last executing test programs: 4.718242077s ago: executing program 0 (id=373): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000001280)=ANY=[@ANYBLOB="1808000000000000000000000000004018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000048000b7020000000000007baaf8ff00000000b5090800000000007baaf0ff00000000bf8700000000000007070000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004600000076000000db98000000000000b5080000000000008500000007120000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x61, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.504885618s ago: executing program 0 (id=377): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x17, 0x0, 0x9, 0x3, 0x0, 0xffffffffffffffff, 0x101}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0xf, &(0x7f00000001c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}}, &(0x7f00000000c0)='GPL\x00', 0x2, 0x8b, &(0x7f0000000100)=""/139}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='hugetlb.1GB.rsvd.failcnt\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000001640), 0x12) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000140)=0x90) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_int(r4, 0x0, 0x15, &(0x7f0000000080), 0x4) connect$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) write$tun(r3, &(0x7f0000000080)=ANY=[@ANYRESOCT], 0xfdef) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYRES64=r5, @ANYRES32=0x0, @ANYBLOB="0000000008440000200012800b00010067656e657665000010000280040010", @ANYBLOB="48000000100000000115be85df585f398fec735f3822a56bffcd0e4cc114bebd190500000000000000659a0a81a5f0adae2b90b2f83cce773336f96dba", @ANYBLOB="0f74905eac40c72bf7e22bdcf359905d6bed021b950a828de9b2f214d02b38cc0658e4c1e90e8e088aec9bd0a98088ee198782141861f73ac42f1c78960d42fc3758af90d7838bf5f1369b0541434dcaa10c5946ea8fb6650497b2362f15cf4e7be1a9593b1995c40e6be685039bfe4ab8943b979d9c0cf573de"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r6, 0x0, 0xcf, 0x0, 0x0) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x80040, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r7, 0x5218) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r5, 0x8982, &(0x7f0000000080)={0x6, 'nr0\x00', {}, 0x34}) 3.960365577s ago: executing program 3 (id=383): setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000040)={0x9}, 0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000140)=""/178, &(0x7f0000000200)=0xb2) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000080)=0x4200, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x7}, 0x1c) 3.775695802s ago: executing program 3 (id=385): syz_init_net_socket$ax25(0x3, 0x2, 0xce) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000300)=r3) ioctl$OCFS2_IOC_RESVSP(r0, 0x40305828, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000017c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00 \x00'/19, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="000000000100"/21], 0x48) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$nl_route(0x10, 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000840)='\'', 0x1}], 0x1}, 0x4) 3.447155s ago: executing program 4 (id=389): r0 = socket$alg(0x26, 0x5, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet6(0xa, 0x2, 0x3a) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28) r1 = socket(0x10, 0x803, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="beb0f96f0c929c24db81de4eaa55920200c871fe259fdf53932266870bc668d673e01d47e944f98bcf097879c970d1bdc47e56dc011e937c9afcbe660b3587276cf39fdbd0e456ff1b7aedc09e627bd35c358469177f2b15a5a4c4c449ee401bd2b45601e3cd5d48537734fcb402ed4d97d73176822c7dd0228880ed76301ae7bc1fe32b483e30583e03e362952853580e1686a7efb25525c2fbe1cc451f4667499c51cc6962865e", @ANYRES16=r3, @ANYBLOB="010000000000fedbdf25020202000900030073797a32000000000900010073797a3100000000"], 0x2c}, 0x1, 0x40030000000000, 0x0, 0x800}, 0x80) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x91ee, 0x9, 0x10000000, 0x1, 0x7}, 0x9, 0x8}, [{0xd6c, 0x9, 0x8, 0xff, 0x10001, 0x9}, {0x7f, 0xffff, 0x6, 0x7fffffff, 0x1, 0x7}, {0x6, 0xb37b, 0x6, 0xb38, 0x0, 0xd0cb}, {0x4, 0x3, 0x2, 0xa318, 0x80000000, 0x1}, {0x9, 0xfffffff9, 0x2, 0x4, 0x6, 0x4}, {0x8000, 0x3, 0xe, 0x4, 0xcee8000, 0x1}, {0x9, 0x8, 0xfffffffa, 0x6, 0xa0fd, 0x8}, {0xffffffff, 0xe648, 0x7c0c3ffe, 0x8, 0x0, 0x5}, {0x3, 0x3, 0x9, 0xa}, {0x9, 0x6, 0xb6, 0x7fff, 0x5, 0x7}, {0x304, 0x66, 0x3, 0x101, 0x3, 0x9}, {0xff, 0x1, 0xe, 0x800, 0x3, 0x56}, {0xca, 0x4, 0x9, 0xfffffff8, 0x7c, 0x7921bcf1}, {0x1, 0xff, 0x5, 0x80000000, 0xaae6, 0x9}, {0x4, 0x3, 0xa9, 0x8, 0x9, 0x4}, {0x5, 0x1000, 0x200, 0x2, 0x8, 0x6}, {0x3d648283, 0x2, 0x5, 0x9, 0x10000, 0x6}, {0x3, 0xa06, 0x1, 0x1, 0x9, 0x260ba674}, {0x6, 0xc5, 0x8d3, 0x9, 0x3, 0xffffffbc}, {0x3, 0x8, 0x3, 0x5, 0x0, 0xc80}, {0x3, 0xffffffff, 0xffff, 0x2, 0x9}, {0xfffffffa, 0x6, 0x77f, 0x160c, 0x3}, {0x1ff, 0x8, 0x0, 0x6, 0xb, 0x400}, {0x3ff, 0x9, 0xffff8001, 0x100, 0x3, 0x47}, {0x529, 0x4, 0x7, 0xffff, 0xc0a, 0xbad}, {0x8, 0x7, 0x884, 0x100, 0x9}, {0x8, 0x6, 0x6, 0xc, 0x3}, {0x4, 0x40, 0xcd6c, 0x71f, 0x8000, 0x6}, {0x5, 0x30a3, 0xa, 0x200, 0xfff, 0x9}, {0x3, 0x1, 0x5, 0x8, 0x2, 0x81}, {0x81, 0x0, 0x0, 0x49f11005, 0x9, 0x7fffffff}, {0x9, 0x0, 0x5c, 0x3bad, 0x8, 0x480}, {0xe, 0x58000000, 0x9, 0x3, 0x1ff, 0xaa2}, {0x800, 0xd1, 0x0, 0x3e, 0x0, 0x5}, {0x8, 0x4, 0x200, 0xfffffc00, 0x100, 0x10001}, {0x6, 0x7, 0x0, 0x101, 0x6, 0x81}, {0x8, 0x2, 0x200, 0x3, 0x4, 0x101}, {0xad, 0xa, 0x401, 0x0, 0x9, 0xff000000}, {0x8, 0x5, 0xd, 0x24, 0xc, 0x1}, {0xfffffff8, 0x9, 0x1000, 0xc, 0xea, 0x4}, {0x3, 0x0, 0x8, 0x1, 0x1, 0xffffff32}, {0x6, 0x5, 0xd7c9, 0x0, 0x5, 0x2}, {0xffff, 0x1, 0x5, 0x2, 0x7, 0x7}, {0x5, 0x2, 0x0, 0x401, 0x6, 0x1}, {0x3, 0x2, 0x4, 0x6, 0xfffffff8, 0x5}, {0x6, 0x0, 0x3, 0x5, 0x0, 0xffff8000}, {0x1, 0x0, 0x0, 0x9, 0x0, 0x4}, {0x2, 0x6, 0x2, 0x7, 0x9}, {0x0, 0xfffffffd, 0x756183d, 0xfffff801, 0x5, 0x8}, {0x7, 0xa, 0xfffffffc, 0x80000001, 0x7b, 0x2}, {0x7, 0x9, 0xee, 0x800, 0x1000}, {0x10, 0x5, 0x57a2a808, 0x80000000, 0x7fff, 0x5}, {0x729, 0x25, 0x6, 0x6, 0x8, 0x4}, {0x2, 0x406, 0xc209, 0x8, 0x0, 0xfffffffc}, {0x1, 0x7, 0x8, 0xfffffffb, 0x80000000, 0x4}, {0x1, 0x5, 0x8, 0x8000, 0x1, 0x7f}, {0x8001, 0xf42, 0x1, 0x3, 0x5, 0x430}, {0x2, 0xfffffff4, 0x5, 0xd, 0xc8, 0x7}, {0x6, 0x7, 0x9, 0x8, 0x5, 0x5}, {0x5, 0x8000000, 0x7, 0x5, 0x401, 0x9}, {0x1, 0x6, 0x1ff, 0xa8de, 0x0, 0x7b}, {0x0, 0x80000000, 0x7fff, 0x5, 0x2, 0x7}, {0xe, 0xfffffffc, 0x7fffffff, 0x7, 0x5, 0x200}, {0x81, 0xaa, 0x1e, 0x9, 0x14fc, 0x8}, {0x9, 0xffffffff, 0x40, 0x6, 0x13b, 0xeacd}, {0x100020, 0xff, 0x6, 0x81, 0x0, 0x6}, {0x2, 0xe, 0xb, 0x0, 0x6, 0x2}, {0x8, 0x3, 0x5, 0x4, 0x4, 0x2}, {0x84, 0x3ff, 0x3d0c, 0x1, 0x8, 0x2}, {0x4, 0x4, 0xb85c, 0x1, 0x7, 0x6}, {0x3, 0xc6, 0x0, 0x1, 0x2, 0x3}, {0x7, 0x2, 0x8000, 0x2, 0x7fffffff, 0x79}, {0x6, 0x80000000, 0xfffffffe, 0x7, 0x3, 0x8}, {0xae, 0x3, 0x600, 0x9, 0xff, 0x3}, {0x1, 0xed5, 0x6de6, 0x10, 0x380000, 0x789}, {0x4, 0x7074, 0x32b, 0x3, 0xf}, {0x1ff, 0x7, 0x1, 0x96, 0x1, 0xc}, {0x9, 0x3, 0x0, 0x9, 0x1ff, 0x8}, {0x1, 0x7d, 0x8, 0x7, 0x2, 0x3}, {0xfffff001, 0x9, 0x65d, 0x3c10, 0x7, 0x53}, {0x7, 0x0, 0x7, 0x101, 0x9, 0x1}, {0x7, 0x9, 0xd, 0x6, 0xfffffff7, 0x827}, {0x113, 0xfffffffe, 0x2, 0x400, 0x28, 0x81}, {0xfff, 0x6, 0x7, 0x40, 0x6, 0x10}, {0xc, 0x9, 0x8001, 0x0, 0x9, 0x6}, {0x5, 0x11b9, 0x401, 0x4, 0x2, 0x6}, {0x9, 0x100, 0x400, 0x9497, 0x101, 0x84b7}, {0xb4, 0xb85, 0x7, 0x3, 0x51, 0x5}, {0x2, 0x4, 0x5, 0xf, 0xf, 0x1283}, {0xfffffff8, 0x1c0000, 0x2, 0x10001, 0x1, 0x6}, {0x61, 0x80, 0x1, 0x10000, 0x5, 0x8}, {0x8, 0x6, 0xc53, 0x80000000, 0x7, 0x5}, {0x0, 0x6, 0x5, 0x2, 0xdc, 0x6}, {0x0, 0xfffffffc, 0x101, 0x6cb685f2, 0x7, 0x1}, {0x0, 0xc3, 0x4, 0x5, 0x0, 0x9}, {0x8, 0xf7b5, 0x5, 0x5, 0x9, 0x7}, {0x1, 0x67f, 0x5689f935, 0x8, 0x6db, 0xff}, {0x1, 0x400, 0x3, 0x1e1, 0xa, 0x80000000}, {0xea, 0x5, 0x8, 0x5, 0x7fff, 0x1000}, {0x6, 0x5, 0x7, 0x0, 0x6, 0x80000000}, {0x9, 0x6, 0x7, 0x1, 0x9, 0x100}, {0x7202, 0x4, 0x5024, 0xf9, 0x6, 0x40}, {0x5, 0x10, 0x4, 0x5, 0xd, 0x8}, {0x1537, 0x101, 0x6, 0x1, 0x3, 0x6b}, {0x69, 0x400, 0x3, 0x81, 0xc6, 0x7fff}, {0x10001, 0x1, 0x3, 0x7fffffff, 0x7, 0x10001}, {0xcdc, 0x1, 0x7, 0x0, 0x8}, {0x1, 0x168dccf, 0x3, 0x3, 0x7fff, 0x6}, {0x3, 0x4, 0x7fff, 0x7, 0xaf68, 0x403}, {0x9, 0x0, 0x7, 0x6, 0x6, 0x80000001}, {0x5, 0x200, 0x800, 0xd00000, 0x3, 0x8}, {0x8001, 0x5d, 0xffffffff, 0x42e, 0x8, 0x55}, {0x1970, 0x89, 0x6d, 0x460ebb44, 0x2, 0x2}, {0x951, 0x9, 0x3, 0x8, 0x1, 0x2}, {0x3, 0x8, 0x627b, 0x5, 0x6, 0x4}, {0x6, 0x3, 0x9fbc, 0x4, 0x1, 0x2}, {0x401, 0x6, 0x32d84255, 0xfa, 0x27f, 0x8000}, {0x0, 0x6, 0x3, 0xc, 0x8000, 0x40}, {0x5, 0x4, 0x1, 0x3, 0x0, 0x5}, {0x7f, 0x4, 0x7f, 0x10001, 0xff, 0x8}, {0x7, 0x96a3, 0x2, 0xd7, 0x6, 0x200}, {0x1, 0x5, 0x5, 0x37a3, 0x7, 0x8}, {0x81, 0x4, 0xd, 0xffffffff, 0x200, 0x4}, {0x4, 0x3ff, 0x7, 0x4, 0x4, 0x4}, {0x1, 0xffffffa4, 0x9, 0x2, 0x3}, {0xd, 0x0, 0x3ff, 0x9, 0x8, 0x48}, {0x2, 0x10001, 0x9, 0x2, 0x8, 0x9}, {0xf, 0x1, 0xe, 0x101, 0x2, 0xc88}], [{}, {0x5}, {}, {0x1}, {0x4}, {0x2, 0x1}, {0x3}, {}, {0x5}, {0x3}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x8cd778652b20be70, 0x1}, {0x1, 0x1}, {0x1}, {0x2}, {0x4}, {0x1, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x2}, {0x4}, {0x4}, {0x4}, {0xa4f33433e7b7e23d, 0x1}, {0x4}, {0x0, 0x1}, {0x6}, {0x2, 0xa5b0c5c50171756a}, {0x3}, {}, {0x4}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x4}, {0x4}, {0x5, 0x1}, {0x1}, {0x2}, {0x3, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {0x5}, {0x2}, {0x1, 0x1}, {0x6}, {0x1}, {0x5, 0x1}, {0x5}, {0x2}, {}, {0x0, 0x1}, {0x3}, {0x5}, {0x5, 0x1}, {0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {0x2}, {0x5}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x1}, {0x1}, {0x5}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x1}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x3}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x2}, {0x4, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="3183000000010000000019000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x4886) r7 = socket$netlink(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000006800)={&(0x7f0000000080)={0x3c, r8, 0x615, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x3c}, 0x5}, 0x0) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r8, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xd03}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400}, 0x800) 3.344758234s ago: executing program 2 (id=390): r0 = socket(0x200000100000011, 0x803, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req3={0x7, 0x6, 0x8000, 0x6}, 0x1c) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={0x0}}, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x2, @empty, 0xfffffffd}, 0x1c) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x32) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)='\x00', 0xfdef}], 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYRES64=0x0, @ANYRES32=r3, @ANYRESDEC=0x0], 0x224}, 0x1, 0x0, 0x0, 0x40000}, 0x4050) r4 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000000c0)=0x1c, 0x800) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22, 0x8, @private0, 0x7}, 0x1c) 3.318046343s ago: executing program 0 (id=391): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x19, 0x4, 0x4, 0x7ff, 0x0, 0xffffffffffffffff, 0x7f}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000004340)={0x6, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000540)={r1, 0x8, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff27, 0x0, 0x0}, 0x19) (async) r2 = socket$pptp(0x18, 0x1, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x6, 0x20, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (async) connect$pptp(r2, &(0x7f0000000040)={0x18, 0x2, {0x102, @multicast2}}, 0x1e) 3.131968763s ago: executing program 2 (id=392): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee9, 0x8031, r0, 0x215eb000) r1 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x61d0, 0x0) ioctl$sock_TIOCINQ(r1, 0x61d8, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="240000001d00070f000200000000000007000000", @ANYRES32=r3, @ANYBLOB='\x00\x00g\x00\b\x00\b\x00', @ANYRES64=r3], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.349399966s ago: executing program 4 (id=393): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), 0xffffffffffffffff) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="2f0100003201"], 0x138) (async) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000006c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="190300000000000000004a0000000e0002"], 0x34}}, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400192446b6f18b593a10562c84d8c033ed7afe7027243de829e0000000a2bc560322fc11270cc15860342259b394dfca00000f7f8900000020000000e42471283ec681", 0x48}], 0x1) (async) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_int(r5, 0x29, 0x1a, &(0x7f00000003c0)=0x6, 0x4) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}], 0x1c) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) (async) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x16, &(0x7f0000000080)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x879}}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x2}, @ldst={0x0, 0x2, 0x4, 0x3, 0x7, 0x0, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @map_fd={0x18, 0x6, 0x1, 0x0, 0x1}], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x93, &(0x7f0000000180)=""/147, 0x0, 0x51, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x4, 0x5, 0x3, 0xfffffb5a}, 0x10, 0x0, 0x0, 0x7, &(0x7f00000002c0)=[0x1], &(0x7f0000000380)=[{0x0, 0x2, 0xa, 0x1}, {0x2, 0x3, 0x5, 0x3}, {0x1, 0x5, 0x5, 0x2}, {0x4, 0x3, 0x8, 0x6}, {0x1, 0x1, 0xc, 0x653a72c6efad4907}, {0x4, 0x2, 0x7, 0xc}, {0x1, 0x3, 0x4, 0x2}], 0x10, 0xc434}, 0x94) r9 = socket(0x15, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r9, 0x89f2, 0x0) getsockopt(r9, 0x200000000114, 0x2714, 0x0, &(0x7f0000000040)) (async) gettid() (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c00018006000600800e0000100002800c0017"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) sendmsg$netlink(r3, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f00000004c0)={0x1f8, 0x11, 0x4, 0x70bd27, 0x25dfdbff, "", [@nested={0xf2, 0xff, 0x0, 0x1, [@nested={0x4, 0x8a}, @typed={0x8, 0x63, 0x0, 0x0, @uid=r7}, @typed={0x14, 0x40, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x29}}, @nested={0x4, 0xf2}, @generic="ee18d6429115ab2d7da483593a9583d0d809f17d92b0197f827fca281a1f86591f77b3cd87a9e4877990d2530715363eb9c24fa6aef059099928c1fbafced46afc55e99d66a6a3406319174a90544a72f460981aaef31ee866b99c4bb31d6500f3a081d62f8e72be238dfb76890d564ed65d893155bc3f88b7bb0b1ea4b8468d5099469f663a1e3bdc29acd0c48bdd0a5ae71ef2d89299f5dc8451ad2a46cad870de", @nested={0x4, 0x5e}, @typed={0x8, 0x6, 0x0, 0x0, @ipv4=@multicast1}, @typed={0x8, 0x149, 0x0, 0x0, @fd=r8}, @typed={0xc, 0x10d, 0x0, 0x0, @str='devlink\x00'}, @typed={0x8, 