last executing test programs: 2m53.827744315s ago: executing program 1 (id=10349): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@gettaction={0x174, 0x32, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x44, 0x1, [{0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fffffff}}, {0x10, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x5e20}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc000}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x64, 0x1, [{0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x14, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x80, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5f2}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8c0}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1ff}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffd}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_gd=@TCA_ACT_TAB={0x0, 0x1, [{0x0, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x5}}, {0x0, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'vlan\x00'}}, {0x0, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x5bf43fb6}}, {0x0, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x9}}, {0x0, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'xt\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x7}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0xffcc}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {}, {0x8, 0x4}}}, 0x24}}, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r3, 0x111, 0x2, 0x0, 0x4) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="af75355d1696"}) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @random="c4bc9cac9686", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @local, @mcast2, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00', 0x0}) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000740)=@xdp={0x2c, 0x0, r7, 0x42}, 0x80, &(0x7f0000000cc0)=[{&(0x7f00000002c0)="27030200dd0f14000e00003c0ff000800800ff880000000200000003125ce882cbf490d908f1523f000000002d9c", 0x2e}], 0x1}, 0x8bb3a321efc09a) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000008000000"], 0x14}}, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x1, 0x20}, 0xc) 2m50.298738685s ago: executing program 1 (id=10361): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = socket(0x2, 0x80805, 0x0) close(0x3) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES16=r1], 0xb8}}, 0x0) r3 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40088a01, &(0x7f0000000000)) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r3, 0x40189429, &(0x7f0000000040)={0x1, 0x38, 0xef}) socket(0x1, 0x1, 0x7) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000580)={0x40000008}) socket$inet6(0xa, 0x805, 0x0) sendmmsg$inet_sctp(r1, &(0x7f0000003700)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x30, 0x801}, {&(0x7f0000000340)=@in={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f00000035c0)=[{&(0x7f00000022c0)="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", 0x1000}, {&(0x7f0000003300)="ebc8b01da3ec0cd0b11743c8005e3e51548a797ba033f3101b2e45e50e7466df2e94141379b51bf789c3d05551d1", 0x2e}, {&(0x7f0000003340)="69ac4825dce56d449995e6ea8747e3b471245198d21021ab96ec9e1d633a9d1d9c7d02c6c5a292b166c7aba7e29337cb3f23f211768c1d0a9a4a776691e2cf15e6695f5bceea03fe68c16ad40db252bea1db52fb8489a7ce0f72e535fa11b6baa2d8f7b3185179593ef8fa7cfc5cf2976aff5186d2b3cd38f745973a8a0a99df90374afd3a98973a6987a752ec740d330134ee6cab9acf72bfed50", 0x9b}, {&(0x7f0000003400)="0ed684b7f739cc7865bd58766f6b4725f49a5d1de6a997200e60618d5863c01d01a95bbaf388a8df1ca78a0599a5869efc0b612936aaa39a471b02d2c7382ca5ff69a8cde3a351904472f5440c41f7c79b2f0e38850a979f6725d06a9f92ddf3b5c60482ad96e6dbc5ed371c9739a5152c144a679e8662cc46ba8ee9e1327a1cbc3aa113e04bfe9e6bf38558a16911ca728098d1ffd6a820a97db2651febaeb0d580c0474640a27d593b1f7b6577ab1600e10dab02c492c5d96c020cd2cb2a975be1bc6c91621ce84b6070dedea687fc", 0xd0}, {&(0x7f0000003500)="610732ce662bc889a812dad2663b9ed13f82408750002276536c76257d6bcfefa784b8b3b491c1cf04ed544a2417f0ff8763db2d71e912069641e82bd8b4446dfca2abdf9345414f7f537fd1e013f29de9d0e69f64f3caf823dc173893a711da3ab51fd904cf7d4721f2ff56bccb932d75", 0x71}, {&(0x7f0000003580)="e7b915cebf83f59317c460b375debda69d56ad710c663a379bf402b583bcf89e206f3dfe720d", 0x26}], 0x6, &(0x7f0000003640)=ANY=[@ANYBLOB="20210000000b4b000000000002000000050003020400000000000000", @ANYRES32=0x0, @ANYBLOB="180000000000000084000000000000000500030005000500180000000000000084000000070000007f0000010000000018000000000000008400000007000000ac14141a000000002000000000000000840000000200000006000d800101000001000000", @ANYRES32=0x0], 0x88, 0x40000}], 0x2, 0x0) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000300)=@o_path={&(0x7f00000002c0)='./file0\x00', 0x0, 0x8, r3}, 0x18) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="ce60892a211bed5f370000", @ANYRES32=r4, @ANYBLOB="1396b5ab98e2e04c8e750caae8456b20900f625e44f5f8367adc7612ebfdc7e77fb8f9a8f9df4e755197e2e72e00009121670fa0078a922e8e3af5fbece1746c62741f630d81a0f962c1136e15c77bb163a040618a44e7c6b56b724a6e9ee604804999b33f78120a524d3dee0918cecb448c9eb028173fa543d3601a97fda8ae11172dc6f106f5f8d7adeb0c92424d6e6017bb51", @ANYRES64=0x0], 0x20) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2802, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0x25ffdbfd, {0x0, 0x0, 0x0, r8, {0xb, 0x4}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x6, 0x1, 0xff82}, {0x0, 0x3, 0x0, 0x4, 0x6, 0x0, 0x2}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) r10 = socket$kcm(0x11, 0x3, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r11) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r10, &(0x7f00000000c0)={&(0x7f0000000440)=@xdp={0x2c, 0x7, r12, 0x4003e}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000600)="ab437427", 0x4}], 0x1}, 0x8014) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x12, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000008f000000000000000b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf090000000000005509010000000000950000000000000018200000", @ANYRES32=r5, @ANYBLOB="000000000100000025000400fcffffffbc91100000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x2f}, 0x94) 2m49.483852057s ago: executing program 1 (id=10368): syz_emit_ethernet(0x57, &(0x7f00000000c0)={@broadcast, @multicast, @void, {@mpls_mc={0x8848, {[{0x54ba, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x2, 0x0, 0x1}], @ipv4=@tipc={{0x5, 0x4, 0x1, 0x7, 0x3d, 0x65, 0x0, 0x2, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @payload_named={{{{{0x29, 0x0, 0x0, 0x0, 0x1, 0xa, 0x1, 0x2, 0x5, 0x0, 0x2, 0x1, 0x0, 0x2, 0x40, 0x1000, 0x4, 0x4e22, 0x4e21}, 0x1, 0x3}, 0x0, 0x4}}, [0x0]}}}}}}, 0x0) 2m49.246859311s ago: executing program 1 (id=10371): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) sendmsg$can_bcm(r3, 0x0, 0x4008000) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=ANY=[@ANYBLOB="08010200", @ANYRES16=r1, @ANYBLOB="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"], 0x108}}, 0x0) r4 = socket(0x840000000002, 0x3, 0x100) setsockopt$WPAN_SECURITY_LEVEL(r4, 0x0, 0x2, &(0x7f0000000040)=0x5, 0x1) getsockopt$WPAN_SECURITY_LEVEL(r4, 0x0, 0x2, 0x0, &(0x7f0000000300)) syz_emit_ethernet(0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60ff00f500280600fe8000000000000000000000000000aafe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a0000000907800001d0200000000000000000000d900b070a10000000000000000"], 0x0) 2m48.155799743s ago: executing program 1 (id=10381): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="99", 0x1}], 0x1}}], 0x2, 0x48000) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000400)={0x93de, 0x1, 0x0, 0x3, 0x1ff, 0x7, 0xdff8, 0xb, r1}, 0x20) (async, rerun: 32) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r1, 0x2}, 0x8) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000000000007b108a000000000004000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) 2m47.447796057s ago: executing program 1 (id=10389): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180000002e000100000000000000000004001980040010"], 0x18}], 0x1, 0x0, 0x0, 0x84}, 0x300) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xc0, 0x0) ioctl$TUNGETVNETLE(r2, 0x800454dd, &(0x7f00000000c0)) 2m34.147820797s ago: executing program 4 (id=10533): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x138, r0, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffff9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd4}]}]}, @TIPC_NLA_BEARER={0xb8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xe54, @remote, 0xfffffffc}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x100}}}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x52813c11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6a}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast1}}}}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1ac}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x4801}, 0x4040080) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000240)='\xff\xff', 0x200000, &(0x7f0000000280)={@align, {0x1df, 0x10, 0xfffffffe, 0x9}}, 0xfffffff7, &(0x7f00000002c0), &(0x7f0000000300)=0x2}) syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40010}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x80) (async) sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40010}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r3) connect$ax25(r1, &(0x7f0000000500)={{0x3, @bcast}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r3, 0xf502, 0x0) close(r1) ioctl$FS_IOC_GETVERSION(r3, 0x80087601, &(0x7f0000000580)) (async) ioctl$FS_IOC_GETVERSION(r3, 0x80087601, &(0x7f0000000580)) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r3, 0x40786e88, &(0x7f0000000840)={{&(0x7f00000005c0)=[{0x6, 0x27, 0x3, {0x2a0, 0x4}, 0x7fff, 0xfffffffffffffffb, 0x7fffffff}], 0x1, 0x40, 0x9, 0x7ff}, {&(0x7f0000000600)=[{0x9, 0x2}, {0x0, 0x10}, {0x100000001, 0x5}, {0x20, 0x8}, {0x10000, 0x6}, {0x7, 0x3ff}], 0x6, 0x10, 