last executing test programs: 16.188297118s ago: executing program 2 (id=9012): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x9, 0x0, 0x61, 0x9}]}}]}}]}, 0x44}}, 0x2004c850) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001a40), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000032c0)={'wlan1\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f00000033c0)={0x0, 0x0, &(0x7f0000003380)={&(0x7f0000003300)={0x30, r5, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4044850}, 0x814) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r5, 0x10, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20004000) (async) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 7.564924044s ago: executing program 3 (id=9064): r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x44000) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x18, &(0x7f0000000400)=@req3={0xc, 0x47, 0x8004, 0x4, 0x3, 0xffffffff, 0xfffe0}, 0x1c) recvmmsg(r1, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000002d40)=[{0x0}], 0x1}, 0x9}], 0x1, 0x0, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40482, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140)) pwritev(r2, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd06000040", 0x27}], 0x2, 0x0, 0x4) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r2, 0x4058587a, &(0x7f0000000340)={{0xffffffffffffffff, &(0x7f0000000080)='+\x00', 0x0, &(0x7f00000000c0)={@align=0x79, {0x200, 0x2, 0x9, 0x8}}, 0xa, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000200)=0x400}, {[0x200, 0xee5b, 0x4, 0x80000001]}, 0x5, 0xb6, &(0x7f0000000280)=""/182}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000003c0), 0x4) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000100)={0x0, 0x3, 0x1, 0x7fff000, 0x7, 0xd67}, &(0x7f0000000440)=0x14) r4 = socket$kcm(0xa, 0x2, 0x0) socket(0x2, 0x80805, 0x0) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}, 0xe0000000}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 7.139940974s ago: executing program 3 (id=9067): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000006f00)) (async) clock_gettime(0x0, &(0x7f0000006f00)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000006d00)=[{{&(0x7f0000000040)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000002640)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/45, 0x2d}, {&(0x7f0000001100)=""/232, 0xe8}, {&(0x7f0000001200)=""/4096, 0x1000}, {&(0x7f0000002200)=""/208, 0xd0}, {&(0x7f0000002300)=""/213, 0xd5}, {&(0x7f0000002400)=""/83, 0x53}, {&(0x7f0000002480)=""/129, 0x81}, {&(0x7f0000002540)=""/98, 0x62}, {&(0x7f00000025c0)=""/65, 0x41}], 0xa}, 0xfffffffc}, {{0x0, 0x0, &(0x7f0000002880)=[{&(0x7f0000002700)=""/18, 0x12}, {&(0x7f0000002740)=""/12, 0xc}, {&(0x7f0000002780)=""/253, 0xfd}], 0x3, &(0x7f00000028c0)=""/68, 0x44}, 0x477}, {{&(0x7f0000002940)=@tipc, 0x80, &(0x7f0000002ac0)=[{&(0x7f00000029c0)=""/234, 0xea}], 0x1}, 0x10000}, {{0x0, 0x0, &(0x7f0000004e80)=[{&(0x7f0000002b00)=""/190, 0xbe}, {&(0x7f0000002bc0)=""/77, 0x4d}, {&(0x7f0000002c40)=""/47, 0x2f}, {&(0x7f0000002c80)=""/120, 0x78}, {&(0x7f0000002d00)=""/63, 0x3f}, {&(0x7f0000002d40)=""/131, 0x83}, {&(0x7f0000002e00)=""/4096, 0x1000}, {&(0x7f0000003e00)=""/87, 0x57}, {&(0x7f0000003e80)=""/4096, 0x1000}], 0x9, &(0x7f0000004f40)=""/213, 0xd5}, 0x7f}, {{&(0x7f0000005040)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000005240)=[{&(0x7f00000050c0)=""/140, 0x8c}, {&(0x7f0000005180)=""/110, 0x6e}, {&(0x7f0000005200)=""/32, 0x20}], 0x3, &(0x7f0000005280)=""/224, 0xe0}, 0x3}, {{&(0x7f0000005380)=@un=@abs, 0x80, &(0x7f0000006500)=[{&(0x7f0000005400)=""/4096, 0x1000}, {&(0x7f0000006400)=""/217, 0xd9}], 0x2, &(0x7f0000006540)=""/161, 0xa1}, 0x10}, {{0x0, 0x0, &(0x7f0000006a40)=[{&(0x7f0000006600)=""/8, 0x8}, {&(0x7f0000006640)=""/152, 0x98}, {&(0x7f0000006700)=""/200, 0xc8}, {&(0x7f0000006800)=""/26, 0x1a}, {&(0x7f0000006840)=""/238, 0xee}, {&(0x7f0000006940)=""/157, 0x9d}, {&(0x7f0000006a00)=""/36, 0x24}], 0x7, &(0x7f0000006ac0)=""/58, 0x3a}, 0x2}, {{&(0x7f0000006b00)=@x25={0x9, @remote}, 0x80, &(0x7f0000006c40)=[{&(0x7f0000006b80)=""/180, 0xb4}], 0x1, &(0x7f0000006c80)=""/75, 0x4b}, 0x7fff}], 0x8, 0x40, &(0x7f0000006f40)={r2, r3+10000000}) r4 = accept4$unix(r0, &(0x7f0000006f80)=@abs, &(0x7f0000007000)=0x6e, 0x80800) recvmmsg$unix(r4, &(0x7f0000009800)=[{{&(0x7f0000007040)=@abs, 0x6e, &(0x7f0000008100)=[{&(0x7f00000070c0)=""/4096, 0x1000}, {&(0x7f00000080c0)=""/47, 0x2f}], 0x2}}, {{&(0x7f0000008140)=@abs, 0x6e, &(0x7f0000009700)=[{&(0x7f00000081c0)=""/77, 0x4d}, {&(0x7f0000008240)=""/177, 0xb1}, {&(0x7f0000008300)=""/110, 0x6e}, {&(0x7f0000008380)=""/128, 0x80}, {&(0x7f0000008400)=""/4096, 0x1000}, {&(0x7f0000009400)=""/177, 0xb1}, {&(0x7f00000094c0)=""/42, 0x2a}, {&(0x7f0000009500)=""/243, 0xf3}, {&(0x7f0000009600)=""/23, 0x17}, {&(0x7f0000009640)=""/192, 0xc0}], 0xa, &(0x7f00000097c0)=[@cred={{0x1c}}], 0x20}}], 0x2, 0x2, &(0x7f0000009880)={0x0, 0x989680}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000098c0)={r1}) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r5, 0x84, 0x23, &(0x7f0000009900)={0x0, 0x4}, 0x8) (async) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r5, 0x84, 0x23, &(0x7f0000009900)={0x0, 0x4}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000009940)={0x0, 0x28e}, &(0x7f0000009980)=0xc) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000009940)={0x0, 0x28e}, &(0x7f0000009980)=0xc) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000009a00), r5) sendmsg$BATADV_CMD_GET_GATEWAYS(r5, &(0x7f0000009ac0)={&(0x7f00000099c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000009a80)={&(0x7f0000009a40)={0x24, r6, 0x404, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) writev(r5, &(0x7f0000009f40)=[{&(0x7f0000009b00)="b99c89a5257cc3ec8414cc2ea46d194901c330c5839df05ac956f2c40ce88fda9482485a78fe82f8c9c990165c7e35e725158524b067678ec9988002975f51523cbc840ab33442989131f6d0ca78b4725bb4e803cde8dedab96ff42086f23046266b4777a6e8b9d938556f61736e779af30ff927a76300ec8cc7d84ddff7b60cb4850993a2376367efe21187c8a7f50a3a8969c0398ea454a25e0425f74f322c76c3292aefc08877874193a2d3a2fa21d2edccba5f2fdcc5abe5467eea43c177a04794bb3abcd52dba00da582b84a803bfde5b33276bfda813f73845615790", 0xdf}, {&(0x7f0000009c00)="70398da04adf20df5f7cd35562f803a94d76f0eb891171d806f2396c33574df9fc1fe4b14ef7c51c5de433ffc110cd7465274c8ea1635f0a4e9188e9a94361aec181d27877690fd03971105fefca6d235a361b2d6976726bf85c308b773524dbe1aeb31fb9a51943669f72e76ad86dd24591245b94612163ca9d9e77e2e957ca529633571008052a5a", 0x89}, {&(0x7f0000009cc0)="c2fff8ade7b6e9a26845c583d6a9131353a2414702d1cdbe7e5dac4385472dd08d7daef777d85c23ec1627c30df5f1e79093935837883bc8d440621f54cfba05833446ae1e29a349385c3218cbcc446052b697a213de43e93c485c6219024f1695160a8246550ba1a2abe0decb2514407a6de96fde5921dc8a99c860038374728b6af3b107a56f55677379cb3ae5b8da6d01c954d906bb3d1648184f08c50dbed83a2bb1b5c648e10f99fd774927fe476bc2d7b8718f46fe7ad6103b5437384b9420eecd5bf2180df3725624b1aef185de30f31f", 0xd4}, {&(0x7f0000009dc0)="cafd8c3de509c1b504989d0515b83a771238093abd464b6555c62475f6776b0de8481875ee926e0ab8c0e3ad888fd53423b2da5ef8ef664e39af568241075fb46c9b310e559a322849fa78b7c66bb339354d47f62d451ca67e22ca3a32012b0d9fbb7d471d94d86da559eb487b5c057119a28eb0563fdbc2ea4ca9a08e26c4125c2271b2a27a3e3bbcfb46c590c9bb4244d5c80f35b0f9f906224a9c1415e88d6e09918df26694cc0a4bb4f7522f17e7c5302cf8cc85fad3a79e022e1ddbf665f7cceeb40c6d0d88b2fb3fef960e38359703c22e5ecef209cf367881bf6df0831e0fc99a", 0xe4}, {&(0x7f0000009ec0)="aca74b2ba133eb99fa44a68ece4881b58fc9bf60a95e07e99262ed1351b5a08404547ee2da41962ba26edb6f6443d8422ee95ce69701359cecc60afe2597a1794a26669399da1ec3faae4ca722c37f1a58b4fb22926e09614eab8cc1aa9769ffc63e041c7adc77238c1ee20d9d07b2cbbea07f1f", 0x74}], 0x5) (async) writev(r5, &(0x7f0000009f40)=[{&(0x7f0000009b00)="b99c89a5257cc3ec8414cc2ea46d194901c330c5839df05ac956f2c40ce88fda9482485a78fe82f8c9c990165c7e35e725158524b067678ec9988002975f51523cbc840ab33442989131f6d0ca78b4725bb4e803cde8dedab96ff42086f23046266b4777a6e8b9d938556f61736e779af30ff927a76300ec8cc7d84ddff7b60cb4850993a2376367efe21187c8a7f50a3a8969c0398ea454a25e0425f74f322c76c3292aefc08877874193a2d3a2fa21d2edccba5f2fdcc5abe5467eea43c177a04794bb3abcd52dba00da582b84a803bfde5b33276bfda813f73845615790", 0xdf}, {&(0x7f0000009c00)="70398da04adf20df5f7cd35562f803a94d76f0eb891171d806f2396c33574df9fc1fe4b14ef7c51c5de433ffc110cd7465274c8ea1635f0a4e9188e9a94361aec181d27877690fd03971105fefca6d235a361b2d6976726bf85c308b773524dbe1aeb31fb9a51943669f72e76ad86dd24591245b94612163ca9d9e77e2e957ca529633571008052a5a", 0x89}, {&(0x7f0000009cc0)="c2fff8ade7b6e9a26845c583d6a9131353a2414702d1cdbe7e5dac4385472dd08d7daef777d85c23ec1627c30df5f1e79093935837883bc8d440621f54cfba05833446ae1e29a349385c3218cbcc446052b697a213de43e93c485c6219024f1695160a8246550ba1a2abe0decb2514407a6de96fde5921dc8a99c860038374728b6af3b107a56f55677379cb3ae5b8da6d01c954d906bb3d1648184f08c50dbed83a2bb1b5c648e10f99fd774927fe476bc2d7b8718f46fe7ad6103b5437384b9420eecd5bf2180df3725624b1aef185de30f31f", 0xd4}, {&(0x7f0000009dc0)="cafd8c3de509c1b504989d0515b83a771238093abd464b6555c62475f6776b0de8481875ee926e0ab8c0e3ad888fd53423b2da5ef8ef664e39af568241075fb46c9b310e559a322849fa78b7c66bb339354d47f62d451ca67e22ca3a32012b0d9fbb7d471d94d86da559eb487b5c057119a28eb0563fdbc2ea4ca9a08e26c4125c2271b2a27a3e3bbcfb46c590c9bb4244d5c80f35b0f9f906224a9c1415e88d6e09918df26694cc0a4bb4f7522f17e7c5302cf8cc85fad3a79e022e1ddbf665f7cceeb40c6d0d88b2fb3fef960e38359703c22e5ecef209cf367881bf6df0831e0fc99a", 0xe4}, {&(0x7f0000009ec0)="aca74b2ba133eb99fa44a68ece4881b58fc9bf60a95e07e99262ed1351b5a08404547ee2da41962ba26edb6f6443d8422ee95ce69701359cecc60afe2597a1794a26669399da1ec3faae4ca722c37f1a58b4fb22926e09614eab8cc1aa9769ffc63e041c7adc77238c1ee20d9d07b2cbbea07f1f", 0x74}], 0x5) socket$inet6(0xa, 0x6, 0x48) setsockopt$inet_tcp_int(r5, 0x6, 0x1, &(0x7f0000009fc0)=0x4, 0x4) getsockname$packet(r5, &(0x7f000000a000), &(0x7f000000a040)=0x14) r7 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f000000a080), 0x2, 0x0) splice(r7, &(0x7f000000a0c0), r5, &(0x7f000000a100)=0x8, 0xffffffffffffffff, 0x0) setsockopt$sock_timeval(r4, 0x1, 0x43, &(0x7f000000a140)={0x77359400}, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f000000a180)={r1}) (async) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f000000a180)={r1}) getsockname$inet6(r8, &(0x7f000000a1c0)={0xa, 0x0, 0x0, @local}, &(0x7f000000a200)=0x1c) pwrite64(r4, &(0x7f000000a240)="8b9b595f71554836b3475169b9b6f3be6c09e500062387974dc87e7efb6007756ebfa0c1b5e93e4b0b6964c175855ce377fbb866edd5e9efee61226f411de2e65c455b84a46ff83bb5935ced89aa20f2a7c867cf563e84350bd3ec320cfc1524d1a8320ec936cc8713ecd10ecfba75ca7480c5ea10333c39457046b20e5c7fa0a7710b215fdb6c855ee6f97d02acaf3d8ebb74d84b061503f97c9bccc70898b052b1235cec52bd03433ffa11c7f8cd4ee87354fed547e6596a334b85824ab6e88b295e2b4c017c73d71159da620f06a181be146e6a212f23abbdb697f73af0", 0xdf, 0x200) (async) pwrite64(r4, &(0x7f000000a240)="8b9b595f71554836b3475169b9b6f3be6c09e500062387974dc87e7efb6007756ebfa0c1b5e93e4b0b6964c175855ce377fbb866edd5e9efee61226f411de2e65c455b84a46ff83bb5935ced89aa20f2a7c867cf563e84350bd3ec320cfc1524d1a8320ec936cc8713ecd10ecfba75ca7480c5ea10333c39457046b20e5c7fa0a7710b215fdb6c855ee6f97d02acaf3d8ebb74d84b061503f97c9bccc70898b052b1235cec52bd03433ffa11c7f8cd4ee87354fed547e6596a334b85824ab6e88b295e2b4c017c73d71159da620f06a181be146e6a212f23abbdb697f73af0", 0xdf, 0x200) getsockopt(r4, 0x3, 0x3, &(0x7f000000a340)=""/177, &(0x7f000000a400)=0xb1) connect$bt_sco(r8, &(0x7f000000a440)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x1}}, 0x8) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f000000a4c0), r5) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f000000a880)={&(0x7f000000a480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f000000a840)={&(0x7f000000a500)={0x330, r9, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x64, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x46}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xde19}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xc}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_NET={0x60, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffffffffffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3d55}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x400}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80d}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x10001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10001}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xaa}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xb36}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x10}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA={0xf4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6be}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x69c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x68a5}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfd4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}]}]}, @TIPC_NLA_BEARER={0x88, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'wlan1\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}]}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x69c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x455}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffff801}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3318}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe47}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xd}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x200}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x425a}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x489}]}]}, 0x330}, 0x1, 0x0, 0x0, 0x1}, 0x20008000) (async) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f000000a880)={&(0x7f000000a480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f000000a840)={&(0x7f000000a500)={0x330, r9, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x64, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x46}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xde19}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xc}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_NET={0x60, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffffffffffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3d55}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x400}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80d}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x10001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10001}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xaa}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xb36}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x10}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA={0xf4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6be}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x69c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x68a5}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfd4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}]}]}, @TIPC_NLA_BEARER={0x88, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'wlan1\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}]}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x69c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x455}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffff801}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3318}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe47}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xd}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x200}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x425a}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x489}]}]}, 0x330}, 0x1, 0x0, 0x0, 0x1}, 0x20008000) getsockname(r8, &(0x7f000000a8c0)=@generic, &(0x7f000000a940)=0x80) (async) getsockname(r8, &(0x7f000000a8c0)=@generic, &(0x7f000000a940)=0x80) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r5, &(0x7f000000aa40)={&(0x7f000000a980)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f000000aa00)={&(0x7f000000a9c0)={0x24, 0x140f, 0x300, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'issm\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x40000) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r8, 0x89f7, &(0x7f000000aac0)={'sit0\x00', &(0x7f000000aa80)={@multicast2, 0x1, 0x0, 0x10, 0x0, [{@remote}]}}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f000000ab00)={0xffff85e6, 0x0, 0x9, 0xb3a8, 0x80000000}, 0x14) (async) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f000000ab00)={0xffff85e6, 0x0, 0x9, 0xb3a8, 0x80000000}, 0x14) ioctl$BTRFS_IOC_SPACE_INFO(r7, 0xc0109414, &(0x7f000000ab40)={0xde7, 0xc, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) (async) ioctl$BTRFS_IOC_SPACE_INFO(r7, 0xc0109414, &(0x7f000000ab40)={0xde7, 0xc, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) sendmsg$nl_route(r5, &(0x7f000001f9c0)={&(0x7f000001f900)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f000001f980)={&(0x7f000001f940)=@ipv4_delroute={0x34, 0x19, 0x1, 0x70bd25, 0x25dfdbfc, {0x2, 0x14, 0x20, 0x6, 0xfc, 0x1, 0xff, 0x7, 0xe00}, [@RTA_PREFSRC={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x26}}, @RTA_MARK={0x8, 0x10, 0x44}, @RTA_TABLE={0x8, 0xf, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x11}, 0x20000091) 6.76587235s ago: executing program 1 (id=9069): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) r3 = socket(0xa, 0x2, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r4, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r5 = socket(0x28, 0x5, 0x0) listen(r5, 0x4) setsockopt$WPAN_WANTLQI(r3, 0x0, 0x3, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet_int(r3, 0x0, 0x18, &(0x7f0000000080)=0x200, 0x4) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0xd, @mcast1, 0x2}, 0x1c) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000880)={'tunl0\x00', &(0x7f0000000bc0)={'tunl0\x00', 0x0, 0x8, 0x40, 0xda, 0x401, {{0x18, 0x4, 0x0, 0x6, 0x60, 0x68, 0x0, 0x0, 0x29, 0x0, @loopback, @rand_addr=0x64010101, {[@lsrr={0x83, 0x1b, 0x5, [@dev={0xac, 0x14, 0x14, 0x33}, @private=0xa010102, @loopback, @rand_addr=0x64010102, @multicast2, @empty]}, @generic={0xcf0811dbe31feefa, 0xd, "f78b050000000000000083"}, @end, @ssrr={0x89, 0x23, 0x7e, [@private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @multicast2, @loopback, @private=0xa010101, @remote, @remote]}]}}}}}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a00)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x4}, 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r9}, &(0x7f0000000840), &(0x7f0000000880)=r10}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, [@cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffff9}, @tail_call, @jmp={0x5, 0x0, 0x1, 0x0, 0x4, 0xfffffffffffffff9, 0x4}, @alu={0x4, 0x0, 0x6, 0x8, 0x6, 0x257ee75568a58ffb, 0xfffffffffffffffc}]}, &(0x7f00000004c0)='syzkaller\x00', 0x1, 0x6b, &(0x7f0000000740)=""/107, 0x40f00, 0x15, '\x00', r6, 0x25, r7, 0x8, &(0x7f00000008c0)={0x9, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000a80)=[r8, r4, r4, r9, r4, r4], &(0x7f0000000ac0)=[{0x2, 0x1, 0x7}, {0x5, 0x1, 0x5, 0xe}, {0x5, 0x1, 0x7, 0x8}, {0x2, 0x1, 0x8, 0x7}], 0x10, 0x2}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) r11 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r12, @ANYRES32=r11, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r12}, &(0x7f0000000000), &(0x7f00000002c0)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000009c0)={{r12}, &(0x7f0000000940), &(0x7f0000000980)=r2}, 0x20) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000180)=0x4) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="34000000100001040000004e00000000000000000f411d952f1315e35458306ea02416e9d0b750", @ANYRES32=0x0, @ANYBLOB="3f00000000000000280012800b0001006272696467650000180002800c002e0003000000030000000500070008000000"], 0x48}}, 0x0) 6.545319977s ago: executing program 3 (id=9071): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @empty}, 0x3ff, 0x0, 0x2}}, 0x2e) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x45, &(0x7f00000001c0), 0x4) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="4000000010003b1500000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="41040000015001001800128008000100677470000c00028008000100", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT=r2], 0x40}}, 0x20000881) close(0x4) 6.298077012s ago: executing program 1 (id=9072): r0 = socket(0x2b, 0x1, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r2, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000228bd7000ffdbdf25070000000c00"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x804) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x3, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xfff1, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x48040}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x1, 0xa}, {0x7}, {0x5, 0xfff1}}}, 0x24}}, 0x40004) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000000, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x5}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x5, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r9, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r11 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r10, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r11, 0xfffffdc8, &(0x7f0000000340)}, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x25) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', 0x0, 0x0, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f00000003c0)=ANY=[@ANYBLOB="800000000802110000010802110000005050505050500063c8b5e1410c98403bfda2112a0b000000000000000000640001000012bcb2fc61dca02864d19884114976094ba46f010076065c0504000600"], 0x42) setsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 6.296184976s ago: executing program 3 (id=9073): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000200), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x5, 0x603, 0x0, {}, {}, {0x0, 0x0, 0x1}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "94b1c39a3cc2fbfd"}}, 