last executing test programs: 1m28.906311233s ago: executing program 3 (id=4013): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) sendfile(r0, r1, &(0x7f0000000000)=0x5, 0x1) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f00000001c0)={{r0, &(0x7f0000000040)='/\\\'::\x05\xe2$\\)]],&\\\xf1$({!\x00', 0x4080, &(0x7f0000000080)={@align=0x2, {0x8001, 0x6, 0x8, 0x7}}, 0xb4, &(0x7f00000000c0), &(0x7f0000000100)=0x6}, {[0x0, 0x6, 0x5, 0x80]}, 0x9, 0x7b, &(0x7f0000000140)=""/123}) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r1}, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x2, 0x2, 0x40, 0x10008, 0xffffffffffffffff, 0x9, '\x00', 0x0, r2, 0x3, 0x5, 0x0, 0xa, @void, @value, @value=r3}, 0x50) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000300)={@multicast2, @rand_addr=0x64010100, 0xffffffffffffffff, "7f32fc003719eb0e23c569fc9d7332759cf4d15b7e7456f4ef7010247f3387cb", 0x8001, 0x800, 0xd, 0x2}, 0x3c) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, r5, 0x10, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x9, 0x2a}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4008880}, 0x1) sendmsg$NL80211_CMD_SET_WDS_PEER(r2, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, r5, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x40002}, 0x24008880) sendmsg$NL80211_CMD_DEL_PMK(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10200}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, r5, 0xc012fdf65a6821da, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x40044}, 0x40) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000700), r2) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000007c0)={'ip6tnl0\x00', &(0x7f0000000740)={'ip6gre0\x00', 0x0, 0x29, 0xc5, 0x6, 0x4, 0x1, @dev={0xfe, 0x80, '\x00', 0xe}, @empty, 0x7, 0x80, 0x4, 0x800}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000008c0)={'sit0\x00', &(0x7f0000000800)={'gre0\x00', 0x0, 0x8000, 0x20, 0xd, 0x1ff, {{0x1a, 0x4, 0x2, 0x1e, 0x68, 0x68, 0x0, 0x7a, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, {[@timestamp_prespec={0x44, 0x24, 0x70, 0x3, 0x1, [{@multicast2, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x12}, 0xfffffbff}, {@broadcast, 0x3}]}, @ssrr={0x89, 0x17, 0xd0, [@loopback, @remote, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2]}, @timestamp={0x44, 0x8, 0x41, 0x0, 0x8, [0x0]}, @ssrr={0x89, 0xf, 0x48, [@broadcast, @local, @private=0xa010100]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000980)={'ip6gre0\x00', &(0x7f0000000900)={'ip6tnl0\x00', 0x0, 0x2f, 0x9, 0x2d, 0x9, 0x1a, @mcast1, @mcast1, 0x7801, 0x7800, 0x5, 0x9}}) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f00000009c0)={@multicast1, @remote, 0x0}, &(0x7f0000000a00)=0xc) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000ac0)={'ip6_vti0\x00', &(0x7f0000000a40)={'ip6gre0\x00', 0x0, 0x4, 0xa, 0xa, 0x1000, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80, 0x80, 0x1000, 0x1ff}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000b00)={'lo\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000b40)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000c00)={'ip6tnl0\x00', &(0x7f0000000b80)={'syztnl0\x00', 0x0, 0x29, 0x6, 0x4, 0x4, 0xa, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80, 0x80, 0xcb8a, 0x200}}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000c40)={'team0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000f40)={r2, 0xe0, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000c80)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, &(0x7f0000000cc0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000d00)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xf8, &(0x7f0000000d40)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000d80), &(0x7f0000000dc0), 0x8, 0x35, 0x8, 0x8, &(0x7f0000000e00)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000fc0)={'syztnl0\x00', &(0x7f0000000f80)={'syztnl1\x00', 0x0, 0x8000, 0x40, 0x1b, 0x80000000, {{0x8, 0x4, 0x3, 0x8, 0x20, 0x66, 0x0, 0x2, 0x2f, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x35}, {[@generic={0x83, 0xc, "bebd42720791547758a3"}]}}}}}) getsockname$packet(r2, &(0x7f0000001000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001040)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000001080)={0x11, 0x0, 0x0}, &(0x7f00000010c0)=0x14) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000001700)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000016c0)={&(0x7f0000001100)={0x588, r7, 0x10, 0x70bd29, 0x25dfdbff, {}, [{{0x8, 0x1, r8}, {0x268, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r9}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xec0}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x103}}, {0x8, 0x6, r13}}}]}}, {{0x8, 0x1, r14}, {0x130, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xd006}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r15}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r16}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7fe4}}, {0x8}}}]}}, {{0x8}, {0x4}}, {{0x8, 0x1, r17}, {0xf4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r18}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r19}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r20}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7f}}}]}}]}, 0x588}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40286608, &(0x7f0000001740)={0xffff58a5, 0xd, 0x125, 0x400, 0x7, 0x7}) r21 = syz_genetlink_get_family_id$smc(&(0x7f00000017c0), r2) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000001880)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001840)={&(0x7f0000001800)={0x20, r21, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x404c040) 1m28.781743095s ago: executing program 3 (id=4018): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1a, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18020000feffffff000000000100000085000000a40000009593f1ff35f8f4ec0ca4228ec379957600d2f62ac342ab85635a36714a30ddf2ed57e2d238c26df1309654be37637fe583cf0543dfac6828417395f1b8336550eac0a7bf6de7a489a452e04bdec51db63f1ebdc11df42b106a7bbffce45884e4b36a29173ed3734a2b5a3c0450a2f48a9d7129f7dc4e384a995dfb2f33a7507e515e5bee7baf3ce2801cff20bcc56cf306456932c4823d93b310c1a7e087edfcbb1f743db35c5396"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x64, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000001000)={'syzkaller0\x00', 0x2}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0x0, 0x7}, {0xffe6, 0xb}, {0x7, 0xfff2}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x10001, 0xb, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4048080) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r14) sendmsg$TIPC_CMD_ENABLE_BEARER(r14, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r15, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x36, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socket$unix(0x1, 0x1, 0x0) 1m28.212345882s ago: executing program 3 (id=4027): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000e000000711081000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000d00)=ANY=[@ANYBLOB="6800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800b000100697036746e6c00003800028014000200fe8000000000000000000000000000aa08000100", @ANYRES32=r1, @ANYBLOB="040013001400030017"], 0x68}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="680000000b06010200000000000000000000000005000100070000000900020073797a3100000000400007800c001a002a5b405b2b7d2d000c0019"], 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x80) 1m28.018337037s ago: executing program 3 (id=4030): epoll_create1(0x80000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x90) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r2, r4, 0x25, 0x4, @void}, 0x10) r5 = bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44891}, 0x44) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f00000002c0)=0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r6, 0x84009422, &(0x7f0000001e00)={0x0, 0x0, {0x0, @struct, 0x0}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r7, 0x50009418, &(0x7f0000000e00)={{r5}, r8, 0x2, @inherit={0x60, &(0x7f0000000300)={0x0, 0x3, 0x1, 0x7485, {0x20, 0x0, 0x9, 0x1, 0xddbc}, [0x7, 0x8c76, 0xb]}}, @devid=r9}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000008c0)={r9, 0x8, 0x40}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000005c0)={r9, 0x1, 0x3, 0x1}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}, {&(0x7f0000000100)='\x00\x00\x00\x00', 0x4}, {&(0x7f0000000a80)="683f0057950d7678de7263988b02ec9bdcc8", 0x12}, {&(0x7f0000000580)="a492e95857d9dad0c70b72425db11aaf3ffd93dad70350602877", 0x1a}], 0x4) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r11, &(0x7f0000000000)={0x1f, 0x1, 0x4}, 0x6) write$bt_hci(r11, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000ffff3201"], 0x138) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r13, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x24004004) recvmsg$unix(r12, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x0) close(0x3) syz_init_net_socket$netrom(0x6, 0x5, 0x0) 1m24.701001326s ago: executing program 3 (id=4038): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010202001400020077673200000000000000000000000000090001"], 0x4c}, 0x1, 0x40030000000000, 0x0, 0x40084}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x50}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000000)={r0}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x3c, &(0x7f0000000180)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e21, 0x2, @rand_addr=' \x01\x00', 0x9}, @in={0x2, 0x4e22, @multicast2}]}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r7, 0x84, 0x1b, &(0x7f0000000440)={r8, 0xeb, "535c835c29fc17b684e50cabfd0475516073adfce3e33742911045253e671189178e5b3a9b0ad0bacf771d315534ecfc9b6afab506f5595882507a049984057c79bf1bc63fc51b83967649200a7c2b96cd5f1000ee25b386157c80a93df3992b5c91e5151971f56012bf0a0ef45e436b80b4cea492d5e8e4499cd78ec73dfb81d339d0f631dd0020529e9c248779047d9261943bd22a26df6b7401c9395ec62cdc2e28a669898e04bc08b3d60d75e2ec5a5647a6a62e35eec2425c42d3ea54ecb86aede56884f721dc0bb125615abb1d2f3b1f9f8a71a54655a89120ac3e6a0f9b9fc07b16e35686bdef1b"}, &(0x7f0000000280)=0xf3) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x20040084) 1m24.263599951s ago: executing program 3 (id=4045): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) socket(0xa, 0x2, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r4, 0x6, 0xd, &(0x7f0000000000)='O', 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x41}}}, 0x0, 0x0, 0x34, 0x0, "230e1020eac14c90279e939261bb62bbd14cbd2ff115a91093bf248f2ef833cafdcfc967d3aaa234cf1d47f2b5e7df3f3926eb5492918df4e31896b6eb70da94e9522855eaf48e43f2aba9c6319f9294"}, 0xd8) ioctl$sock_bt_hci(r3, 0x400448cb, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x4}, 0x1c) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000002060300000000000000040000000000"], 0x14}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[], 0xfc}}, 0x4080800) 1m5.236473642s ago: executing program 32 (id=4045): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) socket(0xa, 0x2, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r4, 0x6, 0xd, &(0x7f0000000000)='O', 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x41}}}, 0x0, 0x0, 0x34, 0x0, "230e1020eac14c90279e939261bb62bbd14cbd2ff115a91093bf248f2ef833cafdcfc967d3aaa234cf1d47f2b5e7df3f3926eb5492918df4e31896b6eb70da94e9522855eaf48e43f2aba9c6319f9294"}, 0xd8) ioctl$sock_bt_hci(r3, 0x400448cb, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x4}, 0x1c) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000002060300000000000000040000000000"], 0x14}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[], 0xfc}}, 0x4080800) 5.194009851s ago: executing program 5 (id=4265): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r1 = socket(0x10, 0x803, 0x0) (rerun: 64) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, 0x1, 0xc000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c084}, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r5 = socket(0x1, 0x803, 0x0) (rerun: 64) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f00000002c0)={'wpan0\x00', 0x0}) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r8) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000020000000000002000000008000300", @ANYRES32=r12, @ANYBLOB="04002d80"], 0x20}, 0x1, 0x0, 0x0, 0x4008081}, 0x4) (async) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r8, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x28, r10, 0x0, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008004}, 0xc000) ioctl$F2FS_IOC_MOVE_RANGE(r7, 0xc020f509, &(0x7f00000001c0)={r0, 0x0, 0x592, 0x7a9}) r13 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r1) sendmsg$BATADV_CMD_TP_METER_CANCEL(r5, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x34, r13, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x10}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000810}, 0x8000) ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f00000000c0)={0x7e, 0x1, 0x5, 0xc, 0x5, 0x81}) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000040040000140012800900010076657468000000000400028008000a00", @ANYRES32=r6], 0x3c}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[], 0x54}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x1201}, [@IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x2c}}, 0x0) 4.958323554s ago: executing program 5 (id=4270): writev(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r3, &(0x7f0000005b40)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x46, 0x0, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xe, 0x0, &(0x7f00000000c0)="279a004c6588d5d6dc03d5cc2a00", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r5, 0x40806685, &(0x7f0000000380)={0x1, 0x0, 0x1000, 0xa5, &(0x7f00000001c0)="4c9f55b71b19b09c322d4bb3559be4b53771dfd3b1493d18da42b6c9dc7d5b8ffbc25d362ecac7ad8a55a62cf5cb73e5550938406e363b7954c62fdc7efd6d719acff4e2c1f5585c13b008cba9ddb63dbc9e044b63621aa8b4b345ec9dc2baa00e6c83ad1c427c2299bb9e4e2c4b37e8c268e097cd4ec05b5f608b6439777c77c4e1d96a88498a2f8a2b66a1f7fc0a0a8354dcf0193e9f5c13b28c13ae08e7e02d30b06f29", 0xef, 0x0, &(0x7f0000000280)="17b9f64b178ad3f3b9bb4c95d576042c238b146c3f8e7ad206a4efa8d5b8a62f1530a709e42bb7a9c5eb5be9315b78a45e9ee9a07a470bdcc4afd271cf5332e6c142e78a22a7c3a0e376f056fee0442264a84b160f87b29dfada5cae41817c4bb8b07b10b76e40a5dca42d7439b0feefb0e7c35bcc6ee76ebe3317abf8f8587e1f0d9844c5c561c85d9d20235964c0cd595a111b3d33abbaaea4c3ef1069904a5e30ec7ca8049169a2d6de65a48f428acef3df48cf47a56c2f3d87e3af3a17425c5b7ec8ea169794b3f4987d4b81ab0549b458fb7e254a7151503b0245e09e430da341f6dffe006d3034300e7a66a4"}) 4.678747405s ago: executing program 5 (id=4274): unshare(0x8000400) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0xffffffff}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x2}]}}}]}, 0x44}}, 0x8000) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x3, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x9) 4.572564533s ago: executing program 5 (id=4275): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc12404cf378042f2", @ANYRES8=r1, @ANYRESDEC], 0xfc}}, 0x4080800) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000d80)=ANY=[@ANYBLOB="980000001e00090529bd7000fcdbdf2500000400000000000000000000000000000004d50a003300fe88000001000000000000000000010180000000000000000c001500fdffffbf0700000010000a"], 0x98}}, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-512\x00'}, 0x58) (async, rerun: 32) r3 = accept$alg(r2, 0x0, 0x0) (rerun: 32) sendmmsg$alg(r3, &(0x7f00000009c0)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="3f5e97", 0xffc8}], 0x1, 0x0, 0x0, 0x20000000}], 0x1, 0x24000040) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=@newtaction={0x70, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ctinfo={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3f00}, @TCA_CTINFO_ACT={0x18, 0x3, {0xfa, 0x1, 0xffffffffffffffff, 0x100}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x200488c0}, 0x0) 4.410126351s ago: executing program 5 (id=4277): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa230180c20000000800450000b00000000000119078000000000000000000004e20009c907801000000040000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424dbc0456f1375461caaa2f19935e6996c7096ffeeb0300000000006d7a9a3bfbc1f39cb307b3472eb9cdb042d2643fcbb2c5a57df67d544af6e8dafe09"], 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x8, 0x0, 0x0, 0x41100}, 0x94) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x7}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@bridge_dellink={0x34, 0x11, 0x1, 0x0, 0x4, {0x7, 0x0, 0x0, r4, 0x48400}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x3, 0x0, 0x0, 0x6}]}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) (async, rerun: 64) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x7, 0xa, &(0x7f00000006c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000001e19000000000000000000000000e1000095001200000000009100000000000000fd0afb451096bf69fca93b642cff3011a25bea556d02f2543a8baf67d0ac859aef702790e89e94b14c964e91078ecf1da0d8d6da39cb76ae723b6e68bf7108d97a97dd2a94073ebf8a16c0"], &(0x7f0000000000)='GPL\x00', 0xe7a}, 0x94) (async, rerun: 64) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r8 = accept4(r7, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_MESH(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB='\x00'/14], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2000c844) r9 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r9, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x3d0, 0x13, 0x20, 0x70bd2c, 0x25dfdbff, {0x26, 0x4, 0xb, 0x0, {0x4e23, 0x4e22, [0x6, 0x9, 0x5, 0xa], [0x7, 0x9, 0x3, 0xb6fc], r4, [0x3, 0x200]}, 0x86e, 0xae}, [@INET_DIAG_REQ_BYTECODE={0xf3, 0x1, "aad7061ed7cd5062ad808b3610f2253123581ac8e52db520b632a64b0819507f562a1b1e9f49718ac489e1a71a100c22d769fd17fb17576dca81e446f296a5357fdcb9402c964310ccb0932f691a3de5e1d8d6fec31c86896ff3e2830c0993f1a7b796f805fefcf7e5e2a1002432daa6442fa8a87f4c7a95ffa8815f67b0f1cf82e36eef06cd6f72348534565a3bf446383e00657cca60b2c36d984e962172743e23c05146303f8e8a3dc0faa5856d594b7c6d6579ffd036a552241668816d667400ed58ad6b834c43676ea00d005e71c0b17121a33e28b5cf5ff22d315ed3d59987a7850b24284744051c0ab93cc7"}, @INET_DIAG_REQ_BYTECODE={0x93, 0x1, "863d1c9c1d3e15ee8d3b4e924a4fa605e62c8f05e16dd08e42e5174fa37433fc8b202f6e2bf647002db780a54c9700ab3f772c34812606b0a012dbf7c93f30a90f6a7cedc93f44c256ec8b79d473f85c0cae17d6c72a1faa1f95d5462238a49599993565063b4397397f1c9b1a243310daba1a3abb8931141398620e488f6dd3bfc972a6571e1068e3a3e27fbfc686"}, @INET_DIAG_REQ_BYTECODE={0x8e, 0x1, "bf41437173655013ee1a71f8e04b27d76ee17d46d8653a240d083695fe293006ed96d6e9236b90f1928461e86d16f84714b1a9dba89efa2aee1c306fb8db8daf1df83594a302e34648669a46772d8b772f7b5821478b51d700ec0a23d4ea6d2aeb1ac94beee7f3761759f0e5d3baf0e05d121e8710f8fc5a407ab92f628ea0eb6dbaf52b641c7f5adc34"}, @INET_DIAG_REQ_BYTECODE={0x90, 0x1, "1881e9fa36ab279536de87e9a92612a1e3327b419461010d2ff20b801a94c5075f9889100eda2ea4d99f9fa4c087e2daf76c53856b0e8f87a46642f30f452b9f507123680e40ac4d401071e6fc46b5f03d4c35bd6ba374b6e30961c5fa714de006924a6593ef8d2a662fb7444a8efb87ff382075057b4b7dd6c19d2b811e3938d0b2d7e9a6f3420a531ab1b4"}, @INET_DIAG_REQ_BYTECODE={0xdb, 0x1, "fcba2bba3e1022d024bd1e6d1d1289f9a069dbcb2227ea98835edf52f99a4738e48382edcda3d26d68aa04b7830e0e84a8266325e652364f3309b9abb3c0cd89b74d6880c9513d7cb66ad598580678813b3cbf2c0ab4c85e8a2f745ef8b1da03988be05c746ac0ba7a8a6607e1c402d63b6291d81c6db28aa02736374de42c2681486bf65c98b6da1caf9e788504ce14904e172de8a8923a1633c85f99e21119d451c45a2cd6576926dcc05da421f0e5f98fd4fe58de2daa4d6f8314279970dfb3087f5ee321813c9b92156b72ac373d79ec3d11ef0bb6"}]}, 0x3d0}, 0x1, 0x0, 0x0, 0x9000}, 0x8800) (async) r10 = accept4$unix(r8, 0x0, 0x0, 0x800) recvmmsg$unix(r10, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10000, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r6, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x10, &(0x7f0000001380)}}, 0x10) (async) recvmmsg(r0, &(0x7f0000001180)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x40000000, 0x0) (async) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)=ANY=[@ANYBLOB="140100002d0001000000000000000000020100800c0002000000000000000000141cc45a73283fe5e25a4976140004000100000000000000000000000000000150bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f0000"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 4.122285507s ago: executing program 5 (id=4282): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x6, 0x4, 0xfff, 0x9, 0x0, 0xffffffffffffffff, 0x7}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x2000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r2, 0x0, 0x0}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/net\x00') (async) r5 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/net\x00') sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r5}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) (async) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r5}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x2c, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x4000808) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x2c, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x4000808) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f00000011c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000001200)={0x107c, r7, 0x300, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @beacon=[@NL80211_ATTR_IE_ASSOC_RESP={0x16c, 0x80, [@measure_req={0x26, 0xea, {0x3, 0x10, 0xf5, "9880a3a1dfd28624cfa9955ecdd6e41a84f42e6fbf918eb10cf3cca7a77feb8fc40a2c8710fccb249474d4e794a7eb054ecf079051922c96848520208aa01e7b50d25dab1c4405e626543388d06d796edf859a60537750e51c8af764958e91cd77d0c5974894073ffba2693422828515d1a9ed66c18a7e05944174be6f92386a6b98d0919f2c797db5fee9b16b4642db5ee7a7a1c1a87df2723ba8b4edd4acad2a6ed6a4b68f04fdb0afd7f9f6d84ccafc96ded3beec591a846d92aea3239f674d3c3f1b3eca136394aebc6a8935a21d14cf8a69620103cf4eefd236b47f2ed45a2307eb59b487"}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x1, 0x0, 0x1, 0xa1}}, @mesh_config={0x71, 0xff21, {0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x6, 0x9}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @channel_switch={0x25, 0x3, {0x0, 0xc, 0x7}}, @random={0x8, 0x44, "0138bbaea64098f47c7fa89cea2007b4a4b86096eb2cd5fad939555731895cf6af773debf5b9b5d527844f4ad1b692d12dbe876ef3fcc73412b24e837ee7c4e33f6c8380"}, @ht={0x2d, 0x1a, {0x800, 0x3, 0x4, 0x0, {0x1ff, 0x8, 0x0, 0xd, 0x0, 0x1, 0x1, 0x2, 0x1}, 0x300, 0xc0b7, 0x3}}]}, @NL80211_ATTR_BEACON_TAIL={0xe3, 0xf, [@ibss={0x6, 0x2, 0x2}, @tim={0x5, 0x15, {0x2, 0x93, 0x1, "216974497b6d724bb4ee0940d826ae5a62de"}}, @random={0x4, 0xbf, "645a305ee9018a4a90b4ce77a57dd3028a5ca846454fdfc8d206f87b1da4fddd78469e3fd7c03a1fcb947d3389bc7aef2348a25fa2698cb6b6678dec0173285cd5647b9e7fd68034bc5cbcbb22fa2fc18199570199e741871e7b222b289455f0170a74c5dd6c931c3d6cc82e10c8854b28b3529afa729bfbdb7b83244fa21cafdfa413d58dfbe37d1d7636dd01a2121d39698eaaf9f7820f0e530cdca278b6643951482671a46212dc2a929636a8a4807b5b249fbeb0d3e11a29fa533e5753"}, @sec_chan_ofs={0x3e, 0x1, 0x3}]}, @NL80211_ATTR_IE={0x20, 0x2a, [@ht={0x2d, 0x1a, {0x2000, 0x3, 0x1, 0x0, {0xfffffffffffffff8, 0x8, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x800, 0xc34, 0x3}}]}, @NL80211_ATTR_BEACON_TAIL={0x4c, 0xf, [@prep={0x83, 0x25, {{0x0, 0x1}, 0x1, 0xfd, @broadcast, 0x8, @value=@device_b, 0x4, 0x1, @broadcast, 0x8}}, @cf={0x4, 0x6, {0xdc, 0x7, 0x800, 0x3ff}}, @rann={0x7e, 0x15, {{0x1, 0x72}, 0x8, 0x2, @device_a, 0xffffffc0, 0x8, 0xfffffff2}}, @supported_rates]}, @NL80211_ATTR_BEACON_HEAD={0x4d9, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x9}, @device_b, @broadcast, @from_mac=@broadcast, {0x7, 0x859}, @value=@ver_80211n={0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}}, 0x6, @default, 0x9188, @val={0x0, 0x6, @default_ap_ssid}, @void, @val={0x3, 0x1, 0xb5}, @val={0x4, 0x6, {0xf8, 0x4, 0x12fd, 0x7}}, @val={0x6, 0x2, 0x1}, @void, @val={0x25, 0x3, {0x0, 0x2c, 0x2}}, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @val={0x3c, 0x4, {0x0, 0xe, 0xac}}, @val={0x2d, 0x1a, {0x20, 0x0, 0x4, 0x0, {0x9, 0x1ffb, 0x0, 0x2}, 0x6, 0x4, 0x4}}, @void, @void, @val={0x76, 0x6, {0x8, 0x80, 0x27}}, [{0xdd, 0x94, "9e18852a3c329beb1df71b7eeb0e5509113d9dfa93af0082f6fae1af7876112bfaef1a83181bc682adadf6b11c2c1a0979b0e2188c539a4465905fc5a0e664dca81461928ba6dfc8084a53408cf46f6176e88ec36e267f082560ad965143b9d53e90bfb8a4e32e28f6089789109712ab81881d7291608daf2559dc894503aab181071fd841f99c49bd18fa6199dfdd8a9687ce82"}, {0xdd, 0xf0, "89bb068a5232b6788f62ee6ece18e6007f589d6ccf6530f2fb81fe94bc5b1ad1996fc7cee5e786735e8349a20fbd8f258788b08ac75a50fa8497afbb7c4340ab92cc633a0d09b236281e646dfd3f0e5870c7b48af99a12794fc7e3958f4afb5cb71c6548a8537895664d84b55f1f2fbe00d2de9bb5246ef37541bc5d5af2858224ad51ce7bcb93bfa74d6552fbc9db056eea406566c968acc90d8d025729bfd6a117e0798025d1c4f046d4d3ca65d75ccb9f169bccd73feffe2e4994193e537b3484e4ccd5dfdf9d1e136f0816671bb8ff4a5502a373c0e1ec359fafabbda5f6841d0e3c831bfc95a061707f1b1cbebb"}, {0xdd, 