0x6}, {&(0x7f0000000680)=[0x3, 0x200, 0x101, 0x9], 0x4, 0x8, 0x7}, {&(0x7f00000006c0)=[{0x9, 0x7, 0x4, 0x8, 0xffffffff}, {0x2d, 0x2, 0x5ce708f0, 0x5, 0xad2f}, {0x1a, 0xca, 0x2, 0x5, 0x6}, {0x100000000, 0x1ff, 0x8, 0xfffffffffffffff1, 0x80}, {0x8, 0x1, 0x7, 0x9, 0x6}, {0x7, 0x5, 0x9, 0x3, 0x2}, {0x4, 0x6, 0x3, 0x9, 0x1}], 0x7, 0x28, 0x1, 0x6}, {&(0x7f0000000800)=[0x80, 0x1ff, 0x3c2, 0x10, 0x0, 0x9], 0x6, 0x8, 0x3, 0x8000000000000000}}) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000900), r1) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x89a02938c81a4456}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, r4, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x200}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000080) setsockopt$MRT6_DONE(r1, 0x29, 0xc9, 0x0, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, &(0x7f0000000a00)={0x15}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000ec0)={r1, 0xe0, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000c00)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x6, &(0x7f0000000c40)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000c80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x9d, &(0x7f0000000cc0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000d00), &(0x7f0000000d40), 0x8, 0x29, 0x8, 0x8, &(0x7f0000000d80)}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001180)={0x6, 0x18, &(0x7f0000000f80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_idx={0x18, 0x7, 0x5, 0x0, 0x7}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @map_val={0x18, 0xb, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x8}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001040)='GPL\x00', 0x10db9392, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000001080)={0x9, 0x5}, 0x8, 0x10, &(0x7f00000010c0)={0x5, 0x10, 0xffffffff, 0x1000}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000001100)=[r1, r1, r1, r1, r1, r1, r1], &(0x7f0000001140)=[{0x5, 0x2, 0xb, 0x8}, {0x2, 0x1, 0x7, 0xc}], 0x10, 0x100}, 0x94) (async) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001180)={0x6, 0x18, &(0x7f0000000f80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_idx={0x18, 0x7, 0x5, 0x0, 0x7}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @map_val={0x18, 0xb, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x8}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001040)='GPL\x00', 0x10db9392, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000001080)={0x9, 0x5}, 0x8, 0x10, &(0x7f00000010c0)={0x5, 0x10, 0xffffffff, 0x1000}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000001100)=[r1, r1, r1, r1, r1, r1, r1], &(0x7f0000001140)=[{0x5, 0x2, 0xb, 0x8}, {0x2, 0x1, 0x7, 0xc}], 0x10, 0x100}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x1b, 0x2d, &(0x7f0000000a40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@btf_id={0x18, 0x5, 0x3, 0x0, 0x5}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffe01}, @jmp={0x5, 0x1, 0xb, 0x1, 0x5, 0x0, 0xfffffffffffffffc}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @cb_func={0x18, 0x5}, @jmp={0x5, 0x1, 0x9, 0x9, 0x6, 0x6, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @call={0x85, 0x0, 0x0, 0x46}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000bc0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x3b, '\x00', r5, @fallback=0x33, r1, 0x8, &(0x7f0000000f00)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000f40)={0x0, 0x1, 0x4, 0x80}, 0x10, 0xffffffffffffffff, r6, 0x9, 0x0, &(0x7f0000001240)=[{0x3, 0x4, 0x10, 0x6}, {0x3, 0x4, 0x1}, {0x0, 0x4, 0xe, 0x4}, {0x1, 0x2, 0x2, 0x4}, {0x2, 0x3, 0xf, 0x9}, {0x4, 0x4, 0x5, 0x4}, {0x0, 0x3, 0x6, 0x2}, {0x3, 0x3, 0x10}, {0x5, 0x3, 0xa, 0x6}], 0x10, 0x6}, 0x94) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x1b, 0x2d, &(0x7f0000000a40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@btf_id={0x18, 0x5, 0x3, 0x0, 0x5}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffe01}, @jmp={0x5, 0x1, 0xb, 0x1, 0x5, 0x0, 0xfffffffffffffffc}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @cb_func={0x18, 0x5}, @jmp={0x5, 0x1, 0x9, 0x9, 0x6, 0x6, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @call={0x85, 0x0, 0x0, 0x46}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000bc0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x3b, '\x00', r5, @fallback=0x33, r1, 0x8, &(0x7f0000000f00)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000f40)={0x0, 0x1, 0x4, 0x80}, 0x10, 0xffffffffffffffff, r6, 0x9, 0x0, &(0x7f0000001240)=[{0x3, 0x4, 0x10, 0x6}, {0x3, 0x4, 0x1}, {0x0, 0x4, 0xe, 0x4}, {0x1, 0x2, 0x2, 0x4}, {0x2, 0x3, 0xf, 0x9}, {0x4, 0x4, 0x5, 0x4}, {0x0, 0x3, 0x6, 0x2}, {0x3, 0x3, 0x10}, {0x5, 0x3, 0xa, 0x6}], 0x10, 0x6}, 0x94) ioctl$XFS_IOC_FSINUMBERS(r7, 0xc0205867, &(0x7f00000015c0)={&(0x7f00000013c0)=0x9aa7, 0xd5, &(0x7f0000001400)=[{}, {}], &(0x7f0000001580)}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_SET(r8, &(0x7f0000001780)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001740)={&(0x7f0000001640)={0xc4, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x200}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xbe}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x81}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xacf}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xb}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x24040000}, 0x20000000) (async) sendmsg$TIPC_NL_BEARER_SET(r8, &(0x7f0000001780)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001740)={&(0x7f0000001640)={0xc4, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x200}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xbe}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x81}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xacf}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xb}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x24040000}, 0x20000000) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x3050, r3, 0x9f96000) sendmmsg(r1, &(0x7f00000017c0), 0x0, 0x20044000) (async) sendmmsg(r1, &(0x7f00000017c0), 0x0, 0x20044000) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r8, 0x8040942d, &(0x7f0000001800)) (async) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r8, 0x8040942d, &(0x7f0000001800)) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000001840)={0x0, 0x2, 0x10, 0x1, 0x3, 0x3, 0xf, 0x80, {0x0, @in={{0x2, 0x4e24, @loopback}}, 0xa, 0x242f, 0x4, 0x5, 0x3}}, &(0x7f0000001900)=0xb0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000001940)={r9, 0x60, 0x20}, &(0x7f0000001980)=0xc) (async) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000001940)={r9, 0x60, 0x20}, &(0x7f0000001980)=0xc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001b40)={'syztnl2\x00', &(0x7f0000001ac0)={'syztnl1\x00', r5, 0x4, 0x0, 0x1, 0x9, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x29}, 0x8, 0x20, 0xfffffffb}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x18, 0x6, &(0x7f00000019c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9b, 0x0, 0x0, 0x0, 0x6}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @generic={0x9, 0x9, 0x5, 0x0, 0x9}, @func={0x85, 0x0, 0x1, 0x0, 0x5}]}, &(0x7f0000001a00)='syzkaller\x00', 0xf324, 0x4a, &(0x7f0000001a40)=""/74, 0x41000, 0x8, '\x00', r10, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b80)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000001bc0)={0x5, 0xc, 0x9, 0x1}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000001c00)=[{0x4, 0x2, 0x3}, {0x4, 0x5, 0x3, 0x5}], 0x10, 0x7}, 0x94) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000001dc0)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001d80)={&(0x7f0000001d40)={0x24, 0x0, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x32f}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4084) 2m33.97769894s ago: executing program 4 (id=10536): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000000c0)={'wg2\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000300)={'gretap0\x00', &(0x7f0000000240)={'gre0\x00', r3, 0x7800, 0x40, 0x1, 0x2, {{0xb, 0x4, 0x2, 0x0, 0x2c, 0x68, 0x0, 0x6, 0x4, 0x0, @empty, @multicast1, {[@ssrr={0x89, 0x17, 0x73, [@multicast1, @broadcast, @loopback, @dev={0xac, 0x14, 0x14, 0x1b}, @remote]}]}}}}}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) (async) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x14, 0x7, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0xf7fe}}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x8000) socket(0x10, 0x3, 0x0) (async) r5 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=@gettclass={0x24, 0x2a, 0x1, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xfff2, 0xffff}, {0x7}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) 2m33.694295566s ago: executing program 4 (id=10539): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000e00)={0xa, 0x4e22, 0xde, @mcast1, 0x91}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x58, r6, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x10, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1000}]}]}, 0x58}}, 0x40) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r4, 0x89fb, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000040)={@mcast2, @empty, 0xf, 0x6}}) r7 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@get={0xe0, 0x13, 0x1, 0x0, 0x0, {{'xchacha20\x00'}}}, 0xe0}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2c, r2, 0x5, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_4ADDR={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) 2m33.566969132s ago: executing program 4 (id=10540): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x24, r2, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xfffa}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x40) sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x68, r2, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "bf97ccf40e6ae97b474173cff578dc45"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "7005ea17b9ae62d893fb4eda132c7cfb"}, @NL80211_ATTR_PMK={0x14, 