 13*256kB (UM) 14*512kB (UM) 10*1024kB (UM) 6*2048kB (U) 745*4096kB (UM) = 3087840kB [ 897.296421][T13521] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 897.307506][T13521] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 897.323862][T13521] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 897.336242][T13521] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 897.347147][T13521] 48418 total pagecache pages [ 897.352226][T13521] 0 pages in swap cache [ 897.357875][T13521] Free swap = 124996kB [ 897.362329][T13521] Total swap = 124996kB [ 897.372357][T13521] 2097051 pages RAM [ 897.377507][T13521] 0 pages HighMem/MovableOnly [ 897.382930][T13521] 427122 pages reserved [ 897.388374][T13521] 0 pages cma reserved [ 898.534411][T13582] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10248'. [ 898.570824][T13513] bridge0: port 1(bridge_slave_0) entered blocking state [ 898.579945][T13513] bridge0: port 1(bridge_slave_0) entered disabled state [ 898.588391][T13513] bridge_slave_0: entered allmulticast mode [ 898.598124][T13513] bridge_slave_0: entered promiscuous mode [ 898.608813][T13513] bridge0: port 2(bridge_slave_1) entered blocking state [ 898.617202][T13513] bridge0: port 2(bridge_slave_1) entered disabled state [ 898.625723][T13513] bridge_slave_1: entered allmulticast mode [ 898.635510][T13513] bridge_slave_1: entered promiscuous mode [ 898.677167][T13513] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 898.691905][T13513] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 898.737556][T13513] team0: Port device team_slave_0 added [ 898.746592][ T3355] net_ratelimit: 10 callbacks suppressed [ 898.746643][ T3355] bond5: (slave dummy0): failed to get link speed/duplex [ 898.820168][T13585] 8021q: adding VLAN 0 to HW filter on device bond8 [ 898.832869][T13590] netlink: 68 bytes leftover after parsing attributes in process `syz.3.10252'. [ 898.854026][T13513] team0: Port device team_slave_1 added [ 898.896593][ T5305] Bluetooth: hci1: command tx timeout [ 898.931460][T13581] 8021q: adding VLAN 0 to HW filter on device bond8 [ 898.940827][T13581] bond8: (slave nlmon0): The slave device specified does not support setting the MAC address [ 898.956216][T13581] bond8: (slave nlmon0): Error -95 calling set_mac_address [ 899.010713][T13513] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 899.046328][T13513] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 899.097031][T13513] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 899.112758][T13513] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 899.121156][T13513] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 899.180042][T13513] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 899.251209][T13607] netlink: 'syz.1.10259': attribute type 1 has an invalid length. [ 899.264378][T13607] netlink: 'syz.1.10259': attribute type 2 has an invalid length. [ 899.278273][T13607] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10259'. [ 899.398942][T13617] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10261'. [ 899.423563][T13513] hsr_slave_0: entered promiscuous mode [ 899.452915][T13513] hsr_slave_1: entered promiscuous mode [ 899.468451][T13513] debugfs: 'hsr0' already exists in 'hsr' [ 899.477278][T13513] Cannot create hsr debugfs directory [ 899.500013][T13627] netlink: 'syz.2.10263': attribute type 9 has an invalid length. [ 899.514818][ T3355] bond5: (slave dummy0): failed to get link speed/duplex [ 899.582998][T13629] netlink: 68 bytes leftover after parsing attributes in process `syz.6.10264'. [ 899.904874][ T3355] bond5: (slave dummy0): failed to get link speed/duplex [ 899.921206][T13642] siw: device registration error -23 [ 900.019501][T13646] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10270'. [ 900.030054][ T6281] bond5: (slave dummy0): failed to get link speed/duplex [ 900.052827][T13646] erspan0: entered promiscuous mode [ 900.146691][T10247] bond5: (slave dummy0): failed to get link speed/duplex [ 900.172413][T13651] netlink: 'syz.1.10273': attribute type 4 has an invalid length. [ 900.197615][T13651] netlink: 'syz.1.10273': attribute type 4 has an invalid length. [ 900.216011][T13654] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10274'. [ 900.229143][T13653] sit1: entered promiscuous mode [ 900.235603][T13656] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10274'. [ 900.354978][ T3355] bond5: (slave dummy0): failed to get link speed/duplex [ 900.420782][T13672] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 900.464670][T30430] bond5: (slave dummy0): failed to get link speed/duplex [ 900.585201][T10247] bond5: (slave dummy0): failed to get link speed/duplex [ 900.626035][T13682] bond8: Unable to set peer notification delay as MII monitoring is disabled [ 900.639140][T13682] bond8 (unregistering): Released all slaves [ 900.675774][T13680] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10281'. [ 900.699071][T30425] bond5: (slave dummy0): failed to get link speed/duplex [ 900.816062][T10247] bond5: (slave dummy0): failed to get link speed/duplex [ 900.976563][ T5305] Bluetooth: hci1: command tx timeout [ 901.053437][T13695] netlink: 16 bytes leftover after parsing attributes in process `syz.6.10287'. [ 901.625713][T13718] netlink: 'syz.2.10292': attribute type 1 has an invalid length. [ 902.212102][T13737] tipc: Enabling of bearer rejected, failed to enable media [ 903.044796][ T5305] Bluetooth: hci1: command tx timeout [ 903.842250][T30430] net_ratelimit: 23 callbacks suppressed [ 903.842495][T30430] bond5: (slave dummy0): failed to get link speed/duplex [ 903.903440][T13791] __nla_validate_parse: 1 callbacks suppressed [ 903.903478][T13791] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10314'. [ 904.016696][T30431] bond5: (slave dummy0): failed to get link speed/duplex [ 904.083520][T13801] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10315'. [ 904.147276][T30425] bond5: (slave dummy0): failed to get link speed/duplex [ 904.275175][T30425] bond5: (slave dummy0): failed to get link speed/duplex [ 904.315881][T13816] netlink: 88 bytes leftover after parsing attributes in process `syz.2.10309'. [ 904.327151][T13816] netlink: 88 bytes leftover after parsing attributes in process `syz.2.10309'. [ 904.404789][T10247] bond5: (slave dummy0): failed to get link speed/duplex [ 904.514738][ T3355] bond5: (slave dummy0): failed to get link speed/duplex [ 904.625171][T10247] bond5: (slave dummy0): failed to get link speed/duplex [ 904.734833][T30425] bond5: (slave dummy0): failed to get link speed/duplex [ 904.844835][T10247] bond5: (slave dummy0): failed to get link speed/duplex [ 904.964886][ T3355] bond5: (slave dummy0): failed to get link speed/duplex [ 907.206469][T13807] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 907.433949][T13835] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10323'. [ 907.458821][T13835] netlink: 48 bytes leftover after parsing attributes in process `syz.6.10323'. [ 907.534423][T13846] netlink: 'syz.3.10326': attribute type 1 has an invalid length. [ 907.543280][T13846] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10326'. [ 907.604400][T13848] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10328'. [ 908.030898][T13857] gtp0: entered allmulticast mode [ 908.202480][T13866] netlink: 36 bytes leftover after parsing attributes in process `syz.2.10330'. [ 908.263197][T13861] sit0: left promiscuous mode [ 908.523025][T13861] bond2: left promiscuous mode [ 908.541853][T13861] team1: left promiscuous mode [ 908.551620][T13861] team2: left promiscuous mode [ 908.563401][T13861] geneve2: left promiscuous mode [ 908.687589][T13205] block nbd4: Receive control failed (result -32) [ 908.848165][T13891] xt_hashlimit: size too large, truncated to 1048576 [ 909.004737][T30425] net_ratelimit: 32 callbacks suppressed [ 909.004776][T30425] bond5: (slave dummy0): failed to get link speed/duplex [ 909.155199][T30425] bond5: (slave dummy0): failed to get link speed/duplex [ 909.264733][T10247] bond5: (slave dummy0): failed to get link speed/duplex [ 909.363581][T13899] netlink: 56 bytes leftover after parsing attributes in process `syz.6.10340'. [ 909.415333][T13906] netlink: 'syz.3.10342': attribute type 1 has an invalid length. [ 909.426151][ T3355] bond5: (slave dummy0): failed to get link speed/duplex [ 909.453017][T13906] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10342'. [ 909.507419][T13906] hmac(sha2: entered promiscuous mode [ 909.566985][T13927] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10344'. [ 909.622607][T13935] netlink: 256 bytes leftover after parsing attributes in process `syz.3.10345'. [ 909.647088][T13935] netlink: 256 bytes leftover after parsing attributes in process `syz.3.10345'. [ 909.667523][T13917] bond5: (slave dummy0): failed to get link speed/duplex [ 909.785895][T13917] bond5: (slave dummy0): failed to get link speed/duplex [ 909.882165][T13948] netlink: 'syz.3.10348': attribute type 23 has an invalid length. [ 909.897818][T13949] syzkaller0: entered promiscuous mode [ 909.903940][T13948] netlink: 'syz.3.10348': attribute type 21 has an invalid length. [ 909.915608][T13949] syzkaller0: entered allmulticast mode [ 909.922390][T13948] IPv6: NLM_F_CREATE should be specified when creating new route [ 909.936443][T13930] bond5: (slave dummy0): failed to get link speed/duplex [ 909.943608][T13948] IPVS: set_ctl: invalid protocol: 19 10.1.1.2:20003 [ 909.993842][T13952] x_tables: duplicate underflow at hook 2 [ 910.064828][T13930] bond5: (slave dummy0): failed to get link speed/duplex [ 910.071328][T13960] netlink: 'syz.1.10353': attribute type 11 has an invalid length. [ 