last executing test programs: 3.511206309s ago: executing program 4 (id=1610): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000), 0xe) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000340)=0x48a, 0x4) sendmmsg(r0, &(0x7f0000003940)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000017c0)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x80, &(0x7f0000001a00), 0x0, &(0x7f0000001a80)}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002fc0)=ANY=[@ANYBLOB], 0x478}}], 0x3, 0x24004810) listen(0xffffffffffffffff, 0x2f) listen(0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d65b"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) close(0x3) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan0\x00', 0x0}) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000000)={@remote, r4}, 0x14) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@newtfilter={0x54, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r4, {0xfffd, 0x13}, {0xc, 0xfff1}, {0xfff2, 0x2}}, [@TCA_RATE={0x6, 0x5, {0x10, 0x56}}, @TCA_RATE={0x6, 0x5, {0x2, 0x6}}, @filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x1}]}}, @TCA_CHAIN={0x8}]}, 0x54}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) close(r3) listen(0xffffffffffffffff, 0xaca) epoll_create1(0x0) epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) socket(0x40000000015, 0x5, 0x0) socket$kcm(0x29, 0x5, 0x0) pipe(&(0x7f0000000040)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x4a301, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8d11}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000380)=ANY=[@ANYBLOB="0028d3ac7309733b6935a24cd97b987081fe78bd0d82adb3c42e8d20c24b7d3dec1a1d4a5ee1517d3293690b47938c176d87ca118b740cac89a0386800000072037a8ef6aa160335586ceec5343597c16859dc43b2a5402ea439fd180f5b4f1863641b92b8320dbfb5feffe557a8d6165a4980e6d86afd148637e6d910dd102edd2bde2bb55a81d512b3525aa1a98043be6deb4f944f2152cdb519b7"], 0x4) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x7dc48146, 0x7fffffff, 0x5539e0cf}, 0x0, 0x0) 2.825561674s ago: executing program 2 (id=1621): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000085ffffffffffffff0071120d000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 2.762898015s ago: executing program 2 (id=1623): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0x1}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0x1, 0xffffffffffffffff}, 0x4) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000200)={0x0, 0x12, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r2, 0x1, 0x0, 0x0, {{}, {}, {0x3}}}, 0x30}}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r0}, &(0x7f0000000080), &(0x7f00000000c0)='%ps \x00'}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="18008f003d000a00000000000000000003000000fa000200"], 0x18}}, 0x0) 2.631135118s ago: executing program 0 (id=1627): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b040000000000000000020000004000048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000e08000340000000170900010073797a300000000009"], 0x94}}, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=@newtclass={0xa4, 0x28, 0x10, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xe}, {0x5, 0xf}, {0xe, 0x4}}, [@c_atm={{0x8}, {0x64, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0x2, 0xc}}, @TCA_ATM_EXCESS={0x8, 0x4, {0x10, 0x7}}, @TCA_ATM_EXCESS={0x8, 0x4, {0x6, 0x7}}, @TCA_ATM_EXCESS={0x8, 0x4, {0x6, 0xc}}, @TCA_ATM_HDR={0x3d, 0x3, "402cb6208a6666194eede0ecd7f1b9451b6df0f73511eb7678fd2bba0966446f15151ce8243d588398c2ae911136b39c8b4c2dfde1330df993"}]}}, @c_atm={{0x8}, {0xc, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0x7, 0x5}}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4}, 0x24040001) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000340)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 2.630254786s ago: executing program 2 (id=1628): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000ff000000"], 0x14}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000fcdbdf253b00000008000300", @ANYRES32=r5, @ANYBLOB="06003300c03c0200ffffffffffff080211000000da083f78591b550041008c10080e0507b22980e723b3d459b33e08f24a4d7ab80720e71004008e0004008700121bfb31578058b936be967714c2910bfa695d742f14c77ae1fb1dbc5e92c3c11ebd6c905eed71a5c2b1c8f873a28fd7f8bf44a438fec91d1babeef2dfbffae05957d6baf0acc037f240576bf65975626291b3a9b893fd97f7329e3dac849421"], 0x54}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000000) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x58, r4, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x892f}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x17}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x8100}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040091}, 0x8000) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000d8c1}, 0x40000) 2.604994896s ago: executing program 1 (id=1629): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40201, 0x0) pwrite64(r0, &(0x7f00000003c0)="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", 0x1000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x891) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000001c0)={0x80000006}, 0x10) sendmsg$kcm(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, 0x0, 0x24000000) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="001c86dd2000100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000188"], 0xffe) 2.451237044s ago: executing program 0 (id=1630): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, r2, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xffffffffffffffeb, 0x99, {0x7, 0x65}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x13}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2031}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x10}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x22}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2c}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3e}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x20004000) (async) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYRESDEC=r4], 0x10}], 0x1}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073113400000000008510000002000000b70089bd000000009500c2000000000095000012697e0800"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x4, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) 2.285340094s ago: executing program 0 (id=1631): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_buf(r1, 0x6, 0xd, &(0x7f0000000000)="b86bc0", 0x3) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/uts\x00') setsockopt$inet6_tcp_int(r1, 0x6, 0x22, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYRES32=r2, @ANYRES64=0x0, @ANYRESOCT=r3, @ANYRES16=r2], 0x1c}}, 0x20000088) write$nci(r0, &(0x7f00000001c0)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x6, @b={0xfb, 0x4, 0x1, 0x3, {0x2, "e30b"}, 0x1}}, 0xb) 2.213813219s ago: executing program 0 (id=1632): socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x2, 0x1) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4010) r0 = socket(0x40000000015, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x8, 0x2}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r1, &(0x7f0000000080), &(0x7f0000000100)=""/122}, 0x20) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0xfffffffffffffe6a) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) ioctl$BTRFS_IOC_RM_DEV(r3, 0x5000940b, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=ANY=[@ANYBLOB="170000001500010029bd7000fedbdf252d"], 0x18}}, 0x20000000) unshare(0x20000400) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002dc0)=@newchain={0x4f78, 0x64, 0x10, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x4}, {0xffe0, 0xffe0}, {0x7fe7}}, [@TCA_CHAIN={0x8, 0xb, 0x1ff}, @TCA_RATE={0x6, 0x5, {0x0, 0x3}}, @filter_kind_options=@f_basic={{0xa}, {0x4658, 0x2, [@TCA_BASIC_EMATCHES={0x1c4, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x160, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0xfffb, 0x7, 0x4}, {{0x1, 0x0, 0x1}, {0x4, 0x0, 0x0, 0x1}}}}, @TCF_EM_META={0x44, 0x3, 0x0, 0x0, {{0x94, 0x4, 0x1}, [@TCA_EM_META_RVALUE={0x37, 0x3, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="7e8b0c049d4bd8bf", @TCF_META_TYPE_VAR="4fa202fc3f", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="ad4616e6", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="0a20f5b1ecb603ce", @TCF_META_TYPE_VAR="0241ae90f5bb", @TCF_META_TYPE_INT=0x5]}]}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x7, 0x8, 0x9}, {0x2, 0x5, 0x2}}}, @TCF_EM_CONTAINER={0x98, 0x2, 0x0, 0x0, {{0x2, 0x0, 0x85bc}, "2fe57bfbce8baae36f656d85e0748d343577f6db04d59a8a519608cdef46049ec0dd3279ab6aaaa78711e2fc5b2e531c3e14ebca8eff8e9ff5a7e2d1e767e11a97eb02c725541b7db165ba9530c879bf3af73c0eb63fcd6774acf0a06ab90988c9ab82e782a7693b5062382d7f978c814b72a7d5cc21ff3c11a525c09826a4f9fbb7c93a21b229247a6cd835"}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0xfff7, 0x3, 0x2}, {0x2, 0x632, 0x2, 0x8}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x67, 0x1, 0xf045}, {0x8, 0x7, 0x1, 0x6, 0x0, 0x0, 0x2920a8e8add4de9}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x0, 0x8, 0x7}, {0x3, 0x2, 0x1}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x7ac, 0x1, 0x57c8}, {0xe46e384, 0xfa, 0xfff3, 0x2, 0x3, 0x1, 0x1}}}]}, @TCA_EMATCH_TREE_LIST={0x60, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x6555, 0x7, 0x1}, {{0x4, 0x1, 0x1, 0x1}, {0x1, 0x1, 0x0, 0x1}}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x21e9, 0x3, 0x6}, {0x8901be9d, 0x3, 0x5, 0x4}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xcd}, {0x8, 0x0, 0xf8a, 0x2, 0x1, 0x1}}}, @TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0x4, 0x2, 0x4}, {0x5, 0x3, 0x2, "935fa7"}}}]}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xfff1, 0xffff}}, @TCA_BASIC_ACT={0x101c, 0x3, [@m_skbedit={0xb0, 0x6, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x6}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x2, 0x8}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xb, 0x6}}]}, {0x69, 0x6, "8b973d22e4715c81f3cb218891887780d271a29c0d0216a4efe29e50a8997c3d77e2c67d3430c991963b79f1363b74070dd6237bfe1242e0d45d57e13b81dc2a1574b425dc1f266408110e92b5de4da905ec1d5db89a1318285d54cb656a95207c03115570"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ct={0x120, 0x1d, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e24}]}, {0xed, 0x6, "efef4d55aabc2aea1097508282377a60ac19a4edb14518f67a8e416d5f63299489edb2f6602167fb576a47c5ac726cea7412f612fdfb27e333b23a4b88465071512c9be0371bdc553e120d941928dc0b1dcd70ca1e74a414fd9430d72d76d7dca565fa13da7c6e22e460fb99bc527cf1b04a0f7fcdc8bbcc7be6d91851b762ccb05214d435251a4892e56e93c8fe8eb19e707b1697563e8658f54ae6304c135a2acb7ab80e4f97eb565ca01a5392dfb990b9474663f6dfb9fd49110cdea2bf2509ef0b8309a49053db38633594211d1be5e1720cf19606c1586c12f73a68f6eb2d6da98296bc403878"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_police={0xd0c, 0x9, 0x0, 0x0, {{0xb}, {0xc60, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x9, 0x1, 0x6, 0x7, 0xba0000, 0x5, 0x8, 0x8, 0x2, 0xa3d, 0xee, 0xc70a, 0xfffffc00, 0x1, 0xffffffff, 0x10001, 0x9, 0x5, 0x80000000, 0x8d, 0x3, 0x41d, 0x0, 0xfffff8e9, 0xa, 0x2, 0xe2, 0xfffeffff, 0x7, 0x27c00000, 0x7ff, 0xbcf4, 0x6, 0x4, 0x6, 0x2, 0x3, 0x6, 0x3, 0x180, 0x2, 0x3ffc, 0x7f, 0x3, 0x2, 0xc, 0xff34, 0x1, 0x63, 0x5488, 0x9, 0x8, 0x80, 0x4029, 0x200, 0x4, 0x65, 0x800, 0x1bd, 0x6, 0xfffffa95, 0x6, 0xffffffff, 0x6, 0x4, 0xc, 0x9, 0x7, 0x1, 0x8, 0x200, 0x0, 0x9, 0x3, 0x9872, 0x8, 0x400, 0xfffffffb, 0x3d4, 0x3cd, 0x5, 0x2, 0x9, 0x1, 0x4, 0x0, 0xdf14, 0x9, 0x80000000, 0x0, 0x7, 0x8, 0xff, 0x4234, 0xf4d, 0xffff0001, 0x7, 0x8000000, 0x6, 0x0, 0x0, 0x5, 0x7, 0x8, 0x8, 0x101, 0xe, 0x48, 0x0, 0x4, 0x7ff, 0x6, 0x2, 0x43567e06, 0x200, 0xf, 0x4, 0xffffffff, 0x401, 0x63a, 0x0, 0x3, 0x0, 0xf, 0x7, 0xfffffc60, 0x401, 0x4, 0x1c, 0x7, 0x48000, 0x2, 0x800, 0x9, 0x4, 0x6, 0x4, 0x2, 0x80, 0x7f, 0x8000, 0x8, 0x8, 0x10, 0xc2ef, 0x1ff, 0xfae8, 0x6, 0x0, 0x92, 0x8, 0x800, 0xc51, 0x1, 0x9, 0x5, 0x6, 0x5, 0x98, 0x9, 0xffffffff, 0xffffff81, 0x7, 0x0, 0x8, 0x6, 0x1, 0x9, 0x5, 0xff, 0xf536892, 0xfffffff8, 0x0, 0x2, 0xc395, 0x1, 0x9, 0x4b, 0x800, 0x1838f23a, 0x1, 0xfffffff2, 0x5, 0x1ff, 0x1, 0xffffff81, 0x7, 0x5378de1f, 0x5, 0x5, 0x1, 0xf30, 0x8, 0x0, 0x8, 0xe, 0x7, 0x5, 0x100, 0x3, 0x400, 0xd, 0x7, 0x7, 0xf, 0x9, 0x1, 0x6, 0x7, 0x3, 0x3, 0x6, 0x0, 0x9, 0x8, 0x4, 0x7a, 0x3f81f2a5, 0x7f, 0x9, 0x80, 0x9, 0x4, 0x6, 0x9936, 0xb, 0xa10c, 0x0, 0x46, 0x7ff, 0xbd4, 0xb, 0x6, 0x8, 0x60e2, 0x6, 0x1, 0xf11, 0x4, 0x10001, 0x0, 0xfc, 0x4, 0x6, 0x3, 0xfff, 0xfffffff9, 0x7, 0x1, 0x0, 0x9, 0xe00c, 0x10, 0x1000, 0x9]}], [@TCA_POLICE_RATE={0x404, 0x2, [0xae92, 0x9, 0xb, 0xa62, 0x0, 0x2, 0xd, 0x1, 0x7, 0x8, 0x3, 0x57, 0x1ff, 0x2, 0x9709, 0xff, 0x0, 0x6, 0x3ff, 0xc, 0x5, 0x2, 0x2, 0x3, 0xc0000000, 0x40000, 0x10, 0x1, 0x4, 0x400, 0x1000, 0x3, 0x3, 0x872, 0x7, 0xfc, 0x0, 0x3, 0x9, 0x1000, 0x5, 0x8, 0x7, 0x5, 0x9, 0x80000001, 0x7, 0x3, 0x9, 0x0, 0xf9, 0x7, 0x8, 0x1, 0x9, 0x2, 0xc2a, 0x8, 0x8, 0xf, 0x1, 0x7, 0x7f, 0x7ff, 0x5, 0x0, 0x7fffffff, 0x5, 0x5, 0x7fffffff, 0x4, 0x100, 0xf, 0x3, 0xc0, 0x6, 0x4, 0x3, 0x7ff, 0x7, 0x9, 0xff, 0x4, 0x2, 0x1, 0x0, 0x9, 0x1, 0x3, 0x9, 0x8, 0xb415, 0xbde1, 0x10, 0x6, 0x5, 0x7ff, 0xf, 0x40, 0x368000, 0x2988, 0x1, 0x8, 0x2, 0x772, 0x1, 0x6, 0x6, 0x6, 0x380, 0x75c2db23, 0xf60, 0xb, 0x9, 0x0, 0x0, 0x7, 0x9, 0x9, 0x5, 0x3, 0x9, 0x8001, 0x80, 0x1, 0x1, 0xfe8, 0x9, 0x8, 0x8, 0x9, 0x2, 0x6, 0x1, 0xfffffffa, 0x8, 0x5, 0x3, 0xffff1156, 0x8, 0x1ff, 0x8001, 0x2212, 0x7, 0xbde6dbf, 0x272b, 0x81, 0x10001, 0x7fff, 0xfffffffc, 0x50d, 0x10000, 0x4, 0xa, 0x5, 0x1, 0xc326, 0x9, 0x73f, 0x9, 0x20000000, 0x39, 0x101, 0x80000000, 0x4, 0x5, 0x0, 0x6, 0x8, 0x7, 0x2, 0x9, 0x7, 0x8, 0x9, 0x9e, 0xd, 0x8, 0x8, 0x9, 0x4, 0xa, 0x8, 0x9, 0x9, 0x3, 0x12, 0x400, 0xad, 0x7fffffff, 0xd, 0x7, 0x2, 0x2, 0x9, 0x4, 0x9, 0x3ff, 0x9, 0x9, 0x7, 0x3, 0x4, 0x2, 0x2, 0x5, 0xc9ec, 0x4, 0x3, 0x3, 0x9, 0xfff, 0x10000, 0x2, 0x6ed1, 0x0, 0x64, 0x10000, 0x0, 0x4, 0x6, 0x0, 0x3, 0x10001, 0x1, 0xfffff743, 0xfffffc81, 0x1, 0xd, 0xfffff800, 0x6, 0x3ff, 0x10000, 0x4, 0xf, 0x10, 0xfffffff7, 0x5, 0x2, 0x5, 0x9, 0x0, 0xb, 0xf4, 0x4, 0xd, 0x80000000, 0x3, 0xfffffffe, 0x800000, 0xc, 0x1000, 0x4, 0x4, 0x3, 0x9]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x7, 0x3, 0x4, 0x1, {0x0, 0x0, 0x2, 0x5, 0x1218, 0x6f}, {0xa6, 0x0, 0x80, 0x8, 0x5, 0x3}, 0x8, 0x81, 0xfffff000}}, @TCA_POLICE_RESULT={0x8, 0x5, 0xffffffff}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x10}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x8, 0xfffffff9, 0x0, 0x6, 0x7, 0x8, 0x2, 0xa8, 0x4, 0xd, 0x380, 0x8, 0x0, 0x2, 0x80000000, 0x5, 0xe4, 0x9, 0x4227, 0x7, 0x3, 0x8, 0x8, 0x8, 0x0, 0x2, 0x4, 0x8, 0x10, 0x99c3, 0x4, 0x8, 0x0, 0x1, 0x1, 0x4, 0x9, 0x0, 0x6, 0xf, 0x3, 0x100, 0x10001, 0xffff, 0x3, 0x4, 0xfffffff7, 0x8, 0xf9, 0x3, 0xfff, 0x5, 0x8, 0x0, 0x800, 0x4, 0x3, 0x7, 0xffffffff, 0x0, 0x0, 0xdc, 0x8000, 0x1216, 0x2, 0xfffffffa, 0x1, 0x91e, 0x3, 0x10, 0x9, 0x7, 0x4, 0xdb1, 0x4, 0x223, 0x2, 0x2, 0x10000, 0x5, 0x7, 0x2, 0xa, 0x6, 0x9, 0x10000, 0x5, 0x80000000, 0x3, 0x7, 0x8, 0x3, 0x0, 0x595, 0x8, 0x1, 0x5, 0x2, 0x101, 0x7fff, 0x1, 0x8, 0xa043, 0x5, 0x6, 0x101, 0xffffffff, 0x5, 0xae, 0x9, 0x400, 0x0, 0x3, 0x3, 0x3, 0x8da, 0x0, 0x7f, 0x80000001, 0xf6c, 0x4, 0xaff7, 0x81, 0x4, 0xd1ee, 0x0, 0x4, 0x62, 0x6, 0x4000000, 0x9, 0x5, 0xfffff768, 0x0, 0xcaf6, 0x1, 0x1, 0x4, 0xffff, 0x8, 0x3, 0x6, 0x10001, 0x1, 0x2, 0xe5b, 0x9, 0xcb, 0x8, 0x2, 0x8, 0x2, 0x7, 0x0, 0x3, 0x5, 0x7fff, 0xfffffff8, 0x2, 0x3, 0x0, 0xd, 0xfffffffb, 0x7, 0x80000000, 0x7, 0x7, 0x4, 0x4, 0x80000001, 0xd, 0x1ff, 0x22, 0x1, 0x2, 0xd, 0x3, 0x9, 0x1, 0x0, 0x5, 0x7, 0x8, 0x5, 0x6, 0x80000000, 0x9, 0x4, 0x8001, 0x3, 0x7fff, 0x10000, 0x50000, 0xd8, 0x8, 0x6, 0x5, 0x787, 0x4, 0xffffffb1, 0x4, 0x6, 0x3, 0x4, 0x6c, 0x80000000, 0x7f, 0x7, 0x4f6d, 0xa, 0x8, 0x3, 0x3, 0x86d1, 0x80, 0x3, 0xfffff3e0, 0xd, 0x7ff, 0x7, 0x9, 0x200, 0x7, 0x7fffffff, 0x6, 0x3, 0x6, 0x80000001, 0x1, 0x9, 0xa5d, 0x800, 0x7, 0x2, 0xfffffff7, 0x50a, 0x1, 0x4841, 0xe000000, 0x4, 0x7fff, 0x8, 0x8, 0x4, 0x0, 0x6, 0x7f, 0x8001, 0x100, 0xffff, 0x81, 0x0, 0x2, 0x8, 0x6]}]]}, {0x82, 0x6, "97882cad3fa359591a3aeb14505d35f9606a340d84889c5118e3a05063682e6c62ed36e83fe6fb0af9c56eb5564581925b3e21273b2cad33ed7c0f061345176de2368c610d9c50823a25f360c989da495b624b87e14bd8851e8a7b97757a8fa0a6959d51c116cec02451e21b8ce9faefa440a59dc973263dc2eb668858d4"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_simple={0xd4, 0xf, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x6, 0x1, 0x6, 0xc6, 0x47f}}, @TCA_DEF_PARMS={0x18, 0x2, {0x10, 0xa, 0x20000000, 0x1}}, @TCA_DEF_DATA={0x7, 0x3, ',[\x00'}]}, {0x70, 0x6, "ebf0c9a918542e4ab27449e428a5b70052f8d6302f833f8224a65d1dd2beeb8b4d3a44bc9842b60e8f01d66b9e46a6954b5ea183bd111592bd8f49459e1d1b1f719f9dfcf1c0e1803b774f179be646077a411eee5f770c2ef75fc450d904ef91ac0080fd26bf266c6f43251d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_ct={0x68, 0xc, 0x0, 0x0, {{0x7}, {0x34, 0x2, 0x0, 0x1, [@TCA_CT_LABELS={0x14, 0x7, "3fd99c3246a8932367d9ec2187a9f23c"}, @TCA_CT_LABELS={0x14, 0x7, "d7ad0e677691f0405077337e50703fa5"}, @TCA_CT_ZONE={0x6, 0x4, 0x8}]}, {0x10, 0x6, "1df8ed8b7c00ab7f68726895"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xfff3, 0x3}}, @TCA_BASIC_POLICE={0x458, 0x4, [@TCA_POLICE_RESULT={0x8, 0x5, 0x5}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x7, 0x160e, 0x442, 0x3, 0x1, 0x400, 0x1ff, 0x5, 0x5, 0x5, 0xe, 0x3, 0xf, 0x4, 0x6, 0x2, 0x1, 0x81, 0x101, 0x49b01d1e, 0xffffffff, 0x2, 0x5, 0x0, 0x8000, 0x0, 0xff, 0x76800000, 0xff, 0x80000001, 0xfffffb4a, 0x7, 0x0, 0x4, 0x81, 0x3, 0x0, 0x3, 0x2, 0x4, 0xfffffffc, 0x4, 0x9, 0x6, 0x6, 0x7, 0x2, 0x4, 0x7fffffff, 0x7, 0x7, 0xf52d, 0x64, 0x80, 0xb6c, 0x5, 0xa, 0x7ad, 0x3, 0x6, 0xb000000, 0x9, 0x8, 0x8, 0x387, 0x5, 0x8, 0x67, 0xf, 0x5, 0x4a4, 0x3ff, 0x7ff, 0x3, 0x4, 0x8, 0x40, 0x3, 0xe, 0x5, 0x100, 0x5, 0x714, 0x6, 0x5, 0x1, 0xf2, 0x8, 0x8, 0x9, 0xffffffff, 0x5, 0x6, 0x7, 0xfffffff4, 0x3ed, 0x5, 0x1, 0xc885, 0x9eb, 0x0, 0x12000000, 0x3, 0x2, 0x2, 0xeaa, 0xff, 0x3, 0x4, 0x8, 0x1, 0x8000, 0x8, 0x3, 0x0, 0x0, 0x7, 0x9, 0x4a3, 0x18, 0x5, 0x4, 0x5, 0xfffffffe, 0x0, 0x19, 0x3, 0x9, 0xfffffff8, 0x5, 0x979, 0x6, 0x9, 0x10, 0x7ff, 0xffff99b3, 0x10000, 0x8, 0x2, 0xfffff891, 0x8, 0x6, 0x200, 0xe9, 0x8, 0x7d, 0x312, 0x1, 0x401, 0x8001, 0x2, 0xffffff81, 0x0, 0x0, 0x5, 0x0, 0x80, 0x1, 0x0, 0x5, 0x401, 0x2, 0xfff, 0x2, 0x7, 0x0, 0x5, 0xbd, 0xffff, 0xfffffe01, 0xffffff5b, 0x4, 0x9, 0x413, 0x0, 0x9, 0x6, 0x8, 0x7, 0x947a, 0x6c, 0x8, 0xfffffffc, 0x0, 0x5, 0xf8000000, 0x1, 0x8, 0x3, 0x0, 0x5, 0x4, 0x0, 0x101, 0x800, 0x1, 0x9, 0x6, 0xffffffff, 0x7, 0x7fffffff, 0x5, 0x5, 0x8000, 0x8, 0x3, 0xfffff368, 0x5, 0xfffffff2, 0x0, 0x3, 0x101, 0x7, 0x8, 0x10000, 0x40, 0x6, 0x0, 0x2, 0x8000, 0x80000001, 0x7f, 0x9, 0x1, 0x8888, 0x8, 0xc, 0x6, 0x2, 0x7, 0x7, 0x7, 0x0, 0xb, 0x1000000, 0x0, 0x9, 0x0, 0x1, 0x2, 0x0, 0xfa, 0x0, 0xfffffeab, 0x9, 0x8, 0x5, 0x80, 0x6, 0x4, 0x0, 0x2, 0xff, 0x10, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x20000000, 0x9, 0x80000000, 0x9fb, {0x86, 0x0, 0x1, 0x1, 0xc100, 0x34}, {0x8, 0x915e25d0859f5a5b, 0x86, 0x3, 0x9, 0xc}, 0x7, 0x2, 0x6}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}]}, @TCA_BASIC_ACT={0x300c, 0x3, [@m_gact={0xac, 0x12, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x80000001, 0x4, 0x20000000, 0x99e0, 0x8}}]}, {0x66, 0x6, "79940a92bf9756f54a3dd0f631204c46bf03b73c6692e526cf4ea399ca5261bb8a9b9f911df3f4d88b02ac8fdf35bc8bfd3e8f1d3307d9e0a65fbbd2ef2a6c881999737b16c04605c459daecc171f46c6f6c99d263256ff0204e243e082a3e389895"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_nat={0x116c, 0x14, 0x0, 0x0, {{0x8}, {0x144, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x7f, 0x9, 0x1, 0xe, 0xfffffffe}, @empty, @local, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x2, 0x4, 0xeb, 0x1}, @private=0xa010100, @multicast1, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xaf8, 0x3, 0x0, 0x7, 0x401}, @loopback, @loopback, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xb, 0x0, 0xffffffffffffffff, 0x7, 0x8}, @private=0xa010100, @empty, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0xb076, 0x6, 0x0, 0x6}, @empty, @loopback}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x64, 0x1, 0x8, 0x9, 0x1}, @multicast2, @loopback, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x90, 0xfffffffe, 0x0, 0x9, 0xb}, @dev={0xac, 0x14, 0x14, 0x1a}, @rand_addr=0x64010102, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x800, 0x1, 0x0, 0x3, 0x5}, @dev={0xac, 0x14, 0x14, 0x11}, @broadcast, 0xff000000}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_mirred={0x10f0, 0x8, 0x0, 0x0, {{0xb}, {0xc4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x8001, 0x3, 0x2, 0x4cc}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x2, 0x20000000, 0x6, 0x5}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5ed, 0x2, 0x1, 0xffff, 0x20a}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x3ff, 0x2, 0xa8, 0x6}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x3d3, 0x4, 0x5, 0x293b}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x80000001, 0xb, 0x20000000, 0xf6d6, 0x80000000}, 0x4}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_police={0xd00, 0x15, 0x0, 0x0, {{0xb}, {0xcbc, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x40, 0x7fffffff, 0x2, 0x8, 0x3ff, 0x33f79735, 0x8, 0x10001, 0x9, 0x10001, 0xf1aa, 0x8, 0x4, 0x7, 0x2c5c, 0x9, 0x8, 0x43c, 0x9752, 0x8, 0x6, 0x4, 0xc9200000, 0x80, 0xbd, 0x100, 0x6, 0x101, 0x9, 0x1, 0xf2f, 0x91ca, 0x7, 0x17, 0xad2b, 0xc, 0x4, 0x1, 0x7f, 0x8, 0x40, 0x3, 0x3, 0xfffffffe, 0x8d, 0x9, 0x1, 0x6, 0x1ff, 0x1, 0x4, 0x6, 0xff, 0x1, 0x8000, 0xfffffffd, 0xfffffffe, 0x0, 0xfffffffc, 0x6, 0x800, 0x1, 0x2, 0x0, 0x5, 0xa56a, 0x4, 0x6, 0x80, 0x1, 0x300000, 0x1, 0x5, 0x7, 0x3511, 0x7, 0x0, 0x3, 0x8, 0x4, 0x2, 0xff, 0x2, 0x1, 0x80000001, 0x1000, 0x5, 0x6, 0x0, 0xfffffff1, 0x2e, 0x7, 0x10, 0x6, 0x7, 0x3, 0xa, 0x100, 0x4, 0x200, 0x6, 0xffd3, 0x8001, 0x9, 0x8, 0x0, 0xf, 0x8, 0x7, 0x300, 0x0, 0xe, 0xa, 0x7ff, 0x3, 0x0, 0x1, 0xb, 0x3, 0x7, 0xab7, 0x1000, 0x0, 0x5, 0x9, 0x9, 0x1, 0xffffff01, 0x4, 0x8001, 0x7, 0x8, 0x7fff, 0x3, 0x9, 0xfffffffd, 0x401, 0x4, 0xff, 0x100, 0x3, 0x2c, 0x4, 0x8001, 0x100, 0x0, 0x8, 0x7, 0x0, 0x1, 0x10000, 0x1, 0x5, 0x80000000, 0x3, 0x3fa, 0x4, 0xb5, 0x901b, 0xf7b, 0xe144, 0x0, 0x401, 0x2, 0x3, 0xffff7fff, 0x5, 0xad, 0x8, 0xff, 0xfffffff5, 0x1, 0x9, 0x1786, 0xfffffff7, 0x6, 0x6e, 0x3, 0x10001, 0xa5f8, 0x1, 0xed, 0x9, 0x3b, 0x9, 0x9, 0x4, 0x2, 0x80, 0xde7, 0x0, 0x8, 0x3, 0x3, 0x5, 0x2c, 0x1, 0xd, 0x8, 0x1, 0xffffff80, 0x8, 0x5, 0x0, 0x2900, 0x7, 0xfd2, 0x82c, 0x1000, 0xfffffffb, 0xfff, 0x81, 0x4, 0x1, 0x2, 0x1, 0x7aa, 0x1, 0x4, 0x10, 0x8, 0x7fff, 0x0, 0x8, 0x9, 0x1, 0xc0, 0x96e5, 0x3, 0x2, 0x10001, 0x6, 0xdecd, 0x7ff, 0x4, 0x0, 0x4, 0x5af1, 0x0, 0x3, 0x101, 0x41ad8cc7, 0x4, 0x6, 0x8, 0xa1e, 0x0, 0x5, 0x5, 0xd9, 0x0, 0x3, 0x2, 0x4, 0x7f]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_RATE={0x404, 0x2, [0x80000000, 0x2, 0x7, 0x0, 0x6, 0xfffffffa, 0x7, 0x0, 0x6, 0x0, 0x89, 0x73a, 0x2, 0x2, 0x6, 0x1000, 0x7, 0x1, 0x2, 0x8, 0x3ff, 0x7f, 0xb031, 0xffff847e, 0xb6, 0x7, 0x5, 0x5, 0xfffffff7, 0xfffffffc, 0x9, 0x6, 0xb, 0x7fffffff, 0x4, 0x6, 0x8001, 0x2, 0x5, 0x3a4, 0x2, 0x4, 0xe, 0x2, 0x2, 0x334d, 0x2, 0x80000000, 0x1, 0xf5, 0xfffffff9, 0x86000000, 0x4, 0x10001, 0x44, 0x7f, 0x7fff, 0xf7, 0x8, 0xff, 0xc9f, 0x8, 0xbcd9, 0x90a, 0xa, 0x3, 0x8, 0x0, 0x4, 0x40000000, 0x3, 0xc8a, 0x3, 0x0, 0x24a, 0x6, 0x6, 0x0, 0xffffffff, 0x4, 0x350, 0x3, 0x8, 0x7fffffff, 0x3, 0xffffffff, 0xffffff0b, 0x5, 0x2, 0x2, 0x0, 0x4, 0x7, 0x5, 0x7, 0x3ff, 0xff, 0x2, 0x7, 0x9, 0x6, 0x1c, 0x1, 0x9, 0xf, 0xa, 0x4, 0x2d0, 0x9, 0x100, 0x1, 0xbb, 0x6, 0x3, 0x65, 0x7ec, 0x1, 0x7fffffff, 0x6, 0x78000000, 0xffff, 0x3, 0x6, 0x8, 0x401, 0x2, 0x5, 0x40000, 0x1, 0x9, 0x3, 0x8, 0x7c27, 0x6, 0x4, 0x8, 0x2, 0x8001, 0xc7, 0x4d62, 0x8, 0xffffff50, 0x6, 0x804, 0xad6, 0x9, 0x703fc26e, 0x5, 0x4, 0x7, 0x4, 0x4, 0x2d7, 0x7, 0x0, 0x3f, 0x8, 0x101, 0x4, 0x9, 0x1, 0x5, 0xeed4, 0x8, 0x6, 0x7, 0x10, 0x4, 0xc15, 0x6, 0xf, 0x1, 0x400, 0x5, 0x3, 0xf, 0x2, 0x5, 0x80000001, 0xdc, 0x4, 0x0, 0x5, 0x0, 0x100, 0xe4, 0xf, 0x41e1886, 0xf, 0x3, 0x7, 0x4, 0x3, 0x6, 0x366, 0xffff, 0x350b, 0x16, 0x2, 0x6, 0xc15, 0x2, 0xec, 0x2, 0x6, 0x200000, 0x1, 0x0, 0x40000, 0x51, 0x8921, 0x2, 0xbc, 0x44, 0x0, 0x40, 0x0, 0xffffff00, 0x6, 0x4, 0xbe, 0x9, 0xffff8001, 0x40, 0x10001, 0x9, 0xc, 0x3, 0x0, 0x3, 0x3, 0xff00, 0xd2f, 0x4, 0x1, 0x10, 0x5c1, 0x9, 0xb, 0x8, 0x4, 0x4, 0x10000, 0x7, 0x8, 0x0, 0x9, 0x7fffffff, 0xfffffffe, 0x0, 0x1, 0x8, 0x1, 0x3, 0xfffffffd, 0x7]}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x7fff, 0x4, 0x3ff, 0x7, 0x3, 0xfffffffa, 0x9, 0x2, 0x1, 0x6, 0x44e1, 0x100, 0x0, 0xb, 0xa6b9, 0x8001, 0x32c, 0xffffff01, 0x80, 0x414, 0x6, 0x40, 0xa013, 0x401, 0x4, 0xb40, 0x8e59, 0x0, 0xfffffffc, 0x8, 0x4802, 0x401, 0xfffffff8, 0x0, 0x81, 0x80, 0x3, 0x8, 0x1, 0x0, 0xffffffff, 0x7ff, 0x6, 0xb, 0x1, 0x4fa8d6af, 0x1, 0x6, 0x9, 0x0, 0xc0, 0xfffff856, 0x3ff, 0x1ff, 0x1, 0xb, 0x0, 0x6, 0x279, 0x6, 0x0, 0x0, 0x8, 0x9, 0x200, 0x3, 0x400, 0x8, 0x5, 0x3cfc, 0x458, 0x8, 0x8001, 0x40, 0x1, 0x9, 0x100, 0x7, 0xfffffff7, 0x2, 0x7, 0xfffffffc, 0x7, 0x2, 0x100, 0x708, 0x7, 0x5, 0x4, 0x7, 0x5, 0x8, 0x0, 0x7f, 0x400, 0x9, 0x6, 0x4, 0xa6d, 0x2, 0x1, 0x6, 0x7, 0x8a8, 0x8, 0x3, 0x8, 0xdc, 0x8b, 0x8, 0x6, 0x1, 0x5, 0xfffff825, 0x8, 0x401, 0x1, 0x1, 0x9, 0x10000, 0xfffffff7, 0x7, 0x8, 0x609, 0x3, 0x7, 0x54, 0x8001, 0x7, 0x23aa, 0x1, 0x0, 0x9, 0x494a, 0x2, 0x7981, 0xe, 0xac, 0x8, 0x6d4, 0x5, 0x7ff, 0x8001, 0x24, 0x7f, 0x40, 0xa7, 0x7fff, 0xa89, 0x7, 0x316, 0x5, 0x80000000, 0x2, 0x3800, 0x200, 