0xfe, "a44c30ef4cc27fd0f15398615af0e194"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x68}, 0x1, 0x0, 0x0, 0x8080}, 0x2008001) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x5c, 0x10, 0x403, 0x0, 0x4, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_ALL_TARGETS={0x8, 0x1e}, @IFLA_BOND_DOWNDELAY={0x8, 0x5, 0xfffffffb}, @IFLA_BOND_ARP_ALL_TARGETS={0x8, 0xa, 0x1}, @IFLA_BOND_TLB_DYNAMIC_LB={0x5, 0x1b, 0xc}, @IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x32}]}}}]}, 0x5c}, 0x1, 0x2000000000000000}, 0x0) 2m33.296473634s ago: executing program 4 (id=10547): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x6, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000faffffff0000000000004000850000002c0000001800000004000000000000000700000095"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x27, 0xe, 0x0, &(0x7f0000000640)="ed7e17526b2d6f70ac1ae867fd2a", 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r2, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@cgroup, 0x6, 0x1, 0x591, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x0}, 0x40) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r4, 0xe0, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r5}, 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)={@fallback=r0, r1, 0x24, 0x30, r2, @void, @void, @void, @value=r5, r3}, 0x20) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000480), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), r7) sendmsg$IEEE802154_LLSEC_SETPARAMS(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x30, r8, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x1}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x79}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0xc001}, 0x40000) sendmsg$NLBL_CIPSOV4_C_REMOVE(r7, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8020}, 0x4000000) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, 0x0, 0x4040040) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, 0x0, 0x8000) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYRESDEC=r0, @ANYRESDEC=r6, @ANYBLOB=',\x00\x00\x00', @ANYRES8=r6, @ANYRES8=r0], 0x2c}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) 2m33.159285092s ago: executing program 4 (id=10548): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001900)=@newtaction={0xec0, 0x30, 0xb, 0x0, 0x0, {}, [{0xeac, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0xe60, 0x2, 0x0, 0x0, {{0xa}, {0xe34, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x1}}}, @TCA_PEDIT_KEYS_EX={0x10, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xec0}}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfd, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) openat$cgroup_ro(r1, &(0x7f0000000040)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) 2m32.258713734s ago: executing program 32 (id=10389): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180000002e000100000000000000000004001980040010"], 0x18}], 0x1, 0x0, 0x0, 0x84}, 0x300) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xc0, 0x0) ioctl$TUNGETVNETLE(r2, 0x800454dd, &(0x7f00000000c0)) 2m18.083701012s ago: executing program 33 (id=10548): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001900)=@newtaction={0xec0, 0x30, 0xb, 0x0, 0x0, {}, [{0xeac, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0xe60, 0x2, 0x0, 0x0, {{0xa}, {0xe34, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x1}}}, @TCA_PEDIT_KEYS_EX={0x10, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xec0}}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfd, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) openat$cgroup_ro(r1, &(0x7f0000000040)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) 17.898595637s ago: executing program 3 (id=11910): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x2, 0x60b924, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2}, {0x6, 0xb}, {0xa, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x2400c0e0}, 0x20004080) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r5, 0x50dc85624ea6cf59, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, r5, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xeaaa}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1a7a6c58}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xe}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x14}, 0x4040) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000002e00090027097000000000220400000008000c"], 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 17.475110774s ago: executing program 3 (id=11915): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @remote}}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xac2f}]}, 0x64}, 0x1, 0x0, 0x0, 0x404c896}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000008c0)={0x50, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000080)={@val={0x0, 0xa00}, @val={0x3, 0x4, 0x8001, 0xe21, 0x4, 0xa}, @arp=@generic={0x205, 0x88f7, 0x6, 0x0, 0xa, @remote, "", @random="915503c64e03"}}, 0x22) 17.131259268s ago: executing program 3 (id=11919): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async, rerun: 64) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async, rerun: 32) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) (rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)}, 0x40000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001a00)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) (async, rerun: 64) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async, rerun: 64) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r8, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) (async, rerun: 32) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r8, 0x84, 0x17, &(0x7f0000000600)=ANY=[@ANYRES32=0x0, @ANYBLOB="b200aa00fd6150e383386090195a4806a6f217ff0cd0afa8b714ad43ee8da7cc9ccfa67fc988c29b8067a5d86d81b7caa12a8f71fcf3ef16c557493b0be2d1007b15f96e83b9979617070cf5192c00385e42597f338f56a6872f72d0c77c80cbb90e99754ee2868919b157b7087c770670a7e885bec929567fed190c2eded2f69a17dd5dbde6650b73582059a51637ffcc8b5acc8be07a96255c891c37ff51425389e6a1"], 0xb2) (async, rerun: 32) r9 = socket(0x10, 0x3, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r12 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000900), 0xffffffffffffffff) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_wireguard(r10, 0x8933, &(0x7f0000000980)={'wg0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r11, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000009c0)={0x50, r12, 0x1, 0x70bd29, 0x25dfdbff, {}, [@WGDEVICE_A_PEERS={0x34, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PROTOCOL_VERSION={0x8, 0xa, 0x21}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r13}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async, rerun: 64) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="953a04"], 0x24}}, 0x0) (rerun: 64) recvmmsg$unix(r9, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000001100)=""/263, 0x107}, {&(0x7f0000004480)=""/4098, 0x1002}, {&(0x7f0000000740)=""/13, 0xd}, {&(0x7f00000003c0)=""/97, 0x61}, {&(0x7f00000004c0)=""/113, 0x71}, {&(0x7f0000000540)=""/130, 0x82}, {&(0x7f00000009c0)=""/123, 0x7b}], 0x7}}], 0x1, 0x40, 0x0) (async, rerun: 32) write(r9, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) (async, rerun: 32) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r8, 0xc0385868, &(0x7f0000000200)={r8, &(0x7f00000000c0)='$[/\x00', 0x200, &(0x7f0000000140)={@_ha_fsid={[0xfffffffd, 0x8]}, {0x4, 0x219, 0x3, 0x8}}, 0x6, &(0x7f0000000180), &(0x7f00000001c0)=0xe537}) (async) ioctl$sock_FIOGETOWN(r8, 0x8903, &(0x7f0000000340)) (async) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r14, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r14, 0x6, 0xe, &(0x7f0000000880)={@in6={{0xa, 0x4e20, 0x3333, @loopback, 0x1000}}, 0x0, 0x0, 0x1e, 0x0, "bb353738cb473fc7c9f1cf53b6a7b4e24740bd4c0b42a21d7214bf92594925208a0e2f964e654dc534a6324d4993fcf19b2df3ee818a118a7c49462189316d556d2ccd00"}, 0xd8) 16.967126233s ago: executing program 3 (id=11921): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4f}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x37}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x20, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xac}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r3) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r2) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r2) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r5, 0x800, 0x70bd25, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, [""]}, 0x28}}, 0xc44) sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)={0x38, r4, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {}, {0x1c, 0x18, {0x8003, @bearer=@l2={'eth', 0x3a, 'batadv_slave_0\x00'}}}}}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) socket$netlink(0x10, 0x3, 0xc) (async) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4f}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x37}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x20, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xac}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r3) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r2) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r2) (async) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r5, 0x800, 0x70bd25, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, [""]}, 0x28}}, 0xc44) (async) sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)={0x38, r4, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {}, {0x1c, 0x18, {0x8003, @bearer=@l2={'eth', 0x3a, 'batadv_slave_0\x00'}}}}}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) 16.825974569s ago: executing program 3 (id=11923): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001140)=@newtaction={0xb8, 0x30, 0x871a15abc695fb3d, 0x70bd2d, 0x0, {}, [{0xa4, 0x1, [@m_gact={0xa0, 0x8, 0x0, 0x0, {{0x9}, {0x64, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x3, 