0x8b, "8d2fd1e43ff6e404ca406ce04e9402033352d520db42f40a54d95296028d60c45ceb8eeb7ed27019f03fdf07727a6ce8b681d2025d6d3c52173ee5d1efe25087686f7dbcdde9e725e1f72c8cf119e22b9a96c3cabd87ffdbc6e82f7d614eb9ab113bdf05e2a1aea07106f05657f220b6aef8ff92e4162cf5fa2aca0cd82fae1dbc030ebe1f5eb836fb1be0"}, {0xdd, 0x69, "6339460bf229878835854deee3a8d713849734003ff731adaaee1df1b37c88b50bb275d1762de7965167c79267d3f0ed26f35894ea615961befe4c99af8f9aad9b399f657408aa8d16b373d14bda3e982c9f63b8e334e9af5bb1699bc5689daef92b057b1a84ebdbdb"}, {0xdd, 0xf4, "c68428a33113bf59b035060f5144890b6eb703203ba9d32e1535c0e70a469656e64ba956de5544bf464481512a83cdc200d29e28ed0e5bad2f48c1bd632fd295220d3069820471c619e5addff659c5a99f7380143c2d11ad73276e5ef007fe22f0c8d6af32dc8d3376a054530fce5e346970071d5444fd44f15894458f1d6f89ecf0d6b0908d861328f18e6614c1b155459ba647f77d03a489821da2a75a46b9ab05c9de44ed00a05bedae1f38f002902e8f3aa476bfa43eb2751f501118eb5dff0ced4f6995ab0fe3f07caf7ae6f7118ec48a0c536e9cac0c80c8a7e5745e6cc96d8f6d8c36eec3d4677eeb4a740e6656cdfeec"}, {0xdd, 0x77, "2f4ba3dc3614aeac3377cad688ef5f92cee3c64ef969dda74b879c264083aa93e42b74254ce3240eeee2cb82a237d676aa6d0433ee309f5fd5a961802d3bab2a249ee46294c1339935deb8d1e87eefb1ce6d1035f65c12db8f3a19914d77bf888cc2ae850e4f7574e1675b1dca22c95ce291b21d5362ba"}, {0xdd, 0x73, "3e5dd8b3652e625351e3495d63a7b1ca6bfd67e1b1308c2f702a055f805c4e915f6b4399460f5916865fcab82c009726347ef6cf60ec8160666b05c8895272469c1fab0ade84c46b1874aefaffd9320e90def44f88fb84449517cdf1831edbb457fe0e05188eaba2c806a9a47411c11d66f339"}]}}, @NL80211_ATTR_PROBE_RESP={0x8a4, 0x91, "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"}], @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_SMPS_MODE={0x5}]}, 0x107c}, 0x1, 0x0, 0x0, 0x20004800}, 0x20004000) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_STAB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_STAB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a07460e46e35eabfb48a4cd2cd83790d7e705b010000000900010073797a31000000001c000000090a030000000000000000000a00000208000c"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a07460e46e35eabfb48a4cd2cd83790d7e705b010000000900010073797a31000000001c000000090a030000000000000000000a00000208000c"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r11) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_int(r12, &(0x7f0000000040)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) preadv(r13, &(0x7f0000000500)=[{&(0x7f0000000200)=""/41, 0x29}], 0x1, 0xfff, 0x7) (async) preadv(r13, &(0x7f0000000500)=[{&(0x7f0000000200)=""/41, 0x29}], 0x1, 0xfff, 0x7) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) socket$kcm(0x10, 0x2, 0x10) (async) r14 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r14, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) 3.616792778s ago: executing program 1 (id=4290): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x28000600) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000ac0)={r1}, 0xc) r2 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000f40)=[{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000340)="b26d690572229b79518bc99a83b9261b900257ebde89272f49ff848b82209c0c6c274077675226159cf5ee875ed28fa4acc0b31206dd94a00eeb6beb0f44afbf7cece64ccc61c504a3a858495a39", 0x4e}, {&(0x7f00000003c0)="3f90aea19573b6b0ecf82503c7e5a0bfc14a3bdceded2749d95675cfa0a1a6bc3bb98578220281c6c4eeadc50e299175ff4268b3b20ccd728a3d6b86f9c1233b134e24a940c751d221836735d59e62dbd1e6935745d3ed5439c271bab7b33458b6ffc8cc23b23f213cb34c3dc9ecebbf3870aafefcd1d5a3512fd40070ddf8b27615df8fefc4e2a7da740738b6e1343d8acd676a48f2f569d5544df403bdb234926e7a830891992e55e36d7c23c8c62243c33d5e87e5f1c5975b27db92", 0xbd}, {&(0x7f0000000c80)="8b538094ceb3d9051a444e5e60237105232689e6e380d38a87027bb1bc0ee00bd81bf5a1595018d90c9d125ef93481279326c76c463da75aa61eef65aff6e7c232cf358dc77a8fafe91a19df8bb5af3099d0e31fde9a44135fde1e526e59be8630dbda064eba8cbeaa39e5945b09ee5e1e2e930d91c15cc9fc63a4cdfa17eee9199b5f02275e6df63c5a3e66d9cdf839af47f6606ee7ba4692d22f50819671f9ed4cf9adcf0fc4f499c55063b9271ea457705b53c2831277354047f555aa2d3a4fe0c592fd665de11edd313ef70b5b77a55f0294aa6e9059151f6ffa", 0xdc}, {&(0x7f0000000d80)="383d251eab342bea3f6448a7d1aebf28a77b4deeb406065eb7", 0x19}], 0x4, 0x0, 0x0, 0x40000}], 0x1, 0x40800) unshare(0x48000280) r3 = socket(0xa, 0x800, 0x2) setsockopt$llc_int(r3, 0x10c, 0x6, &(0x7f0000000040)=0x8, 0x4) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 2.085217841s ago: executing program 4 (id=4303): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'geneve0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x88a8ffff, &(0x7f0000000140)={0x11, 0x88a8, r2}, 0x14) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003080)=ANY=[@ANYBLOB="501a0000210a010800000000000000000a0000000900020073797a31000000000900010073797a3100000000241a038018013f800c00018006000100000000000800034000000002"], 0x1a50}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) sendmsg$unix(r6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x14, 0x1, 0x1, [r6]}}], 0x18}, 0x800) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x4c, &(0x7f000002eff0)={0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x2}]}, 0x10) recvmmsg(r7, &(0x7f0000007340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/61, 0x3d}, 0xfffffffe}], 0x1, 0x40, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYRES16=0x0, @ANYRES32=r5, @ANYBLOB="0c0099000000000000000000050053000100000014000400776c616e310000000000000020000000140006"], 0x60}}, 0x0) 2.007948284s ago: executing program 4 (id=4305): connect$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) (async) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) pipe(0x0) (async, rerun: 32) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}], 0x1, 0x1) (async, rerun: 64) socket$packet(0x11, 0x3, 0x300) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) (async) sendmsg$MPTCP_PM_CMD_ANNOUNCE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="01002dbd7000fedbdf250800000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x14}, 0x0) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) (async) r2 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r2, &(0x7f0000000040), 0x10) (async, rerun: 32) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f0000000400)=0x2, 0x4) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_raw(r2, &(0x7f0000000480)={0x1d, r3}, 0x10) (async, rerun: 32) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000801}, 0xc0c4) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000280)={r5, r5, 0x9, 0x80, 0x0, 0x9, 0x89, 0x6, 0x5508, 0xa35, 0x1, 0x28, 'syz0\x00'}) (async) ioctl$sock_bt_hidp_HIDPCONNDEL(r4, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000000009500000000000000"], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.892766137s ago: executing program 1 (id=4308): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r3) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff5644d, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r9, {}, {0x5, 0xb}, {0xf, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x808, 0x205, 0x1, 0xc}, 0xb, 0x0, 0x32, 0x5, 0xa, 0x2, 0x9, 0xd, 0x1, 0x1, {0xffff1c72, 0x23, 0x7, 0xc, 0xfffffffe, 0x7583}}}}]}, 0x78}}, 0x8000) sendto$packet(r6, &(0x7f0000000240)="bad330752181090000316f3a277f953286ddd1030000004000000025e4a40e81692d09dc6b6b0ef1", 0x28, 0x804, &(0x7f0000000080)={0x11, 0x8100, r5, 0x1, 0xda, 0x6, @broadcast}, 0x14) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd00000000000004000000850000000500000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001780)=ANY=[@ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r10}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$unix(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)='\t', 0x1}], 0x1, &(0x7f0000001240)=[@rights={{0x14, 0x1, 0x1, [r11]}}], 0x18, 0x20008000}, 0x4000080) 1.833021854s ago: executing program 4 (id=4310): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000080)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x28b80, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000040)=0x9) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000002880)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@local}}, &(0x7f0000002980)=0xe8) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000efffffff0000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c00009831ba4b00030a010100000000000000000a0000070900010073"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) unshare(0x2a060400) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r7, 0x70, &(0x7f0000000100)}, 0x1c) (async, rerun: 64) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async, rerun: 64) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) (async) write$tun(r6, &(0x7f0000000080)={@val={0x0, 0x6003}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@ipv4={0x6558, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x4000, 0x0, 0x3, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0xa000, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x9, 0x0, @void}}}}}}}}, 0x32) (async) r9 = getpid() sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000029c0)={0x13dc, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x13cc, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0x1000000fac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@private0}, @typed={0x8, 0x44, 0x0, 0x0, @uid}, @nested={0x139d, 0x66, 0x0, 0x1, [@nested={0x1294, 0x132, 0x0, 0x1, [@typed={0x8, 0x141, 0x0, 0x0, @u32=0x1000b2}, @typed={0x8, 0xca, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @typed={0x8, 0x13d, 0x0, 0x0, @u32=0xfffffffc}, @nested={0x4, 0xc5}, @nested={0x1274, 0x8a, 0x0, 0x1, [@nested={0x126f, 0x76, 0x0, 0x1, [@typed={0x8, 0x127, 0x0, 0x0, @uid=r5}, @typed={0x8, 0x73, 0x0, 0x0, @ipv4=@remote}, @generic="28cfd73abef252932f174a1c314a7560ee3ebb825282fdb72f8c01395ce395feebb59609bc09413022739ef2c0789a27ee6b5c13bad4ba331a12b7dd087e9a920b9274509bd89b27c552a59e3f92f0e9feb813c6d69a86b03f28c9399161fb81fc6b2dbc70513557e313995f7e17dd674760eec29432113ca51f1677c995b4993c02a5f428b0c93f4a94670a759f3fafd2143a8b0ab253257c4392", @typed={0x43, 0x26, 0x0, 0x0, @binary="231489d7a899009ec32a5381f9262ae42ef564741d363a150d25f81876b39d1d8afb651333598d6cad4f51a881fecaad55e2b970fa89fb103a86eb1034af0c"}, @nested={0x1c, 0x5f, 0x0, 0x1, [@typed={0xc, 0x141, 0x0, 0x0, @u64}, @typed={0xc, 0x8, 0x0, 0x0, @u64=0x2}]}, @typed={0x8, 0x7a, 0x0, 0x0, @pid=r9}, @generic, @nested={0x8, 0x5e, 0x0, 0x1, [@nested={0x4, 0xb3}]}, @nested={0x114f, 0x81, 0x0, 0x1, [@generic="b4b76723d113484c0cb06128e3ddb91b1067a0152f84b01501c243b068fc8ab5b80a6e62c38ecf04391e709624e08e1f08ae1a09425cf9dbb254a4a36176055c8a067a9f79569672ce2f272dd477d8b9f7efb45114ba123a4f44b1c5ce580d476167e877ad15e584ef3f6ba8ddc621a2766559fab216929e6563abc9f25ba60eaa23094b0c49ba55cfa0c7f09380a621b6608c651688bb743b52add1d5f68a29f8b7567182ad4a09f8df2a", @generic=';', @generic="f3a347e99da4def4256c3f", @nested={0x4, 0x128}, @generic="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", @generic="14ee700f3bc15dd741e35b2840862e2dcb882bd585b9b82d8b68858df318d7cea404e0c55c3c80bd99428aebb504d26e7bd429674f8a07e8e4c061658e55c849a40fb5d6a0cff956dbe908e6a0e9fbfd10630bab30f5780a2018f8c58b5419eb160ba74150abdaf3ee91bc68519331aad8e0cdc11e6de875cf56b00e5c9da7f6404b8b59f8d384d40041530b", @nested={0x4, 0xbd}]}]}]}]}, @nested={0x5c, 0xa1, 0x0, 0x1, [@nested={0x58, 0xb, 0x0, 0x1, [@nested={0x54, 0x11d, 0x0, 0x1, [@generic="3b75ccbdb11e802f2996bccc638e98f785ebc110e3a72176135b43442efea0b795de1034cf4a7ab1579d974e0a7af449ab6e6b3012ec8087f407134734db5faee8764a68bfc455a850500730423bb686"]}]}]}, @generic="c073bf8f025953f538087c2947af34d793a12e66cd988ba2df542272ddf8f3b0634ff9883b7914bc9c92aafa8bb7b0c0552ff62f4a9716d08229fbc0558c09235f84d6771d08666d8b337ac75c741e4e77f4a9bc443c6a07af22469f8689554aa0e81e897ed6146a5b6cb1adf5cecbe76fb27a1c2610d17b8d3c80cfe639ce824597e338c1bb6a7d118257e8e8ac7e1f1c03054e4ec9bce7dfd5f3620229ab929fb9ebb5658776ab26"]}]}]}, 0x13dc}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000ec0), r3) (async, rerun: 32) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000ff00000001"], 0x48) (rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r11, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f00000000c0)='GPL\x00', 0x8, 0x1002, &(0x7f00000004c0)=""/4098, 0x41100}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000b000140020203600e4109000800ac00060311000000160012000a00fc000000035c3b61c1d67f6f94007134cf6efb8000a007a290457f", 0x55}], 0x1}, 0x0) (async) r12 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0000004800010029bd7000ffdbdf250a"], 0x4c}}, 0x0) sendmsg$NFC_CMD_DEP_LINK_UP(r3, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000f40)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002bbd7000fcdbdf250400000008000400ffffffff08000100", @ANYRES32=0x0, @ANYBLOB="05000a000b000400"], 0x2c}, 0x1, 0x0, 0x0, 0x4041}, 0x4000010) (async, rerun: 64) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) (async, rerun: 64) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x40000000000018c, 0x2, 0x0) (async) r13 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r13, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)=""/17, 0x11}, {&(0x7f00000001c0)=""/176, 0xb0}, {&(0x7f0000001500)=""/4096, 0x1000}, {&(0x7f0000000280)=""/178, 0xb2}, {&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/189, 0xbd}], 0x6}, 0x2000) 1.72128731s ago: executing program 1 (id=4312): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x40d, 0x70bd2d, 0x1ffffffb, {0x0, 0x0, 0x0, r2, 0x60046}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x2}, @IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x4}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000100001085f0000000000003a33a9e4fc", @ANYRES32=0x0, @ANYBLOB="00000000e300020008000a00", @ANYRES32=r2, @ANYBLOB="08001b"], 0x30}}, 0x0) 1.674019375s ago: executing program 4 (id=4313): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000040)={'veth0\x00'}) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req3={0x6, 0x2, 0x0, 0x8, 0x3, 0x10000, 0x396}, 0x1c) ioctl$BTRFS_IOC_SPACE_INFO(r1, 0xc0109414, &(0x7f00000000c0)={0xcba, 0x2e8, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) connect$rds(0xffffffffffffffff, &(0x7f0000013240)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000013280)={0x3, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x7f, "6e1f383395ce19"}) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f0000014280)={r3, 0x4}) connect$tipc(0xffffffffffffffff, &(0x7f0000015280)=@id={0x1e, 0x3, 0x0, {0x4e22, 0x1}}, 0x10) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f00000152c0)={r4, r2, "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", "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"}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000162c0)={'hsr0\x00', 0x1000}) r5 = socket$caif_seqpacket(0x25, 0x5, 0x1) connect$caif(r5, &(0x7f0000016300)=@dbg={0x25, 0x0, 0x8}, 0x18) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r6, 0x400448e3, &(0x7f0000016340)="baadd5a2ffa13c") r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000016380), 0x4) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000163c0)={0x1b, 0x0, 0x0, 0xfffffffe, 0x0, r6, 0x6, '\x00', 0x0, r7, 0x0, 0x5, 0x4}, 0x50) r9 = accept4$x25(0xffffffffffffffff, 0x0, &(0x7f0000016440), 0x180000) shutdown(r9, 0x0) ioctl$XFS_IOC_GETVERSION(r8, 0x80087601, &(0x7f0000016480)) r10 = socket$inet6_sctp(0xa, 0x4a43199415ca381d, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r10, 0x84, 0x14, &(0x7f00000164c0), &(0x7f0000016500)=0x4) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000177c0)={&(0x7f0000016540)=@generic={0x1a, "2eb339c0eadddf9d985711cda9759824075cc03e59586b8e13a17ee85dd80f91043dec3881ad6edd226d56774717b810bf3b960f50befe3cb1506f5865b3ea1a0f2e8eedd9ec8b0455cb0751023ba973081199e4f0da5956101bafa98beebd5ee9427fbd74808211c1fc8860af16de427137b7a7147b8111bbb151451bd5"}, 0x80, &(0x7f0000017680)=[{&(0x7f00000165c0)="3367994dbe8b5f595207e48e64b32ff4964b0e964ca5a39dd7f4fbdbe57e275e2d82140794bafd2f8adc92e2e3f34018d1cd2e12ca6870faf28372b8f97326ff979eeb20d32a63017c324c710187a46742cbce2bdaa354164e323af17e682d09eb87dc929117b99e43e1e8bc74562642cd539ed6a1a5a29826f2c6487736e2771220ae91ba79cc6f4964694154fbd32cf2c1eba5e23202ce3286e4c3a3d96e1a", 0xa0}, {&(0x7f0000016680)="b27c77c6a1bc025fcd663af3b2e2ab56f812b5f69bf1b694cf42ac72fa12dd339660fcb98ca48cdaaf507a2aedb76796925ded3b5da789ee79094c965971aff3a9a0f50820e753c58b502d39fe67d26d37fb3fc1f1aa7ca99ea160972bb285226a1655207e58ffc9ab30c9b2046cc8a4e5230fa3e60e42ff9084335e962a3d28f0878b11505858819c158d953a947df29f015778cc1102d422d244d484d8fbaed312cf5833d3b0c696d379ee75eee6b15e535bc8d387f2414a2ef3d1f77e3e9d9d72580d403daf5b5c0fdbb641f241de0240bbad26ca82e87a2b3cc4186a538819341b10168d5271b9c8add37f064a1fdf9bf1e5783b44f0f30e6642df03abe70985df5484d532ab59163c9b8bafb9a2cb39b80bcb3c86e0a0dcfdeb7a80431b6290b5f6c340b4b21e9467a8b7ec0d5bf4d5b32118814e0c06de04b4ead79447342ab4ff08071d221380650dd4b3ca1a82bc4174f17dc06356908d19728015404a5969953839c135b95eddf7a67c70835e1c67c579e30ceae3bb5e58a0dd5954a83bee17f5e84aec729895cc428705977f01a33abbdb4716e086570d53af14ff0460fee0d87c27e016930afc7c98547dc08fc4219d4fa93e90a79b1a22dc88346fe9b3b41ada6c80a6fd5de767438dd5ea4216f5e534388a41db3639e3c4064873bd3deb37025c64cc6d6b5496e598665382a4160399000a6b2ceeac6b1ef26bf209fef261aa88b5f27ab2cd85aad1d6c1add9f6a3b60f242ac1444686128c4c34e2f3574fac244355f60340b9ce1e19bc07334e1cb607fc295476dfbad89a9e156ea2236b7cea8f6002b131a6acc33a29662d83318febe1c5edee7f440bbe7c96f982e230f3dd8dca918340fb1dd60e5200500486efcd907766d1d70983af06e45bd6f46905bebb3b5de54c0f0874ebb196774cbe7fd7c3f6bf2fef3ef17aae37750ac4220ea1d2660dc05674251d4cfb4322f08a5526c582772b35ae01babe9415af427a9d18556e595a9f86ea816e577f8d99c35ddafc04d95cf312a56b7e5c7554664e3db5d49fce7071cd60b6a549ca350afc39d67f371042ef2d92946c7822dad8eab36096dee51a649b52cf51bf4dd2d17a53ecd2e3e54baa4cc4486f491abb1a3352126b3305778538c8f08e8cef8f1921d1959f6e91bb1baa0c56384dd81849dc6f27c0c5d628f6e605f77a3a06531a5eaf6ddd9dc74590345294cdbf08bbb159633a45f702897a2efeae8ab64f044d1fb7d47d69c77cfdc03f39399e08f613453ba1ec24df0e89c417dfa3dc977cee75b711c5993f11d023a44fa81666957f53dca2eb445bcd04a3080cfd6b79eafc41e272f862f42632d68a6568a565d85b2a4b8ae0245f6ed1b11e8519dbfbda28268688fb10cdb1fb7de03f29a9469683820d4a4c959aa59f7b183ceb7f00af0f429554955bf7dbc421e260ba0648ab0d87231aed13410cbf87810f54fb3c44782793f2f13e7a003c4023863f3b7302ecace6d492d041cdb3edd99932b25f10a04e6bdc5346693f5a4a3f10634ccadbc71b7e36620cd9e552014372a9bbf2ee1ce3dc7993ecb4839314d870e98438f9b5c5e7655f585095ca3b0629567b99ff5e68688864063b48108cba4ae26ca9a653fa44fa29746c0735cbdf58f541d15613c94c38ca419bbec8615eb6f4127ebbe76a604772c74b71b87de7de780f43eac60f3fbd67d833db120f6285a3f6ed5c1aef1f6f3c89e5342250ad98b868f5695f4af8dc0246f537785561256974b1f0442ee441c359f619c103f1cbf0c0209255035ad1400cc48ae490f6c674618ac4d11ee367bba31b4d50e93e2e5bfd29383563ade99c653e77bbc04140a369aa7fbe163fe9614b99198727c191debec80cc54a86e2d86b2c35e0585958f6a806c65ede04407c22b7db0dba00e45a2e81d5d700f2fe6e734fc812e495afeacc96cad8cf4473587807181ee5e4292f37560a7308b1b94945a3fbe18f8375727036b332b17ad4bb6a7ec181d87d49d7d2fcc2c82590e368ba2f88b2412218a6ce591b3383f10dfda16991a5cd58d9f0fb66991997d83ee5390cdca60a11b49e80cbf5432a4a84b46a61ad0a10bdec3bf2fb3b7bd2c49cd90406e3f46189e637c05f09af9aece401e1547efb9034050100f19f66fb40a9db036ac73d655299e15755a0e631a545159cdac82dec9df331ed4b8606b491dcc9afc94e24db4fa7d4c0d6846280ed8d0dfcd41029d9455b1b9f44d3a5449e3bfa2efd94976766eb3b24544c8fd394d3777311cbb0f89445d7f7571608f3339a9b74fe7bfcf01abaeba2d98f5cfb1ae011b07f0e4f94f4e9aa27100ff16cc236b1d2794359426c2364a23942b759dd43898a1257e8bb28b627d281d7029e8ecd1b25a9d90bc0e8e195a2adc3de475bf2f041a08189f6b4ccd398bc76ff0ffc84f9b125fda67d3e425d28f41b5e00fd389635cfd717ac33682f37802a5dacb2af8af0b3713ac55ba059e5984f35bfcced10460c3bafd4ba7f27091773d2fbd2b7259ca01ddf5a4629177fbbd90ac643b371277523452443caa925411baf25ee0c1e4978ecd88f7140ea1f4966762524cd65afe4ec9ed173070fca2a35cf5a5defd303334d658bfeafcfcd90880289866294f048be97883257ab5cb7a94feaa5d5e03cfdf55ca6bf09a661bc2934ec5bee3db7c14e653b1e76b814db0ff20ae5b7464f273acf91d4975355a6cf25315523814bec006b1bd44ae12dafff8c3d3cb6aeb6bff2af41131f5e2e98e0b606df0af0d200b7940ba54310177785c3d145c9653f0ab3661fa59e986a629546438255fd00ca44e38aa76e7ab33368240fba467d3a30b0669b22a6d966ebb2dbd8806e1909b1344ab70f337355a76175c5a235a840cfbf7dd1ec604d81244af6c309d0588f2d45eb383336247e19d570e30528ed7d031b2d57d9e14b741a8546faa9a3777ff682fd967cad32e65ac5383ac2fed26c92d94e27b8abc76fd3d9d0bc3f5ed128822fdd9a9000afc06df68442336165ffb88624ea2214ae01fc9ddaf430bb72ba052be1f999f1f7f1e7c2dec6c8249e0705e52ab4e2f2378e993e90e098f3b41a5f511414edf03797284b13c36d4f517fdf8467d1070f6e367a3fd32111b329bf816feb4486eb16b644a1d3e9a07b7eee4efda7aec690e6eaa7d481deb15679e54d59475a0950c6a979540208793328764423864fae0c10b4f6eac1015344d08f91196c8e514a795a3eed5169a69c93c3e2bcf43299a5d5201886a8d0b8927648c158b5319dc0f80af82359f34802827d8cd3c2297b905f199977d66d1b9b5ebc541bc761bf0819cb9e7731f8a934932af131485937d592cb3690840527d244dfa841ad09a6dfb4dfe2a5d5a37364fa7145628923c3a7806b9978bcc7f5a489da22fdab67b4cb39ef1dacc2c9014e04eaa7ddba5339841041585de702942ed483f4a3b79ebbf1bd62c36899edcf6cf6e867c5dc13c4bcbdc7202ad59a2501409a3d770c9a28b26c26e0c92978f7f1f027b5dd16aa4d2d4dd2e0798d2ed8de32403db338c5257fa5c1f999df6695f7a6a1201ceb1bf25ca56d789e85572bfb7f1476af3f5b998f3ac0b48228fdb702fa9082405b80aeb078113af4f43074966f947a76c89976a9bc4da6dc57ed9a1ed281fb27785ad0362a5b9f3e67db4845034cc1705e6a97f6449281bd8790b398d68f6dbbb7ea08986f047e794fb266c23d455f3be8578caa2a3a2cab56273ad013139e25139969f361d829d869de73ccf428b7309abd59e72699410a5bc1efe2228df6505484490040537463a66b6d78cdfa6da57436006c6a6a069098a900669a665c42ca6f498361903b9424d84ba0947817445f6c13737d2abda46d09fc8b00f92061622faed7b368c3babe593369acf55297d7b09b441f3594be3f565376e5372667681ab85d0d3eff897a77594a1206f33431d80b29f4ceb98c62f2a77d7a5e98de81466a08c6b4ff87a439b1e1c17b006e85e26cc466bdb30ede94abf384bd9221258f2a5c93632127ba094414031fda428181aa97e0a3afa246e00f71bc477048bf0c76a8aa3a7d43bfdad4842867a8d94a093481f2adf1d0e2f54efa851f02536e82fc62cb43c0d57c0ebab118d46c5357b15962fe5afc83ccb2e1f64a81fb7959164eb800bf111878765d4e9e77a9bdb1148d63ccdecba65b50a001a3bf2bb5ffab0c9338a0fb8b96c07c454542a80a4c714ffd6243361137983d4612d9daa168221494df17a27a6b63ae856623f6cbc916fbe8c6d0158584bfa7375454d30dea1134ac8677937cc1d38428f9d9dadd05230c75bfd1a7987649e350327acbcf47f595c8f114f98e2687f4e818b8d6a578aaf8d62fa67d29ff9b2ba20977581618d20fb9974637403db673dd33c171cae74b0ecf1e8cfd018e5001eab5233cc65e74de5004594235f972dc8e8532f7afa3599cb0685ebda54177ddce14aba8045af8b9ad922da2e500578bbd8f0096cbede52bb8af711f17c3162c8c3214fce5ae28e884be9e98635f15f7e4430cf15ae4f10d924b827d98a82c0f33dd0b3260a8b9acfc674a571a58c212dd4602fb140d8c5536cd644b51b2d0909059e368bca4b565b1d68c1c9ff0aa64316ec909755fc20a3a2d2122fe3c5b45d0125c734b5013173b3c3b34bcf1f1387532c1f94744eb7d9f168c082b26c13a1f8f561ca54d4ea76d06fb65cc71c2ea77c94abe2a3c5b6913f3afb966972213f5e1391938d52781ac3ff2613b823304d7975b0e30c6b4172fee2c057796912d58155a29d9e5a0a81b0e1d157778e89a13f1a9586e9f699dd31ebde6a428a1f056ed1e1079f50e62626467e661dff3599e4a15192de6c6bd206a453c807aac4a107b2121bb5a1741bf1cd199da21072a30ac0d577e6658bfc9286d40de446e86b32cb354b0665a99b7ccc9c53d737db0379b86e57c6adc3b9faa591a3a10a6bc98fd49566a9709ee20798d3ac7606c82a964c637c06efe18630bd20fe852d1a0afb36a43638cad7b0bfa3e399a7599aae448bb1a2560dd76e31907e18f0c92f2db355e77f9f3507eb53f12179eeba3078062386068179c4c09b13c0c9c64ae08fd51a4eb274d51ef492b962925c945a77918d804e34fd00f487d5578e5fb2a6b582b6b68f841fb609da681a9c64a1bb92732f0382efdf11667edb5b68cc15c38cd8dbc79a06435328fe8184c0c2c1c89080ec4c48823eee59109e291e5fc0a956216a32b3200f5805466a1867937ed8a7ed2edeb090668e75f4b1ad2272a22f2e053e9d4b5f245a9c4226aa33a5120fd0ce62363f80a020b0116896f06b4504cc5e3438a3f752389cdcd4c3e1b919c644b989414434fc2c29d9298a5fdde8cf8b5bd61abe5e85682d601a3366efe49b6e4bba4c42754993fc68d78d7e2c784cd88f07b1cc2df0ddadd2e71223a511f6f39dd3073848549874b1a8b63c96f7b336164caf4041e7c4d2296cddcfd47c9e077c75a194ae9578c1d6b4d9466810f16bad68b2455f6660c4b84b1116ad733a09d1a25b2ade4be9a772aafadcf88853a487d4e96857da45f1c625381284eacd301174ce7b6fbce48253ea17ee42f3f126b4128fd99b0a59b25846a1e141901e22cbd24d3f2e618256e806b181d0a64469fd8fbc7d0a9af84f57d61914a0fc536e389ab58731e9018c782080fcbdb4177eb2bf79c59076c656f69fceb4ef90eef96dafc7170063243f41309ccb9c7dcacdf6cba4f6e5b9082df6f2c73c60409bca5c214e0123ea81faa4442827add84fde29710552b82ed510c90", 0x1000}], 0x2, &(0x7f00000176c0)=[{0x68, 0x127, 0x1, "53c336f22498279b8a630237e058f5a5b62ecfe87893e10abea6f86462875ca4e809002bf35f76f0b184326d4a255265411efcc90ed5fc921ea6fd6274da89414d98738f059c80ddb7ad21caae10596fefe6d657"}, {0x88, 0x115, 0x4, "bc68c6482ad7b92a44460c4c6abfed197afc50193e845a0d97261d14ee46b6cbf02a326338c48b7890102ac4c2bf1672ab34ee53a64893c4a0034bbda8502000dfce153be8654985b0ef80c047ecfe6e52fae2e8598f70053a062e72668686aa959a8304a7515a7fcd58c356d742f0cdf94153"}], 