910.178795][T13917] bond5: (slave dummy0): failed to get link speed/duplex [ 910.215933][T13966] siw: device registration error -23 [ 910.222586][T13966] netlink: 60 bytes leftover after parsing attributes in process `syz.3.10354'. [ 910.263129][T13969] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 910.272586][T13969] bridge4: entered promiscuous mode [ 910.278984][T13969] bridge4: entered allmulticast mode [ 910.295023][T13933] bond5: (slave dummy0): failed to get link speed/duplex [ 910.382345][T13973] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10356'. [ 910.470720][T13975] bond5: (slave dummy0): Releasing backup interface [ 910.495074][T13975] batman_adv: batadv0: Adding interface: dummy0 [ 910.502012][T13975] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 910.531875][T13975] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 910.832819][T13982] syzkaller0: entered promiscuous mode [ 910.839035][T13982] syzkaller0: entered allmulticast mode [ 911.132392][T13990] netlink: 'syz.1.10361': attribute type 3 has an invalid length. [ 911.372446][T14005] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10364'. [ 911.749133][T14016] netlink: 28 bytes leftover after parsing attributes in process `syz.6.10367'. [ 911.768313][T14019] netlink: 183488 bytes leftover after parsing attributes in process `syz.3.10368'. [ 911.950295][T14029] netlink: 'syz.2.10365': attribute type 11 has an invalid length. [ 912.138263][T14038] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 912.401143][T14044] syzkaller1: entered promiscuous mode [ 912.408808][T14044] syzkaller1: entered allmulticast mode [ 912.512492][T14061] netlink: 'syz.3.10379': attribute type 1 has an invalid length. [ 912.603131][T14061] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 913.284916][T13999] Bluetooth: hci2: command 0x0406 tx timeout [ 913.385579][T14087] netlink: 'syz.1.10385': attribute type 1 has an invalid length. [ 913.456013][T14087] 8021q: adding VLAN 0 to HW filter on device bond9 [ 913.552835][T14089] bond9: (slave veth7): Enslaving as an active interface with a down link [ 914.426379][T14108] __nla_validate_parse: 3 callbacks suppressed [ 914.426463][T14108] netlink: 80 bytes leftover after parsing attributes in process `syz.2.10390'. [ 914.800462][T14118] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 914.817619][T14107] xfrm0 speed is unknown, defaulting to 1000 [ 914.954007][T14107] lo speed is unknown, defaulting to 1000 [ 915.001596][T14126] xfrm0 speed is unknown, defaulting to 1000 [ 915.015707][T14131] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10398'. [ 915.035884][T14131] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10398'. [ 915.057488][T14132] netlink: 44 bytes leftover after parsing attributes in process `syz.6.10397'. [ 915.075839][T14132] netlink: 47 bytes leftover after parsing attributes in process `syz.6.10397'. [ 915.104959][T14132] netlink: 'syz.6.10397': attribute type 6 has an invalid length. [ 915.125414][T14132] netlink: 'syz.6.10397': attribute type 6 has an invalid length. [ 915.132107][T14136] ip6gretap0: entered promiscuous mode [ 915.155512][T14136] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10398'. [ 915.310187][T14126] lo speed is unknown, defaulting to 1000 [ 915.392908][T14127] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10396'. [ 916.333349][T14162] netlink: 'syz.3.10407': attribute type 1 has an invalid length. [ 916.345272][T14162] netlink: 476 bytes leftover after parsing attributes in process `syz.3.10407'. [ 916.358254][T14162] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.10407'. [ 916.382874][T14163] siw: device registration error -23 [ 916.572849][T14168] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 916.589115][T14170] net_ratelimit: 2 callbacks suppressed [ 916.589149][T14170] openvswitch: netlink: Multiple metadata blocks provided [ 917.191365][T14183] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10413'. [ 917.279931][T14185] xfrm0 speed is unknown, defaulting to 1000 [ 917.291735][T14185] lo speed is unknown, defaulting to 1000 [ 917.671970][T14200] sctp: [Deprecated]: syz.1.10419 (pid 14200) Use of int in max_burst socket option. [ 917.671970][T14200] Use struct sctp_assoc_value instead [ 917.822584][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802bbab000: rx timeout, send abort [ 917.831959][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88802bbab000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 919.207411][T14238] syzkaller0: entered promiscuous mode [ 919.243101][T14238] syzkaller0: entered allmulticast mode [ 919.447351][T14251] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10436'. [ 919.674900][T14264] netlink: 'syz.6.10440': attribute type 1 has an invalid length. [ 919.686666][T14264] netlink: 96 bytes leftover after parsing attributes in process `syz.6.10440'. [ 919.698054][T14264] netlink: 'syz.6.10440': attribute type 1 has an invalid length. [ 919.703255][T14267] pimreg: entered allmulticast mode [ 919.708809][T14264] netlink: 'syz.6.10440': attribute type 8 has an invalid length. [ 919.722155][T14264] netlink: 582 bytes leftover after parsing attributes in process `syz.6.10440'. [ 919.722491][T14270] netlink: 44 bytes leftover after parsing attributes in process `syz.3.10441'. [ 919.767499][T14267] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10439'. [ 919.830192][T14275] netlink: 24 bytes leftover after parsing attributes in process `syz.6.10442'. [ 919.917680][T14281] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10443'. [ 919.936888][T14281] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10443'. [ 919.980707][T14281] batman_adv: batadv0: Removing interface: dummy0 [ 920.008815][T21861] IPVS: starting estimator thread 0... [ 920.064110][T14289] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10446'. [ 920.114804][T14287] IPVS: using max 58 ests per chain, 139200 per kthread [ 920.190521][T14294] netlink: 'syz.1.10448': attribute type 13 has an invalid length. [ 920.369595][T14304] netlink: 'syz.2.10445': attribute type 1 has an invalid length. [ 920.390278][T14294] netlink: 'syz.1.10448': attribute type 1 has an invalid length. [ 920.473120][T14309] vxcan0: tx drop: invalid sa for name 0x0000000000000002 [ 920.551635][T14313] netlink: 'syz.3.10452': attribute type 4 has an invalid length. [ 920.552575][T14315] netlink: 'syz.3.10452': attribute type 4 has an invalid length. [ 920.915295][T14294] 8021q: adding VLAN 0 to HW filter on device bond10 [ 920.938199][T14318] bond10: (slave syz_tun): Enslaving as a backup interface with an up link [ 921.088631][T14338] netlink: 'syz.3.10456': attribute type 62 has an invalid length. [ 921.347746][T14350] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10459'. [ 921.412525][T14356] sctp: [Deprecated]: syz.1.10461 (pid 14356) Use of int in max_burst socket option. [ 921.412525][T14356] Use struct sctp_assoc_value instead [ 921.935992][T14384] SET target dimension over the limit! [ 922.019456][T14389] siw: device registration error -23 [ 922.228478][T14401] netlink: 'syz.1.10474': attribute type 6 has an invalid length. [ 922.352391][T14401] xt_TPROXY: Can be used only with -p tcp or -p udp [ 922.892738][T14410] batadv_slave_1: entered promiscuous mode [ 922.903455][T14410] batadv_slave_1: left promiscuous mode [ 923.442825][T14442] IPVS: stopping backup sync thread 14038 ... [ 923.522675][T14444] gretap0: entered promiscuous mode [ 923.529754][T14444] macvtap1: entered promiscuous mode [ 923.536540][T14444] macvtap1: entered allmulticast mode [ 923.542557][T14444] gretap0: entered allmulticast mode [ 923.927076][T14469] tap0: tun_chr_ioctl cmd 1074025673 [ 923.933048][T14469] tap0: tun_chr_ioctl cmd 1074025672 [ 923.943271][T14469] tap0: ignored: set checksum disabled [ 924.208759][T14490] IPv6: NLM_F_CREATE should be specified when creating new route [ 924.220916][T14491] IPv6: NLM_F_CREATE should be specified when creating new route [ 924.259344][T14489] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 924.345590][T14496] bond11: entered promiscuous mode [ 924.362009][T14496] 8021q: adding VLAN 0 to HW filter on device bond11 [ 924.472030][T14508] __nla_validate_parse: 24 callbacks suppressed [ 924.472065][T14508] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10498'. [ 924.535359][T14504] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10503'. [ 924.892685][T14502] 8021q: adding VLAN 0 to HW filter on device bond11 [ 924.917396][T14502] bond11: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 924.928679][T14502] bond11: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 924.946218][T14502] bond11: (slave ip6gre1): making interface the new active one [ 924.955313][T14502] ip6gre1: entered promiscuous mode [ 924.963506][T14502] bond11: (slave ip6gre1): Enslaving as an active interface with an up link [ 925.086559][T14512] netlink: 7 bytes leftover after parsing attributes in process `syz.6.10504'. [ 925.097581][T14512] netlink: 28 bytes leftover after parsing attributes in process `syz.6.10504'. [ 925.110632][T14512] netlink: 28 bytes leftover after parsing attributes in process `syz.6.10504'. [ 925.197203][T14525] validate_nla: 4 callbacks suppressed [ 925.197243][T14525] netlink: 'syz.3.10506': attribute type 1 has an invalid length. [ 925.212630][T14530] sctp: [Deprecated]: syz.1.10507 (pid 14530) Use of int in maxseg socket option. [ 925.212630][T14530] Use struct sctp_assoc_value instead [ 925.231884][T14525] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10506'. [ 925.382906][T14535] sctp: [Deprecated]: syz.1.10509 (pid 14535) Use of int in max_burst socket