0x48}}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0xe07e872420dfefca) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r2}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000010000180100002020702500000000002020207b1af8ff00000000bfa10000000000000701000078ffffffb702000008000000b7030000000800008500000072000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000000280)={r5, 0x29}, 0x8) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001880)={r2, &(0x7f0000000840)="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", &(0x7f0000001840)=@udp=r3, 0x2}, 0x20) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) poll(0x0, 0x0, 0x101) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="020320001900000000000000000000000400030000000000000000000000000000000000000000010000000000000000030006000000000002004e207f00000100000000000000000400040000000000feffffffffffffff0000000000000000000000000000000002000100000000000000000600000000030005000000000002004e21ffffffff00a849000000000005000700000000000a004e2200000005fc0100000000000000000000000000000000000000000000020013", @ANYRES32=r6], 0xc8}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x4040000) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) 4.818918355s ago: executing program 1 (id=9077): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1e, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="18c52e1aca0008c1619456000000000081000000850000006d00000085100000040000009500000000000000"], &(0x7f0000000ac0)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600ebfb}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xffffffff}, 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{0x1}, &(0x7f0000000200), 0x0}, 0x20) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'aead\x00', 0x11, 0x0, 'aegis256-generic\x00'}, 0x58) bind$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x48000, &(0x7f0000000200)={0xa, 0x4e23, 0x3ff, @loopback, 0x10001}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000240)={0x0, 0x79, "7bf8ec152fa16d39e4553d9607191c01003f4f261459314625abafbae09b2f3f5bd1d92f8a3b28f86ac6911e26622113c1d519b46c2b1bb9b76cf8008d37a06e88b31100ae16fcb20ca3c5e2bc78d0014278c1e4c7fb4ab35e2c3ae32abc7bf205fd325765be5684ece2933f3325ec9cb8b4725605bf2722d1"}, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}}, 0x40040) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, 0x20000810) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="0e00010002", @ANYRES64=r0], 0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0x806000) mmap$xdp(&(0x7f0000001000/0x2000)=nil, 0x2000, 0xf, 0x11, r3, 0x100000000) ioctl$FS_IOC_RESVSP(r4, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9ffffc}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000003, 0x12, r3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x520, 0x320, 0x18c, 0x203, 0x0, 0x19030000, 0x450, 0x2e0, 0x2e0, 0x450, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {0x0, 0x10}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x10}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x5, 0x4}, {0x0, 0x6, 0x2}, {0xffffffffffffffff, 0x1, 0x4}, 0x9, 0x80}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f00000023c0)}, 0x20001) r6 = socket(0x400000000010, 0x3, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000d80)=ANY=[@ANYRESHEX=r7, @ANYRESHEX=r3, @ANYRES32, @ANYBLOB, @ANYBLOB="050053000100000008000500f1b9e300"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) socket$netlink(0x10, 0x3, 0x0) 4.7398029s ago: executing program 4 (id=9078): r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000040)=0x1c) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000080), &(0x7f00000000c0)=0x40) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x7b, 0xe, 0x8, 0x0, 0x45, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, 0x10, 0x10, 0x1, 0x7}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@getchain={0x3c, 0x66, 0x800, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x10, 0xfff3}, {0x1, 0x5}, {0xfff3, 0x10}}, [{0x8, 0xb, 0x9}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x69c}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x41) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000300), &(0x7f0000000340)=0xc) r3 = socket$l2tp(0x2, 0x2, 0x73) getpeername$l2tp(r3, &(0x7f0000000380)={0x2, 0x0, @local}, &(0x7f00000003c0)=0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r5, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80c2}, 0x20000000) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000540), 0x4) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0), r4) sendmsg$TIPC_CMD_SHOW_STATS(r4, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r6, 0x4, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8001) setsockopt$MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f00000006c0)={{0xa, 0x4e20, 0xfacd, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3ff}, {0xa, 0x4e23, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800}, 0xffffffffffffffff, {[0x424, 0x1, 0x10000, 0x1, 0xff, 0x11, 0x2, 0x8001]}}, 0x5c) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$GTP_CMD_DELPDP(r7, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_NET_NS_FD={0x8, 0x7, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048010}, 0x8004) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000880), r4) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r4, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x4c, r9, 0x8, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c880}, 0x20008815) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000ac0)={0xffffffffffffffff, &(0x7f00000009c0)=' \x01\x00', 0x10000, &(0x7f0000000a00)={@_ha_fsid={[0xfffffff7, 0x6]}, {0x800, 0xff, 0xa, 0x6}}, 0x8, &(0x7f0000000a40), &(0x7f0000000a80)=0x6}) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b00)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xd, '\x00', r2, r4, 0x0, 0x4, 0x2}, 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000b80)={r10, r11}, 0xc) r12 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r7, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x70, r9, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x86d22e81a66c79e4}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x70}, 0x1, 0x0, 0x0, 0x8d0}, 0x8080) setsockopt$inet6_group_source_req(r12, 0x29, 0x2f, &(0x7f0000000d00)={0x0, {{0xa, 0x4e22, 0x7, @local, 0x6}}, {{0xa, 0x4e21, 0x90, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}}}, 0x108) sendmsg$IPSET_CMD_ADD(r10, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x38, 0x9, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xff}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048080}, 0x2000880) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r12, 0x84, 0x22, &(0x7f0000000f40)={0x4, 0x14, 0x2000000, 0x0, 0x0}, &(0x7f0000000f80)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r12, 0x84, 0x73, &(0x7f0000000fc0)={r13, 0x0, 0x0, 0x0, 0x763c}, &(0x7f0000001000)=0x18) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f0000001100)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x34, r1, 0x800, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "4af615d242"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "1d1c5e21f83c025038358e6304"}]}, 0x34}, 0x1, 0x0, 0x0, 0x4080}, 0x4000004) 4.690888175s ago: executing program 2 (id=9017): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x7ffe}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4000) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@newtfilter={0x94, 0x2c, 0x800, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x0, 0x8, 0xb2, 0xa8}, 0x36}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x2) close(r4) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x20004040}, 0x44040) socket$netlink(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newtaction={0x14, 0x30, 0x871a15abc695f30d, 0x5, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x80) close(0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001a00010000000000fbdbdf250a80", @ANYRES32=0x0, @ANYRES16=r8], 0x44}, 0x1, 0x0, 0x0, 0x20000041}, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x8000004) 4.489356141s ago: executing program 4 (id=9080): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=@newsa={0x188, 0x10, 0x1, 0x0, 0x0, {{@in6=@remote, @in=@private, 0x0, 0xecdf, 0x0, 0x0, 0xa}, {@in=@broadcast, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc}, {0x3bc7, 0x7, 0x80000004}, {0x2, 0x0, 0xffffffff}, 0x70bd2d, 0x800000, 0x2, 0x4, 0x0, 0x4c}, [@algo_crypt={0x48, 0x2, {{'cbc(serpent)\x00'}}}, @algo_auth_trunc={0x4e, 0x14, {{'hmac(sha256)\x00'}, 0x10, 0x80, "aef3"}}]}, 0x188}}, 0x0) sendmsg$key(r2, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000001b80)={&(0x7f0000000a40)={0x2, 0xe, 0xe9, 0x6, 0x225, 0x0, 0x70bd2a, 0x25dfdbfc, [@sadb_key={0x10, 0x8, 0x3c0, 0x0, "00fc31481546cca8a5400b24dfe08131925f1459fa212c5a2d3d92693d97d96ec004cb5832b63275e2939f5a09b21804535ab6f7126e7a4f619dd2321936cb5e0e494d94543907fd1924ff210cd4cbe7d19a988d35603902fe3dc600c1a8f0e300097193734d40a3f3b5e9786d33073e65eed7436477c297"}, @sadb_x_nat_t_type={0x1, 0x14, 0x8}, @sadb_lifetime={0x4, 0x2, 0x101, 0x9, 0x0, 0x1}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e23}, @sadb_lifetime={0x4, 0x3, 0xde, 0x10, 0xff, 0xa8}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in6={0xa, 0x4e22, 0x5, @mcast2, 0x3}, @in={0x2, 0x4e24, @rand_addr=0x64010102}}, @sadb_x_sec_ctx={0x201, 0x18, 0x5, 0xfd, 0x1000, "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"}, @sadb_x_nat_t_type={0x1, 0x14, 0x2}]}, 0x1128}}, 0x4000880) 4.218848214s ago: executing program 2 (id=9082): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async, rerun: 32) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0x5c}, 0x1, 0x6c, 0x0, 0x4004000}, 0x0) (rerun: 32) 4.161022327s ago: executing program 0 (id=9083): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000040)={0x4, 0x80}, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x1e, 0x4, 0x0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000700)={0x80000000}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r3, 0x29, 0x10, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x5, 0x1b, 0x3, 0xe, 0x400}, &(0x7f0000000080)=0x14) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={r4, @in6={{0xa, 0x4e20, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}}, 0x78, 0x5, 0x9, 0xa, 0x4, 0x800, 0x7}, 0x9c) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000040)={0x4, 0x80}, 0x2) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket(0x1e, 0x4, 0x0) (async) epoll_create1(0x80000) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000700)={0x80000000}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) setsockopt$inet6_int(r3, 0x29, 0x10, 0x0, 0x0) (async) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x5, 0x1b, 0x3, 0xe, 0x400}, &(0x7f0000000080)=0x14) (async) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={r4, @in6={{0xa, 0x4e20, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}}, 0x78, 0x5, 0x9, 0xa, 0x4, 0x800, 0x7}, 0x9c) (async) 4.105668619s ago: executing program 3 (id=9084): socket$alg(0x26, 0x5, 0x0) (async) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="4b6a1bc33f6364cd8cfa6f0035e78321403825b1f336e4ba06f1dd123809ae8b32db03e4f1373a42a7a66637065c357825577583a5fde8a3427cc42f7d63c6cf", 0x40) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..']) (async) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..']) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0xbbeeec1bd5514191, r1, 0x0) r2 = gettid() r3 = syz_open_procfs$namespace(r2, &(0x7f0000000040)='ns/time_for_children\x00') mkdirat$cgroup(r3, &(0x7f0000000000)='syz0\x00', 0x1ff) 3.986819528s ago: executing program 2 (id=9085): socket$nl_rdma(0x10, 0x3, 0x14) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000000500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x11, 0x0, &(0x7f0000000080)="dc188619b95d02ff4284860188a86a4e08", 0x0, 0x8001ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r3 = socket$kcm(0xa, 0x922000000003, 0x11) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b040000000000000000020000004000048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000c08000340000000150900010073797a30000000000900020073797a320000000014000000110001"], 0x94}}, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x3, @loopback, 0x1, 0xfffffffe}, 0x80, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, 0x0, 0x4008014) syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), r0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000c06e90eec7ecc4000000000000"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x10, &(0x7f0000000340)=ANY=[@ANYBLOB="18080000000000000000000000000000010000005db81d63e405000000d73a5fc2bc8ff04f2f6ca96bd0105f6361f922a52a960100000000000000d745ffcb", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000550901000000000095000000000000009405080010000000bf98000000000000560800000000000085000000b4000000b7000000000000009500000000000000"], &(0x7f00000002c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x475, 0x4, 0x3}, 0x1c) r8 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r9 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x4003, 0x2, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmsg$unix(r9, &(0x7f0000000100)={0x0, 0x1d, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r9, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmsg$unix(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) recvmsg$unix(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000700)=""/4080, 0xff0}], 0x1}, 0x20) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x7fffffff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r10}, &(0x7f0000000080), &(0x7f00000000c0)=r6}, 0x20) 3.878422415s ago: executing program 0 (id=9086): recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@getqdisc={0x24, 0x26, 0x10, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xb}, {0x10, 0xd}, {0xfff3, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x20040000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="660a00000700000061114c000000000085000000cf00000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x3, 0xfffffff7}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x34008098) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x18, 0x1410, 0x100, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20100}, 0x4000) 3.858190783s ago: executing program 3 (id=9087): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x3ff, 0x2, 0x2000005}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0900300003003000000060ce902d9f0c2f0081e949b93897bc3b0000000000007d01ff020000000000000000000000050001"], 0xfdef) 3.741470217s ago: executing program 0 (id=9088): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000002700)={&(0x7f0000002240)={0xa, 0x4e22, 0x9, @remote, 0xfc}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="140000000000bb57075f2682e4a1000000000001c3fe000014010000000000002900b7d32deac4314a5ba44713e7361f45084f0c6e2ca26b78174aad4b0a63ec912db761c0ce7d9e223f173278c01a410d106a51c9e4"], 0x30}, 0x404c010) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x2, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) write(r2, &(0x7f0000000040)="1c00000021002551071c0165ff00fc020200000003100f000ee1000c", 0x1c) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000880)=@delsa={0x34, 0x11, 0x521, 0x70bd27, 0x25dfdbfb, {@in6=@private0, 0x4d2, 0x2, 0x32}, [@mark={0xc, 0x15, {0x350759, 0x9}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4050}, 0x8000) r3 = socket(0x1e, 0x4, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x38, 0x40, 0x1, 0x7fffc, 0x25dfdbfe, {0x1}, [@nested={0x4, 0x47}, @nested={0x18, 0x1, 0x0, 0x1, [@nested={0x11, 0x10, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @pid}, @generic="90b24b101d"]}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008084) sendto$inet6(r4, 0x0, 0x0, 0x24044013, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bind(0xffffffffffffffff, &(0x7f00000002c0)=@caif=@dbg={0x25, 0xc, 0x1}, 0x80) sendto$inet6(r4, &(0x7f0000000c80)="7cffa9061b2f8b082b6f69ae50430c8a8b6aa3162ba083c4a52e1ab0ac50ed4a19b1a69988000d5bed4433daaa4932dbb1cb3550dee8b23579d76ce37d574b43fca1eed8ebd38d1303240ed0d84517692128dd5aef5c4d60a6659952a1437c6f0ac3ed75806011ccbaa504f41a7e0abcf8823bc4a71ef8c52c2b297b539eaf752c56ebfe9b0542543069257dafcbf76c958d4cbf4eaaa67c5c2bd9e6518be34b56add7613ab83d389724b664e62c154e1a5aac073a53a0e8cadcf51ef495ebbcc77d5e36ff24c3f282289cc077374b714e08fbfecbdc8f14ef3fd409af4caf6fcb7d663beab335f239a1e93b399c93d7c036e1b39a7c477945f82b6dde53b1c21b590a58ba688ac4fb530d2c5b1195a127d2eaec840ab59f090d7047c278611e080cebe7b28588c11a44be99fe6f88c73441bf625b70565669997f4c3cda5afe1d6429908a69a459d35ba8c2f28076d8711f2667de749a783fac94ebd02680f20fb723c35c287a1f45064846385750665ffa74579083fbb1b1d6b7c90168252b1c5313544569203e7adb8e271a94f7413e5cfd6aa3157c4fc29bddba3683fcd032aecb513b2f27530fbefa0000000000000003c058e812d8db87de5e3eceae268b91f7d59daf77646fa4df99877dd5a9540934c7af91b96486eea628", 0x1dc, 0xbcff, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="387a3c91763e53f100100001feffffbf00010000fe88000000000000000000000000000100090000d87c1ef8932f6b3c0b222a0000000e0002000000000005", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="7f000001000000000000000000000000000004d46c00000000000000000000000000000000000000000000000000000009000000000000000600000000000000ffff0000000000001c25080000000000020000000000000083000000000000000000000000000000fcffffffffffffffff7f0000000000001f00000000000000ff0100000000000002000000fcffffff000000002abd700000000000020001fd2000000000000000480003006465666c61746500"/240], 0x138}, 0x1, 0x0, 0x0, 0xc801}, 0x10) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@broadcast, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x6}, {}, 0x0, 0x0, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x33}, 0x0, @in6=@mcast1}}, 0xe8) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r3) sendmsg$NL80211_CMD_STOP_NAN(r3, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r8, 0x300, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40050091}, 0x20040000) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x1d, 0x0, 0x2, {0x1, 0x1, 0x4}}, 0x18, &(0x7f0000000200)={&(0x7f0000000140)="fa44ba9bc1838b8c2345945eabf5afbb83c4ef52e41c912bab3882bce802488db86150ff82357ae531e71a761ad2dbf5297fcbf41aabba3e73be840d3af1fd1a974d68c2b343b65270fcb53e2cbc9ecd", 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x4814) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_FLAGS={0x0, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x5d}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x388, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x35c, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x34c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x0, 0x7, 0x0, 0x1, @tproxy={{}, @void}}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x2, 0x84}}}, 0x40c}, 0x1, 0x0, 0x0, 0x4001}, 0x40000) 3.678735099s ago: executing program 4 (id=9089): r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x44000) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x18, &(0x7f0000000400)=@req3={0xc, 0x47, 0x8004, 0x4, 0x3, 0xffffffff, 0xfffe0}, 0x1c) recvmmsg(r1, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000002d40)=[{0x0}], 0x1}, 0x9}], 0x1, 0x0, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40482, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140)) pwritev(r2, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd06000040", 0x27}], 0x2, 0x0, 0x4) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r2, 0x4058587a, &(0x7f0000000340)={{0xffffffffffffffff, &(0x7f0000000080)='+\x00', 0x0, &(0x7f00000000c0)={@align=0x79, {0x200, 0x2, 0x9, 0x8}}, 0xa, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000200)=0x400}, {[0x200, 0xee5b, 0x4, 0x80000001]}, 0x5, 0xb6, &(0x7f0000000280)=""/182}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000003c0), 0x4) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000100)={0x0, 0x3, 0x1, 0x7fff000, 0x7, 0xd67}, &(0x7f0000000440)=0x14) r4 = socket$kcm(0xa, 0x2, 0x0) socket(0x2, 0x80805, 0x0) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0xe000, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 3.511579588s ago: executing program 1 (id=9090): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)={0x4c, r1, 0x1, 0x70bd2b, 0x4000, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x3}, {0x6}}]}, 0x4c}}, 0x4040000) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000001006608000000020100180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78) 3.371705895s ago: executing program 0 (id=9091): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000000000000000000000000008510000001000000950000000000000018010000202073250000000000202020731af8ff00000000bfa100000000000007010000f8fffffdb702000008000000b703000000180028850000007a00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfce}, 0x94) 3.302063423s ago: executing program 1 (id=9092): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x2c, 0xd, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast}) close(r0) 3.261023369s ago: executing program 0 (id=9093): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x4008054) sendmsg$NFC_CMD_VENDOR(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r4, 0x2, 0x70bd26, 0x25dfdbff, {}, [@NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x80}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, 0x0, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x2}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4890}, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x16, 0x301, 0x70bd21, 0xfffffffc, {0x2e}}, 0x14}, 0x1, 0x0, 0x0, 0x200448d3}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001480), r0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_GENEVE_REMOTE={0x8, 0x2, @rand_addr=0x64010101}]}}}]}, 0x50}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_KEY(r7, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000001500)={0x28, r8, 0x101, 0x70bd25, 0xf61, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x804}, 0x844) socket$nl_generic(0x10, 0x3, 0x10) 2.005851865s ago: executing program 2 (id=9094): syz_emit_ethernet(0x32, &(0x7f0000000040)=ANY=[@ANYBLOB="04aaaaaaaaaa0180c20000000800490000240000000000739078ac1414bbac1414368907efe0000186060000000000000000"], 