0xf0}, 0x4000) r11 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r11, &(0x7f0000017880)={0x0, 0x0, &(0x7f0000017840)=[{&(0x7f0000017800)=""/21, 0x15}], 0x1}, 0x80) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000178c0)={0xffffffffffffffff}) r13 = getuid() sendmsg$nl_xfrm(r12, &(0x7f0000018c80)={&(0x7f0000017900)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000018c40)={&(0x7f0000017a40)=@acquire={0x11f0, 0x17, 0x400, 0x70bd27, 0x25dfdbff, {{@in=@local, 0x4d5, 0xff}, @in=@broadcast, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@rand_addr=' \x01\x00', 0x4e21, 0x0, 0x4e24, 0x0, 0x2, 0x20, 0x0, 0x0, 0x0, r13}, {{@in=@broadcast, @in6=@mcast1, 0x4e23, 0x6, 0x4e24, 0x0, 0x2, 0x60, 0x20, 0x4}, {0x6, 0xb6, 0x0, 0xff, 0xca, 0x0, 0x4, 0xfffffffffffffffb}, {0x8, 0xffffffffffffffff, 0x400, 0xdf}, 0x80, 0x6e6bb5, 0x2, 0x0, 0x1, 0x1}, 0x3ff, 0x74, 0x2, 0x70bd28}, [@user_kmaddress={0x2c, 0x13, {@in6=@loopback, @in6=@mcast1, 0x0, 0x2}}, @offload={0xc, 0x1c, {0x0, 0x2}}, @replay_esn_val={0x2c, 0x17, {0x4, 0x70bd29, 0x70bd27, 0x70bd25, 0x70bd26, 0x9, [0x6, 0x6, 0x3, 0x9]}}, @srcaddr={0x14, 0xd, @in6=@mcast1}, @algo_crypt={0x1048, 0x2, {{'chacha20-arm\x00'}, 0x8000, "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"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x5}]}, 0x11f0}, 0x1, 0x0, 0x0, 0x4010005}, 0x40) 1.601678761s ago: executing program 1 (id=4314): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000001c0)=@ethtool_stats={0x1d, 0x2, [0x0, 0x9]}}) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) bind$llc(r1, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0xff, 0x2, 0x9}, 0x10) pipe(&(0x7f0000000440)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x3000, 0x100000000000000d) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r4}, 0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x11, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000109000000000000000000008500000017000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) splice(r1, &(0x7f0000000400)=0x3, r5, &(0x7f0000000480)=0x2, 0x5, 0x2) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000380), &(0x7f00000003c0)=0x4) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) r7 = accept4$unix(r6, &(0x7f00000001c0), &(0x7f0000000100)=0x6e, 0x0) r8 = accept$unix(r7, &(0x7f0000000240)=@abs, &(0x7f0000000300)=0x6e) write$cgroup_int(r6, &(0x7f0000000000), 0xffffff6a) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r8, 0x8983, &(0x7f0000000340)) sendfile(r1, r6, 0x0, 0xffffffff000) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYRESDEC], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) 1.550365602s ago: executing program 4 (id=4315): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bind$llc(0xffffffffffffffff, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8004, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000002ec0), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000280)=0x2) ioctl$PPPIOCSMAXCID(r7, 0x40047451, &(0x7f00000000c0)=0x2) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x30, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x2c, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x100}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x81}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xfffffeff}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xf1a}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40001}, 0x0) 1.548063519s ago: executing program 2 (id=4316): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000d5608bc044123f44161d22fda95dfefa2422467e7222aa81b83bc44bfb67e900a526a69f62c470d43f00f9a89a0d134b31b3a943f350a70e5c29b1b6bcb6a8603691c711697128417272528f1e7ee3128e65ade15aec4453c067a355dfd92095ecb1fe656b35d5e2b2c216a39904a49e9cbee527484bb17adba996c4d9fe3518f51dd84c627c6915665489103b49a5bc5d5fa563fd7c7a3fa34e93db8ca0dbe88de2d7974badd81211cb39ea44cdee652ba10b246"], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x6, 0x4, 0x6, 0xa, 0x0, r1, 0x83}, 0x50) openat$ppp(0xffffffffffffff9c, &(0x7f0000000380), 0x121000, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7dfb}}, &(0x7f0000000340)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0xfeff, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b70300001b0000008500000083000000bf0900000000000055090100000000009500000000000000b7080000100000007b9af8ff00000000b5090500000000007baaf0ff00000000bda804000000000007080000f8ffffffbf07000000000000070000000800ffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000046000000760000006d00ffff00000000bf91000000000000b6080000000000008500000085000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.443680129s ago: executing program 2 (id=4317): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e23, 0x27, @remote, 0x6}}, 0x0, 0x0, 0x3c, 0x0, "bbca41d6357e544508474004000b42a201ecffffffffffffff964e00f3c434a632ab56c54dc46d8b6d2ccd00a0cff3007bbe0000000000000000000000e900"}, 0xd8) r0 = socket$kcm(0x23, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000040)={0x0, 0x800, 0xbf81, 0xf}, 0x8) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x6, 0x4) listen(r0, 0x8) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) 831.423213ms ago: executing program 4 (id=4318): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000540)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0x9}]}, &(0x7f00000002c0)=0x22) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000540)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0x9}]}, &(0x7f00000002c0)=0x22) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) (async) bind$unix(r2, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r3, 0xc0205866, &(0x7f0000000440)={&(0x7f0000000280)=0x2, 0x6ad6, &(0x7f0000000340)=[{}], &(0x7f0000000400)}) (async) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r3, 0xc0205866, &(0x7f0000000440)={&(0x7f0000000280)=0x2, 0x6ad6, &(0x7f0000000340)=[{}], &(0x7f0000000400)}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r7, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r7, 0x1000) (async) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r7, 0x1000) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000009c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000980)={&(0x7f0000000800)={0x16c, 0x9, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x8000}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x3}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x20}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x8000000000000000}]}, @IPSET_ATTR_ADT={0x30, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x7}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0xb87}}]}, @IPSET_ATTR_ADT={0x84, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'ip6gretap0\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x9}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x4}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x6}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x4}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x40}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x68, 0x7, 0x0, 0x1, [@IPSET_ATTR_COMMENT={0xc, 0x1a, 'devlink\x00'}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x7fffffff}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x80}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz1\x00'}, @IPSET_ATTR_IFACE={0x14, 0x17, 'vlan0\x00'}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x16c}, 0x1, 0x0, 0x0, 0x44}, 0x44084) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r6, 0x5, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc}, {0x3}}]}, 0x54}}, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r4, &(0x7f0000000500)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={&(0x7f0000000580)={0x20c, r6, 0x800, 0x9, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4e}, {0x6}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x4}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x6}, {0x6, 0x16, 0x5}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6, 0x16, 0xfff7}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0x7}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0x2}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x5ec}, {0x6}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xdf0}, {0x6, 0x16, 0x1}, {0x5}}]}, 0x20c}, 0x1, 0x0, 0x0, 0x8000}, 0x1) bind$unix(r3, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) sendto$unix(r3, 0x0, 0x12, 0x100400c0, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockname$netlink(r8, &(0x7f0000000180), &(0x7f00000001c0)=0xc) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan3\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRESDEC=r2, @ANYRES16=r1, @ANYRES8=r9, @ANYRESDEC=r2, @ANYRESOCT=r9, @ANYRESDEC=r3, @ANYRESHEX=r9], 0x40}, 0x1, 0x0, 0x0, 0x24000054}, 0x8000) (async) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRESDEC=r2, @ANYRES16=r1, @ANYRES8=r9, @ANYRESDEC=r2, @ANYRESOCT=r9, @ANYRESDEC=r3, @ANYRESHEX=r9], 0x40}, 0x1, 0x0, 0x0, 0x24000054}, 0x8000) 701.654621ms ago: executing program 1 (id=4319): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff004) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf6b, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x6a}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6b, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 549.331783ms ago: executing program 0 (id=4320): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) unshare(0x8040480) close(0x3) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f0000000380)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd16", 0x8}], 0x2, &(0x7f00000003c0)=[@assoc={0x18, 0x117, 0x4, 0x8}], 0x18, 0x28044854}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) recvmsg$can_raw(r3, &(0x7f0000000540)={&(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000140)=""/138, 0x8a}, {&(0x7f0000000200)=""/70, 0x46}, {&(0x7f0000000280)=""/33, 0x21}, {&(0x7f00000002c0)=""/201, 0xc9}, {&(0x7f00000003c0)=""/246, 0xf6}], 0x5}, 0x10000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) recvmmsg(r1, 0x0, 0x0, 0x100, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r4, 0x4048587b, &(0x7f0000000a00)={{r0, &(0x7f0000000580)='gcm(anubis)\x00', 0x200000, &(0x7f0000000600)={@align=0x6, {0x5, 0x0, 0xadd6, 0x9}}, 0x10, &(0x7f0000000640), &(0x7f0000000680)=0xd18}, 0x4, &(0x7f0000000980)=[{0x3, 0x1, &(0x7f00000006c0)='ct\x00', &(0x7f0000000700)="a125979811d755160e01c8383c4595f2374096cce5f495dfdadef3b8207bdfee97b09f3d1b5921d60a5ca1e814a373cd21e6f200fe7e8a97c6d441147fa459d55a2e954b55d233bf1888e9e3f370114cea5f98e2eac88707f81c622787b01912", 0x60}, {0x2, 0x7fff, &(0x7f0000000780)='vlan\x00', &(0x7f00000007c0)="417087312d053e0108120879ab8727694dc700320324a9fce2a69502b2101917053a230c79ed4d0f40e90b68abbaea0f881258550383aa87ae45f19c85726187c394fa76876eb76c1f1fed92bb041b3c685c280688d83ae0d70411b2e6a9848479e6c44a62ff7b8a95d2b494b17683081654bdd159a8a396995278ed7ae291462338929068e65b13ffdaf4e27f8adeffb749a1f8b70cae4fdcc8", 0x9a, 0x1a}, {0x2, 0xffffffff, &(0x7f0000000880)='+@\x00', &(0x7f00000008c0)="be47", 0x2, 0xc}, {0x3, 0x0, &(0x7f0000000900)='\x00', &(0x7f0000000940)="0ceec8fc1deea51f312a6c99", 0xc, 0x8}]}) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000c00)={@private, @local, 0x0}, &(0x7f0000000c40)=0xc) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) pwrite64(r7, 0x0, 0xffffffffffffff4d, 0x7fffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d80)={0x6, 0x11, &(0x7f0000000a80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xac}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@map_idx_val={0x18, 0x5, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7fffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='GPL\x00', 0x2, 0x78, &(0x7f0000000b80)=""/120, 0x40f00, 0x20, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000c80)=[r7], &(0x7f0000000cc0)=[{0x2, 0x4, 0xd, 0x1}, {0x4, 0x3, 0x10, 0x4}, {0x5, 0x2, 0xc, 0xb}, {0x1, 0x1}, {0x4, 0x5, 0x5, 0x3}, {0x1, 0x5, 0x9, 0x2}, {0x0, 0x2, 0x9, 0x8}, {0x1, 0x4, 0xe, 0x4}, {0x5, 0x5, 0x7, 0x5}], 0x10, 0xdb}, 0x94) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=@newtaction={0x90, 0x30, 0x1, 0x0, 0x25dfdbfe, {}, [{0x7c, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x8, 0x4000d, 0x0, 0x6, 0x8}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x8010}, 0xc0) 493.91009ms ago: executing program 0 (id=4321): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xea, 0x440, 0x0, 0x32}, 0x9c) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x6}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0xfffffffd, @loopback, 0x3}, 0x1c) (async) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000180)=0xa6b1, 0x4) (async) r1 = socket(0x1e, 0x5, 0x0) listen(r0, 0x8) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) close(r4) (async) write$cgroup_pressure(r4, &(0x7f0000000140)={'some', 0x20, 0x8, 0x20, 0x90000000000000}, 0x2f) (async) unshare(0x2a060400) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) close(0x3) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c0000000400000004000000fe7f000000000000", @ANYRES32=r5, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00004300000000000000002171d0bb00"/28], 0x48) (async) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffffffe, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14, 0x1, {0x3f26, 0x5, 0x3, 0x1f, 0xb, 0x14, 0x5}}]}}]}, 0x148}}, 0x4000010) listen(r1, 0x0) r6 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r6, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) (async) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c) (async) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x1d, 0x0, 0xfffffffe, 0x5, 0x6, 0x0, 0x2}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x8040}, 0x8010) (async) sendmsg$tipc(r6, &(0x7f0000000640)={&(0x7f0000000380), 0x10, 0x0}, 0x0) (async) close(0x3) 438.868377ms ago: executing program 2 (id=4322): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f00000004c0)={0x5, 0x40000}, 0x10) sendmsg$nl_route(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c0000001200375f3fbd7000fcffffff07000000", @ANYBLOB="3ff9d20dd435b7"], 0x2c}, 0x1, 0x0, 0x0, 0x40855}, 0x8884) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a78000000060a010400000000000000000200000038000480340001800a0001006d617463680000002400028008000100756470000e0003007acc6338a90000b03bd9000008000240000000000900010073797a30000000000900020073797a32000000001400058008000140f2000011080002"], 0xa0}, 0x1, 0x0, 0x0, 0x20000000}, 0x804) (async) r3 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x0, 0x8, 0x77}, {@remote, 0x4e20, 0x1, 0xcd}}, 0x44) (async) r4 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xea, 0x440, 0x0, 0x32}, 0x9c) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x6}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) (async) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0xfffffffd, @loopback, 0x3}, 0x1c) (async) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) shutdown(r0, 0x2) 317.614494ms ago: executing program 0 (id=4323): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2a, 0x9, 0x9, 0x6, 0x8084, 0x3, 0x2, 0x2]}}, @NL80211_TXRATE_HT={0x5, 0x2, [{}]}]}]}]}, 0x40}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x14, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000002000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000001000000b704000000000000850000003300000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000000600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r5, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f4bdf33c9e9b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70300000100400085000000c0000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r8, 0x0, 0xe, 0x0, &(0x7f0000000ac0)="ddc937981007901a80379c3e0800", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmmsg(r6, &(0x7f0000000f40)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0xf275, @loopback, 0xa, 0x23}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000040)='B', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[{0x10, 0x84, 0x1}], 0x10}}], 0x2, 0x40d5) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x800, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xfff2}, {0x1, 0xc}, {0xfff3, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x80000000}, @TCA_CAKE_FWMARK={0x8, 0x12, 0xffff7fff}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x10) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r11, r10, 0x25, 0x0, @val=@netkit}, 0x1c) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000002c0)={0x0, @initdev, @remote}, &(0x7f0000000680)=0xc) r14 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r14, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r14, &(0x7f00000000c0)={0x1d, r15}, 0x18) ioctl$FS_IOC_GETFSUUID(r12, 0x80111500, &(0x7f00000006c0)) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000480)={'syztnl1\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, @empty, @loopback, 0x10, 0x80, 0xffffffa7, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000540)={'syztnl1\x00', &(0x7f00000004c0)={'ip6gre0\x00', 0x0, 0x4, 0x0, 0xf, 0x1, 0x44, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, 0x8, 0x80, 0x4, 0x9a}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000640)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f00000007c0)={0x114, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x40}, 0x4000010) r18 = socket$inet(0xa, 0x801, 0x84) listen(r18, 0x4000100) listen(r18, 0x8) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="500000001000010435bbe5ad600027842cf52300c9d99d41a0714515fc2e9f760bfec154c9264b9b43c22a1626655e72a261de2fcc7182be373dac90510b779306d9939ebc1aa01404264c2948f27df055f3accc2a5ba55245dc110c9161dba300"/108, @ANYRESDEC=0x0, @ANYRESHEX=r0], 0x50}}, 0x4000084) 317.209857ms ago: executing program 2 (id=4324): ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000280)={0xffffffffffffffff, &(0x7f0000000100)='GPL\x00', 0x404800, &(0x7f0000000140)={@_ha_fsid={[0x16, 0x5]}, {0x6, 0xf, 0x2, 0x4}}, 0xb15a, &(0x7f00000001c0), &(0x7f0000000200)=0xab5}) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x15, 0x15, &(0x7f00000002c0)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @alu={0x7, 0x1, 0xd, 0x8, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffff801}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x200}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}], 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, 0xffffffffffffffff}, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg2\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x101, 0x200, 0x7f, 0x0, r1, 0xff, '\x00', r2, 0xffffffffffffffff, 0x3, 0x0, 0x2, 0xd}, 0x50) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x20, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b705000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$inet6_udp(0xa, 0x2, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b00)={0xffffffffffffffff}) bind$unix(r9, &(0x7f0000003000)=@abs={0x1, 0x0, 0x4e21}, 0x6e) (async) listen(r9, 0x3841b273) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0xf, 0xc}}, [@qdisc_kind_options=@q_fq={{0x7, 0x20}, {0x4}}]}, 0x30}}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f00000003c0)=""/48, &(0x7f0000000400)=0x30) (async) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c0100001600010028bd7000fcdbdf25e0000001000000000000000000000000000000000000000000000000000000004e2100034e220010020080a03b000000", @ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB="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"], 0x11c}, 0x1, 0x0, 0x0, 0x48095}, 0x4000014) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3], 0x0, 0xfffffffd}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 194.26065ms ago: executing program 0 (id=4325): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_open_procfs$namespace(0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x4, 0x10, 0x5, 0x2, 0x10, @dev={0xfe, 0x80, '\x00', 0x3f}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x700, 0x8000, 0x9, 0x3}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="14a9000010000100000000000000000000004b107482e19639000a78000000060a0b040000000000000000020000044c00048024000180090001006d657461000000001400028008000140000000150800024000000004240001800b0001006f626a726566000014000280080005400000000108000340000000130900010073797a30000000000900020073797a3200000000148f4dffff00010000000000000000000000000a"], 0xa0}}, 0x0) 193.591026ms ago: executing program 2 (id=4326): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xb, 0x9}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) syz_init_net_socket$ax25(0x3, 0x3, 0xcf) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r4, 0x110, 0x5, &(0x7f0000000100)=[0x0, 0x1], 0x2) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0x403, 0x70bd2b, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}}, 0x20}}, 0x0) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)) sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000540)=ANY=[@ANYBLOB="280000002d000109000000000000000008000c00", @ANYRES32=0x0, @ANYBLOB="0a000080976b64086860000004000180"], 0x28}], 0x1, 0x0, 0x0, 0x2000000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000040004000b7040000001f000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="a0c5b3a70206e064ce6eee5ed0d4ca91c00919632cbc4526fd039b7047f665e2754cd85dcd3d29f166b25689cdb81d197c00c7e79d48d93e538a5b757815ea01bbabec81abdbd1999d2ebdfde4d56e54b6ba740d07b96ab8ef14af0b134bca9ad9249c41837de9f4534b9522b5b9fb6b52f195567595e3253bb03e858b3ef1c8994826d4e458c4592e5370c29d4b5e0871c27486345e5bd3ba9d8def3923f0710865ec32e0a6f0045944de234612625f0ce5b5f3f69e2a746e88f4778967e1771b28b6375ecf3eaa443c5e"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x301}, 0x94) setsockopt$MRT_DEL_VIF(r4, 0x0, 0xcb, &(0x7f0000000240)={0x0, 0x4, 0x2, 0x3, @vifc_lcl_addr=@rand_addr=0x64010100, @multicast2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r9, 0x2000300, 0xe, 0x0, &(0x7f0000000580)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@bridge_delneigh={0x40, 0x1d, 0x2, 0x70bd2b, 0x25dfdbfe, {0x16, 0x0, 0x0, r5, 0x40, 0x80, 0x7}, [@NDA_MASTER={0x8, 0x9, 0x4}, @NDA_DST_IPV6={0x14, 0x1, @mcast2}, @NDA_FLAGS_EXT={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0xcc893}, 0x4000800) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x2dc}}, 0x8881) 174.372114ms ago: executing program 0 (id=4327): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x1c, r1, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x10) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000040)={'geneve0\x00', {0x2, 0x0, @remote}}) 74.821272ms ago: executing program 1 (id=4328): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000040)="0d000000010001", 0x7) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000140)={0x2, 0x0, 0x5}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x8, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000020000000c000000001466bfdac3c37dd5273545b9193c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1d, 0xc, &(0x7f0000000fc0)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa2af}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000980)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa1000000000000", @ANYRESHEX], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x120c000, 0x1000, 0x0, 0x7}, 0x20) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10805}, 0x44049) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) r8 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r8, &(0x7f0000000380)={&(0x7f00000000c0)=@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000240)="af", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400000078a89979e52dd10986f154b2a300000000ffff072007000400"], 0x18, 0x20000001}, 0x20008000) setsockopt$inet_group_source_req(r8, 0x29, 0x2c, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r8, 0x114, 0x7, &(0x7f0000000280)={@l2={0x1f, 0x9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8}, {&(0x7f00000003c0)=""/4096, 0x1000}, &(0x7f0000000100), 0x6b}, 0xa0) sendfile(r1, r2, 0x0, 0x800) 22.249913ms ago: executing program 0 (id=4329): bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'macsec0\x00', {'wlan1\x00'}}) r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r3, 0x800442d3, &(0x7f000000eec0)={0x6, 0x7, 0x2a4, @random="d60fea76ac0e", 'veth1_vlan\x00'}) r4 = socket$inet(0x2, 0x3, 0x30) getsockopt$inet_mreqsrc(r4, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x2c) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)={0x28, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4, 0x5b, "e6ad5983f970d400af40a8ada45eb98fedba454bf51e20a52b5ccae4688a2fc9eebc57b5f6a0584147e71d00f473f5c935f49ec12c07afc465f93868c5f68daba11b73885caedb22c7b0d9d5c0fdc43bdbb0d9af5664c75315df1806c60c2ae7fcb280b84d36fe1b10edc2c4d59c405c23e478bac6ae334d6f0e266b0da3e14313efc63c11839b5951fe781684dcbff7a65d8d0adcfc37c57a8a8f597dfbc83f14101507f1472a8737ab2fd84e818ec8"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3e}]}, 