0x7, 0x8, 0x3}}, @TCA_GACT_PARMS={0x18, 0x2, {0x14, 0x0, 0x83094a636543ce70, 0x3, 0xf}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x14e6, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1dff, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x12be}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1616, 0x5}}]}, {0x14, 0x6, "9331a947ba0ce2e0a6cb281e37d45160"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x80000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r4 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r4, 0x8917, &(0x7f00000001c0)={'wg1\x00', {0x2, 0x0, @private}}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x0) sendto$packet(r6, &(0x7f0000000b80)="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", 0x180, 0x8001, 0x0, 0x0) recvmsg(r6, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000440)=""/242, 0xf2}, {&(0x7f00000022c0)=""/144, 0x90}], 0x2}, 0x40) r7 = getpid() sendmsg$unix(r4, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000004600)=[{&(0x7f0000003140)="fa", 0x1}], 0x1, &(0x7f00000046c0)=ANY=[@ANYBLOB="1c050000000000000000000002000000", @ANYRES32=r7, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="0000000010000000000000000100000001000000"], 0x30}, 0x0) r8 = getuid() r9 = getgid() r10 = getuid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000009c0)={0x0, 0x0, 0x0}, &(0x7f0000000a00)=0xc) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000ac0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000a40), &(0x7f0000000a80)='%pi6 \x00'}, 0x20) sendmsg$unix(r2, &(0x7f0000000b80)={&(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000940)=[{&(0x7f0000000180)="7eaa519d", 0x4}, {&(0x7f0000000380)="431743aa470484b68af869d126ebba0d018b306564d250f3ee01eb89ba88f25b1e83d022ab6a7cd061a583e9a18055c3bb3a1e5580ab60b54d50f3bdf65dcb407ba370c7bc8a16a0770fd0daa9a7e4a5985ea0602a5c6954adce4d0b7e3c3ea6896f548257685bca38a40d3c263a85ab227ef7790df19b53686ae9074d3b48a1516402c2eb16140021b97f8386fb890a82f759f7242fd0f15eece7936ce61505", 0xa0}, {&(0x7f0000000780)="dca8d72830566bb87b6a637a0b9b5417c80080043775021a221d3109443e67ff38c0dc1ce49ea5cf30456a924e27613e4aa0fe08da45260c918d14d47b2b2aa439a3d7e0240a94e7a2fb6315665d1b93eddd73", 0x53}, {&(0x7f0000000800)="0a13fe53399b75234904a4610a319c67df37cb955625002c90", 0x19}, {&(0x7f0000000840)="16b780e9bcdd70c61158f8b4b4beb0428d36afcd129af61f0e21d21de1705abf2ce0e75cd22ab55aef4fefc566fa6bc3640ffe57d6b79a1067e525e5c196ede2d1f18e464f4568b66346c513d40a48c63e9e2e8ac27ce86476451a383b60bbb2238bf0e0c03a1734b6624b8c66f8839c96d7e7088992db325b0c457853dfbc24a6cc17d6ebf221d448e416f350ea71cf6af74c060df4a52b629a63e5e325446f88e6107680e9fd687f886391732f80d7d9030531faa3431c1be0d1625e6d815ef7f39cf119256948615a84f5eb389f3562d840164798", 0xd6}], 0x5, &(0x7f0000000b00)=[@cred={{0x1c, 0x1, 0x2, {r7, r8, r9}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r10, r11}}}, @rights={{0x10}}, @rights={{0x20, 0x1, 0x1, [r2, r12, r0, r3]}}], 0x70}, 0xc0) ioctl$TUNSETLINK(r3, 0x400454cd, 0x20) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000640)={'ipvlan0\x00', 0x2000}) recvmsg$can_raw(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)=""/243, 0xf3}, {&(0x7f0000000300)=""/115, 0x73}], 0x2}, 0x0) sendmsg$xdp(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)="60481a316f1aa678318d8d77bf44cced0b70bfcbc4905b8152f20c18be2eeef743f54cb7a16bbb6e3bf2fbbe9ff7481627c2561e1a6c8b02f0eb88c7f32f68b9e2423a0fe87501577efd40b70965d66b09f2cdeb159d2d3d6c095271ce37fbf7fb3712f3e95b9aacc6c1af787c5bdcfcc9b313bd46d1fc3d148d86d5ffb261ace6c45c2fbdced8e4b45e4358b95d4212e53ef729d308e08ed3e683813c1dcac50bf343bc65be49dbd852caf9a2d0656abc82adf0651c4ac76bf558a3179de6c947fb553be50db8ba2860b2483934d5d39cbcc8bc393eb926dbdb8de385f7d627982072679d9853515e79", 0xea}, {&(0x7f00000005c0)="63311794932b42fa800fe297013ca7feab7756ef7824de8a320ce51a7d2a8f9354bbec77c836bc975b39c022940880a890aff150d32e9641e2ec516273f54e5b972dfa3ba0ce3d330c754f50784dd3d120ebfa42481477f49fb6de051c98a3aff4f0cb9f1ea7841c11fe0f25b2dd3f90d203d9c390a2031dffeb947bd6", 0x7d}], 0x2, 0x0, 0x0, 0x20000080}, 0x440000d0) 16.275305923s ago: executing program 3 (id=11929): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) (async) r2 = socket$kcm(0x11, 0x3, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0xc) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3d, &(0x7f0000000080)={0xb}, 0x8) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @empty}, 0x1c) (async) write(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0x7}, {0x4, 0xd}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000840)='\'', 0x1}], 0x1}, 0x4) 3.847915634s ago: executing program 6 (id=12040): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd700000000000010000000000000007410000001400180000000069623a6e6963766630def4fd"], 0x30}}, 0x0) (async) write$tun(r0, &(0x7f0000000100)={@val={0x0, 0x88b5}, @void, @eth={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @multicast, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x14, 0x65, 0x0, 0x1, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x21}, @empty}}}}}}, 0x26) 3.31300075s ago: executing program 6 (id=12044): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b40)=ANY=[@ANYBLOB="3c000000100001042cbd70000000000000000000", @ANYRES32=r1, @ANYBLOB="0900000000000000140075006e657464657673696d3000000000000008000a00", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x240088c4}, 0x4000054) r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000b80)=@newtaction={0x5c84, 0x30, 0x200, 0x70bd27, 0x25dfdbfd, {}, [{0x5c70, 0x1, [@m_pedit={0x5b40, 0x1a, 0x0, 0x0, {{0xa}, {0x5b0c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xee0, 0x2, {{{0x5, 0x1000, 0x10000000, 0x2, 0x9}, 0x5, 0x3, [{0xfffffffa, 0x80000001, 0x10000, 0x1, 0x1, 0x7fffffff}, {0xf, 0xffff52a4, 0x2, 0x1, 0x556, 0xb}, {0x3, 0xe680, 0x100, 0x9, 0x7, 0x7}, {0x2, 0x400, 0x3e, 0x100, 0x8265, 0x100}, {0x6, 0x8a, 0x6e1, 0x5, 0x0, 0x7f}, {0x4, 0x8001, 0x1, 0xc7, 0x4, 0x80000001}, {0x3ff, 0xd1, 0xe, 0x3, 0x9, 0xfff}, {0x4, 0x2, 0x351f7ecf, 0x2, 0x3, 0x5}]}, [{0x855, 0x9, 0x4, 0x401, 0x5, 0x1}, {0x7, 0x3, 0xb9ba, 0x8000, 0xfffffffa, 0x9}, {0xffff, 0x0, 0x80, 0x7, 0x80, 0x3ff}, {0x0, 0x4, 0x0, 0x4, 0x5, 0x5}, {0x3, 0x2, 0x6, 0x5, 0xd, 0x5}, {0x8, 0x8, 0x9, 0x9, 0x6, 0x8}, {0x2, 0x3, 0x7, 0x10, 0x400, 0x34d}, {0x1, 0x7f, 0x50000000, 0x7, 0xe1c, 0x7}, {0x8, 0x6, 0x800, 0x3, 0x9, 0x143b}, {0x6, 0x0, 0x80000001, 0x7ff, 0x6d61, 0x4}, {0xb8, 0x9, 0x948b, 0x52ba97e6, 0x10000, 0x7}, {0xe, 0x0, 0x8, 0x9, 0x1, 0x4}, {0x400, 0x6, 0x9, 0xf9d, 0x43b}, {0x0, 0x1, 0x7, 0x4, 0x9, 0x80000001}, {0x7fffffff, 0x3, 0xb, 0x8, 0x1, 0x8}, {0x6, 0x8, 0xe0000, 0xfffffffb, 0xebe, 0x8}, {0x0, 0x7, 0x10, 0x2, 0x1, 0x5}, {0x0, 0x38, 0x81, 0x81, 0xfffffffa, 0xbf1e}, {0x45, 0x0, 0x7, 0xaf4, 0x6, 0x1}, {0xc50, 0xff, 0x7df, 0x7, 0x1ff, 0x4000000}, {0xffff, 0x2, 0x5, 0xed9, 0x81, 0x8}, {0xd46, 0xea3, 0x8, 0x6, 0x6}, {0x7f, 0x5, 0x101, 0x9d, 0xb8, 0x7f}, {0x2, 0x7, 0x4c, 0x5, 0x2, 0x5}, {0x5, 0x8, 0x6, 0x6, 0x40, 0x8}, {0xfff, 0x8, 0x9, 0x1, 0x2, 0x7fff}, {0x0, 0x1, 0x10000, 0x1b, 0xd, 0x2}, {0x7ff, 0x7, 0x3, 0x4, 0x9, 0x2}, {0x8, 0xfffffffc, 0x19, 0xd, 0x3, 0xf21}, {0xffff, 0x8c, 0xffffff81, 0x10, 0x6, 0x1}, {0x0, 0x0, 0x49, 0x2, 0x401, 0x5}, {0x8, 0x800, 0x8, 0x101, 0xe, 0x200}, {0x30000000, 0x8, 0x7fffffff, 0x13, 0x8000}, {0x7, 0x53, 0x1ff, 0xbf7, 0x0, 0x9}, {0x1, 0x6, 0x7fff, 0x3, 0x6, 0xb}, {0x40, 0x9, 0x3, 0x8, 0x7, 0xfffffff9}, {0xfffffffe, 0x9, 0x81, 0x100, 0x5, 0xffffffff}, {0x3, 0x3, 0xffffffff, 0xfffffff8, 0x2, 0x28}, {0x6, 0x100, 0x6, 0xb, 0x8, 0x8}, {0x400, 0x0, 0x10001, 0x7, 0x0, 0x7fffffff}, {0x7fff, 0x3, 0x3, 0x0, 0x2, 0xf33}, {0x5, 0x8, 0x7fffffff, 0x7, 0x81, 0x9}, {0xfffffb1d, 0x2, 0x9, 0x2, 0x2280, 0x1}, {0x7, 0xfffffff0, 0xa77, 0x480000, 0x4, 0x4}, {0x5, 0x6, 0x5, 0x5, 0x8, 0x5}, {0xf, 0x3, 0x7, 0x4, 0x2, 0x2}, {0x5, 0x1000, 0x2c, 0x2, 0x2, 0x40}, {0x9, 0x400, 0xffffffff, 0x7d, 0xea, 0xec3b}, {0x8, 0x4, 0x7, 0x1, 0x7, 0xf}, {0x3, 0x7, 0xffffff00, 0x6, 0x10001, 0x9}, {0xfffffff9, 0xb, 0x6, 0x4fa, 0x0, 0x3}, {0xfffff34d, 0x5, 0x9, 0x1, 0x5, 0x40}, {0x1a12, 0x8, 0x40, 0xe8, 0xfffffffa, 0x4}, {0x7fff, 0x7, 0x3, 0xff, 0x5, 0x401}, {0x10001, 0x2b6be52c, 0x5, 0x4, 0x80, 0x6}, {0x78, 0x4, 0x2, 0x6, 0x7, 0x2}, {0xd4a, 0x18, 0xfffff001, 0xffff, 0x2, 0x4}, {0x4, 0x3, 0x5, 0xb6, 0xe06, 0x80000000}, {0x7fff, 0x0, 0xffffff51, 0x4, 0x10000, 0x2}, {0x2, 0x5, 0x34, 0x7, 0x6, 0x1}, {0xfffffffa, 0xf, 0x100, 0x400, 0x4, 0x9}, {0x2, 0x9, 0x7, 0x1, 0x1, 0xb}, {0x3, 0x5, 0xfffeffff, 0x8, 0xe, 0x3}, {0x3, 0x0, 0x4, 0x200, 0x3, 0x5}, {0x1, 0x1, 0x1, 0xff, 0x3, 0x5}, {0x7, 0x200, 0xa95, 0x5, 0xf0000000, 0x800}, {0x8, 0x8001, 0x1, 0x8, 0xcec, 0x4}, {0x8, 0x6, 0xfffffc01, 0x101, 0x9, 0x1}, {0x6, 0x3, 0x9, 0x8, 0x3, 0x1}, {0x2, 0x1, 0xfffffebe, 0x7, 0x0, 0x9}, {0x6, 0xfffffbff, 0xcd1, 0x1ff, 0x2, 0x8}, {0x26, 0x5, 0x1, 0xa1c5, 0x3, 0x9}, {0x2, 0x3, 0x2, 0x7, 0x5, 0x4}, {0x5aa1998d, 0x0, 0x8, 0xdbe, 0x72, 0x9}, {0x101, 0x8, 0x81, 0x4, 0xff, 0x6}, {0x9, 0xa, 0x2, 0x9, 0x6, 0xfffffffd}, {0x0, 0xa, 0x3, 0x3ff, 0xffff0001, 0xffffff11}, {0x1, 0x2, 0xa964, 0xa, 0xc}, {0xa, 0xff, 0xffffffff, 0x8, 0x6, 0xd5}, {0x3, 0x6, 0x9, 0x7, 0x1, 0x1fffe000}, {0x5, 0x9, 0x1, 0xfc3, 0xff, 0x2}, {0x7fffffff, 0x2, 0x7, 0x7, 0x8, 0x7}, {0x5, 0x5, 0x10, 0x2, 0x20000, 0x200}, {0x28, 0x8001, 0x9, 0xa, 0x0, 0x7}, {0x800, 0x3, 0x46, 0xfffffdc9, 0x80000000, 0x9}, {0x200, 0x4, 0xff, 0xb0, 0x3, 0x9}, {0x10001, 0x3ff, 0xe, 0x0, 0x8, 0x3b7}, {0x2, 0xe00, 0x6, 0x3, 0x9, 0x8}, {0x6, 0x65, 0xf741, 0xffff91e6, 0x9, 0x81}, {0x400, 0x3, 0x5, 0x4, 0x3, 0x7}, {0x10001, 0x3, 0x4, 0xaea8, 0x5, 0x4}, {0x0, 0x8, 0xbb1, 0x7, 0x8, 0x800}, {0x9, 0x1, 0x0, 0xf8, 0xffff6a02, 0xfffffffb}, {0x7, 0x3, 0xff000, 0x4, 0xf, 0x1}, {0x143e2837, 0x3, 0x0, 0x2, 0x4, 0x100}, {0xd3db75e8, 0x5, 0x4, 0x9, 0x7fff, 0xc}, {0x9, 0x10001, 0x5, 0x20, 0xf8, 0x5e77d49}, {0x9, 0x1, 0x3, 0x8, 0xfa, 0x3}, {0xfe, 0xc000000, 0x1, 0xf83, 0x1, 0xffffffff}, {0x40, 0x0, 0xfffffffa, 0x6, 0x5, 