0x128, 0x0, 0x0, @fd=r0}]}, @generic="8f577d2fb90d6fdac5c80c2fabd5fb49514d4388d40170e790adcc44bbaa2275dcedd1be0b2aebb712e50e7f1128ac53acab2e6d324664cf840c95231098c058daa1fd5314154a702686d10998ab12babf5dd0d6697baca845a8b246e6e584ad3da29f5b3a9b4a0694280fa632b24f7b8dfa0f556ccf349a4100c6d338030a2fc9bc1d8eefb7070ff1bcbb26ff9ee87386b625570346fbae4e51861c465e86bf8a92cd7fa78783e62061b9ad62dd8d3d61733e6ba2637aec0718963c189acdb023e56ac6d3cbb23b5d91cde3d7509ce6bd3a84fb1f2faafc2233d6fa9eea", @generic="8f2a3e913c1354fb520f55f35ede0e117b924049a7cf"]}, 0x1f8}, {&(0x7f0000000740)={0xfc, 0x24, 0x20, 0x70bd2a, 0x25dfdbfe, "", [@nested={0x6d, 0x157, 0x0, 0x1, [@generic="50fbf6e6fa", @nested={0x4, 0xfe}, @typed={0x5c, 0x40, 0x0, 0x0, @binary="bf18bd961b3f687464c8c453f64737fa9508a0223cd361df666182aa022a92cea4449dafa283e1ed467230b38eb48e94f0c51c945e4722a2b04916fec8a9e208136a9a11e07f629b52ed8793195c402f8fe90bab47a0a466"}, @nested={0x4, 0x87}]}, @nested={0x10, 0x116, 0x0, 0x1, [@nested={0x4, 0x37}, @nested={0x4, 0x28}, @nested={0x4, 0xb8}]}, @generic="30259bf23daa8e69e943c5d97cb0801998baf4237c23925e05169b5e8ebae14ce746a8d5a672384494a5180e39ea0c23ab07dc74d7e3da02a226522e44d07c6d4886be5e5eb49647a1eb0757e4ae10fe29116f50e3bec4d19e32473895941a75eacc4325", @typed={0x8, 0x29, 0x0, 0x0, @fd=r9}]}, 0xfc}, {&(0x7f0000000840)={0xa4, 0x4, 0x400, 0x70bd26, 0x25dfdbfd, "", [@typed={0x8, 0x108, 0x0, 0x0, @uid}, @typed={0xc, 0x2e, 0x0, 0x0, @u64=0x8}, @generic="1ca28ff0d362dd37247a5229d6b0e2da6705aa87bde164c4c1180b922ec4a32787cba4fb7e0094ee9462ca3d33bcb03ace33dc5a96a208ec80d461559a8e1f8437c2b7885068e4c7e98af939636137b5905cd2772fdcacdbf47145c96f96f45da70c16b0006ae770d90e3fda607c22d1daef61b2a1707a14553b45213dc254"]}, 0xa4}, {&(0x7f0000001200)={0x5f8, 0x40, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@nested={0xd1, 0xda, 0x0, 0x1, [@generic="960cb4e7d8f5e1e73dfddc463a2155004aa6abe1dcf8c5d61487f24359cf7a296f412cee5b064f042663b8e2ba09543e05abf8e0b990d8ac6c9a9f8d9302410fd163d1345da1ef13a2930f2dd9b32774ac6d47bbbb897ac977febaf984d64cb0cec84f931173b9262e91e17c85b9b1ddd30823267e6ceb0cfada14c087ae588ee4879abcf800711704", @typed={0x43, 0x153, 0x0, 0x0, @binary="39057b8a7ccf59f25d5c911e6172a69ade4516cae817910dd31b516cfbcff75c89e4b46de94747125997bba3d5f95bf4c939d6997e66f74b99e515f68218f8"}]}, @generic="d9d85993a186dd8bf30a9020d162b87cba3d88f7b35863286f550311a0a7a4c763d299ef3e68456dbad82c89234b8fbf7727310d1fe99d9fa93d178064ebde7dd6932ff13d3712f417060beea31b3d91025c96d265bbaf2952f0df17fe480c530f1c18fdb2013a344f137e1afbb729", @typed={0xdf, 0x15b, 0x0, 0x0, @binary="7c6737ad24cbadb47859df8254db665467943997f9ad27773d2f8f28b35874fc666bc04fed370483f214a84f827b9840ec66ff81784924807957469f7993a82baf51f7a343a5adf8b3b13a570149b57e8fd5bc20b6a7b69cd6a495317df2c23c6d36ea2dc64fb6882645271ddeaa5f61346b714f4d0c082b6429e9687921e3c06d34549a13548bad642249b23252c7ca3d7bbd5827a76a433b2df321c00a154daa93e089b629a207b376ec58eb0ef48541cd33ed4d829838a99c098533c6ed7ad1882cf30abb68cdb701928941bb778f0bf0b9f0deff34b91cb56d"}, @nested={0x106, 0x110, 0x0, 0x1, [@generic="457a59ed865682e4444938e253c4db296fe5f882f2a8b7b1e2121bffccfb46dac69419f71ed05d4e74aa0011e7d5ce5a2a2900bd434c2d6b4d1eecf18146b759ff6adf47d003b570e7b3a619bf8c4752aefb7b5c51d1c5126b1b17d6b883ba6717024ac7", @generic="649a3753d287abda26e6c548047107099f341f70a13a73225564f9cd85d4b0265c18bfa7cb3b41d722fb2502d1ddce1f786c2962cc90dabcb7cdef14dddcc0de4c59605304cbd67dd81814728bcc45c7f88cb21905c6d4598f65c85ae85a64757bf81ac3fdbd582071bb504797d839aeb67a3460dc30f34d7202e1278f26506a0792eb56554ee3ae83aa81d91c98b6c10f74da4dd90c12af56f4911d141a"]}, @nested={0x254, 0x139, 0x0, 0x1, [@generic="228ce8109cb5ecb31a92b553b25a1e31dafc72d29327fd0965c46334c2343551c1395328d7a517c70b913c1e17c34f3bd0868bb0ee4d18191d14af933238b01ab4b8f306b635d88af954e92fca6fd0ecc1ca94046fe009b242cb274826436e044c8965e4074ae0", @generic="c22b9c6b0540a098e147e7de6a034a09bc6ec9ec3f71764a4fc32abe4fea27a476be42be43cea0f0b54ee345e7205b316098408d2eb8828ffe0d4bb77d10d5d962c9f01ba202e8ae3368b5db6b698a0c588a9756904ea24147d04c24027f3e5065afa9cb44abfe03863d8b405addb5eb24c4e8fd5ba5051ae776", @typed={0x8, 0x148, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}, @generic="bfadd332fd5e6e36c42995b9d6cb9d270b10bd55700f81494551f6394d59a2ce84e34b25e5b8daa04a288f92a77fdac4ce25ee419f3987e2f45b847b9db34c80a039224e83dc01d058847c5e986e9c1988ba945ffdf1d6597b1102f9df4c6c22722781ced4e694d06b27e4", @generic="1e67f7a1bd79f78a77ccdc183ab5867a806fe998708ebf85d2c92e96c402b5e9043fcda2af5829f06982b705a299221fd30f1484553abc088c0666004f385e7c279f0d2b9352bae2d194f792a3f79a22663af7254236071fd5a328fdc0cd84d9de5e477ded6661e9130b8efb247a6452378c78ebbc18276553cd66fc12aaa5ff01a1a8dca7ff656eeb42da37494575288815e9210cffcc50220b656dc96b9972e701cf3428cc4cc15c2c8ee49b510a1e627661b9c6378ad0ebb23c92c3f91b75e8c91eeeeadd103b0e2883f8ac3914819b727a8f35631ced1293f4a3b1790dbac8667349", @typed={0x8, 0x73, 0x0, 0x0, @u32=0x6}, @typed={0x8, 0xb2, 0x0, 0x0, @pid=r6}, @nested={0x4, 0x12e}, @nested={0x4, 0x122}]}, @generic="f71a6f7320e147b4d8b1481b3cefe756684c30a79e5b41fff68352e943e0004520cfc1776d1019431b5fa6a26b0e12781cb89fe91c7583ef1dbac6bfd24038c6db184e07b30e2b48c98af3a3ca9db8f338b62414d25b7923c9f12295f5d0478cadcd764899b5875743"]}, 0x5f8}, {&(0x7f0000001800)={0x3d0, 0x2e, 0x20, 0x70bd2a, 0x25dfdbfe, "", [@nested={0x98, 0xfc, 0x0, 0x1, [@nested={0x4, 0x10c}, @nested={0x4, 0x8a}, @typed={0x8b, 0x10, 0x0, 0x0, @binary="3fc799b05962365d25f586eea96c7f607d27cdfa75c977b4258713477b7eb789eab1de0f734605a56343f061454d30c957d3dd3c6879ee510183aa8cc8e7361b46c4e45d063528b6cf75788b8a023153015577681fc0803e25327de172edd41b3fcca55da64c474e62a4f683475459228922b05d3bdf43ef745c6a62ce19066492e294f5911aff"}]}, @nested={0xfb, 0xdd, 0x0, 0x1, [@nested={0x4, 0xde}, @typed={0x8, 0x9e, 0x0, 0x0, @pid=r6}, @nested={0x4, 0x4a}, @nested={0x4, 0xd2}, @generic="a7460e7910c9fa2210da08d82ffc369c7cafa28251bb8084385327299c7c5389863eee46411a7725e02f1195c2271ec4edaf1f8106c2cdc35a73b0c91affe3f5ce8bbe720f1693ed75bda26be29597650f3c5fb6f5bc3c13c84013b579967a607d65681bc4fdb799d01d1b7b9465a13583efd71b2072956ad9224444cabc90971bb6c3294a05adeea6ef44e7f6f929e12d7b48a5997cfe398da1c1d0b9851597ae887f2e0694d3a58f62e6aed050dcf2ea1242b6b5ff6ce00fbf801f6057219e6d25a7d1aae26fc4588f084c4e6a587c2b1b2b7ef4ccd5a8e2f4d40bf87cffabe046cd"]}, @typed={0x8, 0xb5, 0x0, 0x0, @fd=r10}, @typed={0x5, 0x30, 0x0, 0x0, @str='\x00'}, @nested={0xa3, 0x10d, 0x0, 0x1, [@typed={0x8, 0x96, 0x0, 0x0, @ipv4=@private=0xa010100}, @generic="136675b87d6de352b9602d7ecc10ad04c5c87a0ba3b29436df55f5dabb6865bef23d8d43dc416ba57f9537f37a07b900518d57b1f509fb435e9a576fa81b3bfc980e07db08320d49f36f4fdd118ecd93644b29278d1e5bf31d012e16eef4159256edede6be7c88dddd7966219ef3c16aa9229d75141e2f344dfdd9b568d4803516642f4ceb05833a6ed142e4d35bf08c211de55c4a5fa6"]}, @typed={0xe, 0x25, 0x0, 0x0, @str='syzkaller\x00'}, @generic="8873f8636f58a0af29457a0be01ad00525bcdc627cfcbe53787764c6b7a3738f19486e2db8b8eb645ba4d7cb36f8e7eacdaf492a58aa7561a93a34d1e412a7e22b0d0d0b5ae60f1110331c4bca3ed7c047b392c2dc6174905559545df6129c52ae248a1196ff8a11fd623b9b73d92593c0a21adcc509d400", @generic="ae2083be1c4360627805e2330668223eef46bbe8be7227cbe4b3f0960cb72a6d65910ed0353f2b5ed8c7df4ee26353b391d1079481184fe9b401458d54250a9fcd62f9c30f47466e7ea83aa9271bedb2e68305e998960f7af1baecf46d81508013553ba5956bc295f2a9fed524a2dcc9edf22f8520ed49d785c8ec770ce4873ec944f8dd3462b3b299d99327075670207f993880511b04d6280bffea3d05c8f3465e35d52bf9d7cd26924fe86c31262cd63d4b118407ceb1791ae6f645044e0e94ccdd24355f61cf5d0a1d9c9464dab5d0a6ed75592ad270b9fbdb9a4253d6f582dbf1afed5b61101ab43f0fd9ff96a0"]}, 0x3d0}], 0x5}, 0x800) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 1.342714s ago: executing program 0 (id=394): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r7, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) listen(r7, 0xa1) accept4$bt_l2cap(r7, 0x0, 0x0, 0x0) shutdown(r7, 0x1) setsockopt$sock_int(r7, 0x1, 0x7, &(0x7f0000000080), 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000380)=0x0) syz_genetlink_get_family_id$team(&(0x7f0000000480), r0) sendmsg$NFC_CMD_DEV_UP(r11, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, 0x0, 0x100, 0x7, 0x5, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x40) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newqdisc={0x148, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {0xc}, {0x0, 0xfff1}, {0x2, 0x9}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x118, 0x2, {{0x3, [0xe, 0xf, 0xe, 0x9, 0x7, 0x1, 0x6, 0x10, 0x3, 0x6, 0x4, 0xa, 0x10, 0x6, 0xb, 0x7], 0x1, [0x184, 0xa0aa, 0x2, 0x8, 0x8, 0x205, 0xaf1, 0x7, 0x6, 0x101, 0x3ff, 0x3, 0x101, 0x4, 0x44b, 0xb], [0x6, 0x2, 0x6, 0x2, 0x8001, 0x7ff, 0x5, 0x3, 0x7ff, 0xfff8, 0x6, 0x8001, 0x7, 0x8, 0x8, 0x26e]}, [@TCA_MQPRIO_MODE={0x6, 0x1, 0x1}, @TCA_MQPRIO_SHAPER={0x6}, @TCA_MQPRIO_MIN_RATE64={0x10, 0x3, 0x0, 0x1, [{0xc, 0x3, 0xfffffffffffffff9}]}, @TCA_MQPRIO_MAX_RATE64={0xa0, 0x4, 0x0, 0x1, [{0xc, 0x4, 0x7}, {0xc}, {0xc, 0x4, 0x8}, {0xc, 0x4, 0xfffffffffffffff7}, {0xc, 0x4, 0x17}, {0xc, 0x4, 0x8}, {0xc, 0x4, 0x80}, {0xc}, {0xc, 0x4, 0x3}, {0xc, 0x4, 0x1}, {0xc, 0x4, 0x8100}, {0xc, 0x4, 0x200}, {0xffffffd1, 0x4, 0x8001}]}]}}}]}, 0x148}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) r13 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r13, &(0x7f00000002c0), 0x40000000000009f, 0x0) r14 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r14) 1.328790881s ago: executing program 3 (id=395): r0 = socket(0x10, 0x803, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000180)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) writev(r2, &(0x7f0000000400)=[{&(0x7f0000000200)="4b4f9d", 0x3}], 0x1) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r3, 0x29, 0xcb, &(0x7f0000000040)={0x0, 0x64ceef03d81ddb0f, 0x7, 0x0, 0x10001}, 0xc) r4 = socket$caif_seqpacket(0x25, 0x5, 0x1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r4, 0x6612) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[@ANYBLOB="2b02000000000000c910fe88000000000000000000000000f6000102000000003b3217dd87020343cfbbe669df811910"], 0x20) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="440000001000010028ad700402d4df2500000000", @ANYRES32=r10, @ANYBLOB="104e0600816a030024001280110001006272696467655f736c617665000000000c00058008002200", @ANYRES8=r7], 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0x8002) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r6, 0x9801, 0x20005}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_LINK={0x8, 0x1, r6}]}}}]}, 0x40}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_SCRUB_METADATA(r3, 0xc040583c, &(0x7f0000000240)={0x15, 0x10, 0x7fa6, 0x2, 0x100}) sendmsg$nl_route(r12, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003904000000000300000000000000", @ANYRES32=r6, @ANYBLOB="01980000000000001800128008000100677265000c00028008000700bd1414aa"], 0x38}, 0x1, 0x0, 0x0, 0x2000c801}, 0x4) 1.220598451s ago: executing program 1 (id=396): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@delchain={0x40, 0x65, 0x400, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x3}, {0xfff2, 0x5}, {0xf, 0x6}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x5}]}}, @TCA_CHAIN={0x8, 0xb, 0x80000000}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet6_mreq(r0, 0x29, 0x46, 0x0, &(0x7f0000000040)) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001380)={0x14, 0xe, 0x6, 0x201, 0x0, 0x0, {0xc, 0x0, 0x9}}, 0x14}}, 0x28000000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000006540000000c0a01010000000000000000010000000900020073797a32000000002800038024000080090026400000000018000b80140001800a0001006c696d697400000004fe02800900010073797a30"], 0xd8}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) getsockopt$bt_BT_FLUSHABLE(r4, 0x112, 0x8, &(0x7f0000000140)=0xfffffffd, &(0x7f0000000180)=0x4) 1.119481708s ago: executing program 4 (id=397): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x3, 0xfe, 0x2, 0xd, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0xffffff7f}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_key={0x2, 0x8, 0x8, 0x0, '4'}, @sadb_x_nat_t_type={0x1, 0x14, 0x35}]}, 0x68}, 0x1, 0x7}, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000002c0)=@newqdisc={0x70, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x3c, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x6}, @TCA_FQ_CODEL_ECN={0x8, 0x4, 0x1}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x98a}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x7}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5}, @TCA_FQ_CODEL_ECN={0x8}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x400000}]}}]}, 0x70}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000480)={&(0x7f0000000200), 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=@gettfilter={0x24, 0x2e, 0x400, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xb, 0xffff}, {0xffff, 0x10}, {0x7}}}, 0xfffffffffffffe53}, 0x1, 0x0, 0x0, 0x4000020}, 0x20005000) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x20, 0x8f, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4}, 0xe) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x20, 0x5a, 0x113, 0x0, 0x0, {}, [@nested={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid}]}]}, 0x20}}, 0x0) recvmsg$unix(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x120) ioctl$SIOCGSTAMP(r1, 0x80108907, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r9 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r9, 0x0, 0x0, 0x8c5, &(0x7f0000000200)={0x11, 0x88a8, r8, 0x1, 0x0, 0x6, @random="7793db710c64"}, 0x14) setsockopt$packet_int(r1, 0x107, 0x10, &(0x7f0000000000)=0x4, 0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r10, 0x11b, 0x1, 0xfffffffffffffffd, &(0x7f0000000040)=0x60) r11 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000280)=0x6, 0x4) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0xc, 0x4}, {0xb, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=@newtfilter={0x16c, 0x2c, 0xd27, 0x170bd2b, 0x65dfdbfe, {0x0, 0x0, 0x0, r12, {0x0, 0x10}, {}, {0xd}}, [@filter_kind_options=@f_flow={{0x5}, {0x13c, 0x2, [@TCA_FLOW_ADDEND={0x8, 0x5, 0xf}, @TCA_FLOW_RSHIFT={0x8}, @TCA_FLOW_ACT={0x128, 0x9, 0x0, 0x1, [@m_ctinfo={0x124, 0xc, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x8}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xffffffff}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x0, 0x6, 0xfa}]}, {0xdf, 0x6, "7f771b602db5371890c3365ddae1eb1909c5d57f1407216666b858d221fd37000eefee085df44b84e11d48c87f996b02b24ba02c53c6241f45fa4359749c606e60abae514e29d78b0601d376df17abeb36cb0683a48a21df84865ea2a5741cb61dd058a83b712e7566afa7fc07ba603d5d660de244cc91507f4bb45cdadae25261ba5eeb890547c3473b8fae6973f27ec4b07836107d55108003c9328ef69b297d9044efc4cc4bd92b0b50fe9ddea41685fdb1e8f21aca1aad42a0985fc4650909cf3b9f5a1d3c8d80825e46f533462f6e5883e45873588c9308a9"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x16c}, 