0x0, 0x9, 0x0, 0xc1, 0xfffffff4, 0x3, 0x7fff, 0x0, 0x81, 0x7978, 0x0, 0x4, 0xfffffffa, 0x23979b2e, 0x7, 0x4, 0x1, 0x7, 0x4, 0x5, 0x2, 0x1ff, 0x10001, 0x3ff, 0x8, 0x1000, 0x0, 0x2, 0x6d1, 0x3186434c, 0x6, 0x3, 0xd, 0x4, 0x2, 0x1, 0x5, 0x1, 0x58, 0x1, 0x43a, 0x200, 0x4, 0x0, 0x6, 0x5, 0xf, 0x0, 0x5, 0x0, 0x5, 0x1, 0x6, 0x0, 0x7, 0x6, 0x8, 0x6, 0x3, 0x1000, 0x3ff, 0x7, 0x6, 0xef6e, 0x2, 0x6, 0xeef, 0x10, 0x0, 0x4, 0xc, 0x10000000, 0x6, 0x4, 0x9, 0x9, 0x13, 0x80, 0x8, 0x2, 0x8, 0x7, 0x9, 0xb, 0xb, 0x81, 0x0, 0x0, 0xfff, 0x7, 0x5, 0xfff, 0x9, 0x3, 0x0, 0x6, 0x8, 0xb8e, 0x400]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x40, 0x2, 0x3, 0xe, 0xff, {0xc, 0x1, 0x3cf9, 0x2, 0x5, 0x1000}, {0x10, 0x2, 0x1, 0x7fff, 0x4}, 0x38, 0xfffffffd, 0xbf}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x47}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7ff, 0xffffffffffffffff, 0x400, 0x7fffffff, 0x2, {0x80, 0x1, 0x4, 0xff, 0x9, 0xda7b}, {0x3, 0x2, 0x0, 0x9, 0xfffa, 0x34}, 0x232faec4, 0x9, 0x6}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}]]}, {0x1a, 0x6, "47f4e05bcc63137fedaf1cd896aae622656750679755"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}]}}, @filter_kind_options=@f_route={{0xa}, {0x8d4, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0xffffffffffffffff, 0xd882, 0x5, 0xd, {0x0, 0x2, 0x6, 0x3, 0xffff, 0x2}, {0x2, 0x1, 0x1, 0x7, 0x40, 0x8001}, 0x1000, 0x80000000, 0xf}}]}, @TCA_ROUTE4_TO={0x8, 0x2, 0x51}, @TCA_ROUTE4_TO={0x8, 0x2, 0x90}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x18}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xc7}, @TCA_ROUTE4_POLICE={0x868, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x100, 0x47, 0xfff, 0x9, 0x4f2, 0x3f74, 0x1b229280, 0x6, 0xe511, 0x5, 0x4, 0x1, 0x0, 0x4, 0xfffffff9, 0xc, 0xfffff001, 0x3, 0x99f, 0x6, 0x2, 0x7fffffff, 0x6, 0x403, 0x0, 0x9, 0x10ce, 0x2, 0x3, 0x2, 0x7fffffff, 0x8, 0xffff, 0x10000, 0x5, 0x7, 0xc, 0x4, 0xa, 0x8, 0x5, 0x10001, 0x7, 0x0, 0x8, 0x3, 0xe, 0x9, 0x2, 0x80000000, 0x892, 0x6, 0x8, 0xff, 0x0, 0xb8, 0x401, 0x80000001, 0x4, 0x8, 0xf, 0x2, 0x9, 0x97d, 0x2, 0x400, 0x2, 0x0, 0x8, 0x3, 0x3, 0x0, 0xf35, 0x5, 0x5, 0x5, 0x5, 0x8a, 0x8, 0x40, 0x9, 0xb84, 0x2, 0x9, 0x4b, 0x674c, 0x4, 0x8, 0x0, 0x61, 0xee69, 0x0, 0x10001, 0x4e6, 0xb5, 0x4, 0x3, 0x2, 0x9, 0x6, 0x2, 0x7, 0xfffffffa, 0xe00, 0xe, 0x8, 0x92, 0x37b3, 0x1, 0xd, 0x4, 0xffffff80, 0x7fff, 0x401, 0x4, 0x2, 0x1000, 0x0, 0x7, 0x6, 0x401, 0x5, 0x5, 0x100, 0x8, 0x5, 0x0, 0x1, 0x80000000, 0xf, 0x2, 0xfffffffd, 0x1, 0x3, 0x6, 0x9f7, 0x4, 0x8, 0x6, 0x4, 0x2, 0xf, 0x4, 0x1, 0xea, 0x20, 0x2d, 0x7, 0x5, 0xac21, 0x5, 0xd, 0x7fffffff, 0x8, 0x6, 0x4, 0xed, 0x0, 0x6817, 0xb, 0x1, 0x81, 0x5, 0x1, 0x400, 0x9, 0x70, 0xe881, 0xc9, 0x9, 0xfffffffd, 0x3, 0x6, 0x2, 0x9689, 0x0, 0x10, 0x6, 0x2, 0x9, 0x1, 0x4, 0x8b, 0x3, 0x800, 0x7fffffff, 0x80000001, 0x8, 0x7ff, 0xfffffffd, 0x7fff, 0x9, 0x7, 0x6, 0x9, 0x7, 0x9, 0x52f4, 0x9, 0x9, 0x9, 0x6, 0x8749, 0xffffffff, 0x4281adba, 0x3, 0x9, 0x6, 0x2, 0x9, 0x4, 0xa, 0xfffffffc, 0x6, 0x8, 0x3, 0x7fff, 0x401, 0x6, 0x2, 0xcc800000, 0x1, 0x7f, 0x1, 0x1, 0xc938, 0x6e, 0x2, 0x8001, 0xfffffffb, 0xbc9f, 0x80000001, 0x5, 0x3, 0x101, 0x2, 0x1ff, 0x1, 0x0, 0xbd, 0x0, 0x7, 0xfffffffa, 0xffff, 0x7b3, 0x7, 0xc7a, 0x80e, 0x401, 0x6, 0x437, 0x5, 0x2, 0x6, 0xac26]}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x664}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x10f0, 0x1, 0x4, 0x3, 0xc29, 0x1, 0x3, 0x80000001, 0x8, 0x1, 0x4, 0x1, 0x6422, 0x48b1a400, 0x7ff, 0xf89, 0x2, 0xfffffff2, 0x4, 0xfffffff7, 0x7fff, 0xa9c, 0x4, 0x9, 0x9, 0xff, 0x2, 0xe041, 0x6403, 0x6, 0x7, 0x98, 0x40, 0x31, 0x7, 0x5, 0xa, 0x0, 0x7, 0x3a64, 0x6, 0x74, 0x5, 0x9, 0x2, 0x12, 0x54b, 0x0, 0x8, 0x1ff, 0x985, 0x3, 0x1, 0xd, 0xf3, 0x6, 0xffffffff, 0x1000, 0x4, 0x2, 0xa, 0x3, 0xa, 0xffff, 0x9, 0x9, 0x1, 0x4, 0x2, 0x4, 0xfffffff8, 0x3, 0x5, 0x8, 0x0, 0x2, 0xb181, 0x40, 0x5, 0x0, 0x5, 0x7, 0xffffffea, 0x7f, 0x3, 0x2, 0x5, 0x7, 0x3ff, 0x3, 0xff, 0x9, 0x7, 0x300, 0x6, 0x565, 0x0, 0x9, 0x5, 0x5, 0x6, 0x2bdd, 0x7fff, 0x40, 0x40, 0x7eaacbea, 0xe, 0x5, 0xa, 0x6, 0x5, 0x5, 0x3, 0x100, 0xffffffff, 0xffffffff, 0x5, 0x4f32b2e8, 0x3, 0x3, 0xc9, 0xcef, 0x100, 0x7fffffff, 0x30, 0x5, 0x6, 0xfffffffb, 0x9, 0x1, 0x2, 0x6498, 0xfffff847, 0x200, 0xd, 0x0, 0x4, 0xfff, 0x800, 0xd82, 0x7, 0x1, 0x10001, 0x446, 0xe0000000, 0x7, 0x9, 0x1, 0x8, 0xcd66, 0x3, 0xe, 0x2, 0x80000001, 0x9, 0x10001, 0x8, 0x6, 0x5, 0x3, 0x2, 0x6, 0x81, 0x1, 0xfffffe01, 0x3e1, 0x3, 0x5, 0x101, 0xde6, 0x40fe, 0x80, 0x8000, 0x3, 0x7fff, 0x7, 0x5, 0xfff, 0x1400000, 0x3b8b, 0x3, 0x6269, 0x4, 0x2, 0x8c85, 0x0, 0x1, 0x3d42, 0x400, 0x3, 0x100, 0x601ad8f8, 0xfffffffc, 0x4, 0x4, 0x5, 0x1, 0xf, 0x8, 0x1, 0x10000, 0x6, 0x80000001, 0x6d41, 0x7ff, 0x1, 0x9, 0x5, 0x2ccc50a8, 0x2, 0x9f0, 0xb5e, 0xc6, 0x0, 0x3, 0x5, 0x7, 0x1, 0xe3, 0x10000, 0x0, 0x7f, 0x4, 0x6, 0x3ff, 0xfff, 0x4, 0x101, 0x77cb, 0x4, 0x7, 0x0, 0x40, 0x80000000, 0xe, 0x9, 0xfffffffb, 0x7fff, 0xc4000000, 0x7, 0x9, 0x3, 0x0, 0x7, 0xced, 0x5, 0x7, 0x2, 0x6, 0x5, 0x5, 0x200, 0xb8, 0x8, 0x9]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x7, 0xff, 0x2, 0xb1, {0x9, 0x0, 0x40, 0x4, 0xf, 0x7}, {0x81, 0x2, 0x5, 0x0, 0x4, 0x1}, 0x45, 0x0, 0x2}}]}]}}]}, 0x4f78}, 0x1, 0x0, 0x0, 0x40000}, 0x48011) r12 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMSETDEVNAME(r12, 0x80184947, &(0x7f0000000040)={0x0, 'syz0\x00'}) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) 1.758432461s ago: executing program 3 (id=1633): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newneigh={0x30, 0x1c, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@NDA_DST_MAC={0xa, 0x1, @remote}, @NDA_SRC_VNI={0x8, 0xb, 0x7fff}]}, 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {}, {0x5, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x40004) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xab}]}, &(0x7f00000000c0)='GPL\x00'}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000040)={&(0x7f0000000280)={0x29c, 0x0, 0x669846c232aac88, 0x7, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x264, 0x33, @mgmt_frame=@probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x39bc}, @device_b, @broadcast, @random="487268a8dbdc", {0x8, 0x2}}, 0xd3, @default, 0x4440, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x5, [{0x16}, {0x30}, {0x6c}, {0x24, 0x1}, {0x4, 0x1}]}, @val={0x3, 0x1, 0xad}, @val={0x4, 0x6, {0x9, 0x9, 0x7000, 0xa}}, @val={0x6, 0x2, 0x6}, @val={0x2d, 0x1a, {0x400, 0x1, 0x7, 0x0, {0x81, 0x7f, 0x0, 0x1e1, 0x0, 0x1, 0x1, 0x3, 0x1}, 0x300, 0x8, 0x3}}, @void, @void, [{0xdd, 0xba, "2a34e4fa4faf3f87c9e015e41efc5a7377672ad5acc27153634cf2d5e0bb6d6e005cd779c3360ec2e46ce3b926eb207d7fa7195d1f7b095e36759b72f4a90183fc2ceb68e04a9e57842470396fd4b5174500cfab5faee9c5c004cc42cce4885cccc3143fbef1c075b89c8137a49a894c83db0404094de7488698be7c306aad2aba7690d45da816c8f0b75081d538c89d79fe8af1942d0a343653e7fcbf52e26ade5d7c9548cdaf237af3055248399aa0f72f97f35f80cf17e317"}, {0xdd, 0xc1, "2591d1baa91170053d5a0e94a01c9257e59f43811b9da041b8c1df7abaf80ac97a8bbfda7c2b2567266251fde7428ef4a05f951bc29ce3faae2eceff071762ea89b43159a26a13458099a536cd4d258a983bc4960e94edcfb2ab4f606e982c2f68e4a50794ad6b64db76ad48465956f591884bc5ee5ffb8d85501a3c9b659a12f1b906aeeb3498e42ede415658fb450247da05e94b79635f5ff231c276d8eb04d3942e0e0a7414be4d40d1b7d13949dec1697255c6d266c21b66c011a3616129e4"}, {0xdd, 0x81, "7ee247ff341d5ba6772735d033503e8b9bbe023c0684f2b83d875c17fa85d76c6cc0b7778f9bd32126d29c9bbb2ed8b624d12f15581f14721429cc4f3f53a10a7b43e1de51b770271257c3b0e170ac1427ebec037f36621c8f43a67d45f6b0a69d823923c93533218f41217050fd5627db6b6b3c46b0f28f670e39a3604cf6d52c"}]}}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x29c}, 0x1, 0x0, 0x0, 0x8001}, 0x40) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r4, &(0x7f0000000180)={0x67446698, 0x1, 0x2, 0x3, 0x3, "053acd46c9139fe7bb11d75bf6e85e460c9638e020d730a0a31ea9a61a044b306ace2c40969dd1dd4b2d"}, 0x3a) 1.033265519s ago: executing program 4 (id=1634): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000090ffffffffffffff0071120d000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 961.465021ms ago: executing program 4 (id=1635): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061114c0000000000850000005500000095"], &(0x7f0000000080)='syzkaller\x00', 0xed9}, 0x94) (async, rerun: 32) r1 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@nl=@proc, &(0x7f0000000000)=0x80, 0x800) (async, rerun: 32) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x1500, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000600014002020a600e41b0000900ac00060211000000120012000a00ff110048035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x20, 0x80, 0xfffffffe, 0x101, {{0x20, 0x4, 0x1, 0x0, 0x80, 0x66, 0x0, 0x2, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, {[@ssrr={0x89, 0xb, 0x16, [@private=0xa010101, @remote]}, @rr={0x7, 0x13, 0xb9, [@local, @loopback, @multicast2, @empty]}, @timestamp_addr={0x44, 0x2c, 0x44, 0x1, 0x1, [{@private=0xa010102, 0xfff}, {@private=0xa010100, 0x5}, {@multicast2, 0x4}, {@multicast1, 0x83fc}, {@remote, 0x6a22}]}, @lsrr={0x83, 0x7, 0x9d, [@rand_addr=0x64010100]}, @noop, @ra={0x94, 0x4}, @lsrr={0x83, 0x13, 0x7b, [@multicast2, @broadcast, @empty, @broadcast]}]}}}}}) (async) r4 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r5 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r4, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="880800002c000100707cd4997f2cff1af598e4ef0000000000df000000000000", @ANYRES32=r6, @ANYBLOB="86af4366e9d5afe6b3117166acdfb6d519ffffd3739f316f16aeefaa6182ce3e8d9caafa3cd138a2f05f9f5b64698d14735db4261e89f6886ca0c05f7c3beb56f7d7e7bb9ce33236fc0f8d70cb33e7a06b8138174c2382e617aafba90660199e2d492953b42033e93104000180000000"], 0x88}], 0x1}, 0x0) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711205000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async, rerun: 64) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@empty, @in6=@empty, 0x4e21, 0xfffa, 0x4e20, 0x6, 0xa, 0x80, 0x20, 0x73, r3, r6}, {0xed, 0x8, 0x55, 0x8000000000000001, 0x3, 0x70000000000, 0x8000, 0x100}, {0x2f38, 0xf, 0x1, 0x9}, 0x8, 0x6e6bba, 0x1, 0x0, 0x3, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x2b}, 0x2, @in6=@local, 0x3500, 0x4, 0x1, 0x7, 0x3, 0x8, 0x5}}, 0xe8) 925.842541ms ago: executing program 3 (id=1636): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket(0x29, 0x5, 0x0) setsockopt$RDS_GET_MR(r1, 0x114, 0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000280)={{{@in=@empty, @in=@local, 0x4e22, 0x6, 0x4e22, 0x8, 0xa, 0xa0, 0xa0, 0x67, r2}, {0x1ff, 0x2, 0x64b, 0xffffffffffffd50a, 0x81, 0xa4, 0xb, 0x3a3}, {0x5, 0x8, 0x77, 0x3ff}, 0x0, 0x6e6bb9, 0x0, 0x1}, {{@in6=@empty, 0x4d5, 0xff}, 0xa, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x0, 0x4, 0x2, 0x2, 0x9, 0xfffffeff, 0x9}}, 0xe8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$inet6(0xa, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0xf, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4b, 0x0, &(0x7f0000000100)="02c0bac63597cf8109adae8e21a6f8a33a965151944bbf925370ee84c118d1a1ec7df7241c83c84c958e6df0829a8d07f6d9d908097edd3ab043071dcf4817764900"/75, 0x0, 0x2, 0x0, 0x1}, 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174003c000000060a01040000000000000000010000001400048010000180090001006d6173710000000008000b40000000000900010073797a30000000001400"], 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8924, &(0x7f00000000c0)={'dummy0\x00', 0x1}) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000300)={0x0, @loopback, @initdev}, &(0x7f0000000400)=0xc) sendmmsg$inet6(r6, &(0x7f0000003580)=[{{&(0x7f0000006b00)={0xa, 0x4e22, 0x8001, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000006c00)=[@hoplimit_2292={{0x14}}], 0x18}}, {{&(0x7f0000000080)={0xa, 0x4e21, 0x4, @loopback, 0x100}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000dc0)="5fc987284fbf12963491859bebf58098b85b72eec987563ec2c1cec96eefae8e0c50cc6ccaa3b53289f36be715f1a185a44b8b2bf682b11231bafe3e20530c2d943bcd06feeb2d23336fe9cac94e5e6675267b3663a0f357db6afbc49bd70e4049f5592fe71a60fecd1694656a7fbb22ee32d0e214fb51f57834cff59429dd41598158ea3ff0560cf8fdbbe03eff4d5c49f3be3419cc0c351c27898aba35e3b6c8f89cf9e3aa413ef9de47bbe346d54cc165c12d06a57daa153930f185dedaa884ab9ca6d8014515b858b06fc443a3a8c339534e82c21458fb4292a2dc2ba6bdbffb80b98beacb4a003c3339f9efa3f3998e8b261876ef199b06ed994c59fd4dc1540afc67952789f4c7f0862b0bb201eec987d225c1148eca09da7a087d3edc29eba9df927fdfa8b6e15c3df6f020623ad50557aebde88ee885919ac941c01b9cca1b045febe4ff43c7ef07177d91556c9cb9ef4e84c86a48de1b7ed5615b36211713a4c3f47320cbf41bb61d597c94207f03f713aebdc1ace3606eac4249f45056605ae36c0a45a7363c46b603a18fda392e060bfa57a7a2ce317c1f1d970211b66496e3b9e4e33eef3d6e133f92e6eff58f8e260443220dd34d424092a75fbd7152ff067a5b0ec7c62deea2575c8566d6da519495856161d2d0b2fdfe39bb6c7db010f750145e83eb5cff3c6282f61c3bb39645679ab0107750469c7d4e9b4a3a82bddccfd0874f93d610eaab5488808c64c02f76742d25f8c8343c7ad9596e2599d64bbf55d0dbe23a37a53c3f95071204494febce2c2ffd4754fe421a18bc07d9bf3421ac76de4e8ac1cf231a616130a125e849fee8ff941c8558db63f11ef3c408af611afdfbce7a077355f913929406dc2c1a3236e29abe8aa6cbe789e5edebce9ac9e046b418ca755f4ec7ee3fdc8256dc947f3cffa5745c9ac23035caa7402df2381d8b178c99fbca7d830d288decc836d610bf4d39b4d9462280dbdc492476a986021039a238b7c1fbb495918e5467fa5870d34297bbc1187f99b507bfc11a42eaa17d5f1db30eb14b5b83af2bb2cadc038530850c75173420194aefb835964086a5948f5732338c71ca10010c6888625979e5c080855beec553d9331d333dc2758b2c86d5678d78e0229d93c2731b98601750136d8516624bfafe9188cb8f331b35ce6963374043a136b3a6472ef236233a477dcbe8d61bcc71dbb56c2d08ba10d2f2b0ef1a48910adc52bba6c5eacac3efe506d6488284b13223fe3b74995c0bc2e8183ed8b47ac62d225eea449a8b8358c8cb46b294b71f6a63b85be0e141c194c203efad8cd92b189cd283968fb1baa3666a320a6e5c26b4a5243b31afbdaaf6dcb469f0d132c3b7a05adf4038256647aff49910e4f90af005ecf1e838d3059d17097ede72c5ba0e73ef35c6cd149a92444c919ad32b484d6c3913c19584c1e7c420c27b8957c60608407e475b9b84a9b367dc9972c534d08781530b6e03be6741abee6f27b34a4abab00e6fc7d248d6edff5688658bb29b8f1b44d36b6cacbe9a3c706dc179e541163a441f10f7cecc4645b9a9d3bd923d81ed29050ac106aa8adb53dbd3817055f2681a2d5d7e2e3ef7eb782457c26a644b77547c11aa1f93cbc8400dedbec3473a350384c3852a37f1e65f92d6f694dfea2938aa79bb38f93617560882b7d180cb945a80c92b40aa9357207405673d1d3790968c45f0ccb79f34e4397ec4563946392b185dc9efe1d87672f3969d1a4d9c8d46aedb0205adfcc8bf0f6f32c1f82fe16e48c5cd53419dbc7edb7834f6f0d91b3063b8053225aad1e58c6550ae5676f926dcf86c948134fdd49bc2abd7a2e25165f5f0e19e95e2559f945a6e7aca6216d6ba06c67392aad967af87a64d0052797128b2b274c5360ab36539b0e6354bbacd0eaf6ff1dd43a7b287a1e1923030cf6fdb60979d625b9e78ed364587a23e8d55b268633bec6b0a61afca98d549890f9b57f0d20a5bc4cd53059c37e507f70eea701571c170a6394d576f39b8c1d8c20093b8debbf9a0541ea0d6782d478632572be19df67f7602ff2c234e29ad3638c1633bdafd325a8371690510448fd8dd56815608e0b1be757d66be30f67a3881adc475688bd8fa174e276d5dca3cac87d2e13a5e5ace78427a53c68f9d24b18ac2508a876116458c6a0ab5a44d92c25db2bf1473a9988fdddb53e98b05537ab22bd599a36270359deea6ce856277fdc2929d1a57294d897c65838d655e80b753ff0e8e0b638a9b28b7d97442b5c1ef88403e3d4c45b911c7a4869082fe536e5e7b63927156b6fd06233bde68e89b70af16cb77e44150c93837eab36b150f249299c4b526cb7d975a79886315e38ffa977f632a38a9f75b1b55b8914ed374223be156ddc1305cad16a60fd0547acffc1de1118a86aa013f5afef15e68b5ae35af3761ece748805bcaded2ae94a41b1551651fe16a18f51dd2a7c92c6f748f072d5a682b769cab7aff826a25817731af3b0571499fa07dbf5aa9241e023cb566e4324c9d725790e5cf4afd0b981069b90b0a8c7bca31f56d65006f71f3c1842359e9f7b0e02b48cd7416591740c44b8da6cb889f89853be6a8918543e8d2ff0543716d9f20042515498cd5b64e5d8d61269cc4dbe14c00471a042f0e6a328edc1febf9446f71ef8af65409d73fd8754d943b74cf27f28ab3d2a2e5e7b60bcbedd5a507ad157924a668cc92592e357825fa4c9f8a29b87556ff09012fb01535096bc031169efddf020e808f6978831e2ff04a91c5cf9e74045f9e48f16384ab9e6cf941a927e9069fb7483536e60af43c8b619fc527d3b48abc7aa86b83de2d2ab1a955f1ecc5ddc270d8440011776c9df19e6fd9ede743e4c757f2a4de4350f3b0cebe50059841d2ddfb7f9c4b49c3e7bd1013e993f2ce92e5fb6e4c344647a17b6e466679fd8b78dfcf067fb6839a627ada40009092e9bd4adbd4890ebafdcc3a6a40f12b62805335cffee20e257e87d725abcbfaef7d67909c536553730f182376264c3df7918db224b9d35bfdf4ec8edfff6ced0801cc654a3d95dc935327786ad41732982728a279706b4a2d088e7f72c05ed66203a00bec5af8b7aeedcb2409dbaaedb4549d0ed97e43e57105bd49aafd7d5b570fa7a795111268ccf27daa53dd021b859c7a279a7cb0d9fef45bb4377026ea78b23fd7a1fca04cf62f86d54f17c590a56b0e0445ddbe4e13d8c5aa14d38e9be420f818296a93d3869aa77f487c310a49945a8bd628461fae3f6ed5c25944fb06d79bd0cf59e852f97f721e1ffcfb31144d9870b8aa02f04f5b98079a50b07e6e1b5e20a8fb76f4468ac8bce206b79c3c0ce940b50156013f6938d2acb4e092a921dafc5aed001fc48b63ba24c21e238ad54cb18da8eb76bc2c1b23aff2f17d3265f78d2196ac95df214dd5868fdf9736d575e3bf627d5a2721f9f3010a5d9d6e7ed0b927bd593e4a334cffec12e063fb784d2ce1a2a85545101368e9e4bcf6eefb6ea23de7e975744e25a843ee6dee4be206fcb16c51ebdd1987b81f2204f4a6396e1c0d8232bca5ebca00bce486a00e1e1b0b6afb2ad6c41c29d375da407e05fb6a1805758ed4831c4485db2b718c7be72f79a893e316f2b68af1100d4bd07e4ef3f8d3c78bcbcb4cac68176c812d01a68fe4050640f346360bd4bee524cee69f0a1319232ee01e7a0d415d8c3d765b318b3764a80ded60e47c672cbcf39ee021d3403259df9952331a0790fcb979d37bffd67cf6394ae2ab4973ce0d5610f21dba4820dadc32bd5ea78969166cee09ab44c693a14c2f2f429b281686207181f42050b849713857f45c6433f336c01dc1b4a0b80acb7ebdd20b71abb80ccfe16309e97f47f61c655e33898f3522b4877bad925b1142e76a60dc04a7afdc76f0184850394649e53f0592f18c36559c1ccedbe78d79cc60c4336a3dc01bbbe8a4af2a076562b2d9c3904032ae1fc8f4d2a3094396495a00d94166ee835987c99b238ec48abbfbaf096f60decf1228d06cf9768e7584a08ac02601e4d83e56f9e0417d30e0a6533622cd0b5beb8375c93af4a350f1d77141b8e3242114eb272197544ab5a1f77c94880763c4e35ec63d323aaca96979788ed9c109dd60d5f7c0516f4cce2f644933ca55ca6970c93f6a5d8b8e72f322ca2c8d556541da1a95da0a67cbecc10a9592b9f8ff7d2ecd235c7e6a34d5510e4bb1a290c608191485dfe1f7be0e8eb82a900a218c2f33c9dc97a42e1597916bbdb3488081e37c80b354197f09cf2808a72209b73662948746134b65fb07b3b7a0710638f894fcead4c31bed8802a4e6b716931033574fa17eb761f1dc0caa0eb8f8e9d6f92a176b16b6f04045472b80bfce4effe9a9ddf048d2aba11f4031dba6d9c890278000d306cf0adb168310a84046758a27bdc85ede6518fb4ce82b0b7c18524ca180352c027bc5a50ca9c57fabf55efd68004c8677a208c6cdf249840e6e4a12f973d12e2f458b26338070f44443da85292149e202f966e05352d570589069d529884e95982509689ea7962103e9a69b97c2cd1890f00b959e2f95cef7f677355f2c39226b037e51ab672f31a89ee4bc975604d38d585be1cd3a05c7030d3c53955a3c89d9ceb55f7635716e9d7a11f00aebf9e86fbcff5e459d717537d764a4e04ce9b4f9c7076cb6b45124eff865629d2c8732aaf184d08d400d706575e89e81de105c71601a6bdb5c53a12a1d571d6088603a1f9e329ed3a1596d67292f2b049159b96738ebf4f258877ac1e5de5b82b4b75670239ee5c2a3fcdc090479e0c7e8d8844782154303b24adee43fa9937f50a0fd20d41fcee9a3f220808537c5ebeb59d35012c5978a57ad453417ddabf0c885faff9b3e02b4a804117f056adb69025f9fdbe33ae41133f828a67a5e7430150cc45ed21aadb88f7f0762bccccbbcabadf5392745564b4027126280fedafa438a00609e3e2afb14e0a7bf815fee99f82bfc93dec8a7b0fd9f4efacd6206bc05237cf4375943d269573c9a2bd07732e4058ec37924cb4a06a70608f1cf63220f1a0d1177323c4108c39cd591882c6ab7400d128ce842de1bf937006f9675cdb5a8ecf4158e2f026cc71054739dd800dd09138e391d3c6efba9009071e1658e98189fcdb29ee7fba51028ebc71ed7ef7e9f8b198c1026e8678ab4f39d15ad38178a573ba974f14fadc102d7cd16a2be96bbb6b4111565161423b2efcf84206ec8dca1a6fcb4e4d8bb33541efda8052bf19c8cc909775485c4514458f48f929932613d05f4df87cc3d3e7540f9c6fff566410f40247726567e0f2bfdc0b935cb0932249742ee124894c53580ac92f74ecb72b945ecc471ab6c0925eb9a07880fe2db2ef5fabe1bf9856df7de63a38c8f0a9abca1fda0f7eb688b5a2540c6673900fc967fcf0fc3fae0d49ffc7f272f8f5c3286118fc8dda4703a6b3bba4e20836f8ace656d6eb67de3e3fd443cc32bcf0a3f82baa975056574db658b6663a7c3fac578d08e9762d9df71e1d8f515c1b1774c1167d41f549b4dcaff205129bc0476b04a7c9e5c9d67f5d7f029dc3c968c4873fbb755144f4da24fec202eea762a1ed0db55e7b0e80770828bdb1efa88b2c88243d991f0a73d5f36f539fd582ab9e2480db067ef39f882a15a49d1d5567b71b6a8c01a37e23a171c23b5ea8c454f966462e360f261ca499f90b03485a42124dd82375dda786af6d9f94d5e5783c0d4c6715583ee781aaf7d882a5676718a6e82b7122fdfd04ff2ae14713cd8d4a1", 0x1000}, {&(0x7f0000000180)="8ebcaa59876b6fed16f20c8312e7f536bdc4255b0322f2371ffa5921721a5c92244fbac3f28518faed9aa8e719af6b1eac2d151eb41c32ddcaa7438031f38633b913ed476fbcb175915bdd958cc98989f2f459e26881e679d2a75838d0cb845e889a11605d5eea9f90a87d94734483c3d765e13bb9602dd860c0510a4c34346811468517bb15b3a45fbd07ea5333325f1472231ee3b07112fdbc848821cb674ff67778ec4d4d8821bc58d547a8596d6199c08ed7a1833795f75f7f0d6e05c9f252340b8690fb1af3f0cb8c4adc0b4d1873f8c50975eefb8e5f3555f46dfdc5847eec42b2349e4af8f7f56383755d60907bcdd8743d6bf4d67d", 0xf9}], 0x2, &(0x7f00000005c0)=[@flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr_2292={{0x18, 0x29, 0x39, {0x4, 0x0, 0x1, 0x1}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xb1b}}, @pktinfo={{0x24, 0x29, 0x32, {@remote, r7}}}], 0x70}}, {{&(0x7f0000000440)={0xa, 0x4e20, 0xb, @remote, 0x6}, 0x1c, &(0x7f0000000b40)=[{&(0x7f00000004c0)="9c5d721523eb21148bb6ee12864bea8c977a3f0ac364cbe519ac03eeacd4fd", 0x1f}, {&(0x7f00000006c0)}, {&(0x7f0000000700)="7d35006ddccf2415cc1439174ca873e614d9", 0x12}, {&(0x7f0000000740)="eafff65ef5cd7873617133f50b56e200804767835929dfe73a22da42b669ade7a20023e0cc79f77ad7ad5abd08bcf0419e156f937f126a9384f64f201d65bd6a11f86b06d0f7dec63ea8531163815b946ca2e2d3f1c329b11cd99a7d8c649e458f6f1067ad4a772647a2347448fb6ac743ea53244165c9c3a5d23b36b37cb3562a256d62db15ad84d55b0a66ae274dabf091f83b98015236864d1a42d4705ac53ee4db", 0xa3}, {&(0x7f0000000800)="1fe82ec8c2dbd5fe8abf1dcd7d5ebb76b67440dd521b4903f09576e5a8146a3aea91b8c003c6e2af6f1bbf174663d07b517a281958a31c149bbe700200cdbaa73d0c0b9a", 0x44}, {0x0}, {&(0x7f0000000a80)="6872d9851bde3c164d1cfcabd9f3ad7527024f222fcc733895d3e24e028deee651174774fc942a8476bc8401b782c28223f2ebba4a301391e2", 0x39}, {&(0x7f0000000ac0)="622c66fa575a2816b0d7d9219c89ae03a8cb7e9f1e9b9deedc853e33fd7939114578ff6b1207f0e1a4197a124cd0e6caff62cb4b263252f5091483fca1eea0ef4394233bbba22fdd86be9b2af9ed8b677c5d64cd5f48e3f5b776634d8819533597423727a023e7742571d560696819155e9ac40b15b9b0f795f0b078", 0x7c}], 0x8, &(0x7f0000001dc0)=[@dontfrag={{0x14, 0x29, 0x3e, 0x5}}, @pktinfo={{0x24, 0x29, 0x32, {@empty, r7}}}, @dstopts={{0x28, 0x29, 0x37, {0x3b, 0x1, '\x00', [@ra={0x5, 0x2, 0x9}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, r7}}}, @rthdrdstopts={{0x178, 0x29, 0x37, {0x87, 0x2b, '\x00', [@hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @padn, @enc_lim={0x4, 0x1, 0x8}, @pad1, @jumbo={0xc2, 0x4, 0x4}, @padn={0x1, 0x1, [0x0]}, @ra={0x5, 0x2, 0x5}, @generic={0x1, 0xba, "9b6dd53abf57d8b8f291496fa809c8fa2835edcc1fa74e089172dbeb644defe13149d4751484402362fa2ba67010b20c2178a2ecd015d22ec0d51ba4ea2b2d4b04ec74d3eaca12beb07b328937e1821f5ba658147652c77d914ed747df89a341eaaed2eebbb4b1bd83d3cc3f860ccc5302c2b4afe12ffdf2c28c55773f7dfd8779d794be8d81a26abc0912a51ad83b608d55276c5ded709c8b0f2352fd5f468fb3f017c34da86683ff760e5835a79e92f750f80227f5a5e6b5a9"}, @generic={0x7, 0x79, "b24764062d365cfb5ecff7979c139e2d538b929c11a15f278cbbb6d927dc2806b5c7e042daad0b3a35920bcb86774111423d93f7833ee0d775a243ea36e7835af62b1114e53922fa46b74b11510d73d563cc84f7e4d00b171c57016105b47a315693ffc9d2b56537552dddfff98b41c4251a7ded2893029dc6"}]}}}, @hopopts={{0xa8, 0x29, 0x36, {0x3b, 0x11, '\x00', [@ra={0x5, 0x2, 0x9}, @pad1, @calipso={0x7, 0x50, {0x3, 0x12, 0x7, 0x1, [0x8, 0x8, 0xd, 0x2, 0x10001, 0x4, 0x5, 0x1, 0x973d]}}, @calipso={0x7, 0x20, {0x3, 0x6, 0x0, 0x8, [0x7f, 0x5, 0x0]}}, @ra={0x5, 0x2, 0x3ff}, @enc_lim={0x4, 0x1, 0x8}, @ra={0x5, 0x2, 0x5}, @pad1, @ra={0x5, 0x2, 0x3}]}}}], 0x2b0}}, {{&(0x7f0000000c00)={0xa, 0x4e20, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x6}, 0x1c, &(0x7f0000000d00)=[{0x0}, {&(0x7f0000002180)}], 0x2, &(0x7f0000002240)=[@hopopts={{0x10a8, 0x29, 0x36, {0x3c, 0x212, '\x00', [@generic={0x0, 0xffe, "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"}, @generic={0xff, 0x7e, "47da23987fe83395d58a571e45a7a32a1ea3d4238fd9598b097f3a4176366e66a58e03276807538a70c641935408457d0d8c7bc2c8d48a21c3bd29a623752a38b3f0f49b751e957352ef5667b40c5db89a4a5c0043337f3ff0c5abcf9ae1d89d3263da3ca9a2927bf082b86e25a5a3a87278be18289eedeb537469f4b965"}, @padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x9}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x8}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xfff}}, @hopopts_2292={{0x128, 0x29, 0x36, {0x4, 0x21, '\x00', [@jumbo={0xc2, 0x4, 0xfffffffa}, @hao={0xc9, 0x10, @local}, @jumbo={0xc2, 0x4, 0x6}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x8, 0xb2, "ac90c347c7e9498d3b3395406e2010ad0ad45495d48a6e12e6df0fb9f74f93148a37b92c9528c63f5c401af3889f8403e8e4e4d8f0269af0b7a1425abc35dde70404cfbf3e739cac0070d04eea93a131e8f0f7ad76da32c649d3ebcceb23ad06497e2dac3f8a6a4e6aa7f654ce8d39d2913105ed7fbffed036e2de28035f500a76749e5ceef649cc186021f23050bc3fe5a68c6d5f63b1edf6459aa93b8ed36871259a1ceb2eee142c4681763033a8ee3dfc"}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @enc_lim={0x4, 0x1, 0xbf}, @jumbo={0xc2, 0x4, 0x8}, @hao={0xc9, 0x10, @private0}, @jumbo={0xc2, 0x4, 0x4}]}}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x33}}}, @rthdr={{0x28, 0x29, 0x39, {0x87, 0x2, 0x0, 0x88, 0x0, [@remote]}}}], 0x1240}}], 0x4, 0x900) bind$inet(r4, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r9, 0x107, 0xc, 0x0, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$netlink(0x10, 0x3, 0x4) r10 = socket$packet(0x11, 0x4000000000002, 0x300) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_group_source_req(r11, 0x29, 0x2f, &(0x7f00000004c0)={0x969c, {{0xa, 0x4e21, 0x5, @loopback, 0x2}}, {{0xa, 0x4e21, 0x3, @private1, 0xa9e}}}, 