0x7fffffff}, {0x7c, 0x9, 0x4, 0x7, 0x6, 0x6}, {0x7fff, 0x7fff, 0xfff, 0x8, 0xa51, 0x5}, {0x6, 0x0, 0x3a7, 0x2e, 0x40, 0xfffffe00}, {0x0, 0x7, 0x4, 0x42, 0x10000, 0x4ba}, {0x3a30, 0x0, 0xd, 0x1, 0x0, 0x2}, {0x4, 0x9a, 0x8000, 0x3, 0xe, 0x180000}, {0x380000, 0x9, 0x3, 0x9, 0x1}, {0x4, 0x0, 0x1, 0x6, 0xfff, 0x1}, {0x8, 0x7, 0x3, 0xa, 0x0, 0x7}, {0x4, 0x2, 0x8001, 0xffff, 0x6, 0x1}, {0x3, 0x80, 0x1, 0x9, 0x9, 0x7}, {0xa00, 0xe, 0x7ff, 0x7ff, 0x8, 0x101}, {0x2, 0x7, 0x10, 0x2, 0x8, 0x8}, {0x1, 0x1, 0xa, 0x7, 0xa6, 0xffffffff}, {0x10001, 0x3ff, 0xfffff67a, 0xffffffff, 0x9, 0x1}, {0x2, 0x7, 0xfffffff9, 0xfffffffd, 0x7}, {0x6, 0x420a, 0x1ff, 0x8539, 0x7, 0x6}, {0x800, 0x47d0, 0x1ff, 0x1, 0x8, 0x9}, {0xe, 0x1, 0x5, 0x8000, 0x3ff, 0x6}, {0x81, 0x8000, 0x8, 0x9, 0x4, 0x8}, {0x8, 0x40, 0x5, 0x1f8000, 0x5, 0x8}, {0x81, 0x57, 0x1, 0xfffffffc, 0x6, 0x9b7}, {0xc4dd, 0x80000001, 0x8e, 0x1, 0x12, 0x6}, {0xff, 0x4, 0x0, 0x1c00, 0x0, 0x1}, {0x101, 0x81, 0x2, 0x401, 0x7, 0x5}, {0x5, 0x8000, 0xd, 0x4bfc4211, 0x7, 0x8}, {0x7, 0x8, 0x3, 0xffff, 0x1, 0x2}, {0x1ff, 0x200, 0xe5, 0x9, 0x3, 0x1ff}], [{0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {0x5}, {0x1, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {}, {0x4, 0x2}, {0x4}, {0x4}, {0x2, 0x1}, {0x3}, {0x1}, {0x3, 0x1}, {0x4, 0x1}, {}, {0x3}, {0x4, 0x1}, {0x1}, {}, {0x4, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x0, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5}, {0x5}, {0x5}, {0x2, 0x1}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x1, 0x1}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x5}, {0x2}, {0x5}, {0x2, 0x1}, {}, {0x5, 0x1}, {}, {0x2}, {0x1, 0x1}, {0x2}, {0x2}, {0x5}, {0x2}, {}, {}, {0x5}, {0x3}, {0x2}, {0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x7, 0x1}, {0x4}, {0x1, 0x1}, {}, {0x5}, {}, {0x7}, {0x4}, {0x1, 0x1}, {0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {}, {0x4}, {0x3, 0x1}, {0x5}, {0x5}, {0x2}, {0x5, 0x57ada487d58f73c8}, {0x3, 0x1}, {0x5, 0x1}, {0x4}, {0x3}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x164, 0x5, 0x0, 0x1, [{0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0x54, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}, @TCA_PEDIT_PARMS_EX={0xeb0, 0x4, {{{0x80000000, 0xd4ce, 0x6, 0xfffffffc, 0xf23}, 0x3, 0x1, [{0xd9b, 0x1, 0x5, 0x8, 0x7, 0xfffffffc}, {0x5d5, 0x4, 0x2, 0xc, 0x3, 0x8}, {0xffffffab, 0x9, 0x1, 0x100, 0x100, 0xa}, {0x100, 0x996, 0x7, 0x9, 0xffffffff, 0xfffffff7}, {0x3, 0xff, 0x8, 0x0, 0xffffffff, 0x4}, {0xffff69e1, 0x7, 0x6, 0xff00, 0x8, 0xfff}]}, [{0x465c, 0x8, 0x5, 0x4, 0x5, 0x8001}, {0x5, 0x180000, 0x4, 0x8, 0x7, 0x3}, {0xe, 0x3, 0x6, 0x800, 0x5, 0x3d97}, {0x0, 0x5, 0x8, 0x1, 0x9, 0x5}, {0x0, 0x6, 0x4, 0x7, 0x66, 0x8a0}, {0x8, 0x5, 0x3, 0x7, 0xc970, 0x80000000}, {0x2, 0x9, 0x2, 0x58000000, 0x6, 0x7f}, {0x40, 0x800, 0x40, 0x7, 0x9, 0x5}, {0x6, 0xfffffffb, 0x81, 0x2, 0x401, 0x9}, {0x8001, 0x101, 0x6, 0x9, 0x2, 0xd}, {0xffffc96e, 0xf, 0x70d, 0x4, 0x5, 0x7d2b}, {0xffffffff, 0x10000, 0x8, 0x0, 0x3, 0xfff}, {0x5, 0xd, 0x4, 0x6, 0x2, 0x73d2}, {0x1, 0x7, 0x200, 0x2, 0x5, 0x6}, {0xfffffffc, 0xd617, 0x40, 0x4, 0x0, 0x4}, {0x3, 0xf, 0x7, 0xffffffff, 0xa, 0x3}, {0x3, 0x6, 0x6, 0xbb5, 0xfffffffb, 0x1000}, {0x8000, 0xffff, 0x2, 0x5d46, 0x40800000, 0x800}, {0x6, 0x7, 0x1, 0x7ff, 0x18000000, 0x1}, {0xfffffff8, 0x3, 0x3, 0x8, 0x8000, 0x7}, {0x400, 0x7ff, 0x13e91cdf, 0x9, 0x81, 0x3}, {0x0, 0x1000, 0xfffffffd, 0x3ff, 0xa, 0xc20e}, {0x2, 0x2, 0x9, 0x8, 0xd, 0x5cf5}, {0x10000, 0x80, 0xffffffff, 0x4, 0x595, 0x10001}, {0x7, 0x3, 0x6, 0x4, 0x9, 0x200}, {0x5, 0x8, 0x3, 0x3, 0x3, 0x200}, {0xffffff33, 0x9, 0x1, 0x1, 0x81, 0x1000}, {0x7, 0x5, 0x7c, 0x9, 0x1683, 0x4}, {0x1, 0x1, 0x58, 0x5, 0x9, 0x8}, {0x8000, 0x8, 0x4, 0xffff, 0x8, 0x5}, {0x8, 0x4, 0x3, 0x8, 0x7f, 0x5}, {0x1, 0x8001, 0x7fff, 0x4, 0x10001, 0x91f3}, {0x0, 0x5, 0x7, 0x10, 0x2, 0x3}, {0x80000001, 0x7fffffff, 0x8, 0x64f16667, 0x10000, 0xffffff80}, {0x7fff, 0xc2, 0x4, 0x2000000, 0xbba, 0x1}, {0x7, 0x5, 0x10000, 0x7f, 0x3, 0x4}, {0x4, 0x4, 0x3, 0x508, 0x246e, 0x2}, {0x3, 0x4, 0x7, 0x1, 0x1a8, 0x2}, {0x6457, 0x10, 0x8, 0x8, 0x8, 0x4}, {0x7, 0x9, 0x0, 0x1000, 0x4ce, 0x8000}, {0x1b33, 0x3, 0x7, 0xef58, 0x0, 0xfffffffa}, {0x7, 0x7, 0x5, 0x9, 0x4, 0x9}, {0x4, 0x0, 0xa589, 0x9, 0x9, 0x5}, {0xd6, 0x2, 0x8, 0x8c96, 0x6, 0x5}, {0x3, 0xfff, 0x3, 0x9, 0x8000, 0xc}, {0x9, 0x0, 0xfffffffd, 0x6, 0x8, 0x5}, {0x1ff, 0xb3, 0x0, 0x0, 0xd, 0xaad}, {0x5, 0x3, 0x6, 0x2, 0x7f, 0x7}, {0x9, 0x5, 0x90db, 0x4, 0x6e32, 0xf08}, {0x9, 0x34560b56, 0x6, 0xce, 0x92d8, 0x6}, {0xffff, 0x5, 0x43cdd295, 0x9, 0xd39, 0x9}, {0x5, 0x4, 0x1ff, 0xfffffffc, 0x100, 0x3}, {0xfffffff8, 0xfffffffb, 0x1, 0x1, 0xf, 0x80}, {0x2, 0xb, 0x3, 0xfff, 0x0, 0x3}, {0x9, 0x2, 0x3, 0xe, 0x1, 0xc84}, {0xe20, 0x7, 0x0, 0x1, 0x2, 0x100}, {0x0, 0x7, 0xc64, 0x2, 0x7fff, 0x2}, {0x3, 0x5, 0xbf, 0x3, 0x3, 0xea3}, {0x2142, 0x6, 0x8, 0x5, 0x2, 0xffff}, {0x3, 0x0, 0x2, 0x4, 0x4, 0x1000}, {0x0, 0x8, 0x7f, 0x6, 0x3, 0x3}, {0x88a2, 0xff, 0x2, 0x16, 0x6, 0x92d7}, {0x9, 0x0, 0x250, 0x5, 0xfffffff9, 0xf}, {0x7, 0x7, 0x7fff, 0x7fff, 0xcb2, 0x40}, {0x5, 0xf5, 0xfffffffa, 0xff, 0x7, 0x2}, {0x5, 0x8000, 0xa, 0x5, 0x1, 0x80000001}, {0xb9e9, 0x7, 0x3, 0x1, 0xc1780000, 0xfbf}, {0x800, 0x6, 0x4, 0x8, 0xd, 0x9}, {0x100000, 0x10001, 0x522f, 0x5, 0x3, 0x80000000}, {0x9f2, 0x4, 0x3, 0x3, 0x3, 0x7}, {0xfffff767, 0x8e, 0x1ff, 0x6, 0x7, 0x33}, {0xfffffeff, 0x7, 0x7, 0x7, 0xbe, 0xffffffd8}, {0x9, 0x12d, 0xa, 0x0, 0x76, 0x8000}, {0x8, 0x6, 0x3, 0x0, 0x7e, 0x7}, {0x13, 0x9, 0x4, 0xa0000000, 0x10000, 0x7}, {0x80000001, 0xb, 0x3, 0x7, 0x3, 0x401}, {0xc5, 0x8, 0x17b, 0x6, 0x608031c0, 0xfffffffc}, {0x40, 0x8, 0x0, 0x80000001, 0xc18b, 0x3}, {0x9, 0x7bac832b, 0x3, 0x4, 0x5, 0x6}, {0x8, 0x0, 0x6c, 0x0, 0x1ff, 0x609}, {0x101, 0x6dd, 0x7, 0x200000, 0x7, 0x4}, {0x0, 0x7, 0xf, 0xffffff00, 0x4, 0x8}, {0x2, 0x7, 0x4, 0x4, 0x7, 0x8}, {0x8, 0x3db5, 0x7, 0xdb, 0x32, 0x7}, {0xe4cd, 0x10000, 0x2, 0x3, 0x5, 0x6b00}, {0x90, 0x80, 0x7, 0x0, 0x7f, 0x3f580ce}, {0x1141ab1c, 0x6a50, 0x5, 0x8000, 0x9, 0x3}, {0x6, 0x2, 0x5, 0x2, 0x7, 0x62b}, {0x3, 0x2, 0xfffffffb, 0xec8, 0x0, 0x5}, {0x1, 0x0, 0x800, 0x4, 0x4, 0x5}, {0x41, 0x3, 0x2, 0x101, 0x1, 0x9}, {0x8, 0xeb, 0xe, 0xff, 0x400, 0xc8}, {0x3, 0x8, 0x73, 0x7, 0x3, 0x6}, {0x90, 0x8, 0xb04aa21, 0x4, 0x2, 0x6}, {0x8, 0xe829, 0xf622, 0x80000000}, {0xffffffff, 0x9473, 0x9, 0x4, 0x5, 0x8001}, {0xdaff, 0x4, 0x2, 0x2, 0x0, 0x800}, {0x1, 0x8, 0x6, 0x3, 0x5, 0x4}, {0x8, 0x0, 0xb, 0x400, 0x8b, 0x345}, {0x10001, 0x1, 0xfffffff8, 0x6, 0x40000000, 0x4}, {0xa84, 0x1, 0x0, 0x7, 0x8, 0x6}, {0x0, 0x9, 0x1, 0x7ff, 0x1f6c, 0x6}, {0x7, 0x401, 0x5, 0x80, 0xff, 0x5}, {0x7, 0x80000000, 0x4, 0x53, 0x1000, 0x5b39}, {0x2, 0x1, 0x100, 0x880, 0x1, 0x68a}, {0x46a9, 0x6, 0x7, 0x3, 0x1f0, 0xfffffff7}, {0x2, 0x7f, 0xfff, 0x5, 0x2, 0x2}, {0xb566, 0x100, 0xc, 0x3, 0xfffffff4, 0x4}, {0x8, 0x5, 0x8001, 0xdc8c, 0xf3}, {0x6, 0xce0, 0xf3b, 0x68d, 0x8, 0x287}, {0x5, 0x0, 0x6, 0x843c, 0x7, 0x6}, {0x80000000, 0x8, 0x3, 0x401, 0x81, 0xb}, {0x3, 0x4, 0x52, 0x9, 0x9, 0x3}, {0x1ff, 0xfff, 0xe, 0x6, 0x81, 0x9}, {0x1, 0x5, 0x5f1, 0xffff, 0x4, 0xffffffff}, {0x76, 0xfffffe00, 0x5, 0x5, 0xbe5, 0x4}, {0xfff, 0x400, 0x800, 0x4, 0x1, 0x7}, {0xfffff800, 0x10000, 0x8000, 0x8, 0x5, 0x8}, {0x8a9, 0x0, 0x2, 0x9, 0x16, 0x2}, {0x7ff, 0x1, 0x100, 0x7, 0xffffffff, 0x55e}, {0x6, 0x0, 0xd2d, 0x40, 0x0, 0x2}, {0x9, 0xf, 0x6, 0x0, 0x1ff, 0x450}, {0x1, 0x84a, 0xfffffffd, 0x5, 0x100}, {0x7, 0xc, 0x10000, 0x5, 0x1ff}, {0x5, 0x9, 0x8, 0x7, 0x400, 0x7f}, {0xdf2, 0x10000, 0x7fffffff, 0x10001, 0x4, 0xfffffffa}, {0x2, 0x1, 0x22d4, 0xffffff80, 0x9, 0x1}, {0x4, 0x10, 0x7, 0x5, 0x8, 0x4}], [{0x3}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x1, 0x1}, {0x4, 0x1}, {0x4}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x1}, {0x1}, {0x2}, {0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x1, 0x1}, {0x2}, {0x3}, {0x2, 0x1}, {0x3}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x7}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x2}, {0x5, 0x1}, {0x2}, {0x4, 0x1}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x2, 0x1}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x5}, {0x5}, {}, {0x3}, {0x3, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x1}, {0x5}, {0x4, 0x1}, {0x5, 0x1}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x4}, {0x3, 0x1}, {0x2}, {0x5}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x7, 0x1}, {0x5}, {0x4}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x1}, {0x5}, {0x4}, {0x2}, {0x3}, {0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x4}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0x3}, {0x4, 0x1}, {0x1}, {0x2}, {0x3}, {0x1, 0x1}, {0x2, 0x1}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x2}]}}, @TCA_PEDIT_PARMS={0xe80, 0x2, {{{0x6, 0xfffffffe, 0x0, 0x7, 0xf}, 0x8, 0x1, [{0x5, 0xd, 0x308, 0x0, 0x2, 0x9}, {0x0, 0x2, 0x5, 0x7298, 0x400, 0x8}, {0x7, 0xfffffff8, 0x2, 0x7f, 0x6, 0x92}, {0x3, 0x4, 0xe, 0x1, 0x6, 0x9}]}, [{0x7, 0x100, 0x9, 0x2, 0x7, 0xfff}, {0xfffffffe, 0x3, 0x3, 0xa, 0x2f9, 0x7}, {0x9, 0x1, 0x0, 0x1, 0xe, 0x8}, {0x3bc, 0x6, 0x3, 0x7, 0x5651, 0x1}, {0x6b3d9a40, 0x6, 0xba6, 0x1ff, 0x4, 0x8}, {0x8, 0xc, 0x1, 0xff, 0x400, 0x8000000}, {0x8001, 0x3, 0xb73, 0x666, 0x7fff, 0x2}, {0x7, 0xf15, 0x1, 0x6, 0x1, 0x8}, {0x6, 0x9, 0x6, 0x2, 0x9, 0x3}, {0x4, 0x3, 0x2, 0x4, 0x56, 0x2}, {0x6, 0x7ff, 0x0, 0x0, 0xb, 0x92}, {0x2, 0x3, 0x7e, 0x400, 0x4, 0x8}, {0x6, 0x8, 0x0, 0x8, 0x5, 0x8}, {0x8, 0xd97, 0x0, 0x3, 0x6}, {0x1, 0x8, 0x1000, 0xffffffff, 0x9, 0x4}, {0x1, 0x80000001, 0x9, 0x8, 0x1}, {0xfffff000, 0x2, 0x0, 0x8, 0x4, 0xc70}, {0x8001, 0x3d2d3255, 0x2, 0x0, 0x1, 0x4}, {0x9, 0x10, 0x68, 0x369, 0x7, 0x91}, {0x800, 0x6, 0x3, 0x4, 0x7, 0x6}, {0xfffffffa, 0x2, 0x401, 0x1, 0xd8d, 0x8}, {0x8, 0x101, 0x3, 0x0, 0xd9, 0x3}, {0x9, 0xc26, 0x5, 0x1ff, 0x7, 0x1}, {0x2, 0x91, 0x3, 0xa, 0x8, 0xc948}, {0x2, 0xffffff9c, 0x858a, 0xad86, 0xfd, 0x6}, {0xfffffffa, 0x5, 0x3ff, 0xf, 0x3, 0x5}, {0x80000001, 0x3, 0x29c5, 0x7a0, 0x7}, {0x8, 0xfffffff9, 0xc, 0x4, 0x7, 0x4}, {0x9, 0x2, 0x1, 0x6413, 0x4, 