option. [ 925.382906][T14535] Use struct sctp_assoc_value instead [ 925.547086][T14560] xfrm0 speed is unknown, defaulting to 1000 [ 925.561282][T14560] lo speed is unknown, defaulting to 1000 [ 925.909926][T14586] Bluetooth: MGMT ver 1.23 [ 926.372355][T14602] netlink: 72 bytes leftover after parsing attributes in process `syz.1.10527'. [ 926.385559][T14603] netlink: 60 bytes leftover after parsing attributes in process `syz.3.10528'. [ 926.401214][T14599] bond12: option ad_user_port_key: invalid value (65535) [ 926.410789][T14599] bond12: option ad_user_port_key: allowed values 0 - 1023 [ 926.432452][T14599] bond12 (unregistering): Released all slaves [ 926.859718][T14620] netlink: 20 bytes leftover after parsing attributes in process `syz.6.10531'. [ 926.944009][T14624] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 927.173809][T14631] netlink: 'syz.6.10534': attribute type 12 has an invalid length. [ 927.182968][T14629] xfrm0 speed is unknown, defaulting to 1000 [ 927.195562][T14629] lo speed is unknown, defaulting to 1000 [ 927.432777][T14643] netlink: 96 bytes leftover after parsing attributes in process `syz.1.10536'. [ 928.267590][T14684] nbd: nbd1 already in use [ 928.278297][T14683] block nbd1: NBD_DISCONNECT [ 928.283575][ T5625] block nbd1: Wrong magic (0x25609513) [ 928.290500][ T5620] block nbd1: Wrong magic (0x0) [ 928.296446][T14683] block nbd1: Send disconnect failed -32 [ 928.296780][ T5620] block nbd1: Disconnected due to user request. [ 928.325041][T14683] block nbd1: Send disconnect failed -32 [ 928.332496][T14683] block nbd1: Send disconnect failed -32 [ 929.083591][T14716] IPVS: Scheduler module ip_vs_ not found [ 929.142433][T14717] xfrm0 speed is unknown, defaulting to 1000 [ 929.172135][T14717] lo speed is unknown, defaulting to 1000 [ 929.308190][T14725] syzkaller0: entered promiscuous mode [ 929.326283][T14725] syzkaller0: entered allmulticast mode [ 930.008860][T14748] __nla_validate_parse: 2 callbacks suppressed [ 930.008893][T14748] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10557'. [ 930.080458][T14748] netlink: 40 bytes leftover after parsing attributes in process `syz.6.10557'. [ 930.925615][T14781] netlink: 34 bytes leftover after parsing attributes in process `syz.1.10566'. [ 931.031647][T14788] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10568'. [ 931.068971][T14788] netlink: 36 bytes leftover after parsing attributes in process `syz.2.10568'. [ 931.150136][T14792] nbd: couldn't find a device at index 6 [ 931.272926][T14801] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10572'. [ 931.294125][T14802] sch_fq: defrate 0 ignored. [ 931.592326][T14814] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10576'. [ 931.832961][T14832] netlink: 'syz.2.10583': attribute type 12 has an invalid length. [ 932.180495][T14858] siw: device registration error -23 [ 932.290205][T14866] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10594'. [ 932.963245][T14884] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 932.976775][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 933.089011][T14906] netlink: 24 bytes leftover after parsing attributes in process `syz.6.10605'. [ 933.116488][T14906] netlink: 24 bytes leftover after parsing attributes in process `syz.6.10605'. [ 933.150472][T14908] bond0: (slave bond_slave_1): Releasing backup interface [ 933.343255][T14918] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 933.359685][T14918] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 933.609179][T14942] bond8: up delay (2) is not a multiple of miimon (80), value rounded to 0 ms [ 933.620480][T14942] bond8: entered promiscuous mode [ 933.627077][T14942] 8021q: adding VLAN 0 to HW filter on device bond8 [ 933.715037][T14948] siw: device registration error -23 [ 934.408905][T14978] lo: entered promiscuous mode [ 934.416584][T14978] tunl0: entered promiscuous mode [ 934.433154][T14978] gre0: entered promiscuous mode [ 934.477897][T14978] erspan0: entered promiscuous mode [ 934.504837][T14978] ip_vti0: entered promiscuous mode [ 934.521204][T14978] ip6_vti0: entered promiscuous mode [ 934.548147][T14978] sit0: entered promiscuous mode [ 934.583029][T14978] ip6tnl0: entered promiscuous mode [ 934.640100][T14978] ip6gre0: entered promiscuous mode [ 934.667859][T14978] syz_tun: entered promiscuous mode [ 934.680575][T14978] ip6gretap0: entered promiscuous mode [ 934.693246][T14978] bridge0: port 3(team0) entered disabled state [ 934.700384][T14978] bridge0: port 2(bridge_slave_1) entered disabled state [ 934.708162][T14978] bridge0: port 1(bridge_slave_0) entered disabled state [ 934.726675][T14978] bridge0: entered promiscuous mode [ 934.737349][T14978] vcan0: entered promiscuous mode [ 934.747789][T14978] bond0: entered promiscuous mode [ 934.754227][T14978] bond_slave_0: entered promiscuous mode [ 934.772378][T14978] dummy0: entered promiscuous mode [ 934.780239][T14978] nlmon0: entered promiscuous mode [ 934.793107][T14978] batadv0: entered promiscuous mode [ 934.808505][T14978] vxcan0: entered promiscuous mode [ 934.817168][T14978] vxcan1: entered promiscuous mode [ 934.833505][T14978] veth0: entered promiscuous mode [ 934.846630][T14978] veth1: entered promiscuous mode [ 934.858884][T14978] wg0: entered promiscuous mode [ 934.870356][T14978] wg1: entered promiscuous mode [ 934.879789][T14978] wg2: entered promiscuous mode [ 934.888659][T14978] veth0_to_bridge: entered promiscuous mode [ 934.907071][T14978] veth1_to_bridge: entered promiscuous mode [ 934.951914][T14978] veth0_to_bond: entered promiscuous mode [ 934.972385][T14978] veth1_to_bond: entered promiscuous mode [ 934.983746][T14978] bond_slave_1: entered promiscuous mode [ 934.991282][T14978] veth0_to_team: entered promiscuous mode [ 935.011837][T14978] veth1_to_team: entered promiscuous mode [ 935.032954][T14978] veth0_to_batadv: entered promiscuous mode [ 935.043028][T14978] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 935.051605][T14978] batadv_slave_0: entered promiscuous mode [ 935.062020][T14978] veth1_to_batadv: entered promiscuous mode [ 935.072748][T14978] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 935.082466][T14978] batadv_slave_1: entered promiscuous mode [ 935.094941][T14978] xfrm0: entered promiscuous mode [ 935.105688][T14978] veth0_to_hsr: entered promiscuous mode [ 935.123733][T14978] hsr0: entered promiscuous mode [ 935.133570][T14978] veth1_virt_wifi: entered promiscuous mode [ 935.146137][T14978] veth0_virt_wifi: entered promiscuous mode [ 935.195310][T14978] vlan0: entered promiscuous mode [ 935.201315][T14978] vlan1: entered promiscuous mode [ 935.208724][T14978] macvlan0: entered promiscuous mode [ 935.220159][T14978] macvlan1: entered promiscuous mode [ 935.234434][T14978] ipvlan0: entered promiscuous mode [ 935.257210][T14978] ipvlan1: entered promiscuous mode [ 935.279911][T14978] macvtap0: entered promiscuous mode [ 935.290394][T14978] macsec0: entered promiscuous mode [ 935.308978][T14978] geneve1: entered promiscuous mode [ 935.320215][T14978] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 935.330967][T14978] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 935.344039][T14978] netdevsim netdevsim3 netdevsim2: entered promiscuous mode [ 935.357057][T14978] netdevsim netdevsim3 netdevsim3: entered promiscuous mode [ 935.375616][T14978] mac80211_hwsim hwsim139 wlan1: entered promiscuous mode [ 935.388776][T14978] bond1: entered promiscuous mode [ 935.398651][T14978] sit1: entered promiscuous mode [ 935.437990][T14978] geneve2: entered promiscuous mode [ 935.450035][T14978] bond2: entered promiscuous mode [ 935.482300][T14978] bond3: entered promiscuous mode [ 935.491155][T14978] gretap1: entered promiscuous mode [ 935.501868][T14978] syztnl0: entered promiscuous mode [ 935.513483][T14978] bond4: entered promiscuous mode [ 935.527411][T14978] veth2: entered promiscuous mode [ 935.538433][T14978] veth3: entered promiscuous mode [ 935.550028][T14978] veth4: entered promiscuous mode [ 935.563324][T14978] veth5: entered promiscuous mode [ 935.573120][T14978] erspan1: entered promiscuous mode [ 935.590048][T14978] ipvlan2: entered promiscuous mode [ 935.600448][T14978] team1: entered promiscuous mode [ 935.609915][T14978] team2: entered promiscuous mode [ 935.621422][T14978] bridge2: entered promiscuous mode [ 935.635325][T14978] vxlan0: entered promiscuous mode [ 935.646183][T14978] bond5: entered promiscuous mode [ 935.655005][T14978] veth7: entered promiscuous mode [ 935.669835][T14978] veth6: entered promiscuous mode [ 935.683954][T14978] ip6tnl1: entered promiscuous mode [ 935.696593][T14978] bridge3: entered promiscuous mode [ 935.709139][T14978] vxlan1: entered promiscuous mode [ 935.720234][T14978] bond6: entered promiscuous mode [ 935.726495][T14978] bridge4: entered promiscuous mode [ 935.738625][T14978] bond7: entered promiscuous mode [ 935.748216][T14978] veth8: entered promiscuous mode [ 935.760913][T14978] veth9: entered promiscuous mode [ 935.771458][T14978] vxlan2: entered promiscuous mode [ 935.779328][T14978] netdevsim0.0: entered promiscuous mode [ 935.785778][T14978] ip6tnl2: entered promiscuous mode [ 935.796776][T14978] sit2: entered promiscuous mode [ 935.836549][T14978] macvlan3: entered promiscuous mode [ 935.842546][T14978] macvlan4: entered promiscuous mode [ 935.848849][T14978] ip6erspan0: entered promiscuous mode [ 935.855635][T14978] gre1: entered promiscuous mode [ 935.870731][T14978] ip6erspan1: entered promiscuous mode [ 935.878101][T14978] gretap0: left allmulticast mode [ 935.883911][T14978] macvtap1: left allmulticast mode [ 935.896401][T14978] mac80211_hwsim hwsim157 wlan0: entered promiscuous