0x108) setsockopt$packet_tx_ring(r10, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) socket$can_j1939(0x1d, 0x2, 0x7) 911.939209ms ago: executing program 0 (id=1637): r0 = socket$unix(0x1, 0x1, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)={0x44, 0x0, 0x9, 0x3, 0x0, 0x0, {0x7}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040884}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="140100002b00010000000000ffdbdf2501"], 0x114}], 0x1}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000000c0)=@ipv6_getaddr={0x2c, 0x16, 0x1, 0x0, 0xfffffffc, {}, [@IFA_CACHEINFO={0x14, 0x6, {0x4, 0x3, 0x7fff, 0xffffffff}}]}, 0x2c}}, 0x41) bind$unix(r0, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000280)=@get={0x1, &(0x7f00000004c0)=""/245, 0x1}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x807, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x10, "00000000000000100000000000001010"}}}]}, 0x48}}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xe}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x440c0}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000bc0)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x8}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) 857.481643ms ago: executing program 1 (id=1638): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 32) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="c4000000190001000000000000000000ac1414bb000000000000000000000000f700000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00100001"], 0xc4}}, 0x0) (async) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@flushpolicy={0x1c, 0x1d, 0x1, 0x0, 0xfdff, "", [@policy_type={0xa, 0x10, {0x1}}]}, 0x1c}}, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {}, {}, {}, {}, {}, {0x2d}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async, rerun: 64) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40c0}, 0x0) (rerun: 64) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a4c000000090a010400000000000000000a0000020900010073797a3100000000080005400000001d0900020073797a31e1ff000008000a4000000000080003400000001408000c40008000031400000011000100"], 0x74}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) (async) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ppoll(&(0x7f0000000100)=[{r4, 0x2}, {r4, 0xa063}], 0x2, 0x0, 0x0, 0x0) 856.75245ms ago: executing program 2 (id=1639): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0xc09, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50081}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_MCAST_STATS_ENABLED={0x5, 0x2a, 0x1}]}}}]}, 0x48}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0x36dc}, [@printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x6e}}]}, &(0x7f0000000180)='GPL\x00'}, 0x90) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000080)=@ethtool_sset_info={0x37, 0x0, 0x10}}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'wlan0\x00', 0x0}) syz_emit_ethernet(0x46, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @time_exceeded={0x3, 0x5, 0x0, 0x3, 0x0, 0x6, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @broadcast, @multicast2}, "1a3f02eb38ad1bf6"}}}}}, 0x0) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)={0x4c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={{{}, {}, @device_b, @device_a, @initial, {0x0, 0x400}}, @ext_ch_sw={0x4, 0x4, {{0x0, 0x0, 0x2}, @val={0x76, 0x6, {0x4, 0x5, 0x19, 0x3}}}}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000340)=ANY=[@ANYRES64=r3, @ANYRES64=r0, @ANYBLOB="31bd4ac4b90779939b22236f5cf5c2c9c19e0447f9fb542cfb44a812ebe44f1014826bd0995a74e448d08525243533b35c6ce147839254668808f1600bda5aae4f5a92fc38d91b028867bbae6f22b9a4fc57adb112a9c8335eedcd7b5b8b307105882a84dc673aa6ef4d0597fc7e31a5ddf7ab919927f762dc2c9cf32b5efc3a5288de7def2d49eff8bfca47826d4835c37f0e02f4c72897e9235212fa270f5d453b50e607c102ed1a18798942c574cf98e00c9c725681b3719ac3afb3883bc450e532c01618492824af6326944fcf59d03aa566afd6c8ac446b2fcabaa270"], 0x20}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r10, 0x84, 0x84, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0xfffd}, 0x90) sendmmsg(r10, &(0x7f0000003ac0)=[{{&(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @local, 0x8}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000380)='[', 0x1}], 0x1}}], 0x1, 0x0) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=@bridge_delneigh={0x1c, 0x1c, 0x325, 0x70bd27, 0x0, {0x7, 0x0, 0x0, 0x0, 0x80, 0x8e, 0x4}}, 0x1c}, 0x1, 0x0, 0x0, 0x200440c5}, 0x0) ioctl$TUNATTACHFILTER(r8, 0x401054d5, &(0x7f0000000000)={0x3, &(0x7f00000001c0)=[{0x0, 0x0, 0x0, 0x37cb7880}, {0x0, 0xfe, 0x10, 0x4000000}, {0x6, 0x0, 0x0, 0x8007}]}) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x880, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) 854.9098ms ago: executing program 4 (id=1640): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b040000000000000000020000004000048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000e08000340000000170900010073797a300000000009"], 0x94}}, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=@newtclass={0xa4, 0x28, 0x10, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xe}, {0x5, 0xf}, {0xe, 0x4}}, [@c_atm={{0x8}, {0x64, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0x2, 0xc}}, @TCA_ATM_EXCESS={0x8, 0x4, {0x10, 0x7}}, @TCA_ATM_EXCESS={0x8, 0x4, {0x6, 0x7}}, @TCA_ATM_EXCESS={0x8, 0x4, {0x6, 0xc}}, @TCA_ATM_HDR={0x3d, 0x3, "402cb6208a6666194eede0ecd7f1b9451b6df0f73511eb7678fd2bba0966446f15151ce8243d588398c2ae911136b39c8b4c2dfde1330df993"}]}}, @c_atm={{0x8}, {0xc, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0x7, 0x5}}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4}, 0x24040001) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000340)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 785.242127ms ago: executing program 4 (id=1641): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r1, 0x104, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x2, 0x3, 0x101, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0xa}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x1}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x200080c0}, 0x24008015) sendmsg$nl_netfilter(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000000500)=ANY=[@ANYBLOB="cc020000210a0108fdffffff0000000000000000630003"], 0x2cc}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaeaaaaaaffffffffffff86dd604dd318001806fffc010000000000000000000000000006fe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="600200009078000008020000"], 0x0) 721.276843ms ago: executing program 1 (id=1642): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = socket(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) ioctl$PPPIOCSFLAGS(r3, 0x40047459, &(0x7f0000000180)=0x1000800) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x1f, 0xf, &(0x7f0000000680)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0xb2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 613.379933ms ago: executing program 4 (id=1643): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f00000000c0)=0x9, 0x4) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x96, @remote, 0x4}, 0x1c) 592.578366ms ago: executing program 3 (id=1644): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f00000004c0)) 518.45314ms ago: executing program 3 (id=1645): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x3f7, 0xc0586cef52c9972e, 0x70bd2d, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24008859}, 0xc004) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r2, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {}, {0x14, 0x18, {0x7, @bearer=@l2={'ib', 0x3a, 'ip6_vti0\x00'}}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x801) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_ADD_RULE(r3, &(0x7f0000000740)={&(0x7f0000000240), 0xc, &(0x7f0000000700)={&(0x7f0000000280)={0x444, 0x3f3, 0x100, 0x70bd27, 0x25dfdbfc, {0x3, 0x1, 0x39, [0x5, 0x4, 0x5, 0x6, 0x6, 0xfffffffd, 0x10001, 0x9, 0x6a1871e7, 0x1, 0x8000, 0x6bdd, 0x100, 0x6, 0x100, 0x2, 0x2, 0x380000, 0x2, 0x8, 0x0, 0x16, 0x1, 0x5, 0x865, 0x8, 0x2, 0x2, 0x6, 0x4, 0x1, 0xd, 0x7, 0xcf6, 0x7, 0x10001, 0x5a526324, 0x3, 0x8, 0x1, 0xc, 0xffff0001, 0x4, 0x3, 0x3, 0x3, 0x1, 0x0, 0x5, 0x9, 0x0, 0x82d, 0x7, 0x3ff, 0x7fff, 0xb4e, 0xe8, 0x4, 0x0, 0x4, 0x54, 0x0, 0xffff, 0x4], [0x6, 0x9, 0x5, 0xd2, 0x7fff, 0x3, 0x7f57, 0x5, 0x2f, 0x9, 0x7, 0x2, 0x7, 0x7, 0x7f, 0x5, 0x1, 0x1, 0x3, 0x6, 0xe, 0x3, 0x9, 0x1ff, 0x7, 0x2, 0x4, 0x8001, 0xc2ad, 0x6e, 0x306, 0x8, 0x4, 0x10001, 0x9, 0x6, 0x0, 0x6, 0x3, 0x9, 0x6, 0x2, 0x10001, 0xfffffffa, 0x9, 0x89f, 0x8, 0x0, 0x7fffffff, 0x25, 0x45, 0x0, 0x8, 0x2, 0x80, 0x70, 0x0, 0x800, 0x1, 0x3, 0x200, 0xc, 0x5, 0x81], [0x6, 0x6, 0x7f, 0x2, 0xd, 0x5a, 0x416bdc97, 0x0, 0x7, 0xad1e, 0x7, 0x1, 0xffff, 0x5, 0x6, 0x7, 0x0, 0x5, 0x10, 0x4, 0x7, 0x3, 0x200, 0x8, 0x5, 0x193, 0xfffffffb, 0x1, 0x50000000, 0x5, 0x3, 0x1, 0x0, 0xfffff0f5, 0x7f, 0x1864, 0x9, 0x1, 0x723, 0x3, 0xffff, 0x1, 0xe, 0x2, 0x4, 0xf, 0x7f, 0x2, 0x2, 0xf0, 0x7, 0x7, 0x0, 0x2, 0x3ff, 0xb, 0x8, 0x6, 0x2, 0x6, 0xfff, 0x5, 0x7ff], [0x8, 0x1ff, 0x5, 0xfe, 0x2, 0x3, 0x8, 0x9, 0x4, 0x3ff, 0x9f8, 0x1, 0x3, 0x5, 0xfffffe01, 0x8001, 0x101, 0x81, 0x2, 0x80000000, 0x789, 0x400, 0x5, 0x9, 0xb2f, 0xf6b4, 0x0, 0xf, 0x30e, 0x1, 0x6, 0x7, 0x7fffffff, 0x0, 0x9f, 0x5, 0x8, 0x6, 0x5, 0x1, 0x0, 0x8, 0x9, 0x55, 0x6, 0x9, 0xfffffff9, 0x4c2, 0xb3, 0x9, 0x8, 0x1, 0x4, 0x5, 0x6, 0x40, 0x9, 0x3, 0x0, 0x9, 0x224, 0x0, 0x0, 0x8], 0x21, ['!@-)\\)\'[#.:[\x00', '\\,\x00', 'ib', 'ib', '}!\x00', '\x00', 'TIPC\x00', '$+\\\x00']}, ["", ""]}, 0x444}, 0x1, 0x0, 0x0, 0x24060094}, 0x20000081) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x28, 0xd, 0xa, 0x201, 0x0, 0x0, {0x5}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x8840}, 0x40080) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000008c0), 0xffffffffffffffff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000900)={@multicast1, @private, 0x0}, &(0x7f0000000940)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000980)={'batadv0\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000009c0)={0x0, @private, @broadcast}, &(0x7f0000000a00)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000ac0)={'gre0\x00', &(0x7f0000000a40)={'syztnl0\x00', 0x0, 0x700, 0x80, 0x5, 0x452, {{0xe, 0x4, 0x2, 0x35, 0x38, 0x64, 0x0, 0x8, 0x29, 0x0, @local, @remote, {[@timestamp_addr={0x44, 0x24, 0xd8, 0x1, 0x4, [{@rand_addr=0x64010102, 0x6d0f}, {@broadcast, 0x2}, {@private=0xa010100, 0x4}, {@local, 0x3ff}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000b00)={'vcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000c00)={'sit0\x00', &(0x7f0000000b40)={'ip_vti0\x00', 0x0, 0x7, 0x40, 0x6, 0xe, {{0x1f, 0x4, 0x0, 0x36, 0x7c, 0x65, 0x0, 0x55, 0x29, 0x0, @rand_addr=0x64010101, @empty, {[@ssrr={0x89, 0xb, 0x2a, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102]}, @ssrr={0x89, 0x7, 0xc5, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @lsrr={0x83, 0x2b, 0x81, [@empty, @rand_addr=0x64010102, @multicast1, @broadcast, @dev={0xac, 0x14, 0x14, 0x16}, @multicast2, @broadcast, @multicast2, @dev={0xac, 0x14, 0x14, 0x42}, @multicast2]}, @rr={0x7, 0x7, 0x62, [@remote]}, @ssrr={0x89, 0x1f, 0x52, [@dev={0xac, 0x14, 0x14, 0x22}, @dev={0xac, 0x14, 0x14, 0x2b}, @loopback, @broadcast, @rand_addr=0x64010101, @local, @empty]}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000e40)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000c40)={0x1a8, r5, 0x8, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x24000000}, 0x4) getsockopt$netlink(r0, 0x10e, 0x7, &(0x7f0000000e80)=""/38, &(0x7f0000000ec0)=0x26) r12 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000f00), 0x800) setsockopt$MRT_ADD_MFC(r12, 0x0, 0xcc, &(0x7f0000000f40)={@broadcast, @empty, 0xffffffffffffffff, "f901edfaee268e679d195ddb30f942282ff37d43e89402945e89e33c6e3f0677", 0x2, 0x7, 0x8, 0x9}, 0x3c) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000fc0)=0x0, &(0x7f0000001000)=0x4) sendmsg$ETHTOOL_MSG_RINGS_GET(r1, &(0x7f00000011c0)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001040)={0x12c, r5, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x400c0}, 0x24008010) r14 = socket$inet(0x2, 0x800, 0x7) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r14, 0x84, 0x16, &(0x7f0000001200)={0x6, [0x8, 0x7b, 0x80, 0x2, 0x935, 0x0]}, &(0x7f0000001240)=0x10) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$tipc2(&(0x7f00000012c0), r1) sendmsg$TIPC_NL_PUBL_GET(r15, &(0x7f00000015c0)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001580)={&(0x7f0000001300)={0x270, r16, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x70, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x406b62b3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xa045}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffff7}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2c}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xe491}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfff}]}, @TIPC_NLA_SOCK={0x60, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xd}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xb611}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6606}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_NODE={0x110, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7e}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4ba}, @TIPC_NLA_NODE_ID={0xbf, 0x3, "5d5a57cd20902af6ead2d3899b61e4ab3e45315809e19af99158e4e0f7e5ba290c14d589c0ebc20d39c3d964ec6b5d4328bb2638cf21e5462676407d0dfb45a41f73eef1641556b99e0bf73dd3a4c9b7a1b95ab30d0ff9a3a46dd1cc6a8dd51abf9674cd064aaa56e1ee21d2adbc12d81247376f6599d087decfd8b3c05c83c4a91822b1d926013cd4886019251eefbf2b264592c35c08a9d11c6398fa935acadfacf874c82927da71d021397d1b7dcdf95559ce70bd329f7367e7"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ID={0x1c, 0x3, "e56a5810fd14933b9e2d989de9f5511a113503904fac990b"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x1ff, @mcast2, 0x10}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast1}}}}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xe32b}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xe9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}]}]}, 0x270}, 0x1, 0x0, 0x0, 0x884}, 0x200000c0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x6, 0x10, r14, 0xbe47f000) r17 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001640), r1) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001700)={&(0x7f0000001680)={0x44, r17, 0x10, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x36}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "a03c733efeec2671d1962a2b22e256fb"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x83}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000001}, 0xc040) 256.98939ms ago: executing program 2 (id=1646): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="14010000"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000005d40)={0x6c0, 0x8, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="14010000"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) socket$rds(0x15, 0x5, 0x0) (async) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) (async) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000005d40)={0x6c0, 0x8, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) (async) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) (async) 246.094733ms ago: executing program 3 (id=1647): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd21, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xc, 0x8}, {}, {0xb, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xc, 0xc}, {0x0, 0xfff1}, {0xfff2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4041080) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r7, &(0x7f0000000780), 0x0, 0x87c4af933b081f46) 199.04101ms ago: executing program 1 (id=1648): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0xc0, r1, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0xc0}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x0, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18020007000096ff754986b00a17c0029af50e00000000000000000000850000002f0000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x2}, 0x94) 81.407688ms ago: executing program 1 (id=1649): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000100)={@local}, &(0x7f0000000140)=0x14) (async) getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000100)={@local, 0x0}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000640)=@delqdisc={0x24, 0x25, 0x2, 0x70bd23, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0xfff2, 0xfff2}, {0xfff3, 0x10}, {0x10, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40884}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000640)=@delqdisc={0x24, 0x25, 0x2, 0x70bd23, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0xfff2, 0xfff2}, {0xfff3, 0x10}, {0x10, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40884}, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='cgroup.kill\x00', 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x24, 0x41, 0x107, 0x0, 0x7, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x24}}, 0x4010) 81.077814ms ago: executing program 0 (id=1650): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000100)={@val, @void, @eth={@random="ad65d0fc00", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x1, 0x2, 0x4e, 0x64, 0x0, 0x1, 0x11, 0x0, @rand_addr=0x64010102, @empty=0xe0000001}, {0x4e22, 0x4e21, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0xff, 0x0, @void}}}}}}}}, 0x32) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@delneigh={0x30, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r3, 0x0, 0x96, 0x4}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, @NDA_VLAN={0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 66.158235ms ago: executing program 2 (id=1651): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1, 0x4}, 0x6) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff9ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcd0cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b24df41dc10d1e8bf076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b318e2ec0e1a00897a74a0091ff110026e6d2ef831ab7ea0c34f17efd36ef3bb622003b538dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe7bc0cb82d2789cb132b8667c21476619f28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fbce841f8a97be6148ba532e6ea09c346dfebd31a08b32808b80200000000009dd27080e71113610e1019c12a73748b049604fa72c64ed858e8327ef01fb6c86adac12233f9a1fb9c2aec61ce63a3462fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6e97180aabc18cae2ed4b4390af9a9ceafd07ed00b0000002cab154ad029a119ca3c972780870014601c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f4b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a2a71bc85018e5ff2c910496f19afc91b47683db01a469398685211bbae0e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bde792c88c5b8dcdcc22ee17476d738992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5dc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffffd7917f23837a6b24db0e067345560942fa629fbef2461c96a08707671315c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e48455b588b90dfae158b94f50adab988dd8e12baf5cc9398c88607a08009c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859ac8e3c177b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2498d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d4a3e1a9e90d76c1993e0799d4894ee7f8249dc1e342892129369ee1b85afa1a5be5f6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355b17402a500587b603306a5af8d867d80a07f10b854b1c8c768c001496fa99ce5b5040be9194123e918914a71ad5a8521fb956dbc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c6775e19f0b7e70803000000b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989172a1bcd1e30280bc586e79a5dd8076c248e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fccf363361dcdba10c1547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5c759c3e5468f5874c24411d415b6b085fb73a2d7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aa0000000000000000532ff181c985f54b7ae20aa5e63055b4d6a36fa98a44e379d2bccf977c3e88538f406b598307c9912fb097601f3f88a2ea6fd1f9320cfe7f09aed4d1e72d26e5c7a93854c8e9f7f15f02e177ce23f43a154b42e26f037e8a01377cbd3f509e6e540c9ba9c2a589ac5d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd92689192727a7267c47cf897853d160100b39b613faefe16bd91fc105dddd77ab929b95032d3717fa9fbdc2bdc0e98ae2c3f23a6131e2879f0484ee3bfe30b92dd493be66c2242f8184733b80ba28e824910844df31f3d4bb2f89049c5f6d63956995747639964217aacfe548fc869098aa8e07e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d187168d5c9cd848d566cc1758763f0000009c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5a45706bda78ab602000000000000000000113a3065a478d1de98be3a66f6fbf68f2f5693050fa56db62e2f99cf916059ee364dad078fc88d17cbde37a2270f90a60afe8548f4c579b09c333382c6e7a316ac03aa23d379836b96173a5541fa96c27e7fb6d2585d828aa330f3438d8487912bb7742be1502e706644f7a937451beb7a5f6ca3ef21e8cb8f841af6d54334d82a8b816b6daccf0c66162f897623ee325d714f9f10636a7573582ff31c7f9c6f767c806ef4af486cc19a5355bdc814cb5557c6fa6404179c865980b0815b907a7f268e97828c196f5ac033d395a217b4e1e45663023a0292003c36a3b7461fc2c8566e0f3f693bfacae26aa2b7d17962989ccb943633c080aacc9b7d311c251686fc66aa80bf41a5bf6cd72d5aa995820fb318fad61a79a61d0a969fd6018ac9f131fe02fe31d565723cbf9b63841e21417fc29a3e7a03886d80566ae001861799a4aad91c72139e681ced8625b675dfbd6d458d4b2d9e6d565430248172ad942cdb41639f4113896827c8806e049218cd1eef89d6b9b14dd707da40705c07f878263ff9b71ccf28ec50178c7aac83bef7bd1045a5e4bcb6cfe05e2ac3e17c1f8f12ddf5b6770ce0da8cb3aba3a935a6b737b6d3ebf2c715dcc11c5759bd0acdecf333f2b77c52fb2251336bbd92f73ad1a30bb9162bd9d699c49d824b827f3e7c1096354946e09922db25904c83262c6dcb87457e4abefa0e9dcb17d79c173895b74aae2ed4419662690a16494e7b27d0d2688c69b4be3d21b783195f6a5e5dc5c07c73f0d0f0670db10ac9ef5b8295ff88df734e3c6ab8555c0390f962cbf559bce9c42e1034dba78997b2877b485d9d4ae2fcd3e757b84319879d0337785773c940af6e57d162f4606d101def01199325c8676a32e26303560271b720216d95e0013265a45b02bd2414bebda89b7b5e71e70e0000000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x90000484}, 0xc, &(0x7f0000000300)={&(0x7f0000000e00)=ANY=[@ANYBLOB="c4010000", @ANYRES16=r2, @ANYBLOB="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"], 0x1c4}, 0x1, 0x0, 0x0, 0x90}, 0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe40, 0x10000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x6}, 0x2c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x2, 0x2b}, 0x2, @in=@loopback, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 26.940134ms ago: executing program 1 (id=1652): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x240000, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x240000, 0x0) socket$kcm(0x2, 0x5, 0x0) (async) r2 = socket$kcm(0x2, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000001280)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000011c0)=[{&(0x7f00000012c0)='#', 0x1}], 0x1}, 0x0) (async) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000001280)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000011c0)=[{&(0x7f00000012c0)='#', 0x1}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x7, &(0x7f0000000180), 0x43) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'veth0_to_team\x00', 0x600}) (async) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'veth0_to_team\x00', 0x600}) r3 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r3, 0x29, 0x11, &(0x7f0000000180)=0xd74b, 0x4) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.swap.current\x00', 0x0, 0x0) write$ppp(r4, &(0x7f0000000140)="f4d62d4ed659e133d6921d21860dc58b4c7e6ab1af1d31d56490b56b68b26bc65c", 0x21) close(0x3) 0s ago: executing program 3 (id=1653): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r0, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) write(r2, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.33' (ED25519) to the list of known hosts. [ 66.686017][ T5850] cgroup: Unknown subsys name 'net' [ 66.860921][ T5850] cgroup: Unknown subsys name 'cpuset' [ 66.869543][ T5850] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 68.256567][ T5850] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.444430][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.452749][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.203159][ T5863] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 72.213766][ T5870] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 72.224123][ T5870] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 72.233688][ T5870] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 72.242958][ T5870] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 72.250870][ T5870] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 72.266940][ T5874] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 72.268026][ T5870] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 72.275719][ T5874] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 72.290208][ T5870] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 72.297715][ T5870] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 72.304975][ T5874] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 72.316990][ T5877] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 72.325414][ T5877] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 72.334889][ T5870] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 72.341954][ T5874] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 72.349723][ T5870] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 72.359157][ T5879] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 72.359953][ T5870] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 72.368187][ T5879] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 72.375638][ T5870] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 72.387436][ T5874] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 72.396643][ T5863] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 72.409644][ T5870] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 72.417165][ T5863] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 72.960862][ T5860] chnl_net:caif_netlink_parms(): no params data found [ 73.011399][ T5869] chnl_net:caif_netlink_parms(): no params data found [ 73.105628][ T5862] chnl_net:caif_netlink_parms(): no params data found [ 73.268465][ T5868] chnl_net:caif_netlink_parms(): no params data found [ 73.391017][ T5869] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.398293][ T5869] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.405886][ T5869] bridge_slave_0: entered allmulticast mode [ 73.413402][ T5869] bridge_slave_0: entered promiscuous mode [ 73.426382][ T5860] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.434198][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.441703][ T5860] bridge_slave_0: entered allmulticast mode [ 73.448747][ T5860] bridge_slave_0: entered promiscuous mode [ 73.456274][ T5873] chnl_net:caif_netlink_parms(): no params data found [ 73.483088][ T5869] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.490352][ T5869] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.498277][ T5869] bridge_slave_1: entered allmulticast mode [ 73.505209][ T5869] bridge_slave_1: entered promiscuous mode [ 73.534926][ T5860] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.542315][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.549586][ T5860] bridge_slave_1: entered allmulticast mode [ 73.556547][ T5860] bridge_slave_1: entered promiscuous mode [ 73.593347][ T5869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.616358][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.623601][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.631528][ T5862] bridge_slave_0: entered allmulticast mode [ 73.639291][ T5862] bridge_slave_0: entered promiscuous mode [ 73.691239][ T5869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.716001][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.724297][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.731670][ T5862] bridge_slave_1: entered allmulticast mode [ 73.738742][ T5862] bridge_slave_1: entered promiscuous mode [ 73.758997][ T5860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.770728][ T5860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.832151][ T5868] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.839773][ T5868] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.846967][ T5868] bridge_slave_0: entered allmulticast mode [ 73.855022][ T5868] bridge_slave_0: entered promiscuous mode [ 73.866030][ T5869] team0: Port device team_slave_0 added [ 73.874875][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.916905][ T5868] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.924170][ T5868] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.931568][ T5868] bridge_slave_1: entered allmulticast mode [ 73.939636][ T5868] bridge_slave_1: entered promiscuous mode [ 73.947963][ T5869] team0: Port device team_slave_1 added [ 73.970432][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.995230][ T5860] team0: Port device team_slave_0 added [ 74.051573][ T5860] team0: Port device team_slave_1 added [ 74.059256][ T5862] team0: Port device team_slave_0 added [ 74.065208][ T5873] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.072867][ T5873] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.080570][ T5873] bridge_slave_0: entered allmulticast mode [ 74.087769][ T5873] bridge_slave_0: entered promiscuous mode [ 74.109425][ T5868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.122125][ T5868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.143841][ T5862] team0: Port device team_slave_1 added [ 74.165491][ T5873] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.173099][ T5873] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.180800][ T5873] bridge_slave_1: entered allmulticast mode [ 74.188123][ T5873] bridge_slave_1: entered promiscuous mode [ 74.195365][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.202917][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.228837][ T5869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.242100][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.249158][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.275814][ T5869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.352450][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.360369][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.386664][ T5860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.398462][ T5867] Bluetooth: hci0: command tx timeout [ 74.400938][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.410991][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.437010][ T5860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.449606][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.456562][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.477575][ T5875] Bluetooth: hci4: command tx timeout [ 74.482740][ T5863] Bluetooth: hci1: command tx timeout [ 74.488269][ T5875] Bluetooth: hci2: command tx timeout [ 74.493743][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.498976][ T5867] Bluetooth: hci3: command tx timeout [ 74.527444][ T5873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.539052][ T5868] team0: Port device team_slave_0 added [ 74.551564][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.558838][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.585294][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.605545][ T5873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.631746][ T5868] team0: Port device team_slave_1 added [ 74.717496][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.724452][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.751946][ T5868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.780088][ T5869] hsr_slave_0: entered promiscuous mode [ 74.786472][ T5869] hsr_slave_1: entered promiscuous mode [ 74.796872][ T5873] team0: Port device team_slave_0 added [ 74.815974][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.823075][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.849435][ T5868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.878992][ T5862] hsr_slave_0: entered promiscuous mode [ 74.885325][ T5862] hsr_slave_1: entered promiscuous mode [ 74.891550][ T5862] debugfs: 'hsr0' already exists in 'hsr' [ 74.897381][ T5862] Cannot create hsr debugfs directory [ 74.905060][ T5873] team0: Port device team_slave_1 added [ 74.916274][ T5860] hsr_slave_0: entered promiscuous mode [ 74.923048][ T5860] hsr_slave_1: entered promiscuous mode [ 74.929436][ T5860] debugfs: 'hsr0' already exists in 'hsr' [ 74.935177][ T5860] Cannot create hsr debugfs directory [ 75.064608][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.071784][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.098194][ T5873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.111082][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.118714][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.144935][ T5873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.161705][ T5868] hsr_slave_0: entered promiscuous mode [ 75.168495][ T5868] hsr_slave_1: entered promiscuous mode [ 75.174588][ T5868] debugfs: 'hsr0' already exists in 'hsr' [ 75.180376][ T5868] Cannot create hsr debugfs directory [ 75.304522][ T5873] hsr_slave_0: entered promiscuous mode [ 75.311398][ T5873] hsr_slave_1: entered promiscuous mode [ 75.317802][ T5873] debugfs: 'hsr0' already exists in 'hsr' [ 75.323565][ T5873] Cannot create hsr debugfs directory [ 75.806506][ T5862] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.820304][ T5862] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.851785][ T5862] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.862923][ T5862] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.910340][ T5860] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 75.924553][ T5860] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 75.946610][ T5860] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 75.958211][ T5860] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 76.042840][ T5868] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 76.061585][ T5868] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 76.071657][ T5868] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 76.084103][ T5868] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 76.226226][ T5873] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 76.249529][ T5873] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 76.264510][ T5873] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 76.275535][ T5873] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 76.315316][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.383098][ T5862] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.394726][ T5860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.418899][ T5869] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 76.431080][ T5869] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 76.461698][ T2141] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.468996][ T2141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.482819][ T5867] Bluetooth: hci0: command tx timeout [ 76.484646][ T5869] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 76.502109][ T5869] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 76.556301][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.563484][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.567602][ T5867] Bluetooth: hci1: command tx timeout [ 76.574125][ T5875] Bluetooth: hci4: command tx timeout [ 76.576070][ T5870] Bluetooth: hci2: command tx timeout [ 76.588353][ T5863] Bluetooth: hci3: command tx timeout [ 76.641856][ T5860] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.674187][ T5868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.685254][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.692384][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.740953][ T5868] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.751730][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.758916][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.798688][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.805790][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.876777][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.883987][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.930779][ T5873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.033013][ T5873] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.057102][ T5869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.100179][ T1107] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.107355][ T1107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.147819][ T1107] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.155261][ T1107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.251250][ T5869] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.284677][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.308521][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.315759][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.373434][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.380655][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.516636][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.613140][ T5862] veth0_vlan: entered promiscuous mode [ 77.665468][ T5862] veth1_vlan: entered promiscuous mode [ 77.741756][ T5860] veth0_vlan: entered promiscuous mode [ 77.814090][ T5860] veth1_vlan: entered promiscuous mode [ 77.851594][ T5873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.869361][ T5868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.908656][ T5862] veth0_macvtap: entered promiscuous mode [ 77.929831][ T5862] veth1_macvtap: entered promiscuous mode [ 77.965581][ T5869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.021361][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.051060][ T5860] veth0_macvtap: entered promiscuous mode [ 78.075277][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.092092][ T5860] veth1_macvtap: entered promiscuous mode [ 78.119956][ T5868] veth0_vlan: entered promiscuous mode [ 78.131794][ T2141] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.144795][ T2141] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.181541][ T2141] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.202394][ T5868] veth1_vlan: entered promiscuous mode [ 78.215331][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.231989][ T2141] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.264319][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.295337][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.332685][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.344128][ T5873] veth0_vlan: entered promiscuous mode [ 78.372408][ T5868] veth0_macvtap: entered promiscuous mode [ 78.383168][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.392990][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.419249][ T5873] veth1_vlan: entered promiscuous mode [ 78.430296][ T5868] veth1_macvtap: entered promiscuous mode [ 78.505212][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.541771][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.565610][ T5867] Bluetooth: hci0: command tx timeout [ 78.610337][ T1107] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.626946][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.635548][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.644330][ T5867] Bluetooth: hci4: command tx timeout [ 78.650100][ T5870] Bluetooth: hci1: command tx timeout [ 78.655514][ T5870] Bluetooth: hci2: command tx timeout [ 78.661807][ T5863] Bluetooth: hci3: command tx timeout [ 78.687115][ T1107] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.696178][ T1107] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.719518][ T5873] veth0_macvtap: entered promiscuous mode [ 78.744217][ T1107] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.757727][ T1107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.765564][ T1107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.777091][ T5873] veth1_macvtap: entered promiscuous mode [ 78.837399][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.843607][ T5869] veth0_vlan: entered promiscuous mode [ 78.847292][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.862262][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.870803][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.910325][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.955520][ T5869] veth1_vlan: entered promiscuous mode [ 78.976116][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.990604][ T5860] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 79.110447][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.123096][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.133540][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.151437][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.189625][ T5987] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 79.196810][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.208841][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.220875][ T5989] veth0_to_bridge: entered promiscuous mode [ 79.228206][ T5989] veth0_to_bridge: left promiscuous mode [ 79.238566][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.248404][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.345406][ T5993] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6'. [ 79.416325][ T5869] veth0_macvtap: entered promiscuous mode [ 79.453182][ T5869] veth1_macvtap: entered promiscuous mode [ 79.594258][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.620938][ T6003] sctp: [Deprecated]: syz.1.8 (pid 6003) Use of int in max_burst socket option. [ 79.620938][ T6003] Use struct sctp_assoc_value instead [ 79.630848][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.691130][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.704832][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.741410][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.760333][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.855442][ T1107] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.886801][ T66] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.924242][ T6008] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9'. [ 79.926184][ T66] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.019726][ T66] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.091592][ T6016] netlink: 'syz.3.4': attribute type 1 has an invalid length. [ 80.383711][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.413562][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.455261][ T6031] netlink: 68 bytes leftover after parsing attributes in process `syz.2.15'. [ 80.606363][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.616488][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.718725][ T5870] Bluetooth: hci2: command tx timeout [ 80.724283][ T5867] Bluetooth: hci4: command tx timeout [ 80.727290][ T5875] Bluetooth: hci3: command tx timeout [ 80.735192][ T5863] Bluetooth: hci1: command tx timeout [ 80.904439][ T6045] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 80.988652][ T6050] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 81.127916][ T6055] Zero length message leads to an empty skb [ 81.962154][ T6090] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 82.009648][ T6090] CPU: 1 UID: 0 PID: 6090 Comm: syz.1.29 Not tainted syzkaller #0 PREEMPT(full) [ 82.009674][ T6090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 82.009691][ T6090] Call Trace: [ 82.009699][ T6090] [ 82.009707][ T6090] dump_stack_lvl+0x189/0x250 [ 82.009741][ T6090] ? __pfx_dump_stack_lvl+0x10/0x10 [ 82.009762][ T6090] ? __pfx__printk+0x10/0x10 [ 82.009791][ T6090] ? kernfs_path_from_node+0x2f/0x290 [ 82.009810][ T6090] ? kernfs_path_from_node+0x250/0x290 [ 82.009828][ T6090] ? kernfs_path_from_node+0x2f/0x290 [ 82.009864][ T6090] sysfs_warn_dup+0x8e/0xa0 [ 82.009883][ T6090] sysfs_do_create_link_sd+0xc0/0x110 [ 82.009905][ T6090] device_add_class_symlinks+0x1cf/0x240 [ 82.009928][ T6090] device_add+0x475/0xb50 [ 82.009952][ T6090] wiphy_register+0x1ba6/0x28d0 [ 82.009995][ T6090] ? __pfx_wiphy_register+0x10/0x10 [ 82.010018][ T6090] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 82.010046][ T6090] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 82.010071][ T6090] ieee80211_register_hw+0x3484/0x4100 [ 82.010107][ T6090] ? ieee80211_register_hw+0x14d1/0x4100 [ 82.010138][ T6090] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 82.010160][ T6090] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 82.010191][ T6090] ? __hrtimer_setup+0x187/0x210 [ 82.010207][ T6090] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 82.010266][ T6090] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 82.010322][ T6090] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 82.010343][ T6090] ? trace_kmalloc+0x1f/0xd0 [ 82.010363][ T6090] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 82.010386][ T6090] ? kstrndup+0xbf/0x160 [ 82.010416][ T6090] hwsim_new_radio_nl+0xea4/0x1b10 [ 82.010441][ T6090] ? __pfx___nla_validate_parse+0x10/0x10 [ 82.010479][ T6090] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 82.010515][ T6090] ? __nla_parse+0x40/0x60 [ 82.010542][ T6090] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 82.010573][ T6090] genl_family_rcv_msg_doit+0x212/0x300 [ 82.010601][ T6090] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 82.010636][ T6090] ? bpf_lsm_capable+0x9/0x20 [ 82.010656][ T6090] ? security_capable+0x7e/0x2e0 [ 82.010687][ T6090] genl_rcv_msg+0x60e/0x790 [ 82.010714][ T6090] ? __pfx_genl_rcv_msg+0x10/0x10 [ 82.010732][ T6090] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 82.010769][ T6090] netlink_rcv_skb+0x208/0x470 [ 82.010790][ T6090] ? __lock_acquire+0xab9/0xd20 [ 82.010814][ T6090] ? __pfx_genl_rcv_msg+0x10/0x10 [ 82.010835][ T6090] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 82.010880][ T6090] ? down_read+0x1ad/0x2e0 [ 82.010901][ T6090] genl_rcv+0x28/0x40 [ 82.010918][ T6090] netlink_unicast+0x82f/0x9e0 [ 82.010951][ T6090] ? __pfx_netlink_unicast+0x10/0x10 [ 82.010975][ T6090] ? netlink_sendmsg+0x642/0xb30 [ 82.010989][ T6090] ? skb_put+0x11b/0x210 [ 82.011011][ T6090] netlink_sendmsg+0x805/0xb30 [ 82.011039][ T6090] ? __pfx_netlink_sendmsg+0x10/0x10 [ 82.011059][ T6090] ? aa_sock_msg_perm+0xf1/0x1d0 [ 82.011079][ T6090] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 82.011096][ T6090] ? __pfx_netlink_sendmsg+0x10/0x10 [ 82.011114][ T6090] __sock_sendmsg+0x219/0x270 [ 82.011140][ T6090] ____sys_sendmsg+0x505/0x830 [ 82.011166][ T6090] ? __pfx_____sys_sendmsg+0x10/0x10 [ 82.011194][ T6090] ? import_iovec+0x74/0xa0 [ 82.011214][ T6090] ___sys_sendmsg+0x21f/0x2a0 [ 82.011240][ T6090] ? __pfx____sys_sendmsg+0x10/0x10 [ 82.011293][ T6090] ? __fget_files+0x2a/0x420 [ 82.011315][ T6090] ? __fget_files+0x3a0/0x420 [ 82.011351][ T6090] __x64_sys_sendmsg+0x19b/0x260 [ 82.011374][ T6090] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 82.011406][ T6090] ? rcu_is_watching+0x15/0xb0 [ 82.011431][ T6090] ? do_syscall_64+0xbe/0x3b0 [ 82.011452][ T6090] do_syscall_64+0xfa/0x3b0 [ 82.011467][ T6090] ? lockdep_hardirqs_on+0x9c/0x150 [ 82.011486][ T6090] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.011504][ T6090] ? clear_bhb_loop+0x60/0xb0 [ 82.011524][ T6090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.011539][ T6090] RIP: 0033:0x7fc82ab8ebe9 [ 82.011563][ T6090] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.011578][ T6090] RSP: 002b:00007fc828df6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 82.011601][ T6090] RAX: ffffffffffffffda RBX: 00007fc82adc5fa0 RCX: 00007fc82ab8ebe9 [ 82.011615][ T6090] RDX: 4000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 82.011627][ T6090] RBP: 00007fc82ac11e19 R08: 0000000000000000 R09: 0000000000000000 [ 82.011638][ T6090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 82.011649][ T6090] R13: 00007fc82adc6038 R14: 00007fc82adc5fa0 R15: 00007fffa143ecd8 [ 82.011677][ T6090] [ 82.907332][ T5979] IPVS: starting estimator thread 0... [ 82.923272][ T6097] netlink: 12 bytes leftover after parsing attributes in process `syz.3.31'. [ 83.077489][ T6112] IPVS: using max 30 ests per chain, 72000 per kthread [ 83.262978][ T6123] netlink: 16 bytes leftover after parsing attributes in process `syz.2.39'. [ 83.280159][ T6118] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 83.336427][ T6126] ipvlan2: entered promiscuous mode [ 83.346506][ T6118] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 83.395236][ T6125] ipvlan3: entered promiscuous mode [ 83.785240][ T6146] netlink: 'syz.0.44': attribute type 10 has an invalid length. [ 83.795881][ T6143] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 83.868529][ T6143] CPU: 1 UID: 0 PID: 6143 Comm: syz.3.45 Not tainted syzkaller #0 PREEMPT(full) [ 83.868554][ T6143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 83.868565][ T6143] Call Trace: [ 83.868572][ T6143] [ 83.868580][ T6143] dump_stack_lvl+0x189/0x250 [ 83.868610][ T6143] ? __pfx_dump_stack_lvl+0x10/0x10 [ 83.868631][ T6143] ? __pfx__printk+0x10/0x10 [ 83.868661][ T6143] ? kernfs_path_from_node+0x2f/0x290 [ 83.868680][ T6143] ? kernfs_path_from_node+0x250/0x290 [ 83.868697][ T6143] ? kernfs_path_from_node+0x2f/0x290 [ 83.868721][ T6143] sysfs_warn_dup+0x8e/0xa0 [ 83.868738][ T6143] sysfs_do_create_link_sd+0xc0/0x110 [ 83.868760][ T6143] device_add_class_symlinks+0x1cf/0x240 [ 83.868783][ T6143] device_add+0x475/0xb50 [ 83.868806][ T6143] wiphy_register+0x1ba6/0x28d0 [ 83.868845][ T6143] ? __pfx_wiphy_register+0x10/0x10 [ 83.868866][ T6143] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 83.868890][ T6143] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 83.868913][ T6143] ieee80211_register_hw+0x3484/0x4100 [ 83.868951][ T6143] ? ieee80211_register_hw+0x14d1/0x4100 [ 83.868978][ T6143] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 83.869001][ T6143] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 83.869032][ T6143] ? __hrtimer_setup+0x187/0x210 [ 83.869057][ T6143] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 83.869085][ T6143] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 83.869142][ T6143] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 83.869163][ T6143] ? trace_kmalloc+0x1f/0xd0 [ 83.869182][ T6143] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 83.869204][ T6143] ? kstrndup+0xbf/0x160 [ 83.869234][ T6143] hwsim_new_radio_nl+0xea4/0x1b10 [ 83.869258][ T6143] ? __pfx___nla_validate_parse+0x10/0x10 [ 83.869298][ T6143] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 83.869335][ T6143] ? __nla_parse+0x40/0x60 [ 83.869364][ T6143] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 83.869395][ T6143] genl_family_rcv_msg_doit+0x212/0x300 [ 83.869425][ T6143] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 83.869460][ T6143] ? bpf_lsm_capable+0x9/0x20 [ 83.869481][ T6143] ? security_capable+0x7e/0x2e0 [ 83.869513][ T6143] genl_rcv_msg+0x60e/0x790 [ 83.869540][ T6143] ? __pfx_genl_rcv_msg+0x10/0x10 [ 83.869558][ T6143] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 83.869596][ T6143] netlink_rcv_skb+0x208/0x470 [ 83.869617][ T6143] ? __lock_acquire+0xab9/0xd20 [ 83.869641][ T6143] ? __pfx_genl_rcv_msg+0x10/0x10 [ 83.869662][ T6143] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 83.869706][ T6143] ? down_read+0x1ad/0x2e0 [ 83.869724][ T6143] genl_rcv+0x28/0x40 [ 83.869740][ T6143] netlink_unicast+0x82f/0x9e0 [ 83.869771][ T6143] ? __pfx_netlink_unicast+0x10/0x10 [ 83.869795][ T6143] ? netlink_sendmsg+0x642/0xb30 [ 83.869808][ T6143] ? skb_put+0x11b/0x210 [ 83.869829][ T6143] netlink_sendmsg+0x805/0xb30 [ 83.869855][ T6143] ? __pfx_netlink_sendmsg+0x10/0x10 [ 83.869875][ T6143] ? aa_sock_msg_perm+0xf1/0x1d0 [ 83.869892][ T6143] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 83.869909][ T6143] ? __pfx_netlink_sendmsg+0x10/0x10 [ 83.869926][ T6143] __sock_sendmsg+0x219/0x270 [ 83.869951][ T6143] ____sys_sendmsg+0x505/0x830 [ 83.869974][ T6143] ? __pfx_____sys_sendmsg+0x10/0x10 [ 83.870002][ T6143] ? import_iovec+0x74/0xa0 [ 83.870026][ T6143] ___sys_sendmsg+0x21f/0x2a0 [ 83.870057][ T6143] ? __pfx____sys_sendmsg+0x10/0x10 [ 83.870116][ T6143] ? __fget_files+0x2a/0x420 [ 83.870138][ T6143] ? __fget_files+0x3a0/0x420 [ 83.870172][ T6143] __x64_sys_sendmsg+0x19b/0x260 [ 83.870194][ T6143] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 83.870224][ T6143] ? rcu_is_watching+0x15/0xb0 [ 83.870245][ T6143] ? do_syscall_64+0xbe/0x3b0 [ 83.870265][ T6143] do_syscall_64+0xfa/0x3b0 [ 83.870279][ T6143] ? lockdep_hardirqs_on+0x9c/0x150 [ 83.870301][ T6143] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.870315][ T6143] ? clear_bhb_loop+0x60/0xb0 [ 83.870336][ T6143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.870352][ T6143] RIP: 0033:0x7fed7138ebe9 [ 83.870369][ T6143] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.870382][ T6143] RSP: 002b:00007fed721bb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 83.870402][ T6143] RAX: ffffffffffffffda RBX: 00007fed715c5fa0 RCX: 00007fed7138ebe9 [ 83.870414][ T6143] RDX: 4100000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 83.870423][ T6143] RBP: 00007fed71411e19 R08: 0000000000000000 R09: 0000000000000000 [ 83.870433][ T6143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 83.870443][ T6143] R13: 00007fed715c6038 R14: 00007fed715c5fa0 R15: 00007fff750ca408 [ 83.870471][ T6143] [ 83.875596][ T6146] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.397863][ T6146] bridge_slave_1: left allmulticast mode [ 84.403613][ T6146] bridge_slave_1: left promiscuous mode [ 84.508406][ T6146] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.645803][ T6146] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 84.716182][ T6171] wg1 speed is unknown, defaulting to 1000 [ 84.724429][ T6171] wg1 speed is unknown, defaulting to 1000 [ 84.845528][ T6171] wg1 speed is unknown, defaulting to 1000 [ 84.862863][ T6171] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 84.927611][ T6171] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 84.971568][ T6171] wg1 speed is unknown, defaulting to 1000 [ 84.981011][ T6171] wg1 speed is unknown, defaulting to 1000 [ 84.990396][ T6171] wg1 speed is unknown, defaulting to 1000 [ 84.998447][ T6171] wg1 speed is unknown, defaulting to 1000 [ 85.006179][ T6171] wg1 speed is unknown, defaulting to 1000 [ 85.296789][ T6206] netlink: 'syz.2.58': attribute type 32 has an invalid length. [ 85.306113][ T6208] netlink: 'syz.4.57': attribute type 21 has an invalid length. [ 85.322769][ T6206] netlink: 8 bytes leftover after parsing attributes in process `syz.2.58'. [ 85.367340][ T6208] netlink: 156 bytes leftover after parsing attributes in process `syz.4.57'. [ 85.376860][ T6206] (unnamed net_device) (uninitialized): option coupled_control: invalid value (56) [ 85.841261][ T6232] tipc: Started in network mode [ 85.846300][ T6232] tipc: Node identity e6a9846f111c, cluster identity 4711 [ 85.904450][ T6232] tipc: Enabled bearer , priority 0 [ 85.930915][ T6238] syzkaller0: entered promiscuous mode [ 85.947363][ T6238] syzkaller0: entered allmulticast mode [ 85.962613][ T6236] netlink: 8 bytes leftover after parsing attributes in process `syz.0.68'. [ 85.975540][ T6232] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 85.997068][ T6232] tipc: Resetting bearer [ 86.115508][ T6230] tipc: Resetting bearer [ 86.134983][ T6230] tipc: Disabling bearer [ 86.162381][ T6243] netlink: 'syz.1.70': attribute type 1 has an invalid length. [ 86.763939][ T6287] netlink: 52 bytes leftover after parsing attributes in process `syz.1.85'. [ 86.766066][ T6282] netlink: 'syz.3.84': attribute type 1 has an invalid length. [ 86.777559][ T6287] netlink: 12 bytes leftover after parsing attributes in process `syz.1.85'. [ 86.808529][ T10] cfg80211: failed to load regulatory.db [ 86.838460][ T6287] netlink: 20 bytes leftover after parsing attributes in process `syz.1.85'. [ 86.860340][ T6290] syz.0.86 uses obsolete (PF_INET,SOCK_PACKET) [ 87.349309][ T6317] tipc: Started in network mode [ 87.370433][ T6317] tipc: Node identity , cluster identity 4711 [ 87.389412][ T6317] tipc: Failed to obtain node identity [ 87.429301][ T6317] tipc: Enabling of bearer rejected, failed to enable media [ 87.833700][ T6331] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 88.213699][ T6345] wg1: entered promiscuous mode [ 88.281172][ T6349] netlink: 20 bytes leftover after parsing attributes in process `syz.3.98'. [ 88.307647][ T6349] netlink: 8 bytes leftover after parsing attributes in process `syz.3.98'. [ 88.870417][ T6367] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 88.986465][ T6372] netlink: 788 bytes leftover after parsing attributes in process `syz.1.107'. [ 89.240390][ T6382] netlink: 56 bytes leftover after parsing attributes in process `syz.1.110'. [ 89.573647][ T6398] netlink: 'syz.2.115': attribute type 1 has an invalid length. [ 89.593667][ T6398] netlink: 'syz.2.115': attribute type 2 has an invalid length. [ 89.958591][ T6415] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 89.992343][ T6415] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 90.032500][ T6415] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 90.150104][ T6421] netlink: 'syz.2.123': attribute type 3 has an invalid length. [ 90.179366][ T6421] netlink: 'syz.2.123': attribute type 3 has an invalid length. [ 90.205742][ T6421] netlink: 'syz.2.123': attribute type 3 has an invalid length. [ 90.220432][ T6421] netlink: 'syz.2.123': attribute type 3 has an invalid length. [ 90.387937][ T6433] __nla_validate_parse: 5 callbacks suppressed [ 90.387953][ T6433] netlink: 12 bytes leftover after parsing attributes in process `syz.2.126'. [ 90.583591][ T6448] tap0: tun_chr_ioctl cmd 1074025676 [ 90.612415][ T6448] tap0: owner set to 0 [ 90.839974][ T6457] validate_nla: 100 callbacks suppressed [ 90.839992][ T6457] netlink: 'syz.1.131': attribute type 1 has an invalid length. [ 90.974356][ T6461] Bluetooth: MGMT ver 1.23 [ 90.978492][ T6459] netlink: 8 bytes leftover after parsing attributes in process `syz.4.132'. [ 91.023403][ T6461] netlink: 'syz.0.134': attribute type 1 has an invalid length. [ 91.024324][ T6459] netlink: 4 bytes leftover after parsing attributes in process `syz.4.132'. [ 91.047357][ T6461] netlink: 224 bytes leftover after parsing attributes in process `syz.0.134'. [ 91.058650][ T6462] netlink: 'syz.0.134': attribute type 11 has an invalid length. [ 91.066951][ T6464] netlink: 4 bytes leftover after parsing attributes in process `syz.3.133'. [ 91.085229][ T6468] netlink: 'syz.0.134': attribute type 11 has an invalid length. [ 91.086103][ T6459] netlink: 'syz.4.132': attribute type 15 has an invalid length. [ 91.418128][ T6479] netlink: 'syz.4.138': attribute type 2 has an invalid length. [ 91.439885][ T6479] netlink: 'syz.4.138': attribute type 8 has an invalid length. [ 91.472239][ T6477] wg2: entered promiscuous mode [ 91.477141][ T6477] wg2: entered allmulticast mode [ 91.517494][ T6479] netlink: 132 bytes leftover after parsing attributes in process `syz.4.138'. [ 91.530160][ T6485] netlink: 20 bytes leftover after parsing attributes in process `syz.3.136'. [ 91.780972][ T6495] netlink: 'syz.4.145': attribute type 1 has an invalid length. [ 91.802703][ T6495] netlink: 'syz.4.145': attribute type 10 has an invalid length. [ 91.816427][ T6495] netlink: 'syz.4.145': attribute type 4 has an invalid length. [ 91.871737][ T6495] netlink: 136 bytes leftover after parsing attributes in process `syz.4.145'. [ 92.398756][ T6535] netlink: 8 bytes leftover after parsing attributes in process `syz.4.155'. [ 92.583729][ T6540] netlink: 'syz.0.158': attribute type 1 has an invalid length. [ 92.801631][ T6556] netlink: 52 bytes leftover after parsing attributes in process `syz.0.163'. [ 93.108923][ T6571] netlink: 'syz.3.167': attribute type 1 has an invalid length. [ 93.962430][ T6610] Driver unsupported XDP return value 0 on prog (id 29) dev N/A, expect packet loss! [ 94.259233][ T6627] sctp: [Deprecated]: syz.4.185 (pid 6627) Use of int in maxseg socket option. [ 94.259233][ T6627] Use struct sctp_assoc_value instead [ 94.280753][ T66] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x7d [ 94.749216][ T6658] warning: `syz.2.192' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 95.230350][ T6675] trusted_key: syz.4.198 sent an empty control message without MSG_MORE. [ 95.389797][ T6673] veth0: entered promiscuous mode [ 95.481719][ T6673] veth0: left promiscuous mode [ 95.799003][ T6700] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 95.806471][ T6700] IPv6: NLM_F_CREATE should be set when creating new route [ 96.066144][ T5951] IPVS: starting estimator thread 0... [ 96.177925][ T6719] IPVS: using max 37 ests per chain, 88800 per kthread [ 96.285093][ T6725] __nla_validate_parse: 39 callbacks suppressed [ 96.285108][ T6725] netlink: 60 bytes leftover after parsing attributes in process `syz.3.212'. [ 96.688089][ T6755] validate_nla: 3 callbacks suppressed [ 96.688106][ T6755] netlink: 'syz.4.217': attribute type 1 has an invalid length. [ 96.865219][ T6763] netlink: 'syz.2.221': attribute type 11 has an invalid length. [ 96.872021][ T6762] sctp: [Deprecated]: syz.0.220 (pid 6762) Use of int in maxseg socket option. [ 96.872021][ T6762] Use struct sctp_assoc_value instead [ 96.909494][ T6763] netlink: 64 bytes leftover after parsing attributes in process `syz.2.221'. [ 96.953536][ T6767] netlink: 8 bytes leftover after parsing attributes in process `syz.0.220'. [ 96.992940][ T6769] netlink: 'syz.3.224': attribute type 12 has an invalid length. [ 97.204718][ T6784] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 97.496099][ T6797] netlink: 24 bytes leftover after parsing attributes in process `syz.1.231'. [ 97.579656][ T6803] netlink: 'syz.3.233': attribute type 1 has an invalid length. [ 97.779493][ T6818] netlink: 12 bytes leftover after parsing attributes in process `syz.1.237'. [ 97.886811][ T6820] netlink: 'syz.3.238': attribute type 2 has an invalid length. [ 98.020074][ T6831] netlink: 4 bytes leftover after parsing attributes in process `syz.3.242'. [ 98.066929][ T6833] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 98.328274][ T6836] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 98.624027][ T6858] netlink: 12 bytes leftover after parsing attributes in process `syz.3.252'. [ 98.731096][ T6863] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 98.738866][ T6863] IPv6: NLM_F_CREATE should be set when creating new route [ 98.809444][ T6867] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.254'. [ 98.911589][ T6873] netlink: 44 bytes leftover after parsing attributes in process `syz.1.256'. [ 98.923698][ T6870] netlink: 44 bytes leftover after parsing attributes in process `syz.1.256'. [ 99.799527][ T6917] netlink: 'syz.2.272': attribute type 3 has an invalid length. [ 99.992806][ T6923] team0: Device ip6gre1 is of different type [ 100.078783][ T6928] netlink: 'syz.2.276': attribute type 1 has an invalid length. [ 101.334821][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.339863][ T6962] __nla_validate_parse: 6 callbacks suppressed [ 101.339879][ T6962] netlink: 28 bytes leftover after parsing attributes in process `syz.3.288'. [ 101.377412][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.394926][ T6962] netlink: 28 bytes leftover after parsing attributes in process `syz.3.288'. [ 101.428496][ T6963] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.664955][ T6978] netlink: 'syz.1.294': attribute type 1 has an invalid length. [ 101.770979][ T6984] netlink: 48 bytes leftover after parsing attributes in process `syz.3.296'. [ 101.804008][ T6987] netlink: 256 bytes leftover after parsing attributes in process `syz.1.298'. [ 101.815741][ T6982] tipc: Started in network mode [ 101.843186][ T6982] tipc: Node identity be178cb4757f, cluster identity 4711 [ 101.872402][ T6982] tipc: Enabled bearer , priority 0 [ 101.872589][ T6989] netlink: 16 bytes leftover after parsing attributes in process `syz.4.299'. [ 101.896087][ T6985] netlink: 48 bytes leftover after parsing attributes in process `syz.3.296'. [ 101.903989][ T6989] netlink: 92 bytes leftover after parsing attributes in process `syz.4.299'. [ 101.908893][ T6991] syzkaller0: entered promiscuous mode [ 101.924499][ T6991] syzkaller0: entered allmulticast mode [ 102.331860][ T7015] netlink: 4 bytes leftover after parsing attributes in process `syz.1.304'. [ 102.362696][ T7015] netlink: 4 bytes leftover after parsing attributes in process `syz.1.304'. [ 102.389559][ T6981] tipc: Resetting bearer [ 102.441858][ T6981] tipc: Disabling bearer [ 102.722663][ T7034] netlink: 40 bytes leftover after parsing attributes in process `syz.4.311'. [ 102.734403][ T7035] netlink: 'syz.0.310': attribute type 1 has an invalid length. [ 102.745447][ T7037] IPVS: set_ctl: invalid protocol: 43 172.30.0.4:20000 [ 102.842957][ T7031] wg1 speed is unknown, defaulting to 1000 [ 102.884394][ T7037] sit0: entered promiscuous mode [ 102.897407][ T7037] sit0: entered allmulticast mode [ 103.690019][ T7088] netlink: 'syz.0.323': attribute type 1 has an invalid length. [ 103.868995][ T7099] tipc: Started in network mode [ 103.874337][ T7099] tipc: Node identity ac14142f, cluster identity 4711 [ 103.946468][ T7099] tipc: New replicast peer: 0.0.0.0 [ 103.958268][ T7099] tipc: Enabled bearer , priority 10 [ 104.245607][ T7114] veth3: entered allmulticast mode [ 104.265430][ T7120] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 104.284646][ T7120] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.293414][ T7120] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.479749][ T7127] tipc: Enabled bearer , priority 0 [ 104.510281][ T7127] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 104.551032][ T7127] tipc: Resetting bearer [ 104.603966][ T7134] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.632776][ T7134] bond0: (slave rose0): Enslaving as an active interface with an up link [ 104.657645][ T7127] ip6gre0: Master is either lo or non-ether device [ 104.670354][ T7128] ip6gre0: Master is either lo or non-ether device [ 104.722166][ T7129] macvtap1: entered promiscuous mode [ 104.736856][ T7129] vlan0: entered promiscuous mode [ 104.750971][ T7129] macvtap1: entered allmulticast mode [ 104.757016][ T7129] vlan0: entered allmulticast mode [ 104.763721][ T7129] veth0_vlan: entered allmulticast mode [ 104.773498][ T7135] netlink: 'syz.4.339': attribute type 10 has an invalid length. [ 104.819718][ T7126] tipc: Disabling bearer [ 105.088423][ T5951] tipc: Node number set to 2886997039 [ 105.230781][ T980] IPVS: starting estimator thread 0... [ 105.347804][ T7169] IPVS: using max 26 ests per chain, 62400 per kthread [ 105.795239][ T7195] openvswitch: netlink: Message has 4 unknown bytes. [ 105.856353][ T7195] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 106.502895][ T7230] veth3: entered allmulticast mode [ 106.606628][ T7240] __nla_validate_parse: 13 callbacks suppressed [ 106.606645][ T7240] netlink: 16 bytes leftover after parsing attributes in process `syz.4.369'. [ 106.994269][ T7260] netlink: 12 bytes leftover after parsing attributes in process `syz.4.375'. [ 107.053461][ T7260] netlink: 8 bytes leftover after parsing attributes in process `syz.4.375'. [ 107.156151][ T7267] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 107.171303][ T7269] netlink: 'syz.4.378': attribute type 1 has an invalid length. [ 107.250353][ T7272] netlink: 28 bytes leftover after parsing attributes in process `syz.4.378'. [ 107.284670][ T7269] bond2: (slave gretap1): making interface the new active one [ 107.294550][ T7269] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 107.305531][ T7269] netlink: 28 bytes leftover after parsing attributes in process `syz.4.378'. [ 107.317695][ T7269] 8021q: adding VLAN 0 to HW filter on device bond2 [ 107.653239][ T7283] xt_limit: Overflow, try lower: 271964/0 [ 107.706653][ T7293] netlink: 16 bytes leftover after parsing attributes in process `syz.1.384'. [ 107.741290][ T7293] netlink: 16 bytes leftover after parsing attributes in process `syz.1.384'. [ 107.940923][ T7306] netlink: 'syz.3.389': attribute type 12 has an invalid length. [ 108.373065][ T7326] netlink: 'syz.0.396': attribute type 10 has an invalid length. [ 108.456762][ T7326] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.527316][ T7326] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.534585][ T7326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.606089][ T7326] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 108.968427][ T7346] netlink: 'syz.2.404': attribute type 25 has an invalid length. [ 109.191319][ T7357] netlink: 36 bytes leftover after parsing attributes in process `syz.4.407'. [ 109.244612][ T7357] netlink: 'syz.4.407': attribute type 1 has an invalid length. [ 109.285558][ T7364] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 109.359884][ T30] audit: type=1107 audit(1756567166.874:2): pid=7366 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊÃËÙ ë0ä™l…t¿Ý•/Öÿ Ž6òŠÄŠç›' [ 109.579983][ T7377] netlink: 8 bytes leftover after parsing attributes in process `syz.3.415'. [ 109.701288][ T7387] netlink: 'syz.4.418': attribute type 2 has an invalid length. [ 109.722415][ T7387] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.418'. [ 109.727011][ T30] audit: type=1800 audit(1756567167.234:3): pid=7385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.417" name="memory.events" dev="tmpfs" ino=479 res=0 errno=0 [ 109.742811][ T7387] nbd: must specify at least one socket [ 109.843534][ T30] audit: type=1804 audit(1756567167.234:4): pid=7385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.417" name="/newroot/90/memory.events" dev="tmpfs" ino=479 res=1 errno=0 [ 110.035504][ T7396] netlink: 'syz.1.421': attribute type 18 has an invalid length. [ 110.087552][ T66] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.111706][ T7396] netlink: 'syz.1.421': attribute type 18 has an invalid length. [ 110.127991][ T66] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.145737][ T66] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.193761][ T66] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.417581][ T7416] netlink: 'syz.0.431': attribute type 1 has an invalid length. [ 110.750466][ T7431] IPVS: set_ctl: invalid protocol: 136 127.0.0.1:20004 [ 110.916693][ T7440] netlink: 'syz.1.438': attribute type 10 has an invalid length. [ 110.970898][ T7442] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 110.984351][ T7440] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.004738][ T7440] bond0: (slave team0): Enslaving as an active interface with an up link [ 111.007812][ T7447] netlink: 'syz.1.438': attribute type 10 has an invalid length. [ 111.041656][ T7447] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 111.219728][ T7440] 8021q: adding VLAN 0 to HW filter on device bond1 [ 111.240495][ T7447] bond_slave_0: entered promiscuous mode [ 111.246320][ T7447] bond_slave_1: entered promiscuous mode [ 111.252118][ T7447] team_slave_0: entered promiscuous mode [ 111.257982][ T7447] team_slave_1: entered promiscuous mode [ 111.263699][ T7447] syz_tun: entered promiscuous mode [ 111.273359][ T7447] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 111.285664][ T7447] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 111.306858][ T7454] tipc: Enabled bearer , priority 0 [ 111.323948][ T7454] syzkaller0: entered promiscuous mode [ 111.331389][ T7454] syzkaller0: entered allmulticast mode [ 111.360736][ T7454] tipc: Resetting bearer [ 111.377683][ T7453] tipc: Resetting bearer [ 111.423090][ T7453] tipc: Disabling bearer [ 111.613267][ T7464] pim6reg1: entered promiscuous mode [ 111.624338][ T7464] pim6reg1: entered allmulticast mode [ 112.119458][ T7485] __nla_validate_parse: 12 callbacks suppressed [ 112.119475][ T7485] netlink: 24 bytes leftover after parsing attributes in process `syz.3.455'. [ 112.184412][ T7495] netlink: 4 bytes leftover after parsing attributes in process `syz.4.459'. [ 112.228681][ T7485] netlink: 20 bytes leftover after parsing attributes in process `syz.3.455'. [ 112.240082][ T7485] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 112.287114][ T7495] netlink: 8 bytes leftover after parsing attributes in process `syz.4.459'. [ 112.537176][ T7513] netlink: 132 bytes leftover after parsing attributes in process `syz.4.462'. [ 112.695041][ T7515] netlink: 8 bytes leftover after parsing attributes in process `syz.1.464'. [ 112.711039][ T7515] netlink: 8 bytes leftover after parsing attributes in process `syz.1.464'. [ 112.771426][ T7520] netlink: 128 bytes leftover after parsing attributes in process `syz.4.467'. [ 112.805587][ T7520] netlink: 3 bytes leftover after parsing attributes in process `syz.4.467'. [ 112.833787][ T7523] netlink: 128 bytes leftover after parsing attributes in process `syz.4.467'. [ 113.312486][ T7548] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 113.487844][ T7545] wg1 speed is unknown, defaulting to 1000 [ 113.634332][ T7560] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 113.934407][ T7571] validate_nla: 6 callbacks suppressed [ 113.934424][ T7571] netlink: 'syz.3.482': attribute type 10 has an invalid length. [ 113.994222][ T7575] netlink: 'syz.3.482': attribute type 10 has an invalid length. [ 114.043921][ T7571] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.083392][ T7571] bond0: (slave team0): Enslaving as an active interface with an up link [ 114.123321][ T7575] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 114.174737][ T7576] netlink: 'syz.0.483': attribute type 1 has an invalid length. [ 114.183406][ T7576] netlink: 'syz.0.483': attribute type 2 has an invalid length. [ 114.361545][ T7571] 8021q: adding VLAN 0 to HW filter on device bond1 [ 114.487194][ T7575] bond_slave_0: entered promiscuous mode [ 114.493000][ T7575] bond_slave_1: entered promiscuous mode [ 114.499539][ T7575] team_slave_0: entered promiscuous mode [ 114.505425][ T7575] team_slave_1: entered promiscuous mode [ 114.511635][ T7575] syz_tun: entered promiscuous mode [ 114.521247][ T7575] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 114.532314][ T7575] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 115.091898][ T7614] wg1 speed is unknown, defaulting to 1000 [ 115.134635][ T7630] netlink: 'syz.4.497': attribute type 15 has an invalid length. [ 115.987995][ T7669] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 116.249556][ T7679] veth1_macvtap: mtu less than device minimum [ 116.591682][ T7705] bridge_slave_0: left allmulticast mode [ 116.627409][ T7705] bridge_slave_0: left promiscuous mode [ 116.636526][ T7705] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.714060][ T7705] bond0: (slave bridge0): Releasing backup interface [ 117.171608][ T7735] __nla_validate_parse: 14 callbacks suppressed [ 117.171625][ T7735] netlink: 8 bytes leftover after parsing attributes in process `syz.1.532'. [ 117.513876][ T7760] netlink: 'syz.0.540': attribute type 10 has an invalid length. [ 117.579734][ T7760] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.645577][ T7760] bond0: (slave team0): Enslaving as an active interface with an up link [ 117.671065][ T7767] netlink: 'syz.0.540': attribute type 10 has an invalid length. [ 117.725598][ T7772] veth1_to_bond: entered allmulticast mode [ 117.792381][ T7767] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 117.798403][ T7772] netlink: 4 bytes leftover after parsing attributes in process `syz.4.545'. [ 117.982265][ T7790] netlink: 'syz.2.549': attribute type 10 has an invalid length. [ 117.999054][ T7760] 8021q: adding VLAN 0 to HW filter on device bond1 [ 118.044168][ T7791] netlink: 'syz.2.549': attribute type 10 has an invalid length. [ 118.088230][ T7792] Bluetooth: MGMT ver 1.23 [ 118.129633][ T7772] bond0: (slave bond_slave_1): Releasing backup interface [ 118.201365][ T7772] veth1_to_bond (unregistering): left allmulticast mode [ 118.259627][ T7790] team0: Port device dummy0 added [ 118.284921][ T7791] team0: Port device dummy0 removed [ 118.322011][ T7791] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 118.359511][ T7802] netlink: 8 bytes leftover after parsing attributes in process `syz.1.552'. [ 118.407479][ T7802] netlink: 8 bytes leftover after parsing attributes in process `syz.1.552'. [ 118.536992][ T7812] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 118.548595][ T7808] IPVS: stopping master sync thread 7812 ... [ 118.634666][ T7814] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 118.959515][ T7830] netlink: 'syz.2.562': attribute type 1 has an invalid length. [ 119.281529][ T7850] Bluetooth: MGMT ver 1.23 [ 119.306225][ T7850] netlink: 'syz.2.566': attribute type 1 has an invalid length. [ 119.317601][ T7852] netlink: 'syz.0.568': attribute type 10 has an invalid length. [ 119.337403][ T7850] netlink: 17 bytes leftover after parsing attributes in process `syz.2.566'. [ 119.341425][ T7852] netlink: 'syz.0.568': attribute type 10 has an invalid length. [ 119.427045][ T7852] bond1: option mode: unable to set because the bond device is up [ 119.473976][ T7857] netlink: 4 bytes leftover after parsing attributes in process `syz.1.570'. [ 119.593635][ T7857] bridge_slave_1 (unregistering): left allmulticast mode [ 119.615824][ T7857] bridge_slave_1 (unregistering): left promiscuous mode [ 119.635326][ T7857] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.851052][ T7869] sctp: [Deprecated]: syz.0.573 (pid 7869) Use of struct sctp_assoc_value in delayed_ack socket option. [ 119.851052][ T7869] Use struct sctp_sack_info instead [ 119.889285][ T7869] netlink: 76 bytes leftover after parsing attributes in process `syz.0.573'. [ 119.892625][ T7873] netlink: 4 bytes leftover after parsing attributes in process `syz.2.574'. [ 120.527614][ T7900] nbd1: detected capacity change from 0 to 127 [ 120.545435][ T5863] block nbd1: Receive control failed (result -32) [ 120.558064][ T7356] block nbd1: Send control failed (result -32) [ 120.580470][ T7356] block nbd1: Request send failed, requeueing [ 120.614923][ T55] block nbd1: Dead connection, failed to find a fallback [ 120.623267][ T55] block nbd1: shutting down sockets [ 120.629129][ T55] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 120.639454][ T55] Buffer I/O error on dev nbd1, logical block 0, async page read [ 120.647837][ T7356] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 120.657416][ T7356] Buffer I/O error on dev nbd1, logical block 1, async page read [ 120.666412][ T7356] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 120.678216][ T7356] Buffer I/O error on dev nbd1, logical block 2, async page read [ 120.686219][ T7356] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 120.695522][ T7356] Buffer I/O error on dev nbd1, logical block 3, async page read [ 120.704441][ T7356] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 120.719310][ T7356] Buffer I/O error on dev nbd1, logical block 0, async page read [ 120.728215][ T7356] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 120.738422][ T7356] Buffer I/O error on dev nbd1, logical block 1, async page read [ 120.747088][ T7356] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 120.754880][ T7915] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 120.756459][ T7356] Buffer I/O error on dev nbd1, logical block 2, async page read [ 120.790961][ T7356] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 120.818970][ T7356] Buffer I/O error on dev nbd1, logical block 3, async page read [ 120.827125][ T7356] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 120.835396][ T7919] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 120.852818][ T7356] Buffer I/O error on dev nbd1, logical block 0, async page read [ 120.861372][ T7356] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 120.871742][ T7356] Buffer I/O error on dev nbd1, logical block 1, async page read [ 120.890745][ T7356] ldm_validate_partition_table(): Disk read failed. [ 120.920807][ T7356] Dev nbd1: unable to read RDB block 0 [ 120.943099][ T7356] nbd1: unable to read partition table [ 120.985872][ T7356] ldm_validate_partition_table(): Disk read failed. [ 121.016442][ T7356] Dev nbd1: unable to read RDB block 0 [ 121.036683][ T7926] netlink: 4 bytes leftover after parsing attributes in process `syz.4.592'. [ 121.051951][ T7356] nbd1: unable to read partition table [ 121.095134][ T7926] netlink: 12 bytes leftover after parsing attributes in process `syz.4.592'. [ 121.339676][ T7937] openvswitch: netlink: Missing valid actions attribute. [ 121.366641][ T7937] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 121.402529][ T7935] netlink: 'syz.1.596': attribute type 12 has an invalid length. [ 121.751096][ T7950] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 122.204124][ T7977] __nla_validate_parse: 4 callbacks suppressed [ 122.204141][ T7977] netlink: 4 bytes leftover after parsing attributes in process `syz.0.605'. [ 122.258833][ T6074] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 122.274112][ T7992] netlink: 8 bytes leftover after parsing attributes in process `syz.2.609'. [ 122.505668][ T8005] netlink: 'syz.1.615': attribute type 1 has an invalid length. [ 122.555164][ T8005] netlink: 208 bytes leftover after parsing attributes in process `syz.1.615'. [ 122.597444][ T8005] netlink: 'syz.1.615': attribute type 1 has an invalid length. [ 122.613401][ T8005] netlink: 'syz.1.615': attribute type 2 has an invalid length. [ 122.621542][ T8007] netlink: 4 bytes leftover after parsing attributes in process `syz.4.616'. [ 123.063046][ T8018] netlink: 108 bytes leftover after parsing attributes in process `syz.2.619'. [ 123.316183][ T8045] tipc: Enabling of bearer rejected, failed to enable media [ 123.389482][ T8046] tipc: Enabling of bearer rejected, failed to enable media [ 123.431584][ T8054] FAULT_INJECTION: forcing a failure. [ 123.431584][ T8054] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 123.500666][ T8054] CPU: 1 UID: 0 PID: 8054 Comm: syz.2.629 Not tainted syzkaller #0 PREEMPT(full) [ 123.500690][ T8054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 123.500700][ T8054] Call Trace: [ 123.500707][ T8054] [ 123.500714][ T8054] dump_stack_lvl+0x189/0x250 [ 123.500737][ T8054] ? __pfx____ratelimit+0x10/0x10 [ 123.500758][ T8054] ? __pfx_dump_stack_lvl+0x10/0x10 [ 123.500776][ T8054] ? __pfx__printk+0x10/0x10 [ 123.500797][ T8054] ? __might_fault+0xb0/0x130 [ 123.500830][ T8054] should_fail_ex+0x414/0x560 [ 123.500855][ T8054] _copy_from_user+0x2d/0xb0 [ 123.500875][ T8054] arp_ioctl+0x138/0x450 [ 123.500896][ T8054] ? __pfx_arp_ioctl+0x10/0x10 [ 123.500939][ T8054] inet_ioctl+0x36e/0x4c0 [ 123.500957][ T8054] ? kasan_quarantine_put+0xdd/0x220 [ 123.500975][ T8054] ? __pfx_inet_ioctl+0x10/0x10 [ 123.501013][ T8054] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 123.501039][ T8054] sock_do_ioctl+0xdc/0x300 [ 123.501063][ T8054] ? __pfx_sock_do_ioctl+0x10/0x10 [ 123.501080][ T8054] ? __lock_acquire+0xab9/0xd20 [ 123.501119][ T8054] sock_ioctl+0x576/0x790 [ 123.501140][ T8054] ? __pfx_sock_ioctl+0x10/0x10 [ 123.501158][ T8054] ? __fget_files+0x2a/0x420 [ 123.501180][ T8054] ? __fget_files+0x3a0/0x420 [ 123.501199][ T8054] ? __fget_files+0x2a/0x420 [ 123.501221][ T8054] ? bpf_lsm_file_ioctl+0x9/0x20 [ 123.501240][ T8054] ? __pfx_sock_ioctl+0x10/0x10 [ 123.501258][ T8054] __se_sys_ioctl+0xf9/0x170 [ 123.501279][ T8054] do_syscall_64+0xfa/0x3b0 [ 123.501293][ T8054] ? lockdep_hardirqs_on+0x9c/0x150 [ 123.501314][ T8054] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.501330][ T8054] ? clear_bhb_loop+0x60/0xb0 [ 123.501350][ T8054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.501374][ T8054] RIP: 0033:0x7f2dd678ebe9 [ 123.501390][ T8054] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.501404][ T8054] RSP: 002b:00007f2dd76e8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 123.501422][ T8054] RAX: ffffffffffffffda RBX: 00007f2dd69c5fa0 RCX: 00007f2dd678ebe9 [ 123.501431][ T8054] RDX: 0000200000000000 RSI: 0000000000008953 RDI: 0000000000000003 [ 123.501442][ T8054] RBP: 00007f2dd76e8090 R08: 0000000000000000 R09: 0000000000000000 [ 123.501451][ T8054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.501461][ T8054] R13: 00007f2dd69c6038 R14: 00007f2dd69c5fa0 R15: 00007ffd62a17a88 [ 123.501486][ T8054] [ 124.062124][ T8072] netlink: 'syz.3.636': attribute type 1 has an invalid length. [ 124.074855][ T8070] netlink: del zone limit has 4 unknown bytes [ 124.098732][ T8072] netlink: 'syz.3.636': attribute type 1 has an invalid length. [ 124.112653][ T8074] ieee802154 phy0 wpan0: encryption failed: -22 [ 124.178677][ T8069] netlink: 20 bytes leftover after parsing attributes in process `syz.4.635'. [ 124.454022][ T8092] FAULT_INJECTION: forcing a failure. [ 124.454022][ T8092] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 124.484274][ T8092] CPU: 0 UID: 0 PID: 8092 Comm: syz.2.644 Not tainted syzkaller #0 PREEMPT(full) [ 124.484298][ T8092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 124.484307][ T8092] Call Trace: [ 124.484314][ T8092] [ 124.484322][ T8092] dump_stack_lvl+0x189/0x250 [ 124.484347][ T8092] ? __pfx____ratelimit+0x10/0x10 [ 124.484370][ T8092] ? __pfx_dump_stack_lvl+0x10/0x10 [ 124.484389][ T8092] ? __pfx__printk+0x10/0x10 [ 124.484423][ T8092] should_fail_ex+0x414/0x560 [ 124.484450][ T8092] _copy_to_user+0x31/0xb0 [ 124.484472][ T8092] simple_read_from_buffer+0xe1/0x170 [ 124.484500][ T8092] proc_fail_nth_read+0x1b3/0x220 [ 124.484523][ T8092] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 124.484544][ T8092] ? rw_verify_area+0x2a6/0x4d0 [ 124.484570][ T8092] ? __lock_acquire+0xab9/0xd20 [ 124.484589][ T8092] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 124.484607][ T8092] vfs_read+0x1fd/0xa30 [ 124.484625][ T8092] ? fdget_pos+0x247/0x320 [ 124.484642][ T8092] ? __pfx___mutex_lock+0x10/0x10 [ 124.484664][ T8092] ? __pfx_vfs_read+0x10/0x10 [ 124.484686][ T8092] ? __fget_files+0x2a/0x420 [ 124.484712][ T8092] ? __fget_files+0x3a0/0x420 [ 124.484731][ T8092] ? __fget_files+0x2a/0x420 [ 124.484762][ T8092] ksys_read+0x145/0x250 [ 124.484785][ T8092] ? __pfx_ksys_read+0x10/0x10 [ 124.484801][ T8092] ? rcu_is_watching+0x15/0xb0 [ 124.484824][ T8092] ? do_syscall_64+0xbe/0x3b0 [ 124.484844][ T8092] do_syscall_64+0xfa/0x3b0 [ 124.484858][ T8092] ? lockdep_hardirqs_on+0x9c/0x150 [ 124.484879][ T8092] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.484895][ T8092] ? clear_bhb_loop+0x60/0xb0 [ 124.484915][ T8092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.484930][ T8092] RIP: 0033:0x7f2dd678d5fc [ 124.484946][ T8092] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 124.484959][ T8092] RSP: 002b:00007f2dd76e8030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 124.484977][ T8092] RAX: ffffffffffffffda RBX: 00007f2dd69c5fa0 RCX: 00007f2dd678d5fc [ 124.484990][ T8092] RDX: 000000000000000f RSI: 00007f2dd76e80a0 RDI: 0000000000000004 [ 124.485000][ T8092] RBP: 00007f2dd76e8090 R08: 0000000000000000 R09: 0000000000000000 [ 124.485010][ T8092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.485019][ T8092] R13: 00007f2dd69c6038 R14: 00007f2dd69c5fa0 R15: 00007ffd62a17a88 [ 124.485049][ T8092] [ 124.966335][ T8102] netlink: 80 bytes leftover after parsing attributes in process `syz.0.650'. [ 125.161752][ T8115] netlink: 64 bytes leftover after parsing attributes in process `syz.2.653'. [ 125.645401][ T8126] netlink: 16 bytes leftover after parsing attributes in process `syz.4.657'. [ 125.713842][ T5863] block nbd2: Receive control failed (result -32) [ 125.812410][ T8143] netlink: 120 bytes leftover after parsing attributes in process `syz.1.661'. [ 125.953041][ T8152] netlink: 'syz.1.665': attribute type 10 has an invalid length. [ 125.993018][ T8152] team_slave_0: left promiscuous mode [ 126.016438][ T8152] team_slave_1: left promiscuous mode [ 126.042956][ T8152] netlink: 'syz.1.665': attribute type 10 has an invalid length. [ 126.074728][ T8155] macvtap2: entered allmulticast mode [ 126.102310][ T8155] veth0_macvtap: entered allmulticast mode [ 126.170077][ T8152] bond1: option mode: unable to set because the bond device has slaves [ 126.249128][ T8157] tipc: Started in network mode [ 126.258589][ T8157] tipc: Node identity eaf0222735ab, cluster identity 4711 [ 126.278397][ T8157] tipc: Enabled bearer , priority 0 [ 126.302081][ T8160] syzkaller0: entered promiscuous mode [ 126.322951][ T8160] syzkaller0: entered allmulticast mode [ 126.345387][ T8169] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 126.397413][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 126.453253][ T8168] dummy0: entered promiscuous mode [ 126.465024][ T8168] batadv_slave_1: entered promiscuous mode [ 126.484908][ T8157] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 126.511227][ T8160] tipc: Resetting bearer [ 126.570709][ T8154] tipc: Resetting bearer [ 126.648367][ T8154] tipc: Disabling bearer [ 126.825948][ T8185] bond0: (slave syz_tun): Releasing backup interface [ 126.861839][ T8185] syz_tun: left promiscuous mode [ 126.914005][ T8185] bond0: (slave team0): Releasing backup interface [ 126.956688][ T8185] team_slave_0: left promiscuous mode [ 126.962509][ T8185] team_slave_1: left promiscuous mode [ 126.981248][ T8197] netlink: 'syz.2.679': attribute type 1 has an invalid length. [ 127.016641][ T8185] bridge_slave_0: left allmulticast mode [ 127.028988][ T8185] bridge_slave_0: left promiscuous mode [ 127.035011][ T8185] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.053473][ T8185] bridge_slave_1: left allmulticast mode [ 127.061675][ T8185] bridge_slave_1: left promiscuous mode [ 127.084590][ T8185] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.106197][ T8185] bond0: (slave bond_slave_0): Releasing backup interface [ 127.117743][ T5863] Bluetooth: hci4: command tx timeout [ 127.118397][ T8185] bond_slave_0: left promiscuous mode [ 127.194264][ T8185] bond0: (slave bond_slave_1): Releasing backup interface [ 127.205161][ T8185] bond_slave_1: left promiscuous mode [ 127.242242][ T8185] team0: Port device team_slave_0 removed [ 127.261714][ T8185] team0: Port device team_slave_1 removed [ 127.273820][ T8185] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.281526][ T8185] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.293564][ T8185] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.301236][ T8185] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.318437][ T8185] bond1: (slave macvlan2): Removing an active aggregator [ 127.326300][ T8185] bond1: (slave macvlan2): Releasing backup interface [ 127.488463][ T10] wg1 speed is unknown, defaulting to 1000 [ 127.842298][ T8230] netlink: 'syz.0.687': attribute type 10 has an invalid length. [ 127.875894][ T8230] __nla_validate_parse: 7 callbacks suppressed [ 127.875909][ T8230] netlink: 40 bytes leftover after parsing attributes in process `syz.0.687'. [ 127.905725][ T8229] netlink: 48 bytes leftover after parsing attributes in process `syz.4.688'. [ 127.913576][ T8230] batadv0: entered promiscuous mode [ 127.932423][ T8230] batadv0: entered allmulticast mode [ 127.948448][ T8236] netlink: 8 bytes leftover after parsing attributes in process `syz.1.689'. [ 127.960791][ T8230] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 128.061440][ T8236] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 128.091073][ T8236] syzkaller0: entered promiscuous mode [ 128.096840][ T8236] syzkaller0: entered allmulticast mode [ 128.209040][ T8246] netlink: 40 bytes leftover after parsing attributes in process `syz.2.694'. [ 128.696081][ T8269] netlink: 'syz.4.701': attribute type 4 has an invalid length. [ 128.760380][ T8273] netlink: 'syz.4.701': attribute type 4 has an invalid length. [ 128.802836][ T8269] netlink: 12 bytes leftover after parsing attributes in process `syz.4.701'. [ 128.820158][ T8277] netlink: 8 bytes leftover after parsing attributes in process `syz.1.703'. [ 128.926740][ T8269] netlink: 8 bytes leftover after parsing attributes in process `syz.4.701'. [ 128.937062][ T8269] netlink: 24 bytes leftover after parsing attributes in process `syz.4.701'. [ 128.976926][ T8284] netlink: 'syz.0.707': attribute type 10 has an invalid length. [ 128.988528][ T8269] netlink: 8 bytes leftover after parsing attributes in process `syz.4.701'. [ 129.028693][ T8284] netlink: 'syz.0.707': attribute type 10 has an invalid length. [ 129.067821][ T8269] netlink: 24 bytes leftover after parsing attributes in process `syz.4.701'. [ 129.104697][ T5979] IPVS: starting estimator thread 0... [ 129.120518][ T8284] bond_slave_0: entered promiscuous mode [ 129.126319][ T8284] bond_slave_1: entered promiscuous mode [ 129.132063][ T8284] bridge_slave_1: entered promiscuous mode [ 129.141172][ T8284] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 129.178294][ T8284] bond1: (slave macvlan4): unknown ethtool speed (30000) for port 1 (set it to 0) [ 129.207494][ T8292] IPVS: using max 30 ests per chain, 72000 per kthread [ 129.212062][ T8284] bond1: (slave macvlan4): speed changed to 0 on port 1 [ 129.229537][ T8284] bond1: (slave macvlan4): Enslaving as a backup interface with an up link [ 129.831420][ T8324] netlink: 'syz.2.720': attribute type 1 has an invalid length. [ 130.032585][ T8333] netlink: 'syz.1.722': attribute type 10 has an invalid length. [ 130.053104][ T8335] netlink: 'syz.4.725': attribute type 22 has an invalid length. [ 130.106092][ T8335] netlink: 'syz.4.725': attribute type 22 has an invalid length. [ 130.108910][ T66] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.172328][ T66] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.212161][ T1160] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.255693][ T1160] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.345875][ T8349] netlink: 'syz.2.728': attribute type 10 has an invalid length. [ 130.402597][ T8352] netlink: 'syz.2.728': attribute type 10 has an invalid length. [ 130.474120][ T8349] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.481843][ T5875] Bluetooth: hci4: command 0x0405 tx timeout [ 130.489536][ T8349] bond0: (slave team0): Enslaving as an active interface with an up link [ 130.569702][ T8352] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 130.575958][ T8360] netlink: 'syz.0.730': attribute type 83 has an invalid length. [ 131.646523][ T8409] netlink: 'syz.4.753': attribute type 3 has an invalid length. [ 131.717668][ T8409] netlink: 'syz.4.753': attribute type 1 has an invalid length. [ 131.925007][ T8422] netlink: 'syz.3.758': attribute type 10 has an invalid length. [ 132.033965][ T8422] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 132.114117][ T8432] veth1: entered promiscuous mode [ 132.416302][ T8442] tipc: Started in network mode [ 132.423622][ T8442] tipc: Node identity 468fdee4f52f, cluster identity 4711 [ 132.433678][ T8442] tipc: Enabled bearer , priority 0 [ 132.471448][ T8442] syzkaller0: entered promiscuous mode [ 132.480637][ T8442] syzkaller0: entered allmulticast mode [ 132.546433][ T8442] tipc: Resetting bearer [ 132.747361][ T8441] tipc: Resetting bearer [ 132.768589][ T8441] tipc: Disabling bearer [ 132.794860][ T8458] vcan0: entered allmulticast mode [ 132.888801][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.018903][ T8474] __nla_validate_parse: 14 callbacks suppressed [ 133.018924][ T8474] netlink: 8 bytes leftover after parsing attributes in process `syz.2.779'. [ 133.366812][ T8495] smc: net device erspan0 applied user defined pnetid SYZ0 [ 133.839889][ T8518] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.041137][ T8524] netlink: 4 bytes leftover after parsing attributes in process `syz.4.799'. [ 134.058368][ T8524] bridge_slave_1: left allmulticast mode [ 134.082101][ T8524] bridge_slave_1: left promiscuous mode [ 134.109433][ T8524] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.172477][ T8524] bridge_slave_0: left allmulticast mode [ 134.186664][ T8524] bridge_slave_0: left promiscuous mode [ 134.213340][ T8524] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.388258][ T8532] sit0: left promiscuous mode [ 134.552835][ T8546] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 134.591077][ T8532] wg2: left promiscuous mode [ 134.797474][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 134.895317][ T8532] vlan0: left allmulticast mode [ 134.904519][ T8532] veth0_vlan: left allmulticast mode [ 134.910772][ T8532] vlan0: left promiscuous mode [ 134.916241][ T8532] macvtap1: left promiscuous mode [ 134.930496][ T8532] veth0_macvtap: left allmulticast mode [ 134.951408][ T5951] wg1 speed is unknown, defaulting to 1000 [ 134.980185][ T1160] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.997403][ T5951] syz2: Port: 1 Link DOWN [ 135.024741][ T1160] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.115912][ T1160] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.126768][ T8578] netlink: 44 bytes leftover after parsing attributes in process `syz.2.809'. [ 135.164759][ T8578] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.172559][ T8578] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.188755][ T1160] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.418145][ T8581] xt_policy: too many policy elements [ 135.610765][ T8604] netlink: 8 bytes leftover after parsing attributes in process `syz.1.819'. [ 135.708645][ T8608] netlink: 8 bytes leftover after parsing attributes in process `syz.1.819'. [ 136.029540][ T8627] netlink: 16 bytes leftover after parsing attributes in process `syz.0.825'. [ 136.306820][ T8645] netlink: 44 bytes leftover after parsing attributes in process `syz.1.828'. [ 136.438557][ T8648] validate_nla: 2 callbacks suppressed [ 136.438574][ T8648] netlink: 'syz.0.829': attribute type 3 has an invalid length. [ 136.518344][ T8648] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.829'. [ 136.582328][ T8653] netlink: 'syz.3.831': attribute type 21 has an invalid length. [ 136.713269][ T8660] netlink: 320 bytes leftover after parsing attributes in process `syz.1.834'. [ 136.865642][ T8670] nbd: must specify a size in bytes for the device [ 137.139459][ T8678] bond0: (slave syz_tun): Releasing backup interface [ 137.194075][ T8683] netlink: 4 bytes leftover after parsing attributes in process `syz.1.843'. [ 137.229195][ T8678] bond0: (slave team0): Releasing backup interface [ 137.275686][ T8678] bond0: (slave dummy0): Releasing backup interface [ 137.320135][ T8678] bridge_slave_0: left allmulticast mode [ 137.337694][ T8678] bridge_slave_0: left promiscuous mode [ 137.359659][ T8678] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.376992][ T8678] bridge_slave_1: left allmulticast mode [ 137.383293][ T8678] bridge_slave_1: left promiscuous mode [ 137.389552][ T8678] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.442624][ T8678] bond0: (slave bond_slave_0): Releasing backup interface [ 137.447700][ T8696] netlink: 'syz.3.845': attribute type 16 has an invalid length. [ 137.483297][ T8696] netlink: 'syz.3.845': attribute type 17 has an invalid length. [ 137.488062][ T8678] bond0: (slave bond_slave_1): Releasing backup interface [ 137.545786][ T8678] team0: Port device team_slave_0 removed [ 137.577875][ T8678] team0: Port device team_slave_1 removed [ 137.604420][ T8678] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.617058][ T8678] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.627073][ T8678] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.639907][ T8678] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.720895][ T8690] team0: Device ip6gre1 is of different type [ 137.789795][ T8696] sit0: left allmulticast mode [ 137.813918][ T8696] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.821972][ T8696] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.835172][ T8696] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 137.866760][ T8710] team0: Device gtp0 is of different type [ 138.096695][ T8718] netlink: 'syz.0.852': attribute type 8 has an invalid length. [ 138.205699][ T8722] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 138.290704][ T8722] __nla_validate_parse: 2 callbacks suppressed [ 138.290721][ T8722] netlink: 28 bytes leftover after parsing attributes in process `syz.1.853'. [ 138.320460][ T8726] netlink: 8 bytes leftover after parsing attributes in process `syz.0.857'. [ 138.335906][ T8724] netlink: 10 bytes leftover after parsing attributes in process `syz.2.855'. [ 138.590795][ T8735] netlink: 32 bytes leftover after parsing attributes in process `syz.0.860'. [ 138.628476][ T8735] netlink: 12 bytes leftover after parsing attributes in process `syz.0.860'. [ 138.993802][ T8761] netlink: 'syz.1.870': attribute type 4 has an invalid length. [ 139.006522][ T8761] netlink: 20 bytes leftover after parsing attributes in process `syz.1.870'. [ 139.256235][ T8770] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 139.321909][ T8770] vlan2: entered allmulticast mode [ 139.335359][ T8770] bond0: entered allmulticast mode [ 139.341140][ T8770] bond_slave_0: entered allmulticast mode [ 139.354051][ T8770] bond_slave_1: entered allmulticast mode [ 139.355898][ T8777] netlink: 8 bytes leftover after parsing attributes in process `syz.4.875'. [ 139.370772][ T8770] team0: entered allmulticast mode [ 139.386228][ T8770] team_slave_0: entered allmulticast mode [ 139.395419][ T8770] team_slave_1: entered allmulticast mode [ 139.405881][ T8770] syz_tun: entered allmulticast mode [ 139.426283][ T8772] IPv6: sit1: Disabled Multicast RS [ 139.447764][ T8772] sit1: entered allmulticast mode [ 139.506784][ T8780] netlink: 12 bytes leftover after parsing attributes in process `syz.0.877'. [ 139.557484][ T8778] netlink: 