0x1, 0x0, 0x0, 0xc804}, 0x2) 1.073166526s ago: executing program 2 (id=398): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x6, [@func_proto, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @ptr, @func={0x4, 0x0, 0x0, 0xf, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x4e}, 0x28) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r4, @ANYBLOB="05"], 0x6c}, 0x1, 0x0, 0x0, 0x10004000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r2, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) 971.86433ms ago: executing program 1 (id=399): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f0000000340)={@remote}, 0x14) 948.107542ms ago: executing program 3 (id=400): r0 = socket$inet_sctp(0x2, 0x1, 0x84) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="b8000000190001000000000000000000000000000000000002"], 0xb8}}, 0x4040080) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x18, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec000000210001fdffffffffffffff00ac1ee100000000002000000000000000403403f438bd9e28000000000000000000000000000000000a0000edffffff00", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c0011"], 0xec}, 0x1, 0x0, 0x0, 0x4040040}, 0x0) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1800}}, 0x0, 0xc}, 0x94) (rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRES32], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2}, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000001000000b7050000080000001c00000000000000bf9800000000000056080000000000008500000005000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x8, 0x0, 0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r4 = socket(0x840000000002, 0x3, 0x9) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0x42, 0x4, 0x298, 0xffffffff, 0x98, 0x0, 0x168, 0xffffffff, 0xffffffff, 0x200, 0x200, 0x200, 0xffffffff, 0x4, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0x0, 'pim6reg0\x00', 'syzkaller1\x00', {}, {}, 0x6, 0x1}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@multicast2, @remote, 0x0, 0x0, 'veth1_macvtap\x00', 'tunl0\x00'}, 0x0, 0x70, 0xd0, 0x0, {0x60010000}}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x0, 0x9, [0x16, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2, 0xfffe, 0x0, 0x28, 0x0, 0x100]}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x3, 0x3d}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xffff0000}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_SREG={0x8}]}}}]}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x48046}, 0x0) (async, rerun: 32) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), 0x10, 0x749}, 0x94) (rerun: 32) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) (async) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6) (async) ioctl$TUNGETVNETLE(r5, 0x4010744d, &(0x7f0000000180)) (async, rerun: 64) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3e8, 0xa0, 0xa0, 0x1d8, 0xa0, 0x138, 0x138, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3, 0x7, @multicast1, 0x4e22}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xe, 0x4, 0x2}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x36}, @loopback, 0x1fffffffe, 0xff, 'pimreg1\x00', 'dummy0\x00', {0xff}, {}, 0x2, 0x1, 0x40}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x4, @remote, 0x4e21}}}, {{@ip={@remote, @multicast1, 0xff, 0x0, 'virt_wifi0\x00', 'team_slave_0\x00', {0xff}, {0xff}, 0x6c, 0x2, 0x59}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x3, 0x2}, {0x3, 0x0, 0x4}}}}, {{@ip={@local, @remote, 0xffffff00, 0xff, 'gretap0\x00', 'batadv0\x00', {}, {}, 0x84, 0x1, 0x5}, 0x0, 0x70, 0xe0}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1, 0x0, 0x46c5, 0x0, 0x0, "2b4e84400af0c61fe4b77d62d90d10d33fce7dc71425d4209d84f086ee827a4b064c417320a5f57e2dcc64d51dd574bd8c47cabfe9f21364d0c1a47f3240e300"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) (async, rerun: 64) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f00000002c0)={0x60, 0x0, 0x1, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@CTA_SEQ_ADJ_ORIG={0x4c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xb}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xcc}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8001}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x45) 846.39925ms ago: executing program 0 (id=401): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000080)="24000000580025000307f4f9002304000a04f55f08000100020100020800038005000000", 0x24) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000080)=0x1b, 0x4) close(r3) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newqdisc={0x50, 0x24, 0xe0b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0xffe0, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x20, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x81}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x842}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) bind$packet(r4, &(0x7f0000000040)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r4, &(0x7f0000000800), 0x0, 0x880, 0x0, 0x0) r8 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25GETUID(r8, 0x891a, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x6}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x50, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{}, [@TCA_NETEM_DELAY_DIST={0x4, 0xd}]}}}]}, 0x50}}, 0x0) 728.044933ms ago: executing program 1 (id=402): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001680)=ANY=[@ANYBLOB="380100001a0013070000000000000000fe8000000000000000000013000000bbffffffff0000000000000000000000000000000000000020000000000000f574", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000000000000000000000330000002001000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000feffffffffffffff00000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000200010000000000000000004800010073686131"], 0x138}}, 0x0) 701.234883ms ago: executing program 4 (id=403): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="c0000000000101040000000000000000020000007400018014000180080001000000000008000200e00000020c00028005000100000000004300028005000100060000000c00038005000100000000000c0002"], 0xc0}}, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5000000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="1133020031880000280012800b0001006d61637365630000180002800c0004000400000100c28000210005000200000008000500", @ANYRES32=r3], 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x0) 609.154327ms ago: executing program 2 (id=404): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000064000000060a010400000000000000000100000008000b40000000003c00048038000180080001006e6174002c00028008000540000000000800014000000000080006400000000d08000240ffff000a080006"], 0xd8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r0 = socket(0x10, 0x803, 0x0) shutdown(r0, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r1, @ANYBLOB="020000000000800080001200080001007674693674000200"], 0xa0}}, 0x0) 508.737218ms ago: executing program 0 (id=405): syz_init_net_socket$ax25(0x3, 0x2, 0xce) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000300)=r3) ioctl$OCFS2_IOC_RESVSP(r0, 0x40305828, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000017c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00 \x00'/19, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="000000000100"/21], 0x48) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$nl_route(0x10, 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000840)='\'', 0x1}], 0x1}, 0x4) 504.821745ms ago: executing program 1 (id=406): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010800000000000000000000000000ac1414aa00000000000000000000000000000005000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffffffffff7f0000000000000000000000000000000000000000000a00000000000000000000008040000000000000000008000000400000000000000000000000004400050000000000000000000000000000000000000004d53c"], 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000800000000000003000000000000000000000000000000fdfffffffbffffff0000000000000000ffffffffffffffff053b000000000000000000000000000002000000000000005600000000000000feffffffff7f40000200000000000008000000000000000001"], 0xfc}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000800000000000003000000000000000000000000000000fdfffffffbffffff0000000000000000ffffffffffffffff053b000000000000000000000000000002000000000000005600000000000000feffffffff7f40000200000000000008000000000000000001"], 0xfc}, 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r2, &(0x7f00000009c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x8, @dev={0xfe, 0x80, '\x00', 0x40}, 0x3}, 0x1c, 0x0}}], 0x1, 0xd8d1) (async) sendmmsg$inet6(r2, &(0x7f00000009c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x8, @dev={0xfe, 0x80, '\x00', 0x40}, 0x3}, 0x1c, 0x0}}], 0x1, 0xd8d1) r3 = socket$xdp(0x2c, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x4) (async) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000003080)=[{&(0x7f0000000400)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}, {&(0x7f0000001f80)="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", 0x1000}, {&(0x7f0000002f80)="f6764537006e24a16a360871e8dbbc1c770807fc79449e5db4e013f304e6a95e5d1beb23194889fa72dec0587d75dd55fa8ecbb35e5957cc45c9203fa3d0b6e6f20bc82552fe42e3607970cd133a51", 0x4f}, {&(0x7f0000003000)="de4c24a4f699835e5950529b84352c64d53754eb34250721f224af892c9472245cc4b8a06f79db22adb55a9c2382391c154c1ed64f76c570c76de32876220014c2a7765173dc32e644ade75091e41aed151fb8fe22a5b961161624aca05bef7563b376ab46f8ce842a46a38838b6e56fbaa89cd80531bba32106d521a99d3f", 0x7f}], 0x4}, 0x8100) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x2, 0x1) (async) r6 = socket$inet(0x2, 0x2, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) socket$inet6_udp(0xa, 0x2, 0x0) (async) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000007c0)=@security={'security\x00', 0x44, 0x4, 0x5d0, 0xffffffff, 0x0, 0x0, 0x3f8, 0xffffffff, 0xffffffff, 0x500, 0x500, 0x500, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x203, 0x200, 0x328, 0x8502, {}, [@common=@inet=@hashlimit3={{0x158}, {'ip6tnl0\x00', {0x7, 0x9, 0x42, 0x5, 0x7, 0xfd6, 0x5, 0x5, 0x18, 0x68}}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:initctl_t:s0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x11}}, @common=@unspec=@NFQUEUE2={0x28}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, [0xff, 0xffffffff, 0xff000000, 0xff000000], 0x0, 0x4e21, 0x0, 0x4e23, 0x0, 0x8000}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x630) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_int(r8, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) writev(r9, &(0x7f0000000180)=[{&(0x7f0000000040)='E', 0x1}], 0x1) sendmsg$inet(r6, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)='\b\x00', 0x2}, {&(0x7f0000000200)="000000001824", 0x6}], 0x2, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x7}, 0x240088d4) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="00200001030000000000800000021414007f0100000000000008000200000000001d7208060f710ef405388b0000003e2459eee7f3b01ad06700"/68], 0x24}}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="00200001030000000000800000021414007f0100000000000008000200000000001d7208060f710ef405388b0000003e2459eee7f3b01ad06700"/68], 0x24}}, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) (async) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) r10 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000000e00)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4b0, 0x1a8, 0xc0, 0x290, 0x0, 0x0, 0x418, 0x418, 0x418, 0x418, 0x418, 0x6, &(0x7f0000000240), {[{{@ip={@private=0xa010101, @private=0xa010102, 0xff000000, 0xff000000, 'vxcan1\x00', 'wg2\x00', {0xff}, {0xff}, 0x0, 0x1, 0x79}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}, {0x2, 0x6}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x29}, @private=0xa010100, 0xff000000, 0xff000000, 'wg0\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x1, 0x42}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@ttl={{0x28}, {0x2, 0x10}}, @inet=@rpfilter={{0x28}, {0x9}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0xf, 0x4}}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000, 0xffffff00, 'syz_tun\x00', 'veth1_to_bridge\x00', {0xff}, {}, 0x67, 0x2}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x3, 0x9c}}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0xff, 0x7fffffff, @multicast2, 0xf}}}, {{@ip={@loopback, @dev={0xac, 0x14, 0x14, 0x19}, 0xffffffff, 0xff000000, 'virt_wifi0\x00', 'bond0\x00', {0xff}, {0xff}, 0x2, 0x2, 0x2}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xa}}, @common=@inet=@ecn={{0x28}, {0x1, 0xea6eeea839e6d787, 0xc, 0x5}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x2, 0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x510) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000300)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) (async) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r12}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@deltclass={0x3c, 0x29, 0x300, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r12, {0x8, 0xd}, {0xffe0, 0x9}, {0x10, 0x5}}, [@TCA_RATE={0x6, 0x5, {0x6, 0x1}}, @tclass_kind_options=@c_cbs={0x8}, @TCA_RATE={0x6, 0x5, {0x0, 0x2}}]}, 0x3c}}, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000080)={@dev}, &(0x7f0000000200)=0x14) 498.898534ms ago: executing program 3 (id=407): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x40, 0x0, 0x2}}, 0xfffffd40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000071123b000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) socket$tipc(0x1e, 0x5, 0x0) (async) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x40, 0x0, 0x2}}, 0xfffffd40) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000071123b000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) (async) 408.06185ms ago: executing program 2 (id=408): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d5000/0x3000)=nil, 0x3000, 0x0, 0x13, r2, 0x3000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000497000/0x2000)=nil, 0x2000, 0x1000000, 0x12, r3, 0x80000000) r4 = socket(0x10, 0xa, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@gettaction={0x3, 0x5a, 0x1, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x0, 0x4, 0x6}, @action_dump_flags=@TCA_ROOT_FLAGS={0x0, 0x2, {0x1}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup(r3, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) r6 = accept$nfc_llcp(r5, &(0x7f0000000200), &(0x7f00000002c0)=0x60) ioctl$XFS_IOC_START_COMMIT(r2, 0x80585882, &(0x7f0000000100)={0xffffffffffffffff}) r8 = openat$cgroup_ro(r7, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_int(r10, 