0x0) unshare(0x2c020400) (async) unshare(0x2c020400) r0 = socket(0x2d, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000300)={0x2d, 0xfffffffe, 0x1bffe}, 0xc) (async) connect$qrtr(r0, &(0x7f0000000300)={0x2d, 0xfffffffe, 0x1bffe}, 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=@dstopts={0x3c, 0x5, '\x00', [@calipso={0x7, 0x10, {0x0, 0x2, 0x1, 0x101, [0x7]}}, @ra, @ra={0x5, 0x2, 0x8f}, @pad1, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x7c59}]}, 0x38) r2 = socket(0x1, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000100000008000100020000002c0004800500030080ff0000050003000000000005000300000000000500030080ff000005000300050000000800020003"], 0x50}, 0x1, 0x0, 0x0, 0xc082}, 0x20004094) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000100000008000100020000002c0004800500030080ff0000050003000000000005000300000000000500030080ff000005000300050000000800020003"], 0x50}, 0x1, 0x0, 0x0, 0xc082}, 0x20004094) syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), r4) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$bt_hci(r6, &(0x7f0000000000)=ANY=[], 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r6, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r6, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000f00)={'veth1_macvtap\x00', &(0x7f0000000e80)=@ethtool_perm_addr={0x4b, 0x44}}) sendmmsg$unix(r2, &(0x7f0000001680)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)={0x2c, r8, 0x801, 0x70bd20, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008000}, 0x24048000) sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1c8, r8, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x101}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK={0x88, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0x74, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x7f, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @rand_addr=0x64010102}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x2, @private1, 0xa}}}}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffeffff}]}, @TIPC_NLA_SOCK={0x7c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xd39}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x10001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x101}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xe6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x401}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) 1.826126146s ago: executing program 1 (id=9096): r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2710, &(0x7f000001eec0)=""/102389, &(0x7f0000000000)=0xca8) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000040)=0x3dc5, 0xffffffffffffff07) r1 = socket$nl_rdma(0x10, 0x3, 0x14) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x2, 0x0) ioctl$sock_qrtr_TIOCINQ(r2, 0x5760, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f00000004c0)={0x2, 0x5, 0x0, 0x2, 0xe, 0x0, 0x70bd26, 0x7, [@sadb_address={0x5, 0x6, 0x33, 0x0, 0xe, @in6={0xa, 0x4e24, 0x1, @rand_addr=' \x01\x00', 0x8598}}, @sadb_sa={0x2, 0x1, 0x4d4, 0x0, 0x81}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0xf3, @mcast2, 0x100}}]}, 0x70}, 0x1, 0x400000000000000}, 0x0) ioctl$PPPIOCGDEBUG(r2, 0x80047441, &(0x7f0000000080)) 1.789789245s ago: executing program 4 (id=9097): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000001bc0)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x8, @mcast1}, 0x1c, &(0x7f0000001a80)=[{&(0x7f00000007c0)="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", 0x531}], 0x1, &(0x7f0000001b00)=ANY=[@ANYBLOB="980000000000000029000000360000003a0f"], 0x98}}], 0x1, 0x2000c0c0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0xb, 0x0, 0x0, 0x2, 0x20, 0x20, 0x8}, {0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1d}, {0x0, 0x0, 0x0, 0x2e0}, 0x0, 0x0, 0x1}, [@tmpl={0x84, 0x5, [{{@in6=@private2, 0x0, 0x3c}, 0x2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x1, 0x3}, {{@in6=@empty, 0x0, 0xff}, 0x2, @in=@empty, 0xffffffff, 0x1, 0x0, 0x5, 0x0, 0xfffffffe}]}]}, 0x13c}}, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@func={0x3, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x2e, 0x5f, 0x2e, 0x3302823c70bf4f84]}}, 0x0, 0x2a, 0x0, 0x1, 0xffffffff}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f0000002940)=ANY=[@ANYBLOB="180200000009000000000000000000001800000001000000000000000a0000"], &(0x7f00000005c0)='syzkaller\x00'}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r2, &(0x7f0000000440), &(0x7f0000000040)=@udp=r1}, 0x20) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, 0x0, 0x1000d, 0x0, 0x0, 0x41100}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r5, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) listen(r5, 0x204) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r1, &(0x7f00000027c0)=[{{0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000800)=""/243, 0xf3}], 0x1}, 0x5}], 0x1, 0x0, 0x0) 866.566628ms ago: executing program 4 (id=9098): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000000f06810b000000000000000001000006050001000700000006000b0080000000050001000700000006000b0002000000050001"], 0x5c}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$key(0xf, 0x3, 0x2) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000180)) write(r3, &(0x7f0000000340), 0x11000) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sendmsg$key(r1, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="020afc000700000028bd7000fe9bdf2505001a0000000000000300000000000000000000640101000000000000000000000000000a0030"], 0x38}}, 0x40408c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x10, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="911039000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071106e00000000009500000700000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x80) sendmsg$NFT_MSG_GETGEN(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x14, 0x10, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x9}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000080) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x8, 0x4) socket(0x1b, 0x3, 0x8) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b40)=@newqdisc={0x45c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r8, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x80000, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x7, 0x8, 0xf, 0x2, 0x80080001, 0x400, 0x6, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xffffe4f5, 0xd6, 0x4, 0xfffb, 0x7, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0xfffffffe, 0x2, 0x9, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0x4, 0x9, 0x7, 0x3, 0x401, 0x3, 0xfffffffe, 0xfffffffa, 0x8, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x0, 0x10001, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x3, 0x1966f9ad, 0x1ff, 0x20200, 0xb0fd, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0x80000f04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x3, 0x800002, 0x5, 0x8, 0x9, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x2, 0x4d15, 0x3, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x3, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x3, 0x4, 0x400, 0x8000, 0x3, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x7, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0xfffff394, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x3ff, 0x1, 0x1ff, 0x5, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0x1, 0x6, 0x6, 0xd, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x2, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x2]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x6, 0x0, 0x6, 0x800, 0x1, 0x6}, {0x23, 0x6, 0x0, 0x9, 0x9, 0xfffffff9}, 0x8704, 0x7, 0x1fee}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x40098}, 0x0) socket$kcm(0x11, 0x3, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_route(0x10, 0x3, 0x0) 437.517296ms ago: executing program 4 (id=9099): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x4008091}, 0x24008800) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[], &(0x7f0000000100)=""/110, 0x4e, 0x6e, 0x1, 0x6}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[], 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6400000010000104000002000004000000000000", @ANYRES32=0x0, @ANYBLOB="8bd00500b072060008000500", @ANYRES32=r4, @ANYBLOB="3c00128009000100766c616e000000002c0002800600010004000000040004801c0003800c"], 0x64}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180800ec0c0000000000000000000000180100002020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r6 = socket$igmp6(0xa, 0x3, 0x2) r7 = socket$kcm(0x2, 0xd, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) r8 = accept(0xffffffffffffffff, &(0x7f0000000380)=@in={0x2, 0x0, @local}, &(0x7f0000000400)=0x80) r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r8, &(0x7f0000000540)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x18404209}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, r9, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_I_TEI={0x8, 0x8, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x891}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) ioctl$XFS_IOC_FSGETXATTRA(r1, 0x801c582d, &(0x7f0000000580)) sendmsg$NL80211_CMD_SET_STATION(r10, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r11, 0x800, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x1}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x804}, 0x4c041) 109.759004ms ago: executing program 2 (id=9100): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) (async, rerun: 64) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r2, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (rerun: 64) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0xfffffffffffffeda, &(0x7f0000000100)={&(0x7f0000000000)=@getstats={0x1c, 0x5e, 0x1, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, 0x5}, [""]}, 0x1c}}, 0x4004010) 0s ago: executing program 0 (id=9101): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000002080), 0xe) listen(r1, 0xa) unshare(0x2a060400) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x107fff, 0x1, 0x4, 0x89, 0x0, 0xffb, 0x7, 0xb6b, 0x0, 0x4, 0x1, 0x3, 0x9, 0xff, 0x1000, 0xc, 0x3, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x9, 0x3, 0x63c, 0xe, 0x6, 0x2, 0x6, 0x1bfa, 0xb, 0x40, 0x40bed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x3, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xa, 0x1fa0860a, 0x7, 0x100aa, 0x7f, 0x2, 0x180000, 0x4003, 0x8b, 0x5, 0x2af, 0x3, 0x5, 0x2, 0x1, 0x9, 0x4, 0x7, 0x1, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10000, 0x3f6, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x0, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x4, 0x20004, 0xc50, 0x2, 0xb, 0x2, 0xd9a, 0xc8, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x5, 0x1fc, 0x1ff, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001000ffff27bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15010000000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r5, @ANYBLOB="080004"], 0x4c}, 0x1, 0x0, 0x0, 0x280c1}, 0x8000002) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r9, &(0x7f0000000240)="800000800000210ee7decd7a0003", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r8, 0x1, 0xd8, 0x6, @broadcast}, 0x14) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$XFS_IOC_GET_RESBLKS(r10, 0x80105873, &(0x7f0000000140)) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) kernel console output (not intermixed with test programs): 1004.422158][ T2349] syzkaller0: entered promiscuous mode [ 1004.441696][ T2349] syzkaller0: entered allmulticast mode [ 1004.481696][ T2361] geneve2: entered promiscuous mode [ 1004.504065][ T2361] geneve2: entered allmulticast mode [ 1004.591434][ T2376] netlink: 'syz.2.7975': attribute type 1 has an invalid length. [ 1004.612554][ T2376] netlink: 'syz.2.7975': attribute type 1 has an invalid length. [ 1008.506222][ T2403] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7982'. [ 1008.837104][ T2404] bond2 (unregistering): Released all slaves [ 1009.027020][ T2426] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1009.259242][ T2436] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7989'. [ 1009.288474][ T2436] pim6reg: entered allmulticast mode [ 1009.472968][ T2454] netlink: 'syz.1.7993': attribute type 3 has an invalid length. [ 1009.500039][ T2454] netlink: 'syz.1.7993': attribute type 1 has an invalid length. [ 1009.526571][ T2456] wg1 speed is unknown, defaulting to 1000 [ 1009.544968][ T2454] netlink: 232 bytes leftover after parsing attributes in process `syz.1.7993'. [ 1009.657955][ T2451] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7990'. [ 1009.686028][ T2451] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7990'. [ 1009.686780][ T2461] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7994'. [ 1009.761496][ T2451] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7990'. [ 1009.793077][ T2451] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7990'. [ 1009.871358][ T2469] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7995'. [ 1009.892283][ T2468] netlink: 136 bytes leftover after parsing attributes in process `syz.0.7997'. [ 1010.084754][ T2483] netlink: 'syz.2.7998': attribute type 4 has an invalid length. [ 1010.156585][ T2489] netlink: 'syz.2.7998': attribute type 4 has an invalid length. [ 1011.997069][ T2587] atomic_op ffff88804477d998 conn xmit_atomic 0000000000000000 [ 1012.132956][ T2600] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 1013.176978][T22594] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1013.198460][T22594] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1013.224275][T22594] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1013.243473][T22594] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1014.454159][ T2743] __nla_validate_parse: 2 callbacks suppressed [ 1014.454180][ T2743] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8039'. [ 1014.621657][ T2749] tap0: tun_chr_ioctl cmd 1074025692 [ 1014.708715][ T2760] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8045'. [ 1015.119384][ T2776] netlink: 'syz.1.8049': attribute type 4 has an invalid length. [ 1015.350562][ T2793] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8051'. [ 1015.586758][ T2802] veth11: entered allmulticast mode [ 1015.627127][ T2802] bond11: (slave veth11): Enslaving as an active interface with an up link [ 1015.659289][ T2801] tipc: Enabling of bearer rejected, failed to enable media [ 1015.695952][ T2793] bond11 (unregistering): (slave veth11): Releasing backup interface [ 1015.745337][ T2793] bond11 (unregistering): Released all slaves [ 1015.829549][ T2815] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8056'. [ 1015.944576][ T2822] syzkaller0: entered promiscuous mode [ 1015.955649][ T2822] syzkaller0: entered allmulticast mode [ 1015.981513][ T2822] tc action pedit offset 4096 out of bounds [ 1015.990537][ T2822] tc action pedit offset 4096 out of bounds [ 1015.996547][ T2822] tc action pedit offset 4096 out of bounds [ 1016.002535][ T2822] tc action pedit offset 4096 out of bounds [ 1016.008516][ T2822] tc action pedit offset 4096 out of bounds [ 1016.014472][ T2822] tc action pedit offset 4096 out of bounds [ 1016.020392][ T2822] tc action pedit offset 4096 out of bounds [ 1016.026354][ T2822] tc action pedit offset 4096 out of bounds [ 1016.032316][ T2822] tc action pedit offset 4096 out of bounds [ 1016.038303][ T2822] tc action pedit offset 4096 out of bounds [ 1016.044389][ T2822] TC_ACT_REPEAT abuse ? [ 1016.282120][ T2841] tap0: tun_chr_ioctl cmd 1074025681 [ 1016.296761][ T2841] tap0: tun_chr_ioctl cmd 1076385921 [ 1016.337854][ T2841] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8063'. [ 1016.522417][ T2868] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8067'. [ 1017.193059][ T2885] netlink: 52 bytes leftover after parsing attributes in process `syz.1.8069'. [ 1017.202134][ T2885] netlink: 'syz.1.8069': attribute type 1 has an invalid length. [ 1019.597699][ T2876] netlink: 56 bytes leftover after parsing attributes in process `syz.4.8068'. [ 1019.678617][ T2884] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8069'. [ 1019.774612][ T2891] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8071'. [ 1019.997047][ T2903] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8073'. [ 1020.206401][ T2912] netlink: 'syz.0.8077': attribute type 1 has an invalid length. [ 1020.354456][ T2912] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1020.464449][ T2921] macvlan21: entered promiscuous mode [ 1020.524993][ T2921] macvlan21: entered allmulticast mode [ 1020.555605][ T2921] bond2: entered allmulticast mode [ 1020.576430][ T2921] bond2: entered promiscuous mode [ 1020.595709][ T2921] 8021q: adding VLAN 0 to HW filter on device macvlan21 [ 1020.641017][ T2921] team0: Port device macvlan21 added [ 1020.988186][ T2944] wg1 speed is unknown, defaulting to 1000 [ 1021.085579][ T2949] netlink: 'syz.0.8089': attribute type 39 has an invalid length. [ 1021.208116][ T2957] syzkaller1: entered promiscuous mode [ 1021.225967][ T2957] syzkaller1: entered allmulticast mode [ 1021.637090][ T2968] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8095'. [ 1021.683682][ T2968] openvswitch: netlink: Flow actions attr not present in new flow. [ 1022.090679][ T2983] tipc: Enabling of bearer rejected, already enabled [ 1022.228985][ T2983] tipc: Resetting bearer [ 1022.394295][ T2991] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.8103'. [ 1022.708224][ T3001] netlink: 5220 bytes leftover after parsing attributes in process `syz.3.8107'. [ 1022.719509][ T3001] netlink: 964 bytes leftover after parsing attributes in process `syz.3.8107'. [ 1022.731988][ T3001] netlink: 5220 bytes leftover after parsing attributes in process `syz.3.8107'. [ 1022.973909][ T3003] syzkaller0: entered promiscuous mode [ 1022.979580][ T3003] syzkaller0: entered allmulticast mode [ 1023.072901][ T3003] netlink: 64 bytes leftover after parsing attributes in process `syz.0.8108'. [ 1026.427145][ T3041] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8116'. [ 1026.572768][ T3052] openvswitch: netlink: ct_state flags ffffffff unsupported [ 1026.797409][ T29] audit: type=1800 audit(1779847783.405:18): pid=3064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.8122" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2059 res=0 errno=0 [ 1026.816691][ T3060] IPv6: sit1: Disabled Multicast RS [ 1026.848228][ T3060] ip6t_srh: unknown srh invflags 4000 [ 1026.887682][ T3060] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8120'. [ 1027.001062][ T3073] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8125'. [ 1027.054213][ T3073] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8125'. [ 1027.714978][ T3101] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8135'. [ 1027.810937][ T3101] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8135'. [ 1027.898372][ T3114] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8139'. [ 1027.916216][ T3114] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8139'. [ 1028.021967][ T3114] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8139'. [ 1028.026881][T22076] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1028.066922][T22076] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1028.083779][ T3114] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8139'. [ 1028.105933][T22076] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1028.131957][T22076] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1028.250632][ T3127] syzkaller1: entered promiscuous mode [ 1028.265297][ T3127] syzkaller1: entered allmulticast mode [ 1028.888955][ T3151] wg1 speed is unknown, defaulting to 1000 [ 1028.952584][ T3156] netlink: 'syz.2.8151': attribute type 1 has an invalid length. [ 1030.756029][ T3203] netlink: 'syz.3.8163': attribute type 1 has an invalid length. [ 1031.294617][ T5630] Bluetooth: hci2: command 0x0405 tx timeout [ 1031.425348][ T3256] netlink: 'syz.0.8176': attribute type 1 has an invalid length. [ 1031.528698][ T3260] __nla_validate_parse: 13 callbacks suppressed [ 1031.528719][ T3260] netlink: 44 bytes leftover after parsing attributes in process `syz.4.8177'. [ 1031.584645][ T3260] netlink: 43 bytes leftover after parsing attributes in process `syz.4.8177'. [ 1031.612711][ T3260] netlink: 'syz.4.8177': attribute type 6 has an invalid length. [ 1031.647489][ T3260] netlink: 'syz.4.8177': attribute type 5 has an invalid length. [ 1031.663538][ T5759] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 1031.685887][ T3260] netlink: 43 bytes leftover after parsing attributes in process `syz.4.8177'. [ 1031.842974][T22051] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 1031.865095][ T3272] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8182'. [ 1031.876667][ T3272] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8182'. [ 1031.887922][ T3270] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8181'. [ 1031.909413][ T3272] netlink: 'syz.0.8182': attribute type 18 has an invalid length. [ 1031.926508][ T3270] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8181'. [ 1031.936546][ T3275] netlink: 'syz.0.8182': attribute type 30 has an invalid length. [ 1032.006174][ T3281] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8184'. [ 1032.136739][ T3278] kthread_run failed with err -4 [ 1032.157244][ T3287] FAULT_INJECTION: forcing a failure. [ 1032.157244][ T3287] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1032.185165][ T3287] CPU: 0 UID: 0 PID: 3287 Comm: syz.2.8186 Not tainted syzkaller #0 PREEMPT(full) [ 1032.185194][ T3287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1032.185208][ T3287] Call Trace: [ 1032.185216][ T3287] [ 1032.185227][ T3287] dump_stack_lvl+0xe8/0x150 [ 1032.185257][ T3287] should_fail_ex+0x412/0x560 [ 1032.185286][ T3287] _copy_to_user+0x31/0xb0 [ 1032.185315][ T3287] bpf_test_finish+0x1db/0x6b0 [ 1032.185349][ T3287] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 1032.185379][ T3287] ? __pfx_bpf_test_finish+0x10/0x10 [ 1032.185413][ T3287] ? _copy_from_user+0x94/0xb0 [ 1032.185439][ T3287] ? bpf_test_init+0x113/0x150 [ 1032.185466][ T3287] bpf_prog_test_run_xdp+0x8fa/0x1160 [ 1032.185512][ T3287] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1032.185545][ T3287] ? __fget_files+0x2a/0x420 [ 1032.185577][ T3287] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1032.185604][ T3287] bpf_prog_test_run+0x2c7/0x340 [ 1032.185631][ T3287] __sys_bpf+0x643/0x950 [ 1032.185664][ T3287] ? __pfx___sys_bpf+0x10/0x10 [ 1032.185712][ T3287] ? ksys_write+0x242/0x270 [ 1032.185746][ T3287] ? __pfx_ksys_write+0x10/0x10 [ 1032.185774][ T3287] ? __pfx_do_sync_core+0x10/0x10 [ 1032.185806][ T3287] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1032.185829][ T3287] __x64_sys_bpf+0x7c/0x90 [ 1032.185859][ T3287] do_syscall_64+0x174/0xf80 [ 1032.185885][ T3287] ? clear_bhb_loop+0x40/0x90 [ 1032.185911][ T3287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1032.185932][ T3287] RIP: 0033:0x7f8cf479ce59 [ 1032.185952][ T3287] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1032.185971][ T3287] RSP: 002b:00007f8cf5666028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1032.185993][ T3287] RAX: ffffffffffffffda RBX: 00007f8cf4a15fa0 RCX: 00007f8cf479ce59 [ 1032.186009][ T3287] RDX: 0000000000000050 RSI: 00002000000008c0 RDI: 000000000000000a [ 1032.186023][ T3287] RBP: 00007f8cf5666090 R08: 0000000000000000 R09: 0000000000000000 [ 1032.186036][ T3287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1032.186048][ T3287] R13: 00007f8cf4a16038 R14: 00007f8cf4a15fa0 R15: 00007ffdeeee4d58 [ 1032.186084][ T3287] [ 1032.231547][ T3284] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1032.491585][ T29] audit: type=1804 audit(1779847789.095:19): pid=3290 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.8187" name="/newroot/465/cgroup.controllers" dev="tmpfs" ino=2405 res=1 errno=0 [ 1032.577197][ T3295] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8189'. [ 1032.583893][ T29] audit: type=1800 audit(1779847789.095:20): pid=3290 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.8187" name="cgroup.controllers" dev="tmpfs" ino=2405 res=0 errno=0 [ 1032.632545][T22051] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1032.648883][T22051] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1032.660293][ T5759] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 1032.682900][T22051] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1032.723398][T22051] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1032.880038][ T3308] 8021q: adding VLAN 0 to HW filter on device macvlan7 [ 1032.902613][T22051] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 1032.911042][T22051] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 1033.023530][T10874] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 1033.048052][ T3312] netlink: 'syz.2.8196': attribute type 3 has an invalid length. [ 1033.063570][ T3312] netlink: 'syz.2.8196': attribute type 3 has an invalid length. [ 1033.074198][ T3316] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8198'. [ 1033.084655][ T3314] pim6reg1: entered promiscuous mode [ 1033.090036][ T3314] pim6reg1: entered allmulticast mode [ 1033.223533][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1033.238093][ T3312] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 1033.260827][ T3323] FAULT_INJECTION: forcing a failure. [ 1033.260827][ T3323] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1033.281696][ T3323] CPU: 1 UID: 0 PID: 3323 Comm: syz.1.8199 Not tainted syzkaller #0 PREEMPT(full) [ 1033.281723][ T3323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1033.281737][ T3323] Call Trace: [ 1033.281744][ T3323] [ 1033.281751][ T3323] dump_stack_lvl+0xe8/0x150 [ 1033.281777][ T3323] should_fail_ex+0x412/0x560 [ 1033.281800][ T3323] _copy_to_user+0x31/0xb0 [ 1033.281823][ T3323] bpf_test_finish+0x22c/0x6b0 [ 1033.281851][ T3323] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 1033.281876][ T3323] ? __pfx_bpf_test_finish+0x10/0x10 [ 1033.281905][ T3323] ? _copy_from_user+0x94/0xb0 [ 1033.281929][ T3323] ? bpf_test_init+0x113/0x150 [ 1033.281956][ T3323] bpf_prog_test_run_xdp+0x8fa/0x1160 [ 1033.282001][ T3323] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1033.282032][ T3323] ? __fget_files+0x2a/0x420 [ 1033.282063][ T3323] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1033.282090][ T3323] bpf_prog_test_run+0x2c7/0x340 [ 1033.282115][ T3323] __sys_bpf+0x643/0x950 [ 1033.282148][ T3323] ? __pfx___sys_bpf+0x10/0x10 [ 1033.282196][ T3323] ? ksys_write+0x242/0x270 [ 1033.282228][ T3323] ? __pfx_ksys_write+0x10/0x10 [ 1033.282262][ T3323] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1033.282285][ T3323] __x64_sys_bpf+0x7c/0x90 [ 1033.282313][ T3323] do_syscall_64+0x174/0xf80 [ 1033.282335][ T3323] ? trace_irq_disable+0x3b/0x140 [ 1033.282365][ T3323] ? clear_bhb_loop+0x40/0x90 [ 1033.282392][ T3323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1033.282412][ T3323] RIP: 0033:0x7fd08079ce59 [ 1033.282432][ T3323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1033.282450][ T3323] RSP: 002b:00007fd0816cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1033.282472][ T3323] RAX: ffffffffffffffda RBX: 00007fd080a15fa0 RCX: 00007fd08079ce59 [ 1033.282487][ T3323] RDX: 0000000000000050 RSI: 00002000000008c0 RDI: 000000000000000a [ 1033.282500][ T3323] RBP: 00007fd0816cb090 R08: 0000000000000000 R09: 0000000000000000 [ 1033.282513][ T3323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1033.282537][ T3323] R13: 00007fd080a16038 R14: 00007fd080a15fa0 R15: 00007ffcfff549a8 [ 1033.282573][ T3323] [ 1033.629134][ T3328] netlink: 'syz.3.8201': attribute type 10 has an invalid length. [ 1033.812445][ T3337] FAULT_INJECTION: forcing a failure. [ 1033.812445][ T3337] name failslab, interval 1, probability 0, space 0, times 0 [ 1033.825471][ T3337] CPU: 1 UID: 0 PID: 3337 Comm: syz.2.8204 Not tainted syzkaller #0 PREEMPT(full) [ 1033.825505][ T3337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1033.825518][ T3337] Call Trace: [ 1033.825526][ T3337] [ 1033.825536][ T3337] dump_stack_lvl+0xe8/0x150 [ 1033.825565][ T3337] should_fail_ex+0x412/0x560 [ 1033.825594][ T3337] should_failslab+0xa8/0x100 [ 1033.825616][ T3337] __kmalloc_cache_node_noprof+0x8a/0x6b0 [ 1033.825646][ T3337] ? trace_kmalloc+0x2a/0xf0 [ 1033.825672][ T3337] ? page_pool_create_percpu+0x76/0xc80 [ 1033.825708][ T3337] page_pool_create_percpu+0x76/0xc80 [ 1033.825737][ T3337] ? __kvmalloc_node_noprof+0x393/0x8a0 [ 1033.825773][ T3337] bpf_test_run_xdp_live+0x23d/0x1cf0 [ 1033.825807][ T3337] ? bpf_dispatcher_change_prog+0xae0/0xd70 [ 1033.825849][ T3337] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1033.825884][ T3337] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 1033.825933][ T3337] ? 0xffffffffa0201a08 [ 1033.825952][ T3337] ? 0xffffffffa02072fc [ 1033.825967][ T3337] ? 0xffffffffa020764c [ 1033.825984][ T3337] ? 0xffffffffa0207690 [ 1033.826000][ T3337] ? 0xffffffffa0207d8c [ 1033.826043][ T3337] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 1033.826082][ T3337] ? _copy_from_user+0x94/0xb0 [ 1033.826108][ T3337] ? bpf_test_init+0x113/0x150 [ 1033.826130][ T3337] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1033.826159][ T3337] bpf_prog_test_run_xdp+0x81c/0x1160 [ 1033.826200][ T3337] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1033.826231][ T3337] ? __fget_files+0x2a/0x420 [ 1033.826262][ T3337] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1033.826289][ T3337] bpf_prog_test_run+0x2c7/0x340 [ 1033.826314][ T3337] __sys_bpf+0x643/0x950 [ 1033.826346][ T3337] ? __pfx___sys_bpf+0x10/0x10 [ 1033.826394][ T3337] ? ksys_write+0x242/0x270 [ 1033.826425][ T3337] ? __pfx_ksys_write+0x10/0x10 [ 1033.826458][ T3337] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1033.826480][ T3337] __x64_sys_bpf+0x7c/0x90 [ 1033.826517][ T3337] do_syscall_64+0x174/0xf80 [ 1033.826539][ T3337] ? trace_irq_disable+0x3b/0x140 [ 1033.826568][ T3337] ? clear_bhb_loop+0x40/0x90 [ 1033.826593][ T3337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1033.826613][ T3337] RIP: 0033:0x7f8cf479ce59 [ 1033.826631][ T3337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1033.826649][ T3337] RSP: 002b:00007f8cf5666028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1033.826671][ T3337] RAX: ffffffffffffffda RBX: 00007f8cf4a15fa0 RCX: 00007f8cf479ce59 [ 1033.826686][ T3337] RDX: 0000000000000050 RSI: 00002000000008c0 RDI: 000000000000000a [ 1033.826699][ T3337] RBP: 00007f8cf5666090 R08: 0000000000000000 R09: 0000000000000000 [ 1033.826711][ T3337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1033.826723][ T3337] R13: 00007f8cf4a16038 R14: 00007f8cf4a15fa0 R15: 00007ffdeeee4d58 [ 1033.826757][ T3337] [ 1033.901902][ C0] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 1034.429463][ T3351] netlink: 'syz.2.8209': attribute type 11 has an invalid length. [ 1034.641757][ T3355] ip6gre1: entered promiscuous mode [ 1034.647928][ T3355] ip6gre1: entered allmulticast mode [ 1034.917717][ T3362] dvmrp1: entered allmulticast mode [ 1034.998993][ T3368] FAULT_INJECTION: forcing a failure. [ 1034.998993][ T3368] name failslab, interval 1, probability 0, space 0, times 0 [ 1035.052972][ T3368] CPU: 1 UID: 0 PID: 3368 Comm: syz.1.8216 Not tainted syzkaller #0 PREEMPT(full) [ 1035.053000][ T3368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1035.053012][ T3368] Call Trace: [ 1035.053021][ T3368] [ 1035.053029][ T3368] dump_stack_lvl+0xe8/0x150 [ 1035.053058][ T3368] should_fail_ex+0x412/0x560 [ 1035.053085][ T3368] should_failslab+0xa8/0x100 [ 1035.053107][ T3368] __kvmalloc_node_noprof+0x178/0x8a0 [ 1035.053141][ T3368] ? page_pool_create_percpu+0x304/0xc80 [ 1035.053171][ T3368] ? page_pool_create_percpu+0xaf/0xc80 [ 1035.053205][ T3368] page_pool_create_percpu+0x304/0xc80 [ 1035.053244][ T3368] bpf_test_run_xdp_live+0x23d/0x1cf0 [ 1035.053278][ T3368] ? bpf_dispatcher_change_prog+0xae0/0xd70 [ 1035.053332][ T3368] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 1035.053399][ T3368] ? 0xffffffffa0201a08 [ 1035.053416][ T3368] ? 0xffffffffa02036dc [ 1035.053443][ T3368] ? 0xffffffffa020764c [ 1035.053460][ T3368] ? 0xffffffffa0207690 [ 1035.053476][ T3368] ? 0xffffffffa0207d8c [ 1035.053520][ T3368] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 1035.053560][ T3368] ? _copy_from_user+0x94/0xb0 [ 1035.053586][ T3368] ? bpf_test_init+0x113/0x150 [ 1035.053608][ T3368] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1035.053637][ T3368] bpf_prog_test_run_xdp+0x81c/0x1160 [ 1035.053679][ T3368] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1035.053709][ T3368] ? __fget_files+0x2a/0x420 [ 1035.053738][ T3368] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1035.053765][ T3368] bpf_prog_test_run+0x2c7/0x340 [ 1035.053791][ T3368] __sys_bpf+0x643/0x950 [ 1035.053824][ T3368] ? __pfx___sys_bpf+0x10/0x10 [ 1035.053871][ T3368] ? ksys_write+0x242/0x270 [ 1035.053902][ T3368] ? __pfx_ksys_write+0x10/0x10 [ 1035.053937][ T3368] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1035.053959][ T3368] __x64_sys_bpf+0x7c/0x90 [ 1035.053988][ T3368] do_syscall_64+0x174/0xf80 [ 1035.054010][ T3368] ? trace_irq_disable+0x3b/0x140 [ 1035.054041][ T3368] ? clear_bhb_loop+0x40/0x90 [ 1035.054068][ T3368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1035.054088][ T3368] RIP: 0033:0x7fd08079ce59 [ 1035.054107][ T3368] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1035.054125][ T3368] RSP: 002b:00007fd0816cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1035.054165][ T3368] RAX: ffffffffffffffda RBX: 00007fd080a15fa0 RCX: 00007fd08079ce59 [ 1035.054181][ T3368] RDX: 0000000000000050 RSI: 00002000000008c0 RDI: 000000000000000a [ 1035.054194][ T3368] RBP: 00007fd0816cb090 R08: 0000000000000000 R09: 0000000000000000 [ 1035.054208][ T3368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1035.054220][ T3368] R13: 00007fd080a16038 R14: 00007fd080a15fa0 R15: 00007ffcfff549a8 [ 1035.054256][ T3368] [ 1035.346359][ T3368] page_pool_create_percpu() gave up with errno -12 [ 1035.842336][ T3381] openvswitch: netlink: IPv4 tunnel dst address is zero [ 1036.893358][ C1] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 1036.922751][ T3414] __nla_validate_parse: 8 callbacks suppressed [ 1036.922774][ T3414] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8233'. [ 1037.264201][ T3425] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8237'. [ 1037.382609][ T3425] bond6: option broadcast_neighbor: invalid value (30) [ 1037.434370][ T3425] bond6 (unregistering): Released all slaves [ 1037.449599][ T3430] netlink: 64 bytes leftover after parsing attributes in process `syz.3.8238'. [ 1037.596612][ T3428] mac80211_hwsim hwsim66 syzkaller0: entered promiscuous mode [ 1037.627816][ T3428] mac80211_hwsim hwsim66 syzkaller0: entered allmulticast mode [ 1037.698724][ T3428] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8239'. [ 1037.716903][ T3438] netlink: 'syz.3.8238': attribute type 3 has an invalid length. [ 1037.738418][ T3428] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8239'. [ 1037.758110][ T3438] netlink: 3 bytes leftover after parsing attributes in process `syz.3.8238'. [ 1037.848651][ T3434] bond10 (unregistering): Released all slaves [ 1037.960853][ T3447] netlink: 724 bytes leftover after parsing attributes in process `syz.2.8245'. [ 1037.993863][ T3447] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8245'. [ 1038.014938][ T3447] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8245'. [ 1038.038877][ T3447] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8245'. [ 1038.321528][ T3458] tipc: Enabled bearer , priority 0 [ 1038.608457][ T3458] syzkaller0: entered promiscuous mode [ 1038.624042][ T3458] syzkaller0: entered allmulticast mode [ 1038.659805][ T3458] tipc: Resetting bearer [ 1038.847006][ T3462] bond6 (unregistering): Released all slaves [ 1039.224819][T22076] tipc: Resetting bearer [ 1039.234447][ T3478] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 1039.244252][ T3457] tipc: Resetting bearer [ 1042.373929][ T3457] tipc: Disabling bearer [ 1042.401694][T11970] tipc: Node number set to 1367109969 [ 1042.596775][ T3505] __nla_validate_parse: 2 callbacks suppressed [ 1042.596796][ T3505] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8260'. [ 1042.620043][T22607] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1042.630488][ T3506] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8259'. [ 1042.630883][T22607] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1042.680856][ T3510] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8260'. [ 1043.112110][T22071] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1043.125915][T22071] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1043.241003][ T3546] sctp: [Deprecated]: syz.2.8271 (pid 3546) Use of int in max_burst socket option. [ 1043.241003][ T3546] Use struct sctp_assoc_value instead [ 1043.438810][ T3554] debugfs: '1ùà^!‚Y‡°”õËí [ 1043.438810][ T3554] 3ìUH†5rºBnœæ\' already exists in 'ieee80211' [ 1043.591336][ T3558] macvlan0: entered promiscuous mode [ 1043.713039][ T3559] netlink: 'syz.2.8275': attribute type 4 has an invalid length. [ 1043.736054][ T3559] netlink: 'syz.2.8275': attribute type 4 has an invalid length. [ 1043.775602][ T3562] netlink: 'syz.2.8275': attribute type 4 has an invalid length. [ 1043.803223][ T3562] netlink: 'syz.2.8275': attribute type 4 has an invalid length. [ 1043.820034][ T3570] netlink: 'syz.3.8277': attribute type 1 has an invalid length. [ 1043.952686][ T3570] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1044.235819][ T3583] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1044.243258][ T3583] IPv6: NLM_F_CREATE should be set when creating new route [ 1044.250557][ T3583] IPv6: NLM_F_CREATE should be set when creating new route [ 1044.364453][ T3594] xt_bpf: check failed: parse error [ 1044.767842][ T3611] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8286'. [ 1044.806683][ T3611] veth0_macvtap: left promiscuous mode [ 1045.373388][ C1] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 1045.439896][ T3626] syzkaller1: entered promiscuous mode [ 1045.462727][ T3626] syzkaller1: entered allmulticast mode [ 1046.028536][ T3650] netlink: 'syz.3.8298': attribute type 1 has an invalid length. [ 1046.057873][ T3650] netlink: 88 bytes leftover after parsing attributes in process `syz.3.8298'. [ 1046.073470][ T3650] netlink: 1 bytes leftover after parsing attributes in process `syz.3.8298'. [ 1046.105532][ T3650] netlink: 'syz.3.8298': attribute type 1 has an invalid length. [ 1046.128467][ T3650] netlink: 634 bytes leftover after parsing attributes in process `syz.3.8298'. [ 1046.129496][ T3654] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.8301'. [ 1046.523636][ T3652] macvtap1: left promiscuous mode [ 1046.529090][ T5759] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1046.539118][ T3652] team0: left promiscuous mode [ 1046.567521][ T3652] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1046.589509][ T3652] veth11: left promiscuous mode [ 1046.599874][ T3652] batadv2: left promiscuous mode [ 1046.621731][ T3652] macvlan21: left promiscuous mode [ 1046.627386][ T3652] bond2: left promiscuous mode [ 1046.641733][ T3652] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1046.674952][T22071] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1046.699900][T22071] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1046.745470][T22071] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1046.759914][T22071] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1046.912162][ T3673] syzkaller1: entered promiscuous mode [ 1046.935983][ T3673] syzkaller1: entered allmulticast mode [ 1046.973704][ T5759] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1047.391198][ T3695] xt_TCPMSS: Only works on TCP SYN packets [ 1047.406907][ T3693] xt_TCPMSS: Only works on TCP SYN packets [ 1047.616504][ T3706] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1048.250602][ T3724] netlink: 'syz.3.8321': attribute type 9 has an invalid length. [ 1048.276836][ T3724] netlink: 'syz.3.8321': attribute type 6 has an invalid length. [ 1048.294631][ T3724] netlink: 'syz.3.8321': attribute type 7 has an invalid length. [ 1048.318184][ T3731] syzkaller1: entered promiscuous mode [ 1048.332884][ T3731] syzkaller1: entered allmulticast mode [ 1048.717851][ T3740] bond9: entered promiscuous mode [ 1048.724597][ T3740] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1048.771423][ T3740] netlink: zone id is out of range [ 1048.778287][ T3740] netlink: zone id is out of range [ 1048.784035][ T3740] netlink: zone id is out of range [ 1048.797475][ T3740] netlink: zone id is out of range [ 1048.802693][ T3740] netlink: zone id is out of range [ 1049.079359][ T3753] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8330'. [ 1049.175574][ T3753] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1049.237219][ T3757] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8330'. [ 1049.270049][ T3757] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 1049.359291][ T3764] validate_nla: 1 callbacks suppressed [ 1049.359313][ T3764] netlink: 'syz.0.8334': attribute type 9 has an invalid length. [ 1049.426602][ T3769] netlink: 'syz.0.8334': attribute type 9 has an invalid length. [ 1049.511306][ T3780] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8335'. [ 1049.772136][ T3790] openvswitch: netlink: Unknown nsh attribute 0 [ 1049.808936][ T3792] netlink: 'syz.1.8341': attribute type 1 has an invalid length. [ 1049.839834][ T3790] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1049.951640][ T3803] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8341'. [ 1050.002485][ T3792] bond6: entered promiscuous mode [ 1050.030043][ T3792] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1050.098371][ T3804] wg1 speed is unknown, defaulting to 1000 [ 1050.308343][ T3814] netlink: 'syz.1.8346': attribute type 6 has an invalid length. [ 1050.529537][ T3827] netlink: 'syz.2.8350': attribute type 4 has an invalid length. [ 1050.628057][ T3835] xt_CT: No such helper "snmp" [ 1050.748495][ T3833] syzkaller0: entered promiscuous mode [ 1050.754297][ T3833] syzkaller0: entered allmulticast mode [ 1051.452051][ T3873] syzkaller0: entered promiscuous mode [ 1051.459664][ T3873] syzkaller0: entered allmulticast mode [ 1051.572962][ T3879] netlink: 'syz.0.8366': attribute type 3 has an invalid length. [ 1051.582690][ T3879] netlink: 666 bytes leftover after parsing attributes in process `syz.0.8366'. [ 1051.619753][ T3877] netlink: 'syz.3.8367': attribute type 1 has an invalid length. [ 1051.810630][ T3887] bond11: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1051.827888][ T3893] netlink: 252 bytes leftover after parsing attributes in process `syz.1.8370'. [ 1051.862883][ T3887] bond11: (slave vxcan3): Error -95 calling set_mac_address [ 1051.960320][ T3877] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1051.980310][ T3877] syzkaller1: Refused to change device type [ 1052.116063][ T3906] sctp: [Deprecated]: syz.1.8374 (pid 3906) Use of int in maxseg socket option. [ 1052.116063][ T3906] Use struct sctp_assoc_value instead [ 1052.437322][ T3919] netlink: 'syz.1.8379': attribute type 1 has an invalid length. [ 1052.707100][ T3928] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8382'. [ 1052.840072][ T3933] netlink: 'syz.1.8381': attribute type 2 has an invalid length. [ 1052.884657][ T3933] netlink: 'syz.1.8381': attribute type 2 has an invalid length. [ 1053.330703][ T3952] netlink: 224 bytes leftover after parsing attributes in process `syz.0.8388'. [ 1053.353530][ T3952] NCSI netlink: No device for ifindex 0 [ 1053.591238][ T3956] netlink: 51 bytes leftover after parsing attributes in process `syz.2.8389'. [ 1053.775824][ T3961] x_tables: duplicate underflow at hook 4 [ 1054.044340][ T3972] syzkaller1: entered promiscuous mode [ 1054.057728][ T3972] syzkaller1: entered allmulticast mode [ 1054.346396][ T3986] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8397'. [ 1054.536733][ T3993] can: request_module (can-proto-0) failed. [ 1054.640924][ T4005] validate_nla: 1 callbacks suppressed [ 1054.640944][ T4005] netlink: 'syz.2.8402': attribute type 1 has an invalid length. [ 1055.166814][ T4030] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8409'. [ 1055.207806][ T4027] netlink: 'syz.0.8408': attribute type 5 has an invalid length. [ 1055.245050][ T4031] netlink: 'syz.0.8408': attribute type 5 has an invalid length. [ 1055.347721][ T4042] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8409'. [ 1055.386640][ T4033] syzkaller1: entered promiscuous mode [ 1055.400732][ T4033] syzkaller1: entered allmulticast mode [ 1055.909952][ T4075] netlink: 11562 bytes leftover after parsing attributes in process `syz.2.8413'. [ 1056.330548][ T4095] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8421'. [ 1056.341690][ T4095] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8421'. [ 1056.378945][ T4096] batman_adv: batadv0: Adding interface: macvlan10 [ 1056.386474][ T4096] batman_adv: batadv0: The MTU of interface macvlan10 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1056.415308][ T4096] batman_adv: batadv0: Interface activated: macvlan10 [ 1058.635058][ T4056] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1058.727383][ T4081] netlink: 'syz.0.8416': attribute type 11 has an invalid length. [ 1058.741719][ T4081] netlink: 'syz.0.8416': attribute type 5 has an invalid length. [ 1058.750274][ T4081] netlink: 6548 bytes leftover after parsing attributes in process `syz.0.8416'. [ 1058.973007][ T4109] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8424'. [ 1059.060153][ T4109] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1059.155615][ T4113] netlink: 'syz.4.8428': attribute type 14 has an invalid length. [ 1059.196907][ T4116] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8428'. [ 1059.206378][ T4116] netlink: 'syz.4.8428': attribute type 20 has an invalid length. [ 1059.214780][ T4116] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8428'. [ 1059.353380][ T4118] netlink: 'syz.0.8429': attribute type 2 has an invalid length. [ 1059.391860][ T4118] netlink: 'syz.0.8429': attribute type 8 has an invalid length. [ 1059.407244][ T4125] FAULT_INJECTION: forcing a failure. [ 1059.407244][ T4125] name failslab, interval 1, probability 0, space 0, times 0 [ 1059.420530][ T4118] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8429'. [ 1059.453895][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1059.485575][ T4125] CPU: 0 UID: 0 PID: 4125 Comm: syz.4.8433 Not tainted syzkaller #0 PREEMPT(full) [ 1059.485603][ T4125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1059.485617][ T4125] Call Trace: [ 1059.485625][ T4125] [ 1059.485647][ T4125] dump_stack_lvl+0xe8/0x150 [ 1059.485674][ T4125] should_fail_ex+0x412/0x560 [ 1059.485700][ T4125] should_failslab+0xa8/0x100 [ 1059.485720][ T4125] __kmalloc_noprof+0xe8/0x760 [ 1059.485745][ T4125] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1059.485779][ T4125] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1059.485808][ T4125] ? tomoyo_domain+0xd7/0x130 [ 1059.485831][ T4125] ? tomoyo_path_number_perm+0x219/0x630 [ 1059.485855][ T4125] tomoyo_path_number_perm+0x246/0x630 [ 1059.485881][ T4125] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1059.485904][ T4125] ? __lock_acquire+0x6b5/0x2cf0 [ 1059.485939][ T4125] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1059.485980][ T4125] ? __fget_files+0x2a/0x420 [ 1059.486005][ T4125] ? __fget_files+0x2a/0x420 [ 1059.486045][ T4125] ? __fget_files+0x3a0/0x420 [ 1059.486070][ T4125] ? __fget_files+0x2a/0x420 [ 1059.486099][ T4125] security_file_ioctl+0xc3/0x2a0 [ 1059.486128][ T4125] __se_sys_ioctl+0x47/0x170 [ 1059.486160][ T4125] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1059.486182][ T4125] do_syscall_64+0x174/0xf80 [ 1059.486204][ T4125] ? trace_irq_disable+0x3b/0x140 [ 1059.486236][ T4125] ? clear_bhb_loop+0x40/0x90 [ 1059.486263][ T4125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1059.486297][ T4125] RIP: 0033:0x7fc01319ce59 [ 1059.486316][ T4125] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1059.486333][ T4125] RSP: 002b:00007fc014020028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1059.486354][ T4125] RAX: ffffffffffffffda RBX: 00007fc013415fa0 RCX: 00007fc01319ce59 [ 1059.486368][ T4125] RDX: 0000200000000000 RSI: 0000000000008b18 RDI: 0000000000000004 [ 1059.486381][ T4125] RBP: 00007fc014020090 R08: 0000000000000000 R09: 0000000000000000 [ 1059.486394][ T4125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1059.486406][ T4125] R13: 00007fc013416038 R14: 00007fc013415fa0 R15: 00007fff7024da28 [ 1059.486441][ T4125] [ 1059.486476][ T4125] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1059.861954][ T4140] netlink: 'syz.1.8435': attribute type 1 has an invalid length. [ 1059.901958][ T4140] netlink: 'syz.1.8435': attribute type 2 has an invalid length. [ 1059.925032][ T4140] netlink: 'syz.1.8435': attribute type 1 has an invalid length. [ 1059.946507][ T4140] netlink: 'syz.1.8435': attribute type 3 has an invalid length. [ 1059.958354][ T4144] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8437'. [ 1059.969484][ T4140] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8435'. [ 1059.980736][ T4145] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8437'. [ 1059.991272][ T4145] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8437'. [ 1060.208933][ T4154] netlink: 'syz.0.8440': attribute type 1 has an invalid length. [ 1060.280515][ T4155] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8440'. [ 1060.333240][ T4162] bridge0: entered allmulticast mode [ 1060.367959][ T4161] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8440'. [ 1060.384782][ T4162] netlink: 72 bytes leftover after parsing attributes in process `syz.2.8443'. [ 1060.394305][ T4161] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1060.461464][ T4154] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8440'. [ 1060.584950][ T4174] netlink: 64 bytes leftover after parsing attributes in process `syz.3.8447'. [ 1061.199354][ T4207] vlan3: entered allmulticast mode [ 1061.373824][ C1] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 1061.893006][ T4245] xt_hashlimit: overflow, try lower: 18446744073709551615/32 [ 1062.702977][ T4269] syzkaller1: entered promiscuous mode [ 1062.722497][ T4269] syzkaller1: entered allmulticast mode [ 1062.766356][ T4272] netlink: 'syz.1.8484': attribute type 1 has an invalid length. [ 1062.849694][ T4272] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 1063.017762][ T4289] FAULT_INJECTION: forcing a failure. [ 1063.017762][ T4289] name failslab, interval 1, probability 0, space 0, times 0 [ 1063.066577][ T4293] netlink: 'syz.0.8490': attribute type 1 has an invalid length. [ 1063.077098][ T4289] CPU: 0 UID: 0 PID: 4289 Comm: syz.3.8488 Not tainted syzkaller #0 PREEMPT(full) [ 1063.077127][ T4289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1063.077141][ T4289] Call Trace: [ 1063.077149][ T4289] [ 1063.077169][ T4289] dump_stack_lvl+0xe8/0x150 [ 1063.077199][ T4289] should_fail_ex+0x412/0x560 [ 1063.077228][ T4289] should_failslab+0xa8/0x100 [ 1063.077252][ T4289] __kmalloc_noprof+0xe8/0x760 [ 1063.077282][ T4289] ? ioctl_standard_iw_point+0x516/0xd90 [ 1063.077311][ T4289] ioctl_standard_iw_point+0x516/0xd90 [ 1063.077349][ T4289] ? __pfx_cfg80211_wext_siwscan+0x10/0x10 [ 1063.077380][ T4289] ? __pfx_ioctl_standard_iw_point+0x10/0x10 [ 1063.077403][ T4289] ? __pfx___mutex_lock+0x10/0x10 [ 1063.077438][ T4289] ? __pfx_cfg80211_wext_siwscan+0x10/0x10 [ 1063.077470][ T4289] ioctl_standard_call+0xaf/0x1b0 [ 1063.077505][ T4289] ? __pfx_cfg80211_wext_siwscan+0x10/0x10 [ 1063.077534][ T4289] wext_ioctl_dispatch+0xee/0x410 [ 1063.077564][ T4289] ? __pfx_ioctl_standard_call+0x10/0x10 [ 1063.077600][ T4289] wext_handle_ioctl+0x10f/0x1d0 [ 1063.077635][ T4289] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 1063.077665][ T4289] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1063.077708][ T4289] sock_ioctl+0x159/0x7f0 [ 1063.077740][ T4289] ? __pfx_sock_ioctl+0x10/0x10 [ 1063.077769][ T4289] ? __fget_files+0x2a/0x420 [ 1063.077793][ T4289] ? __fget_files+0x3a0/0x420 [ 1063.077817][ T4289] ? __fget_files+0x2a/0x420 [ 1063.077847][ T4289] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1063.077879][ T4289] ? __pfx_sock_ioctl+0x10/0x10 [ 1063.077907][ T4289] __se_sys_ioctl+0xfc/0x170 [ 1063.077938][ T4289] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1063.077962][ T4289] do_syscall_64+0x174/0xf80 [ 1063.077984][ T4289] ? trace_irq_disable+0x3b/0x140 [ 1063.078016][ T4289] ? clear_bhb_loop+0x40/0x90 [ 1063.078042][ T4289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1063.078063][ T4289] RIP: 0033:0x7efe9799ce59 [ 1063.078083][ T4289] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1063.078101][ T4289] RSP: 002b:00007efe9887e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1063.078123][ T4289] RAX: ffffffffffffffda RBX: 00007efe97c15fa0 RCX: 00007efe9799ce59 [ 1063.078139][ T4289] RDX: 0000200000000000 RSI: 0000000000008b18 RDI: 0000000000000004 [ 1063.078152][ T4289] RBP: 00007efe9887e090 R08: 0000000000000000 R09: 0000000000000000 [ 1063.078173][ T4289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1063.078185][ T4289] R13: 00007efe97c16038 R14: 00007efe97c15fa0 R15: 00007fff3cb34938 [ 1063.078220][ T4289] [ 1063.382010][ T4300] netlink: 'syz.4.8491': attribute type 1 has an invalid length. [ 1063.800040][ T4321] netlink: 'syz.1.8496': attribute type 1 has an invalid length. [ 1063.857796][ T4321] netlink: 'syz.1.8496': attribute type 2 has an invalid length. [ 1064.222385][ T4345] FAULT_INJECTION: forcing a failure. [ 1064.222385][ T4345] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1064.295979][ T4345] CPU: 0 UID: 0 PID: 4345 Comm: syz.0.8502 Not tainted syzkaller #0 PREEMPT(full) [ 1064.296008][ T4345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1064.296022][ T4345] Call Trace: [ 1064.296031][ T4345] [ 1064.296041][ T4345] dump_stack_lvl+0xe8/0x150 [ 1064.296072][ T4345] should_fail_ex+0x412/0x560 [ 1064.296102][ T4345] _copy_from_user+0x2d/0xb0 [ 1064.296129][ T4345] ioctl_standard_iw_point+0x5de/0xd90 [ 1064.296168][ T4345] ? __pfx_cfg80211_wext_siwscan+0x10/0x10 [ 1064.296199][ T4345] ? __pfx_ioctl_standard_iw_point+0x10/0x10 [ 1064.296221][ T4345] ? __pfx___mutex_lock+0x10/0x10 [ 1064.296257][ T4345] ? __pfx_cfg80211_wext_siwscan+0x10/0x10 [ 1064.296288][ T4345] ioctl_standard_call+0xaf/0x1b0 [ 1064.296324][ T4345] ? __pfx_cfg80211_wext_siwscan+0x10/0x10 [ 1064.296352][ T4345] wext_ioctl_dispatch+0xee/0x410 [ 1064.296383][ T4345] ? __pfx_ioctl_standard_call+0x10/0x10 [ 1064.296430][ T4345] wext_handle_ioctl+0x10f/0x1d0 [ 1064.296465][ T4345] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 1064.296495][ T4345] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1064.296538][ T4345] sock_ioctl+0x159/0x7f0 [ 1064.296572][ T4345] ? __pfx_sock_ioctl+0x10/0x10 [ 1064.296602][ T4345] ? __fget_files+0x2a/0x420 [ 1064.296627][ T4345] ? __fget_files+0x3a0/0x420 [ 1064.296651][ T4345] ? __fget_files+0x2a/0x420 [ 1064.296680][ T4345] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1064.296711][ T4345] ? __pfx_sock_ioctl+0x10/0x10 [ 1064.296739][ T4345] __se_sys_ioctl+0xfc/0x170 [ 1064.296770][ T4345] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1064.296794][ T4345] do_syscall_64+0x174/0xf80 [ 1064.296816][ T4345] ? trace_irq_disable+0x3b/0x140 [ 1064.296847][ T4345] ? clear_bhb_loop+0x40/0x90 [ 1064.296886][ T4345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1064.296931][ T4345] RIP: 0033:0x7f21b499ce59 [ 1064.296951][ T4345] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1064.296970][ T4345] RSP: 002b:00007f21b579d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1064.296993][ T4345] RAX: ffffffffffffffda RBX: 00007f21b4c15fa0 RCX: 00007f21b499ce59 [ 1064.297008][ T4345] RDX: 0000200000000000 RSI: 0000000000008b18 RDI: 0000000000000004 [ 1064.297022][ T4345] RBP: 00007f21b579d090 R08: 0000000000000000 R09: 0000000000000000 [ 1064.297038][ T4345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1064.297050][ T4345] R13: 00007f21b4c16038 R14: 00007f21b4c15fa0 R15: 00007fffd6a24708 [ 1064.297086][ T4345] [ 1064.628927][ T4356] __nla_validate_parse: 6 callbacks suppressed [ 1064.628948][ T4356] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8503'. [ 1064.825264][ T4366] tipc: Enabling of bearer rejected, failed to enable media [ 1064.876911][ T4364] tipc: Enabling of bearer rejected, failed to enable media [ 1064.888044][ T4370] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8509'. [ 1065.218575][ T4387] validate_nla: 1 callbacks suppressed [ 1065.218596][ T4387] netlink: 'syz.2.8513': attribute type 3 has an invalid length. [ 1065.316987][ T4394] FAULT_INJECTION: forcing a failure. [ 1065.316987][ T4394] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1065.350290][ T4394] CPU: 0 UID: 0 PID: 4394 Comm: syz.3.8516 Not tainted syzkaller #0 PREEMPT(full) [ 1065.350317][ T4394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1065.350338][ T4394] Call Trace: [ 1065.350345][ T4394] [ 1065.350354][ T4394] dump_stack_lvl+0xe8/0x150 [ 1065.350382][ T4394] should_fail_ex+0x412/0x560 [ 1065.350410][ T4394] _copy_to_user+0x31/0xb0 [ 1065.350438][ T4394] simple_read_from_buffer+0xe1/0x170 [ 1065.350469][ T4394] proc_fail_nth_read+0x1bb/0x230 [ 1065.350500][ T4394] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1065.350529][ T4394] ? rw_verify_area+0x2a6/0x4d0 [ 1065.350557][ T4394] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1065.350594][ T4394] vfs_read+0x20c/0xa70 [ 1065.350628][ T4394] ? __pfx___mutex_lock+0x10/0x10 [ 1065.350654][ T4394] ? __pfx_vfs_read+0x10/0x10 [ 1065.350684][ T4394] ? __fget_files+0x2a/0x420 [ 1065.350716][ T4394] ? __fget_files+0x3a0/0x420 [ 1065.350739][ T4394] ? __fget_files+0x2a/0x420 [ 1065.350773][ T4394] ksys_read+0x150/0x270 [ 1065.350803][ T4394] ? __pfx_ksys_read+0x10/0x10 [ 1065.350830][ T4394] ? __pfx_sock_ioctl+0x10/0x10 [ 1065.350865][ T4394] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1065.350888][ T4394] do_syscall_64+0x174/0xf80 [ 1065.350909][ T4394] ? trace_irq_disable+0x3b/0x140 [ 1065.350938][ T4394] ? clear_bhb_loop+0x40/0x90 [ 1065.350964][ T4394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1065.350984][ T4394] RIP: 0033:0x7efe9795d68e [ 1065.351003][ T4394] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1065.351020][ T4394] RSP: 002b:00007efe9887dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1065.351042][ T4394] RAX: ffffffffffffffda RBX: 00007efe9887e6c0 RCX: 00007efe9795d68e [ 1065.351057][ T4394] RDX: 000000000000000f RSI: 00007efe9887e0a0 RDI: 0000000000000006 [ 1065.351069][ T4394] RBP: 00007efe9887e090 R08: 0000000000000000 R09: 0000000000000000 [ 1065.351081][ T4394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1065.351093][ T4394] R13: 00007efe97c16038 R14: 00007efe97c15fa0 R15: 00007fff3cb34938 [ 1065.351128][ T4394] [ 1065.631008][ T4400] netlink: 'syz.2.8517': attribute type 1 has an invalid length. [ 1065.691902][ T4406] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8517'. [ 1065.772252][ T4410] batadv_slave_1: entered promiscuous mode [ 1065.780978][ T4410] xt_policy: too many policy elements [ 1065.899658][ T4409] batadv_slave_1: left promiscuous mode [ 1066.032248][ T4421] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8525'. [ 1066.086226][ T4421] set match dimension is over the limit! [ 1066.370805][ T4440] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8532'. [ 1066.748555][ T4460] gretap0: entered promiscuous mode [ 1066.844397][ T4466] netlink: 'syz.0.8540': attribute type 39 has an invalid length. [ 1067.098218][T11970] IPVS: starting estimator thread 0... [ 1067.149195][ T4477] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8543'. [ 1067.167596][ T4476] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8543'. [ 1067.216354][ T4474] IPVS: using max 41 ests per chain, 98400 per kthread [ 1067.226056][ T4480] netlink: 'syz.1.8544': attribute type 1 has an invalid length. [ 1067.400095][ T4480] bond7: (slave geneve2): making interface the new active one [ 1067.409664][ T4480] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 1067.421572][T22076] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 1067.462480][T22076] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 1067.498852][T22076] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 1067.517506][T22076] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 1067.619583][ T4488] wg1 speed is unknown, defaulting to 1000 [ 1067.974550][ T4511] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8552'. [ 1068.552710][ T4537] netlink: set zone limit has 4 unknown bytes [ 1068.698139][ T4541] tipc: Enabled bearer , priority 0 [ 1068.745160][ T4537] netlink: 'syz.4.8558': attribute type 58 has an invalid length. [ 1068.782301][ T4537] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8558'. [ 1069.142539][ T4557] syzkaller0: entered promiscuous mode [ 1069.166841][ T4557] syzkaller0: entered allmulticast mode [ 1069.291471][ T4568] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8566'. [ 1069.932344][ T4568] veth0_macvtap: left promiscuous mode [ 1070.354988][ T4583] FAULT_INJECTION: forcing a failure. [ 1070.354988][ T4583] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1070.406172][ T4583] CPU: 1 UID: 0 PID: 4583 Comm: syz.3.8572 Not tainted syzkaller #0 PREEMPT(full) [ 1070.406204][ T4583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1070.406218][ T4583] Call Trace: [ 1070.406228][ T4583] [ 1070.406238][ T4583] dump_stack_lvl+0xe8/0x150 [ 1070.406271][ T4583] should_fail_ex+0x412/0x560 [ 1070.406301][ T4583] _copy_from_iter+0x1d3/0x1670 [ 1070.406329][ T4583] ? rcu_is_watching+0x15/0xb0 [ 1070.406361][ T4583] ? __pfx__copy_from_iter+0x10/0x10 [ 1070.406393][ T4583] ? netlink_sendmsg+0x650/0xb40 [ 1070.406418][ T4583] ? skb_put+0x11b/0x210 [ 1070.406446][ T4583] netlink_sendmsg+0x6c0/0xb40 [ 1070.406483][ T4583] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1070.406513][ T4583] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1070.406545][ T4583] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1070.406576][ T4583] ____sys_sendmsg+0x972/0x9f0 [ 1070.406610][ T4583] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1070.406655][ T4583] ? import_iovec+0x73/0xa0 [ 1070.406683][ T4583] ___sys_sendmsg+0x2a5/0x360 [ 1070.406706][ T4583] ? __lock_acquire+0x6b5/0x2cf0 [ 1070.406733][ T4583] ? __pfx____sys_sendmsg+0x10/0x10 [ 1070.406794][ T4583] ? __fget_files+0x2a/0x420 [ 1070.406819][ T4583] ? __fget_files+0x3a0/0x420 [ 1070.406853][ T4583] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1070.406882][ T4583] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1070.406922][ T4583] ? __pfx_ksys_write+0x10/0x10 [ 1070.406962][ T4583] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1070.406985][ T4583] do_syscall_64+0x174/0xf80 [ 1070.407007][ T4583] ? trace_irq_disable+0x3b/0x140 [ 1070.407037][ T4583] ? clear_bhb_loop+0x40/0x90 [ 1070.407063][ T4583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1070.407084][ T4583] RIP: 0033:0x7efe9799ce59 [ 1070.407104][ T4583] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1070.407122][ T4583] RSP: 002b:00007efe9887e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1070.407146][ T4583] RAX: ffffffffffffffda RBX: 00007efe97c15fa0 RCX: 00007efe9799ce59 [ 1070.407162][ T4583] RDX: 0000000004000804 RSI: 00002000000006c0 RDI: 0000000000000004 [ 1070.407176][ T4583] RBP: 00007efe9887e090 R08: 0000000000000000 R09: 0000000000000000 [ 1070.407189][ T4583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1070.407201][ T4583] R13: 00007efe97c16038 R14: 00007efe97c15fa0 R15: 00007fff3cb34938 [ 1070.407238][ T4583] [ 1071.032877][ T4579] wg1 speed is unknown, defaulting to 1000 [ 1071.318746][ T4602] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8579'. [ 1071.328028][ T4603] netlink: 'syz.3.8578': attribute type 1 has an invalid length. [ 1071.402951][ T4605] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8579'. [ 1071.431975][ T4605] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8579'. [ 1071.587864][ T4616] Cannot find add_set index 2 as target [ 1071.661255][ T4620] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8583'. [ 1071.783230][ T4605] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8579'. [ 1071.792526][ T4605] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8579'. [ 1071.999595][ T4628] netlink: 64 bytes leftover after parsing attributes in process `syz.3.8585'. [ 1072.316939][ T4645] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8590'. [ 1072.690088][ T4664] netlink: 'syz.2.8595': attribute type 1 has an invalid length. [ 1072.901705][ T4655] bridge0: port 2(bridge_slave_1) entered disabled state [ 1072.909492][ T4655] bridge0: port 1(bridge_slave_0) entered disabled state [ 1072.926618][ T4655] team_slave_0: left promiscuous mode [ 1072.934316][ T4655] team_slave_1: left promiscuous mode [ 1073.180300][ T4655] team0: left allmulticast mode [ 1073.186738][ T4655] team_slave_0: left allmulticast mode [ 1073.192323][ T4655] team_slave_1: left allmulticast mode [ 1073.250179][ T4655] bond2: left allmulticast mode [ 1073.469809][ T4687] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1073.519996][ T4671] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1073.530465][ T4671] bond8: (slave bond9): Enslaving as an active interface with an up link [ 1073.566637][ T4672] bond8: (slave gretap4): Enslaving as an active interface with an up link [ 1073.588906][T22051] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1073.618087][T22051] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1073.632034][T22051] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1073.641585][T22051] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1073.650958][T22051] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1073.662350][T22051] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1074.049543][ T4706] netlink: 'syz.1.8604': attribute type 3 has an invalid length. [ 