'syz.4.875': attribute type 16 has an invalid length. [ 139.565355][ T8778] netlink: 'syz.4.875': attribute type 3 has an invalid length. [ 139.599307][ T8778] netlink: 132 bytes leftover after parsing attributes in process `syz.4.875'. [ 139.643089][ T8787] netlink: 'syz.1.879': attribute type 1 has an invalid length. [ 139.836100][ T8796] netlink: 28 bytes leftover after parsing attributes in process `syz.1.879'. [ 139.870208][ T8787] 8021q: adding VLAN 0 to HW filter on device bond3 [ 139.879859][ T8787] bond2: (slave bond3): making interface the new active one [ 139.907953][ T8787] bond2: (slave bond3): Enslaving as an active interface with an up link [ 140.132818][ T8796] 8021q: adding VLAN 0 to HW filter on device bond2 [ 140.157569][ T8809] tipc: Enabled bearer , priority 0 [ 140.182204][ T8809] syzkaller0: entered promiscuous mode [ 140.205312][ T8809] syzkaller0: entered allmulticast mode [ 140.230175][ T8809] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 140.323706][ T8809] tipc: Resetting bearer [ 140.471638][ T8824] netlink: 'syz.2.890': attribute type 83 has an invalid length. [ 140.562465][ T8812] bond_slave_0: left promiscuous mode [ 140.580603][ T8812] bond_slave_1: left promiscuous mode [ 140.586166][ T8812] bridge_slave_1: left promiscuous mode [ 140.790632][ T8837] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 140.885150][ T8812] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.913677][ T8812] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.065454][ T8807] tipc: Resetting bearer [ 141.097412][ T8807] tipc: Disabling bearer [ 141.138541][ T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.175454][ T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.252016][ T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.278155][ T5863] Bluetooth: hci0: command tx timeout [ 141.300450][ T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.752342][ T8870] tipc: Invalid UDP bearer configuration [ 141.752396][ T8870] tipc: Enabling of bearer rejected, failed to enable media [ 141.992302][ T8882] netlink: 'syz.2.910': attribute type 4 has an invalid length. [ 142.100154][ T8890] netlink: 'syz.2.910': attribute type 4 has an invalid length. [ 142.191461][ T8891] sctp: [Deprecated]: syz.1.911 (pid 8891) Use of int in maxseg socket option. [ 142.191461][ T8891] Use struct sctp_assoc_value instead [ 142.645467][ T8911] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 142.863896][ T8924] netlink: 'syz.2.925': attribute type 1 has an invalid length. [ 142.874470][ T8924] netlink: 'syz.2.925': attribute type 75 has an invalid length. [ 142.973182][ T8926] netlink: 'syz.4.926': attribute type 39 has an invalid length. [ 143.513422][ T8954] syzkaller0: entered promiscuous mode [ 143.533935][ T8954] syzkaller0: entered allmulticast mode [ 143.581485][ T8954] __nla_validate_parse: 6 callbacks suppressed [ 143.581502][ T8954] netlink: 24 bytes leftover after parsing attributes in process `syz.2.936'. [ 143.623250][ T8954] netlink: 32 bytes leftover after parsing attributes in process `syz.2.936'. [ 144.035494][ T8969] netlink: 'syz.2.942': attribute type 10 has an invalid length. [ 144.063819][ T8972] netlink: 12 bytes leftover after parsing attributes in process `syz.4.943'. [ 144.066715][ T8969] team0: Port device dummy0 added [ 144.093897][ T8972] netlink: 'syz.4.943': attribute type 1 has an invalid length. [ 144.104184][ T8972] netlink: 'syz.4.943': attribute type 1 has an invalid length. [ 144.112679][ T8972] netlink: 'syz.4.943': attribute type 2 has an invalid length. [ 144.123107][ T8972] netlink: 68 bytes leftover after parsing attributes in process `syz.4.943'. [ 144.142731][ T8975] netlink: 112 bytes leftover after parsing attributes in process `syz.4.943'. [ 144.359044][ T8984] netlink: 12 bytes leftover after parsing attributes in process `syz.4.947'. [ 144.471442][ T8988] netlink: 16 bytes leftover after parsing attributes in process `syz.3.949'. [ 144.575996][ T8988] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 144.622105][ T9003] netlink: 8 bytes leftover after parsing attributes in process `syz.1.952'. [ 144.658919][ T9005] veth0: entered promiscuous mode [ 144.727022][ T9009] netlink: 'syz.4.955': attribute type 1 has an invalid length. [ 144.764120][ T9004] veth0: left promiscuous mode [ 145.269785][ T9041] netlink: 8 bytes leftover after parsing attributes in process `syz.1.965'. [ 145.299998][ T9041] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 145.317447][ T9041] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 145.412708][ T9050] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 145.463295][ T9050] netlink: 28 bytes leftover after parsing attributes in process `syz.3.967'. [ 145.608685][ T9058] sch_fq: defrate 0 ignored. [ 145.716990][ T9062] Bluetooth: MGMT ver 1.23 [ 146.895577][ T9113] tipc: Enabled bearer , priority 0 [ 146.932104][ T9106] tipc: Resetting bearer [ 147.938978][ T5937] tipc: Node number set to 4155868271 [ 148.316768][ T9106] tipc: Disabling bearer [ 148.345149][ T9129] bond0: Device is already in use. [ 148.620006][ T9144] __nla_validate_parse: 6 callbacks suppressed [ 148.620021][ T9144] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1000'. [ 148.676369][ T9150] nftables ruleset with unbound set [ 149.133007][ T9169] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1009'. [ 149.495534][ T9186] validate_nla: 1 callbacks suppressed [ 149.495552][ T9186] netlink: 'syz.1.1016': attribute type 1 has an invalid length. [ 149.728800][ T9202] IPv6: NLM_F_CREATE should be specified when creating new route [ 149.924716][ T9212] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1025'. [ 150.033604][ T9214] netlink: 'syz.1.1026': attribute type 33 has an invalid length. [ 150.062197][ T9214] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 150.104097][ T9216] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 150.113388][ T9216] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1027'. [ 150.123123][ T9216] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.252009][ T9216] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 150.324363][ T9224] unknown channel width for channel at 909000KHz? [ 150.334477][ T9224] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1029'. [ 150.354182][ T9224] netlink: zone id is out of range [ 150.376138][ T9224] netlink: zone id is out of range [ 150.407383][ T9224] netlink: zone id is out of range [ 150.414172][ T9224] netlink: zone id is out of range [ 150.420309][ T9224] netlink: zone id is out of range [ 150.429103][ T9224] netlink: zone id is out of range [ 150.434642][ T9224] netlink: zone id is out of range [ 150.442602][ T9224] netlink: zone id is out of range [ 150.515617][ T9224] netlink: zone id is out of range [ 150.522143][ T9233] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1033'. [ 150.599162][ T9224] netlink: zone id is out of range [ 150.629143][ T9235] netlink: 'syz.4.1032': attribute type 1 has an invalid length. [ 150.683802][ T9237] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1034'. [ 151.020959][ T9245] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1037'. [ 151.059308][ T9246] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1038'. [ 151.251644][ T9264] netlink: 'syz.0.1044': attribute type 8 has an invalid length. [ 152.069015][ T9293] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1054'. [ 152.229712][ T9301] netlink: 'syz.3.1054': attribute type 2 has an invalid length. [ 152.805536][ T9330] tipc: Enabled bearer , priority 0 [ 152.846916][ T9330] syzkaller0: entered promiscuous mode [ 152.863601][ T9330] syzkaller0: entered allmulticast mode [ 152.993960][ T9330] tipc: Resetting bearer [ 153.019335][ T9353] netlink: 'syz.4.1070': attribute type 2 has an invalid length. [ 153.025452][ T9351] netlink: 'syz.3.1069': attribute type 1 has an invalid length. [ 153.093584][ T9329] tipc: Resetting bearer [ 153.191081][ T9329] tipc: Disabling bearer [ 153.528485][ T9377] netlink: 'syz.1.1076': attribute type 21 has an invalid length. [ 153.875709][ T9393] tipc: Enabled bearer , priority 0 [ 153.884444][ T9395] netlink: 'syz.3.1084': attribute type 24 has an invalid length. [ 153.892853][ T9388] syzkaller0: entered promiscuous mode [ 153.909200][ T9388] syzkaller0: entered allmulticast mode [ 153.964390][ T9395] vlan2: entered promiscuous mode [ 154.005675][ T9395] vlan2: entered allmulticast mode [ 154.029862][ T9395] hsr_slave_1: entered allmulticast mode [ 154.040577][ T9393] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 154.082099][ T9395] __nla_validate_parse: 6 callbacks suppressed [ 154.082116][ T9395] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1084'. [ 154.148880][ T9401] netlink: 'syz.4.1085': attribute type 1 has an invalid length. [ 154.388495][ T9393] tipc: Resetting bearer [ 154.420742][ T9386] tipc: Resetting bearer [ 154.521918][ T9421] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1089'. [ 154.534818][ T9386] tipc: Disabling bearer [ 154.633302][ T9424] tipc: Enabled bearer , priority 10 [ 154.891967][ T9437] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1096'. [ 154.991601][ T9439] netlink: 'syz.2.1098': attribute type 1 has an invalid length. [ 155.245740][ T9451] netdevsim netdevsim0: Firmware load for './file0/../file0' refused, path contains '..' component [ 155.298269][ T36] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.341661][ T36] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.381944][ T36] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.434292][ T9458] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1101'. [ 155.512195][ T36] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.538687][ T9466] netlink: 'syz.2.1105': attribute type 1 has an invalid length. [ 155.575595][ T9460] tipc: Enabled bearer , priority 0 [ 155.583053][ T9467] syzkaller0: entered promiscuous mode [ 155.596244][ T9467] syzkaller0: entered allmulticast mode [ 155.619279][ T9460] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 155.735491][ T9460] tipc: Resetting bearer [ 155.745784][ T9459] tipc: Resetting bearer [ 155.789364][ T9459] tipc: Disabling bearer [ 155.813676][ T9479] netlink: 'syz.4.1110': attribute type 6 has an invalid length. [ 155.986406][ T9488] netlink: 'syz.2.1112': attribute type 3 has an invalid length. [ 155.994378][ T9488] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.1112'. [ 156.029398][ T9495] netlink: 'syz.4.1114': attribute type 1 has an invalid length. [ 156.282495][ T9494] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1115'. [ 156.335714][ T9495] bond4 (unregistering): Released all slaves [ 156.379293][ T9510] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1112'. [ 156.554005][ T9494] tipc: Enabled bearer , priority 12 [ 156.874393][ T9516] bond2: entered promiscuous mode [ 156.915943][ T9524] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1117'. [ 156.937785][ T9516] bond2: entered allmulticast mode [ 156.956790][ T9516] 8021q: adding VLAN 0 to HW filter on device bond2 [ 156.997889][ T9524] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1117'. [ 157.104201][ T9524] FAULT_INJECTION: forcing a failure. [ 157.104201][ T9524] name failslab, interval 1, probability 0, space 0, times 0 [ 157.181071][ T9524] CPU: 0 UID: 0 PID: 9524 Comm: syz.3.1117 Not tainted syzkaller #0 PREEMPT(full) [ 157.181095][ T9524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 157.181105][ T9524] Call Trace: [ 157.181112][ T9524] [ 157.181119][ T9524] dump_stack_lvl+0x189/0x250 [ 157.181144][ T9524] ? __pfx____ratelimit+0x10/0x10 [ 157.181167][ T9524] ? __pfx_dump_stack_lvl+0x10/0x10 [ 157.181186][ T9524] ? __pfx__printk+0x10/0x10 [ 157.181214][ T9524] ? __pfx___might_resched+0x10/0x10 [ 157.181229][ T9524] ? fs_reclaim_acquire+0x7d/0x100 [ 157.181258][ T9524] should_fail_ex+0x414/0x560 [ 157.181285][ T9524] should_failslab+0xa8/0x100 [ 157.181309][ T9524] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 157.181329][ T9524] ? __alloc_skb+0x112/0x2d0 [ 157.181349][ T9524] __alloc_skb+0x112/0x2d0 [ 157.181370][ T9524] netlink_ack+0x146/0xa50 [ 157.181390][ T9524] ? __pfx_genl_rcv_msg+0x10/0x10 [ 157.181414][ T9524] ? __asan_memcpy+0x40/0x70 [ 157.181438][ T9524] ? __pfx_ref_tracker_free+0x10/0x10 [ 157.181467][ T9524] netlink_rcv_skb+0x28c/0x470 [ 157.181487][ T9524] ? __lock_acquire+0xab9/0xd20 [ 157.181509][ T9524] ? __pfx_genl_rcv_msg+0x10/0x10 [ 157.181530][ T9524] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 157.181573][ T9524] ? down_read+0x1ad/0x2e0 [ 157.181593][ T9524] genl_rcv+0x28/0x40 [ 157.181609][ T9524] netlink_unicast+0x82f/0x9e0 [ 157.181640][ T9524] ? __pfx_netlink_unicast+0x10/0x10 [ 157.181664][ T9524] ? netlink_sendmsg+0x642/0xb30 [ 157.181677][ T9524] ? skb_put+0x11b/0x210 [ 157.181697][ T9524] netlink_sendmsg+0x805/0xb30 [ 157.181724][ T9524] ? __pfx_netlink_sendmsg+0x10/0x10 [ 157.181744][ T9524] ? aa_sock_msg_perm+0xf1/0x1d0 [ 157.181763][ T9524] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 157.181780][ T9524] ? __pfx_netlink_sendmsg+0x10/0x10 [ 157.181797][ T9524] __sock_sendmsg+0x219/0x270 [ 157.181821][ T9524] ____sys_sendmsg+0x505/0x830 [ 157.181846][ T9524] ? __pfx_____sys_sendmsg+0x10/0x10 [ 157.181875][ T9524] ? import_iovec+0x74/0xa0 [ 157.181898][ T9524] ___sys_sendmsg+0x21f/0x2a0 [ 157.181919][ T9524] ? __pfx____sys_sendmsg+0x10/0x10 [ 157.181977][ T9524] ? __fget_files+0x2a/0x420 [ 157.181998][ T9524] ? __fget_files+0x3a0/0x420 [ 157.182032][ T9524] __x64_sys_sendmsg+0x19b/0x260 [ 157.182053][ T9524] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 157.182086][ T9524] ? rcu_is_watching+0x15/0xb0 [ 157.182107][ T9524] ? trace_sys_enter+0x25/0x100 [ 157.182135][ T9524] do_syscall_64+0xfa/0x3b0 [ 157.182150][ T9524] ? lockdep_hardirqs_on+0x9c/0x150 [ 157.182171][ T9524] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.182187][ T9524] ? clear_bhb_loop+0x60/0xb0 [ 157.182208][ T9524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.182224][ T9524] RIP: 0033:0x7fed7138ebe9 [ 157.182239][ T9524] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.182253][ T9524] RSP: 002b:00007fed72179038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 157.182271][ T9524] RAX: ffffffffffffffda RBX: 00007fed715c6180 RCX: 00007fed7138ebe9 [ 157.182283][ T9524] RDX: 000000002000c094 RSI: 0000200000000000 RDI: 0000000000000003 [ 157.182294][ T9524] RBP: 00007fed72179090 R08: 0000000000000000 R09: 0000000000000000 [ 157.182305][ T9524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.182314][ T9524] R13: 00007fed715c6218 R14: 00007fed715c6180 R15: 00007fff750ca408 [ 157.182343][ T9524] [ 157.846142][ T9545] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1127'. [ 158.037188][ T9549] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 158.133346][ T9549] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 158.233343][ T9554] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 158.683767][ T9594] netlink: 'syz.2.1143': attribute type 15 has an invalid length. [ 158.945831][ T9612] net_ratelimit: 66 callbacks suppressed [ 158.945848][ T9612] openvswitch: netlink: Multiple metadata blocks provided [ 158.975636][ T9606] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 159.375405][ T9635] netlink: 'syz.0.1152': attribute type 10 has an invalid length. [ 159.403998][ T9635] netlink: 'syz.0.1152': attribute type 10 has an invalid length. [ 159.519714][ T9635] bond1: option mode: unable to set because the bond device has slaves [ 159.601993][ T9628] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 159.602347][ T9645] netlink: 'syz.3.1158': attribute type 16 has an invalid length. [ 159.627340][ T9645] netlink: 'syz.3.1158': attribute type 17 has an invalid length. [ 159.636926][ T9628] bond1: (slave macvlan0): Enslaving as a backup interface with an up link [ 159.674330][ T9645] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 159.749750][ T9647] tipc: Enabled bearer , priority 0 [ 159.771705][ T9647] syzkaller0: entered promiscuous mode [ 159.791321][ T9647] syzkaller0: entered allmulticast mode [ 159.826872][ T9647] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 159.865021][ T9650] __nla_validate_parse: 4 callbacks suppressed [ 159.865039][ T9650] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1160'. [ 159.933310][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 159.967168][ T8563] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 159.990078][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 160.017789][ T8563] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 160.034482][ T9657] tipc: Resetting bearer [ 160.060929][ T9646] tipc: Resetting bearer [ 160.070729][ T9658] openvswitch: netlink: IP tunnel dst address not specified [ 160.093721][ T9646] tipc: Disabling bearer [ 160.141899][ T9661] netlink: 'syz.1.1164': attribute type 29 has an invalid length. [ 160.178195][ T8563] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 160.199159][ T9668] netlink: 'syz.1.1164': attribute type 29 has an invalid length. [ 160.484167][ T9687] tipc: Can't bind to reserved service type 0 [ 160.550505][ T9686] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1172'. [ 160.584240][ T9689] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1173'. [ 160.595576][ T9686] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 160.633012][ T9689] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1173'. [ 160.688924][ T9689] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1173'. [ 160.739757][ T9691] netlink: 'syz.3.1174': attribute type 16 has an invalid length. [ 160.748326][ T9689] veth0: entered promiscuous mode [ 160.753410][ T9691] netlink: 'syz.3.1174': attribute type 17 has an invalid length. [ 160.761780][ T9698] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1176'. [ 160.778294][ T9696] netlink: 'syz.2.1177': attribute type 1 has an invalid length. [ 160.787390][ T9689] netlink: 'syz.1.1173': attribute type 1 has an invalid length. [ 160.835010][ T9691] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 160.855612][ T9694] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1173'. [ 160.935723][ T9688] veth0: left promiscuous mode [ 161.058033][ T9708] openvswitch: netlink: IP tunnel dst address not specified [ 161.509324][ T9724] : entered promiscuous mode [ 161.774748][ T9753] openvswitch: netlink: IP tunnel dst address not specified [ 162.311313][ T9771] netlink: 'syz.3.1202': attribute type 1 has an invalid length. [ 162.329564][ T9774] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1203'. [ 162.362249][ T9774] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1203'. [ 162.362879][ T9771] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 162.516535][ T9783] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1205'. [ 162.666347][ T9787] openvswitch: netlink: IP tunnel dst address not specified [ 164.317402][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 164.381846][ T66] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 164.407799][ T66] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 164.440526][ T66] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 164.484051][ T66] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 164.499326][ T9883] tls_set_device_offload_rx: netdev not found [ 165.088034][ T9907] netlink: 'syz.3.1249': attribute type 1 has an invalid length. [ 165.143966][ T9912] __nla_validate_parse: 3 callbacks suppressed [ 165.143983][ T9912] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1251'. [ 165.174346][ T9912] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1251'. [ 165.283912][ T9919] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1253'. [ 165.313596][ T9917] openvswitch: netlink: IP tunnel TTL not specified. [ 165.338694][ T9919] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1253'. [ 165.527776][ T9932] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1255'. [ 165.655118][ T9940] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1260'. [ 166.008314][ T9958] netlink: 'syz.0.1266': attribute type 30 has an invalid length. [ 166.011149][ T9957] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1265'. [ 166.117830][ T9965] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1265'. [ 166.142718][ T9966] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1264'. [ 166.159640][ T9963] netdevsim netdevsim3 ÿÿÿÿÿÿ: renamed from netdevsim0 [ 166.225163][ T9966] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 166.396990][ T9979] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1271'. [ 166.714261][ T9987] macsec1: entered promiscuous mode [ 166.721699][ T9987] bridge0: entered promiscuous mode [ 166.729901][ T9987] bridge0: port 1(macsec1) entered blocking state [ 166.736642][ T9987] bridge0: port 1(macsec1) entered disabled state [ 166.743892][ T9987] macsec1: entered allmulticast mode [ 166.749828][ T9987] bridge0: entered allmulticast mode [ 166.762109][ T9987] macsec1: left allmulticast mode [ 166.767171][ T9987] bridge0: left allmulticast mode [ 166.799903][ T9987] bridge0: left promiscuous mode [ 167.826543][T10056] netlink: 'syz.1.1294': attribute type 1 has an invalid length. [ 167.890891][T10056] netlink: 'syz.1.1294': attribute type 1 has an invalid length. [ 167.943195][T10064] gre0: entered promiscuous mode [ 168.356902][T10086] netlink: 'syz.0.1304': attribute type 1 has an invalid length. [ 168.462372][T10086] ip6gre1: entered allmulticast mode [ 168.851481][T10106] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 170.036587][T10171] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 170.199813][T10182] netlink: 'syz.0.1334': attribute type 10 has an invalid length. [ 170.233366][T10182] netlink: 'syz.0.1334': attribute type 10 has an invalid length. [ 170.454673][T10182] 8021q: adding VLAN 0 to HW filter on device bond4 [ 170.514151][T10173] bond1: (slave macvlan1): Error -98 calling set_mac_address [ 170.842964][T10218] __nla_validate_parse: 8 callbacks suppressed [ 170.842981][T10218] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1348'. [ 170.953835][T10221] syzkaller1: entered promiscuous mode [ 170.966702][T10221] syzkaller1: entered allmulticast mode [ 170.983206][T10221] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1349'. [ 171.075040][T10221] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1349'. [ 171.265871][T10241] netlink: 'syz.0.1353': attribute type 1 has an invalid length. [ 171.416203][T10247] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1357'. [ 171.690945][T10265] bond0: (slave syz_tun): Releasing backup interface [ 171.706715][T10265] syz_tun: left allmulticast mode [ 171.724862][T10265] bond0: (slave team0): Releasing backup interface [ 171.735548][T10269] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 171.745895][T10265] team0: left allmulticast mode [ 171.758063][T10265] team_slave_0: left allmulticast mode [ 171.763672][T10265] team_slave_1: left allmulticast mode [ 171.774362][T10265] bridge_slave_0: left allmulticast mode [ 171.780726][T10265] bridge_slave_0: left promiscuous mode [ 171.786614][T10265] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.802151][T10265] bond0: (slave bond_slave_0): Releasing backup interface [ 171.834662][T10265] bond_slave_0: left allmulticast mode [ 171.840570][T10265] bond_slave_0: left promiscuous mode [ 171.851242][T10265] bond0: (slave bond_slave_1): Releasing backup interface [ 171.864155][T10265] bond_slave_1: left allmulticast mode [ 171.870169][T10265] bond_slave_1: left promiscuous mode [ 171.881409][T10265] team0: Port device team_slave_0 removed [ 171.892351][T10265] team0: Port device team_slave_1 removed [ 171.899220][T10265] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.907374][T10265] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 171.915754][T10265] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.924008][T10265] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 171.946327][T10265] bond1: (slave macvlan2): Removing an active aggregator [ 171.953673][ T1160] bond1: Warning: Found an uninitialized port [ 171.962205][T10265] bond1: (slave macvlan2): Releasing backup interface [ 171.992631][T10265] vlan2: left allmulticast mode [ 172.008961][T10265] bond0: left allmulticast mode [ 172.020407][T10265] bond2: (slave bond3): Releasing backup interface [ 172.215481][T10284] netlink: 'syz.1.1369': attribute type 1 has an invalid length. [ 172.549701][T10308] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1377'. [ 172.558883][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 172.732103][T10319] openvswitch: netlink: IP tunnel dst address not specified [ 172.963245][T10328] netlink: 'syz.3.1384': attribute type 1 has an invalid length. [ 173.248882][T10343] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1390'. [ 173.336777][T10348] netlink: 'syz.3.1391': attribute type 1 has an invalid length. [ 173.457859][T10354] openvswitch: netlink: IP tunnel dst address not specified [ 173.562561][T10360] netlink: 'syz.4.1396': attribute type 1 has an invalid length. [ 173.607559][T10358] netlink: 'syz.1.1394': attribute type 2 has an invalid length. [ 173.691260][T10367] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1398'. [ 173.721691][T10367] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1398'. [ 174.056144][T10391] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 174.257904][T10396] openvswitch: netlink: IP tunnel TTL not specified. [ 