0x0, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x1) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x20, r12, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x20}}, 0x0) sendmsg$TIPC_NL_NODE_GET(r9, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002800)={&(0x7f0000000580)={0x14, r12, 0x10, 0x70bd3c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x46000004}, 0x20000014) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r8, 0x0) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f0000000180), 0x4) ioctl$XFS_IOC_FSGROWFSDATA(r6, 0x4010586e, &(0x7f0000000340)={0x9, 0x8}) mmap(&(0x7f0000692000/0x1000)=nil, 0x1000, 0x0, 0x12, r5, 0x0) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r13, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x52, 0x10000}) 332.48861ms ago: executing program 4 (id=409): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000008300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x3, 0x26e, 0xd, 0xd, 0x1040, r0, 0xf91c, '\x00', 0x0, r1, 0x3, 0x9, 0x1}, 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r2, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x64, r3, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x8000) 286.985127ms ago: executing program 3 (id=410): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7b53000000000000140012800b00010067656e5d766512000400028008001f000900000d"], 0x3c}}, 0x0) 221.674297ms ago: executing program 1 (id=411): ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000280)={{0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x400000, &(0x7f0000000040)={@align=0x3, {0x9, 0x2, 0x200, 0x7f}}, 0x6, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0xfffffffd}, 0x1, &(0x7f0000000240)=[{0x1, 0x1, &(0x7f0000000100)=')-:\x00', &(0x7f0000000140)="2117e597cfef9fffdb718453d30cf0c159ebb83602a7ea27831d13d2027f028d6651eaa13744d5824a9f4baff3ab995bc4e5cbfc0477332f694b75232c451e7352f2c4945d908874b917676d9d76266da61ed18112f4a019bb3c1911ec437cdfa040c1406fd82ae2ab9bee1a9bb48a8250cc1337db9f9d91c5232aca27f29fa3865411ed8a768afe81027fe6bc998b0b4ca3d2704caf0a1b835224aae032953f8da2f504e49c51d5a46415a98de9f1be368778e6a698f27bfcfbcaf498158a097a038249ecb0bb5f2270b1c1e8b9bde1de30f0513d8a56921424f7a4f605f8bf05fac7c9c5", 0xe5, 0x2}]}) sendto$llc(r0, &(0x7f0000000300)="5e0796e5ec8aec42db8b0ce7cf2095368fb14139bfe180a553cd114ef6e18302aea98b93a19a9f444afc09f2fcfac397f232060ed206f5ed6dfa5ed2132b61fc50b50f273aa6f454cb831c61583fd044ee827597bd77903c5504ba77ee58f8de02829ee5fbc1c208b4cba7be30c4", 0x6e, 0x0, &(0x7f0000000380)={0x1a, 0x301, 0x6d, 0x9, 0x4, 0x80, @broadcast}, 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x1d, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0x98}, @map_val={0x18, 0x5, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x6}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x3}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0xf}, @ldst={0x1, 0x5a68afe3993c52dd, 0x4, 0x8, 0x4, 0x1, 0xffffffffffffffff}, @generic={0x5, 0x4, 0x7, 0x5, 0xf54d}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @jmp={0x5, 0x1, 0x6, 0x0, 0x5, 0xfffffffffffffff4, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000500)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000540)={0x1, 0x1, 0x3, 0x4}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000580)=[r0, r0, r0], &(0x7f00000005c0)=[{0x1, 0x5, 0x8, 0x6}, {0x2, 0x5, 0x0, 0xb}, {0x1, 0x3, 0x2, 0xb}, {0x5, 0x2, 0xc, 0x7}, {0x3, 0x2, 0xa, 0x7e4e9ccebbcc9e92}, {0x4, 0x4, 0xb, 0x2}, {0x2, 0x2, 0x5, 0x7}], 0x10, 0x4}, 0x94) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000700)={0x375, 0xfffffffffffffffd, 0x2, 0x8, 0x4, 0x0, [{0x4, 0x4, 0x6, '\x00', 0x100}, {0x7, 0xda, 0x8, '\x00', 0x201}, {0x498, 0x8, 0x100, '\x00', 0x2}, {0x4, 0x2, 0x6, '\x00', 0x2}]}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r0) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000a00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000880)={0x140, 0x15, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_USERDATA={0xdd, 0x8, "9228c7a5c63c9b7a7967a96c313a4737760d90d1a962afb12375de7f0bcea6dce102d803d932d922099396a047d9a3b1c5cb3822359bc58b66641258869a9dcbb2c5ad6fcaebf4dadd63a8795de0b5fe622f0982a1a0b47c0a1af93dd2472df1e135280bf172952f40a9ae55b91f7c4ef4f27d29751e4cfc903e5fa9f13827ad0015ac185e7a876d66ed315d6de7e8657549a0c58807ffcb4e32be7bf9f5d3c47ed5b84f48b89378f56d8825a93d7c64e96757552a813434cf1221ca04912a402d4250d1bb756b92b401245ef4f1b5ebd74b51525c268a3c63"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x140}, 0x1, 0x0, 0x0, 0x4000}, 0x0) connect$llc(r0, &(0x7f0000000a40)={0x1a, 0x311, 0x40, 0x37, 0x9, 0xff, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x10) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000001200)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000011c0)={&(0x7f0000000ac0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x401, 0x0, 0x0, {0xc, 0x0, 0x3}, [@NFTA_CHAIN_USERDATA={0x11, 0xc, "4ee4abcb38b62335669ed15706"}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}]}, @NFT_MSG_DELFLOWTABLE={0x4c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_FLOWTABLE_HOOK={0x38, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'rose0\x00'}, {0x14, 0x1, 'veth0_to_hsr\x00'}]}]}]}, @NFT_MSG_NEWFLOWTABLE={0x1f4, 0x16, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK={0x94, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'veth1_to_bond\x00'}, {0x14, 0x1, 'nr0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bridge_slave_0\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}]}]}, @NFTA_FLOWTABLE_HOOK={0x140, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_virt_wifi\x00'}, {0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'veth0_to_bond\x00'}, {0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'veth0_vlan\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg0\x00'}, {0x14, 0x1, 'veth1_to_bond\x00'}, {0x14, 0x1, 'ipvlan0\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x10001}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vlan1\x00'}, {0x14, 0x1, 'syzkaller0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWCHAIN={0x94, 0x3, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_CHAIN_USERDATA={0x1c, 0xc, "691afe96cf4116352e030c7ab259df54ef3cc88ff51621f1"}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x7}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_USERDATA={0x9, 0xc, "713ab2bddf"}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'geneve0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}]}, @NFT_MSG_NEWSET={0x7c, 0x9, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_SET_EXPR={0x60, 0x11, 0x0, 0x1, @nat={{0x8}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x42}, @NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0x17}, @NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2b}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_NAT_FLAGS={0x8}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0xc}]}}}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x9}]}, @NFT_MSG_NEWRULE={0x1c, 0x6, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWFLOWTABLE={0x2a8, 0x16, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x14c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x14, 0x1, 'syzkaller1\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'pimreg0\x00'}, {0x14, 0x1, 'pim6reg0\x00'}, {0x14, 0x1, 'sit0\x00'}, {0x14, 0x1, 'erspan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'dvmrp0\x00'}, {0x14, 0x1, 'gre0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bridge0\x00'}, {0x14, 0x1, 'gretap0\x00'}, {0x14, 0x1, 'veth0_to_bridge\x00'}, {0x14, 0x1, 'tunl0\x00'}]}]}, @NFTA_FLOWTABLE_HOOK={0xe8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6d67}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'team_slave_1\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'ip6gre0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'pimreg1\x00'}, {0x14, 0x1, 'ip_vti0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7fffffff}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}, @NFT_OBJECT_CT_TIMEOUT=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x6d0}}, 0x40000) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000001240)={{r3}, 0x4, 0x1, 0xa11}) r4 = syz_genetlink_get_family_id$smc(&(0x7f00000012c0), r0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x2d1aefc2cc232770}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x1c, r4, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000000}, 0x4000800) ioctl$int_out(0xffffffffffffffff, 0x5460, &(0x7f00000013c0)) ioctl$BTRFS_IOC_SPACE_INFO(r2, 0xc0109414, &(0x7f0000001400)={0xbfc, 0x1, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) ioctl$F2FS_IOC_SEC_TRIM_FILE(r1, 0x4018f514, &(0x7f00000133c0)={0x1, 0x8001}) ioctl$FAT_IOCTL_GET_VOLUME_ID(r3, 0x80047213, &(0x7f0000013400)) setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, &(0x7f0000013440)="c37ec83c0f360e21eb778d45192826b3a214442f20fa4867f1c565aa0ffa79cec5f8958c22f59620bc2603e1f7113be963dd31", 0x33) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000134c0), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000013580)={&(0x7f0000013480)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000013540)={&(0x7f0000013500)={0x34, r5, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x8000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000013600), r0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r6, &(0x7f00000136c0)={&(0x7f00000135c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000013680)={&(0x7f0000013640)={0x1c, r7, 0x200, 0x70bd29, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x24048001) sendto$netrom(r0, &(0x7f0000013700)="b47e88e10d19c8fb8f2d630b71d01ccd729b41af1debbeb91f7a3837811e51342ab3ecaf9090bc05edd20c904642c4195c1b7421da27a51414cff61cc3b8e9cac7c1813f744284c2c311a096c2f0df1dea282ac5e7d65dcd395faa0e52d7cc92d4", 0x61, 0x8080, &(0x7f0000013780)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8}, [@null, @bcast, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast]}, 0x48) ioctl$XFS_IOC_GOINGDOWN(r1, 0x8004587d, &(0x7f0000013800)=0xfffffffa) openat$tun(0xffffffffffffff9c, &(0x7f0000013840), 0x440100, 0x0) ioctl$XFS_IOC_COMMIT_RANGE(r1, 0x40585883, &(0x7f0000013880)={r6, 0x0, 0x0, 0x2, 0xfffffffffffffffe, 0x2, [0x2, 0x6, 0x4, 0xfffffffffffffffd, 0x59c, 0x3]}) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000013940), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r6, &(0x7f0000013bc0)={&(0x7f0000013900)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000013b80)={&(0x7f0000013980)={0x1f0, r8, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x81}]}, @TIPC_NLA_BEARER={0x88, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x226, @private1, 0xbc}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast1}}}}]}, @TIPC_NLA_NODE={0xe0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "b3b3fa306e41f2d88561dbbfdce603f922d45d14"}}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "cb12030d289779d8a2424e3948ec3fdf0264096500abc174a310f2acdd"}}, @TIPC_NLA_NODE_ID={0x58, 0x3, "c844f18f13e09204c3a433883116a10e0a377c5348a3534fb4f642bd7b5df57997c81f17fad6e8b4babc0379bb778c73ff696706c17db9e91585bed91087e90a8423c75b32feb143f5c60a9f1944658e3553f98c"}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xf}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xc}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x702d}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket$inet(0x2, 0x1004, 0xfffffffd) 129.1371ms ago: executing program 2 (id=412): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000004b40)=[{{&(0x7f0000001140)={0xa, 0x4e23, 0x10, @private2, 0x8}, 0x1c, &(0x7f00000013c0)=[{&(0x7f00000016c0)="99", 0x1}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e24, 0x9b5d, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80}, 0x1c, &(0x7f00000015c0)=[{&(0x7f0000001700)="92", 0x1}], 0x1}}], 0x2, 0x4000090) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdfc, {0x0, 0x0, 0x0, r2, {0xfff3}, {0x8, 0xfff1}, {0x2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x10) shutdown(r0, 0x1) (async) shutdown(r0, 0x1) 123.373145ms ago: executing program 4 (id=413): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="14000000130001ffffff7f8cd913e90002"], 0x14}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000001940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000340)="0a000300010000", 0x7) recvmmsg(r2, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x10040, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x7}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14, 0x1, {0x409, 0x0, 0x8001, 0x1c, 0x3, 0x19, 0x4}}]}}]}, 0x148}}, 0x0) ioctl$sock_netrom_SIOCDELRT(r3, 0x8916, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYRES64=r1], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x24}, 0x94) r7 = socket$igmp(0x2, 0x3, 0x2) getpeername$inet(r7, &(0x7f0000000100)={0x2, 0x0, @dev}, &(0x7f0000000240)=0x10) 0s ago: executing program 1 (id=414): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x81}, 0x94) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f00000003c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) socket(0x2d, 0x3, 0x5) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newtaction={0x64, 0x30, 0x9e54f29ff072a93b, 0x0, 0x25dfdbfc, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe80, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x81}, 0x94) (async) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f00000003c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x2d, 0x3, 0x5) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newtaction={0x64, 0x30, 0x9e54f29ff072a93b, 0x0, 0x25dfdbfc, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe80, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.134' (ED25519) to the list of known hosts. [ 82.476601][ T5809] cgroup: Unknown subsys name 'net' [ 82.593773][ T5809] cgroup: Unknown subsys name 'cpuset' [ 82.603985][ T5809] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.250421][ T5809] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.786484][ T5830] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.795726][ T5830] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.803708][ T5832] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.812608][ T5832] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.824174][ T5832] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.827997][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.842345][ T5832] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.842826][ T5830] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.854097][ T5832] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.864759][ T5830] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.867827][ T5832] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.880014][ T5830] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.889149][ T5141] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.906791][ T5141] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.915126][ T5141] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.947330][ T5141] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.958754][ T5141] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.969743][ T5141] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.982385][ T5141] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.984902][ T5830] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.999929][ T5141] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.011009][ T5141] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.020674][ T5141] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.036350][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.044459][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.732915][ T5821] chnl_net:caif_netlink_parms(): no params data found [ 88.780346][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 88.841617][ T5822] chnl_net:caif_netlink_parms(): no params data found [ 88.892473][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 88.989994][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 89.108653][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.116550][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.123878][ T5821] bridge_slave_0: entered allmulticast mode [ 89.131641][ T5821] bridge_slave_0: entered promiscuous mode [ 89.180269][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.187462][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.195011][ T5823] bridge_slave_0: entered allmulticast mode [ 89.202468][ T5823] bridge_slave_0: entered promiscuous mode [ 89.210431][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.217614][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.225396][ T5821] bridge_slave_1: entered allmulticast mode [ 89.232812][ T5821] bridge_slave_1: entered promiscuous mode [ 89.268568][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.275917][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.284418][ T5823] bridge_slave_1: entered allmulticast mode [ 89.292004][ T5823] bridge_slave_1: entered promiscuous mode [ 89.326625][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.333979][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.341671][ T5822] bridge_slave_0: entered allmulticast mode [ 89.349084][ T5822] bridge_slave_0: entered promiscuous mode [ 89.385704][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.393051][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.400773][ T5833] bridge_slave_0: entered allmulticast mode [ 89.408071][ T5833] bridge_slave_0: entered promiscuous mode [ 89.416056][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.423469][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.430770][ T5822] bridge_slave_1: entered allmulticast mode [ 89.438743][ T5822] bridge_slave_1: entered promiscuous mode [ 89.460123][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.492588][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.500077][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.507488][ T5833] bridge_slave_1: entered allmulticast mode [ 89.515238][ T5833] bridge_slave_1: entered promiscuous mode [ 89.536480][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.548114][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.557657][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.565826][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.573369][ T5827] bridge_slave_0: entered allmulticast mode [ 89.581829][ T5827] bridge_slave_0: entered promiscuous mode [ 89.614910][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.636195][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.643627][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.651350][ T5827] bridge_slave_1: entered allmulticast mode [ 89.658646][ T5827] bridge_slave_1: entered promiscuous mode [ 89.680618][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.751172][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.763075][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.774067][ T5823] team0: Port device team_slave_0 added [ 89.782461][ T5821] team0: Port device team_slave_0 added [ 89.801662][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.824504][ T5823] team0: Port device team_slave_1 added [ 89.832319][ T5821] team0: Port device team_slave_1 added [ 89.841772][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.854065][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.932614][ T5822] team0: Port device team_slave_0 added [ 89.960671][ T50] Bluetooth: hci0: command tx timeout [ 89.963665][ T5826] Bluetooth: hci2: command tx timeout [ 89.967119][ T5141] Bluetooth: hci1: command tx timeout [ 89.997194][ T5833] team0: Port device team_slave_0 added [ 90.005027][ T5822] team0: Port device team_slave_1 added [ 90.011688][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.018696][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.045715][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.050827][ T5141] Bluetooth: hci3: command tx timeout [ 90.064605][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.071924][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.097977][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.111206][ T5827] team0: Port device team_slave_0 added [ 90.118894][ T5833] team0: Port device team_slave_1 added [ 90.125076][ T5141] Bluetooth: hci4: command tx timeout [ 90.151549][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.158525][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.185199][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.208127][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.215259][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.241786][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.271090][ T5827] team0: Port device team_slave_1 added [ 90.316800][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.324403][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.351256][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.366068][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.373463][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.399604][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.422558][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.430030][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.456348][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.488751][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.495790][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.521992][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.544811][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.552145][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.578255][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.602792][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.609841][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.635971][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.672112][ T5823] hsr_slave_0: entered promiscuous mode [ 90.679294][ T5823] hsr_slave_1: entered promiscuous mode [ 90.701278][ T5821] hsr_slave_0: entered promiscuous mode [ 90.707714][ T5821] hsr_slave_1: entered promiscuous mode [ 90.714195][ T5821] debugfs: 'hsr0' already exists in 'hsr' [ 90.720082][ T5821] Cannot create hsr debugfs directory [ 90.756878][ T5822] hsr_slave_0: entered promiscuous mode [ 90.763800][ T5822] hsr_slave_1: entered promiscuous mode [ 90.770307][ T5822] debugfs: 'hsr0' already exists in 'hsr' [ 90.776203][ T5822] Cannot create hsr debugfs directory [ 90.892726][ T5833] hsr_slave_0: entered promiscuous mode [ 90.899184][ T5833] hsr_slave_1: entered promiscuous mode [ 90.905682][ T5833] debugfs: 'hsr0' already exists in 'hsr' [ 90.911662][ T5833] Cannot create hsr debugfs directory [ 90.963261][ T5827] hsr_slave_0: entered promiscuous mode [ 90.970211][ T5827] hsr_slave_1: entered promiscuous mode [ 90.976743][ T5827] debugfs: 'hsr0' already exists in 'hsr' [ 90.982541][ T5827] Cannot create hsr debugfs directory [ 91.530064][ T5822] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.545725][ T5822] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.566958][ T5822] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.580544][ T5822] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.588481][ T5822] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.599268][ T5822] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.616993][ T5822] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.627880][ T5822] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.681093][ T5821] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.698525][ T5821] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.706873][ T5821] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.717907][ T5821] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.726417][ T5821] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.739012][ T5821] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.748481][ T5821] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.758769][ T5821] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.853912][ T5833] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 91.864959][ T5833] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.873214][ T5833] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 91.884105][ T5833] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.892771][ T5833] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 91.905430][ T5833] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.913688][ T5833] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 91.924270][ T5833] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.969058][ T9] cfg80211: failed to load regulatory.db [ 92.039580][ T50] Bluetooth: hci0: command tx timeout [ 92.039590][ T5826] Bluetooth: hci2: command tx timeout [ 92.051030][ T5141] Bluetooth: hci1: command tx timeout [ 92.078467][ T5827] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.091966][ T5827] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.112893][ T5827] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.122661][ T50] Bluetooth: hci3: command tx timeout [ 92.133271][ T5827] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.147491][ T5827] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.159320][ T5827] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.168484][ T5827] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.178869][ T5827] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.199919][ T50] Bluetooth: hci4: command tx timeout [ 92.304700][ T5823] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.315642][ T5823] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.323942][ T5823] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.334877][ T5823] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.343197][ T5823] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.353731][ T5823] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.370044][ T5823] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.380623][ T5823] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.405657][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.485539][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.506986][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.542015][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.558350][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.566149][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.585560][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.622310][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.629547][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.640706][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.647965][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.680017][ T194] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.687195][ T194] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.711641][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.736708][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.773495][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.780697][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.821556][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.828754][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.851803][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.897519][ T194] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.904747][ T194] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.929221][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.936390][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.958618][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.103102][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.140551][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.147809][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.203252][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.210615][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.551054][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.590159][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.711783][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.824649][ T5821] veth0_vlan: entered promiscuous mode [ 93.846326][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.861626][ T5822] veth0_vlan: entered promiscuous mode [ 93.890492][ T5821] veth1_vlan: entered promiscuous mode [ 93.918120][ T5822] veth1_vlan: entered promiscuous mode [ 93.986938][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.022568][ T5821] veth0_macvtap: entered promiscuous mode [ 94.056875][ T5821] veth1_macvtap: entered promiscuous mode [ 94.119741][ T50] Bluetooth: hci0: command tx timeout [ 94.125356][ T5141] Bluetooth: hci1: command tx timeout [ 94.125379][ T5826] Bluetooth: hci2: command tx timeout [ 94.160928][ T5827] veth0_vlan: entered promiscuous mode [ 94.184525][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.193153][ T5822] veth0_macvtap: entered promiscuous mode [ 94.210641][ T5826] Bluetooth: hci3: command tx timeout [ 94.224243][ T5822] veth1_macvtap: entered promiscuous mode [ 94.233856][ T5827] veth1_vlan: entered promiscuous mode [ 94.243718][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.276286][ T5823] veth0_vlan: entered promiscuous mode [ 94.290685][ T5826] Bluetooth: hci4: command tx timeout [ 94.297305][ T58] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.318616][ T58] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.328850][ T58] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.345946][ T58] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.364745][ T5823] veth1_vlan: entered promiscuous mode [ 94.387159][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.411444][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.477047][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.495606][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.517161][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.527001][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.551508][ T5833] veth0_vlan: entered promiscuous mode [ 94.564874][ T5827] veth0_macvtap: entered promiscuous mode [ 94.604386][ T5833] veth1_vlan: entered promiscuous mode [ 94.624722][ T5827] veth1_macvtap: entered promiscuous mode [ 94.654483][ T194] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.665859][ T5823] veth0_macvtap: entered promiscuous mode [ 94.673990][ T194] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.711297][ T5823] veth1_macvtap: entered promiscuous mode [ 94.781475][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.794693][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.808228][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.821106][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.822395][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.863376][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.899270][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.927191][ T5821] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.946597][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.964369][ T5833] veth0_macvtap: entered promiscuous mode [ 94.979392][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.990138][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.014526][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.024600][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.036009][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.047993][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.061276][ T5833] veth1_macvtap: entered promiscuous mode [ 95.085859][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.096434][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.119713][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.150082][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.224311][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.292316][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.368961][ T5948] netlink: 'syz.2.6': attribute type 2 has an invalid length. [ 95.390986][ T5948] netlink: 'syz.2.6': attribute type 8 has an invalid length. [ 95.399127][ T5928] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.410107][ T5948] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6'. [ 95.429995][ T5951] netlink: 'syz.2.6': attribute type 2 has an invalid length. [ 95.439537][ T5951] netlink: 'syz.2.6': attribute type 8 has an invalid length. [ 95.447313][ T5951] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6'. [ 95.463358][ T5928] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.497071][ T194] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.508258][ T5928] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.518085][ T194] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.542617][ T5928] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.590257][ T5955] netlink: 'syz.0.1': attribute type 1 has an invalid length. [ 95.612041][ T5955] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'. [ 95.652996][ T5928] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.669894][ T5928] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.697403][ T5949] syz.0.1 uses obsolete (PF_INET,SOCK_PACKET) [ 95.793486][ T5962] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8'. [ 95.827708][ T5928] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.851433][ T5928] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.932214][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.971909][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.031702][ T5964] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9'. [ 96.095831][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.129335][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.191613][ T5968] netlink: 44 bytes leftover after parsing attributes in process `syz.0.10'. [ 96.200293][ T5826] Bluetooth: hci2: command tx timeout [ 96.207029][ T5826] Bluetooth: hci0: command tx timeout [ 96.213629][ T5826] Bluetooth: hci1: command tx timeout [ 96.266889][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.281025][ T5826] Bluetooth: hci3: command tx timeout [ 96.286666][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.359775][ T5826] Bluetooth: hci4: command tx timeout [ 96.548891][ T5972] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.624837][ T5972] bridge_slave_0 (unregistering): left allmulticast mode [ 96.649968][ T5972] bridge_slave_0 (unregistering): left promiscuous mode [ 96.663428][ T5972] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.555647][ T6014] netlink: 'syz.2.21': attribute type 1 has an invalid length. [ 97.568173][ T6014] netlink: 'syz.2.21': attribute type 1 has an invalid length. [ 97.712093][ T6028] Zero length message leads to an empty skb [ 98.031477][ T6038] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 98.121347][ T6048] netlink: 'syz.1.27': attribute type 5 has an invalid length. [ 98.123104][ T6047] netlink: 'syz.0.28': attribute type 3 has an invalid length. [ 98.185125][ T6048] netlink: 140 bytes leftover after parsing attributes in process `syz.1.27'. [ 98.203762][ T6047] netlink: 766 bytes leftover after parsing attributes in process `syz.0.28'. [ 98.248990][ T6047] Bluetooth: MGMT ver 1.23 [ 98.446707][ T6056] sctp: [Deprecated]: syz.4.29 (pid 6056) Use of struct sctp_assoc_value in delayed_ack socket option. [ 98.446707][ T6056] Use struct sctp_sack_info instead [ 99.222415][ T6089] syzkaller0: entered promiscuous mode [ 99.248310][ T6089] syzkaller0: entered allmulticast mode [ 99.312493][ T6089] netlink: 'syz.3.40': attribute type 1 has an invalid length. [ 99.538989][ T6092] xt_l2tp: missing protocol rule (udp|l2tpip) [ 99.766484][ T6116] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 100.047456][ T6125] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 100.656810][ T6158] netlink: 'syz.1.61': attribute type 1 has an invalid length. [ 100.955214][ T6174] netlink: 320 bytes leftover after parsing attributes in process `syz.3.64'. [ 101.271446][ T5885] hid (null): global environment stack underflow [ 101.296728][ T5885] hid-generic 0005:0003:0004.0001: global environment stack underflow [ 101.306966][ T5885] hid-generic 0005:0003:0004.0001: item 0 0 1 11 parsing failed [ 101.315934][ T5885] hid-generic 0005:0003:0004.0001: probe with driver hid-generic failed with error -22 [ 101.801624][ T6209] bridge_slave_0: left allmulticast mode [ 101.821582][ T6202] netlink: 8 bytes leftover after parsing attributes in process `syz.4.74'. [ 101.833975][ T6209] bridge_slave_0: left promiscuous mode [ 101.845649][ T6209] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.863436][ T6209] bridge_slave_1: left allmulticast mode [ 101.869326][ T6209] bridge_slave_1: left promiscuous mode [ 101.876350][ T6209] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.913356][ T6209] bond0: (slave bond_slave_0): Releasing backup interface [ 101.936941][ T6209] bond0: (slave bond_slave_1): Releasing backup interface [ 101.967471][ T6209] team0: Port device team_slave_0 removed [ 101.980508][ T6209] team0: Port device team_slave_1 removed [ 101.987787][ T6209] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.997010][ T6209] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.008704][ T6209] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.017285][ T6209] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.034748][ T6209] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 102.097408][ T6225] warning: `syz.1.75' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 102.258417][ T6230] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 102.272343][ T6230] bond1 (unregistering): Released all slaves [ 104.623622][ T6198] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 105.221187][ T6268] netlink: 256 bytes leftover after parsing attributes in process `syz.2.93'. [ 105.245801][ T6268] netlink: 'syz.2.93': attribute type 9 has an invalid length. [ 105.286222][ T6273] x_tables: duplicate underflow at hook 2 [ 105.327899][ T6276] FAULT_INJECTION: forcing a failure. [ 105.327899][ T6276] name failslab, interval 1, probability 0, space 0, times 0 [ 105.365573][ T6276] CPU: 0 UID: 0 PID: 6276 Comm: syz.3.97 Not tainted syzkaller #0 PREEMPT(full) [ 105.365603][ T6276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 105.365625][ T6276] Call Trace: [ 105.365639][ T6276] [ 105.365648][ T6276] dump_stack_lvl+0xe8/0x150 [ 105.365695][ T6276] should_fail_ex+0x412/0x560 [ 105.365732][ T6276] should_failslab+0xa8/0x100 [ 105.365755][ T6276] ? skb_clone+0x212/0x3a0 [ 105.365776][ T6276] kmem_cache_alloc_noprof+0x87/0x650 [ 105.365818][ T6276] skb_clone+0x212/0x3a0 [ 105.365842][ T6276] __netlink_deliver_tap+0x404/0x850 [ 105.365888][ T6276] ? netlink_deliver_tap+0x2e/0x1b0 [ 105.365927][ T6276] netlink_deliver_tap+0x19c/0x1b0 [ 105.365959][ T6276] netlink_sendskb+0x68/0x140 [ 105.365991][ T6276] netlink_rcv_skb+0x2b6/0x4b0 [ 105.366022][ T6276] ? __pfx_genl_rcv_msg+0x10/0x10 [ 105.366046][ T6276] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 105.366091][ T6276] ? down_read+0x270/0x2e0 [ 105.366118][ T6276] ? genl_rcv+0xd/0x40 [ 105.366142][ T6276] genl_rcv+0x28/0x40 [ 105.366162][ T6276] netlink_unicast+0x75c/0x8e0 [ 105.366201][ T6276] netlink_sendmsg+0x813/0xb40 [ 105.366243][ T6276] ? __pfx_netlink_sendmsg+0x10/0x10 [ 105.366278][ T6276] ? aa_sock_msg_perm+0xf1/0x1b0 [ 105.366310][ T6276] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 105.366347][ T6276] ____sys_sendmsg+0x972/0x9f0 [ 105.366380][ T6276] ? __might_fault+0xaf/0x130 [ 105.366417][ T6276] ? __pfx_____sys_sendmsg+0x10/0x10 [ 105.366461][ T6276] ? import_iovec+0x73/0xa0 [ 105.366486][ T6276] ___sys_sendmsg+0x2a5/0x360 [ 105.366518][ T6276] ? __lock_acquire+0x6b5/0x2cf0 [ 105.366552][ T6276] ? __pfx____sys_sendmsg+0x10/0x10 [ 105.366625][ T6276] ? __fget_files+0x2a/0x420 [ 105.366651][ T6276] ? __fget_files+0x3a0/0x420 [ 105.366688][ T6276] __x64_sys_sendmsg+0x1bd/0x2a0 [ 105.366724][ T6276] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 105.366767][ T6276] ? __pfx_ksys_write+0x10/0x10 [ 105.366811][ T6276] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.366834][ T6276] do_syscall_64+0x15f/0xf80 [ 105.366860][ T6276] ? trace_irq_disable+0x3b/0x140 [ 105.366882][ T6276] ? clear_bhb_loop+0x40/0x90 [ 105.366915][ T6276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.366937][ T6276] RIP: 0033:0x7f92a879c819 [ 105.366963][ T6276] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.366980][ T6276] RSP: 002b:00007f92a95e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 105.367004][ T6276] RAX: ffffffffffffffda RBX: 00007f92a8a15fa0 RCX: 00007f92a879c819 [ 105.367019][ T6276] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 105.367032][ T6276] RBP: 00007f92a95e6090 R08: 0000000000000000 R09: 0000000000000000 [ 105.367044][ T6276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.367056][ T6276] R13: 00007f92a8a16038 R14: 00007f92a8a15fa0 R15: 00007ffcd44d4758 [ 105.367090][ T6276] [ 105.767743][ T6289] netlink: 36 bytes leftover after parsing attributes in process `syz.0.99'. [ 106.079749][ T6303] netlink: 'syz.2.103': attribute type 1 has an invalid length. [ 106.185650][ T6306] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 106.372297][ T6318] netlink: 'syz.4.108': attribute type 15 has an invalid length. [ 106.486882][ T6325] netlink: 4 bytes leftover after parsing attributes in process `syz.3.109'. [ 106.779258][ T6333] netlink: 12 bytes leftover after parsing attributes in process `syz.2.112'. [ 107.262200][ T6339] xt_l2tp: v2 doesn't support IP mode [ 107.369741][ T6327] lec:lec_atm_close: lec0: Shut down! [ 107.464025][ T6355] netlink: 220 bytes leftover after parsing attributes in process `syz.4.120'. [ 107.494795][ T6355] netlink: 'syz.4.120': attribute type 2 has an invalid length. [ 107.645768][ T6361] netlink: 4 bytes leftover after parsing attributes in process `syz.2.122'. [ 108.061596][ T6387] netlink: 'syz.0.126': attribute type 10 has an invalid length. [ 108.108070][ T6387] netlink: 228 bytes leftover after parsing attributes in process `syz.0.126'. [ 108.157819][ T6382] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 108.343185][ T6399] netlink: 8 bytes leftover after parsing attributes in process `syz.4.131'. [ 108.426049][ T6404] netlink: 'syz.3.132': attribute type 30 has an invalid length. [ 108.540252][ T6415] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.133'. [ 108.690952][ T6404] bond1: option arp_missed_max: invalid value (0) [ 108.712006][ T6404] bond1: option arp_missed_max: allowed values 1 - 255 [ 108.741198][ T6404] bond1 (unregistering): Released all slaves [ 109.531142][ T6456] netlink: 8 bytes leftover after parsing attributes in process `syz.2.140'. [ 109.693623][ T5976] lec:lec_start_xmit: lec0:No lecd attached [ 109.794252][ T6456] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 109.815707][ T5945] IPVS: starting estimator thread 0... [ 109.849061][ T6452] IPv6: NLM_F_CREATE should be specified when creating new route [ 109.866002][ T6452] netlink: 12 bytes leftover after parsing attributes in process `syz.2.140'. [ 109.901158][ T6474] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 109.939955][ T6469] IPVS: using max 28 ests per chain, 67200 per kthread [ 110.073803][ T6486] netlink: 'syz.4.148': attribute type 21 has an invalid length. [ 110.244836][ T6482] : entered promiscuous mode [ 110.267595][ T6486] netlink: 4 bytes leftover after parsing attributes in process `syz.4.148'. [ 110.269811][ T6479] netlink: zone id is out of range [ 110.308681][ T6479] netlink: zone id is out of range [ 110.368171][ T6479] netlink: zone id is out of range [ 110.394124][ T6479] netlink: zone id is out of range [ 110.409897][ T6479] netlink: zone id is out of range [ 110.433537][ T6479] netlink: zone id is out of range [ 110.593718][ T6509] ipvlan2: entered allmulticast mode [ 110.603844][ T6509] syz_tun: entered allmulticast mode [ 110.722269][ T194] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.744144][ T194] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.773174][ T194] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.803145][ T194] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.045876][ T6525] bond0: Error: Cannot enslave bond to itself. [ 111.110310][ T6527] xt_cgroup: xt_cgroup: no path or classid specified [ 112.675248][ T6465] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 112.934047][ T6545] __nla_validate_parse: 4 callbacks suppressed [ 112.934066][ T6545] netlink: 16 bytes leftover after parsing attributes in process `syz.3.159'. [ 112.981748][ T6549] batadv_slave_0: entered promiscuous mode [ 113.066451][ T6543] batadv_slave_0: left promiscuous mode [ 113.213485][ T6557] netlink: 24 bytes leftover after parsing attributes in process `syz.2.165'. [ 113.270688][ T6557] sit1: entered promiscuous mode [ 113.283071][ T6557] sit1: entered allmulticast mode [ 113.304898][ T6559] netlink: 44 bytes leftover after parsing attributes in process `syz.1.166'. [ 113.427852][ T6561] netlink: 32 bytes leftover after parsing attributes in process `syz.3.167'. [ 113.755881][ T6571] syzkaller0: entered promiscuous mode [ 113.761684][ T6571] syzkaller0: entered allmulticast mode [ 113.782073][ T6577] veth0: entered promiscuous mode [ 113.802693][ T6561] syz.3.167 (6561) used greatest stack depth: 15488 bytes left [ 115.002203][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5300 ms [ 115.012608][ C0] lec:lec_tx_timeout: lec0 [ 115.017396][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 115.597345][ T6577] veth0: left promiscuous mode [ 115.717289][ T6601] IPVS: set_ctl: invalid protocol: 58 172.20.20.187:20003 [ 115.796156][ T6605] netlink: 52 bytes leftover after parsing attributes in process `syz.1.177'. [ 115.858528][ T6611] netlink: 'syz.0.180': attribute type 1 has an invalid length. [ 115.888766][ T6611] netlink: 224 bytes leftover after parsing attributes in process `syz.0.180'. [ 116.095960][ T6626] netlink: 'syz.1.184': attribute type 16 has an invalid length. [ 116.114438][ T6626] netlink: 'syz.1.184': attribute type 3 has an invalid length. [ 116.139885][ T6626] netlink: 132 bytes leftover after parsing attributes in process `syz.1.184'. [ 116.556461][ T6653] netlink: 4 bytes leftover after parsing attributes in process `syz.2.189'. [ 116.572375][ T6648] netlink: 16 bytes leftover after parsing attributes in process `syz.2.189'. [ 116.606930][ T6655] netlink: 'syz.2.189': attribute type 1 has an invalid length. [ 116.645071][ T6655] netlink: 'syz.2.189': attribute type 2 has an invalid length. [ 116.692533][ T6648] netlink: 4 bytes leftover after parsing attributes in process `syz.2.189'. [ 116.923460][ T6651] syzkaller0: entered promiscuous mode [ 116.944266][ T6651] syzkaller0: entered allmulticast mode [ 117.142129][ T6676] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 117.250926][ T6679] netlink: 'syz.0.198': attribute type 9 has an invalid length. [ 118.225085][ T6705] xt_hashlimit: size too large, truncated to 1048576 [ 119.141550][ T6684] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 119.411969][ T6711] __nla_validate_parse: 1 callbacks suppressed [ 119.411990][ T6711] netlink: 14 bytes leftover after parsing attributes in process `syz.2.208'. [ 119.471632][ T6723] netlink: 4 bytes leftover after parsing attributes in process `syz.1.212'. [ 119.481866][ T6714] syzkaller0: entered promiscuous mode [ 119.658272][ T6722] bridge0: port 1(bridge_slave_0) entered learning state [ 119.683590][ T6722] net_ratelimit: 49 callbacks suppressed [ 119.683611][ T6722] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 119.955949][ T6742] netlink: 36 bytes leftover after parsing attributes in process `syz.1.216'. [ 119.983145][ T6743] netlink: 36 bytes leftover after parsing attributes in process `syz.1.216'. [ 120.029436][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 120.037524][ C0] lec:lec_tx_timeout: lec0 [ 120.042393][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 120.090424][ T6743] netlink: 28 bytes leftover after parsing attributes in process `syz.1.216'. [ 120.114210][ T6743] netlink: 'syz.1.216': attribute type 7 has an invalid length. [ 120.138983][ T6743] netlink: 'syz.1.216': attribute type 8 has an invalid length. [ 120.172691][ T6743] netlink: 4 bytes leftover after parsing attributes in process `syz.1.216'. [ 120.282943][ T6750] syzkaller0: entered promiscuous mode [ 120.288640][ T6750] syzkaller0: entered allmulticast mode [ 122.182191][ T6792] netlink: 24 bytes leftover after parsing attributes in process `syz.4.225'. [ 122.792032][ T6808] ipt_ECN: cannot use operation on non-tcp rule [ 123.065669][ T6802] syzkaller0: entered promiscuous mode [ 123.089576][ T6802] syzkaller0: entered allmulticast mode [ 123.661678][ T6866] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 123.874651][ T6879] netlink: 440 bytes leftover after parsing attributes in process `syz.3.240'. [ 123.921351][ T6879] openvswitch: netlink: Flow key attr not present in new flow. [ 124.071505][ T6867] syzkaller0: entered promiscuous mode [ 124.082795][ T6867] syzkaller0: entered allmulticast mode [ 124.547069][ T6897] netlink: 'syz.0.244': attribute type 1 has an invalid length. [ 125.049435][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 125.057780][ C0] lec:lec_tx_timeout: lec0 [ 125.062460][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 127.056305][ T6887] bridge_slave_0: left allmulticast mode [ 127.062198][ T6887] bridge_slave_0: left promiscuous mode [ 127.069451][ T6887] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.084809][ T6887] bridge_slave_1: left allmulticast mode [ 127.090633][ T6887] bridge_slave_1: left promiscuous mode [ 127.097428][ T6887] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.122107][ T6887] bond0: (slave bond_slave_0): Releasing backup interface [ 127.144888][ T6887] bond0: (slave bond_slave_1): Releasing backup interface [ 127.177653][ T6887] team0: Port device team_slave_0 removed [ 127.192047][ T6887] team0: Port device team_slave_1 removed [ 127.199114][ T6887] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.207364][ T6887] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.219196][ T6887] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.229089][ T6887] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.241674][ T6887] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 127.262895][ T6897] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 127.536886][ T6935] netlink: 8 bytes leftover after parsing attributes in process `syz.3.247'. [ 127.644762][ T5976] IPVS: starting estimator thread 0... [ 127.708060][ T6944] netlink: 4 bytes leftover after parsing attributes in process `syz.1.251'. [ 127.740446][ T6941] IPVS: using max 27 ests per chain, 64800 per kthread [ 127.974562][ T6957] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 128.010522][ T6957] Cannot find set identified by id 1 to match [ 128.169911][ T6958] syzkaller0: entered promiscuous mode [ 128.178210][ T6958] syzkaller0: entered allmulticast mode [ 128.384934][ T6980] netlink: 'syz.0.263': attribute type 1 has an invalid length. [ 128.393068][ T6980] netlink: 212 bytes leftover after parsing attributes in process `syz.0.263'. [ 128.406073][ T6980] netlink: 12 bytes leftover after parsing attributes in process `syz.0.263'. [ 128.435663][ T6986] netlink: 52 bytes leftover after parsing attributes in process `syz.3.264'. [ 130.069420][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 130.077511][ C0] lec:lec_tx_timeout: lec0 [ 130.082697][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 130.324755][ T7026] netlink: 24 bytes leftover after parsing attributes in process `syz.2.272'. [ 130.706565][ T7038] IPVS: length: 144 != 8 [ 131.006048][ T7052] syzkaller0: entered promiscuous mode [ 131.029687][ T7052] syzkaller0: entered allmulticast mode [ 131.164153][ T7062] xt_HMARK: spi-set and port-set can't be combined [ 131.365770][ T7071] netlink: 8 bytes leftover after parsing attributes in process `syz.0.287'. [ 132.875051][ T7071] batadv0: entered promiscuous mode [ 132.882438][ T7071] macsec1: entered promiscuous mode [ 132.888796][ T7071] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 132.924471][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.298549][ T7103] netlink: 8 bytes leftover after parsing attributes in process `syz.4.297'. [ 133.307813][ T7103] netlink: 'syz.4.297': attribute type 6 has an invalid length. [ 133.329734][ T7103] netlink: 4 bytes leftover after parsing attributes in process `syz.4.297'. [ 133.382126][ T7103] netlink: 8 bytes leftover after parsing attributes in process `syz.4.297'. [ 133.415571][ T7103] netlink: 'syz.4.297': attribute type 6 has an invalid length. [ 133.426594][ T7103] netlink: 4 bytes leftover after parsing attributes in process `syz.4.297'. [ 133.474404][ T7110] SET target dimension over the limit! [ 133.497630][ T7111] netlink: 12 bytes leftover after parsing attributes in process `syz.2.300'. [ 133.810077][ T7122] can: request_module (can-proto-0) failed. [ 133.844973][ T7126] netlink: 8 bytes leftover after parsing attributes in process `syz.0.305'. [ 133.963527][ T7127] syzkaller0: entered promiscuous mode [ 133.985763][ T7127] syzkaller0: entered allmulticast mode [ 134.047033][ T7136] netlink: 20 bytes leftover after parsing attributes in process `syz.4.308'. [ 134.063318][ T7126] netlink: 8 bytes leftover after parsing attributes in process `syz.0.305'. [ 134.326351][ T7149] xt_hashlimit: size too large, truncated to 1048576 [ 135.089471][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 135.097580][ C0] lec:lec_tx_timeout: lec0 [ 135.102508][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 135.843250][ T7150] netlink: 'syz.1.307': attribute type 12 has an invalid length. [ 135.852298][ T7150] netlink: 'syz.1.307': attribute type 29 has an invalid length. [ 135.866418][ T7150] netlink: 148 bytes leftover after parsing attributes in process `syz.1.307'. [ 136.266968][ T7170] netlink: 44 bytes leftover after parsing attributes in process `syz.4.316'. [ 136.318382][ T7181] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 136.812587][ T7195] syzkaller0: entered promiscuous mode [ 136.829547][ T7195] syzkaller0: entered allmulticast mode [ 136.841183][ T7205] IPVS: set_ctl: invalid protocol: 94 172.20.20.170:20004 [ 136.868018][ T7205] IPVS: set_ctl: invalid protocol: 60 224.0.0.1:20003 [ 137.059516][ T7215] netlink: 'syz.4.327': attribute type 4 has an invalid length. [ 137.083046][ T7215] netlink: 'syz.4.327': attribute type 21 has an invalid length. [ 138.480908][ T7218] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 138.497754][ T7218] team0: Device macvlan2 is already an upper device of the team interface [ 138.847915][ T7241] netlink: 'syz.4.335': attribute type 1 has an invalid length. [ 139.028540][ T7255] netlink: 'syz.3.338': attribute type 8 has an invalid length. [ 139.050315][ T7249] bond1: (slave bridge2): making interface the new active one [ 139.094086][ T7249] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 139.358329][ T7262] syzkaller0: entered promiscuous mode [ 139.375635][ T7262] syzkaller0: entered allmulticast mode [ 139.800980][ T7295] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 139.816598][ T10] IPVS: starting estimator thread 0... [ 139.911561][ T7300] IPVS: using max 26 ests per chain, 62400 per kthread [ 139.958908][ T7295] __nla_validate_parse: 2 callbacks suppressed [ 139.958926][ T7295] netlink: 20 bytes leftover after parsing attributes in process `syz.3.349'. [ 139.992804][ T7306] netlink: 'syz.4.350': attribute type 1 has an invalid length. [ 140.046802][ T7307] netlink: 76 bytes leftover after parsing attributes in process `syz.4.350'. [ 140.109421][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 140.117501][ C0] lec:lec_tx_timeout: lec0 [ 140.122322][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 141.312525][ T7292] pim6reg: entered allmulticast mode [ 141.334678][ T7306] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 141.563011][ T7308] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 141.629872][ T7308] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 141.658098][ T7330] netlink: 4 bytes leftover after parsing attributes in process `syz.2.353'. [ 141.689273][ T7325] netlink: 4 bytes leftover after parsing attributes in process `syz.2.353'. [ 141.874847][ T7308] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 141.903193][ T7308] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 141.928226][ T7325] macvtap1: entered promiscuous mode [ 141.940450][ T7325] vlan0: entered promiscuous mode [ 141.951538][ T7325] macvtap1: entered allmulticast mode [ 141.968525][ T7325] vlan0: entered allmulticast mode [ 141.977310][ T7325] veth0_vlan: entered allmulticast mode [ 141.977407][ T7308] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 142.037978][ T7308] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 142.137281][ T7308] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 142.149746][ T7308] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 142.227631][ T7308] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 142.249818][ T7308] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 143.076380][ T7369] syzkaller0: entered promiscuous mode [ 143.087749][ T7369] syzkaller0: entered allmulticast mode [ 143.136916][ T7395] netlink: 224 bytes leftover after parsing attributes in process `syz.0.368'. [ 143.169208][ T7393] netlink: 128 bytes leftover after parsing attributes in process `syz.0.368'. [ 145.129486][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 145.137623][ C0] lec:lec_tx_timeout: lec0 [ 145.142421][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 145.519843][ T7458] openvswitch: netlink: IP tunnel attribute has 30 unknown bytes. [ 145.565691][ T7463] netlink: 'syz.2.375': attribute type 1 has an invalid length. [ 145.796664][ T7463] bond1: entered promiscuous mode [ 145.823887][ T7463] 8021q: adding VLAN 0 to HW filter on device bond1 [ 145.845767][ T7470] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 145.867790][ T7470] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 145.901164][ T7470] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 146.075382][ T7478] erspan0: entered promiscuous mode [ 146.108854][ T7486] netlink: 8 bytes leftover after parsing attributes in process `syz.1.378'. [ 146.177019][ T7486] erspan0: left promiscuous mode [ 146.557091][ T7513] syzkaller0: entered promiscuous mode [ 146.568528][ T7513] syzkaller0: entered allmulticast mode [ 148.686778][ T7555] mpoa:mpoad_close: () going down [ 148.908488][ T7563] openvswitch: netlink: Message has 8 unknown bytes. [ 148.927413][ T7563] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 148.964364][ T7569] netlink: 4 bytes leftover after parsing attributes in process `syz.1.396'. [ 149.032208][ T7564] netlink: 276 bytes leftover after parsing attributes in process `syz.0.394'. [ 149.061972][ T7564] netlink: 276 bytes leftover after parsing attributes in process `syz.0.394'. [ 149.104394][ T7573] netlink: 