mode [ 935.904464][T14978] mac80211_hwsim hwsim158 wlan2: entered promiscuous mode [ 935.919907][T14978] bridge5: entered promiscuous mode [ 936.053054][ T3355] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 936.065998][ T3355] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 936.076578][ T3355] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 936.105255][ T3355] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 936.135111][ T3355] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 936.157657][ T3355] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 936.200012][T14996] vlan3: entered promiscuous mode [ 936.207441][T14996] bond0: entered promiscuous mode [ 936.239589][ T3355] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 936.253273][ T3355] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 936.400024][T15012] __nla_validate_parse: 8 callbacks suppressed [ 936.400055][T15012] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10636'. [ 936.424893][T15012] netlink: 'syz.1.10636': attribute type 7 has an invalid length. [ 936.455113][T15012] netlink: 'syz.1.10636': attribute type 8 has an invalid length. [ 936.465317][T15012] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10636'. [ 936.542766][T15023] netlink: 'syz.1.10640': attribute type 8 has an invalid length. [ 936.822132][T15036] siw: device registration error -23 [ 937.030939][T15047] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10645'. [ 937.051328][T13929] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 937.051406][T15047] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10645'. [ 937.051467][T13929] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 937.081523][T13929] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 937.095895][T13929] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 937.144028][T15053] veth0: entered promiscuous mode [ 937.155731][T15053] veth0: left promiscuous mode [ 937.283707][T15060] 8021q: adding VLAN 0 to HW filter on device bond12 [ 937.307287][T15058] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 937.322107][T15060] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1500) ! [ 937.334173][T15060] syzkaller0: entered promiscuous mode [ 937.340464][T15060] syzkaller0: entered allmulticast mode [ 937.655503][T15075] netlink: 'syz.2.10654': attribute type 21 has an invalid length. [ 937.665839][T15075] netlink: 'syz.2.10654': attribute type 6 has an invalid length. [ 937.688485][T15075] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10654'. [ 937.789774][T15080] netlink: 24 bytes leftover after parsing attributes in process `syz.6.10657'. [ 938.053827][T15092] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10661'. [ 938.130571][T15094] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10662'. [ 938.482865][T15105] tipc: Enabling of bearer rejected, failed to enable media [ 938.587570][T15110] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10668'. [ 938.604989][T15117] syzkaller0: refused to change device tx_queue_len [ 938.731540][T15120] netlink: 'syz.3.10671': attribute type 13 has an invalid length. [ 938.758354][T15120] erspan0: refused to change device tx_queue_len [ 938.770894][T15120] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 938.884668][ T50] Bluetooth: hci5: command 0x0406 tx timeout [ 938.917974][T15124] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.10672'. [ 939.070748][T15138] netlink: 'syz.1.10674': attribute type 1 has an invalid length. [ 939.102345][T15138] 8021q: adding VLAN 0 to HW filter on device bond13 [ 939.141339][T15138] bond13: (slave veth9): Enslaving as an active interface with a down link [ 939.169791][T15138] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 939.180851][T15138] bond13: (slave batadv2): making interface the new active one [ 939.191579][T15138] batadv2: entered promiscuous mode [ 939.197836][T15138] bond13: (slave batadv2): Enslaving as an active interface with an up link [ 939.276369][T15146] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 939.363756][T15150] syzkaller0: entered promiscuous mode [ 939.370831][T15150] syzkaller0: entered allmulticast mode [ 939.812652][T15174] IPVS: Unknown mcast interface: pimreg0 [ 940.110848][T15197] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 940.273190][T15210] netlink: 'syz.1.10694': attribute type 4 has an invalid length. [ 940.323759][T13923] tipc: Subscription rejected, illegal request [ 940.512864][T15210] bond14: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 940.551733][T15210] bond14 (unregistering): Released all slaves [ 940.585567][T15222] bond_slave_1: left promiscuous mode [ 940.591430][T15222] bond_slave_1: entered allmulticast mode [ 941.482063][T15279] __nla_validate_parse: 12 callbacks suppressed [ 941.482095][T15279] netlink: 112 bytes leftover after parsing attributes in process `syz.6.10710'. [ 941.513328][T15279] netlink: 'syz.6.10710': attribute type 1 has an invalid length. [ 941.577644][T15288] netlink: 28 bytes leftover after parsing attributes in process `syz.6.10710'. [ 941.796715][T15299] xt_limit: Overflow, try lower: 268435456/134217728 [ 941.808560][T15301] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10717'. [ 941.826833][T15299] netlink: 20 bytes leftover after parsing attributes in process `syz.6.10716'. [ 941.853882][T15299] netlink: 20 bytes leftover after parsing attributes in process `syz.6.10716'. [ 941.870339][T15299] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.10716'. [ 942.141778][T15313] tun0: tun_chr_ioctl cmd 1074025673 [ 942.141807][T15315] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10722'. [ 942.141837][T15315] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10722'. [ 942.187520][T15321] netlink: 'syz.2.10714': attribute type 4 has an invalid length. [ 942.195696][T15322] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10724'. [ 942.197276][T15322] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10724'. [ 942.244350][T15321] netlink: 'syz.2.10714': attribute type 4 has an invalid length. [ 942.313578][T15321] xt_CT: You must specify a L4 protocol and not use inversions on it [ 942.749340][T15344] xt_hashlimit: size too large, truncated to 1048576 [ 942.801117][T15346] xt_hashlimit: size too large, truncated to 1048576 [ 942.890065][T15346] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 943.224830][T15355] openvswitch: netlink: IPv4 tun info is not correct [ 943.257732][T15355] geneve0: entered promiscuous mode [ 943.264108][T15355] macvlan3: entered promiscuous mode [ 943.452980][T15363] tcf_pedit_act: 22 callbacks suppressed [ 943.453008][T15363] tc action pedit 'at' offset -4096 out of bounds [ 943.466331][T15363] tc action pedit 'at' offset -4096 out of bounds [ 943.473435][T15363] tc action pedit 'at' offset -4096 out of bounds [ 943.480455][T15363] tc action pedit 'at' offset -4096 out of bounds [ 943.487478][T15363] tc action pedit 'at' offset -4096 out of bounds [ 943.494534][T15363] tc action pedit 'at' offset -4096 out of bounds [ 943.501555][T15363] tc action pedit 'at' offset -4096 out of bounds [ 943.508878][T15363] tc action pedit 'at' offset -4096 out of bounds [ 943.516135][T15363] tc action pedit 'at' offset -4096 out of bounds [ 943.523076][T15363] tc action pedit 'at' offset -4096 out of bounds [ 943.530047][T15363] TC_ACT_REPEAT abuse ? [ 943.831178][T15379] netlink: 'syz.3.10739': attribute type 1 has an invalid length. [ 943.840291][T15379] netlink: 'syz.3.10739': attribute type 8 has an invalid length. [ 944.294430][T15390] netlink: 'syz.2.10744': attribute type 14 has an invalid length. [ 944.368101][T15392] dummy0: entered promiscuous mode [ 944.374358][T15392] macvlan4: entered promiscuous mode [ 944.811562][T15417] FAULT_INJECTION: forcing a failure. [ 944.811562][T15417] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 944.833706][T15417] CPU: 0 UID: 0 PID: 15417 Comm: syz.2.10751 Not tainted syzkaller #0 PREEMPT(full) [ 944.833733][T15417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 944.833743][T15417] Call Trace: [ 944.833750][T15417] [ 944.833757][T15417] dump_stack_lvl+0xe8/0x150 [ 944.833781][T15417] should_fail_ex+0x40c/0x560 [ 944.833803][T15417] _copy_from_user+0x2d/0xb0 [ 944.833824][T15417] ____sys_sendmsg+0x33d/0xa20 [ 944.833853][T15417] ? __pfx_____sys_sendmsg+0x10/0x10 [ 944.833878][T15417] ? import_iovec+0x73/0xa0 [ 944.833902][T15417] ___sys_sendmsg+0x2a5/0x360 [ 944.833922][T15417] ? _parse_integer_limit+0x1ae/0x1f0 [ 944.833941][T15417] ? __pfx____sys_sendmsg+0x10/0x10 [ 944.833964][T15417] ? kstrtouint+0x6e/0xe0 [ 944.833991][T15417] ? __fget_files+0x2a/0x420 [ 944.834010][T15417] ? __fget_files+0x3a2/0x420 [ 944.834032][T15417] __sys_sendmmsg+0x273/0x4d0 [ 944.834056][T15417] ? __pfx___sys_sendmmsg+0x10/0x10 [ 944.834100][T15417] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 944.834130][T15417] ? ksys_write+0x242/0x270 [ 944.834153][T15417] ? __pfx_ksys_write+0x10/0x10 [ 944.834175][T15417] __x64_sys_sendmmsg+0xa0/0xc0 [ 944.834196][T15417] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 944.834212][T15417] do_syscall_64+0x174/0x580 [ 944.834236][T15417] ? clear_bhb_loop+0x40/0x90 [ 944.834255][T15417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 944.834271][T15417] RIP: 0033:0x7fd4c2d9ce59 [ 944.834287][T15417] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 944.834301][T15417] RSP: 002b:00007fd4c3c53028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 944.834321][T15417] RAX: ffffffffffffffda RBX: 00007fd4c3015fa0 RCX: 00007fd4c2d9ce59 [ 944.834333][T15417] RDX: 0000000000000001 RSI: 00002000000046c0 RDI: 0000000000000003 [ 944.834344][T15417] RBP: 00007fd4c3c53090 R08: 0000000000000000 R09: 0000000000000000 [ 944.834355][T15417] R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000001 [ 944.834365][T15417] R13: 00007fd4c3016038 R14: 00007fd4c3015fa0 R15: 00007ffd63b21878 [ 944.834385][T15417] [ 945.702294][T15464] siw: device registration error -23 [ 945.736080][T15453] xt_hashlimit: max too large, truncated to 1048576 [ 945.811070][T15469] netlink: 'syz.2.10765': attribute type 1 has an invalid length. [ 945.847694][T15469] 8021q: adding VLAN 0 to HW filter on device bond10 [ 945.871016][T15469] vlan0: entered allmulticast mode [ 945.876856][T15469] bond10: entered allmulticast mode [ 945.901024][T15469] bond10: (slave geneve4): making interface the new active one [ 945.909702][T15469] geneve4: entered allmulticast mode [ 945.919583][T15469] bond10: (slave geneve4): Enslaving as an active interface with an up link [ 946.053434][T15475] FAULT_INJECTION: forcing a failure. [ 946.053434][T15475] name failslab, interval 1, probability 0, space 0, times 0 [ 946.067837][T15475] CPU: 1 UID: 0 PID: 15475 Comm: syz.2.10767 Not tainted syzkaller #0 PREEMPT(full) [ 946.067862][T15475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 946.067872][T15475] Call Trace: [ 946.067879][T15475] [ 946.067885][T15475] dump_stack_lvl+0xe8/0x150 [ 946.067909][T15475] should_fail_ex+0x40c/0x560 [ 946.067929][T15475] should_failslab+0xa8/0x100 [ 946.067953][T15475] ? dst_alloc+0x105/0x170 [ 946.067981][T15475] kmem_cache_alloc_noprof+0x87/0x650 [ 946.068007][T15475] dst_alloc+0x105/0x170 [ 946.068025][T15475] xfrm_lookup_with_ifid+0x7c8/0x1b40 [ 946.068050][T15475] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 946.068070][T15475] ? l2tp_ip6_sendmsg+0xa8c/0x18e0 [ 946.068089][T15475] ? rcu_is_watching+0x15/0xb0 [ 946.068108][T15475] ? rcu_is_watching+0x15/0xb0 [ 946.068125][T15475] xfrm_lookup_route+0x3c/0x1c0 [ 946.068146][T15475] l2tp_ip6_sendmsg+0x1059/0x18e0 [ 946.068170][T15475] ? __pfx_l2tp_ip6_sendmsg+0x10/0x10 [ 946.068197][T15475] ? __pfx_aa_sk_perm+0x10/0x10 [ 946.068219][T15475] ? tomoyo_socket_sendmsg_permission+0x215/0x300 [ 946.068241][T15475] ? inet_sendmsg+0x298/0x320 [ 946.068259][T15475] ? __pfx_inet_sendmsg+0x10/0x10 [ 946.068277][T15475] ____sys_sendmsg+0x853/0xa20 [ 946.068314][T15475] ? __pfx_____sys_sendmsg+0x10/0x10 [ 946.068338][T15475] ? import_iovec+0x73/0xa0 [ 946.068359][T15475] ___sys_sendmsg+0x2a5/0x360 [ 946.068379][T15475] ? _parse_integer_limit+0x1ae/0x1f0 [ 946.068397][T15475] ? __pfx____sys_sendmsg+0x10/0x10 [ 946.068420][T15475] ? kstrtouint+0x6e/0xe0 [ 946.068443][T15475] ? __fget_files+0x2a/0x420 [ 946.068458][T15475] ? __fget_files+0x3a2/0x420 [ 946.068477][T15475] __sys_sendmmsg+0x273/0x4d0 [ 946.068498][T15475] ? __pfx___sys_sendmmsg+0x10/0x10 [ 946.068522][T15475] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 946.068548][T15475] ? ksys_write+0x242/0x270 [ 946.068566][T15475] ? __pfx_ksys_write+0x10/0x10 [ 946.068583][T15475] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 946.068601][T15475] __x64_sys_sendmmsg+0xa0/0xc0 [ 946.068621][T15475] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 946.068635][T15475] do_syscall_64+0x174/0x580 [ 946.068654][T15475] ? trace_irq_disable+0x3b/0x140 [ 946.068675][T15475] ? clear_bhb_loop+0x40/0x90 [ 946.068690][T15475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 946.068705][T15475] RIP: 0033:0x7fd4c2d9ce59 [ 946.068720][T15475] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 946.068732][T15475] RSP: 002b:00007fd4c3c53028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 946.068750][T15475] RAX: ffffffffffffffda RBX: 00007fd4c3015fa0 RCX: 00007fd4c2d9ce59 [ 946.068761][T15475] RDX: 0000000000000001 RSI: 00002000000046c0 RDI: 0000000000000003 [ 946.068771][T15475] RBP: 00007fd4c3c53090 R08: 0000000000000000 R09: 0000000000000000 [ 946.068782][T15475] R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000001 [ 946.068791][T15475] R13: 00007fd4c3016038 R14: 00007fd4c3015fa0 R15: 00007ffd63b21878 [ 946.068810][T15475] [ 946.451890][T15483] siw: device registration error -23 [ 946.562885][T15488] __nla_validate_parse: 19 callbacks suppressed [ 946.562902][T15488] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.10770'. [ 946.641986][T15491] netlink: 164 bytes leftover after parsing attributes in process `syz.1.10771'. [ 946.657144][T15491] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10771'. [ 946.788955][ T30] audit: type=1800 audit(1782412437.115:43): pid=15503 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.10776" name="memory.events" dev="tmpfs" ino=3067 res=0 errno=0 [ 946.812337][ T30] audit: type=1804 audit(1782412437.115:44): pid=15503 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.10776" name="/newroot/594/memory.events" dev="tmpfs" ino=3067 res=1 errno=0 [ 947.581234][T15534] netlink: 616 bytes leftover after parsing attributes in process `syz.1.10784'. [ 947.713721][T15539] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.10785'. [ 947.857407][T15546] syzkaller0: entered promiscuous mode [ 947.863254][T15546] syzkaller0: entered allmulticast mode [ 948.124249][T15551] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10790'. [ 948.324194][T15563] bond1: entered promiscuous mode [ 948.357224][T15562] IPVS: Error connecting to the multicast addr [ 949.186241][T15601] netlink: 36 bytes leftover after parsing attributes in process `syz.6.10802'. [ 949.198020][T15601] netlink: 80 bytes leftover after parsing attributes in process `syz.6.10802'. [ 949.242789][T15604] veth0: entered promiscuous mode [ 949.288705][T15607] netlink: 'syz.3.10804': attribute type 1 has an invalid length. [ 949.429335][T15605] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 949.664172][T15621] netlink: 116 bytes leftover after parsing attributes in process `syz.6.10806'. [ 949.898930][T15632] openvswitch: netlink: Message has 4 unknown bytes. [ 950.083214][T15602] veth0: left promiscuous mode [ 950.126911][T15644] netlink: 'syz.6.10811': attribute type 13 has an invalid length. [ 950.408836][T15657] tap0: tun_chr_ioctl cmd 1074025677 [ 950.415484][T15657] tap0: linktype set to 787 [ 950.814778][T15678] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10824'. [ 950.826719][T13929] batadv2: left promiscuous mode [ 950.836474][T15680] siw: device registration error -23 [ 950.841802][T15681] netlink: 'syz.3.10827': attribute type 4 has an invalid length. [ 951.392489][T15713] netdevsim netdevsim2: Firmware load for './file0/file0/..' refused, path contains '..' component [ 951.418854][T15713] tc_dump_action: action bad kind [ 951.427604][T15713] netlink: 'syz.2.10834': attribute type 18 has an invalid length. [ 951.743562][T15734] netlink: 'syz.1.10840': attribute type 13 has an invalid length. [ 951.761214][T15736] __nla_validate_parse: 4 callbacks suppressed [ 951.761244][T15736] netlink: 60 bytes leftover after parsing attributes in process `syz.6.10841'. [ 951.896889][T15742] xfrm0 speed is unknown, defaulting to 1000 [ 951.908865][T15742] lo speed is unknown, defaulting to 1000 [ 952.325735][T15742] dvmrp0: entered allmulticast mode [ 952.477152][T15759] netlink: 'syz.3.10849': attribute type 4 has an invalid length. [ 952.490291][ T30] audit: type=1107 audit(1782412442.815:45): pid=15753 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 952.525415][T15763] siw: device registration error -23 [ 952.577191][T15766] siw: device registration error -23 [ 952.830870][T15773] netlink: 16 bytes leftover after parsing attributes in process `syz.6.10853'. [ 952.893791][T15775] netlink: 16 bytes leftover after parsing attributes in process `syz.6.10854'. [ 952.952312][T15780] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10855'. [ 952.986885][T15780] 8021q: adding VLAN 0 to HW filter on device bond2 [ 953.017488][T15780] bond2: (slave veth7): Enslaving as an active interface with an up link [ 953.311755][T15800] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10860'. [ 953.324711][T15800] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10860'. [ 953.829185][T15820] erspan0: entered promiscuous mode [ 953.836699][T15819] erspan0: left promiscuous mode [ 953.898376][T15822] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10866'. [ 954.098236][T15833] bond3 (unregistering): Released all slaves [ 954.288307][T15850] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10872'. [ 954.401253][T15850] 8021q: adding VLAN 0 to HW filter on device bond9 [ 954.931648][ T50] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 954.940946][ T50] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 954.950625][ T50] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 954.960455][ T50] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 954.971458][ T50] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 955.402724][T13933] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 955.478190][T15893] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 955.521266][T15832] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 955.558228][T15860] macvlan5: entered promiscuous mode [ 955.563932][T15860] macvlan5: entered allmulticast mode [ 955.572834][T15860] bond9: entered promiscuous mode [ 955.581189][T15860] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 955.591839][T15860] bond9: left promiscuous mode [ 956.142399][T15879] xfrm0 speed is unknown, defaulting to 1000 [ 956.183914][T15879] lo speed is unknown, defaulting to 1000 [ 956.408442][T15942] netlink: 192 bytes leftover after parsing attributes in process `syz.6.10884'. [ 956.631951][T15951] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10888'. [ 