174.275857][T10402] netlink: 'syz.4.1409': attribute type 1 has an invalid length. [ 174.468264][T10409] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1413'. [ 174.685995][T10427] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 174.709200][T10409] IPVS: stopping master sync thread 10427 ... [ 174.759385][T10429] netlink: 'syz.0.1415': attribute type 10 has an invalid length. [ 174.787438][T10429] netlink: 'syz.0.1415': attribute type 10 has an invalid length. [ 174.826369][T10429] bond1: (slave macvlan1): Error -98 calling set_mac_address [ 174.864834][T10434] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1417'. [ 175.094839][T10445] netlink: 'syz.4.1420': attribute type 1 has an invalid length. [ 175.231140][T10445] wg1 speed is unknown, defaulting to 1000 [ 175.348842][T10457] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 175.832713][T10471] macvlan3: entered promiscuous mode [ 175.875101][T10471] macvlan3: entered allmulticast mode [ 175.875976][T10488] __nla_validate_parse: 8 callbacks suppressed [ 175.875991][T10488] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1436'. [ 175.903265][T10471] bond2: entered promiscuous mode [ 175.909600][T10471] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 175.926493][T10471] bond2: left promiscuous mode [ 176.018651][T10466] bond4: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 176.077913][T10478] veth15: entered promiscuous mode [ 176.095728][T10478] bond4: (slave veth15): Enslaving as a backup interface with a down link [ 176.110652][ T1160] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 176.139923][T10479] 8021q: adding VLAN 0 to HW filter on device bond4 [ 176.245933][T10506] batman_adv: batadv0: Adding interface: team0 [ 176.255135][T10506] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.259938][ T12] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 176.281683][T10506] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 176.299061][T10507] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1440'. [ 176.326281][T10506] validate_nla: 4 callbacks suppressed [ 176.326293][T10506] netlink: 'syz.1.1440': attribute type 1 has an invalid length. [ 176.340011][T10506] netlink: 'syz.1.1440': attribute type 2 has an invalid length. [ 176.347910][T10506] netlink: 1172 bytes leftover after parsing attributes in process `syz.1.1440'. [ 176.717156][T10525] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 176.734111][T10525] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1448'. [ 176.743555][T10525] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1448'. [ 176.761626][T10525] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1448'. [ 177.074250][T10538] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1454'. [ 177.103288][T10538] openvswitch: netlink: Actions may not be safe on all matching packets [ 177.339396][T10549] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 177.853674][T10577] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1468'. [ 178.567155][T10577] bond0 (unregistering): Released all slaves [ 179.396792][T10640] netlink: 'syz.0.1488': attribute type 10 has an invalid length. [ 179.420892][T10640] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 179.520086][T10646] netlink: 'syz.4.1491': attribute type 13 has an invalid length. [ 179.557561][T10646] lo: entered promiscuous mode [ 179.564348][T10646] lo: entered allmulticast mode [ 179.617379][T10646] tunl0: entered promiscuous mode [ 179.639942][T10646] tunl0: entered allmulticast mode [ 179.666582][T10646] gre0: entered allmulticast mode [ 179.675527][T10659] netlink: 'syz.3.1492': attribute type 10 has an invalid length. [ 179.684597][T10646] gretap0: entered promiscuous mode [ 179.705670][T10646] gretap0: entered allmulticast mode [ 179.742479][T10646] gretap0: refused to change device tx_queue_len [ 179.772413][T10646] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 179.801669][T10652] netlink: 'syz.3.1492': attribute type 2 has an invalid length. [ 180.187836][T10682] tipc: Enabled bearer , priority 0 [ 180.220962][T10682] syzkaller0: entered promiscuous mode [ 180.244166][T10682] syzkaller0: entered allmulticast mode [ 180.276077][T10682] tipc: Resetting bearer [ 180.326857][T10681] tipc: Resetting bearer [ 180.406121][T10681] tipc: Disabling bearer [ 180.428198][T10699] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1508'. [ 180.464822][T10701] syzkaller0: entered promiscuous mode [ 180.471931][T10701] syzkaller0: entered allmulticast mode [ 180.485376][T10701] tipc: Enabled bearer , priority 0 [ 180.517593][T10701] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 180.525240][T10702] netlink: 'syz.4.1509': attribute type 1 has an invalid length. [ 180.548492][T10701] tipc: Resetting bearer [ 180.607284][T10700] tipc: Resetting bearer [ 180.621120][T10700] tipc: Disabling bearer [ 180.637712][T10703] bond4: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 180.650331][T10703] bond4: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 180.661498][T10703] bond4: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode [ 180.865711][T10720] netlink: 'syz.2.1514': attribute type 1 has an invalid length. [ 180.950919][T10725] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1517'. [ 180.951498][T10720] 8021q: adding VLAN 0 to HW filter on device bond3 [ 180.988500][T10725] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1517'. [ 180.998413][T10725] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1517'. [ 181.014090][T10726] bond3: (slave veth11): Enslaving as an active interface with a down link [ 181.081451][T10720] bond3: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 181.221478][T10735] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1521'. [ 181.487085][T10739] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1523'. [ 181.836673][T10774] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1534'. [ 181.880257][T10774] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1534'. [ 182.065878][T10776] syz.1.1535 (10776) used greatest stack depth: 17416 bytes left [ 182.129910][T10793] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 182.395379][T10807] netlink: 'syz.1.1543': attribute type 2 has an invalid length. [ 182.417577][T10807] netlink: 'syz.1.1543': attribute type 8 has an invalid length. [ 182.434276][T10807] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1543'. [ 182.721791][T10820] netlink: 'syz.2.1548': attribute type 10 has an invalid length. [ 183.100564][T10837] netlink: 'syz.4.1556': attribute type 1 has an invalid length. [ 183.421824][T10849] syzkaller0: entered promiscuous mode [ 183.440851][T10849] syzkaller0: entered allmulticast mode [ 183.487516][T10865] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1565'. [ 183.568116][T10869] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1567'. [ 183.652359][T10874] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 183.779150][T10881] netlink: 'syz.2.1571': attribute type 1 has an invalid length. [ 183.801118][T10880] batadv_slave_0: entered promiscuous mode [ 184.514411][T10916] netlink: 'syz.1.1581': attribute type 23 has an invalid length. [ 184.518891][T10915] netlink: 'syz.2.1582': attribute type 1 has an invalid length. [ 184.694259][T10926] netlink: 'syz.3.1584': attribute type 1 has an invalid length. [ 184.732569][T10926] nbd: couldn't find device at index 1048576 [ 184.944534][T10940] netlink: 'syz.0.1588': attribute type 4 has an invalid length. [ 184.965067][T10944] x_tables: ip_tables: udp match: only valid for protocol 17 [ 185.462766][T10972] netlink: 'syz.3.1601': attribute type 1 has an invalid length. [ 185.862588][T10995] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 185.968844][T10995] __nla_validate_parse: 11 callbacks suppressed [ 185.968862][T10995] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1607'. [ 186.150751][T11012] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1612'. [ 186.175829][T11011] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.196125][T11011] bond0: (slave team0): Enslaving as an active interface with an up link [ 186.224748][T11014] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (32767) [ 186.234361][T11014] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 186.595851][T11040] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 186.822414][T11055] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1628'. [ 187.647735][T11077] openvswitch: netlink: Multiple metadata blocks provided [ 188.000748][ T5875] Bluetooth: hci4: command 0x0405 tx timeout [ 188.266563][T11059] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 188.555500][T11093] validate_nla: 6 callbacks suppressed [ 188.555518][T11093] netlink: 'syz.0.1637': attribute type 1 has an invalid length. [ 188.564086][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 188.597620][T11093] netlink: 208 bytes leftover after parsing attributes in process `syz.0.1637'. [ 188.624068][T11093] netlink: 'syz.0.1637': attribute type 1 has an invalid length. [ 188.632500][T11093] netlink: 'syz.0.1637': attribute type 2 has an invalid length. [ 188.655029][T11102] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 188.666971][T11103] netlink: 596 bytes leftover after parsing attributes in process `syz.4.1641'. [ 188.684996][T11105] netlink: 'syz.1.1642': attribute type 1 has an invalid length. [ 188.753991][T11105] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.938964][T11109] bond0: (slave veth17): Enslaving as an active interface with a down link [ 188.987949][T11105] bond0: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 189.115260][T11119] bond0: (slave veth19): Enslaving as an active interface with a down link [ 189.410185][T11145] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1653'. [ 189.424681][T11142] ================================================================== [ 189.432770][T11142] BUG: KASAN: slab-use-after-free in xfrm_state_find+0x2cf2/0x5400 [ 189.440646][T11142] Read of size 1 at addr ffff88805c384ff0 by task syz.2.1651/11142 [ 189.448520][T11142] [ 189.450830][T11142] CPU: 0 UID: 0 PID: 11142 Comm: syz.2.1651 Not tainted syzkaller #0 PREEMPT(full) [ 189.450852][T11142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 189.450863][T11142] Call Trace: [ 189.450872][T11142] [ 189.450881][T11142] dump_stack_lvl+0x189/0x250 [ 189.450904][T11142] ? __kasan_check_byte+0x12/0x40 [ 189.450927][T11142] ? __pfx_dump_stack_lvl+0x10/0x10 [ 189.450945][T11142] ? lock_release+0x4b/0x3e0 [ 189.450966][T11142] ? __virt_addr_valid+0x4a5/0x5c0 [ 189.450980][T11142] print_report+0xca/0x240 [ 189.450990][T11142] ? xfrm_state_find+0x2cf2/0x5400 [ 189.450999][T11142] kasan_report+0x118/0x150 [ 189.451013][T11142] ? xfrm_state_find+0x2cf2/0x5400 [ 189.451024][T11142] xfrm_state_find+0x2cf2/0x5400 [ 189.451033][T11142] ? __lock_acquire+0xab9/0xd20 [ 189.451048][T11142] ? validate_chain+0x897/0x2140 [ 189.451060][T11142] ? xfrm_state_find+0x1da/0x5400 [ 189.451070][T11142] ? __pfx_xfrm_state_find+0x10/0x10 [ 189.451083][T11142] xfrm_resolve_and_create_bundle+0x768/0x2f80 [ 189.451101][T11142] ? xfrm_policy_lookup_bytype+0x2a7/0x1250 [ 189.451114][T11142] ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10 [ 189.451127][T11142] ? xfrm_policy_lookup_bytype+0x123/0x1250 [ 189.451140][T11142] ? xfrm_policy_lookup_bytype+0x11ef/0x1250 [ 189.451160][T11142] ? xfrm_expand_policies+0x41f/0x6a0 [ 189.451172][T11142] xfrm_lookup_with_ifid+0x58a/0x1a70 [ 189.451186][T11142] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 189.451199][T11142] ? __asan_memset+0x22/0x50 [ 189.451210][T11142] xfrm_lookup_route+0x3c/0x1c0 [ 189.451223][T11142] ip_tunnel_xmit+0x96b/0x2390 [ 189.451241][T11142] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 189.451251][T11142] ? gre_build_header+0x31c/0xa40 [ 189.451273][T11142] ? __pfx_gre_build_header+0x10/0x10 [ 189.451291][T11142] ? iptunnel_handle_offloads+0x2fd/0x630 [ 189.451319][T11142] ipgre_xmit+0x89e/0xc50 [ 189.451335][T11142] ? __pfx_ipgre_xmit+0x10/0x10 [ 189.451347][T11142] dev_hard_start_xmit+0x2d7/0x830 [ 189.451363][T11142] __dev_queue_xmit+0x1b8d/0x3b50 [ 189.451374][T11142] ? do_syscall_64+0xfa/0x3b0 [ 189.451383][T11142] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.451394][T11142] ? __dev_queue_xmit+0x27b/0x3b50 [ 189.451411][T11142] ? __pfx___dev_queue_xmit+0x10/0x10 [ 189.451425][T11142] ? rcu_is_watching+0x15/0xb0 [ 189.451439][T11142] ? pskb_expand_head+0xaa0/0x1150 [ 189.451451][T11142] ? __bpf_redirect+0x56d/0xe40 [ 189.451465][T11142] __bpf_tx_skb+0x18e/0x260 [ 189.451477][T11142] bpf_clone_redirect+0x272/0x3d0 [ 189.451493][T11142] ? bpf_test_run+0x197/0x7b0 [ 189.451508][T11142] bpf_prog_1eda3e3d4f38ab1d+0x5f/0x68 [ 189.451518][T11142] ? preempt_schedule+0xae/0xc0 [ 189.451531][T11142] ? bpf_test_run+0x197/0x7b0 [ 189.451544][T11142] ? preempt_schedule_common+0x83/0xd0 [ 189.451557][T11142] ? preempt_schedule+0xae/0xc0 [ 189.451570][T11142] ? __pfx_preempt_schedule+0x10/0x10 [ 189.451583][T11142] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 189.451595][T11142] ? __local_bh_disable_ip+0xf1/0x190 [ 189.451604][T11142] ? __pfx___cant_migrate+0x10/0x10 [ 189.451613][T11142] ? __local_bh_enable_ip+0x12d/0x1c0 [ 189.451622][T11142] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 189.451631][T11142] ? bpf_test_timer_continue+0x136/0x350 [ 189.451647][T11142] bpf_test_run+0x315/0x7b0 [ 189.451672][T11142] ? __pfx_bpf_test_run+0x10/0x10 [ 189.451692][T11142] ? bpf_prog_test_run_skb+0x6ac/0x1560 [ 189.451706][T11142] ? convert___skb_to_skb+0x3d/0x590 [ 189.451720][T11142] bpf_prog_test_run_skb+0xb30/0x1560 [ 189.451738][T11142] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 189.451752][T11142] bpf_prog_test_run+0x2c7/0x340 [ 189.451767][T11142] __sys_bpf+0x581/0x870 [ 189.451780][T11142] ? __pfx___sys_bpf+0x10/0x10 [ 189.451796][T11142] ? rcu_is_watching+0x15/0xb0 [ 189.451807][T11142] __x64_sys_bpf+0x7c/0x90 [ 189.451818][T11142] do_syscall_64+0xfa/0x3b0 [ 189.451826][T11142] ? lockdep_hardirqs_on+0x9c/0x150 [ 189.451840][T11142] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.451849][T11142] ? clear_bhb_loop+0x60/0xb0 [ 189.451859][T11142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.451868][T11142] RIP: 0033:0x7f2dd678ebe9 [ 189.451877][T11142] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.451886][T11142] RSP: 002b:00007f2dd76e8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 189.451898][T11142] RAX: ffffffffffffffda RBX: 00007f2dd69c5fa0 RCX: 00007f2dd678ebe9 [ 189.451905][T11142] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 189.451911][T11142] RBP: 00007f2dd6811e19 R08: 0000000000000000 R09: 0000000000000000 [ 189.451917][T11142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 189.451922][T11142] R13: 00007f2dd69c6038 R14: 00007f2dd69c5fa0 R15: 00007ffd62a17a88 [ 189.451933][T11142] [ 189.451936][T11142] [ 189.919181][T11142] Allocated by task 8404: [ 189.923501][T11142] kasan_save_track+0x3e/0x80 [ 189.928168][T11142] __kasan_slab_alloc+0x6c/0x80 [ 189.933015][T11142] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 189.938457][T11142] xfrm_state_alloc+0x24/0x2f0 [ 189.943204][T11142] __find_acq_core+0x8a7/0x1c00 [ 189.948030][T11142] xfrm_find_acq+0x78/0xa0 [ 189.952452][T11142] xfrm_alloc_userspi+0x6b3/0xc90 [ 189.957465][T11142] xfrm_user_rcv_msg+0x7a3/0xab0 [ 189.962392][T11142] netlink_rcv_skb+0x208/0x470 [ 189.967228][T11142] xfrm_netlink_rcv+0x79/0x90 [ 189.971901][T11142] netlink_unicast+0x82f/0x9e0 [ 189.976669][T11142] netlink_sendmsg+0x805/0xb30 [ 189.981408][T11142] __sock_sendmsg+0x219/0x270 [ 189.986095][T11142] ____sys_sendmsg+0x505/0x830 [ 189.990837][T11142] ___sys_sendmsg+0x21f/0x2a0 [ 189.995497][T11142] __x64_sys_sendmsg+0x19b/0x260 [ 190.000425][T11142] do_syscall_64+0xfa/0x3b0 [ 190.004925][T11142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.010800][T11142] [ 190.013108][T11142] Freed by task 8573: [ 190.017061][T11142] kasan_save_track+0x3e/0x80 [ 190.021730][T11142] kasan_save_free_info+0x46/0x50 [ 190.026764][T11142] __kasan_slab_free+0x5b/0x80 [ 190.031598][T11142] kmem_cache_free+0x18f/0x400 [ 190.036347][T11142] xfrm_state_gc_task+0x52d/0x6b0 [ 190.041358][T11142] process_scheduled_works+0xae1/0x17b0 [ 190.046886][T11142] worker_thread+0x8a0/0xda0 [ 190.051461][T11142] kthread+0x70e/0x8a0 [ 190.055516][T11142] ret_from_fork+0x3f9/0x770 [ 190.060083][T11142] ret_from_fork_asm+0x1a/0x30 [ 190.064838][T11142] [ 190.067140][T11142] The buggy address belongs to the object at ffff88805c384cc0 [ 190.067140][T11142] which belongs to the cache xfrm_state of size 928 [ 190.081083][T11142] The buggy address is located 816 bytes inside of [ 190.081083][T11142] freed 928-byte region [ffff88805c384cc0, ffff88805c385060) [ 190.094860][T11142] [ 190.097168][T11142] The buggy address belongs to the physical page: [ 190.103567][T11142] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88805c384cc0 pfn:0x5c384 [ 190.113630][T11142] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 190.122113][T11142] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 190.129655][T11142] page_type: f5(slab) [ 190.133625][T11142] raw: 00fff00000000040 ffff888145eca500 dead000000000122 0000000000000000 [ 190.142205][T11142] raw: ffff88805c384cc0 00000000800f000b 00000000f5000000 0000000000000000 [ 190.150779][T11142] head: 00fff00000000040 ffff888145eca500 dead000000000122 0000000000000000 [ 190.159433][T11142] head: ffff88805c384cc0 00000000800f000b 00000000f5000000 0000000000000000 [ 190.168091][T11142] head: 00fff00000000002 ffffea000170e101 00000000ffffffff 00000000ffffffff [ 190.176752][T11142] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 190.185401][T11142] page dumped because: kasan: bad access detected [ 190.191804][T11142] page_owner tracks the page as allocated [ 190.197507][T11142] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6582, tgid 6580 (syz.2.172), ts 93316966557, free_ts 93298500705 [ 190.216502][T11142] post_alloc_hook+0x240/0x2a0 [ 190.221254][T11142] get_page_from_freelist+0x21e4/0x22c0 [ 190.226809][T11142] __alloc_frozen_pages_noprof+0x181/0x370 [ 190.232595][T11142] alloc_pages_mpol+0x232/0x4a0 [ 190.237429][T11142] allocate_slab+0x8a/0x370 [ 190.241914][T11142] ___slab_alloc+0xbeb/0x1410 [ 190.246579][T11142] kmem_cache_alloc_noprof+0x283/0x3c0 [ 190.252020][T11142] xfrm_state_alloc+0x24/0x2f0 [ 190.256765][T11142] xfrm_add_sa+0x17d1/0x4070 [ 190.261333][T11142] xfrm_user_rcv_msg+0x7a3/0xab0 [ 190.266265][T11142] netlink_rcv_skb+0x208/0x470 [ 190.271008][T11142] xfrm_netlink_rcv+0x79/0x90 [ 190.275664][T11142] netlink_unicast+0x82f/0x9e0 [ 190.280411][T11142] netlink_sendmsg+0x805/0xb30 [ 190.285147][T11142] __sock_sendmsg+0x219/0x270 [ 190.289809][T11142] ____sys_sendmsg+0x505/0x830 [ 190.294552][T11142] page last free pid 6568 tgid 6568 stack trace: [ 190.300878][T11142] __free_frozen_pages+0xbc4/0xd30 [ 190.305968][T11142] free_large_kmalloc+0x13a/0x1f0 [ 190.310985][T11142] device_release+0x99/0x1c0 [ 190.315558][T11142] kobject_put+0x22b/0x480 [ 190.319970][T11142] netdev_run_todo+0xd2e/0xea0 [ 190.324731][T11142] tun_chr_close+0x13c/0x1c0 [ 190.329384][T11142] __fput+0x44c/0xa70 [ 190.333376][T11142] task_work_run+0x1d4/0x260 [ 190.337949][T11142] exit_to_user_mode_loop+0xec/0x110 [ 190.343232][T11142] do_syscall_64+0x2bd/0x3b0 [ 190.347817][T11142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.353688][T11142] [ 190.355991][T11142] Memory state around the buggy address: [ 190.361608][T11142] ffff88805c384e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 190.369661][T11142] ffff88805c384f00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 190.377713][T11142] >ffff88805c384f80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 190.385749][T11142] ^ [ 190.393440][T11142] ffff88805c385000: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 190.401480][T11142] ffff88805c385080: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 190.409516][T11142] ================================================================== [ 190.417772][T11142] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 190.424998][T11142] CPU: 0 UID: 0 PID: 11142 Comm: syz.2.1651 Not tainted syzkaller #0 PREEMPT(full) [ 190.434372][T11142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 190.444436][T11142] Call Trace: [ 190.447722][T11142] [ 190.450658][T11142] dump_stack_lvl+0x99/0x250 [ 190.455258][T11142] ? __asan_memcpy+0x40/0x70 [ 190.459848][T11142] ? __pfx_dump_stack_lvl+0x10/0x10 [ 190.465040][T11142] ? __pfx__printk+0x10/0x10 [ 190.469631][T11142] vpanic+0x281/0x750 [ 190.473613][T11142] ? __pfx_vpanic+0x10/0x10 [ 190.478113][T11142] ? irqentry_exit+0x74/0x90 [ 190.482697][T11142] panic+0xb9/0xc0 [ 190.486403][T11142] ? __pfx_panic+0x10/0x10 [ 190.490806][T11142] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 190.496687][T11142] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 190.502596][T11142] ? xfrm_state_find+0x2cf2/0x5400 [ 190.507703][T11142] check_panic_on_warn+0x89/0xb0 [ 190.512644][T11142] ? xfrm_state_find+0x2cf2/0x5400 [ 190.517761][T11142] end_report+0x78/0x160 [ 190.522015][T11142] kasan_report+0x129/0x150 [ 190.526513][T11142] ? xfrm_state_find+0x2cf2/0x5400 [ 190.531623][T11142] xfrm_state_find+0x2cf2/0x5400 [ 190.536570][T11142] ? __lock_acquire+0xab9/0xd20 [ 190.541422][T11142] ? validate_chain+0x897/0x2140 [ 190.546364][T11142] ? xfrm_state_find+0x1da/0x5400 [ 190.551385][T11142] ? __pfx_xfrm_state_find+0x10/0x10 [ 190.556666][T11142] xfrm_resolve_and_create_bundle+0x768/0x2f80 [ 190.562833][T11142] ? xfrm_policy_lookup_bytype+0x2a7/0x1250 [ 190.568730][T11142] ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10 [ 190.575325][T11142] ? xfrm_policy_lookup_bytype+0x123/0x1250 [ 190.581224][T11142] ? xfrm_policy_lookup_bytype+0x11ef/0x1250 [ 190.587212][T11142] ? xfrm_expand_policies+0x41f/0x6a0 [ 190.592609][T11142] xfrm_lookup_with_ifid+0x58a/0x1a70 [ 190.597982][T11142] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 190.603780][T11142] ? __asan_memset+0x22/0x50 [ 190.608378][T11142] xfrm_lookup_route+0x3c/0x1c0 [ 190.613218][T11142] ip_tunnel_xmit+0x96b/0x2390 [ 190.617978][T11142] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 190.623163][T11142] ? gre_build_header+0x31c/0xa40 [ 190.628173][T11142] ? __pfx_gre_build_header+0x10/0x10 [ 190.633530][T11142] ? iptunnel_handle_offloads+0x2fd/0x630 [ 190.639261][T11142] ipgre_xmit+0x89e/0xc50 [ 190.643578][T11142] ? __pfx_ipgre_xmit+0x10/0x10 [ 190.648420][T11142] dev_hard_start_xmit+0x2d7/0x830 [ 190.653531][T11142] __dev_queue_xmit+0x1b8d/0x3b50 [ 190.658540][T11142] ? do_syscall_64+0xfa/0x3b0 [ 190.663202][T11142] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.669254][T11142] ? __dev_queue_xmit+0x27b/0x3b50 [ 190.674356][T11142] ? __pfx___dev_queue_xmit+0x10/0x10 [ 190.679720][T11142] ? rcu_is_watching+0x15/0xb0 [ 190.684477][T11142] ? pskb_expand_head+0xaa0/0x1150 [ 190.689574][T11142] ? __bpf_redirect+0x56d/0xe40 [ 190.694413][T11142] __bpf_tx_skb+0x18e/0x260 [ 190.698902][T11142] bpf_clone_redirect+0x272/0x3d0 [ 190.703916][T11142] ? bpf_test_run+0x197/0x7b0 [ 190.708580][T11142] bpf_prog_1eda3e3d4f38ab1d+0x5f/0x68 [ 190.714024][T11142] ? preempt_schedule+0xae/0xc0 [ 190.718859][T11142] ? bpf_test_run+0x197/0x7b0 [ 190.723524][T11142] ? preempt_schedule_common+0x83/0xd0 [ 190.728969][T11142] ? preempt_schedule+0xae/0xc0 [ 190.733805][T11142] ? __pfx_preempt_schedule+0x10/0x10 [ 190.739164][T11142] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 190.745215][T11142] ? __local_bh_disable_ip+0xf1/0x190 [ 190.751004][T11142] ? __pfx___cant_migrate+0x10/0x10 [ 190.756187][T11142] ? __local_bh_enable_ip+0x12d/0x1c0 [ 190.761555][T11142] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 190.767294][T11142] ? bpf_test_timer_continue+0x136/0x350 [ 190.772940][T11142] bpf_test_run+0x315/0x7b0 [ 190.777453][T11142] ? __pfx_bpf_test_run+0x10/0x10 [ 190.782567][T11142] ? bpf_prog_test_run_skb+0x6ac/0x1560 [ 190.788132][T11142] ? convert___skb_to_skb+0x3d/0x590 [ 190.793409][T11142] bpf_prog_test_run_skb+0xb30/0x1560 [ 190.798770][T11142] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 190.804561][T11142] bpf_prog_test_run+0x2c7/0x340 [ 190.809575][T11142] __sys_bpf+0x581/0x870 [ 190.813806][T11142] ? __pfx___sys_bpf+0x10/0x10 [ 190.818563][T11142] ? rcu_is_watching+0x15/0xb0 [ 190.823320][T11142] __x64_sys_bpf+0x7c/0x90 [ 190.827719][T11142] do_syscall_64+0xfa/0x3b0 [ 190.832202][T11142] ? lockdep_hardirqs_on+0x9c/0x150 [ 190.837387][T11142] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.843458][T11142] ? clear_bhb_loop+0x60/0xb0 [ 190.848118][T11142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.853998][T11142] RIP: 0033:0x7f2dd678ebe9 [ 190.858404][T11142] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.877999][T11142] RSP: 002b:00007f2dd76e8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 190.886404][T11142] RAX: ffffffffffffffda RBX: 00007f2dd69c5fa0 RCX: 00007f2dd678ebe9 [ 190.894357][T11142] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 190.902312][T11142] RBP: 00007f2dd6811e19 R08: 0000000000000000 R09: 0000000000000000 [ 190.910264][T11142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 190.918239][T11142] R13: 00007f2dd69c6038 R14: 00007f2dd69c5fa0 R15: 00007ffd62a17a88 [ 190.926202][T11142] [ 190.929473][T11142] Kernel Offset: disabled [ 190.933779][T11142] Rebooting in 86400 seconds..