'syz.4.397': attribute type 2 has an invalid length. [ 149.165868][ T7575] netlink: 52 bytes leftover after parsing attributes in process `syz.2.398'. [ 149.204376][ T7573] netlink: 320 bytes leftover after parsing attributes in process `syz.4.397'. [ 149.218327][ T7575] netlink: 76 bytes leftover after parsing attributes in process `syz.2.398'. [ 149.280983][ T7575] netlink: 52 bytes leftover after parsing attributes in process `syz.2.398'. [ 149.373171][ T7583] netlink: 12 bytes leftover after parsing attributes in process `syz.0.401'. [ 149.408725][ T7583] netem: change failed [ 149.497098][ T7589] netlink: 56 bytes leftover after parsing attributes in process `syz.4.403'. [ 149.569525][ T7589] netlink: 'syz.4.403': attribute type 3 has an invalid length. [ 149.608712][ T7589] netlink: 'syz.4.403': attribute type 2 has an invalid length. [ 149.774884][ T7592] syzkaller0: entered promiscuous mode [ 149.793868][ T7592] syzkaller0: entered allmulticast mode [ 150.055947][ T7617] Bluetooth: MGMT ver 1.23 [ 151.244220][ C1] ================================================================== [ 151.252465][ C1] BUG: KASAN: slab-use-after-free in sock_def_readable+0x1cb/0x550 [ 151.260397][ C1] Read of size 8 at addr ffff888058932ac0 by task swapper/1/0 [ 151.267862][ C1] [ 151.270208][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 151.270226][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 151.270237][ C1] Call Trace: [ 151.270244][ C1] [ 151.270251][ C1] dump_stack_lvl+0xe8/0x150 [ 151.270276][ C1] print_report+0xba/0x230 [ 151.270294][ C1] ? sock_def_readable+0x1cb/0x550 [ 151.270311][ C1] kasan_report+0x117/0x150 [ 151.270327][ C1] ? sock_def_readable+0x1cb/0x550 [ 151.270346][ C1] sock_def_readable+0x1cb/0x550 [ 151.270362][ C1] ? sock_def_readable+0xae/0x550 [ 151.270379][ C1] ? send_to_lecd+0x26d/0x830 [ 151.270397][ C1] send_to_lecd+0x3e7/0x830 [ 151.270418][ C1] lec_start_xmit+0xe52/0x2890 [ 151.270441][ C1] dev_hard_start_xmit+0x2cd/0x830 [ 151.270463][ C1] sch_direct_xmit+0x251/0x4c0 [ 151.270485][ C1] ? __pfx_sch_direct_xmit+0x10/0x10 [ 151.270508][ C1] __qdisc_run+0xa83/0x1560 [ 151.270534][ C1] __dev_queue_xmit+0x1021/0x3950 [ 151.270549][ C1] ? run_timer_softirq+0xb7/0x170 [ 151.270569][ C1] ? finish_task_switch+0x427/0xbe0 [ 151.270588][ C1] ? __dev_queue_xmit+0x2b6/0x3950 [ 151.270608][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 151.270633][ C1] ? __asan_memcpy+0x40/0x70 [ 151.270654][ C1] ? eth_header+0x11b/0x200 [ 151.270668][ C1] ? __pfx_eth_header+0x10/0x10 [ 151.270681][ C1] ? lapbeth_data_transmit+0x218/0x2e0 [ 151.270699][ C1] ? __pfx_lapbeth_data_transmit+0x10/0x10 [ 151.270715][ C1] lapb_data_transmit+0x90/0xb0 [ 151.270733][ C1] lapb_transmit_buffer+0x163/0x200 [ 151.270749][ C1] lapb_t1timer_expiry+0x699/0xab0 [ 151.270768][ C1] call_timer_fn+0x192/0x5e0 [ 151.270795][ C1] ? __pfx_lapb_t1timer_expiry+0x10/0x10 [ 151.270810][ C1] ? call_timer_fn+0xd4/0x5e0 [ 151.270829][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 151.270854][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 151.270870][ C1] ? __pfx_lapb_t1timer_expiry+0x10/0x10 [ 151.270886][ C1] __run_timer_base+0x652/0x8b0 [ 151.270904][ C1] ? ktime_get+0x45/0x220 [ 151.270925][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 151.270950][ C1] run_timer_softirq+0xb7/0x170 [ 151.270969][ C1] handle_softirqs+0x22a/0x840 [ 151.270991][ C1] ? __irq_exit_rcu+0xca/0x220 [ 151.271014][ C1] __irq_exit_rcu+0xca/0x220 [ 151.271034][ C1] irq_exit_rcu+0x9/0x30 [ 151.271054][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 151.271072][ C1] [ 151.271077][ C1] [ 151.271082][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 151.271100][ C1] RIP: 0010:finish_task_switch+0x427/0xbe0 [ 151.271119][ C1] Code: 41 c7 84 24 e0 0d 00 00 00 00 00 00 0f 1f 44 00 00 49 83 c4 48 4c 89 e7 e8 86 f4 20 0a e8 21 6d 38 00 fb 49 8d bd a8 16 00 00 <48> 89 f8 48 c1 e8 03 42 0f b6 04 38 84 c0 0f 85 7b 03 00 00 41 80 [ 151.271132][ C1] RSP: 0018:ffffc90000197b90 EFLAGS: 00000206 [ 151.271153][ C1] RAX: 000000000006bcdd RBX: 1ffff110170e7784 RCX: 0000000080000001 [ 151.271164][ C1] RDX: 0000000000000000 RSI: ffffffff8dfb65fa RDI: ffff88801de896a8 [ 151.271174][ C1] RBP: ffffc90000197bf0 R08: ffffffff903215b7 R09: 1ffffffff20642b6 [ 151.271185][ C1] R10: dffffc0000000000 R11: fffffbfff20642b7 R12: ffff8880b873ae88 [ 151.271196][ C1] R13: ffff88801de88000 R14: ffff8880358f0000 R15: dffffc0000000000 [ 151.271219][ C1] __schedule+0x17bc/0x5680 [ 151.271263][ C1] ? tick_nohz_next_event+0x47/0x3e0 [ 151.271298][ C1] ? ct_kernel_exit_state+0x2b/0x80 [ 151.271319][ C1] ? trace_irq_disable+0x3b/0x140 [ 151.271335][ C1] ? __pfx___schedule+0x10/0x10 [ 151.271350][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 151.271371][ C1] ? tick_nohz_idle_exit+0x2e1/0x3a0 [ 151.271391][ C1] schedule_idle+0x51/0x90 [ 151.271407][ C1] do_idle+0x58a/0x5f0 [ 151.271427][ C1] ? asm_sysvec_call_function_single+0x1a/0x20 [ 151.271446][ C1] ? __pfx_do_idle+0x10/0x10 [ 151.271470][ C1] cpu_startup_entry+0x43/0x60 [ 151.271491][ C1] start_secondary+0x101/0x110 [ 151.271510][ C1] common_startup_64+0x13e/0x147 [ 151.271533][ C1] [ 151.271538][ C1] [ 151.663342][ C1] Allocated by task 7544: [ 151.667675][ C1] kasan_save_track+0x3e/0x80 [ 151.672371][ C1] __kasan_slab_alloc+0x6c/0x80 [ 151.677316][ C1] kmem_cache_alloc_lru_noprof+0x2b8/0x640 [ 151.683140][ C1] sock_alloc_inode+0x2c/0x190 [ 151.687953][ C1] alloc_inode+0x6a/0x1b0 [ 151.692312][ C1] __sock_create+0x12d/0x9d0 [ 151.697028][ C1] __sys_socket+0xd6/0x1b0 [ 151.701513][ C1] __x64_sys_socket+0x7a/0x90 [ 151.706297][ C1] do_syscall_64+0x15f/0xf80 [ 151.710927][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.716882][ C1] [ 151.719218][ C1] Freed by task 7555: [ 151.723302][ C1] kasan_save_track+0x3e/0x80 [ 151.728028][ C1] kasan_save_free_info+0x46/0x50 [ 151.733092][ C1] __kasan_slab_free+0x5c/0x80 [ 151.737879][ C1] kmem_cache_free+0x180/0x630 [ 151.742775][ C1] rcu_core+0x7cd/0x1070 [ 151.747128][ C1] handle_softirqs+0x22a/0x840 [ 151.751943][ C1] __irq_exit_rcu+0xca/0x220 [ 151.756557][ C1] irq_exit_rcu+0x9/0x30 [ 151.760829][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 151.766497][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 151.772517][ C1] [ 151.774844][ C1] Last potentially related work creation: [ 151.780563][ C1] kasan_save_stack+0x3e/0x60 [ 151.785254][ C1] kasan_record_aux_stack+0xbd/0xd0 [ 151.790471][ C1] call_rcu+0xee/0x890 [ 151.794583][ C1] evict+0x95b/0xb10 [ 151.798503][ C1] __dentry_kill+0x1a2/0x5e0 [ 151.803122][ C1] finish_dput+0xc9/0x480 [ 151.807461][ C1] __fput+0x691/0xa60 [ 151.811468][ C1] task_work_run+0x1d9/0x270 [ 151.816092][ C1] get_signal+0x11eb/0x1330 [ 151.820643][ C1] arch_do_signal_or_restart+0xbc/0x830 [ 151.826206][ C1] exit_to_user_mode_loop+0x86/0x480 [ 151.831512][ C1] do_syscall_64+0x33e/0xf80 [ 151.836134][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.842066][ C1] [ 151.844398][ C1] The buggy address belongs to the object at ffff888058932a00 [ 151.844398][ C1] which belongs to the cache sock_inode_cache of size 1408 [ 151.859004][ C1] The buggy address is located 192 bytes inside of [ 151.859004][ C1] freed 1408-byte region [ffff888058932a00, ffff888058932f80) [ 151.872909][ C1] [ 151.875264][ C1] The buggy address belongs to the physical page: [ 151.881709][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x58930 [ 151.890575][ C1] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 151.899096][ C1] memcg:ffff888058937e01 [ 151.903339][ C1] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 151.910901][ C1] page_type: f5(slab) [ 151.914920][ C1] raw: 00fff00000000040 ffff88801f6f4c80 dead000000000100 dead000000000122 [ 151.923512][ C1] raw: 0000000000000000 0000000800150015 00000000f5000000 ffff888058937e01 [ 151.932147][ C1] head: 00fff00000000040 ffff88801f6f4c80 dead000000000100 dead000000000122 [ 151.940867][ C1] head: 0000000000000000 0000000800150015 00000000f5000000 ffff888058937e01 [ 151.949566][ C1] head: 00fff00000000003 ffffea0001624c01 00000000ffffffff 00000000ffffffff [ 151.958363][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 151.967039][ C1] page dumped because: kasan: bad access detected [ 151.973464][ C1] page_owner tracks the page as allocated [ 151.979182][ C1] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5822, tgid 5822 (syz-executor), ts 98366131668, free_ts 28647265126 [ 152.002397][ C1] post_alloc_hook+0x231/0x280 [ 152.007195][ C1] get_page_from_freelist+0x24dc/0x2580 [ 152.012780][ C1] __alloc_frozen_pages_noprof+0x18d/0x380 [ 152.018621][ C1] allocate_slab+0x77/0x660 [ 152.023163][ C1] refill_objects+0x331/0x3c0 [ 152.027894][ C1] __pcs_replace_empty_main+0x2e6/0x730 [ 152.033477][ C1] kmem_cache_alloc_lru_noprof+0x37c/0x640 [ 152.039405][ C1] sock_alloc_inode+0x2c/0x190 [ 152.044211][ C1] alloc_inode+0x6a/0x1b0 [ 152.048573][ C1] __sock_create+0x12d/0x9d0 [ 152.053177][ C1] __sys_socket+0xd6/0x1b0 [ 152.057620][ C1] __x64_sys_socket+0x7a/0x90 [ 152.062341][ C1] do_syscall_64+0x15f/0xf80 [ 152.066967][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.072881][ C1] page last free pid 1 tgid 1 stack trace: [ 152.078703][ C1] __free_frozen_pages+0xc2b/0xdb0 [ 152.083866][ C1] free_contig_range+0xbb/0x170 [ 152.088845][ C1] destroy_args+0x4e5/0x570 [ 152.093379][ C1] debug_vm_pgtable+0x3f8/0x410 [ 152.098259][ C1] do_one_initcall+0x250/0x870 [ 152.103045][ C1] do_initcall_level+0x104/0x190 [ 152.108065][ C1] do_initcalls+0x59/0xa0 [ 152.112408][ C1] kernel_init_freeable+0x2a6/0x3e0 [ 152.117714][ C1] kernel_init+0x1d/0x1d0 [ 152.122098][ C1] ret_from_fork+0x514/0xb70 [ 152.126749][ C1] ret_from_fork_asm+0x1a/0x30 [ 152.131573][ C1] [ 152.133993][ C1] Memory state around the buggy address: [ 152.139635][ C1] ffff888058932980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 152.147767][ C1] ffff888058932a00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 152.156206][ C1] >ffff888058932a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 152.164372][ C1] ^ [ 152.170539][ C1] ffff888058932b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 152.178699][ C1] ffff888058932b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 152.186773][ C1] ================================================================== [ 152.194854][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 152.202077][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 152.211049][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 152.221119][ C1] Call Trace: [ 152.224435][ C1] [ 152.227291][ C1] vpanic+0x56c/0xa60 [ 152.231328][ C1] ? __pfx_vpanic+0x10/0x10 [ 152.235970][ C1] panic+0xc5/0xd0 [ 152.239742][ C1] ? __pfx_panic+0x10/0x10 [ 152.244201][ C1] ? sock_def_readable+0x1cb/0x550 [ 152.249508][ C1] ? rcu_is_watching+0x15/0xb0 [ 152.254314][ C1] ? sock_def_readable+0x1cb/0x550 [ 152.259455][ C1] ? sock_def_readable+0x1cb/0x550 [ 152.264607][ C1] check_panic_on_warn+0x89/0xb0 [ 152.269579][ C1] ? sock_def_readable+0x1cb/0x550 [ 152.274757][ C1] end_report+0x73/0x170 [ 152.279054][ C1] ? sock_def_readable+0x1cb/0x550 [ 152.284376][ C1] kasan_report+0x128/0x150 [ 152.289088][ C1] ? sock_def_readable+0x1cb/0x550 [ 152.294246][ C1] sock_def_readable+0x1cb/0x550 [ 152.299202][ C1] ? sock_def_readable+0xae/0x550 [ 152.304280][ C1] ? send_to_lecd+0x26d/0x830 [ 152.308970][ C1] send_to_lecd+0x3e7/0x830 [ 152.313589][ C1] lec_start_xmit+0xe52/0x2890 [ 152.318397][ C1] dev_hard_start_xmit+0x2cd/0x830 [ 152.323534][ C1] sch_direct_xmit+0x251/0x4c0 [ 152.328325][ C1] ? __pfx_sch_direct_xmit+0x10/0x10 [ 152.333633][ C1] __qdisc_run+0xa83/0x1560 [ 152.338165][ C1] __dev_queue_xmit+0x1021/0x3950 [ 152.343202][ C1] ? run_timer_softirq+0xb7/0x170 [ 152.348248][ C1] ? finish_task_switch+0x427/0xbe0 [ 152.353499][ C1] ? __dev_queue_xmit+0x2b6/0x3950 [ 152.358736][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 152.364167][ C1] ? __asan_memcpy+0x40/0x70 [ 152.368887][ C1] ? eth_header+0x11b/0x200 [ 152.373432][ C1] ? __pfx_eth_header+0x10/0x10 [ 152.378296][ C1] ? lapbeth_data_transmit+0x218/0x2e0 [ 152.383817][ C1] ? __pfx_lapbeth_data_transmit+0x10/0x10 [ 152.389682][ C1] lapb_data_transmit+0x90/0xb0 [ 152.394648][ C1] lapb_transmit_buffer+0x163/0x200 [ 152.400173][ C1] lapb_t1timer_expiry+0x699/0xab0 [ 152.405321][ C1] call_timer_fn+0x192/0x5e0 [ 152.409940][ C1] ? __pfx_lapb_t1timer_expiry+0x10/0x10 [ 152.415589][ C1] ? call_timer_fn+0xd4/0x5e0 [ 152.420285][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 152.425417][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 152.430629][ C1] ? __pfx_lapb_t1timer_expiry+0x10/0x10 [ 152.436274][ C1] __run_timer_base+0x652/0x8b0 [ 152.441148][ C1] ? ktime_get+0x45/0x220 [ 152.445528][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 152.450961][ C1] run_timer_softirq+0xb7/0x170 [ 152.455867][ C1] handle_softirqs+0x22a/0x840 [ 152.460706][ C1] ? __irq_exit_rcu+0xca/0x220 [ 152.465502][ C1] __irq_exit_rcu+0xca/0x220 [ 152.470122][ C1] irq_exit_rcu+0x9/0x30 [ 152.474408][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 152.480070][ C1] [ 152.483031][ C1] [ 152.485976][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 152.491975][ C1] RIP: 0010:finish_task_switch+0x427/0xbe0 [ 152.497817][ C1] Code: 41 c7 84 24 e0 0d 00 00 00 00 00 00 0f 1f 44 00 00 49 83 c4 48 4c 89 e7 e8 86 f4 20 0a e8 21 6d 38 00 fb 49 8d bd a8 16 00 00 <48> 89 f8 48 c1 e8 03 42 0f b6 04 38 84 c0 0f 85 7b 03 00 00 41 80 [ 152.517524][ C1] RSP: 0018:ffffc90000197b90 EFLAGS: 00000206 [ 152.523617][ C1] RAX: 000000000006bcdd RBX: 1ffff110170e7784 RCX: 0000000080000001 [ 152.531665][ C1] RDX: 0000000000000000 RSI: ffffffff8dfb65fa RDI: ffff88801de896a8 [ 152.539659][ C1] RBP: ffffc90000197bf0 R08: ffffffff903215b7 R09: 1ffffffff20642b6 [ 152.547677][ C1] R10: dffffc0000000000 R11: fffffbfff20642b7 R12: ffff8880b873ae88 [ 152.555807][ C1] R13: ffff88801de88000 R14: ffff8880358f0000 R15: dffffc0000000000 [ 152.563909][ C1] __schedule+0x17bc/0x5680 [ 152.568613][ C1] ? tick_nohz_next_event+0x47/0x3e0 [ 152.573942][ C1] ? ct_kernel_exit_state+0x2b/0x80 [ 152.579348][ C1] ? trace_irq_disable+0x3b/0x140 [ 152.584425][ C1] ? __pfx___schedule+0x10/0x10 [ 152.589293][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 152.594512][ C1] ? tick_nohz_idle_exit+0x2e1/0x3a0 [ 152.599828][ C1] schedule_idle+0x51/0x90 [ 152.604284][ C1] do_idle+0x58a/0x5f0 [ 152.608395][ C1] ? asm_sysvec_call_function_single+0x1a/0x20 [ 152.614750][ C1] ? __pfx_do_idle+0x10/0x10 [ 152.619391][ C1] cpu_startup_entry+0x43/0x60 [ 152.624382][ C1] start_secondary+0x101/0x110 [ 152.629201][ C1] common_startup_64+0x13e/0x147 [ 152.634257][ C1] [ 152.637901][ C1] Kernel Offset: disabled [ 152.642246][ C1] Rebooting in 86400 seconds..