0x10000}, {0x2, 0xf0000000, 0x1, 0x100, 0x8000, 0x2}, {0x6, 0x10, 0x6, 0xc, 0x9, 0x2}, {0x9, 0xcb3, 0xabd5, 0x3, 0x6, 0xfffffff9}, {0x3, 0x9, 0x6, 0x6, 0xb6, 0x1}, {0x6, 0xffffffea, 0x1, 0x0, 0xea0, 0x6}, {0x3, 0x4, 0x7fff, 0x4, 0x8, 0x3}, {0xff0, 0x5, 0x3, 0x6, 0x12800000, 0xa}, {0x10, 0x2, 0x3, 0x1a2, 0x7, 0x40}, {0xffffffff, 0x1, 0x29, 0x2, 0x1, 0xfffffff8}, {0x9, 0x0, 0x0, 0x3, 0x1f, 0xe033}, {0x1, 0xfffff097, 0x6, 0x9d, 0x3}, {0xd6, 0x6, 0xb4, 0x8, 0x80, 0x81}, {0x8, 0xe9, 0xfffff801, 0x4, 0xffffffc0, 0x6}, {0xffffd023, 0x6, 0x2, 0x8, 0xb, 0x3cb}, {0x6, 0x7, 0x1, 0xdb3, 0x8000, 0x8}, {0x5411, 0x1e2, 0xfb3b, 0x0, 0xc, 0xd}, {0x10000, 0xffffff18, 0x4, 0x7fff, 0x6, 0x9}, {0x81, 0x10001, 0x1, 0x6, 0x3, 0xd}, {0x7, 0x0, 0xc, 0x2, 0xb, 0x8}, {0x3, 0x5, 0x2557ebf8, 0xfffff98c, 0x3, 0x57}, {0x2, 0x4, 0x6, 0xe3, 0x8, 0x8}, {0x4, 0xe, 0x8218, 0x4, 0x28, 0x6}, {0x96, 0x2, 0xfffffff9, 0x6, 0x7ff, 0x2}, {0x1, 0xfffffffe, 0xb, 0x6, 0x1, 0x4}, {0x8, 0x5, 0x6, 0x1, 0x0, 0x1}, {0xf7, 0x0, 0x9, 0x4, 0x1, 0x5}, {0x6, 0x4, 0x718, 0x81, 0x81, 0x3}, {0xf, 0x9, 0x5, 0x0, 0x5, 0xffff}, {0x200, 0xd, 0x5, 0x1, 0x1, 0x4}, {0x2, 0xe0f5696, 0x6, 0x2, 0x800, 0x1}, {0x4, 0x1ff, 0x4, 0xf4, 0x9}, {0x2, 0x6, 0x40000, 0x3, 0x4, 0xffff8001}, {0x8, 0x1, 0x7, 0x2, 0x1ff}, {0x5, 0x8, 0x52e, 0x6, 0x7, 0xb}, {0x1, 0x7f, 0x5e, 0xa6c, 0x2, 0x7ff}, {0xf, 0x6, 0x7fff, 0x8001, 0x1ff, 0x8}, {0xf8, 0xc, 0x0, 0x800, 0x0, 0xff}, {0x8, 0xa79, 0x400, 0x5, 0xb4, 0x4}, {0x1000, 0x5, 0x6, 0x1000, 0x1, 0x8}, {0x6, 0x80000000, 0x1, 0x3, 0x8001, 0x3}, {0x0, 0x9, 0x81, 0x0, 0xfffffe01, 0x10000}, {0x3ff, 0x81, 0x6, 0xfe1, 0x5, 0x7}, {0xfffffff7, 0x4, 0x7, 0x5, 0xe6, 0x2}, {0x3ff800, 0x9, 0xa, 0x1, 0x8, 0x5e8}, {0xfffffffe, 0x81d, 0x10001, 0x7fff, 0x3, 0x8}, {0x0, 0x5, 0x3, 0x1, 0x5, 0xfffffffa}, {0x562, 0x2, 0x10000, 0x7, 0xfffffc00, 0x5}, {0x5, 0x9, 0xdab, 0x101, 0x69a, 0xfffffff8}, {0x6, 0xd359, 0x7f, 0x8, 0x1, 0x1}, {0xfffffff9, 0x4, 0x2, 0x3, 0x6, 0x7}, {0x8, 0x8000, 0x3, 0xffffffff, 0x2, 0x7}, {0x1, 0x4, 0x44ec, 0x4, 0x47d3}, {0x9d, 0x8, 0x8, 0x7c79, 0xbbe, 0xfffffff9}, {0x1ff, 0x5, 0x2, 0x1, 0xe5f5, 0x8}, {0xc23, 0x6, 0xff, 0x85a, 0x5e065c41, 0xf}, {0x9, 0x3, 0x5, 0x6, 0xb, 0x326d}, {0x6, 0x4, 0x6, 0x9, 0x7, 0x5}, {0x80, 0x6, 0x1ff, 0x654, 0x5}, {0x6, 0x5, 0x4, 0x1, 0xe2, 0x5}, {0x52fe, 0x6, 0x8, 0x3, 0x533, 0xdf}, {0x5, 0x10001, 0x6, 0x6, 0xfffffff9, 0xaa}, {0x9, 0x4, 0x81, 0x5, 0xfffffffb, 0x4}, {0xc, 0x8, 0x6, 0x5, 0x7d1, 0x1d58}, {0x1ff, 0x5, 0x39b, 0x5f, 0x7, 0x2}, {0x2, 0x2, 0x4, 0x3, 0xd, 0x5}, {0xf4, 0x3f, 0x20a, 0x4, 0xfffffffb, 0xfffffff8}, {0x2, 0x0, 0x47, 0x7, 0x2, 0x4}, {0x1, 0x6, 0x7f, 0x6, 0x8, 0x9}, {0x100, 0xda, 0x2, 0x1, 0x8, 0x2f9b}, {0x9, 0x8, 0x100, 0x6, 0x1, 0xffffff1b}, {0x6, 0x0, 0x3, 0x18, 0xfffff3ff, 0xfffffffe}, {0x4, 0xdc9, 0xfffffffb, 0xffffe292, 0x7fff, 0x7fffffff}, {0x6, 0x6, 0x2, 0x80000001, 0x7f, 0x6}, {0x80000001, 0x6, 0x400, 0x7}, {0x8000, 0x80, 0x3024, 0x8, 0x1, 0x4}, {0x8, 0x9, 0xc5, 0x7, 0xffffffff, 0x9}, {0x2, 0x7, 0x0, 0xe6f, 0x7, 0x49c}, {0xe9a, 0x0, 0x5, 0x2, 0x2, 0xffffffff}, {0x1, 0x6, 0x3, 0x2, 0x7, 0x6377}, {0x7f, 0x200, 0x1, 0x7, 0x3, 0xc}, {0xd, 0x4, 0x0, 0x0, 0x2, 0x4}, {0x80, 0x1, 0x8001, 0x7ff, 0x8, 0x55c}, {0x7, 0x7fffffff, 0x401, 0x401, 0x8, 0x2}, {0x81, 0x6, 0x9, 0x7fffffff, 0x5cf, 0x1}, {0x5bee72f8, 0xcfce834, 0x1, 0x6, 0x2, 0x8}, {0x7, 0x1, 0x101, 0x3, 0x3, 0x3}, {0x9, 0xe26, 0x5, 0x0, 0x4eb, 0x3}, {0x6, 0x6, 0x2, 0x9, 0xae, 0xff}, {0x0, 0x7, 0x2, 0x0, 0x200}, {0x3, 0x2, 0x3, 0x65d1, 0xfffffffc, 0x1000}, {0x5, 0x1, 0x8000, 0x8, 0x9, 0x2efd}, {0x1, 0x30300000, 0x7f, 0xfffffff9, 0x10, 0x9}, {0x400, 0xfffffff7, 0xf, 0x9, 0x4}, {0xbc5, 0x1, 0x3, 0xffffffff, 0xf9e, 0x100}, {0x1, 0x400, 0x24, 0x65e, 0xfffffffd, 0x400}, {0x6, 0x8000, 0x7, 0x3ff, 0x3, 0x2}, {0x517a, 0xfffffffc, 0x7, 0x40a5, 0x7, 0x10001}, {0x8, 0x1, 0x0, 0x5, 0x5, 0x1318}, {0xa, 0x1, 0x400, 0x0, 0x7de8efce, 0x7}], [{0x5}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {}, {0x0, 0x1}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x5}, {0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x5}, {0xf04633a3eebfa25c}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x2, 0x1}, {0x2}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x0, 0x1}, {0x4}, {0x1}, {}, {0x0, 0x1}, {0x2}, {}, {0x3}, {0x3}, {0x2}, {0x5}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x3}, {0x5, 0x1}, {0x5}, {0x3}, {0x5}, {}, {0x5, 0x1}, {0x2}, {0x2, 0x1}, {}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {}, {0x4}, {0x2}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {}, {0x4}, {0x0, 0x1}, {0x4}, {0x2}, {0x2}, {0x2}, {0x3, 0x1}, {}, {0x3}, {0x5}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x1, 0x1}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4}, {0x5}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {0x2}, {0x2}, {0x2, 0x1}, {0x5}, {0xd0bea72c8efb4e1a, 0x1}, {0x3, 0x1}, {0x1}, {0x5}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5, 0x1}]}}, @TCA_PEDIT_PARMS={0xe38, 0x2, {{{0xd, 0x5fe, 0x5, 0x6, 0x1}, 0x4, 0x3, [{0x2, 0x5, 0x800, 0x7, 0x2, 0x5}]}, [{0x5, 0x1bed, 0x7fffffff, 0x4, 0x4, 0xe}, {0x2, 0xb1, 0x7, 0x3, 0x10000, 0x6}, {0xb60f, 0xfffffff9, 0x6, 0x1, 0x7}, {0x1, 0x8, 0x4, 0x80d, 0x8001, 0x1}, {0xd0, 0xfffffff7, 0x9d2, 0x0, 0x6, 0x3}, {0x0, 0x3, 0x5, 0x0, 0x1, 0xdb4}, {0x9, 0x7, 0xcff5, 0x9, 0x600000}, {0x1b57, 0x0, 0x40, 0xfaf7, 0xcea, 0x80}, {0x7, 0x4, 0x6, 0x5, 0x4, 0x3ff}, {0x6, 0x6, 0x7, 0xb8b, 0x3, 0x8}, {0x3ff, 0xa, 0x9, 0xbb7, 0xffffffff, 0xe}, {0x9, 0x7982, 0x5, 0x3, 0x9, 0x3ff}, {0x8, 0xe00, 0x1, 0x9, 0xfffffff7, 0x8000}, {0x401, 0x3, 0x6, 0x9, 0x2, 0x8}, {0x1a0, 0x6, 0x7, 0x82, 0xd, 0x2}, {0x17, 0x0, 0x9, 0x7, 0x5a28, 0xfff}, {0x2ca40510, 0x401, 0x7, 0xfffffff0, 0x8, 0xd28}, {0x6, 0x40, 0x8, 0x401, 0x9, 0xff}, {0x6, 0xfffffffb, 0x3ff, 0xffff, 0x4, 0x9}, {0x1, 0xd28, 0x7, 0x80000001, 0x1, 0x3}, {0x0, 0x9e97, 0x1, 0xa8f0, 0xfffffe00, 0x200}, {0x7, 0xdedc, 0x2e26, 0x0, 0xf, 0x9}, {0x3, 0x1f, 0x7f, 0xfff, 0x7, 0x8}, {0x9, 0x7918, 0x6, 0x7fffffff, 0x42, 0xfffffff9}, {0xc77, 0x101, 0x10, 0x40, 0x6}, {0x0, 0x9, 0x7ff, 0x6, 0xfffffffd, 0x3}, {0xfdcb, 0x1, 0x6, 0x7, 0x6, 0x7}, {0x4, 0x51d, 0x3ff, 0x3, 0xf5, 0x4}, {0x4, 0xc915, 0x4, 0x400, 0xd7, 0x5}, {0x63e, 0x1ff, 0x5, 0x7f, 0x80000000, 0xfffffffe}, {0xfffffff3, 0x7, 0xf, 0x4, 0x6, 0x1}, {0xe, 0x0, 0x0, 0x7, 0x9, 0xc03}, {0x81, 0x2, 0x1, 0x3, 0x9, 0x3}, {0x4, 0x6, 0x7ff, 0xcb2c5a00, 0x45, 0x5}, {0xa1, 0x3, 0xa78, 0x8, 0x3, 0x1}, {0x8, 0x0, 0x4, 0x1, 0xae0, 0x1}, {0x6, 0xe, 0x800, 0x10, 0x10000, 0x6}, {0xc21, 0x77b9, 0xffff0000, 0x6, 0x81, 0x2}, {0x7f, 0x0, 0x9, 0x7fff, 0x7, 0xfffffff9}, {0x4, 0x3, 0x9, 0xb25, 0xf, 0x3}, {0x865, 0x2, 0xe000000, 0xa2, 0x8, 0x7fff}, {0x3, 0x8, 0x5, 0x9019, 0x5bdd, 0x6}, {0x2, 0x40, 0x4, 0x6af8, 0xfffffffe, 0x4}, {0x7f, 0x2, 0xffffffff, 0x4, 0xf}, {0x5, 0x71, 0x8, 0xfffffc01, 0x8, 0xffff}, {0x4, 0x5, 0x0, 0x7, 0x100, 0x8}, {0x7fff, 0x3, 0x0, 0x7f, 0x332, 0x1}, {0x7fff, 0xd, 0x1, 0x80, 0x8, 0xc}, {0x3, 0x7, 0x2, 0x9, 0x2, 0x4}, {0x8, 0x7fffffff, 0x4, 0x7, 0x5, 0xf}, {0x7, 0x1969, 0x4778, 0x4, 0x5, 0x1}, {0x4, 0x9, 0x8, 0x3, 0xfffffffb, 0x61d0}, {0x4, 0x2, 0xb, 0x9, 0x7, 0x6}, {0xd31, 0x6, 0x3c8, 0xeb0, 0x16ac, 0xf}, {0x8, 0x79c5, 0x7, 0x81, 0xb, 0xffff}, {0x5, 0x0, 0x0, 0x3ff, 0xfffffff9, 0x3}, {0x1, 0x8, 0xe67, 0xc4, 0x3, 0x6}, {0x7, 0x6, 0x4, 0x5, 0x1}, {0xfffffffb, 0xfffffffc, 0x0, 0x2, 0xfffffffd, 0x1}, {0x80000000, 0x1ff, 0x1800000, 0xa25c, 0x4, 0x2}, {0x200, 0x3, 0x80, 0x9, 0x10, 0x9}, {0x4, 0x1ff, 0x80000001, 0x80000001, 0x8, 0x80}, {0x3, 0x0, 0x4, 0xe, 0x6, 0x4}, {0x5, 0x401, 0xfffffff9, 0x8, 0x0, 0xfffffffc}, {0x1, 0x40, 0xff, 0xfffffffe, 0x2, 0x5}, {0x0, 0x81, 0x1, 0x81f9, 0x9, 0x3}, {0x6, 0x8, 0xffffffac, 0x1, 0x2, 0x628}, {0x0, 0x0, 0x92, 0x4, 0xffff, 0x7}, {0x7, 0x1ff, 0xd, 0xa4, 0x200, 0x99}, {0x2, 0x34b, 0x7, 0x8, 0x5, 0x7}, {0x6, 0x2f, 0x100, 0x4, 0xc, 0x9}, {0x0, 0x6, 0x5, 0x2, 0x6, 0x9}, {0x9, 0x8, 0x4, 0x4, 0x7, 0x6693}, {0x1, 0xffff, 0x9, 0x9, 0x2f, 0x5}, {0x6e, 0x58a1, 0xf, 0x2, 0x8001, 0x1}, {0xfffffc01, 0x5, 0x9, 0x8, 0x982, 0x4}, {0x9, 0x9, 0x80000001, 0x1, 0x5}, {0x9, 0xfffffff0, 0x1, 0x4, 0x0, 0x8a3}, {0x1, 0x9, 0x6, 0x9, 0x8, 0x6}, {0x8, 0x6, 0xdf, 0x80000000, 0x1ff, 0xc}, {0xb, 0x1, 0x60, 0xea9, 0xb, 0x8f}, {0x3, 0x8001, 0xffff, 0x4, 0x1, 0x7fffffff}, {0x9, 0x5, 0x5ca, 0x9, 0x1, 0x8}, {0x4, 0x4, 0x8, 0xfffff001, 0xfffffffd, 0x2}, {0xb85, 0xd5, 0x2, 0x7, 0x6, 0x7}, {0x2, 0x2, 0x4, 0x7, 0x8, 0x1000}, {0xd92, 0x140000, 0xffffffff, 0xd9b3, 0x8, 0x2}, {0x4, 0x4, 0x8, 0x7, 0x2, 0xc}, {0x4, 0x8001, 0x1a8c8d0a, 0x101, 0x8, 0x5}, {0xfffffffb, 0x374d000, 0x0, 0x4, 0x37a, 0x4}, {0x3, 0x9, 0x9, 0x9, 0x80, 0x10}, {0xecd0, 0x9a4, 0x53a1, 0x6e68, 0x7fff, 0xb}, {0x7f, 0x10000, 0x4, 0x8, 0x100, 0x4190}, {0x6, 0xffffff47, 0x5, 0x8001, 0x7fffffff, 0x6}, {0x81, 0x1, 0xffff, 0xc0e1, 0xfccf, 0xe9d}, {0x409, 0x3ff, 0x73cc610e, 0xc1, 0x7f, 0x1}, {0x80, 0x81, 0x0, 0x7, 0x0, 0xaff7}, {0x0, 0xedc, 0xfffffffb, 0x3, 0x3, 0x8}, {0x20, 0x2, 0x1, 0x50e, 0x7, 0x1800}, {0x9, 0x5, 0x0, 0x0, 0x1400, 0xa}, {0x80, 0x0, 0x6, 0x3, 0x2, 0x2}, {0x6, 0xf, 0x2, 0x0, 0x7, 0x80000001}, {0x120000, 0x3, 0x9, 0x8, 0x3, 0x5}, {0x6, 0x5, 0x1, 0xffffffff, 0x5, 0xb}, {0x91ea, 0x3, 0xf4, 0x7, 0x0, 0x8}, {0x1, 0x4, 0xffff, 0x200, 0x7, 0x2}, {0x7fff, 0x572a, 0xc6e00, 0x52dc9e01, 0xfffffffa, 0x41}, {0x2, 0x4, 0x6, 0x2, 0x2, 0x7f}, {0xff, 0x3042, 0x80, 0x9, 0x3a}, {0x88, 0xb4f, 0x8, 0x3, 0x0, 0x7}, {0x4, 0x6, 0x8, 0x7fff, 0x7fff, 0x9}, {0x9, 0x6, 0x237, 0x7fff, 0x1000, 0x401}, {0x1, 0x7, 0x200800, 0x7, 0x6, 0x4}, {0xa4, 0x9, 0x4, 0x6, 0x8, 0x4e0b}, {0x100, 0x7, 0x7, 0x80000000, 0x4, 0x3}, {0x484c2480, 0x2, 0xb86, 0x600000, 0x3, 0x1000}, {0x5, 0x8, 0x1, 0x0, 0x3, 0x10000}, {0xfffffff8, 0x1, 0x200, 0x7, 0x3, 0x8}, {0xffffffff, 0x4c, 0xfffffff9, 0xa342, 0x4, 0x4}, {0x7, 0x6, 0x7ff, 0xffff, 0x9, 0xffffffde}, {0xffff8001, 0xffffffff, 0x5, 0xb07c, 0x4, 0x8}, {0xd28, 0x5, 0x7, 0x8000, 0x2, 0xf}, {0x4, 0x120c683a, 0x40, 0x10, 0xffffffff, 0x2}, {0x8, 0xc522, 0x2, 0x6, 0x7, 0x5}, {0x0, 0x0, 0x1, 0xf8, 0x2, 0x1}, {0x10001, 0x2, 0x5, 0x0, 0x7fff, 