956.662034][T15950] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 956.864095][T15962] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap2 [ 957.044849][ T5620] Bluetooth: hci7: command tx timeout [ 957.048867][T15977] __nla_validate_parse: 1 callbacks suppressed [ 957.048896][T15977] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10893'. [ 957.077738][T15977] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.10893'. [ 957.204261][T15969] bond14: Removing last ns target with arp_interval on [ 957.248815][T15879] bridge0: port 1(bridge_slave_0) entered blocking state [ 957.256893][T15879] bridge0: port 1(bridge_slave_0) entered disabled state [ 957.265514][T15879] bridge_slave_0: entered allmulticast mode [ 957.273982][T15879] bridge_slave_0: entered promiscuous mode [ 957.285768][T15879] bridge0: port 2(bridge_slave_1) entered blocking state [ 957.293697][T15879] bridge0: port 2(bridge_slave_1) entered disabled state [ 957.302080][T15879] bridge_slave_1: entered allmulticast mode [ 957.311306][T15879] bridge_slave_1: entered promiscuous mode [ 957.361026][T15987] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10896'. [ 957.373713][T15879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 957.428915][T15987] bond10: option broadcast_neighbor: invalid value (30) [ 957.656785][T15987] bond10 (unregistering): Released all slaves [ 957.693458][T15879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 957.790306][T15879] team0: Port device team_slave_0 added [ 957.802987][T15879] team0: Port device team_slave_1 added [ 957.894059][T15879] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 957.907033][T15879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 957.955092][T16007] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10899'. [ 957.962622][T15879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 958.606811][T15879] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 958.626147][T15879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 958.668874][T15879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 958.736853][T15879] hsr_slave_0: entered promiscuous mode [ 958.745368][T15879] hsr_slave_1: entered promiscuous mode [ 958.752665][T15879] debugfs: 'hsr0' already exists in 'hsr' [ 958.759452][T15879] Cannot create hsr debugfs directory [ 959.124803][ T5620] Bluetooth: hci7: command tx timeout [ 959.242132][T16047] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10906'. [ 959.362454][T16045] vlan3: entered allmulticast mode [ 959.369302][T16045] bond0: entered allmulticast mode [ 959.414937][T16047] bond3: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 959.427944][T16047] bond3 (unregistering): Released all slaves [ 959.466166][T16055] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10908'. [ 959.629613][T16067] netlink: 40 bytes leftover after parsing attributes in process `syz.6.10911'. [ 959.710513][T16073] bond2: (slave syz_tun): Removing an active aggregator [ 959.731148][T16073] bond2: (slave syz_tun): Releasing backup interface [ 959.749611][T16073] team0: left allmulticast mode [ 959.761840][T16073] team_slave_0: left allmulticast mode [ 959.789673][T16073] team_slave_1: left allmulticast mode [ 959.808216][T16073] bridge1: left allmulticast mode [ 959.822169][T16073] bridge0: port 3(team0) entered disabled state [ 959.865889][T16073] bridge_slave_0: left allmulticast mode [ 959.880309][T16073] bridge0: port 1(bridge_slave_0) entered disabled state [ 959.889638][T16079] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10909'. [ 959.906527][T16073] bridge_slave_1: left allmulticast mode [ 959.913528][T16073] bridge0: port 2(bridge_slave_1) entered disabled state [ 959.935231][T16087] netlink: 40 bytes leftover after parsing attributes in process `syz.6.10913'. [ 959.949269][T16073] bond0: (slave bond_slave_0): Releasing backup interface [ 959.963810][T16073] team0: Port device team_slave_0 removed [ 959.979118][T16073] team0: Port device team_slave_1 removed [ 959.989683][T16073] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 959.999301][T16073] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 960.009305][T16073] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 960.301316][T16099] IPVS: set_ctl: invalid protocol: 0 20.0.0.0:768 [ 960.368522][T16109] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10915'. [ 960.681924][T16109] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci7/hci7:200/input10 [ 960.697213][T16123] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 960.957455][T16135] syzkaller0: entered promiscuous mode [ 960.976577][T16135] syzkaller0: entered allmulticast mode [ 961.209365][ T5620] Bluetooth: hci7: command tx timeout [ 961.223894][T16153] team0: Port device team_slave_0 removed [ 961.508184][T16173] syzkaller1: entered promiscuous mode [ 961.516669][T16173] syzkaller1: entered allmulticast mode [ 961.649135][T16179] syzkaller0: entered promiscuous mode [ 961.655132][T16179] syzkaller0: entered allmulticast mode [ 962.438267][T16217] __nla_validate_parse: 4 callbacks suppressed [ 962.438300][T16217] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10943'. [ 962.476133][T16217] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 962.981788][T16251] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10953'. [ 963.016601][T16254] netlink: 40 bytes leftover after parsing attributes in process `syz.6.10954'. [ 963.033297][T16251] 8021q: adding VLAN 0 to HW filter on device bond10 [ 963.094146][T16251] bond10: (slave veth13): Enslaving as an active interface with an up link [ 963.134874][T16259] bond11: entered promiscuous mode [ 963.140389][T16259] 8021q: adding VLAN 0 to HW filter on device bond11 [ 963.152645][T16262] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 963.153505][T16251] netlink: 200 bytes leftover after parsing attributes in process `syz.3.10953'. [ 963.222641][T16260] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10953'. [ 963.257111][T16260] bond10: (slave bridge7): Enslaving as an active interface with an up link [ 963.284752][ T5620] Bluetooth: hci7: command tx timeout [ 963.520359][T16284] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10960'. [ 963.538697][T16284] netlink: 7 bytes leftover after parsing attributes in process `syz.3.10960'. [ 963.630914][T16290] vlan0: entered promiscuous mode [ 963.639855][T16290] netlink: 68 bytes leftover after parsing attributes in process `syz.6.10963'. [ 963.951846][T16305] netlink: 'syz.2.10962': attribute type 16 has an invalid length. [ 963.973454][T16305] netlink: 'syz.2.10962': attribute type 17 has an invalid length. [ 964.033319][T16312] netlink: 'syz.3.10971': attribute type 1 has an invalid length. [ 964.077101][T16305] sit0: left allmulticast mode [ 964.109527][T16305] team0: left allmulticast mode [ 964.222579][T16305] team1: left allmulticast mode [ 964.230633][T16305] team2: left allmulticast mode [ 964.247634][T16305] A link change request failed with some changes committed already. Interface nicvf0 may have been left with an inconsistent configuration, please check. [ 964.273082][T16312] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 964.571769][T16331] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10974'. [ 964.623936][T16331] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 964.640205][T16333] netlink: 64 bytes leftover after parsing attributes in process `syz.3.10975'. [ 965.002929][T16351] syzkaller0: entered promiscuous mode [ 965.010304][T16351] syzkaller0: entered allmulticast mode [ 965.195722][T16359] syzkaller0: mtu greater than device maximum [ 965.472536][T16374] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 965.554337][T16374] 8021q: adding VLAN 0 to HW filter on device bond0 [ 965.576885][T16374] 8021q: adding VLAN 0 to HW filter on device team0 [ 965.601663][T16374] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 965.623782][T16374] wireguard: wg0: Could not create IPv4 socket [ 965.635476][T16374] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 965.730467][T16380] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 966.998367][T16447] ip6gretap0: left promiscuous mode [ 967.026549][T16447] bridge0: left promiscuous mode [ 967.048954][T16447] 8021q: adding VLAN 0 to HW filter on device bond0 [ 967.089098][T16447] 8021q: adding VLAN 0 to HW filter on device team0 [ 967.168278][T16447] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 967.180833][T16447] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 967.198805][T16447] veth1_vlan: left promiscuous mode [ 967.212206][T16447] veth0_vlan: left promiscuous mode [ 967.220543][T16447] veth0_vlan: entered promiscuous mode [ 967.232233][T16447] veth1_vlan: entered promiscuous mode [ 967.244225][T16447] veth1_macvtap: left promiscuous mode [ 967.253280][T16447] veth0_macvtap: left promiscuous mode [ 967.262244][T16447] veth0_macvtap: entered promiscuous mode [ 967.271017][T16447] veth1_macvtap: entered promiscuous mode [ 967.338174][T16447] 8021q: adding VLAN 0 to HW filter on device bond1 [ 967.349049][T16447] 8021q: adding VLAN 0 to HW filter on device bond2 [ 967.361871][T16447] 8021q: adding VLAN 0 to HW filter on device bond3 [ 967.375452][T16447] 8021q: adding VLAN 0 to HW filter on device team1 [ 967.392403][T16447] A link change request failed with some changes committed already. Interface @ may have been left with an inconsistent configuration, please check. [ 967.594017][T16459] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 967.613461][T16460] gretap2: entered allmulticast mode [ 967.631031][ T6281] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 