0x1a}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r11, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) socket$tipc(0x1e, 0x2, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)={0x2c, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x70}}}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x2c}}, 0x48000) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r13 = socket$alg(0x26, 0x5, 0x0) bind$alg(r13, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r13, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r14 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x40002, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x3, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r14}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r12}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x4}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYRES8=r7, @ANYRES32=r1, @ANYBLOB="4e99b2e42a52e201ea286e7a4f5eae91"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) 0s ago: executing program 2 (id=4330): socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) (async, rerun: 32) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback=r0, r0, 0x2f}, 0x20) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup=r0, r1, 0x2f, 0x18, 0x4, @void, @value=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b40500000000000010a000000000001ca00030a3313846f475838f01219d294ae684b9a0ce8dc608d751a93e94e820"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffffb}, 0x48) (async) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0xefff, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac0040002020800020003000a0004000600eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20004080) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x2f, 0x0, 0xf4, 0x5, 0x20, @private2={0xfc, 0x2, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x40}, 0x700, 0x7800, 0x5, 0x9}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x8, &(0x7f0000000140)=@raw=[@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}], &(0x7f0000000180)='syzkaller\x00', 0x7ab, 0x0, 0x0, 0x41000, 0x1a, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x2, 0x10, 0xfffffffb, 0x5}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000340)=[{0x1, 0x1, 0xf, 0x8}, {0x2, 0x4, 0x6}, {0x0, 0x5, 0xe, 0xa}, {0x1, 0x3, 0x3, 0x9}, {0x1, 0x5, 0x1}], 0x10, 0xfffffffa}, 0x94) kernel console output (not intermixed with test programs): butes in process `syz.2.3079'. [ 344.366508][T17952] veth0_vlan: entered promiscuous mode [ 344.413184][T18156] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3083'. [ 344.437118][T17952] veth1_vlan: entered promiscuous mode [ 344.467922][T17952] veth0_macvtap: entered promiscuous mode [ 344.502549][ T5840] Bluetooth: hci1: command tx timeout [ 344.509121][T18156] openvswitch: netlink: IP tunnel dst address not specified [ 344.527466][T18156] SET target dimension over the limit! [ 344.553911][T17952] veth1_macvtap: entered promiscuous mode [ 344.579189][T17952] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 344.589128][T18153] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3081'. [ 344.591902][T17952] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 344.633065][T18153] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3081'. [ 344.644047][ T6326] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.672661][ T6326] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.689596][ T6326] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.710336][T18157] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3081'. [ 344.723413][T18167] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 344.743683][ T6326] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.882158][T18176] netlink: 'syz.2.3089': attribute type 11 has an invalid length. [ 345.012597][ T6333] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.031782][ T6333] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.091300][ T6333] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.118532][ T6333] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.254230][T18190] lo speed is unknown, defaulting to 1000 [ 345.279386][T18195] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3094'. [ 345.648535][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 345.662712][ T5834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 345.673303][ T5834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 345.712657][ T5834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 345.722041][ T5834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 346.056379][T18221] syzkaller0: entered promiscuous mode [ 346.062547][T18221] syzkaller0: entered allmulticast mode [ 346.095311][T18205] lo speed is unknown, defaulting to 1000 [ 346.143988][T18228] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3104'. [ 346.154097][T18228] openvswitch: netlink: Missing key (keys=40, expected=80) [ 346.162902][T18229] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3104'. [ 346.171815][T18229] openvswitch: netlink: Missing key (keys=40, expected=80) [ 346.532179][T18247] sctp: [Deprecated]: syz.1.3110 (pid 18247) Use of int in maxseg socket option. [ 346.532179][T18247] Use struct sctp_assoc_value instead [ 346.583179][ T5840] Bluetooth: hci1: command tx timeout [ 346.618247][T18205] chnl_net:caif_netlink_parms(): no params data found [ 346.697137][T18252] tipc: Started in network mode [ 346.702054][T18252] tipc: Node identity , cluster identity 4711 [ 346.708671][T18252] tipc: Failed to obtain node identity [ 346.716009][T18252] tipc: Enabling of bearer rejected, failed to enable media [ 346.767535][T18252] 0ªX¹¦À: renamed from caif0 [ 346.776655][T18252] 0ªX¹¦À: entered allmulticast mode [ 346.781893][T18252] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 346.863765][T18252] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 346.879281][T18252] bond1: (slave lo): Enslaving as an active interface with an up link [ 346.889689][T18252] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 346.937372][T18264] xt_hashlimit: max too large, truncated to 1048576 [ 346.979015][T18264] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 347.010758][T18260] lo speed is unknown, defaulting to 1000 [ 347.017459][T18205] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.042192][T18205] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.069316][T18205] bridge_slave_0: entered allmulticast mode [ 347.101281][T18205] bridge_slave_0: entered promiscuous mode [ 347.169526][T18205] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.180849][T18205] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.197765][T18205] bridge_slave_1: entered allmulticast mode [ 347.216284][T18205] bridge_slave_1: entered promiscuous mode [ 347.425425][T18274] syzkaller0: entered promiscuous mode [ 347.435178][T18274] syzkaller0: entered allmulticast mode [ 347.508734][ T168] pimreg9: left allmulticast mode [ 347.755026][ T168] bond6 (unregistering): (slave vti0): Releasing backup interface [ 347.763047][ T168] vti0 (unregistering): left promiscuous mode [ 347.811486][ T168] bond4 (unregistering): (slave gretap1): Releasing active interface [ 347.850260][ T168] bond5 (unregistering): (slave geneve3): Releasing active interface [ 347.860172][ T5840] Bluetooth: hci4: command tx timeout [ 348.349828][ T168] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 348.361082][ T168] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 348.371693][ T168] bond0 (unregistering): Released all slaves [ 348.381705][ T168] bond1 (unregistering): Released all slaves [ 348.397223][ T168] bond2 (unregistering): (slave veth3): Releasing active interface [ 348.408824][ T168] bond2 (unregistering): Released all slaves [ 348.421933][ T168] bond3 (unregistering): Released all slaves [ 348.427572][T18307] x_tables: duplicate underflow at hook 4 [ 348.439694][ T168] bond4 (unregistering): Released all slaves [ 348.457251][ T168] bond5 (unregistering): Released all slaves [ 348.486487][ T168] bond6 (unregistering): Released all slaves [ 348.528750][ T168] bond7 (unregistering): (slave batadv1): Releasing active interface [ 348.545903][ T168] batadv1: left promiscuous mode [ 348.558222][ T168] batadv1: left allmulticast mode [ 348.564737][ T168] bond7 (unregistering): Released all slaves [ 348.578203][ T168] bond8 (unregistering): Released all slaves [ 348.590386][ T168] bond9 (unregistering): Released all slaves [ 348.602649][ T168] bond10 (unregistering): Released all slaves [ 348.617500][T18205] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 348.630189][T18205] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 348.653231][ T5840] Bluetooth: hci1: command tx timeout [ 348.956931][ T168] tipc: Left network mode [ 348.991696][ T168] IPVS: stopping backup sync thread 15818 ... [ 349.046103][T18324] netlink: 'syz.0.3124': attribute type 21 has an invalid length. [ 349.066322][T18205] team0: Port device team_slave_0 added [ 349.168521][T18205] team0: Port device team_slave_1 added [ 349.209316][T18331] __nla_validate_parse: 2 callbacks suppressed [ 349.209336][T18331] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3125'. [ 349.243446][T18331] netlink: 'syz.1.3125': attribute type 7 has an invalid length. [ 349.258760][T18331] netlink: 'syz.1.3125': attribute type 8 has an invalid length. [ 349.311504][T18331] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3125'. [ 349.384192][T18331] syz_tun: entered promiscuous mode [ 349.404343][T18341] netlink: 'syz.0.3127': attribute type 1 has an invalid length. [ 349.415501][T18331] gretap0: entered promiscuous mode [ 349.422144][T18331] erspan0: entered promiscuous mode [ 349.437057][T18331] debugfs: 'hsr1' already exists in 'hsr' [ 349.443610][T18331] Cannot create hsr debugfs directory [ 349.464941][T18205] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 349.495478][T18205] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 349.512226][T18346] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3127'. [ 349.537541][T18205] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 349.571118][T18341] 8021q: adding VLAN 0 to HW filter on device bond7 [ 349.584209][T18344] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 349.594493][T18344] bond7: (slave batadv1): making interface the new active one [ 349.603999][T18344] bond7: (slave batadv1): Enslaving as an active interface with an up link [ 349.635432][T18205] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 349.645445][T18205] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 349.696158][T18205] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 349.870439][T18205] hsr_slave_0: entered promiscuous mode [ 349.887900][T18205] hsr_slave_1: entered promiscuous mode [ 349.902006][T18357] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3129'. [ 349.917224][T18205] debugfs: 'hsr0' already exists in 'hsr' [ 349.929037][T18205] Cannot create hsr debugfs directory [ 349.935220][ T5840] Bluetooth: hci4: command tx timeout [ 350.325484][T18369] dvmrp1: entered allmulticast mode [ 350.341042][T18365] netlink: zone id is out of range [ 350.367651][T18365] netlink: zone id is out of range [ 350.382617][T18365] netlink: zone id is out of range [ 350.402794][T18365] netlink: zone id is out of range [ 350.417068][T18365] netlink: zone id is out of range [ 350.442686][T18365] netlink: zone id is out of range [ 350.447844][T18365] netlink: zone id is out of range [ 350.457047][T18365] netlink: zone id is out of range [ 350.465563][T18365] netlink: zone id is out of range [ 350.470799][T18365] netlink: zone id is out of range [ 350.492493][ T168] hsr_slave_0: left promiscuous mode [ 350.501432][ T168] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 350.518036][ T168] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 350.538158][ T168] vlan1: left allmulticast mode [ 350.553613][ T168] veth0_vlan: left allmulticast mode [ 350.559047][ T168] vlan1: left promiscuous mode [ 351.050336][ T24] lo speed is unknown, defaulting to 1000 [ 351.057741][ T24] infiniband syz0: ib_query_port failed (-19) [ 351.091072][T18387] bond0: option updelay: invalid value (18446744072924056005) [ 351.098658][T18387] bond0: option updelay: allowed values 0 - 2147483647 [ 351.106637][T18387] bond0 (unregistering): Released all slaves [ 351.200875][T18390] syzkaller0: entered promiscuous mode [ 351.214351][T18390] syzkaller0: entered allmulticast mode [ 352.022566][ T5840] Bluetooth: hci4: command tx timeout [ 352.924218][T18425] syzkaller0: entered promiscuous mode [ 352.962556][T18425] syzkaller0: entered allmulticast mode [ 352.980512][T18436] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3140'. [ 353.103761][T18447] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.3143'. [ 353.223954][T18455] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3145'. [ 354.103275][ T5840] Bluetooth: hci4: command tx timeout [ 354.730668][T18464] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3147'. [ 354.886849][T18479] netlink: 'syz.0.3148': attribute type 1 has an invalid length. [ 354.904948][ T168] IPVS: stop unused estimator thread 0... [ 354.939568][T18484] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3150'. [ 354.951618][T18488] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3149'. [ 354.969404][T18474] macvtap1: entered promiscuous mode [ 354.980170][T18474] macvtap1: entered allmulticast mode [ 354.986913][T18474] dummy0: entered promiscuous mode [ 354.993213][T18474] dummy0: entered allmulticast mode [ 355.000485][T18474] team0: Device macvtap1 failed to register rx_handler [ 355.009297][T18474] dummy0: left allmulticast mode [ 355.014874][T18474] dummy0: left promiscuous mode [ 355.112879][T18487] bond8: entered promiscuous mode [ 355.118027][T18487] bond8: entered allmulticast mode [ 355.125581][T18487] 8021q: adding VLAN 0 to HW filter on device bond8 [ 355.138488][T18478] netlink: 'syz.1.3150': attribute type 1 has an invalid length. [ 355.156188][T18497] FAULT_INJECTION: forcing a failure. [ 355.156188][T18497] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 355.171155][T18497] CPU: 0 UID: 0 PID: 18497 Comm: syz.2.3154 Not tainted syzkaller #0 PREEMPT(full) [ 355.171181][T18497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 355.171193][T18497] Call Trace: [ 355.171277][T18497] [ 355.171286][T18497] dump_stack_lvl+0xe8/0x150 [ 355.171455][T18497] should_fail_ex+0x412/0x560 [ 355.171554][T18497] _copy_from_user+0x2d/0xb0 [ 355.171611][T18497] __sys_bpf+0x229/0x950 [ 355.171662][T18497] ? __pfx___sys_bpf+0x10/0x10 [ 355.171735][T18497] ? ksys_write+0x242/0x270 [ 355.171779][T18497] ? __pfx_ksys_write+0x10/0x10 [ 355.171804][T18497] __x64_sys_bpf+0x7c/0x90 [ 355.171829][T18497] do_syscall_64+0x14d/0xf80 [ 355.171926][T18497] ? trace_irq_disable+0x3b/0x150 [ 355.171960][T18497] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.171996][T18497] ? clear_bhb_loop+0x40/0x90 [ 355.172021][T18497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.172039][T18497] RIP: 0033:0x7f4fd479c799 [ 355.172063][T18497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 355.172078][T18497] RSP: 002b:00007f4fd29f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 355.172103][T18497] RAX: ffffffffffffffda RBX: 00007f4fd4a15fa0 RCX: 00007f4fd479c799 [ 355.172116][T18497] RDX: 0000000000000094 RSI: 0000200000000100 RDI: 0000000000000005 [ 355.172128][T18497] RBP: 00007f4fd29f6090 R08: 0000000000000000 R09: 0000000000000000 [ 355.172139][T18497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 355.172150][T18497] R13: 00007f4fd4a16038 R14: 00007f4fd4a15fa0 R15: 00007ffde2083ac8 [ 355.172179][T18497] [ 355.379798][T18499] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3155'. [ 355.399045][T18499] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3155'. [ 355.471095][T18499] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3155'. [ 355.486561][T18205] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 355.506660][T18205] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 355.536996][T18205] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 355.580065][T18205] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 355.660034][T18511] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 355.679844][T18511] net_ratelimit: 9 callbacks suppressed [ 355.679862][T18511] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 355.747784][T18507] syzkaller0: entered promiscuous mode [ 355.753618][T18507] syzkaller0: entered allmulticast mode [ 355.874373][T18522] netlink: 'syz.3.3161': attribute type 22 has an invalid length. [ 355.898450][T18522] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3161'. [ 355.927995][T18530] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3162'. [ 356.053577][T18522] netlink: 'syz.3.3161': attribute type 22 has an invalid length. [ 356.077130][T18522] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3161'. [ 356.119332][ T6321] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 356.132518][ T6321] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 356.176100][ T6343] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 356.179919][ T5162] block nbd0: Possible stuck request ffff888026d18000: control (read@0,1024B). Runtime 210 seconds [ 356.186526][ T6343] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 356.196122][ T5162] block nbd0: Possible stuck request ffff888026d18200: control (read@1024,1024B). Runtime 210 seconds [ 356.216690][ T5162] block nbd0: Possible stuck request ffff888026d18400: control (read@2048,1024B). Runtime 210 seconds [ 356.227810][ T5162] block nbd0: Possible stuck request ffff888026d18600: control (read@3072,1024B). Runtime 210 seconds [ 356.471242][T18553] FAULT_INJECTION: forcing a failure. [ 356.471242][T18553] name failslab, interval 1, probability 0, space 0, times 1 [ 356.474253][T18549] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3165'. [ 356.518661][T18205] 8021q: adding VLAN 0 to HW filter on device bond0 [ 356.535897][T18553] CPU: 0 UID: 0 PID: 18553 Comm: syz.2.3167 Not tainted syzkaller #0 PREEMPT(full) [ 356.535925][T18553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 356.535935][T18553] Call Trace: [ 356.535943][T18553] [ 356.535951][T18553] dump_stack_lvl+0xe8/0x150 [ 356.535980][T18553] should_fail_ex+0x412/0x560 [ 356.536009][T18553] should_failslab+0xa8/0x100 [ 356.536072][T18553] __kmalloc_cache_node_noprof+0x8a/0x6b0 [ 356.536095][T18553] ? __get_vm_area_node+0x13f/0x300 [ 356.536128][T18553] __get_vm_area_node+0x13f/0x300 [ 356.536145][T18553] ? unwind_next_frame+0xa5/0x23c0 [ 356.536191][T18553] __vmalloc_node_range_noprof+0x372/0x1730 [ 356.536211][T18553] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 356.536241][T18553] ? __lock_acquire+0x6b5/0x2cf0 [ 356.536289][T18553] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 356.536310][T18553] ? aa_file_perm+0x192/0x15e0 [ 356.536420][T18553] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 356.536436][T18553] __vmalloc_noprof+0xd2/0x120 [ 356.536455][T18553] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 356.536475][T18553] bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 356.536496][T18553] bpf_prog_alloc+0x3c/0x1a0 [ 356.536515][T18553] bpf_prog_load+0x7ba/0x1ae0 [ 356.536547][T18553] ? __pfx_bpf_prog_load+0x10/0x10 [ 356.536583][T18553] ? bpf_lsm_bpf+0x9/0x20 [ 356.536613][T18553] ? security_bpf+0x7e/0x2d0 [ 356.536671][T18553] __sys_bpf+0x618/0x950 [ 356.536699][T18553] ? __pfx___sys_bpf+0x10/0x10 [ 356.536745][T18553] ? ksys_write+0x242/0x270 [ 356.536765][T18553] ? __pfx_ksys_write+0x10/0x10 [ 356.536790][T18553] __x64_sys_bpf+0x7c/0x90 [ 356.536822][T18553] do_syscall_64+0x14d/0xf80 [ 356.536848][T18553] ? trace_irq_disable+0x3b/0x150 [ 356.536872][T18553] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.536889][T18553] ? clear_bhb_loop+0x40/0x90 [ 356.536911][T18553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.536928][T18553] RIP: 0033:0x7f4fd479c799 [ 356.536945][T18553] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 356.536959][T18553] RSP: 002b:00007f4fd29f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 356.536978][T18553] RAX: ffffffffffffffda RBX: 00007f4fd4a15fa0 RCX: 00007f4fd479c799 [ 356.536991][T18553] RDX: 0000000000000094 RSI: 0000200000000100 RDI: 0000000000000005 [ 356.537003][T18553] RBP: 00007f4fd29f6090 R08: 0000000000000000 R09: 0000000000000000 [ 356.537014][T18553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 356.537024][T18553] R13: 00007f4fd4a16038 R14: 00007f4fd4a15fa0 R15: 00007ffde2083ac8 [ 356.537051][T18553] [ 356.538668][T18553] syz.2.3167: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 356.563373][T18205] 8021q: adding VLAN 0 to HW filter on device team0 [ 356.581535][T18553] ,cpuset=/,mems_allowed=0-1 [ 356.840821][T18553] CPU: 0 UID: 0 PID: 18553 Comm: syz.2.3167 Not tainted syzkaller #0 PREEMPT(full) [ 356.840846][T18553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 356.840856][T18553] Call Trace: [ 356.840866][T18553] [ 356.840873][T18553] dump_stack_lvl+0xe8/0x150 [ 356.840905][T18553] warn_alloc+0x249/0x340 [ 356.840929][T18553] ? __pfx_warn_alloc+0x10/0x10 [ 356.840947][T18553] ? __get_vm_area_node+0x13f/0x300 [ 356.840966][T18553] ? __get_vm_area_node+0x2b5/0x300 [ 356.840978][T18553] ? unwind_next_frame+0xa5/0x23c0 [ 356.841006][T18553] __vmalloc_node_range_noprof+0x397/0x1730 [ 356.841034][T18553] ? __lock_acquire+0x6b5/0x2cf0 [ 356.841065][T18553] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 356.841082][T18553] ? aa_file_perm+0x192/0x15e0 [ 356.841112][T18553] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 356.841127][T18553] __vmalloc_noprof+0xd2/0x120 [ 356.841142][T18553] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 356.841159][T18553] bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 356.841178][T18553] bpf_prog_alloc+0x3c/0x1a0 [ 356.841194][T18553] bpf_prog_load+0x7ba/0x1ae0 [ 356.841222][T18553] ? __pfx_bpf_prog_load+0x10/0x10 [ 356.841256][T18553] ? bpf_lsm_bpf+0x9/0x20 [ 356.841274][T18553] ? security_bpf+0x7e/0x2d0 [ 356.841293][T18553] __sys_bpf+0x618/0x950 [ 356.841317][T18553] ? __pfx___sys_bpf+0x10/0x10 [ 356.841357][T18553] ? ksys_write+0x242/0x270 [ 356.841375][T18553] ? __pfx_ksys_write+0x10/0x10 [ 356.841398][T18553] __x64_sys_bpf+0x7c/0x90 [ 356.841418][T18553] do_syscall_64+0x14d/0xf80 [ 356.841440][T18553] ? trace_irq_disable+0x3b/0x150 [ 356.841460][T18553] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.841475][T18553] ? clear_bhb_loop+0x40/0x90 [ 356.841494][T18553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.841509][T18553] RIP: 0033:0x7f4fd479c799 [ 356.841525][T18553] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 356.841538][T18553] RSP: 002b:00007f4fd29f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 356.841555][T18553] RAX: ffffffffffffffda RBX: 00007f4fd4a15fa0 RCX: 00007f4fd479c799 [ 356.841566][T18553] RDX: 0000000000000094 RSI: 0000200000000100 RDI: 0000000000000005 [ 356.841575][T18553] RBP: 00007f4fd29f6090 R08: 0000000000000000 R09: 0000000000000000 [ 356.841584][T18553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 356.841593][T18553] R13: 00007f4fd4a16038 R14: 00007f4fd4a15fa0 R15: 00007ffde2083ac8 [ 356.841618][T18553] [ 356.841637][T18553] Mem-Info: [ 357.144455][T18553] active_anon:6526 inactive_anon:0 isolated_anon:0 [ 357.144455][T18553] active_file:3205 inactive_file:40058 isolated_file:0 [ 357.144455][T18553] unevictable:768 dirty:119 writeback:0 [ 357.144455][T18553] slab_reclaimable:12729 slab_unreclaimable:110517 [ 357.144455][T18553] mapped:34645 shmem:1372 pagetables:1424 [ 357.144455][T18553] sec_pagetables:0 bounce:0 [ 357.144455][T18553] kernel_misc_reclaimable:0 [ 357.144455][T18553] free:1310622 free_pcp:10734 free_cma:0 [ 357.194634][ T6343] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.201791][ T6343] bridge0: port 1(bridge_slave_0) entered forwarding state [ 357.251265][ T6343] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.252499][T18553] Node 0 active_anon:26204kB inactive_anon:0kB active_file:12820kB inactive_file:160032kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:138580kB dirty:472kB writeback:0kB shmem:3952kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14800kB pagetables:5544kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 357.258526][ T6343] bridge0: port 2(bridge_slave_1) entered forwarding state [ 357.317914][T18553] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 357.329986][T18205] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 357.423368][T18553] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 357.459581][T18553] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 357.467029][T18553] Node 0 DMA32 free:1294384kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26204kB inactive_anon:0kB active_file:12820kB inactive_file:160032kB unevictable:1536kB writepending:472kB