0x5}, {0x0, 0x5, 0x1ff, 0x2, 0x200, 0x1}, {0x0, 0xfffff801, 0x8, 0x40, 0x4, 0x550e746b}], [{0x2, 0x1}, {0x5}, {0x3}, {0x2}, {0x3}, {0x2, 0x5ff64288ab4ec1f}, {0x4}, {0x1, 0x1}, {0x5, 0x1}, {0x2}, {0x2, 0x1}, {0x2}, {0x2, 0x1}, {}, {0x3}, {0x3}, {}, {}, {0x4, 0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x4abaff27624ca357}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x3}, {0x2, 0x1}, {0x1}, {0x4, 0x1}, {0x2}, {0x3, 0x1}, {0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x2, 0x1}, {0x4}, {0x5}, {}, {0x5, 0x1}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x5, 0x53bb0746847939d1}, {0x1, 0x1}, {0x3, 0x1}, {0x1, 0x1777bee9488a96b4}, {0x3, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x5}, {0x2, 0x1}, {0x2}, {0x1, 0x1}, {0x2, 0x1}, {0x4}, {0x1}, {0x4}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {0x2}, {}, {}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x4}, {0x0, 0x5795d24670a4b6a2}, {0x29bbd6b71efeeee5}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x3, 0x1}, {0xb, 0x1}, {0x0, 0x1}, {0x4}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x2}, {0x0, 0x1}, {0xd1c686ebb43c602a, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x2}, {0x3, 0x1}, {0x3}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x1bc, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x4c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x4c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x4c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}, @TCA_PEDIT_PARMS_EX={0xec8, 0x4, {{{0x7, 0x9, 0x2, 0x2, 0x3ff}, 0x5, 0x21, [{0x985, 0x6, 0x6, 0x4, 0x5, 0x9}, {0x7fff, 0x10001, 0x1800, 0x3ff, 0xec, 0x7}, {0xff, 0x100, 0x9, 0x5, 0x5}, {0x472, 0x6, 0x1, 0x100, 0x3ff, 0x2}, {0x8d5671f, 0x9, 0x4, 0x10000, 0x87d, 0x7fffffff}, {0xa67, 0x100, 0x40, 0x7fffffff, 0x9, 0x7}, {0x8, 0x7, 0x0, 0x8d, 0x2, 0x1ff}]}, [{0xb9c7, 0xc28, 0x4, 0x8, 0x3, 0x5}, {0x6, 0x101, 0xa, 0x3, 0x10001, 0x1a9}, {0x0, 0x9, 0xeb75, 0x8, 0x8, 0xffffffa0}, {0x79, 0x200, 0xd4, 0x1, 0xccc6, 0x9}, {0xffffff7a, 0x5, 0x5, 0x9, 0x2, 0x2}, {0x8000, 0xa924, 0x9, 0x5, 0x100, 0xac75}, {0xffffffff, 0x0, 0x1, 0x0, 0x5, 0x6}, {0x7, 0x7, 0xf1, 0x6, 0x9, 0x10001}, {0x430, 0xfb41, 0x10000, 0x1, 0x9, 0x3}, {0xc3, 0x5, 0x8001, 0x4d6, 0x2, 0x2}, {0x2, 0x9, 0x4, 0x4, 0x4, 0x20}, {0x0, 0xfffffff2, 0x9, 0x3, 0x4, 0x3}, {0x3, 0xc, 0x435, 0x47, 0x3, 0x8000}, {0x7, 0x9, 0x7fffffff, 0xfffffff8, 0xbac, 0x80000000}, {0xd3, 0x9, 0x8c8, 0x7, 0x6, 0x9}, {0xd, 0x4d, 0x10000, 0x5f6efc28, 0x400, 0xffffffff}, {0x192, 0x78a2, 0x3, 0x8a8, 0x3554}, {0x9, 0xfffffffa, 0x7, 0x40000, 0x3, 0x38}, {0x800, 0x1, 0x9, 0x9, 0xffffa070, 0x31b3}, {0x0, 0x8, 0x5, 0xa, 0xb, 0x80000001}, {0x7fff, 0x5, 0x0, 0x1ff, 0x8, 0x4}, {0x60, 0x35, 0x3, 0x4, 0xd, 0x5}, {0x1ff, 0x5, 0x1, 0x1, 0x65c, 0x1}, {0x83b, 0x557, 0x5, 0x5ea, 0x4, 0x78e5}, {0xd7, 0x5, 0x7, 0x7, 0x5, 0x2}, {0x94, 0x9, 0x5, 0x1, 0x800, 0xfff}, {0x2, 0x200, 0x7, 0x400, 0x4, 0x7ff}, {0x8, 0x9724, 0x7, 0xf5f7, 0x5, 0xc}, {0xf75, 0x3, 0x20, 0x1, 0x8, 0x1}, {0x7, 0x1ff, 0x8, 0x9, 0x10001}, {0xa50, 0xffff, 0x6, 0x8, 0x5, 0xd4}, {0x7, 0x1000, 0x1, 0x5, 0x7, 0x8}, {0xacb1, 0x9, 0x8, 0x8, 0xfff, 0x800000}, {0x10000, 0x7678a86a, 0x1, 0x2, 0x6, 0x7f}, {0x10000, 0x10, 0x8, 0x9, 0xffffffff, 0x5}, {0x6, 0xc, 0x4, 0x3, 0x8566, 0x5}, {0x1000, 0x4, 0x8, 0x1, 0xc, 0x40000000}, {0x101, 0x80, 0xf, 0x4, 0x7, 0x82f}, {0x0, 0x1000, 0x1000, 0x5, 0x0, 0x6}, {0x2, 0x9, 0x93dd, 0x3, 0x40, 0x7f}, {0x1, 0x1, 0x6, 0x4b, 0x4, 0x80}, {0x5, 0x3ff, 0x5, 0x3ff, 0x4, 0x9}, {0x5, 0x2, 0xbf, 0x5, 0xa, 0x8}, {0x3f, 0x3, 0xe5, 0x5, 0xff, 0x30}, {0x9, 0x81, 0x7, 0x1, 0xe, 0xffff4782}, {0x3, 0x2, 0x7, 0x4, 0x6, 0x7}, {0x5, 0x4, 0x9, 0x80000000, 0x401, 0x9}, {0x1, 0x6, 0x4, 0x7, 0xffff, 0xfffffffd}, {0x6, 0xd3cd, 0x5, 0x1000, 0xd, 0x2}, {0x6, 0xe68, 0x2, 0x7, 0x5, 0x10000}, {0x0, 0x8000, 0x2, 0x401, 0x0, 0x8}, {0x8, 0x1, 0x7ff, 0x179424fd, 0x7, 0x9b}, {0x4, 0xfffffffc, 0x0, 0x9, 0x0, 0x4000}, {0xc, 0x3, 0x3, 0x3, 0x1f, 0x401}, {0x56, 0x65, 0x3, 0x2, 0x3, 0x1}, {0x2b8c, 0x1, 0x40, 0x6, 0x6, 0x5}, {0xc, 0xb, 0xffff0000, 0x40000000, 0x0, 0x200}, {0x1, 0x8, 0x4, 0x4, 0x6, 0x4}, {0x1305, 0x75f598fb, 0x8, 0x9, 0x7f, 0x9}, {0x5, 0xfff, 0xeed7, 0xce, 0x6, 0xfffeffff}, {0x2cf5, 0xffffffc0, 0x80000000, 0x7, 0x6}, {0x7fffffff, 0x81, 0x3, 0x3, 0x9, 0x5}, {0xfffffff3, 0x18000, 0x7ff, 0x2, 0x9, 0x4}, {0x5f3, 0xa0c, 0x16d, 0x10000, 0xfffffffb, 0x1}, {0x3, 0x8000, 0x7, 0x5, 0x9, 0x8}, {0x2, 0x8001, 0x1, 0x5, 0x9, 0x4}, {0x9, 0x2c, 0x36d1, 0x10000, 0x9, 0x6}, {0x6, 0x0, 0x94, 0x680ee943, 0xffffff15, 0x40}, {0x51e, 0x7, 0x3, 0x81, 0x8, 0x2}, {0x3, 0x5, 0x2, 0x2, 0x8000000, 0x9}, {0x9, 0x3, 0x5, 0x7, 0x4, 0xe64}, {0x2, 0x1, 0x1, 0x6d9, 0x4, 0x21}, {0xd, 0x4e8a, 0x5, 0x1, 0x2, 0x101}, {0x8, 0x130, 0x3, 0x6, 0x8, 0xfffffff9}, {0x0, 0x5, 0x40, 0x7, 0x2, 0x9}, {0xffffffba, 0x4, 0xe, 0x9, 0x80000001, 0x5}, {0x7f, 0x5, 0xfffffff3, 0x45, 0x937, 0x8}, {0x6, 0x8, 0xd0, 0xc4, 0x5, 0x8}, {0x5, 0xfffffffa, 0x9, 0xac2, 0x0, 0xfffffffc}, {0x7fff, 0x8, 0x5, 0x0, 0x4, 0xffffffff}, {0x0, 0xfffffff9, 0x56e33218, 0x3, 0xfffffff7, 0x9}, {0x89d3, 0x9, 0x4cb, 0x8, 0x9, 0xffffffff}, {0x6f20, 0x8, 0x800, 0x2, 0x4, 0x3ff}, {0x239c, 0xffffffff, 0xffffffff, 0xe7e5, 0xa9b6, 0x6}, {0x4, 0x0, 0x9, 0x80000001, 0xfffffff8, 0x8}, {0x4, 0xd7e, 0x3c, 0x4, 0x8588, 0x7}, {0x4, 0x6, 0x7, 0x4, 0xf7, 0x2}, {0xffffffff, 0x8d, 0x1000, 0x0, 0x9, 0x4}, {0x0, 0x80000001, 0x800000, 0x45, 0xfffffff2, 0x8}, {0xc, 0x0, 0xb0f4, 0x800, 0xcdc0, 0x80000001}, {0x7ff, 0x1000, 0x7, 0x81, 0x72b4dc20, 0x2}, {0xe000, 0x2745cf29, 0xeb, 0xff, 0x7, 0x1}, {0x0, 0x7ff, 0x8, 0x0, 0x5, 0x7fffffff}, {0xb7b, 0x10, 0xba, 0xf6fc, 0x1}, {0xd970, 0xffff, 0x4, 0x5, 0xb3, 0x6}, {0x4, 0x101, 0x6, 0xb9d, 0xfffffbff, 0xa}, {0x0, 0x8, 0x1, 0x292, 0xfffffff8}, {0x9, 0xb, 0x80000000, 0x9, 0x9b6, 0x2}, {0x1, 0x1, 0x8000, 0x1ff, 0x9, 0xfffffeff}, {0x5, 0x7fffffff, 0xc, 0x6, 0x9, 0x8}, {0x4, 0x2, 0x7, 0x3ff, 0x0, 0xb}, {0x1dcc, 0x7, 0x0, 0x2, 0x95, 0x6}, {0x62, 0x3, 0x4, 0x2, 0x10001, 0x25}, {0x8, 0x810, 0x81, 0x64, 0xfa0, 0x2}, {0x7, 0x5, 0x5, 0x6a75, 0x0, 0x6c}, {0x8d, 0x6, 0x10001, 0x7fff, 0xffff, 0x7}, {0x7, 0x3ff, 0x9, 0x6, 0x5, 0x89}, {0x1, 0xfb, 0x10001, 0x6, 0x2, 0xcee0000}, {0x8, 0xa, 0x1, 0x81, 0x8, 0x8}, {0xffffffff, 0x6, 0x5, 0x101, 0x2, 0xfffffffc}, {0x80, 0xfffffffc, 0x7, 0x6, 0xb0, 0xff}, {0x2, 0x7, 0x7, 0xffffffff, 0xfffffff8, 0xddc}, {0x8, 0x6, 0x7ff, 0x200, 0xffff0001, 0x7}, {0x7, 0x3ff, 0x7, 0x80, 0xfffffffb, 0x9}, {0x3, 0x7ff, 0x4, 0x1, 0x10001, 0xd6}, {0x3, 0x9, 0xffff0001, 0xffffffff, 0x9b8, 0xfffffbff}, {0xd, 0x8, 0x2, 0x1, 0x40, 0x7}, {0x7, 0x9064, 0xffffffff, 0x6, 0xaa}, {0x3, 0xe, 0x2, 0x0, 0xa}, {0x8, 0x5, 0xf, 0x6, 0xb, 0x6}, {0x4, 0x80, 0x8, 0x8, 0xcf25, 0x2}, {0x10000, 0x8, 0x6, 0x2f, 0x0, 0x7}, {0x5, 0x6, 0x4, 0x3, 0x1, 0x1}, {0x3, 0x4, 0xfff, 0x1ff, 0x9, 0x9}, {0x5, 0x8, 0x81, 0x2, 0x70, 0x8c7}, {0x8, 0x27, 0xa767, 0xfffffff7, 0x3, 0x4}, {0x0, 0x7fe, 0x9, 0x9, 0x7, 0x2}, {0xf236, 0x7, 0x2, 0x3, 0xfffff714, 0x2}], [{0x3}, {0x4}, {0x5}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {0x4}, {0x1}, {0x1, 0x1}, {}, {0x1}, {0x4, 0x1}, {0x4}, {0x4, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x5}, {0x30aa38b3ee57f0f3}, {0x5}, {0x2}, {0x4}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x2}, {}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x3}, {0x4, 0x1}, {0xaf623dcbb4efe732}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x3}, {0x5, 0x1}, {0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3}, {0x3}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x2, 0x1}, {}, {0x2}, {0x2, 0x1}, {0x3, 0x1}, {}, {0xa, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x3}, {0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x6}, {0x4, 0x1}, {}, {0x1}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x5}, {}, {0x3}, {0x2}, {0x2, 0x1}, {0x3, 0x1}, {0x3}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x5, 0x1}, {0x1, 0x1}, {0x5}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0x2, 0x1}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x70, 0x5, 0x0, 0x1, [{0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}]}, @TCA_PEDIT_PARMS_EX={0xe68, 0x4, {{{0xa, 0x85, 0x20000000, 0x6, 0xfffff801}, 0x80, 0x74, [{0xfffffffb, 0x6, 0xd193, 0x1000, 0x6, 0x40}, {0x6, 0x0, 0xfffffff8, 0x4, 0xdc, 0x8}, {0x4, 0x5, 0x2, 0x2, 0x9, 0x4}]}, [{0x0, 0x400, 0x6, 0x2, 0x6, 0x6}, {0x7, 0x1, 0x749, 0x10, 0x2, 0x8}, {0x6, 0x8, 0x9, 0x0, 0x8, 0x1}, {0xfffffffc, 0x2, 0x10000, 0x200, 0x400, 0x9}, {0x7, 0xe5d, 0xffffff01, 0x4, 0x5, 0x2}, {0x1ff, 0xffff, 0x8000, 0x6, 0x5a9, 0xea}, {0x7fff, 0x2, 0x8, 0x6, 0x8000, 0x3}, {0xbcc00000, 0x5, 0x509060de, 0x8, 0x423e4d17, 0x600000}, {0xb, 0x7, 0x0, 0x4, 0x9, 0xe}, {0x4, 0x5, 0xfffff22e, 0x9, 0x8, 0x4}, {0xfffffffd, 0x800, 0x7, 0x5, 0x12000000, 0x9}, {0xfffffff8, 0xf65b, 0x10001, 0x9, 0xff, 0x2}, {0x7, 0x9, 0x2, 0x7, 0x1, 0x200}, {0xf, 0x4, 0x8, 0xffffffff, 0x1ff, 0x7ff}, {0x7, 0x1, 0x0, 0x6, 0x8001}, {0xe, 0x5, 0x24262bf6, 0x6, 0xb85, 0xd}, {0x7, 0x1, 0x9, 0x101, 0x240, 0x1000}, {0x21, 0xd99, 0x8, 0x2, 0x6, 0xfffffffe}, {0x7fffffff, 0x7, 0x8, 0x7fff, 0x606, 0x1ff}, {0x5, 0x4, 0x7, 0x6, 0x8, 0x80000000}, {0x5, 0xfffffff0, 0x6, 0x5, 0x6, 0x401}, {0xff, 0x7f, 0x1, 0x7, 0x2, 0x9c7}, {0x3, 0x6, 0x7, 0x4, 0x32b6}, {0x1, 0x7, 0xe, 0x4, 0x0, 0x8}, {0xa, 0x6, 0x9, 0x800, 0x6}, {0xcc, 0x4, 0x6, 0x6, 0x24, 0xae8}, {0x3ff, 0x6, 0x6, 0x3, 0x5375, 0x1}, {0x0, 0x2, 0x8, 0x2, 0x7, 0xfffffff9}, {0x7, 0x80, 0x8, 0x0, 0x8000, 0x7}, {0x9, 0x5, 0x3, 0x7, 0x0, 0x55d3}, {0xfffffbff, 0x0, 0x10000, 0x8, 0x0, 0x790}, {0x0, 0x8000, 0x1ff, 0x1, 0x1000, 0x1}, {0x1, 0x5, 0x7, 0x7, 0x400, 0x7}, {0xf22d, 0x4, 0x3, 0x100, 0x1}, {0x7, 0xf, 0x8, 0x4, 0x5, 0xffffffff}, {0x5, 0x0, 0x1, 0x6, 0x200, 0x7f}, {0x0, 0x4d8f, 0x7, 0xa65, 0x795, 0xfffffff9}, {0xdf, 0x7, 0xf, 0x4, 0x1, 0x1}, {0x2, 0xbb, 0xffffaae7, 0x3, 0x1, 0x2}, {0x1, 0x5, 0x2, 0x7fffffff, 0x10001, 0x9333}, {0x1, 0x7fffffff, 0x5, 0x3, 0x5, 0x7}, {0x87, 0x5, 0x4717, 0x1, 0x80000000, 0x6}, {0x80, 0x7, 0x6, 0x4, 0xb, 0x9}, {0x0, 0x6, 0x0, 0x507a, 