967.643852][ T6281] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 967.667901][ T6281] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 967.682227][ T6281] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 967.759121][T16469] macsec0: entered promiscuous mode [ 968.019889][ T3355] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 968.148484][T16494] vlan0: left promiscuous mode [ 968.671545][T16510] sch_tbf: burst 240 is lower than device lo mtu (11337746) ! [ 970.845010][T16488] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 971.037142][T16521] xfrm0 speed is unknown, defaulting to 1000 [ 971.082211][T16521] lo speed is unknown, defaulting to 1000 [ 971.089496][T16520] xfrm0 speed is unknown, defaulting to 1000 [ 971.286976][T16530] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 971.375955][T16520] lo speed is unknown, defaulting to 1000 [ 972.261997][T16550] __nla_validate_parse: 6 callbacks suppressed [ 972.262031][T16550] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11028'. [ 972.489423][T16559] netlink: 64 bytes leftover after parsing attributes in process `syz.6.11031'. [ 972.952195][T16570] netlink: 136 bytes leftover after parsing attributes in process `syz.6.11034'. [ 972.976424][T16570] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 973.003769][T16570] netlink: 684 bytes leftover after parsing attributes in process `syz.6.11034'. [ 973.957663][T16633] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.11048'. [ 973.987786][T16633] netlink: 32 bytes leftover after parsing attributes in process `syz.3.11048'. [ 973.998594][T16633] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.11048'. [ 974.122367][T16636] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11050'. [ 974.314109][T16649] ip6tnl3: entered allmulticast mode [ 974.429089][T16659] xt_cluster: you have exceeded the maximum number of cluster nodes (4294967209 > 32) [ 974.542791][T16661] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11059'. [ 974.556339][T16661] ip6tnl4: entered allmulticast mode [ 974.632204][T16665] netlink: 60 bytes leftover after parsing attributes in process `syz.3.11061'. [ 975.256798][T16696] veth1_macvtap: left promiscuous mode [ 976.222157][ T5283] veth1_macvtap: entered promiscuous mode [ 977.293612][T16785] __nla_validate_parse: 10 callbacks suppressed [ 977.293643][T16785] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11089'. [ 977.383885][T16785] netlink: 32 bytes leftover after parsing attributes in process `syz.1.11089'. [ 977.568977][T16797] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11092'. [ 977.829654][T16806] syzkaller0: entered promiscuous mode [ 977.856404][T16806] syzkaller0: entered allmulticast mode [ 977.969135][T16801] netlink: 'syz.6.11094': attribute type 1 has an invalid length. [ 977.989478][T16801] netlink: 228 bytes leftover after parsing attributes in process `syz.6.11094'. [ 978.048712][T16810] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11096'. [ 978.170388][T16817] netlink: 16 bytes leftover after parsing attributes in process `syz.6.11098'. [ 979.479351][T16863] bond0: (slave bond_slave_0): Releasing backup interface [ 979.500613][T16863] bond0: (slave bond_slave_1): Releasing backup interface [ 979.527426][T16863] team0: Port device team_slave_1 removed [ 979.537712][T16863] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 979.548726][T16863] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 979.576348][T16863] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 979.611206][T16865] team0: Port device xfrm0 added [ 979.905898][T16885] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11109'. [ 979.983436][T16885] team_slave_1: entered promiscuous mode [ 980.241421][T16894] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11110'. [ 980.302675][T16892] tipc: Enabling of bearer rejected, failed to enable media [ 980.876751][T16926] netlink: 'syz.6.11120': attribute type 2 has an invalid length. [ 980.887760][T16926] netlink: 'syz.6.11120': attribute type 8 has an invalid length. [ 980.897882][T16926] netlink: 132 bytes leftover after parsing attributes in process `syz.6.11120'. [ 980.914399][T16925] openvswitch: netlink: Flow key attribute not present in set flow. [ 980.935358][T16925] netlink: 'syz.3.11121': attribute type 322 has an invalid length. [ 981.023976][T16934] netlink: 'syz.1.11122': attribute type 1 has an invalid length. [ 981.160330][T16934] workqueue: Failed to create a rescuer kthread for wq "bond16": -EINTR [ 981.864172][T16969] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11135'. [ 981.919454][T16969] 8021q: adding VLAN 0 to HW filter on device bond16 [ 982.307198][T16986] __nla_validate_parse: 2 callbacks suppressed [ 982.307229][T16986] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.11141'. [ 982.420002][T16993] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 982.491807][T16990] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11138'. [ 982.686399][T17010] netlink: 'syz.1.11145': attribute type 11 has an invalid length. [ 982.829892][T17022] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11146'. [ 982.857692][T17026] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11149'. [ 982.867953][T17026] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11149'. [ 983.317192][T17043] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11150'. [ 984.081753][T17063] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11156'. [ 984.119618][T17063] netlink: 32 bytes leftover after parsing attributes in process `syz.3.11156'. [ 984.319421][T17074] A link change request failed with some changes committed already. Interface @ may have been left with an inconsistent configuration, please check. [ 984.457791][T17082] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11165'. [ 984.566006][T17087] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11167'. [ 984.587829][T17087] openvswitch: netlink: Flow key attr not present in new flow. [ 984.968057][T17104] xfrm0 speed is unknown, defaulting to 1000 [ 984.994118][T17104] lo speed is unknown, defaulting to 1000 [ 985.270600][T17116] bond17 (unregistering): Released all slaves [ 985.565198][T17125] ipvlan0: left promiscuous mode [ 985.577517][T17125] ipvlan0: entered allmulticast mode [ 985.593803][T17125] veth0_vlan: entered allmulticast mode [ 986.960029][T17205] netlink: 'syz.3.11192': attribute type 4 has an invalid length. [ 988.296254][T17236] __nla_validate_parse: 182 callbacks suppressed [ 988.296297][T17236] netlink: 24 bytes leftover after parsing attributes in process `syz.6.11197'. [ 988.981104][T17263] bond11: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 988.994208][T17263] bond11 (unregistering): Released all slaves [ 989.028885][T17270] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11202'. [ 989.935334][T17286] ip6t_REJECT: ECHOREPLY is not supported [ 990.235783][T17302] netlink: 28 bytes leftover after parsing attributes in process `syz.6.11210'. [ 990.403556][T17311] netlink: 'syz.6.11212': attribute type 7 has an invalid length. [ 990.429764][T17312] netlink: 1319 bytes leftover after parsing attributes in process `syz.6.11212'. [ 990.487312][T17315] xt_hashlimit: size too large, truncated to 1048576 [ 991.140554][T17332] netlink: 'syz.3.11218': attribute type 1 has an invalid length. [ 991.267482][T17336] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11220'. [ 991.366289][T17344] syzkaller0: entered promiscuous mode [ 991.373515][T17344] syzkaller0: entered allmulticast mode [ 991.382897][T17344] geneve1: entered promiscuous mode [ 991.709865][T17361] syzkaller0: entered promiscuous mode [ 991.730289][T17361] syzkaller0: entered allmulticast mode [ 991.975780][T13933] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 991.995178][T13933] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 992.961857][T17398] netlink: 100 bytes leftover after parsing attributes in process `syz.3.11236'. [ 993.067462][T17403] netlink: 52 bytes leftover after parsing attributes in process `syz.6.11238'. [ 993.093944][T17403] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11238'. [ 993.199502][T17412] netlink: 488 bytes leftover after parsing attributes in process `syz.2.11241'. [ 993.229736][T17412] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.11241'. [ 993.393833][T17424] __nla_validate_parse: 1 callbacks suppressed [ 993.393866][T17424] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11247'. [ 993.423901][T17424] netlink: 44 bytes leftover after parsing attributes in process `syz.6.11247'. [ 993.883708][T17451] A link change request failed with some changes committed already. Interface veth0_to_team may have been left with an inconsistent configuration, please check. [ 994.004874][T13930] wlan1: Trigger new scan to find an IBSS to join [ 994.085944][T17461] netlink: 76 bytes leftover after parsing attributes in process `syz.2.11257'. [ 994.352312][T17466] netlink: 'syz.6.11259': attribute type 61 has an invalid length. [ 994.516380][T17469] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11261'. [ 994.608948][T17474] netlink: 36 bytes leftover after parsing attributes in process `syz.2.11258'. [ 994.846176][T17485] netlink: 'syz.6.11265': attribute type 11 has an invalid length. [ 994.867707][T17485] siw: device registration error -23 [ 995.193385][T17495] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11266'. [ 995.235868][T17495] 8021q: VLANs not supported on ip_vti0 [ 995.557672][T17503] netlink: 112 bytes leftover after parsing attributes in process `syz.3.11268'. [ 995.591643][T17503] xt_TCPMSS: Only works on TCP SYN packets [ 995.688319][T17507] netlink: 