1074.928861][T22051] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1074.942354][T22051] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1074.951921][T22051] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1074.962141][T22051] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1074.971961][T22051] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1074.990443][T22051] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1075.030350][ T4704] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 1075.059316][ T4713] xt_hashlimit: overflow, try lower: 18446744073709551615/32 [ 1075.181102][ T4715] netlink: 64 bytes leftover after parsing attributes in process `syz.2.8606'. [ 1075.219153][ T4715] netlink: 64 bytes leftover after parsing attributes in process `syz.2.8606'. [ 1075.394904][ T4720] bond6 (unregistering): Released all slaves [ 1076.301843][ T4762] syzkaller1: entered promiscuous mode [ 1076.314352][ T4762] syzkaller1: entered allmulticast mode [ 1076.419872][ T4768] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1076.534958][ T4779] __nla_validate_parse: 4 callbacks suppressed [ 1076.534982][ T4779] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8623'. [ 1076.627751][ T4766] tipc: Resetting bearer [ 1076.707391][ T4766] batman_adv: batadv0: Interface deactivated: macvlan10 [ 1076.950319][ T4795] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8628'. [ 1076.975140][ T4795] netlink: 'syz.3.8628': attribute type 16 has an invalid length. [ 1076.984426][ T4795] netlink: 'syz.3.8628': attribute type 17 has an invalid length. [ 1077.004044][ T4795] gretap0: left promiscuous mode [ 1077.060366][ T4795] 8021q: adding VLAN 0 to HW filter on device team0 [ 1077.079177][ T4795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1077.132186][ T4795] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1077.147574][ T4795] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1077.161246][ T4795] hsr0: left promiscuous mode [ 1077.171223][ T4795] veth1_vlan: left promiscuous mode [ 1077.180956][ T4795] veth0_vlan: left promiscuous mode [ 1077.194337][ T4795] veth0_vlan: entered promiscuous mode [ 1077.217657][ T4795] veth1_vlan: entered promiscuous mode [ 1077.230582][ T4795] veth1_macvtap: left promiscuous mode [ 1077.238737][ T4795] veth0_macvtap: left promiscuous mode [ 1077.249268][ T4795] veth0_macvtap: entered promiscuous mode [ 1077.256233][ T4795] veth0_macvtap: entered allmulticast mode [ 1077.265320][ T4795] veth1_macvtap: entered promiscuous mode [ 1077.276942][ T4795] geneve1: left promiscuous mode [ 1077.286697][ T4795] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1077.299448][ T4795] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1077.308659][ T4795] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1077.318377][ T4795] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1077.329485][ T4795] batman_adv: batadv0: Interface activated: veth3 [ 1077.338403][ T4795] bridge1: left promiscuous mode [ 1077.344153][ T4795] bridge1: left allmulticast mode [ 1077.352943][ T4795] bridge2: left promiscuous mode [ 1077.359612][ T4795] bridge2: left allmulticast mode [ 1077.366968][ T4795] vcan1: left promiscuous mode [ 1077.373171][ T4795] gretap0: entered promiscuous mode [ 1077.387466][ T4795] mac80211_hwsim hwsim70 syzkaller0: left promiscuous mode [ 1077.395719][ T4795] mac80211_hwsim hwsim70 syzkaller0: left allmulticast mode [ 1077.417247][ T4795] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1077.428272][ T4795] bond2: left promiscuous mode [ 1077.434566][ T4795] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1077.449516][ T4795] bond3: left promiscuous mode [ 1077.462730][ T4795] geneve2: left promiscuous mode [ 1077.469070][ T4795] bond3: left allmulticast mode [ 1077.488907][ T4795] geneve2: left allmulticast mode [ 1077.505300][ T4795] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1077.552013][ T4795] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1077.576973][ T4795] bond5: left promiscuous mode [ 1077.581956][ T4795] bridge6: left promiscuous mode [ 1077.592764][ T4795] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1077.601272][ T4795] ipvlan2: left allmulticast mode [ 1077.608493][ T4795] bond5: left allmulticast mode [ 1077.614582][ T4795] bridge6: left allmulticast mode [ 1077.620868][ T4795] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1077.634161][ T4795] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1077.662582][ T4795] bond7: left promiscuous mode [ 1077.668584][ T4795] bridge7: left promiscuous mode [ 1077.675617][ T4795] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1077.687514][ T4795] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1077.708256][ T4795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1077.727430][ T4795] vlan2: left allmulticast mode [ 1077.732530][ T4795] macvtap0: left allmulticast mode [ 1077.738906][ T4795] veth0_macvtap: left allmulticast mode [ 1077.749609][ T4795] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1077.806754][ T4795] ip6gre1: left promiscuous mode [ 1077.822761][ T4795] ip6gre1: left allmulticast mode [ 1077.869460][ T4795] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1077.890705][ T4795] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1077.925909][ T4795] batman_adv: batadv0: Interface activated: macvlan10 [ 1077.948565][ T4795] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1077.959651][ T4795] vlan3: left allmulticast mode [ 1077.968990][ T4795] bond0: left allmulticast mode [ 1077.975668][ T4795] erspan1: left allmulticast mode [ 1077.990536][ T4795] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1078.527388][T22607] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1078.536989][T22607] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1078.546608][T22607] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 1078.592807][ T4812] tipc: Enabling of bearer rejected, failed to enable media [ 1078.645174][T22607] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1078.683938][T22607] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1078.714107][T22607] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 1078.729270][T22607] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1078.751323][T22607] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1078.784185][T22607] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 1078.808055][ T4837] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8635'. [ 1078.831525][T22607] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1078.857957][T22607] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1078.877190][ T4842] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8635'. [ 1078.885035][T22607] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 1079.027539][T22076] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1079.071241][T22076] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1079.091793][ T5738] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 1079.117028][ T4854] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8637'. [ 1079.156958][ T4852] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8639'. [ 1079.181677][ T5738] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1079.200320][ T4849] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.8637'. [ 1079.220146][ T4859] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8640'. [ 1079.232466][ T5738] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1079.359894][ T4863] sch_tbf: burst 3 is lower than device ip6tnl0 mtu (1452) ! [ 1079.374592][ T5738] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1079.675535][ T4876] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8645'. [ 1079.686210][ T4876] netlink: 'syz.2.8645': attribute type 5 has an invalid length. [ 1079.701621][ T4876] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8645'. [ 1079.915838][ T4876] geneve3: entered promiscuous mode [ 1079.921307][ T4876] geneve3: entered allmulticast mode [ 1079.940056][ T4869] tipc: Enabling of bearer rejected, already enabled [ 1079.968349][ T4887] netlink: 'syz.0.8646': attribute type 11 has an invalid length. [ 1080.094904][ T5738] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 1080.398575][T22594] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 1080.417096][T22594] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 1080.440819][ T4869] tipc: Resetting bearer [ 1080.477077][ T4891] ip6gre1: entered promiscuous mode [ 1080.482620][ T4891] ip6gre1: entered allmulticast mode [ 1080.497566][T22594] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 1080.507742][T22594] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 1080.541490][T22071] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 1081.222987][ T4899] netlink: 'syz.4.8652': attribute type 13 has an invalid length. [ 1081.691624][T22051] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 1081.721153][T22051] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 1081.810011][ T4947] IPVS: lc: FWM 3 0x00000003 - no destination available [ 1082.460269][ T4966] syzkaller0: entered promiscuous mode [ 1082.481876][ T4966] syzkaller0: entered allmulticast mode [ 1082.663806][ T4976] tipc: Enabled bearer , priority 0 [ 1082.857280][ T4963] tipc: Resetting bearer [ 1082.909641][ T4963] tipc: Disabling bearer [ 1082.978610][ T4986] bond10: option miimon: invalid value (18446744073709551607) [ 1082.988966][ T4986] bond10: option miimon: allowed values 0 - 2147483647 [ 1083.067022][ T4986] bond10 (unregistering): Released all slaves [ 1083.238215][ T4994] __nla_validate_parse: 5 callbacks suppressed [ 1083.238236][ T4994] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8676'. [ 1083.402898][ T5002] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8678'. [ 1083.439624][ T5002] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8678'. [ 1083.450201][ T5002] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8678'. [ 1083.470125][ T5003] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8678'. [ 1083.479592][ T5003] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8678'. [ 1083.494445][ T5003] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8678'. [ 1083.637195][T22051] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1083.659690][T22051] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 1083.684698][T22051] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 256 - 0 [ 1083.702495][T22051] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1083.706469][ T5019] netlink: 'syz.0.8684': attribute type 1 has an invalid length. [ 1083.720067][T22051] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 1083.730862][T22051] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 256 - 0 [ 1083.752933][T22051] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1083.768127][ T5023] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8684'. [ 1083.787740][T22051] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 1083.805051][T22051] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 256 - 0 [ 1083.823465][T22051] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1083.846044][T22051] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 1083.873655][T22051] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 256 - 0 [ 1084.507441][ T5056] mac80211_hwsim hwsim66 wlan0: entered promiscuous mode [ 1084.525371][ T5056] mac80211_hwsim hwsim66 wlan0: entered allmulticast mode [ 1084.550304][ T5056] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1084.628966][ T5059] wg1 speed is unknown, defaulting to 1000 [ 1084.695552][ T5065] netlink: 'syz.2.8697': attribute type 3 has an invalid length. [ 1084.751596][ T5071] netlink: 'syz.4.8699': attribute type 1 has an invalid length. [ 1084.840293][ T5074] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8699'. [ 1085.002173][ T5085] C: renamed from veth1_to_team [ 1085.029671][ T5085] netlink: 'syz.2.8702': attribute type 2 has an invalid length. [ 1085.041136][ T5085] netlink: 116 bytes leftover after parsing attributes in process `syz.2.8702'. [ 1085.057437][ T5086] netlink: 'syz.2.8702': attribute type 2 has an invalid length. [ 1085.068970][ T5085] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1085.432591][ T5105] ip6tnl0: entered allmulticast mode [ 1085.454733][ C0] ip6_tnl_xmit_ctl: 2 callbacks suppressed [ 1085.454756][ C0] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 1086.582752][ T5123] netlink: 'syz.3.8713': attribute type 1 has an invalid length. [ 1086.723012][ T5128] netlink: 'syz.2.8715': attribute type 1 has an invalid length. [ 1086.827004][ T5123] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1086.855656][ T5135] netlink: 'syz.0.8714': attribute type 21 has an invalid length. [ 1086.864170][ T5124] vlan4: entered allmulticast mode [ 1086.870657][ T5124] bond14: entered allmulticast mode [ 1086.914466][ T5135] IPv6: NLM_F_CREATE should be specified when creating new route [ 1086.940678][ T5135] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1086.948151][ T5135] IPv6: NLM_F_CREATE should be set when creating new route [ 1086.955485][ T5135] IPv6: NLM_F_CREATE should be set when creating new route [ 1086.962744][ T5135] IPv6: NLM_F_CREATE should be set when creating new route [ 1087.021952][ T5126] bond14: (slave geneve3): making interface the new active one [ 1087.044376][ T5126] geneve3: entered allmulticast mode [ 1087.077756][ T5126] bond14: (slave geneve3): Enslaving as an active interface with an up link [ 1087.569074][ T5152] xt_TCPMSS: Only works on TCP SYN packets [ 1088.475913][ T5206] netlink: 'syz.4.8734': attribute type 1 has an invalid length. [ 1088.529890][ T5210] __nla_validate_parse: 8 callbacks suppressed [ 1088.529911][ T5210] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8734'. [ 1088.832931][ T5228] netlink: 810 bytes leftover after parsing attributes in process `syz.0.8739'. [ 1089.090116][ T5237] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8743'. [ 1089.158379][ T5249] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8745'. [ 1089.169095][ T5249] netlink: 'syz.4.8745': attribute type 21 has an invalid length. [ 1089.177957][ T5249] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8745'. [ 1089.332582][ T5253] ip6t_srh: unknown srh invflags 4000 [ 1089.381320][ T5253] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8747'. [ 1089.439049][ T5258] netlink: 260 bytes leftover after parsing attributes in process `syz.2.8747'. [ 1089.550755][ T5261] netlink: 'syz.1.8750': attribute type 1 has an invalid length. [ 1089.595833][ T5261] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8750'. [ 1089.927626][ T5279] pimreg: entered allmulticast mode [ 1090.729961][ T5308] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8762'. [ 1090.835174][T11970] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1090.894737][ T5308] vlan4: left allmulticast mode [ 1090.899963][ T5308] bond14: left allmulticast mode [ 1090.910900][T11970] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 1090.918929][ T5308] geneve3: left allmulticast mode [ 1090.984409][T11970] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 1091.228005][ T5310] bond14: entered allmulticast mode [ 1091.450490][ T5325] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8768'. [ 1091.459827][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1091.695332][T11970] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1092.085928][ T5337] syzkaller1: entered promiscuous mode [ 1092.123262][ T5337] syzkaller1: entered allmulticast mode [ 1092.516513][T10869] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1092.610951][T10869] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 1092.740765][ C0] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 1092.757973][T10869] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1093.124367][T10869] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 1093.366200][ T5399] netlink: 'syz.0.8784': attribute type 1 has an invalid length. [ 1093.410803][ T5399] NCSI netlink: No device for ifindex 0 [ 1093.543425][ T5404] __nla_validate_parse: 2 callbacks suppressed [ 1093.543446][ T5404] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.8786'. [ 1093.560367][ T5404] openvswitch: netlink: Message has 3 unknown bytes. [ 1093.802956][ T5411] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8787'. [ 1094.144803][ T5423] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8794'. [ 1094.202650][ T5424] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8794'. [ 1094.219363][ T5424] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8794'. [ 1094.407578][ T5442] FAULT_INJECTION: forcing a failure. [ 1094.407578][ T5442] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1094.421821][ T5442] CPU: 0 UID: 0 PID: 5442 Comm: syz.2.8798 Not tainted syzkaller #0 PREEMPT(full) [ 1094.421849][ T5442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1094.421876][ T5442] Call Trace: [ 1094.421885][ T5442] [ 1094.421894][ T5442] dump_stack_lvl+0xe8/0x150 [ 1094.421924][ T5442] should_fail_ex+0x412/0x560 [ 1094.421953][ T5442] _copy_from_user+0x2d/0xb0 [ 1094.421979][ T5442] ___sys_sendmsg+0x1c6/0x360 [ 1094.422004][ T5442] ? __lock_acquire+0x6b5/0x2cf0 [ 1094.422032][ T5442] ? __pfx____sys_sendmsg+0x10/0x10 [ 1094.422094][ T5442] ? __fget_files+0x2a/0x420 [ 1094.422119][ T5442] ? __fget_files+0x3a0/0x420 [ 1094.422155][ T5442] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1094.422183][ T5442] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1094.422218][ T5442] ? __pfx_ksys_write+0x10/0x10 [ 1094.422257][ T5442] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1094.422279][ T5442] do_syscall_64+0x174/0xf80 [ 1094.422301][ T5442] ? trace_irq_disable+0x3b/0x140 [ 1094.422332][ T5442] ? clear_bhb_loop+0x40/0x90 [ 1094.422358][ T5442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1094.422378][ T5442] RIP: 0033:0x7f8cf479ce59 [ 1094.422402][ T5442] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1094.422420][ T5442] RSP: 002b:00007f8cf5666028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1094.422443][ T5442] RAX: ffffffffffffffda RBX: 00007f8cf4a15fa0 RCX: 00007f8cf479ce59 [ 1094.422457][ T5442] RDX: 0000000000000844 RSI: 00002000000015c0 RDI: 0000000000000005 [ 1094.422470][ T5442] RBP: 00007f8cf5666090 R08: 0000000000000000 R09: 0000000000000000 [ 1094.422483][ T5442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1094.422496][ T5442] R13: 00007f8cf4a16038 R14: 00007f8cf4a15fa0 R15: 00007ffdeeee4d58 [ 1094.422531][ T5442] [ 1094.449554][ T5439] syzkaller1: entered promiscuous mode [ 1094.639545][ T5439] syzkaller1: entered allmulticast mode [ 1094.845424][ T5458] xt_cgroup: xt_cgroup: no path or classid specified [ 1095.267364][ T5457] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1095.279840][ T5457] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1095.301128][ T5457] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1095.597496][ T5457] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1095.625674][ T5457] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1095.678705][ T5457] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1095.835315][ T5457] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1095.851848][ T5457] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1095.864857][ T5457] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1095.951899][ T5494] FAULT_INJECTION: forcing a failure. [ 1095.951899][ T5494] name failslab, interval 1, probability 0, space 0, times 0 [ 1095.974114][ T5494] CPU: 0 UID: 0 PID: 5494 Comm: syz.2.8811 Not tainted syzkaller #0 PREEMPT(full) [ 1095.974147][ T5494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1095.974161][ T5494] Call Trace: [ 1095.974170][ T5494] [ 1095.974179][ T5494] dump_stack_lvl+0xe8/0x150 [ 1095.974210][ T5494] should_fail_ex+0x412/0x560 [ 1095.974238][ T5494] should_failslab+0xa8/0x100 [ 1095.974261][ T5494] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1095.974292][ T5494] ? __alloc_skb+0x186/0x7d0 [ 1095.974312][ T5494] ? __alloc_skb+0x1d0/0x7d0 [ 1095.974330][ T5494] ? __local_bh_enable_ip+0xd0/0x130 [ 1095.974357][ T5494] __alloc_skb+0x1d0/0x7d0 [ 1095.974384][ T5494] netlink_sendmsg+0x5d4/0xb40 [ 1095.974420][ T5494] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1095.974448][ T5494] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1095.974480][ T5494] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1095.974511][ T5494] ____sys_sendmsg+0x972/0x9f0 [ 1095.974534][ T5494] ? __might_fault+0xaf/0x130 [ 1095.974567][ T5494] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1095.974602][ T5494] ? import_iovec+0x73/0xa0 [ 1095.974631][ T5494] ___sys_sendmsg+0x2a5/0x360 [ 1095.974656][ T5494] ? __lock_acquire+0x6b5/0x2cf0 [ 1095.974684][ T5494] ? __pfx____sys_sendmsg+0x10/0x10 [ 1095.974750][ T5494] ? __fget_files+0x2a/0x420 [ 1095.974774][ T5494] ? __fget_files+0x3a0/0x420 [ 1095.974812][ T5494] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1095.974851][ T5494] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1095.974888][ T5494] ? __pfx_ksys_write+0x10/0x10 [ 1095.974928][ T5494] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1095.974952][ T5494] do_syscall_64+0x174/0xf80 [ 1095.974974][ T5494] ? trace_irq_disable+0x3b/0x140 [ 1095.975005][ T5494] ? clear_bhb_loop+0x40/0x90 [ 1095.975032][ T5494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1095.975054][ T5494] RIP: 0033:0x7f8cf479ce59 [ 1095.975075][ T5494] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1095.975094][ T5494] RSP: 002b:00007f8cf5666028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1095.975116][ T5494] RAX: ffffffffffffffda RBX: 00007f8cf4a15fa0 RCX: 00007f8cf479ce59 [ 1095.975133][ T5494] RDX: 0000000000000844 RSI: 00002000000015c0 RDI: 0000000000000005 [ 1095.975147][ T5494] RBP: 00007f8cf5666090 R08: 0000000000000000 R09: 0000000000000000 [ 1095.975161][ T5494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1095.975175][ T5494] R13: 00007f8cf4a16038 R14: 00007f8cf4a15fa0 R15: 00007ffdeeee4d58 [ 1095.975210][ T5494] [ 1096.387891][ T5457] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1096.412917][ T5457] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1096.425164][ T5457] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1096.612704][ T5508] gretap0: left promiscuous mode [ 1096.646244][ T5508] gretap0: refused to change device tx_queue_len [ 1096.679486][ T5508] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1096.782284][ T5501] syzkaller1: entered promiscuous mode [ 1096.798509][ T5501] syzkaller1: entered allmulticast mode [ 1096.978381][T22076] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1097.000928][T22076] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 1097.017376][T22076] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1097.117939][T22076] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1097.150944][T22076] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 1097.177573][T22076] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1097.244779][T22076] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1097.260112][T22076] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 1097.269388][T22076] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1097.346291][T22600] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1097.371894][T22600] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 1097.400871][ T5525] netlink: 'syz.2.8822': attribute type 1 has an invalid length. [ 1097.410836][T22600] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 1097.507554][ T5528] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8822'. [ 1097.590645][ T5528] bond15: entered promiscuous mode [ 1097.605678][ T5528] bond15: entered allmulticast mode [ 1097.728819][ T5529] netlink: 'syz.0.8823': attribute type 7 has an invalid length. [ 1097.829708][ T5529] : entered promiscuous mode [ 1097.839012][ T5547] netlink: 220 bytes leftover after parsing attributes in process `syz.3.8827'. [ 1097.890992][ T5547] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1097.902834][ T5551] netlink: 'syz.4.8829': attribute type 1 has an invalid length. [ 1097.912013][ T5551] netlink: 228 bytes leftover after parsing attributes in process `syz.4.8829'. [ 1097.929858][ T5551] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8829'. [ 1098.080185][ T5559] syzkaller1: entered promiscuous mode [ 1098.085954][ T5559] syzkaller1: entered allmulticast mode [ 1098.098537][ T5556] netlink: 'syz.0.8830': attribute type 11 has an invalid length. [ 1098.148664][ T5559] syzkaller1: left promiscuous mode [ 1098.187063][ T5559] syzkaller1: left allmulticast mode [ 1098.675458][ T5591] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 1098.704410][ T5591] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1099.037837][ T5608] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8846'. [ 1099.313620][ T5619] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8849'. [ 1099.357359][ T5619] netlink: 'syz.3.8849': attribute type 1 has an invalid length. [ 1099.379682][ T5619] netlink: 'syz.3.8849': attribute type 1 has an invalid length. [ 1099.659270][ T5635] syzkaller1: entered promiscuous mode [ 1099.674157][ T5635] syzkaller1: entered allmulticast mode [ 1099.688311][ T5632] pim6reg1: entered promiscuous mode [ 1099.703457][ T5632] pim6reg1: entered allmulticast mode [ 1100.194591][ T5650] ip6tnl0: left allmulticast mode [ 1100.246637][ T5650] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1100.322877][ T5650] veth0_to_bond: left allmulticast mode [ 1100.394995][ T5630] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1100.420121][ T5630] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1100.431100][ C0] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 1100.439029][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1100.454141][ T5630] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1100.464555][ T5630] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1100.478545][ T5630] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1100.498106][ T5650] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 1100.540327][ T5650] mac80211_hwsim hwsim66 wlan0: left promiscuous mode [ 1100.552625][ T5650] mac80211_hwsim hwsim66 wlan0: left allmulticast mode [ 1100.568310][ T5650] ip6gre1: left promiscuous mode [ 1100.577068][ T5650] ip6gre1: left allmulticast mode [ 1100.590323][ T5650] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1100.605811][ T5650] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1100.620870][ T5650] macvlan2: left promiscuous mode [ 1100.627120][ T5650] bond6: left promiscuous mode [ 1100.632271][ T5650] macvlan2: left allmulticast mode [ 1100.637593][ T5650] bond6: left allmulticast mode [ 1100.642687][ T5650] ip6gretap1: left allmulticast mode [ 1100.656067][ T5650] bond7: left promiscuous mode [ 1100.666923][ T5650] bond7: left allmulticast mode [ 1100.672314][ T5650] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1100.715470][ T5650] bond9: left promiscuous mode [ 1100.744954][ T5650] ip6gre2: left promiscuous mode [ 1100.780825][ T5650] ip6gre2: left allmulticast mode [ 1100.806965][ T5650] mac80211_hwsim hwsim66 syzkaller0: left promiscuous mode [ 1100.846023][ T5650] mac80211_hwsim hwsim66 syzkaller0: left allmulticast mode [ 1100.863549][ T5650] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 1100.923062][ T5657] FAULT_INJECTION: forcing a failure. [ 1100.923062][ T5657] name failslab, interval 1, probability 0, space 0, times 0 [ 1100.941832][ T5657] CPU: 1 UID: 0 PID: 5657 Comm: syz.1.8860 Not tainted syzkaller #0 PREEMPT(full) [ 1100.941860][ T5657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1100.941873][ T5657] Call Trace: [ 1100.941881][ T5657] [ 1100.941890][ T5657] dump_stack_lvl+0xe8/0x150 [ 1100.941920][ T5657] should_fail_ex+0x412/0x560 [ 1100.941949][ T5657] should_failslab+0xa8/0x100 [ 1100.941971][ T5657] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1100.942002][ T5657] ? __alloc_skb+0x186/0x7d0 [ 1100.942023][ T5657] ? __alloc_skb+0x1d0/0x7d0 [ 1100.942042][ T5657] ? __local_bh_enable_ip+0xd0/0x130 [ 1100.942068][ T5657] __alloc_skb+0x1d0/0x7d0 [ 1100.942089][ T5657] ? netlink_ack_tlv_len+0x6c/0x210 [ 1100.942116][ T5657] netlink_ack+0x146/0xa50 [ 1100.942138][ T5657] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1100.942158][ T5657] ? ref_tracker_free+0x693/0x840 [ 1100.942185][ T5657] ? __pfx_ref_tracker_free+0x10/0x10 [ 1100.942220][ T5657] netlink_rcv_skb+0x2b6/0x4b0 [ 1100.942247][ T5657] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1100.942270][ T5657] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1100.942292][ T5657] ? lockdep_hardirqs_on+0x7a/0x110 [ 1100.942342][ T5657] netlink_unicast+0x75c/0x8e0 [ 1100.942378][ T5657] netlink_sendmsg+0x813/0xb40 [ 1100.942414][ T5657] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1100.942444][ T5657] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1100.942476][ T5657] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1100.942516][ T5657] ____sys_sendmsg+0x972/0x9f0 [ 1100.942542][ T5657] ? __might_fault+0xaf/0x130 [ 1100.942576][ T5657] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1100.942611][ T5657] ? import_iovec+0x73/0xa0 [ 1100.942644][ T5657] ___sys_sendmsg+0x2a5/0x360 [ 1100.942668][ T5657] ? __lock_acquire+0x6b5/0x2cf0 [ 1100.942695][ T5657] ? __pfx____sys_sendmsg+0x10/0x10 [ 1100.942760][ T5657] ? __fget_files+0x2a/0x420 [ 1100.942785][ T5657] ? __fget_files+0x3a0/0x420 [ 1100.942823][ T5657] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1100.942852][ T5657] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1100.942889][ T5657] ? __pfx_ksys_write+0x10/0x10 [ 1100.942929][ T5657] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1100.942953][ T5657] do_syscall_64+0x174/0xf80 [ 1100.942975][ T5657] ? trace_irq_disable+0x3b/0x140 [ 1100.943007][ T5657] ? clear_bhb_loop+0x40/0x90 [ 1100.943033][ T5657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1100.943054][ T5657] RIP: 0033:0x7fd08079ce59 [ 1100.943074][ T5657] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1100.943093][ T5657] RSP: 002b:00007fd0816aa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1100.943116][ T5657] RAX: ffffffffffffffda RBX: 00007fd080a16090 RCX: 00007fd08079ce59 [ 1100.943132][ T5657] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 000000000000000a [ 1100.943144][ T5657] RBP: 00007fd0816aa090 R08: 0000000000000000 R09: 0000000000000000 [ 1100.943157][ T5657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1100.943169][ T5657] R13: 00007fd080a16128 R14: 00007fd080a16090 R15: 00007ffcfff549a8 [ 1100.943204][ T5657] [ 1101.661206][ T5680] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8866'. [ 1102.006109][ T5704] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8869'. [ 1102.079291][ T5663] wg1 speed is unknown, defaulting to 1000 [ 1102.375967][ T5722] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8875'. [ 1102.393039][ T5725] syzkaller1: entered promiscuous mode [ 1102.405759][ T5722] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1102.416379][ T5725] syzkaller1: entered allmulticast mode [ 1102.436168][ T5722] IPVS: lc: FWM 3 0x00000003 - no destination available [ 1102.573913][T32238] Bluetooth: hci4: command tx timeout [ 1103.306254][ T5776] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8885'. [ 1103.358319][ T5778] netlink: 212328 bytes leftover after parsing attributes in process `syz.1.8886'. [ 1103.371363][ T5778] netlink: Unknown conntrack attr (type=2304, max=9) [ 1103.526553][ T5663] bridge0: port 1(bridge_slave_0) entered blocking state [ 1103.547352][ T5663] bridge0: port 1(bridge_slave_0) entered disabled state [ 1103.562693][ T5663] bridge_slave_0: entered allmulticast mode [ 1103.571351][ T5663] bridge_slave_0: entered promiscuous mode [ 1103.585605][ T5663] bridge0: port 2(bridge_slave_1) entered blocking state [ 1103.598030][ T5663] bridge0: port 2(bridge_slave_1) entered disabled state [ 1103.608428][ T5663] bridge_slave_1: entered allmulticast mode [ 1103.622528][ T5663] bridge_slave_1: entered promiscuous mode [ 1103.769770][ T5663] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1103.801441][ T5663] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1103.819317][ T5793] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8892'. [ 1103.916343][ T5663] team0: Port device team_slave_0 added [ 1103.941554][ T5663] team0: Port device team_slave_1 added [ 1104.092310][ T5663] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1104.099839][ T5663] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1104.134680][ T5663] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1104.180345][ T5663] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1104.198166][ T5663] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1104.257627][ T5663] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1104.378329][ T5663] hsr_slave_0: entered promiscuous mode [ 1104.399821][ T5663] hsr_slave_1: entered promiscuous mode [ 1104.499080][ T5809] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8897'. [ 1104.575819][ T5809] hsr_slave_0: left promiscuous mode [ 1104.642304][ T5809] hsr_slave_1: left promiscuous mode [ 1104.653457][T32238] Bluetooth: hci4: command tx timeout [ 1105.167402][ T5819] gretap0: entered promiscuous mode [ 1105.191809][ T5821] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8901'. [ 1105.348868][ T5834] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8904'. [ 1105.479412][ T5821] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1105.508369][ T5821] bond12 (unregistering): Released all slaves [ 1105.585469][ T5841] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8905'. [ 1106.297608][ T5861] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8911'. [ 1106.543288][ T5869] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8914'. [ 1106.742687][T32238] Bluetooth: hci4: command tx timeout [ 1106.813800][ C0] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 1107.162471][ T5885] syzk: option downdelay: invalid value (18446744073709547007) [ 1107.194453][ T5885] syzk: option downdelay: allowed values 0 - 2147483647 [ 1107.216321][ T5885] syzk (unregistering): Released all slaves [ 1107.439807][ T5663] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1107.455267][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1107.523634][ T5663] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1107.555912][ T5663] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1107.576812][ T5663] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1107.586053][ T5663] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1107.616532][ T5663] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1107.631890][ T5902] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8922'. [ 1107.642766][ T5663] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1107.656904][ T5663] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1107.723264][ T5904] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8922'. [ 1107.858774][ T5663] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1107.929534][ T5663] 8021q: adding VLAN 0 to HW filter on device team0 [ 1107.957745][T22071] bridge0: port 1(bridge_slave_0) entered blocking state [ 1107.964973][T22071] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1108.012268][T22071] bridge0: port 2(bridge_slave_1) entered blocking state [ 1108.019514][T22071] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1108.814263][T32238] Bluetooth: hci4: command tx timeout [ 1111.943821][ T5922] ip6gretap1: left promiscuous mode [ 1112.044852][ T5922] veth11: left allmulticast mode [ 1112.077905][ T5922] bond14: left allmulticast mode [ 1112.091616][ T7721] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1112.123384][ T7721] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1112.142979][ T7721] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1112.162803][ T7721] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1112.193904][ T7721] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1112.218234][ T7721] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1112.242558][ T7721] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1112.270083][ T7721] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1112.309696][ T7721] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1112.352662][ T7721] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1112.380385][ T7721] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1112.410557][ T7721] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1112.556448][ T5944] tipc: MTU too low for tipc bearer [ 1112.988232][ T5966] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8937'. [ 1113.095748][ T5663] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1113.172708][ T5966] macsec0: entered promiscuous mode [ 1113.201180][ T5966] bridge0: entered promiscuous mode [ 1113.444865][ T5663] veth0_vlan: entered promiscuous mode [ 1113.491499][ T5663] veth1_vlan: entered promiscuous mode [ 1113.576709][ T5663] veth0_macvtap: entered promiscuous mode [ 1113.618854][ T5663] veth1_macvtap: entered promiscuous mode [ 1113.678118][ T5663] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1113.725188][ T5663] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1113.768677][T22075] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1113.793810][ T6000] netlink: 'syz.4.8945': attribute type 11 has an invalid length. [ 1113.819116][ T5999] netlink: 'syz.4.8945': attribute type 11 has an invalid length. [ 1113.826603][T22075] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1113.845672][ T6000] netlink: 140 bytes leftover after parsing attributes in process `syz.4.8945'. [ 1113.868835][T22075] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1113.876087][ T5999] netlink: 140 bytes leftover after parsing attributes in process `syz.4.8945'. [ 1113.913029][T22075] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1113.924892][ T5997] wg1 speed is unknown, defaulting to 1000 [ 1114.144155][ T6007] netlink: 'syz.4.8946': attribute type 2 has an invalid length. [ 1114.152220][ T6007] netlink: 'syz.4.8946': attribute type 1 has an invalid length. [ 1114.252236][ T6007] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8946'. [ 1114.266669][ T6007] netlink: 'syz.4.8946': attribute type 11 has an invalid length. [ 1114.337457][ T6007] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8946'. [ 1114.356943][ T6007] netlink: 'syz.4.8946': attribute type 11 has an invalid length. [ 1114.373927][T22076] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1114.397993][T22076] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1114.426158][T22076] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1114.470026][ T6013] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8949'. [ 1114.507387][ T6013] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8949'. [ 1114.515854][T22076] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1114.542390][T22076] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1114.571837][T22076] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1114.905497][ T6023] netlink: 'syz.3.8951': attribute type 9 has an invalid length. [ 1115.068171][T22051] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1115.108622][T22051] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1115.124206][ T6030] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8953'. [ 1115.651586][ T6054] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8957'. [ 1116.140852][ T6069] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8961'. [ 1116.211989][ T6076] netlink: 'syz.3.8962': attribute type 2 has an invalid length. [ 1116.252793][ T6076] netlink: 'syz.3.8962': attribute type 8 has an invalid length. [ 1116.638119][ T6090] vlan1: entered allmulticast mode [ 1116.643900][ T6090] bond0: entered allmulticast mode [ 1116.849144][ T6098] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1116.858822][ T6098] 8021q: adding VLAN 0 to HW filter on device team0 [ 1116.989125][ T6104] netlink: 'syz.0.8970': attribute type 4 has an invalid length. [ 1117.016788][T22071] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1117.033753][T22071] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1117.068371][T22071] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1117.095877][T22071] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1117.338000][ T6110] bond15: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 1117.541397][ T6110] bond15 (unregistering): Released all slaves [ 1117.706611][ T6124] bond15: entered promiscuous mode [ 1117.723392][ T6124] bond15: entered allmulticast mode [ 1117.730668][ T6124] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1117.999426][ T6138] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1118.022162][ T6138] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1118.039699][ T6142] __nla_validate_parse: 3 callbacks suppressed [ 1118.039717][ T6142] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8977'. [ 1118.602204][ T6168] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8982'. [ 1118.633896][ T6158] tipc: Enabled bearer , priority 10 [ 1118.657387][ T6168] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8982'. [ 1118.776632][ T6168] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8982'. [ 1118.939915][ T6168] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8982'. [ 1119.182947][ T6191] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8989'. [ 1119.193724][ T6191] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8989'. [ 1119.292984][ T5291] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1119.879386][ T6216] FAULT_INJECTION: forcing a failure. [ 1119.879386][ T6216] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1119.911179][ T6216] CPU: 1 UID: 0 PID: 6216 Comm: syz.1.8995 Not tainted syzkaller #0 PREEMPT(full) [ 1119.911224][ T6216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1119.911238][ T6216] Call Trace: [ 1119.911247][ T6216] [ 1119.911257][ T6216] dump_stack_lvl+0xe8/0x150 [ 1119.911287][ T6216] should_fail_ex+0x412/0x560 [ 1119.911320][ T6216] _copy_from_user+0x2d/0xb0 [ 1119.911348][ T6216] ____sys_sendmsg+0x308/0x9f0 [ 1119.911388][ T6216] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1119.911425][ T6216] ? import_iovec+0x73/0xa0 [ 1119.911455][ T6216] ___sys_sendmsg+0x2a5/0x360 [ 1119.911478][ T6216] ? __lock_acquire+0x6b5/0x2cf0 [ 1119.911506][ T6216] ? __pfx____sys_sendmsg+0x10/0x10 [ 1119.911577][ T6216] ? __fget_files+0x2a/0x420 [ 1119.911602][ T6216] ? __fget_files+0x3a0/0x420 [ 1119.911638][ T6216] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1119.911666][ T6216] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1119.911701][ T6216] ? __pfx_ksys_write+0x10/0x10 [ 1119.911740][ T6216] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1119.911763][ T6216] do_syscall_64+0x174/0xf80 [ 1119.911785][ T6216] ? trace_irq_disable+0x3b/0x140 [ 1119.911817][ T6216] ? clear_bhb_loop+0x40/0x90 [ 1119.911842][ T6216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1119.911862][ T6216] RIP: 0033:0x7fd08079ce59 [ 1119.911882][ T6216] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1119.911900][ T6216] RSP: 002b:00007fd0816aa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1119.911923][ T6216] RAX: ffffffffffffffda RBX: 00007fd080a16090 RCX: 00007fd08079ce59 [ 1119.911938][ T6216] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000006 [ 1119.911951][ T6216] RBP: 00007fd0816aa090 R08: 0000000000000000 R09: 0000000000000000 [ 1119.911964][ T6216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1119.911977][ T6216] R13: 00007fd080a16128 R14: 00007fd080a16090 R15: 00007ffcfff549a8 [ 1119.912013][ T6216] [ 1120.201273][ T6221] validate_nla: 3 callbacks suppressed [ 1120.201294][ T6221] netlink: 'syz.0.8996': attribute type 4 has an invalid length. [ 1120.375264][ T6221] netlink: 'syz.0.8996': attribute type 4 has an invalid length. [ 1120.445243][ T6236] netlink: 'syz.1.8999': attribute type 1 has an invalid length. [ 1120.757965][ T6253] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9005'. [ 1120.820657][ T6254] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9005'. [ 1121.208453][ T6272] FAULT_INJECTION: forcing a failure. [ 1121.208453][ T6272] name failslab, interval 1, probability 0, space 0, times 0 [ 1121.261890][ T6272] CPU: 0 UID: 0 PID: 6272 Comm: syz.1.9009 Not tainted syzkaller #0 PREEMPT(full) [ 1121.261939][ T6272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1121.261952][ T6272] Call Trace: [ 1121.261960][ T6272] [ 1121.261970][ T6272] dump_stack_lvl+0xe8/0x150 [ 1121.262000][ T6272] should_fail_ex+0x412/0x560 [ 1121.262028][ T6272] should_failslab+0xa8/0x100 [ 1121.262048][ T6272] ? dst_alloc+0x105/0x170 [ 1121.262075][ T6272] kmem_cache_alloc_noprof+0x87/0x650 [ 1121.262105][ T6272] ? __lock_acquire+0x6b5/0x2cf0 [ 1121.262131][ T6272] dst_alloc+0x105/0x170 [ 1121.262162][ T6272] ip_route_output_key_hash_rcu+0x14d0/0x25d0 [ 1121.262193][ T6272] ? ip_route_output_key_hash+0xd8/0x2a0 [ 1121.262215][ T6272] ip_route_output_key_hash+0x18d/0x2a0 [ 1121.262234][ T6272] ? ns_capable+0x89/0xe0 [ 1121.262255][ T6272] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 1121.262293][ T6272] ip_route_output_flow+0x2a/0x150 [ 1121.262320][ T6272] ? security_sk_classify_flow+0x6d/0x150 [ 1121.262347][ T6272] udp_sendmsg+0x141a/0x21a0 [ 1121.262376][ T6272] ? string+0x279/0x2b0 [ 1121.262413][ T6272] ? __pfx_udp_sendmsg+0x10/0x10 [ 1121.262445][ T6272] ? format_decode+0x5a3/0xe10 [ 1121.262471][ T6272] ? look_up_lock_class+0x57/0x110 [ 1121.262503][ T6272] ? __lock_acquire+0x6b5/0x2cf0 [ 1121.262538][ T6272] ? get_random_u32+0x497/0x8b0 [ 1121.262570][ T6272] ? lockdep_hardirqs_on+0x7a/0x110 [ 1121.262591][ T6272] ? get_random_u32+0x13a/0x8b0 [ 1121.262620][ T6272] ? get_random_u32+0x4ce/0x8b0 [ 1121.262662][ T6272] udpv6_sendmsg+0x996/0x25c0 [ 1121.262708][ T6272] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 1121.262732][ T6272] ? udp_lib_get_port+0x177a/0x1c60 [ 1121.262766][ T6272] ? ip6_datagram_release_cb+0x7c/0x550 [ 1121.262814][ T6272] ? inet_send_prepare+0x1b9/0x270 [ 1121.262836][ T6272] ? inet_send_prepare+0x1b9/0x270 [ 1121.262861][ T6272] ? inet_send_prepare+0x1b9/0x270 [ 1121.262879][ T6272] ? __local_bh_enable_ip+0xd0/0x130 [ 1121.262912][ T6272] ? inet_send_prepare+0x1b9/0x270 [ 1121.262935][ T6272] ? inet6_sendmsg+0xe4/0x120 [ 1121.262959][ T6272] ____sys_sendmsg+0x5c7/0x9f0 [ 1121.262996][ T6272] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1121.263033][ T6272] ? import_iovec+0x73/0xa0 [ 1121.263062][ T6272] ___sys_sendmsg+0x2a5/0x360 [ 1121.263087][ T6272] ? __lock_acquire+0x6b5/0x2cf0 [ 1121.263113][ T6272] ? __pfx____sys_sendmsg+0x10/0x10 [ 1121.263177][ T6272] ? __fget_files+0x2a/0x420 [ 1121.263202][ T6272] ? __fget_files+0x3a0/0x420 [ 1121.263237][ T6272] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1121.263265][ T6272] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1121.263301][ T6272] ? __pfx_ksys_write+0x10/0x10 [ 1121.263340][ T6272] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1121.263363][ T6272] do_syscall_64+0x174/0xf80 [ 1121.263386][ T6272] ? trace_irq_disable+0x3b/0x140 [ 1121.263417][ T6272] ? clear_bhb_loop+0x40/0x90 [ 1121.263441][ T6272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1121.263461][ T6272] RIP: 0033:0x7fd08079ce59 [ 1121.263480][ T6272] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1121.263498][ T6272] RSP: 002b:00007fd0816aa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1121.263520][ T6272] RAX: ffffffffffffffda RBX: 00007fd080a16090 RCX: 00007fd08079ce59 [ 1121.263535][ T6272] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000006 [ 1121.263548][ T6272] RBP: 00007fd0816aa090 R08: 0000000000000000 R09: 0000000000000000 [ 1121.263561][ T6272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1121.263574][ T6272] R13: 00007fd080a16128 R14: 00007fd080a16090 R15: 00007ffcfff549a8 [ 1121.263611][ T6272] [ 1122.424936][ T6295] bond15: entered promiscuous mode [ 1122.430248][ T6295] bond15: entered allmulticast mode [ 1122.436469][ T6295] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1122.622666][ T6293] wg1 speed is unknown, defaulting to 1000 [ 1122.664003][ T5630] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1122.689655][ T5630] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1122.700638][ T5630] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1122.711893][ T5630] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1122.717233][ T6294] wg1 speed is unknown, defaulting to 1000 [ 1122.725968][ T5630] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1123.207980][ T6317] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9020'. [ 1123.893742][ T6300] wg1 speed is unknown, defaulting to 1000 [ 1124.536685][ T6341] xt_hashlimit: max too large, truncated to 1048576 [ 1124.554256][ T6341] xt_hashlimit: overflow, try lower: 2/0 [ 1124.640142][ T6348] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9027'. [ 1124.678358][ T6300] bridge0: port 1(bridge_slave_0) entered blocking state [ 1124.709208][ T6300] bridge0: port 1(bridge_slave_0) entered disabled state [ 1124.735441][ T6300] bridge_slave_0: entered allmulticast mode [ 1124.758361][ T6300] bridge_slave_0: entered promiscuous mode [ 1124.781937][ T6300] bridge0: port 2(bridge_slave_1) entered blocking state [ 1124.799239][ T6300] bridge0: port 2(bridge_slave_1) entered disabled state [ 1124.814099][ T5630] Bluetooth: hci1: command tx timeout [ 1124.841562][ T6300] bridge_slave_1: entered allmulticast mode [ 1124.868274][ T6300] bridge_slave_1: entered promiscuous mode [ 1124.918974][ T6358] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1 [ 1125.037952][ T6300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1125.077498][ T6300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1125.130029][ T6361] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1125.221883][ T6300] team0: Port device team_slave_0 added [ 1125.261495][ T6300] team0: Port device team_slave_1 added [ 1125.432161][ T6364] vlan2: entered promiscuous mode [ 1125.452914][ T6364] bridge0: entered promiscuous mode [ 1125.481605][ T6300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1125.505979][ T6300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1125.585744][ T6300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1125.626265][ T6300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1125.648671][ T6300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1125.736834][ T6300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1125.947582][ T6300] hsr_slave_0: entered promiscuous mode [ 1125.977290][ T6300] hsr_slave_1: entered promiscuous mode [ 1126.006949][ T6300] debugfs: 'hsr0' already exists in 'hsr' [ 1126.036359][ T6300] Cannot create hsr debugfs directory [ 1126.069285][ T6386] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.9037'. [ 1126.132823][ T6386] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9037'. [ 1126.356455][ T6391] FAULT_INJECTION: forcing a failure. [ 1126.356455][ T6391] name failslab, interval 1, probability 0, space 0, times 0 [ 1126.405957][ T6391] CPU: 1 UID: 0 PID: 6391 Comm: syz.0.9038 Not tainted syzkaller #0 PREEMPT(full) [ 1126.406007][ T6391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1126.406021][ T6391] Call Trace: [ 1126.406031][ T6391] [ 1126.406040][ T6391] dump_stack_lvl+0xe8/0x150 [ 1126.406070][ T6391] should_fail_ex+0x412/0x560 [ 1126.406098][ T6391] should_failslab+0xa8/0x100 [ 1126.406120][ T6391] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1126.406148][ T6391] ? __alloc_skb+0x186/0x7d0 [ 1126.406169][ T6391] ? __alloc_skb+0x1d0/0x7d0 [ 1126.406186][ T6391] ? __local_bh_enable_ip+0xd0/0x130 [ 1126.406213][ T6391] __alloc_skb+0x1d0/0x7d0 [ 1126.406239][ T6391] alloc_skb_with_frags+0xc8/0x760 [ 1126.406268][ T6391] ? __pfx___schedule+0x10/0x10 [ 1126.406286][ T6391] ? __lock_acquire+0x6b5/0x2cf0 [ 1126.406312][ T6391] sock_alloc_send_pskb+0x878/0x990 [ 1126.406358][ T6391] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1126.406390][ T6391] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 1126.406410][ T6391] ? __ip_append_data+0xe25/0x3e40 [ 1126.406438][ T6391] __ip_append_data+0x2a98/0x3e40 [ 1126.406478][ T6391] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 1126.406503][ T6391] ? ipv4_mtu+0x23/0x650 [ 1126.406542][ T6391] ? ipv4_mtu+0x23/0x650 [ 1126.406573][ T6391] ? __pfx___ip_append_data+0x10/0x10 [ 1126.406593][ T6391] ? ipv4_mtu+0x23/0x650 [ 1126.406620][ T6391] ? __pfx_ipv4_mtu+0x10/0x10 [ 1126.406648][ T6391] ? ip_setup_cork+0x57e/0xa50 [ 1126.406669][ T6391] ip_make_skb+0x22e/0x450 [ 1126.406706][ T6391] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 1126.406726][ T6391] ? __pfx_ip_make_skb+0x10/0x10 [ 1126.406767][ T6391] udp_sendmsg+0x18fd/0x21a0 [ 1126.406799][ T6391] ? string+0x279/0x2b0 [ 1126.406834][ T6391] ? __pfx_udp_sendmsg+0x10/0x10 [ 1126.406863][ T6391] ? format_decode+0x5a3/0xe10 [ 1126.406889][ T6391] ? look_up_lock_class+0x57/0x110 [ 1126.406919][ T6391] ? __lock_acquire+0x6b5/0x2cf0 [ 1126.406956][ T6391] ? get_random_u32+0x4ce/0x8b0 [ 1126.406997][ T6391] udpv6_sendmsg+0x996/0x25c0 [ 1126.407046][ T6391] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 1126.407070][ T6391] ? udp_lib_get_port+0x177a/0x1c60 [ 1126.407101][ T6391] ? ip6_datagram_release_cb+0x7c/0x550 [ 1126.407148][ T6391] ? inet_send_prepare+0x1b9/0x270 [ 1126.407169][ T6391] ? inet_send_prepare+0x1b9/0x270 [ 1126.407192][ T6391] ? inet_send_prepare+0x1b9/0x270 [ 1126.407210][ T6391] ? __local_bh_enable_ip+0xd0/0x130 [ 1126.407230][ T6391] ? inet_send_prepare+0x1b9/0x270 [ 1126.407253][ T6391] ? inet6_sendmsg+0xe4/0x120 [ 1126.407278][ T6391] ____sys_sendmsg+0x5c7/0x9f0 [ 1126.407312][ T6391] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1126.407347][ T6391] ? import_iovec+0x73/0xa0 [ 1126.407376][ T6391] ___sys_sendmsg+0x2a5/0x360 [ 1126.407399][ T6391] ? __lock_acquire+0x6b5/0x2cf0 [ 1126.407443][ T6391] ? __pfx____sys_sendmsg+0x10/0x10 [ 1126.407508][ T6391] ? __fget_files+0x2a/0x420 [ 1126.407532][ T6391] ? __fget_files+0x3a0/0x420 [ 1126.407567][ T6391] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1126.407596][ T6391] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1126.407632][ T6391] ? __pfx_ksys_write+0x10/0x10 [ 1126.407672][ T6391] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1126.407705][ T6391] do_syscall_64+0x174/0xf80 [ 1126.407727][ T6391] ? trace_irq_disable+0x3b/0x140 [ 1126.407758][ T6391] ? clear_bhb_loop+0x40/0x90 [ 1126.407785][ T6391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1126.407805][ T6391] RIP: 0033:0x7f3a6099ce59 [ 1126.407825][ T6391] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1126.407843][ T6391] RSP: 002b:00007f3a61862028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1126.407865][ T6391] RAX: ffffffffffffffda RBX: 00007f3a60c16090 RCX: 00007f3a6099ce59 [ 1126.407880][ T6391] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000006 [ 1126.407894][ T6391] RBP: 00007f3a61862090 R08: 0000000000000000 R09: 0000000000000000 [ 1126.407906][ T6391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1126.407918][ T6391] R13: 00007f3a60c16128 R14: 00007f3a60c16090 R15: 00007ffddc333e88 [ 1126.407951][ T6391] [ 1126.894591][ T5630] Bluetooth: hci1: command tx timeout [ 1127.891163][ T6415] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9046'. [ 1127.908982][ T6415] netlink: 'syz.0.9046': attribute type 1 has an invalid length. [ 1128.017135][ T6424] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1128.044023][ T6424] bond1: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 1128.070880][ T6424] bond1: (slave vxcan3): making interface the new active one [ 1128.088197][ T6426] netlink: 'syz.4.9048': attribute type 9 has an invalid length. [ 1128.096124][ T6424] bond1: (slave vxcan3): Enslaving as an active interface with an up link [ 1128.108784][ T6426] netlink: 'syz.4.9048': attribute type 6 has an invalid length. [ 1128.117124][ T6426] netlink: 'syz.4.9048': attribute type 7 has an invalid length. [ 1128.125933][ T6426] netlink: 'syz.4.9048': attribute type 8 has an invalid length. [ 1128.181023][ T6415] bond1 (unregistering): (slave vxcan3): Releasing backup interface [ 1128.195102][ T6415] bond1 (unregistering): Released all slaves [ 1128.248190][ T6300] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1128.264092][ T6300] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1128.305529][ T6300] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1128.329141][ T6300] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1128.348182][ T6300] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1128.379107][ T6300] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1128.390478][ T6300] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1128.404316][ T6300] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1128.472677][ T6435] netlink: 'syz.3.9049': attribute type 25 has an invalid length. [ 1128.484006][ T6435] netlink: 'syz.3.9049': attribute type 3 has an invalid length. [ 1128.492025][ T6435] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9049'. [ 1128.574374][ T6300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1128.646819][ T6300] 8021q: adding VLAN 0 to HW filter on device team0 [ 1128.679125][T22075] bridge0: port 1(bridge_slave_0) entered blocking state [ 1128.686376][T22075] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1128.800380][ T6437] tipc: Resetting bearer [ 1128.868880][T22075] bridge0: port 2(bridge_slave_1) entered blocking state [ 1128.876130][T22075] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1128.973683][ T5630] Bluetooth: hci1: command tx timeout [ 1129.897245][ T6477] pim6reg1: entered promiscuous mode [ 1129.902612][ T6477] pim6reg1: entered allmulticast mode [ 1130.062748][ T6483] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1130.121025][ T6481] tipc: Enabling of bearer rejected, already enabled [ 1130.157394][ T6481] mac80211_hwsim hwsim66 syzkaller0: entered promiscuous mode [ 1130.180031][ T6481] mac80211_hwsim hwsim66 syzkaller0: entered allmulticast mode [ 1130.479028][ T6494] erspan1: entered promiscuous mode [ 1130.492880][ T6494] erspan1: entered allmulticast mode [ 1130.791298][ T6515] xt_NFQUEUE: number of queues (3633) out of range (got 69161) [ 1130.880763][ T6522] netlink: 1108 bytes leftover after parsing attributes in process `syz.0.9066'. [ 1130.892944][ T6515] netlink: 52 bytes leftover after parsing attributes in process `syz.1.9065'. [ 1130.996021][ T6527] netlink: 68 bytes leftover after parsing attributes in process `syz.0.9066'. [ 1131.054217][ T5630] Bluetooth: hci1: command tx timeout [ 1131.326882][ T6500] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1131.415450][ T6300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1131.612043][ T6549] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.9070'. [ 1131.738117][ T6300] veth0_vlan: entered promiscuous mode [ 1131.807295][ T6300] veth1_vlan: entered promiscuous mode [ 1132.107499][ T6566] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9075'. [ 1132.250895][ T6300] veth0_macvtap: entered promiscuous mode [ 1132.289781][ T6300] veth1_macvtap: entered promiscuous mode [ 1132.378806][ T6300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1132.472728][ T6300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1132.521985][T22071] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1132.554528][T22071] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1132.603654][T22600] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1132.625697][T22600] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1133.012507][T22607] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1133.040408][T22607] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1133.095123][T22594] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1133.122567][T22594] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1133.555398][ T6593] syzkaller0: entered promiscuous mode [ 1133.569088][ T6593] syzkaller0: entered allmulticast mode [ 1133.678309][ T6600] Cannot find del_set index 0 as target [ 1133.699033][ T6601] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9080'. [ 1133.726755][ T6602] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9017'. [ 1134.412107][ T6636] netlink: 'syz.0.9088': attribute type 4 has an invalid length. [ 1134.434717][ T6633] syzkaller1: entered promiscuous mode [ 1134.438584][ T6636] netlink: 17 bytes leftover after parsing attributes in process `syz.0.9088'. [ 1134.450635][ T6633] syzkaller1: entered allmulticast mode [ 1134.503321][ T6636] openvswitch: netlink: IP tunnel attribute has 5 unknown bytes. [ 1134.522421][ T6636] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9088'. [ 1134.974361][ C0] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 1136.435990][T32238] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1136.455495][T32238] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1136.473075][T32238] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1136.489455][T32238] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1136.507457][T32238] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1137.082312][T22071] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1137.093205][T22071] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 1137.108727][T22071] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1137.261904][T22071] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1137.284537][T22071] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 1137.297461][T22071] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1137.312206][ T6689] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9098'. [ 1137.361655][ T6677] wg1 speed is unknown, defaulting to 1000 [ 1137.417945][T22071] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1137.429485][T22071] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 1137.440180][T22071] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1137.520258][T22071] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1137.530611][T22071] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 1137.544792][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1137.559314][T22071] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1137.645877][ T6695] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9099'. [ 1137.850105][ T6655] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1137.977416][T22071] tipc: Resetting bearer [ 1138.575080][ T5630] Bluetooth: hci5: command tx timeout [ 1138.618807][ T6718] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9101'. [ 1139.187893][T22071] BUG: MAX_LOCKDEP_KEYS too low! [ 1139.192864][T22071] turning off the locking correctness validator. [ 1139.199194][T22071] CPU: 0 UID: 0 PID: 22071 Comm: kworker/u8:31 Not tainted syzkaller #0 PREEMPT(full) [ 1139.199214][T22071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1139.199225][T22071] Workqueue: netns cleanup_net [ 1139.199246][T22071] Call Trace: [ 1139.199252][T22071] [ 1139.199260][T22071] dump_stack_lvl+0xe8/0x150 [ 1139.199278][T22071] register_lock_class+0x2a9/0x2e0 [ 1139.199316][T22071] ? add_lock_to_list+0xc7/0x100 [ 1139.199348][T22071] __lock_acquire+0xad/0x2cf0 [ 1139.199375][T22071] ? dev_reset_queue+0x138/0x1b0 [ 1139.199391][T22071] lock_acquire+0x106/0x350 [ 1139.199405][T22071] ? dev_reset_queue+0x138/0x1b0 [ 1139.199423][T22071] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1139.199446][T22071] ? dev_reset_queue+0x138/0x1b0 [ 1139.199461][T22071] _raw_spin_lock_bh+0x36/0x50 [ 1139.199483][T22071] ? dev_reset_queue+0x138/0x1b0 [ 1139.199499][T22071] dev_reset_queue+0x138/0x1b0 [ 1139.199515][T22071] dev_deactivate_many+0x72a/0xd40 [ 1139.199533][T22071] ? dev_deactivate_many+0x24f/0xd40 [ 1139.199552][T22071] __dev_close_many+0x180/0x6e0 [ 1139.199576][T22071] ? __pfx___dev_close_many+0x10/0x10 [ 1139.199602][T22071] netif_close_many+0x225/0x420 [ 1139.199625][T22071] ? __pfx_netif_close_many+0x10/0x10 [ 1139.199647][T22071] ? lockdep_hardirqs_on+0x7a/0x110 [ 1139.199665][T22071] unregister_netdevice_many_notify+0xb50/0x22c0 [ 1139.199688][T22071] ? queue_rcu_work+0xe7/0x160 [ 1139.199707][T22071] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1139.199729][T22071] ? __pfx_ipmr_free_table+0x10/0x10 [ 1139.199751][T22071] ? __pfx_nexthop_net_exit_rtnl+0x10/0x10 [ 1139.199771][T22071] ? rtnl_is_locked+0x15/0x20 [ 1139.199788][T22071] ? nexthop_net_exit_rtnl+0x254/0x2a0 [ 1139.199808][T22071] ? ipmr_net_exit_rtnl+0x17d/0x1a0 [ 1139.199829][T22071] ops_undo_list+0x3d3/0x940 [ 1139.199846][T22071] ? __pfx_ops_undo_list+0x10/0x10 [ 1139.199862][T22071] ? idr_destroy+0x218/0x290 [ 1139.199874][T22071] ? do_raw_spin_unlock+0xf5/0x210 [ 1139.199896][T22071] cleanup_net+0x56b/0x800 [ 1139.199911][T22071] ? __pfx_cleanup_net+0x10/0x10 [ 1139.199941][T22071] ? process_scheduled_works+0xa70/0x1860 [ 1139.199955][T22071] ? process_scheduled_works+0xa70/0x1860 [ 1139.199970][T22071] process_scheduled_works+0xb5d/0x1860 [ 1139.200001][T22071] ? __pfx_process_scheduled_works+0x10/0x10 [ 1139.200018][T22071] ? assign_work+0x3d5/0x5e0 [ 1139.200033][T22071] worker_thread+0xa53/0xfc0 [ 1139.200058][T22071] kthread+0x389/0x470 [ 1139.200077][T22071] ? __pfx_worker_thread+0x10/0x10 [ 1139.200090][T22071] ? __pfx_kthread+0x10/0x10 [ 1139.200107][T22071] ret_from_fork+0x514/0xb70 [ 1139.200123][T22071] ? __pfx_ret_from_fork+0x10/0x10 [ 1139.200137][T22071] ? __switch_to+0xc79/0x1410 [ 1139.200158][T22071] ? __pfx_kthread+0x10/0x10 [ 1139.200175][T22071] ret_from_fork_asm+0x1a/0x30 [ 1139.200198][T22071] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1139.897057][T22071] tipc: Disabling bearer [ 1139.945463][T22071] bond0 (unregistering): (slave erspan1): Releasing backup interface [ 1140.038288][T22071] bond6 (unregistering): (slave gretap2): Releasing active interface [ 1140.659193][ T5630] Bluetooth: hci5: command tx timeout [ 1142.733623][ T5630] Bluetooth: hci5: command tx timeout [ 1144.814577][ T5630] Bluetooth: hci5: command tx timeout VM DIAGNOSIS: Connection timed out during banner exchange Connection to 10.128.1.24 port 22 timed out failed to run ["ssh" "-p" "22" "-F" "/dev/null" "-o" "UserKnownHostsFile=/dev/null" "-o" "IdentitiesOnly=yes" "-o" "BatchMode=yes" "-o" "StrictHostKeyChecking=no" "-o" "ConnectTimeout=10" "root@10.128.1.24" "cat" "/proc/lockdep_stats" "/proc/lockdep" "/proc/lockdep_chains"]: exit status 255