zspages:0kB present:3129332kB managed:2552564kB mlocked:0kB bounce:0kB free_pcp:42960kB local_pcp:20720kB free_cma:0kB [ 357.510454][T18553] lowmem_reserve[]: 0 0 0 0 0 [ 357.516219][T18553] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:884kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 357.555520][T18553] lowmem_reserve[]: 0 0 0 0 0 [ 357.565661][T18553] Node 1 Normal free:3932412kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 357.705569][T18553] lowmem_reserve[]: 0 0 0 0 0 [ 357.710399][T18553] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 357.753176][T18553] Node 0 DMA32: 6452*4kB (UM) 4198*8kB (UM) 1993*16kB (UM) 1976*32kB (UME) 583*64kB (UM) 190*128kB (UM) 480*256kB (UME) 380*512kB (UME) 245*1024kB (UM) 131*2048kB (UM) 59*4096kB (M) = 1294416kB [ 357.794790][T18553] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 357.808072][T18553] Node 1 Normal: 1*4kB (U) 1*8kB (M) 7*16kB (UM) 8*32kB (UM) 10*64kB (UM) 6*128kB (UM) 4*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 958*4096kB (M) = 3932412kB [ 357.828197][T18553] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 357.838362][T18553] Node 0 hugepages_total=5 hugepages_free=2 hugepages_surp=3 hugepages_size=2048kB [ 357.848625][T18553] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 357.883522][T18597] dvmrp1: entered allmulticast mode [ 357.912749][T18553] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 357.935079][T18553] 44631 total pagecache pages [ 357.982516][T18553] 0 pages in swap cache [ 357.986723][T18553] Free swap = 124996kB [ 357.990961][T18553] Total swap = 124996kB [ 358.029230][T18553] 2097051 pages RAM [ 358.037754][T18553] 0 pages HighMem/MovableOnly [ 358.054264][T18553] 427074 pages reserved [ 358.076932][T18553] 0 pages cma reserved [ 358.125171][T18205] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 358.214709][T18617] macsec3: entered promiscuous mode [ 358.565815][T18645] bond0: entered promiscuous mode [ 358.570994][T18645] geneve2: entered promiscuous mode [ 358.579307][T18645] bond0: left promiscuous mode [ 358.586916][T18645] geneve2: left promiscuous mode [ 358.841533][T18657] 8021q: adding VLAN 0 to HW filter on device bond9 [ 358.967175][T18674] IPv6: NLM_F_CREATE should be specified when creating new route [ 358.994441][T18205] veth0_vlan: entered promiscuous mode [ 359.033713][T18205] veth1_vlan: entered promiscuous mode [ 359.119046][T18205] veth0_macvtap: entered promiscuous mode [ 359.147519][T18205] veth1_macvtap: entered promiscuous mode [ 359.195139][T18205] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 359.247871][T18205] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 359.248922][T18688] netlink: 'syz.0.3193': attribute type 2 has an invalid length. [ 359.281981][ T48] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.301855][ T48] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.344170][ T48] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.365252][ T48] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.565567][ T6321] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 359.588696][ T6321] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 359.597342][ T6321] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 359.623062][ T6321] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 359.639536][T18701] pimreg: entered allmulticast mode [ 359.653573][ T168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.669594][ T168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.678825][T18701] pimreg: left allmulticast mode [ 359.730213][ T168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.760481][ T168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.945878][T18718] __nla_validate_parse: 6 callbacks suppressed [ 359.945978][T18718] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3199'. [ 360.055303][T18720] syzkaller0: entered promiscuous mode [ 360.061371][T18720] syzkaller0: entered allmulticast mode [ 360.363224][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 360.373931][ T5834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 360.392239][ T5834] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 360.427139][ T5834] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 360.446714][ T5834] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 360.811813][T18750] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3207'. [ 361.263447][T18766] syzkaller0: entered promiscuous mode [ 361.283449][T18766] syzkaller0: entered allmulticast mode [ 361.390411][T18768] tipc: Started in network mode [ 361.401972][T18768] tipc: Node identity e66a84d1bd98, cluster identity 4711 [ 361.412316][T18768] tipc: Enabled bearer , priority 0 [ 361.521136][T18765] tipc: Resetting bearer [ 361.552574][T18765] tipc: Disabling bearer [ 361.645409][T18781] can: request_module (can-proto-0) failed. [ 361.805816][T18732] chnl_net:caif_netlink_parms(): no params data found [ 361.868664][T18788] netdevsim netdevsim4: Direct firmware load for  failed with error -2 [ 361.890702][T18788] netdevsim netdevsim4: Falling back to sysfs fallback for:  [ 362.114481][T18732] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.121959][T18732] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.129401][T18732] bridge_slave_0: entered allmulticast mode [ 362.137645][T18732] bridge_slave_0: entered promiscuous mode [ 362.174624][T18732] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.188776][T18732] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.215941][T18732] bridge_slave_1: entered allmulticast mode [ 362.224905][T18732] bridge_slave_1: entered promiscuous mode [ 362.249045][ T6343] : left allmulticast mode [ 362.255052][ T6343] : left promiscuous mode [ 362.261586][ T6343] bridge1: port 2(52) entered disabled state [ 362.273090][ T6343] veth3: left allmulticast mode [ 362.278109][ T6343] veth3: left promiscuous mode [ 362.284088][ T6343] bridge1: port 1(veth3) entered disabled state [ 362.431813][ T6343] dvmrp1: left allmulticast mode [ 362.463818][ T6343] ip6gretap0 (unregistering): left promiscuous mode [ 362.487210][ T6343] bond6 (unregistering): (slave ip6gretap1): Releasing active interface [ 362.502492][ T5834] Bluetooth: hci3: command tx timeout [ 362.575713][ T6343] gretap0 (unregistering): left promiscuous mode [ 362.595886][ T6343] bond4 (unregistering): (slave gretap1): Releasing active interface [ 362.648911][ T6343] bond0 (unregistering): (slave geneve2): Releasing active interface [ 362.840004][T18827] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 364.572815][ T5834] Bluetooth: hci3: command tx timeout [ 364.886588][ T6343] bond7 (unregistering): (slave bridge55): Releasing backup interface [ 364.998128][ T6343] bond10 (unregistering): (slave bridge0): Releasing active interface [ 365.086079][ T6343] bond1 (unregistering): Released all slaves [ 365.099032][ T6343] bond2 (unregistering): Released all slaves [ 365.112272][ T6343] bond3 (unregistering): Released all slaves [ 365.129325][ T6343] bond0 (unregistering): Released all slaves [ 365.147336][ T6343] bond4 (unregistering): Released all slaves [ 365.167446][ T6343] bond5 (unregistering): Released all slaves [ 365.180292][ T6343] bond6 (unregistering): Released all slaves [ 365.195018][ T6343] bond7 (unregistering): Released all slaves [ 365.210944][ T6343] bond8 (unregistering): Released all slaves [ 365.227561][ T6343] bond9 (unregistering): Released all slaves [ 365.239846][ T6343] bond10 (unregistering): Released all slaves [ 365.255284][ T6343] bond11 (unregistering): Released all slaves [ 365.285088][T18732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 365.312658][T18836] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3227'. [ 365.355326][T18836] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3227'. [ 365.416597][T18732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 365.521719][T18842] netlink: 'syz.3.3228': attribute type 5 has an invalid length. [ 365.544606][T18842] netlink: 'syz.3.3228': attribute type 3 has an invalid length. [ 365.561026][ T6343] : left promiscuous mode [ 365.777228][T18732] team0: Port device team_slave_0 added [ 365.795065][T18859] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 365.855980][ T6343] l24): left promiscuous mode [ 365.916633][T18732] team0: Port device team_slave_1 added [ 365.959445][ T6343] tipc: Disabling bearer [ 365.969666][ T6343] tipc: Left network mode [ 366.091272][T18732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 366.110209][T18732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 366.151121][T18872] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 366.166474][T18732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 366.267011][T18732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 366.298944][T18732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 366.341093][T18732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 366.663090][T18893] Cannot find set identified by id 0 to match [ 366.663851][ T5834] Bluetooth: hci3: command tx timeout [ 366.680600][T18892] delete_channel: no stack [ 366.859101][T18902] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3242'. [ 366.882153][T18732] hsr_slave_0: entered promiscuous mode [ 366.902719][T18904] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3241'. [ 366.914417][T18732] hsr_slave_1: entered promiscuous mode [ 366.920989][T18732] debugfs: 'hsr0' already exists in 'hsr' [ 366.928555][T18732] Cannot create hsr debugfs directory [ 367.266091][T18919] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3245'. [ 367.353223][T18919] syzkaller0: entered promiscuous mode [ 367.372723][T18919] syzkaller0: entered allmulticast mode [ 368.172865][T18955] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3251'. [ 368.487667][T18968] syzkaller0: entered promiscuous mode [ 368.503692][T18968] syzkaller0: entered allmulticast mode [ 368.523092][ T6343] hsr_slave_0: left promiscuous mode [ 368.534197][ T6343] hsr_slave_1: left promiscuous mode [ 368.732447][ T5834] Bluetooth: hci3: command tx timeout [ 369.042765][T18732] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 369.163024][T18732] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 369.189580][T18732] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 369.237383][T18732] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 369.628726][T19021] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3262'. [ 370.007565][ T6343] IPVS: stop unused estimator thread 0... [ 370.070643][T19035] netlink: 21 bytes leftover after parsing attributes in process `syz.4.3264'. [ 370.154260][T18732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 370.350331][T19054] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3267'. [ 370.564400][T19054] syz_tun: entered promiscuous mode [ 370.570199][T19054] macvtap1: entered promiscuous mode [ 370.598576][T19054] macvtap1: entered allmulticast mode [ 370.612692][T19054] syz_tun: entered allmulticast mode [ 370.766667][T18732] 8021q: adding VLAN 0 to HW filter on device team0 [ 370.818634][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.826082][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 370.884084][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.891250][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 371.032006][T19069] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3268'. [ 371.044956][T19069] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3268'. [ 371.245243][T19076] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3271'. [ 371.929556][T18732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 372.299128][T19142] raw_sendmsg: syz.1.3280 forgot to set AF_INET. Fix it! [ 372.507541][T18732] veth0_vlan: entered promiscuous mode [ 372.530740][T18732] veth1_vlan: entered promiscuous mode [ 372.597752][T18732] veth0_macvtap: entered promiscuous mode [ 372.688134][T18732] veth1_macvtap: entered promiscuous mode [ 372.820607][T18732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 373.119938][T18732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 373.172648][ T6343] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.200784][ T6343] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.268252][ T6343] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.294200][T19178] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3292'. [ 373.312096][ T6331] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.533194][T19178] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.540922][T19178] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.592695][T19178] 0ªX¹¦À: left allmulticast mode [ 373.866712][T19178] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 373.914161][T19178] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 374.211205][T19178] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 374.309654][T19180] vlan2: entered promiscuous mode [ 374.322884][T19180] geneve1: entered promiscuous mode [ 374.328524][T19180] vlan2: entered allmulticast mode [ 374.354284][T19180] geneve1: entered allmulticast mode [ 374.364555][ T6321] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.381142][T19193] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3295'. [ 374.382688][ T6321] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.454712][T19198] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3297'. [ 374.454856][T19195] bond10: entered promiscuous mode [ 374.469979][T19195] 8021q: adding VLAN 0 to HW filter on device bond10 [ 374.478020][ T6321] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.529499][ T6321] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.564470][T19198] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3297'. [ 374.574045][T19198] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3297'. [ 374.783128][T19198] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.790599][T19198] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.087462][T19198] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 375.116018][T19198] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 375.547212][T19198] vlan2: left promiscuous mode [ 375.552045][T19198] geneve1: left promiscuous mode [ 375.557288][T19198] vlan2: left allmulticast mode [ 375.562168][T19198] geneve1: left allmulticast mode [ 375.578482][ T48] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.602540][ T48] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.611669][ T48] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.645432][ T6321] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.645442][ T48] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.691825][ T6321] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.735740][T19223] netlink: 'syz.0.3302': attribute type 2 has an invalid length. [ 375.748249][T19223] netlink: 'syz.0.3302': attribute type 11 has an invalid length. [ 375.758566][T19223] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3302'. [ 375.776218][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.792724][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.144090][T19236] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3307'. [ 376.197883][T19239] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 376.223018][T19239] bridge1: entered allmulticast mode [ 376.270280][T19242] syzkaller1: entered promiscuous mode [ 376.282831][T19242] syzkaller1: entered allmulticast mode [ 376.293076][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 376.303548][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 376.312863][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 376.321249][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 376.329038][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 376.369188][T19240] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3309'. [ 376.376003][T19246] veth1: entered allmulticast mode [ 376.415729][T19240] netlink: 'syz.3.3309': attribute type 1 has an invalid length. [ 376.425714][T19240] netlink: 'syz.3.3309': attribute type 2 has an invalid length. [ 376.568458][ T5824] syz_tun (unregistering): left allmulticast mode [ 376.827961][ T13] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.944058][ T13] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 377.110350][ T13] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 377.154117][T19284] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3318'. [ 377.209911][T19286] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3320'. [ 377.226600][T19286] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3320'. [ 377.237278][T19286] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3320'. [ 377.249588][ T13] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 377.397007][T19293] syzkaller1: entered promiscuous mode [ 377.420999][T19293] syzkaller1: entered allmulticast mode [ 377.467700][T19243] chnl_net:caif_netlink_parms(): no params data found [ 377.513621][T19304] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3325'. [ 377.526148][T19304] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3325'. [ 377.829524][T19314] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3326'. [ 378.149908][T19243] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.202671][T19243] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.210127][T19243] bridge_slave_0: entered allmulticast mode [ 378.237007][T19243] bridge_slave_0: entered promiscuous mode [ 378.269529][T19243] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.287865][T19243] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.322737][T19243] bridge_slave_1: entered allmulticast mode [ 378.330867][T19243] bridge_slave_1: entered promiscuous mode [ 378.414894][ T5834] Bluetooth: hci0: command tx timeout [ 379.093836][ T13] batman_adv: batadv0: Removing interface: gretap0 [ 379.119728][ T13] bond0 (unregistering): (slave geneve5): Releasing active interface [ 379.249284][ T13] bond2 (unregistering): (slave bridge2): Releasing active interface [ 379.415816][ T13] team0: Port device bridge6 removed [ 379.564372][ T13] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 379.575036][ T13] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 379.584570][ T13] .` (unregistering): Released all slaves [ 379.594924][ T13] bond1 (unregistering): Released all slaves [ 379.607977][ T13] bond2 (unregistering): Released all slaves [ 379.623930][ T13] bond3 (unregistering): Released all slaves [ 379.636475][ T13] bond4 (unregistering): Released all slaves [ 379.649160][ T13] bond5 (unregistering): Released all slaves [ 379.662116][ T13] bond0 (unregistering): Released all slaves [ 379.677888][ T13] bond6 (unregistering): Released all slaves [ 379.705033][ T13] bond7 (unregistering): (slave batadv1): Releasing active interface [ 379.715422][ T13] bond7 (unregistering): Released all slaves [ 379.729004][ T13] bond8 (unregistering): Released all slaves [ 379.741965][ T13] bond9 (unregistering): Released all slaves [ 379.762298][ T13] bond10 (unregistering): Released all slaves [ 379.778005][T19243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 379.791933][T19394] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 379.872546][T19243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 380.009340][ T13] 9: left promiscuous mode [ 380.022109][T19404] Bluetooth: MGMT ver 1.23 [ 380.113555][T19243] team0: Port device team_slave_0 added [ 380.126482][ T13] hmac(sha224: left promiscuous mode [ 380.190190][T19243] team0: Port device team_slave_1 added [ 380.263700][ T13] !©9: left promiscuous mode [ 380.339006][ T13] tipc: Disabling bearer [ 380.362707][ T13] tipc: Left network mode [ 380.388266][T19419] vti0: entered promiscuous mode [ 380.395373][T19399] syzkaller0: entered promiscuous mode [ 380.411919][T19399] syzkaller0: entered allmulticast mode [ 380.498747][ T5834] Bluetooth: hci0: command tx timeout [ 380.548626][T19243] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 380.556860][T19243] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 380.588109][T19243] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 380.615762][T19243] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 380.633423][T19243] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 380.676955][T19243] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 381.024446][T19243] hsr_slave_0: entered promiscuous mode [ 381.031200][T19243] hsr_slave_1: entered promiscuous mode [ 381.060615][T19243] debugfs: 'hsr0' already exists in 'hsr' [ 381.065797][T19454] __nla_validate_parse: 5 callbacks suppressed [ 381.065817][T19454] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3348'. [ 381.083339][T19243] Cannot create hsr debugfs directory [ 381.373228][T19457] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3348'. [ 381.739045][T19482] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 381.772024][ T13] batman_adv: batadv0: Removing interface: macsec1 [ 381.875326][ T5946] IPVS: starting estimator thread 0... [ 381.972439][T19488] IPVS: using max 34 ests per chain, 81600 per kthread [ 382.017271][T19497] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3356'. [ 382.157415][ T13] hsr_slave_0: left promiscuous mode [ 382.163812][ T13] hsr_slave_1: left promiscuous mode [ 382.328244][ T13] team0 (unregistering): Port device team_slave_1 removed [ 382.576441][ T5840] Bluetooth: hci0: command tx timeout [ 383.111330][T19531] Cannot find set identified by id 0 to match [ 383.131208][ T6330] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 383.162693][ T6330] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 383.212467][ T6330] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 383.221229][ T6330] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 383.327087][ T13] IPVS: stop unused estimator thread 0... [ 383.345796][T19546] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3364'. [ 383.386865][T19547] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3363'. [ 383.454546][T19546] tipc: Started in network mode [ 383.467288][T19546] tipc: Node identity 261459d2cc9f, cluster identity 4711 [ 383.500257][T19546] tipc: Enabled bearer , priority 0 [ 383.556642][T19549] syzkaller0: entered promiscuous mode [ 383.563214][T19549] syzkaller0: entered allmulticast mode [ 383.589850][T19542] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3362'. [ 383.690925][T19549] tipc: Resetting bearer [ 383.711642][T19549] tipc: Disabling bearer [ 383.766258][T19561] syzkaller0: entered promiscuous mode [ 383.773187][T19561] syzkaller0: entered allmulticast mode [ 383.794017][T19243] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 383.816535][T19243] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 383.847978][T19243] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 383.890834][T19243] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 383.936632][T19579] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3367'. [ 383.946120][T19581] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3367'. [ 383.960928][T19581] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3367'. [ 383.992450][T19579] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3367'. [ 384.147377][T19243] 8021q: adding VLAN 0 to HW filter on device bond0 [ 384.220714][T19590] vlan2: entered promiscuous mode [ 384.230214][T19590] veth0_to_team: entered promiscuous mode [ 384.240880][T19590] vlan2: entered allmulticast mode [ 384.256638][T19590] veth0_to_team: entered allmulticast mode [ 384.264973][T19599] netlink: 'syz.3.3371': attribute type 1 has an invalid length. [ 384.352642][T19598] bridge_slave_1: left allmulticast mode [ 384.372965][T19598] bridge_slave_1: left promiscuous mode [ 384.378856][T19598] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.390341][T19598] bridge_slave_0: left allmulticast mode [ 384.396527][T19598] bridge_slave_0: left promiscuous mode [ 384.402917][T19598] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.555683][T19599] netlink: 'syz.3.3371': attribute type 1 has an invalid length. [ 384.560499][T19603] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 384.636060][T19603] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 384.653026][ T5840] Bluetooth: hci0: command tx timeout [ 384.694322][T19595] bond0: (slave gretap1): making interface the new active one [ 384.706578][T19595] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 384.747396][T19620] ip6gre1: entered promiscuous mode [ 384.767838][T19620] ip6gre1: entered allmulticast mode [ 384.807755][T19243] 8021q: adding VLAN 0 to HW filter on device team0 [ 384.859874][T19623] syzkaller0: entered promiscuous mode [ 384.874720][T19623] syzkaller0: entered allmulticast mode [ 384.909735][ T6343] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.916972][ T6343] bridge0: port 1(bridge_slave_0) entered forwarding state [ 385.266528][ T6337] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.273764][ T6337] bridge0: port 2(bridge_slave_1) entered forwarding state [ 385.337620][T19645] vlan3: entered allmulticast mode [ 385.358257][T19645] bond0: entered allmulticast mode [ 385.374454][T19645] bond_slave_0: entered allmulticast mode [ 385.401078][T19645] bond_slave_1: entered allmulticast mode [ 385.471153][T19652] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 385.481188][T19652] bond_slave_0: left allmulticast mode [ 385.496827][T19652] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 385.506568][T19652] bond_slave_1: left allmulticast mode [ 385.514874][T19652] bond0 (unregistering): Released all slaves [ 385.779806][T19671] netlink: 'syz.4.3384': attribute type 1 has an invalid length. [ 385.883297][T19678] openvswitch: netlink: Message has 4 unknown bytes. [ 385.942062][T19671] 8021q: adding VLAN 0 to HW filter on device bond0 [ 385.949506][T19682] openvswitch: netlink: Message has 4 unknown bytes. [ 385.965490][T19674] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 385.976289][T19674] bond0: (slave batadv1): making interface the new active one [ 385.986798][T19674] bond0: (slave batadv1): Enslaving as an active interface with an up link [ 386.015745][T19684] bond0 (unregistering): (slave batadv1): Releasing active interface [ 386.035083][T19684] bond0 (unregistering): Released all slaves [ 386.180433][T19243] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 386.228505][T19692] __nla_validate_parse: 10 callbacks suppressed [ 386.228526][T19692] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3389'. [ 386.262274][ T5162] block nbd0: Possible stuck request ffff888026d18000: control (read@0,1024B). Runtime 240 seconds [ 386.273620][ T5162] block nbd0: Possible stuck request ffff888026d18200: control (read@1024,1024B). Runtime 240 seconds [ 386.285470][ T5162] block nbd0: Possible stuck request ffff888026d18400: control (read@2048,1024B). Runtime 240 seconds [ 386.296754][ T5162] block nbd0: Possible stuck request ffff888026d18600: control (read@3072,1024B). Runtime 240 seconds [ 386.330697][T19243] veth0_vlan: entered promiscuous mode [ 386.346612][T19243] veth1_vlan: entered promiscuous mode [ 386.431645][T19243] veth0_macvtap: entered promiscuous mode [ 386.452297][T19243] veth1_macvtap: entered promiscuous mode [ 386.529181][T19711] xt_hashlimit: size too large, truncated to 1048576 [ 386.558150][T19243] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 386.565202][T19711] xt_hashlimit: overflow, try lower: 0/0 [ 386.588865][T19243] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 386.639341][ T168] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.684980][ T168] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.705759][ T168] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.770159][ T168] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.835257][T19727] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3399'. [ 386.885325][T19727] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3399'. [ 386.895081][T19730] netlink: 'syz.2.3399': attribute type 15 has an invalid length. [ 386.989732][ T6342] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.014081][ T6342] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.079518][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.088217][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.541265][T19764] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3409'. [ 387.561158][T19768] netlink: 'syz.2.3410': attribute type 13 has an invalid length. [ 387.564220][T19769] netlink: 'syz.4.3412': attribute type 13 has an invalid length. [ 387.581846][T19768] netlink: 'syz.2.3410': attribute type 17 has an invalid length. [ 387.606731][T19769] netlink: 'syz.4.3412': attribute type 27 has an invalid length. [ 387.695090][T19768] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 387.783565][T19776] batadv_slave_1: entered promiscuous mode [ 387.830718][T19782] netlink: 'syz.3.3417': attribute type 15 has an invalid length. [ 387.839968][T19775] batadv_slave_1: left promiscuous mode [ 388.129904][T19799] netlink: 192 bytes leftover after parsing attributes in process `syz.0.3421'. [ 388.181086][T19802] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3422'. [ 388.337618][T19807] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3424'. [ 388.348840][T19807] netlink: 'syz.2.3424': attribute type 30 has an invalid length. [ 388.436670][T19807] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3424'. [ 388.501395][ T6343] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 388.610322][ T6343] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 388.631788][ T6343] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 388.647363][ T6343] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 388.760389][T19816] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 388.803066][T19816] bond1: (slave lo): Enslaving as an active interface with an up link [ 388.837588][T19816] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 388.997497][T19825] Cannot find set identified by id 0 to match [ 389.098665][T19832] tipc: Failed to remove unknown binding: 66,0,0/0:644949877/644949878 [ 389.108622][T19832] tipc: Failed to remove unknown binding: 66,0,0/0:644949877/644949878 [ 389.239807][T19829] bond0: entered promiscuous mode [ 389.252496][T19829] bond_slave_0: entered promiscuous mode [ 389.258395][T19829] bond_slave_1: entered promiscuous mode [ 389.284633][T19829] bond0: entered allmulticast mode [ 389.308951][T19829] bond_slave_0: entered allmulticast mode [ 389.325591][T19829] bond_slave_1: entered allmulticast mode [ 389.774722][T19867] syzkaller0: entered promiscuous mode [ 389.780399][T19867] syzkaller0: entered allmulticast mode [ 390.077145][T19880] vlan2: entered promiscuous mode [ 390.082247][T19880] team0: entered promiscuous mode [ 390.098229][T19880] team_slave_0: entered promiscuous mode [ 390.113312][T19880] team_slave_1: entered promiscuous mode [ 390.430593][T19897] validate_nla: 3 callbacks suppressed [ 390.430615][T19897] netlink: 'syz.4.3447': attribute type 5 has an invalid length. [ 390.721242][T19911] sctp: [Deprecated]: syz.0.3451 (pid 19911) Use of struct sctp_assoc_value in delayed_ack socket option. [ 390.721242][T19911] Use struct sctp_sack_info instead [ 391.244714][T19936] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 391.257675][T19936] bond0 (unregistering): Released all slaves [ 391.588470][T19951] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3461'. [ 391.629994][T19954] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3462'. [ 391.804154][T19960] delete_channel: no stack [ 392.470802][T20001] macsec1: entered promiscuous mode [ 392.487688][T20001] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 392.591971][T20009] sock: sock_timestamping_bind_phc: sock not bind to device [ 392.601324][T20009] openvswitch: netlink: EtherType 50a is less than min 600 [ 392.668291][T20011] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3476'. [ 392.680493][T20013] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3477'. [ 392.895071][T20026] nbd: must specify an index to disconnect [ 392.971245][T20032] xt_hashlimit: max too large, truncated to 1048576 [ 392.988020][T20034] xt_hashlimit: max too large, truncated to 1048576 [ 393.003089][T20036] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3484'. [ 393.005149][T20037] vlan2: entered allmulticast mode [ 393.018136][T20037] bond0: entered allmulticast mode [ 393.024575][T20032] xt_bpf: check failed: parse error [ 393.037423][T20034] xt_bpf: check failed: parse error [ 393.043252][T20037] gretap1: entered allmulticast mode [ 393.120400][T20043] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3486'. [ 393.138349][T20043] vlan2: entered promiscuous mode [ 393.144251][T20043] vlan2: entered allmulticast mode [ 393.149391][T20043] hsr_slave_1: entered allmulticast mode [ 393.167672][T20043] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3486'. [ 393.301782][T20051] atomic_op ffff8880554be998 conn xmit_atomic 0000000000000000 [ 393.313454][T20052] netlink: 'syz.1.3488': attribute type 1 has an invalid length. [ 393.329711][T20053] netlink: 'syz.1.3488': attribute type 1 has an invalid length. [ 393.342794][T20052] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 393.352721][T20053] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 394.168665][T20103] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3503'. [ 394.206265][T20103] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3503'. [ 394.318495][T20103] Bluetooth: MGMT ver 1.23 [ 394.342201][T20103] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3503'. [ 394.668123][T20124] ip6gre2: entered promiscuous mode [ 394.682847][T20124] ip6gre2: entered allmulticast mode [ 394.796729][T20132] syzkaller0: entered promiscuous mode [ 394.809111][T20132] syzkaller0: entered allmulticast mode [ 395.316715][T20151] netlink: 'syz.4.3514': attribute type 15 has an invalid length. [ 395.324279][T20137] macvtap0: entered promiscuous mode [ 395.344120][T20137] virtio_net virtio1 eth0: entered promiscuous mode [ 395.350953][T20137] macvtap0: entered allmulticast mode [ 395.360903][T20151] netlink: 'syz.4.3514': attribute type 5 has an invalid length. [ 395.393510][T20137] virtio_net virtio1 eth0: entered allmulticast mode [ 396.276942][T20201] netlink: 'syz.0.3528': attribute type 1 has an invalid length. [ 396.671233][T20205] syzkaller0: entered promiscuous mode [ 396.678593][T20205] syzkaller0: entered allmulticast mode [ 397.281717][T20213] __nla_validate_parse: 9 callbacks suppressed [ 397.281731][T20213] netlink: 176 bytes leftover after parsing attributes in process `syz.0.3531'. [ 397.369843][T20217] No such timeout policy "syz1" [ 397.415638][T20219] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3533'. [ 398.416491][T20158] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 398.707160][T20241] tipc: Started in network mode [ 398.722649][T20241] tipc: Node identity e0000002, cluster identity 4711 [ 398.745595][T20241] tipc: Enabling of bearer rejected, failed to enable media [ 398.751103][T20244] netlink: 'syz.4.3541': attribute type 21 has an invalid length. [ 398.767619][T20244] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3541'. [ 398.938222][T20247] syzkaller0: entered promiscuous mode [ 398.946952][T20247] syzkaller0: entered allmulticast mode [ 399.381236][T20282] netlink: 'syz.3.3549': attribute type 2 has an invalid length. [ 399.412446][T20282] netlink: 119 bytes leftover after parsing attributes in process `syz.3.3549'. [ 399.526050][T20288] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3548'. [ 399.554644][T20302] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 399.555554][T20297] tipc: Enabled bearer , priority 0 [ 399.555990][T20278] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3548'. [ 399.600557][T20306] syzkaller0: entered promiscuous mode [ 399.628353][T20306] syzkaller0: entered allmulticast mode [ 399.654667][T20308] team_slave_0: entered promiscuous mode [ 399.660391][T20308] team_slave_1: entered promiscuous mode [ 399.688937][T20308] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 399.736020][T20306] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3552'. [ 399.787029][T20297] tipc: Resetting bearer [ 399.806745][T20295] tipc: Resetting bearer [ 399.891967][T20295] tipc: Disabling bearer [ 400.165973][T20332] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3560'. [ 400.296406][T20342] xt_hashlimit: max too large, truncated to 1048576 [ 400.359918][T20345] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3563'. [ 400.404317][T20348] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3566'. [ 400.476436][T20352] bridge_slave_1: left allmulticast mode [ 400.502522][T20352] bridge_slave_1: left promiscuous mode [ 400.508466][T20352] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.536590][T20352] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 400.806205][T20357] syz_tun: entered allmulticast mode [ 400.828231][T20356] syz_tun: left allmulticast mode [ 402.401961][T20454] syzkaller0: entered promiscuous mode [ 402.407569][T20454] syzkaller0: entered allmulticast mode [ 402.703661][T20457] 8021q: VLANs not supported on nlmon0 [ 402.978981][T20466] netlink: 'syz.0.3595': attribute type 1 has an invalid length. [ 403.000172][T20466] netlink: 'syz.0.3595': attribute type 3 has an invalid length. [ 403.123123][T20466] bond1: option xmit_hash_policy: invalid value (10) [ 403.150782][T20466] bond1 (unregistering): Released all slaves [ 403.564443][T20486] netlink: 'syz.3.3600': attribute type 1 has an invalid length. [ 403.586723][T20486] __nla_validate_parse: 7 callbacks suppressed [ 403.586744][T20486] netlink: 1008 bytes leftover after parsing attributes in process `syz.3.3600'. [ 403.644853][T20486] syzkaller1: entered promiscuous mode [ 403.659210][T20462] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 404.133118][T20503] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 404.228176][T20508] syzkaller0: entered promiscuous mode [ 404.253084][T20508] syzkaller0: entered allmulticast mode [ 405.319290][T20531] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3612'. [ 405.342141][T20531] netlink: 'syz.2.3612': attribute type 4 has an invalid length. [ 405.358941][T20531] netlink: 'syz.2.3612': attribute type 4 has an invalid length. [ 405.373952][T20531] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3612'. [ 405.514710][T20539] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3615'. [ 405.524107][T20539] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3615'. [ 405.732776][T20549] syzkaller0: entered promiscuous mode [ 405.738302][T20549] syzkaller0: entered allmulticast mode [ 406.224348][T20572] syzkaller0: entered promiscuous mode [ 406.229889][T20572] syzkaller0: entered allmulticast mode [ 406.235330][T20576] netlink: 'syz.3.3624': attribute type 2 has an invalid length. [ 406.238775][T20572] batadv_slave_0: Caught tx_queue_len zero misconfig [ 406.244807][T20576] netlink: 'syz.3.3624': attribute type 9 has an invalid length. [ 406.252837][T20572] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3622'. [ 406.258380][T20576] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3624'. [ 406.669981][T20597] skbuff: bad partial csum: csum=65535/2 headroom=4 headlen=65543 [ 407.069064][T20621] syzkaller0: entered promiscuous mode [ 407.073599][T20620] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3635'. [ 407.096161][T20621] syzkaller0: entered allmulticast mode [ 407.620073][T20647] vlan3: entered promiscuous mode [ 407.632736][T20647] geneve1: entered promiscuous mode [ 407.638342][T20647] vlan3: entered allmulticast mode [ 407.643723][T20647] geneve1: entered allmulticast mode [ 407.765186][T20650] bond3 (unregistering): Released all slaves [ 407.795528][T20653] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3640'. [ 407.895322][T20653] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3640'. [ 411.042247][ T5193] udevd[5193]: worker [5833] /devices/virtual/block/nbd0 timeout; kill it [ 411.051018][ T5193] udevd[5193]: seq 15075 '/devices/virtual/block/nbd0' killed [ 414.976293][T20701] bond0: (slave batadv_slave_0): Error: Device can not be enslaved while up [ 415.059660][T20701] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3646'. [ 415.125654][T20711] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3646'. [ 415.191439][T20707] can: request_module (can-proto-0) failed. [ 415.370785][T20723] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3653'. [ 415.436969][T20723] bond2: (slave vcan1): refused to change device type [ 415.695328][T20744] syzkaller0: entered promiscuous mode [ 415.700855][T20744] syzkaller0: entered allmulticast mode [ 415.794120][T20751] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3659'. [ 416.091274][T20757] syzkaller1: entered promiscuous mode [ 416.097208][T20757] syzkaller1: entered allmulticast mode [ 416.109491][T20757] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3660'. [ 416.263338][T20762] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3662'. [ 416.340835][ T5162] block nbd0: Possible stuck request ffff888026d18000: control (read@0,1024B). Runtime 270 seconds [ 416.352066][ T5162] block nbd0: Possible stuck request ffff888026d18200: control (read@1024,1024B). Runtime 270 seconds [ 416.364208][ T5162] block nbd0: Possible stuck request ffff888026d18400: control (read@2048,1024B). Runtime 270 seconds [ 416.375332][ T5162] block nbd0: Possible stuck request ffff888026d18600: control (read@3072,1024B). Runtime 270 seconds [ 416.406903][T20762] hsr_slave_1 (unregistering): left promiscuous mode [ 416.548684][T20774] IPv6: sit1: Disabled Multicast RS [ 416.553891][T20776] netlink: 'syz.4.3666': attribute type 1 has an invalid length. [ 416.673428][T20780] netlink: 'syz.0.3667': attribute type 9 has an invalid length. [ 416.764821][T20791] netlink: 180 bytes leftover after parsing attributes in process `syz.3.3671'. [ 416.774589][T20788] : renamed from veth0_to_bond [ 416.887944][T20788] netlink: set zone limit has 4 unknown bytes [ 417.007910][T20797] syzkaller0: entered promiscuous mode [ 417.025565][T20797] syzkaller0: entered allmulticast mode [ 417.414528][T20809] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.456636][T20809] bond0: left promiscuous mode [ 417.483202][T20809] bond_slave_0: left promiscuous mode [ 417.497862][T20809] bond_slave_1: left promiscuous mode [ 417.511292][T20823] openvswitch: netlink: IPv4 tunnel dst address is zero [ 417.517589][T20809] bond0: left allmulticast mode [ 417.553135][T20809] bond_slave_0: left allmulticast mode [ 417.567350][T20809] bond_slave_1: left allmulticast mode [ 417.709487][T20809] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 417.727549][T20809] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 417.813157][T20815] netlink: 'syz.1.3676': attribute type 1 has an invalid length. [ 417.821636][T20815] netlink: 'syz.1.3676': attribute type 2 has an invalid length. [ 417.855466][T20831] pimreg: entered allmulticast mode [ 417.899827][T20825] bond3: option tlb_dynamic_lb: invalid value (5) [ 417.943526][T20825] bond3 (unregistering): Released all slaves [ 418.027853][ T6343] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.037139][ T6343] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.049907][ T6343] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.059040][ T6343] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.123726][T20843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 418.138588][T20843] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 419.034743][T20892] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3698'. [ 419.197585][T20894] vlan3: entered promiscuous mode [ 419.214219][T20894] vlan3: entered allmulticast mode [ 419.227084][T20894] hsr_slave_1: entered allmulticast mode [ 419.432263][T20901] syzkaller0: entered promiscuous mode [ 419.462414][T20901] syzkaller0: entered allmulticast mode [ 419.479234][T20904] netlink: 'syz.0.3703': attribute type 4 has an invalid length. [ 419.934016][T20929] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3710'. [ 419.981575][T20929] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3710'. [ 420.028668][T20933] netlink: 'syz.4.3711': attribute type 15 has an invalid length. [ 420.051523][T20933] syzkaller1: entered promiscuous mode [ 420.058380][T20933] syzkaller1: entered allmulticast mode [ 420.072493][T20936] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3712'. [ 420.220383][T20938] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3713'. [ 420.264117][T20938] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3713'. [ 420.294107][T20946] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 421.463688][T20968] syzkaller0: entered promiscuous mode [ 421.469224][T20968] syzkaller0: entered allmulticast mode [ 421.510801][T20970] bridge0: entered promiscuous mode [ 421.648255][T20975] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3723'. [ 421.659294][T20975] openvswitch: netlink: Flow key attr not present in new flow. [ 422.028649][T20988] tipc: Enabled bearer , priority 0 [ 422.048546][T20988] syzkaller0: entered promiscuous mode [ 422.064710][T20988] syzkaller0: entered allmulticast mode [ 422.112185][T20986] tipc: Resetting bearer [ 422.146465][T20993] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3729'. [ 422.193401][T20986] tipc: Disabling bearer [ 422.213794][T20999] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3731'. [ 422.242916][T20993] net veth1_virt_wifi virt_wifi0 (unregistering): left promiscuous mode [ 422.365093][T20999] IPv6: NLM_F_CREATE should be specified when creating new route [ 422.433694][T21005] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3732'. [ 422.705361][T21023] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3738'. [ 422.733854][T21023] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3738'. [ 422.992494][T21038] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3744'. [ 423.053047][T21035] bond0: option broadcast_neighbor: invalid value (30) [ 423.070723][T21035] bond0 (unregistering): Released all slaves [ 423.506491][T21063] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 424.172477][T21101] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 424.260621][T21114] Cannot find del_set index 1536 as target [ 424.290793][T21114] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 424.318875][T19203] IPVS: starting estimator thread 0... [ 424.336629][T21118] tipc: Enabling of bearer rejected, failed to enable media [ 424.422471][T21119] IPVS: using max 27 ests per chain, 64800 per kthread [ 424.594676][T21132] bond0: option fail_over_mac: invalid value (127) [ 424.715371][T21132] bond0 (unregistering): Released all slaves [ 424.764649][T21138] veth0: Caught tx_queue_len zero misconfig [ 424.846079][T21144] syzkaller0: entered promiscuous mode [ 424.851592][T21144] syzkaller0: entered allmulticast mode [ 424.860160][T21144] 0: reclassify loop, rule prio 0, protocol 800 [ 425.085840][T21154] __nla_validate_parse: 7 callbacks suppressed [ 425.098840][T21154] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3767'. [ 425.333706][T21167] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3771'. [ 425.404078][T21167] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3771'. [ 425.439014][T21137] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3765'. [ 425.894782][T21189] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 425.911355][T21189] team0: Device macvlan2 is already an upper device of the team interface [ 431.819281][T21240] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3782'. [ 432.062815][T21259] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3779'. [ 432.113507][T21265] veth1: left allmulticast mode [ 432.125759][T21265] bridge1: left allmulticast mode [ 432.135258][T21265] ip6gre1: left promiscuous mode [ 432.140394][T21265] ip6gre1: left allmulticast mode [ 432.148927][T21268] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3788'. [ 432.152980][T21265] ip6gre2: left promiscuous mode [ 432.183993][T21265] ip6gre2: left allmulticast mode [ 432.211126][T21266] pim6reg: entered allmulticast mode [ 432.242913][T21262] gre0: entered promiscuous mode [ 432.247919][T21262] gre0: entered allmulticast mode [ 432.263311][ T6343] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 432.276239][ T6343] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 432.319164][T21281] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3792'. [ 432.405200][ T6343] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 432.450335][T21266] pim6reg: left allmulticast mode [ 432.465952][ T6343] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 432.580736][T21292] netlink: 'syz.4.3795': attribute type 142 has an invalid length. [ 432.750690][T21305] batadv_slave_1: entered promiscuous mode [ 432.818763][T21310] netlink: 'syz.2.3798': attribute type 1 has an invalid length. [ 432.950894][T21317] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3802'. [ 433.333613][T21330] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3805'. [ 433.343074][T21330] openvswitch: netlink: Flow key attr not present in new flow. [ 433.368670][T21327] netlink: 'syz.1.3804': attribute type 9 has an invalid length. [ 433.376577][T21327] netlink: 212340 bytes leftover after parsing attributes in process `syz.1.3804'. [ 433.580747][T21302] batadv_slave_1: left promiscuous mode [ 433.640044][T21339] netlink: 232 bytes leftover after parsing attributes in process `syz.2.3808'. [ 433.673786][T21339] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3808'. [ 433.696369][T21342] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3810'. [ 433.721546][T21342] tipc: Invalid UDP bearer configuration [ 433.721598][T21342] tipc: Enabling of bearer rejected, failed to enable media [ 434.287255][T21360] netlink: 'syz.1.3816': attribute type 7 has an invalid length. [ 434.336488][T21360] netlink: 'syz.1.3816': attribute