'syz.3.11268': attribute type 10 has an invalid length. [ 995.722277][T17509] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11269'. [ 995.790059][T17509] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11269'. [ 995.886436][T17515] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11271'. [ 995.901768][T17509] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 995.929476][T17521] netlink: 'syz.1.11273': attribute type 13 has an invalid length. [ 996.440506][T17551] netlink: 'syz.3.11280': attribute type 11 has an invalid length. [ 996.467073][T17551] siw: device registration error -23 [ 996.568387][T17558] netlink: 'syz.1.11282': attribute type 1 has an invalid length. [ 996.749772][T17571] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 997.262921][T17586] IPv6: NLM_F_CREATE should be specified when creating new route [ 997.763540][T17589] xfrm0 speed is unknown, defaulting to 1000 [ 997.787871][T17589] lo speed is unknown, defaulting to 1000 [ 997.794170][T17598] xt_TPROXY: Can be used only with -p tcp or -p udp [ 997.937948][T17601] batadv0: left promiscuous mode [ 997.955686][T17601] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 998.191660][T17620] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 998.310722][T17628] netlink: 'syz.6.11304': attribute type 1 has an invalid length. [ 998.331444][T17628] syzkaller1: entered promiscuous mode [ 998.337767][T17628] syzkaller1: entered allmulticast mode [ 998.349592][T17628] netlink: 'syz.6.11304': attribute type 1 has an invalid length. [ 998.358228][T17628] netlink: 'syz.6.11304': attribute type 2 has an invalid length. [ 998.757169][T17652] xt_cluster: node mask cannot exceed total number of nodes [ 998.825399][T17655] syzkaller0: entered promiscuous mode [ 998.831497][T17655] syzkaller0: entered allmulticast mode [ 998.885573][ T31] INFO: task syz.0.9814:11885 blocked for more than 143 seconds. [ 998.905731][ T31] Not tainted syzkaller #0 [ 998.923484][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 998.936494][ T31] task:syz.0.9814 state:D stack:25704 pid:11885 tgid:11884 ppid:6247 task_flags:0x400140 flags:0x00080002 [ 998.951791][ T31] Call Trace: [ 998.955786][ T31] [ 998.959039][ T31] __schedule+0x17d9/0x56c0 [ 998.964150][ T31] ? trace_irq_enable+0x3b/0x140 [ 998.970766][ T31] ? __kmalloc_node_track_caller_noprof+0x4d7/0x7b0 [ 998.980446][ T31] ? netlink_rcv_skb+0x226/0x4a0 [ 998.986656][ T31] ? genl_rcv+0x28/0x40 [ 998.991284][ T31] ? __pfx___schedule+0x10/0x10 [ 998.997317][ T31] ? rcu_is_watching+0x15/0xb0 [ 999.002561][ T31] ? rcu_is_watching+0x15/0xb0 [ 999.024418][ T31] ? lock_release+0x4b/0x3c0 [ 999.035139][ T31] ? rcu_is_watching+0x15/0xb0 [ 999.040545][ T31] schedule+0x164/0x360 [ 999.046090][ T31] schedule_preempt_disabled+0x13/0x30 [ 999.052090][ T31] __mutex_lock+0x7bf/0x1550 [ 999.058650][ T31] ? __mutex_lock+0x5d4/0x1550 [ 999.063862][ T31] ? nfsd_nl_version_get_doit+0x17c/0xd20 [ 999.070204][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 999.077087][ T31] ? __nlmsg_put+0xef/0x1b0 [ 999.082178][ T31] ? genlmsg_put+0x137/0x2e0 [ 999.087584][ T31] nfsd_nl_version_get_doit+0x17c/0xd20 [ 999.093678][ T31] ? __nla_parse+0x40/0x60 [ 999.098860][ T31] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 999.105439][ T31] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 999.112444][ T31] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 999.119955][ T31] genl_family_rcv_msg_doit+0x233/0x340 [ 999.126671][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 999.133135][ T31] ? __dev_queue_xmit+0x29b/0x37f0 [ 999.138869][ T31] genl_rcv_msg+0x614/0x7a0 [ 999.143742][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 999.149638][ T31] ? ref_tracker_free+0x689/0x830 [ 999.155386][ T31] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 999.161968][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 999.168120][ T31] netlink_rcv_skb+0x226/0x4a0 [ 999.173314][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 999.179422][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 999.185300][ T31] ? down_read+0x2be/0x330 [ 999.190020][ T31] genl_rcv+0x28/0x40 [ 999.194274][ T31] netlink_unicast+0x7bb/0x940 [ 999.199479][ T31] netlink_sendmsg+0x813/0xb40 [ 999.205084][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 999.210793][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 999.216319][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 999.222063][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 999.227755][ T31] ____sys_sendmsg+0x9b9/0xa20 [ 999.232949][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 999.239238][ T31] ? lock_release+0x4b/0x3c0 [ 999.244155][ T31] ? import_iovec+0x73/0xa0 [ 999.249137][ T31] ___sys_sendmsg+0x2a5/0x360 [ 999.254170][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 999.259949][ T31] ? futex_wait+0x2a2/0x390 [ 999.265512][ T31] ? __pfx_do_futex+0x10/0x10 [ 999.270555][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 999.275900][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 999.281746][ T31] ? rcu_is_watching+0x15/0xb0 [ 999.287036][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 999.293555][ T31] do_syscall_64+0x174/0x580 [ 999.299203][ T31] ? clear_bhb_loop+0x40/0x90 [ 999.304247][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 999.310864][ T31] RIP: 0033:0x7f6b70f9ce59 [ 999.315740][ T31] RSP: 002b:00007f6b6f1f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 999.325148][ T31] RAX: ffffffffffffffda RBX: 00007f6b71215fa0 RCX: 00007f6b70f9ce59 [ 999.333640][ T31] RDX: 0000000000008840 RSI: 0000200000000100 RDI: 0000000000000006 [ 999.342233][ T31] RBP: 00007f6b71032e6f R08: 0000000000000000 R09: 0000000000000000 [ 999.350943][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 999.359896][ T31] R13: 00007f6b71216038 R14: 00007f6b71215fa0 R15: 00007ffc0b513c68 [ 999.368581][ T31] [ 999.372027][ T31] INFO: lockdep is turned off. [ 999.377467][ T31] NMI backtrace for cpu 0 [ 999.377486][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 999.377504][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 999.377513][ T31] Call Trace: [ 999.377518][ T31] [ 999.377524][ T31] dump_stack_lvl+0xe8/0x150 [ 999.377545][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 999.377560][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 999.377584][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 999.377600][ T31] sys_info+0x135/0x170 [ 999.377615][ T31] watchdog+0xfd7/0x1030 [ 999.377636][ T31] ? watchdog+0x1c7/0x1030 [ 999.377657][ T31] kthread+0x388/0x470 [ 999.377673][ T31] ? __pfx_watchdog+0x10/0x10 [ 999.377689][ T31] ? __pfx_kthread+0x10/0x10 [ 999.377704][ T31] ret_from_fork+0x514/0xb70 [ 999.377722][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 999.377737][ T31] ? __switch_to+0xc89/0x1420 [ 999.377759][ T31] ? __pfx_kthread+0x10/0x10 [ 999.377773][ T31] ret_from_fork_asm+0x1a/0x30 [ 999.377797][ T31] [ 999.377830][ T31] Sending NMI from CPU 0 to CPUs 1: [ 999.513327][ C1] NMI backtrace for cpu 1 [ 999.513345][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 999.513365][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 999.513376][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 999.513406][ C1] Code: 0c 80 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 83 a7 21 00 fb f4 7c 03 03 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 999.513422][ C1] RSP: 0018:ffffc90000197e40 EFLAGS: 00000246 [ 999.513439][ C1] RAX: ffff88812537c000 RBX: ffffffff819a5170 RCX: 0000000080000001 [ 999.513452][ C1] RDX: 0000000000000001 RSI: ffffffff8c291100 RDI: ffffffff819a5170 [ 999.513464][ C1] RBP: ffffc90000197f10 R08: ffff8880b87338db R09: 1ffff110170e671b [ 999.513476][ C1] R10: dffffc0000000000 R11: ffffed10170e671c R12: 0000000000000000 [ 999.513494][ C1] R13: 1ffff11003bd0000 R14: 1ffff92000032fd0 R15: dffffc0000000000 [ 999.513505][ C1] FS: 0000000000000000(0000) GS:ffff88812537c000(0000) knlGS:0000000000000000 [ 999.513519][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 999.513530][ C1] CR2: 0000001b31824000 CR3: 000000001203e000 CR4: 00000000003526f0 [ 999.513546][ C1] Call Trace: [ 999.513553][ C1] [ 999.513559][ C1] default_idle+0x9/0x20 [ 999.513582][ C1] default_idle_call+0x72/0xb0 [ 999.513608][ C1] do_idle+0x2e0/0x540 [ 999.513633][ C1] ? __pfx_do_idle+0x10/0x10 [ 999.513661][ C1] cpu_startup_entry+0x43/0x60 [ 999.513684][ C1] start_secondary+0x101/0x110 [ 999.513710][ C1] common_startup_64+0x13e/0x157 [ 999.513740][ C1] [ 999.697201][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 999.704088][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 999.713211][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 999.723281][ T31] Call Trace: [ 999.726575][ T31] [ 999.729511][ T31] vpanic+0x56c/0xa60 [ 999.733593][ T31] ? __pfx___schedule+0x10/0x10 [ 999.738549][ T31] ? __pfx_vpanic+0x10/0x10 [ 999.743337][ T31] ? rcu_is_watching+0x15/0xb0 [ 999.748122][ T31] ? trace_irq_enable+0x3b/0x140 [ 999.753114][ T31] panic+0xc5/0xd0 [ 999.756850][ T31] ? __pfx_panic+0x10/0x10 [ 999.761370][ T31] watchdog+0x1030/0x1030 [ 999.765713][ T31] ? watchdog+0x1c7/0x1030 [ 999.770221][ T31] kthread+0x388/0x470 [ 999.774391][ T31] ? __pfx_watchdog+0x10/0x10 [ 999.779166][ T31] ? __pfx_kthread+0x10/0x10 [ 999.783774][ T31] ret_from_fork+0x514/0xb70 [ 999.788376][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 999.794038][ T31] ? __switch_to+0xc89/0x1420 [ 999.798818][ T31] ? __pfx_kthread+0x10/0x10 [ 999.803594][ T31] ret_from_fork_asm+0x1a/0x30 [ 999.808369][ T31] [ 999.811784][ T31] Kernel Offset: disabled [ 999.816109][ T31] Rebooting in 86400 seconds..