type 7 has an invalid length. [ 434.746412][T21388] tipc: Enabled bearer , priority 0 [ 434.776763][T21388] syzkaller0: entered promiscuous mode [ 434.793071][T21394] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 434.809584][T21388] syzkaller0: entered allmulticast mode [ 434.861386][T21398] openvswitch: netlink: Flow key attr not present in new flow. [ 434.948872][T21388] tipc: Resetting bearer [ 434.989887][T21400] netlink: 'syz.1.3829': attribute type 5 has an invalid length. [ 435.014371][T21402] netlink: 'syz.1.3829': attribute type 11 has an invalid length. [ 435.022612][T21400] netlink: 'syz.1.3829': attribute type 11 has an invalid length. [ 435.070234][T21388] tipc: Disabling bearer [ 435.165993][T21414] syzkaller1: entered promiscuous mode [ 435.171631][T21414] syzkaller1: entered allmulticast mode [ 435.546719][T21436] netlink: 'syz.0.3841': attribute type 1 has an invalid length. [ 435.606320][T21436] 8021q: adding VLAN 0 to HW filter on device bond1 [ 435.689081][T21446] bond1: (slave veth5): Enslaving as an active interface with a down link [ 435.720883][T21436] bond1: (slave dummy0): making interface the new active one [ 435.730448][T21436] dummy0: entered promiscuous mode [ 435.736358][T21436] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 435.807919][T21446] bond1: (slave dummy0): Releasing active interface [ 435.815555][T21446] dummy0 (unregistering): left promiscuous mode [ 435.995372][T21459] netlink: 'syz.3.3847': attribute type 5 has an invalid length. [ 436.598255][T21514] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 436.616419][T21510] netlink: 'syz.1.3861': attribute type 3 has an invalid length. [ 436.630609][T21500] syzkaller0: entered promiscuous mode [ 436.646143][T21500] syzkaller0: entered allmulticast mode [ 436.915637][T21528] FAULT_INJECTION: forcing a failure. [ 436.915637][T21528] name failslab, interval 1, probability 0, space 0, times 0 [ 436.929471][T21526] __nla_validate_parse: 20 callbacks suppressed [ 436.929490][T21526] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3864'. [ 436.937487][T21528] CPU: 1 UID: 0 PID: 21528 Comm: syz.4.3863 Not tainted syzkaller #0 PREEMPT(full) [ 436.937516][T21528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 436.937532][T21528] Call Trace: [ 436.937540][T21528] [ 436.937550][T21528] dump_stack_lvl+0xe8/0x150 [ 436.937583][T21528] should_fail_ex+0x412/0x560 [ 436.937612][T21528] should_failslab+0xa8/0x100 [ 436.937638][T21528] __kmalloc_noprof+0xe8/0x760 [ 436.937658][T21528] ? copy_splice_read+0x16f/0xaa0 [ 436.937709][T21528] copy_splice_read+0x16f/0xaa0 [ 436.937737][T21528] ? __pfx_iter_file_splice_write+0x10/0x10 [ 436.937765][T21528] ? __pfx_copy_splice_read+0x10/0x10 [ 436.937795][T21528] ? __pfx_iter_file_splice_write+0x10/0x10 [ 436.937821][T21528] ? file_end_write+0x156/0x250 [ 436.937846][T21528] ? direct_splice_actor+0x10c/0x160 [ 436.937872][T21528] ? __pfx_copy_splice_read+0x10/0x10 [ 436.937894][T21528] splice_direct_to_actor+0x478/0xc70 [ 436.937928][T21528] ? __pfx_direct_splice_actor+0x10/0x10 [ 436.937959][T21528] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 436.937983][T21528] ? get_pid_task+0x20/0x1f0 [ 436.938023][T21528] do_splice_direct+0x195/0x290 [ 436.938050][T21528] ? __pfx_do_splice_direct+0x10/0x10 [ 436.938074][T21528] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 436.938097][T21528] ? rw_verify_area+0x255/0x4d0 [ 436.938125][T21528] do_sendfile+0x535/0x7d0 [ 436.938162][T21528] ? __pfx_do_sendfile+0x10/0x10 [ 436.938185][T21528] ? __fget_files+0x3a0/0x420 [ 436.938219][T21528] __se_sys_sendfile64+0x144/0x1a0 [ 436.938244][T21528] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 436.938276][T21528] do_syscall_64+0x14d/0xf80 [ 436.938301][T21528] ? trace_irq_disable+0x3b/0x150 [ 436.938325][T21528] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.938343][T21528] ? clear_bhb_loop+0x40/0x90 [ 436.938364][T21528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.938386][T21528] RIP: 0033:0x7fb578b9c799 [ 436.938404][T21528] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 436.938419][T21528] RSP: 002b:00007fb576dee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 436.938441][T21528] RAX: ffffffffffffffda RBX: 00007fb578e15fa0 RCX: 00007fb578b9c799 [ 436.938454][T21528] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 436.938464][T21528] RBP: 00007fb576dee090 R08: 0000000000000000 R09: 0000000000000000 [ 436.938474][T21528] R10: 0000000000000038 R11: 0000000000000246 R12: 0000000000000001 [ 436.938485][T21528] R13: 00007fb578e16038 R14: 00007fb578e15fa0 R15: 00007fffa4d5bac8 [ 436.938513][T21528] [ 436.996892][ T5834] Bluetooth: hci5: command 0x0405 tx timeout [ 437.289970][T21541] netlink: 112 bytes leftover after parsing attributes in process `syz.4.3867'. [ 438.787814][T21544] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3867'. [ 438.809045][T21550] geneve2: entered allmulticast mode [ 438.889638][T21557] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3871'. [ 438.907588][T21558] x_tables: unsorted entry at hook 2 [ 444.241692][T21589] netlink: 'syz.0.3873': attribute type 1 has an invalid length. [ 444.252788][T21587] openvswitch: netlink: Multiple metadata blocks provided [ 444.265398][T21592] openvswitch: netlink: Multiple metadata blocks provided [ 444.274761][T21590] FAULT_INJECTION: forcing a failure. [ 444.274761][T21590] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 444.292691][T21590] CPU: 0 UID: 0 PID: 21590 Comm: syz.3.3876 Not tainted syzkaller #0 PREEMPT(full) [ 444.292718][T21590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 444.292729][T21590] Call Trace: [ 444.292736][T21590] [ 444.292743][T21590] dump_stack_lvl+0xe8/0x150 [ 444.292774][T21590] should_fail_ex+0x412/0x560 [ 444.292799][T21590] prepare_alloc_pages+0x22a/0x650 [ 444.292826][T21590] __alloc_frozen_pages_noprof+0x12f/0x380 [ 444.292849][T21590] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 444.292884][T21590] alloc_pages_bulk_noprof+0x558/0x700 [ 444.292906][T21590] ? __kmalloc_noprof+0x37d/0x760 [ 444.292926][T21590] ? copy_splice_read+0x16f/0xaa0 [ 444.292945][T21590] ? __kmalloc_noprof+0x1b8/0x760 [ 444.292966][T21590] copy_splice_read+0x19f/0xaa0 [ 444.292995][T21590] ? __pfx_iter_file_splice_write+0x10/0x10 [ 444.293023][T21590] ? __pfx_copy_splice_read+0x10/0x10 [ 444.293053][T21590] ? __pfx_iter_file_splice_write+0x10/0x10 [ 444.293076][T21590] ? file_end_write+0x156/0x250 [ 444.293099][T21590] ? direct_splice_actor+0x10c/0x160 [ 444.293122][T21590] ? __pfx_copy_splice_read+0x10/0x10 [ 444.293144][T21590] splice_direct_to_actor+0x478/0xc70 [ 444.293174][T21590] ? __pfx_direct_splice_actor+0x10/0x10 [ 444.293202][T21590] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 444.293227][T21590] ? get_pid_task+0x20/0x1f0 [ 444.293259][T21590] do_splice_direct+0x195/0x290 [ 444.293284][T21590] ? __pfx_do_splice_direct+0x10/0x10 [ 444.293308][T21590] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 444.293332][T21590] ? rw_verify_area+0x255/0x4d0 [ 444.293354][T21590] do_sendfile+0x535/0x7d0 [ 444.293385][T21590] ? __pfx_do_sendfile+0x10/0x10 [ 444.293408][T21590] ? __fget_files+0x3a0/0x420 [ 444.293443][T21590] __se_sys_sendfile64+0x144/0x1a0 [ 444.293476][T21590] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 444.293509][T21590] do_syscall_64+0x14d/0xf80 [ 444.293534][T21590] ? trace_irq_disable+0x3b/0x150 [ 444.293557][T21590] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.293575][T21590] ? clear_bhb_loop+0x40/0x90 [ 444.293597][T21590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.293615][T21590] RIP: 0033:0x7fbf0eb9c799 [ 444.293632][T21590] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 444.293648][T21590] RSP: 002b:00007fbf0fa1d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 444.293667][T21590] RAX: ffffffffffffffda RBX: 00007fbf0ee15fa0 RCX: 00007fbf0eb9c799 [ 444.293681][T21590] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 444.293691][T21590] RBP: 00007fbf0fa1d090 R08: 0000000000000000 R09: 0000000000000000 [ 444.293703][T21590] R10: 0000000000000038 R11: 0000000000000246 R12: 0000000000000001 [ 444.293714][T21590] R13: 00007fbf0ee16038 R14: 00007fbf0ee15fa0 R15: 00007fffc3c18c68 [ 444.293743][T21590] [ 444.858926][T21600] gtp0: entered promiscuous mode [ 444.864005][T21600] gtp0: entered allmulticast mode [ 445.258715][T21623] netlink: 'syz.2.3887': attribute type 1 has an invalid length. [ 445.305123][T21624] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3885'. [ 445.351287][T21626] netlink: 'syz.0.3889': attribute type 5 has an invalid length. [ 445.385118][T21629] netlink: 216 bytes leftover after parsing attributes in process `syz.1.3885'. [ 445.420409][T21626] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3889'. [ 445.430018][T21629] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3885'. [ 445.670073][T21640] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3893'. [ 445.726253][ T5949] IPVS: starting estimator thread 0... [ 445.752984][T21642] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 445.824656][T21652] IPVS: using max 29 ests per chain, 69600 per kthread [ 446.013662][T21667] netlink: 'syz.2.3898': attribute type 10 has an invalid length. [ 446.087463][T21668] sctp: [Deprecated]: syz.2.3898 (pid 21668) Use of struct sctp_assoc_value in delayed_ack socket option. [ 446.087463][T21668] Use struct sctp_sack_info instead [ 446.091181][T21667] veth0_vlan: left promiscuous mode [ 446.123822][T21675] netlink: 'syz.1.3901': attribute type 21 has an invalid length. [ 446.132065][T21675] IPv6: NLM_F_CREATE should be specified when creating new route [ 446.149360][T21667] veth0_vlan: entered promiscuous mode [ 446.160453][T21667] team0: Device veth0_vlan failed to register rx_handler [ 446.245995][T21676] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3900'. [ 446.268802][T21675] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3901'. [ 446.378636][T21688] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.3905'. [ 446.396290][T21689] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3905'. [ 446.431696][ T5162] block nbd0: Possible stuck request ffff888026d18000: control (read@0,1024B). Runtime 300 seconds [ 446.442965][ T5162] block nbd0: Possible stuck request ffff888026d18200: control (read@1024,1024B). Runtime 300 seconds [ 446.454117][ T5162] block nbd0: Possible stuck request ffff888026d18400: control (read@2048,1024B). Runtime 300 seconds [ 446.469728][ T5162] block nbd0: Possible stuck request ffff888026d18600: control (read@3072,1024B). Runtime 300 seconds [ 446.879973][T21716] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3909'. [ 447.644399][T21709] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 447.767596][T21748] netlink: 'syz.0.3919': attribute type 1 has an invalid length. [ 447.789296][T21750] netlink: 'syz.0.3919': attribute type 1 has an invalid length. [ 447.806487][T21748] bond3: entered promiscuous mode [ 447.812137][T21748] 8021q: adding VLAN 0 to HW filter on device bond3 [ 447.856520][T21748] 8021q: adding VLAN 0 to HW filter on device bond3 [ 447.875520][T21748] bond3: (slave vti0): The slave device specified does not support setting the MAC address [ 447.887340][T21748] bond3: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 447.909970][T21748] bond3: (slave vti0): making interface the new active one [ 447.918262][T21748] vti0: entered promiscuous mode [ 447.925106][T21748] bond3: (slave vti0): Enslaving as an active interface with an up link [ 447.980029][T21761] batman_adv: batadv0: Adding interface: vlan0 [ 447.986414][T21761] batman_adv: batadv0: The MTU of interface vlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 448.015599][T21761] batman_adv: batadv0: Not using interface vlan0 (retrying later): interface not active [ 448.642146][T21785] ÿÿÿÿÿÿ: renamed from vlan1 [ 448.677977][T21789] syzkaller1: entered promiscuous mode [ 448.685961][T21789] syzkaller1: entered allmulticast mode [ 448.912222][T21792] 8021q: adding VLAN 0 to HW filter on device bond3 [ 448.921537][T21792] team0: Port device bond3 added [ 448.928493][T21798] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 448.945811][T21798] bond0: (slave gre0): Error -95 calling set_mac_address [ 449.436346][T21823] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 449.749585][T21814] syzkaller1: left promiscuous mode [ 449.755765][T21814] syzkaller1: left allmulticast mode [ 456.852170][T21861] __nla_validate_parse: 12 callbacks suppressed [ 456.852189][T21861] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3945'. [ 456.868946][T21861] netlink: 'syz.2.3945': attribute type 10 has an invalid length. [ 456.881670][T21861] team0: Device vxcan1 is of different type [ 456.894757][T21862] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3944'. [ 457.219137][T21889] Bluetooth: MGMT ver 1.23 [ 457.290364][T21895] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3957'. [ 457.370753][T21895] macvlan3: entered promiscuous mode [ 457.389395][T21901] netlink: 'syz.3.3960': attribute type 1 has an invalid length. [ 457.411073][T21901] netlink: 'syz.3.3960': attribute type 1 has an invalid length. [ 457.422564][T21895] macvlan3: entered allmulticast mode [ 457.437059][T21895] veth1_to_batadv: entered allmulticast mode [ 457.465789][T21906] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3962'. [ 457.625297][T21910] tipc: Enabled bearer , priority 0 [ 458.315318][T21923] pim6reg: entered allmulticast mode [ 458.587602][T21937] pim6reg: left allmulticast mode [ 458.632429][T19205] tipc: Node number set to 1542620369 [ 458.814898][T21944] SET target dimension over the limit! [ 459.580991][T21962] netlink: 'syz.4.3977': attribute type 18 has an invalid length. [ 459.613546][T21962] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3977'. [ 459.735055][T21969] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3981'. [ 459.790740][T21969] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3981'. [ 459.827616][T21969] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3981'. [ 459.911176][T21980] netlink: 'syz.2.3984': attribute type 7 has an invalid length. [ 459.926479][T21980] netlink: 'syz.2.3984': attribute type 8 has an invalid length. [ 460.162204][T21997] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3986'. [ 460.260203][T21999] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 460.274917][T21999] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3987'. [ 460.550698][T22019] tipc: Started in network mode [ 460.555879][T22019] tipc: Node identity aaaaaaaaaa3a, cluster identity 4711 [ 460.564203][T22019] tipc: Enabled bearer , priority 10 [ 460.647406][T22026] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 460.913077][T22042] netlink: 'syz.4.4000': attribute type 15 has an invalid length. [ 460.968724][T22044] 8021q: adding VLAN 0 to HW filter on device bond3 [ 461.003871][T22045] macsec1: entered promiscuous mode [ 461.009341][T22045] bond3: entered promiscuous mode [ 461.015207][T22045] macsec1: entered allmulticast mode [ 461.020706][T22045] bond3: entered allmulticast mode [ 461.027781][T22045] bond3: left allmulticast mode [ 461.034419][T22045] bond3: left promiscuous mode [ 461.081679][T22049] macsec1: entered promiscuous mode [ 461.090216][T22049] bond3: entered promiscuous mode [ 461.095821][T22049] macsec1: entered allmulticast mode [ 461.101705][T22049] bond3: entered allmulticast mode [ 461.115610][T22049] bond3: left allmulticast mode [ 461.120678][T22049] bond3: left promiscuous mode [ 461.390252][T22075] netlink: 'syz.3.4008': attribute type 3 has an invalid length. [ 461.584659][T19205] tipc: Node number set to 9480874 [ 461.633072][T22078] gtp0: left promiscuous mode [ 461.637917][T22078] gtp0: left allmulticast mode [ 461.894220][T22103] __nla_validate_parse: 16 callbacks suppressed [ 461.894240][T22103] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4014'. [ 461.977761][T22105] syzkaller0: entered promiscuous mode [ 462.011299][T22105] syzkaller0: entered allmulticast mode [ 462.149259][T22105] tipc: Started in network mode [ 462.159689][T22105] tipc: Node identity 0a1ea7b9932e, cluster identity 4711 [ 462.188469][T22105] tipc: Enabled bearer , priority 0 [ 462.269420][T22102] tipc: Resetting bearer [ 462.312709][T22102] tipc: Disabling bearer [ 462.327882][T22139] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4024'. [ 462.374463][T22137] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4021'. [ 462.516712][T22148] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4027'. [ 462.937664][T22166] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4030'. [ 463.144893][T22170] netlink: 'syz.2.4031': attribute type 1 has an invalid length. [ 463.196696][T22171] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4031'. [ 463.621298][T22177] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4032'. [ 465.769470][T22189] netlink: 'syz.0.4034': attribute type 1 has an invalid length. [ 465.859728][T22196] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4036'. [ 465.891585][T22196] netlink: 'syz.1.4036': attribute type 9 has an invalid length. [ 465.978852][ T6342] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 465.988314][ T6342] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 466.019717][T22206] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4038'. [ 466.042479][ T6342] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 466.061101][ T6342] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 466.101415][T22206] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4038'. [ 466.200770][T22218] tipc: Resetting bearer [ 466.275028][T22212] syzkaller0: refused to change device tx_queue_len [ 466.436279][T22213] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 466.455505][T22213] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 466.666648][T22242] netlink: 'syz.2.4048': attribute type 12 has an invalid length. [ 466.966746][T22210] tipc: Resetting bearer [ 467.009681][T22262] __nla_validate_parse: 2 callbacks suppressed [ 467.009701][T22262] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4050'. [ 467.035833][T22262] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4050'. [ 467.314854][T22278] veth0_to_batadv: Caught tx_queue_len zero misconfig [ 467.705723][ T5834] Bluetooth: hci1: command 0x0406 tx timeout [ 467.796145][ T13] tipc: Resetting bearer [ 474.226489][T22314] lo speed is unknown, defaulting to 1000 [ 474.241109][T22312] netlink: 'syz.2.4059': attribute type 2 has an invalid length. [ 474.242605][T22314] lo speed is unknown, defaulting to 1000 [ 474.259204][T22312] netlink: 'syz.2.4059': attribute type 11 has an invalid length. [ 474.266685][T22314] lo speed is unknown, defaulting to 1000 [ 474.268269][T22312] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4059'. [ 474.300549][T22314] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 474.353795][T22314] lo speed is unknown, defaulting to 1000 [ 474.361303][T22314] lo speed is unknown, defaulting to 1000 [ 474.384696][T22314] lo speed is unknown, defaulting to 1000 [ 474.408382][T22314] lo speed is unknown, defaulting to 1000 [ 474.417852][T22314] lo speed is unknown, defaulting to 1000 [ 474.436060][T22314] lo speed is unknown, defaulting to 1000 [ 474.593308][T22334] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4067'. [ 474.741167][T22344] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 474.819837][T22346] syzkaller0: entered promiscuous mode [ 474.829964][T22346] syzkaller0: entered allmulticast mode [ 475.109686][T22363] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4075'. [ 475.141242][T22366] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4076'. [ 475.354771][T22382] netlink: 'syz.1.4080': attribute type 7 has an invalid length. [ 475.362724][T22382] netlink: 'syz.1.4080': attribute type 5 has an invalid length. [ 475.370610][T22382] netlink: 17 bytes leftover after parsing attributes in process `syz.1.4080'. [ 475.525704][T22387] ip6_vti0: Caught tx_queue_len zero misconfig [ 476.150683][T22417] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma? [ 476.228291][T22419] geneve1: Caught tx_queue_len zero misconfig [ 476.234821][T22419] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4091'. [ 476.501547][ T5162] block nbd0: Possible stuck request ffff888026d18000: control (read@0,1024B). Runtime 330 seconds [ 476.512615][T22431] netlink: 'syz.1.4095': attribute type 89 has an invalid length. [ 476.513296][ T5162] block nbd0: Possible stuck request ffff888026d18200: control (read@1024,1024B). Runtime 330 seconds [ 476.532638][ T5162] block nbd0: Possible stuck request ffff888026d18400: control (read@2048,1024B). Runtime 330 seconds [ 476.543854][ T5162] block nbd0: Possible stuck request ffff888026d18600: control (read@3072,1024B). Runtime 330 seconds [ 476.639730][T22440] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4096'. [ 476.649182][T22438] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4097'. [ 476.701953][T22442] netlink: 27 bytes leftover after parsing attributes in process `syz.1.4099'. [ 476.776238][T22447] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4100'. [ 476.796887][T22447] syzkaller1: entered promiscuous mode [ 476.806280][T22447] syzkaller1: entered allmulticast mode [ 477.123556][T22463] netlink: 'syz.4.4106': attribute type 3 has an invalid length. [ 477.170269][T22463] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 477.220817][T22464] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 477.234466][T22464] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.365787][T22464] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 477.380308][T22464] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.404922][T22477] xt_socket: unknown flags 0x50 [ 477.431514][T22477] netlink: 'syz.4.4109': attribute type 1 has an invalid length. [ 477.442221][T22464] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 477.456687][T22464] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.553794][T22464] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 477.565655][T22464] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.706536][ T13] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 477.715851][ T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.736775][ T13] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 477.745723][ T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.768795][ T13] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 477.779950][ T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.816373][ T13] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 477.835531][ T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.937893][ T5834] Bluetooth: hci4: command 0x0406 tx timeout [ 478.273341][T22512] netlink: 'syz.1.4117': attribute type 11 has an invalid length. [ 478.455530][T22518] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 478.460584][T19203] IPVS: starting estimator thread 0... [ 478.564270][T22521] IPVS: using max 32 ests per chain, 76800 per kthread [ 478.836298][T22544] batman_adv: batadv0: Adding interface: gretap1 [ 478.869225][T22544] batman_adv: batadv0: The MTU of interface gretap1 is too small (1382) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 478.910494][T22553] xt_CT: You must specify a L4 protocol and not use inversions on it [ 478.929066][T22544] batman_adv: batadv0: Interface activated: gretap1 [ 478.954112][T22556] netlink: 'syz.2.4127': attribute type 1 has an invalid length. [ 479.313798][T22574] sch_tbf: peakrate 127 is lower than or equals to rate 7041191509132882021 ! [ 479.341398][T22574] sch_tbf: peakrate 127 is lower than or equals to rate 7041191509132882021 ! [ 479.374567][T22574] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 479.388329][T22574] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 483.052520][ T5834] Bluetooth: hci3: command 0x0406 tx timeout [ 485.974814][T22605] __nla_validate_parse: 2 callbacks suppressed [ 485.974833][T22605] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4134'. [ 486.153335][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 486.170046][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 486.178459][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 486.199521][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 486.209726][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 486.324275][T22630] veth0_to_bridge: entered promiscuous mode [ 486.341884][T22631] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4142'. [ 486.362751][T22630] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4141'. [ 486.378542][T22621] lo speed is unknown, defaulting to 1000 [ 486.385401][T22627] veth0_to_bridge: left promiscuous mode [ 486.546014][T22639] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4144'. [ 486.565959][T22639] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4144'. [ 486.586534][T22639] bridge2: entered promiscuous mode [ 486.591962][T22639] bridge2: entered allmulticast mode [ 486.598555][T22642] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4145'. [ 486.900719][T22621] chnl_net:caif_netlink_parms(): no params data found [ 486.901567][T22649] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4147'. [ 487.076994][T22656] lo speed is unknown, defaulting to 1000 [ 487.083521][T22621] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.091142][T22621] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.100439][T22621] bridge_slave_0: entered allmulticast mode [ 487.108570][T22621] bridge_slave_0: entered promiscuous mode [ 487.129676][T22621] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.137189][T22621] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.144570][T22621] bridge_slave_1: entered allmulticast mode [ 487.152597][T22621] bridge_slave_1: entered promiscuous mode [ 487.271225][T22621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 487.325185][T22621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 487.608850][T22621] team0: Port device team_slave_0 added [ 487.660080][T22621] team0: Port device team_slave_1 added [ 487.705439][T22679] netlink: 'syz.2.4154': attribute type 21 has an invalid length. [ 487.714111][T22679] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4154'. [ 487.761972][T22679] netlink: 'syz.2.4154': attribute type 4 has an invalid length. [ 487.784017][T22679] netlink: 'syz.2.4154': attribute type 5 has an invalid length. [ 487.791819][T22679] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4154'. [ 487.892102][T22691] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4158'. [ 487.932205][T22621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 487.939986][T22621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 487.967264][T22621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 488.017867][T22621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 488.025246][T22621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 488.086288][T22621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 488.252591][ T5143] Bluetooth: hci2: command tx timeout [ 488.278410][T22718] x_tables: duplicate underflow at hook 2 [ 489.183891][T22621] hsr_slave_0: entered promiscuous mode [ 489.190737][T22621] hsr_slave_1: entered promiscuous mode [ 489.328761][T22735] lo speed is unknown, defaulting to 1000 [ 489.537283][T22757] xt_hashlimit: size too large, truncated to 1048576 [ 489.811275][T22766] netlink: 'syz.4.4177': attribute type 2 has an invalid length. [ 490.006453][T22621] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 490.043798][T22621] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 490.089740][T22621] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 490.146774][T22621] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 490.273247][T22793] bridge4: entered promiscuous mode [ 490.278602][T22793] bridge4: entered allmulticast mode [ 490.302157][T22793] team0: Port device bridge4 added [ 490.314558][T22793] bridge0: port 3(team0) entered blocking state [ 490.316058][T22785] set match dimension is over the limit! [ 490.321797][T22793] bridge0: port 3(team0) entered disabled state [ 490.337156][T22793] team0: entered allmulticast mode [ 490.342893][ T5143] Bluetooth: hci2: command tx timeout [ 490.343454][T22793] team_slave_0: entered allmulticast mode [ 490.355335][T22793] team_slave_1: entered allmulticast mode [ 490.362986][T22793] bond3: entered allmulticast mode [ 490.373472][T22793] team0: left allmulticast mode [ 490.378626][T22793] team_slave_0: left allmulticast mode [ 490.384706][T22793] team_slave_1: left allmulticast mode [ 490.390385][T22793] bond3: left allmulticast mode [ 490.560811][T22621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 490.626961][T22621] 8021q: adding VLAN 0 to HW filter on device team0 [ 490.664860][ T6337] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.672092][ T6337] bridge0: port 1(bridge_slave_0) entered forwarding state [ 490.725054][ T6331] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.732228][ T6331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 491.035404][T22821] __nla_validate_parse: 6 callbacks suppressed [ 491.035427][T22821] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4192'. [ 491.221881][T22831] netlink: 'syz.2.4194': attribute type 10 has an invalid length. [ 491.282183][T22831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 491.326125][T22831] bond_slave_0: entered promiscuous mode [ 491.332217][T22831] bond_slave_1: entered promiscuous mode [ 491.341461][T22839] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4196'. [ 491.354029][T22838] netlink: 504 bytes leftover after parsing attributes in process `syz.2.4194'. [ 491.365529][T22839] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4196'. [ 491.375545][T22831] team0: Port device bond0 added [ 491.438396][T22621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 491.795145][T22621] veth0_vlan: entered promiscuous mode [ 491.806394][T22621] veth1_vlan: entered promiscuous mode [ 491.833275][T22621] veth0_macvtap: entered promiscuous mode [ 491.842247][T22621] veth1_macvtap: entered promiscuous mode [ 491.860706][T22621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 491.875142][T22621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 491.890372][ T168] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.900161][ T168] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.910600][ T168] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.921359][ T168] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.021289][ T168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 492.036018][ T168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 492.075560][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 492.087287][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 492.167484][T22867] netlink: 'syz.5.4137': attribute type 1 has an invalid length. [ 492.412861][ T5143] Bluetooth: hci2: command tx timeout [ 494.492639][ T5143] Bluetooth: hci2: command tx timeout [ 498.067203][T22895] netlink: 207952 bytes leftover after parsing attributes in process `syz.5.4202'. [ 498.070875][T22893] netlink: 211856 bytes leftover after parsing attributes in process `syz.2.4201'. [ 498.093811][T22897] netlink: 207952 bytes leftover after parsing attributes in process `syz.5.4202'. [ 498.109573][T22893] netlink: 211856 bytes leftover after parsing attributes in process `syz.2.4201'. [ 498.177048][T22903] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4204'. [ 498.206927][T22903] netlink: 236 bytes leftover after parsing attributes in process `syz.1.4204'. [ 498.317565][T22917] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4208'. [ 498.458030][T22928] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4211'. [ 498.525457][T22932] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap0 [ 498.536559][T22932] ip6gretap0: entered allmulticast mode [ 498.589280][T22920] lo speed is unknown, defaulting to 1000 [ 498.646966][T22935] tipc: Enabled bearer , priority 0 [ 498.690774][T22940] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4216'. [ 498.724930][T22935] tipc: Resetting bearer [ 498.736085][T22940] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4216'. [ 498.768636][T22934] tipc: Disabling bearer [ 499.049030][T22965] netlink: 'syz.5.4221': attribute type 1 has an invalid length. [ 500.127149][ T30] audit: type=1804 audit(1773780144.636:15): pid=23016 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.4232" name="/newroot/291/cgroup.controllers" dev="tmpfs" ino=1507 res=1 errno=0 [ 500.184543][ T30] audit: type=1800 audit(1773780144.636:16): pid=23016 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4232" name="cgroup.controllers" dev="tmpfs" ino=1507 res=0 errno=0 [ 500.277203][T23023] netlink: 'syz.1.4234': attribute type 4 has an invalid length. [ 500.346873][T23023] netlink: 'syz.1.4234': attribute type 4 has an invalid length. [ 500.386113][T23029] netlink: 'syz.2.4237': attribute type 1 has an invalid length. [ 500.539704][T23036] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 500.553757][T23036] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 500.607024][T23029] bond4: (slave bridge6): Enslaving as an active interface with a down link [ 500.649062][T23039] bond4: (slave bridge7): Enslaving as an active interface with a down link [ 500.777893][T23029] macvlan4: entered promiscuous mode [ 500.786750][T23029] macvlan4: entered allmulticast mode [ 500.820038][T23029] bond4: entered promiscuous mode [ 500.840288][T23029] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 500.868393][T23029] bond4: left promiscuous mode [ 500.919176][ T5488] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 500.948295][T23043] lo speed is unknown, defaulting to 1000 [ 500.959700][T23052] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 501.036850][T23044] lo speed is unknown, defaulting to 1000 [ 501.079383][T23061] netlink: 'syz.2.4242': attribute type 1 has an invalid length. [ 501.201042][T23063] bond4: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 501.214284][T23063] bond4 (unregistering): Released all slaves [ 501.275655][ T5488] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 501.464350][ T1299] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 501.476885][T22228] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 505.273767][ T5488] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 505.699751][T23052] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 505.933568][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 506.584199][ T5162] block nbd0: Possible stuck request ffff888026d18000: control (read@0,1024B). Runtime 360 seconds [ 506.594989][ T5162] block nbd0: Possible stuck request ffff888026d18200: control (read@1024,1024B). Runtime 360 seconds [ 506.606310][ T5162] block nbd0: Possible stuck request ffff888026d18400: control (read@2048,1024B). Runtime 360 seconds [ 506.617625][ T5162] block nbd0: Possible stuck request ffff888026d18600: control (read@3072,1024B). Runtime 360 seconds [ 509.273900][ T5488] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 510.972744][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 513.497721][ T5488] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 514.313138][T23052] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 516.012631][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 521.052586][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 526.092560][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 529.368202][T23052] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 531.132551][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 536.172571][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 536.653417][ T5162] block nbd0: Possible stuck request ffff888026d18000: control (read@0,1024B). Runtime 390 seconds [ 536.664234][ T5162] block nbd0: Possible stuck request ffff888026d18200: control (read@1024,1024B). Runtime 390 seconds [ 536.675390][ T5162] block nbd0: Possible stuck request ffff888026d18400: control (read@2048,1024B). Runtime 390 seconds [ 536.687637][ T5162] block nbd0: Possible stuck request ffff888026d18600: control (read@3072,1024B). Runtime 390 seconds [ 541.212607][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 544.333287][T23228] __nla_validate_parse: 5 callbacks suppressed [ 544.333305][T23228] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4244'. [ 544.356960][T23231] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4247'. [ 544.571936][T23244] nbd: must specify at least one socket [ 544.622603][T23245] vxcan3: entered promiscuous mode [ 544.769900][T23254] veth1_to_bond: entered allmulticast mode [ 544.848950][T23256] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4255'. [ 544.855656][T23258] ip6tnl1: entered promiscuous mode [ 544.863574][T23258] ip6tnl1: entered allmulticast mode [ 544.915109][T23261] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.4255'. [ 544.926310][T23261] tc_dump_action: action bad kind [ 544.941944][T23253] veth1_to_bond: left allmulticast mode [ 545.010340][T23263] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4257'. [ 545.033495][T23263] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4257'. [ 545.065360][T23266] netlink: 15672 bytes leftover after parsing attributes in process `syz.4.4257'. [ 545.075595][T23266] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4257'. [ 545.092848][T23266] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4257'. [ 545.323469][T23278] netlink: 'syz.5.4262': attribute type 23 has an invalid length. [ 545.364598][T23278] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4262'. [ 545.711530][T23296] lo speed is unknown, defaulting to 1000 [ 546.000214][T23309] lo speed is unknown, defaulting to 1000 [ 546.159048][T23307] lo speed is unknown, defaulting to 1000 [ 546.179362][T23321] syzkaller1: left promiscuous mode [ 546.192833][T23321] syzkaller1: left allmulticast mode [ 546.204221][T23321] netlink: 'syz.1.4276': attribute type 8 has an invalid length. [ 546.252556][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 546.291305][T23324] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 546.322745][T23324] sock: sock_timestamping_bind_phc: sock not bind to device [ 546.608699][T23344] nbd: must specify an index to disconnect [ 546.670546][T23348] netlink: 'syz.0.4283': attribute type 4 has an invalid length. [ 546.749122][T23341] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.773217][T23344] bridge_slave_1: left allmulticast mode [ 546.778945][T23344] bridge_slave_1: left promiscuous mode [ 546.793536][T23344] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.803738][T23344] bridge_slave_0: left allmulticast mode [ 546.809663][T23344] bridge_slave_0: left promiscuous mode [ 546.825078][T23344] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.918087][T23341] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.035267][T23341] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.162858][T23369] lo speed is unknown, defaulting to 1000 [ 547.414242][T23341] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.032571][ T168] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.379385][ T168] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.425378][ T168] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.757553][T23436] tipc: Resetting bearer [ 548.811090][T23435] tipc: Resetting bearer [ 548.878378][T23445] netlink: 'syz.2.4309': attribute type 11 has an invalid length. [ 548.908402][T23445] netlink: 'syz.2.4309': attribute type 11 has an invalid length. [ 548.947032][T23452] bond1: option mode: unable to set because the bond device has slaves [ 548.958996][T23452] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 549.082766][ T6338] tipc: Resetting bearer [ 549.817080][T23478] __nla_validate_parse: 7 callbacks suppressed [ 549.817099][T23478] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4318'. [ 549.964276][T23342] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.040230][T23342] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.104733][T23342] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.330629][T23498] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4324'. [ 550.336019][T23495] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4323'. [ 550.822598][T23523] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4331'. [ 551.033152][T23540] bond1: entered promiscuous mode [ 551.049868][T23540] bond1: entered allmulticast mode [ 551.098609][T23540] 8021q: adding VLAN 0 to HW filter on device bond1 [ 551.130268][T23555] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4335'. [ 551.152097][T23546] netlink: 'syz.0.4334': attribute type 3 has an invalid length. [ 551.292574][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 551.330219][T23571] IPVS: length: 4096 != 8 [ 551.354523][T23571] xt_CT: You must specify a L4 protocol and not use inversions on it [ 551.521225][ T6337] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.549078][ T6337] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.564527][ T6337] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.578407][ T6337] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.573261][ T31] INFO: task udevd:5833 blocked for more than 143 seconds. [ 554.580513][ T31] Not tainted syzkaller #0 [ 554.585877][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 554.594730][ T31] task:udevd state:D stack:20200 pid:5833 tgid:5833 ppid:5193 task_flags:0x400140 flags:0x00080002 [ 554.606893][ T31] Call Trace: [ 554.610172][ T31] [ 554.613404][ T31] __schedule+0x15dd/0x52d0 [ 554.618126][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 554.623263][ T31] ? __pfx___schedule+0x10/0x10 [ 554.628142][ T31] ? schedule+0x90/0x360 [ 554.632486][ T31] schedule+0x164/0x360 [ 554.636658][ T31] io_schedule+0x7f/0xd0 [ 554.640979][ T31] folio_wait_bit_common+0x6d8/0xbc0 [ 554.646795][ T31] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 554.652791][ T31] ? __pfx_wake_page_function+0x10/0x10 [ 554.658414][ T31] ? __filemap_get_folio_mpol+0x7a9/0xb00 [ 554.664501][ T31] do_read_cache_folio+0x1ad/0x590 [ 554.669641][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 554.675589][ T31] read_part_sector+0xb6/0x2b0 [ 554.680513][ T31] adfspart_check_POWERTEC+0x92/0xef0 [ 554.686389][ T31] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 554.692061][ T31] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 554.698290][ T31] bdev_disk_changed+0x7ba/0x1550 [ 554.703768][ T31] ? bdev_open+0xe0/0xd30 [ 554.708127][ T31] ? __pfx_bdev_disk_changed+0x10/0x10 [ 554.713826][ T31] blkdev_get_whole+0x380/0x510 [ 554.718723][ T31] bdev_open+0x31e/0xd30 [ 554.723258][ T31] blkdev_open+0x470/0x610 [ 554.727706][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 554.733157][ T31] do_dentry_open+0x785/0x14e0 [ 554.738765][ T31] vfs_open+0x3b/0x340 [ 554.743285][ T31] ? path_openat+0x2df0/0x3860 [ 554.748080][ T31] path_openat+0x2e08/0x3860 [ 554.753174][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 554.758819][ T31] ? stack_depot_save_flags+0x33/0x810 [ 554.764992][ T31] ? __pfx_path_openat+0x10/0x10 [ 554.769961][ T31] ? __x64_sys_openat+0x138/0x170 [ 554.775113][ T31] ? do_syscall_64+0x14d/0xf80 [ 554.780102][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.786590][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 554.791619][ T31] do_file_open+0x23e/0x4a0 [ 554.796638][ T31] ? __pfx_do_file_open+0x10/0x10 [ 554.801827][ T31] ? _raw_spin_unlock+0x28/0x50 [ 554.807173][ T31] ? alloc_fd+0x64b/0x6c0 [ 554.811545][ T31] do_sys_openat2+0x113/0x200 [ 554.816407][ T31] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 554.822097][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 554.827756][ T31] ? rcu_is_watching+0x15/0xb0 [ 554.832704][ T31] __x64_sys_openat+0x138/0x170 [ 554.837598][ T31] do_syscall_64+0x14d/0xf80 [ 554.842191][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.848542][ T31] ? clear_bhb_loop+0x40/0x90 [ 554.853413][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.859404][ T31] RIP: 0033:0x7fb111ea7407 [ 554.864160][ T31] RSP: 002b:00007ffc2718ab30 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 554.873121][ T31] RAX: ffffffffffffffda RBX: 00007fb1125e5880 RCX: 00007fb111ea7407 [ 554.881569][ T31] RDX: 00000000000a0800 RSI: 00005605b07128e0 RDI: ffffffffffffff9c [ 554.890306][ T31] RBP: 00005605b06ea910 R08: 0000000000000000 R09: 0000000000000000 [ 554.898575][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 00005605b06fde20 [ 554.907154][ T31] R13: 00005605b06f8190 R14: 0000000000000000 R15: 00005605b06fde20 [ 554.915510][ T31] [ 554.918830][ T31] [ 554.918830][ T31] Showing all locks held in the system: [ 554.927041][ T31] 1 lock held by khungtaskd/31: [ 554.931904][ T31] #0: ffffffff8e75e420 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 554.942157][ T31] 2 locks held by getty/5579: [ 554.947709][ T31] #0: ffff88803663a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 554.958274][ T31] #1: ffffc9000322b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 554.968814][ T31] 1 lock held by udevd/5833: [ 554.973806][ T31] #0: ffff8880267ac358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 554.983499][ T31] 3 locks held by kworker/0:6/5949: [ 554.988707][ T31] #0: ffff88813fe0f148 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 555.000056][ T31] #1: ffffc90004c67c40 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 555.013074][ T31] #2: ffff88808a6f6240 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x202/0x3d0 [ 555.023288][ T31] 3 locks held by kworker/u8:25/6337: [ 555.028868][ T31] #0: ffff8880b873ade0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 555.039161][ T31] #1: ffff8880b8724588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 555.048543][ T31] #2: ffff8880b8726118 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x1ae/0xf30 [ 555.058003][ T31] [ 555.060356][ T31] ============================================= [ 555.060356][ T31] [ 555.069128][ T31] NMI backtrace for cpu 0 [ 555.069145][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 555.069163][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 555.069172][ T31] Call Trace: [ 555.069178][ T31] [ 555.069183][ T31] dump_stack_lvl+0xe8/0x150 [ 555.069211][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 555.069340][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 555.069365][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 555.069388][ T31] sys_info+0x135/0x170 [ 555.069405][ T31] watchdog+0xfd9/0x1030 [ 555.069445][ T31] ? watchdog+0x21a/0x1030 [ 555.069476][ T31] kthread+0x388/0x470 [ 555.069494][ T31] ? __pfx_watchdog+0x10/0x10 [ 555.069516][ T31] ? __pfx_kthread+0x10/0x10 [ 555.069534][ T31] ret_from_fork+0x51e/0xb90 [ 555.069566][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 555.069586][ T31] ? __switch_to+0xc7d/0x1450 [ 555.069620][ T31] ? __pfx_kthread+0x10/0x10 [ 555.069638][ T31] ret_from_fork_asm+0x1a/0x30 [ 555.069676][ T31] [ 555.069683][ T31] Sending NMI from CPU 0 to CPUs 1: [ 555.181711][ C1] NMI backtrace for cpu 1 [ 555.181730][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 555.181746][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 555.181755][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 555.181783][ C1] Code: de 6e 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 92 1a 00 fb f4 fc e9 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 555.181796][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000246 [ 555.181810][ C1] RAX: 00000000001ad6dd RBX: ffffffff819a8c8d RCX: 0000000080000001 [ 555.181821][ C1] RDX: 0000000000000001 RSI: ffffffff8df20a67 RDI: ffffffff8c27b500 [ 555.181831][ C1] RBP: ffffc90000197f10 R08: ffff8880b873395b R09: 1ffff110170e672b [ 555.181841][ C1] R10: dffffc0000000000 R11: ffffed10170e672c R12: ffffffff90112cb0 [ 555.181851][ C1] R13: 1ffff11003ad9000 R14: 0000000000000001 R15: 0000000000000001 [ 555.181861][ C1] FS: 0000000000000000(0000) GS:ffff888125567000(0000) knlGS:0000000000000000 [ 555.181872][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 555.181882][ C1] CR2: 000056496b9f1168 CR3: 000000000e54c000 CR4: 00000000003526f0 [ 555.181896][ C1] Call Trace: [ 555.181904][ C1] [ 555.181909][ C1] default_idle+0x9/0x20 [ 555.181924][ C1] default_idle_call+0x72/0xb0 [ 555.181941][ C1] do_idle+0x1bd/0x500 [ 555.181959][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 555.181981][ C1] ? __pfx_do_idle+0x10/0x10 [ 555.182004][ C1] cpu_startup_entry+0x43/0x60 [ 555.182023][ C1] start_secondary+0x101/0x110 [ 555.182040][ C1] common_startup_64+0x13e/0x147 [ 555.182061][ C1] [ 555.187439][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 555.187461][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 555.187482][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 555.187494][ T31] Call Trace: [ 555.187503][ T31] [ 555.187511][ T31] vpanic+0x56c/0xa60 [ 555.187540][ T31] ? __pfx___schedule+0x10/0x10 [ 555.187565][ T31] ? __pfx_vpanic+0x10/0x10 [ 555.187597][ T31] panic+0xc5/0xd0 [ 555.187618][ T31] ? __pfx_panic+0x10/0x10 [ 555.187643][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 555.187667][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 555.187693][ T31] watchdog+0x1023/0x1030 [ 555.187722][ T31] ? watchdog+0x21a/0x1030 [ 555.187754][ T31] kthread+0x388/0x470 [ 555.187772][ T31] ? __pfx_watchdog+0x10/0x10 [ 555.187795][ T31] ? __pfx_kthread+0x10/0x10 [ 555.187813][ T31] ret_from_fork+0x51e/0xb90 [ 555.187838][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 555.187859][ T31] ? __switch_to+0xc7d/0x1450 [ 555.187882][ T31] ? __pfx_kthread+0x10/0x10 [ 555.187901][ T31] ret_from_fork_asm+0x1a/0x30 [ 555.187938][ T31] [ 555.461089][ T31] Kernel Offset: disabled [ 555.465439][ T31] Rebooting in 86400 seconds..