0x8, 0x7}, {0x7, 0x2d, 0x0, 0x5, 0x1, 0x7}, {0x2, 0x1, 0x4c9, 0x5, 0x2, 0x10}, {0x0, 0xe, 0x2, 0x2, 0x0, 0xfffffffd}, {0x7fffffff, 0xa8d, 0x6, 0x80000000, 0x5766, 0x5}, {0x30bb9b76, 0x100, 0xfffffff8, 0xffff0001, 0x8000, 0xffff}, {0x23, 0x3, 0x2, 0x400, 0x8001, 0xb16}, {0x400, 0x8, 0x3, 0x7f, 0x81, 0x2000000}, {0x5, 0xd69, 0x6, 0x4, 0xd1d8, 0x8}, {0x5, 0x9ac, 0x8, 0x9, 0x800, 0x2d44}, {0x5, 0x1000, 0x9, 0x100, 0xb3c, 0x2}, {0x7, 0x2, 0x7fffffff, 0x95c2, 0x101, 0xfffffffb}, {0x6, 0x3, 0x6, 0x40, 0x5, 0x8}, {0xc18, 0x2, 0x1, 0x5, 0x8, 0xffff}, {0x6, 0xfffffffc, 0x9, 0x3, 0x4b, 0x3}, {0x200, 0x5c6c, 0x8, 0x18be, 0x1, 0x400}, {0x1, 0x2, 0x6, 0x6, 0x400, 0x7fff}, {0x4, 0x9, 0x4, 0x1, 0x0, 0x8}, {0x81, 0x9, 0x8, 0x6, 0x0, 0xe7}, {0x8, 0xba5f, 0x5, 0x80000000, 0x13}, {0x2, 0x4, 0xfff, 0x0, 0x7, 0x7}, {0x5, 0x9, 0x8, 0x8, 0x0, 0x4}, {0x1, 0x35, 0xc, 0x5, 0x0, 0x4}, {0x2, 0x2, 0x8001, 0xb70, 0x8d1d, 0x8f}, {0x3079, 0x4, 0x8001, 0x2, 0x0, 0x9bae}, {0x4, 0x800, 0x280, 0x5, 0xe32e, 0x1ff}, {0xfffffffb, 0x2, 0x1, 0x3cbcf7e0, 0xf7, 0x9}, {0x8, 0x9, 0x9, 0x0, 0xce, 0x1}, {0x3, 0x8, 0x1f, 0x1f06, 0x4, 0x101}, {0x6, 0x73f, 0x1ff, 0xffffffff, 0x5, 0x10290}, {0xff, 0xffff, 0x3, 0x1800000, 0x1, 0x100}, {0xffffffff, 0x4, 0x0, 0x1, 0xce4, 0x6}, {0x7, 0x5bd, 0x3ad, 0x658a, 0x9, 0xffff}, {0x7, 0x7, 0x0, 0x3, 0xffffff93}, {0xfffffffe, 0x4, 0x401, 0x2, 0x3, 0x9}, {0x5, 0x0, 0x10001, 0xffffc40c, 0x80000001, 0x4}, {0x0, 0x80, 0x3, 0x5, 0x2, 0x9}, {0x3, 0x8, 0xffff, 0x9, 0xa, 0x8}, {0x9, 0x7, 0xffff, 0xffff1853, 0x9, 0x800}, {0x6, 0x3, 0x5, 0x9, 0xf, 0x3}, {0x2, 0xfffffe00, 0x6, 0x4, 0x2, 0x2}, {0x6, 0x2, 0x401, 0x6, 0x44609a8, 0x2}, {0x1, 0x2, 0x8, 0x8, 0xf, 0x6}, {0x7, 0x9, 0x80000000, 0x1, 0x2, 0x6}, {0x5da, 0x5, 0x1, 0xbee4, 0x8103, 0x5}, {0x180, 0x4, 0x0, 0x3, 0x6, 0x5f30}, {0x3, 0xfff, 0x0, 0x6, 0x8, 0x80000000}, {0x1000, 0x4, 0x2, 0x10001, 0x6}, {0x9, 0x1, 0x0, 0xf42, 0x0, 0x2}, {0x8000, 0x6, 0x0, 0x0, 0xeff}, {0x0, 0x0, 0x5, 0x1, 0x3, 0x7}, {0x4, 0x0, 0x28, 0xc8, 0xb8bc, 0x4}, {0x1, 0x7, 0x100, 0x8, 0x8000, 0xffffffff}, {0x38a, 0x0, 0x4, 0x35, 0x7fffffff, 0x7}, {0x6, 0xfffffff9, 0x0, 0x1ff, 0x2, 0x3}, {0xcb00, 0x80, 0x7, 0x7, 0x7fff, 0x6}, {0x10000, 0x7f, 0xffffffc0, 0x6, 0x100, 0x3}, {0x6, 0x10, 0xffffffff, 0x10000, 0x3, 0x5}, {0x10, 0xfff, 0x8001, 0x5b84, 0x1, 0x9}, {0xf, 0x0, 0x2, 0x4, 0x3ff, 0x8}, {0x8, 0xf0, 0x8, 0x84, 0x80, 0x401}, {0x0, 0x4, 0x1, 0x1ff, 0xe, 0x31f}, {0x7f, 0x4, 0x0, 0x502, 0x0, 0x7d}, {0x6, 0x2, 0x6, 0xe30d, 0x4, 0x7}, {0x8001, 0xf93d, 0x26, 0x1, 0x2, 0x63}, {0x0, 0x8, 0x5ed4, 0x10000, 0x8, 0x4}, {0x74, 0x2, 0xfffffffa, 0x6, 0x4ce, 0x5c56}, {0x4, 0x9, 0x1, 0x6, 0xbd6b, 0x8}, {0x3, 0x8001, 0x5, 0xffffffff, 0x80000000, 0x200}, {0x2, 0x0, 0x8000, 0x9, 0x478}, {0x1, 0x10001, 0xffffffff, 0xd5, 0x189, 0x3}, {0x1, 0x7, 0x8, 0x3, 0x4, 0x9}, {0x8, 0x8, 0x10, 0x7, 0x9, 0x6}, {0xffff783d, 0xfffffffe, 0xe980, 0x30, 0x766e}, {0x5, 0x1, 0x8, 0x6, 0x87, 0x1}, {0x6, 0x8, 0x3d2, 0xc, 0xf, 0x80}, {0x1, 0xff, 0x0, 0x4, 0x9, 0x4}, {0x9000, 0x4, 0x1, 0x219f, 0x1, 0x1ff}, {0x3, 0x6, 0x2, 0xc, 0x2, 0x4}, {0x0, 0x7, 0x7, 0x8, 0x9, 0x10000}, {0x5, 0x12898000, 0xfffffaf0, 0x80, 0x2, 0x3}, {0xe, 0x2, 0x7ff, 0x5a, 0x4, 0x2}, {0x9, 0x9, 0x4, 0xe44, 0x80000001, 0x2}, {0x8dc, 0x1, 0xc5b, 0xfff, 0x0, 0xd}, {0x1, 0x6, 0x7, 0x10001, 0x0, 0xa36}], [{}, {0x3, 0x1}, {0x1}, {0x4}, {0x3, 0x1}, {0x1}, {0x2}, {0x4, 0x1}, {0x5}, {0x4}, {0x5}, {0x2}, {0x1, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x5}, {0x4}, {0x5}, {}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x1}, {0x4}, {0x5}, {0x1, 0x3}, {0x5}, {0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x4, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {}, {0x7, 0x1}, {0x5}, {0x3}, {0x2}, {0x2}, {0x5}, {0x2}, {0x5}, {0x2}, {0x3, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x8a13c3dc4ab15414, 0x1}, {0x3, 0x1}, {0x5}, {0x1}, {0x2}, {0x4}, {0x3, 0x1}, {0x5}, {0x1}, {0x4}, {0x5, 0x1}, {0x5}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x5}, {0x1, 0x1}, {0x0, 0x1}, {0x3}, {}, {0x5}, {}, {0x5, 0x1}, {0x5}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x2, 0x1}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2}, {0x4}, {0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x4, 0x1}, {}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x5, 0x341e6fa53591f378}, {0x2, 0x1}, {0x2, 0x1}, {0x4}, {0x6, 0x1}, {0x0, 0x1}, {0x1}, {0x1}, {0x0, 0x1}, {0x1}, {0x6}, {0x4, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {}, {}, {0x1}, {0x1}, {0x3}, {}, {0x1, 0x1}, {0x1}, {0x4}, {0x5}]}}]}, {0xb, 0x6, "bcc38b0b37799a"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_skbedit={0x12c, 0x5, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x7}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x9}]}, {0xe5, 0x6, "2c8c0eed11d3eeaa715327cda14efc2e610b975ec9375843d47be9de5cbbc0b6261d464d50e05e946fe88b9ada28975cd46fa2cc1b831a0c31a3ba0e4efc628393bba53710061a39c34f7ed1e5c12c252a674320b71ed65a0c3c952c54c2cef67eff3f712fbc85ceff9b56855bbeb59c046bf35952d3278d5d5de2b8bb355c43a718259aeb0ec3700283ef22387b731dc516cf96b231ae776d1e6c56c2d93c903ebc4c84042374bfb26460190525bc0a38af21b61a6a58651e4f1daaaa47966ea571c49589c122bd4991567023a884e8435aa7e06c86b77421e8d0dd9d312f6fe5"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x5c84}, 0x1, 0x0, 0x0, 0xc0}, 0x8004) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="30000000111401002dbd7000ffdbdf2608004a000000000008004b00130000000800010000000000080003"], 0x30}, 0x1, 0x0, 0x0, 0x24040051}, 0x48884) listen(0xffffffffffffffff, 0x3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000300)={{0xa, 0x4e21, 0x400, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80}, {0xa, 0x4e23, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}, 0x0, {[0x81, 0x8, 0x4, 0x2, 0x80000001, 0x400, 0x7fffffff, 0x4939b8f9]}}, 0x5c) sendmsg$IPSET_CMD_SAVE(r4, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f00000007c0)=ANY=[@ANYBLOB="20000000080600000000000057ab0000070000040900020073793c1eb060bfd714d47a5b25a88f1b0551af99a6e0750000000000000000349110a1d4cc621ce9f8232bf27b904e0cf2f2ec054c0cd5528795d23867b67e"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x8000) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000440)) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000005c0)={'gre0\x00', 0x20}) r5 = socket$alg(0x26, 0x5, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_OKEY={0x8, 0x18}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x50}}, 0x0) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x68, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x49, 0xe, {{{}, {0x9}, @broadcast, @device_b, @from_mac=@broadcast}, 0x0, @random=0x7, 0x1, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @val={0x4, 0x6, {0xf0, 0x2, 0x7f, 0xa706}}, @val={0x6, 0x2, 0x6}, @void, @val={0x25, 0x3, {0x1, 0x8c, 0x8}}, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}]]}, 0x68}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) bind$alg(r5, &(0x7f00000003c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(aegis128)\x00'}, 0x6e) close(r5) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x7c, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "d1"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}}, 0x40) r9 = socket(0x2d, 0x2, 0x0) r10 = socket(0x1d, 0x2, 0x6) setsockopt$RDS_CANCEL_SENT_TO(r10, 0x6a, 0x1, 0x0, 0xc) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0xfe}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) sendmsg$RDMA_NLDEV_CMD_DELLINK(r9, &(0x7f0000000100)={&(0x7f0000000000)={0x2d, 0x0, 0x1f, 0x800}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000120a01040000000000000000000000000c000640000000000000000514000000000000000700000a0000000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x4080}, 0x1) 2.699920131s ago: executing program 0 (id=12048): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4, ';o\'.'}, &(0x7f0000000040)=0x2c) r2 = socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000000), 0x4) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000100)=0x79, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'netdevsim0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001340)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d616373656300001400028005000c0001000000080005000400000008000500", @ANYRES32=r4], 0x54}}, 0x800) 2.571922314s ago: executing program 5 (id=12050): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f00000003c0)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x25, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000feffffff0000000000000000b7080000000000007b8af8ff00000000b7080000010000807b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000b7080000000000007b8af8ff00000000b7080000050000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000200b7051b000800000085000000a52d00009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 2.554280889s ago: executing program 6 (id=12051): r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_enable(r0, &(0x7f0000000040)='0', 0x1) read(r0, &(0x7f0000000080)=""/166, 0xa6) write$6lowpan_enable(r0, &(0x7f0000000140)='0', 0x1) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r1) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, r2, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x4b5}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xfa}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x79}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000854) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000003c0)={0x0, 0x800, 0xffffffff}, &(0x7f0000000400)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000440)={0xfff7, 0x1, 0xc01c44e1098b1b89, 0x3, 0x243, 0x82, 0x8, 0x7, r3}, 0x20) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000480)={0x11e, 0x1, 0x5, 0x4, r3}, &(0x7f00000004c0)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000500)={r3, 0x8, 0x6, 0x8}, 0x10) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000540)={0x0, 0x0, 0x8000, 0x8}) close(r4) shutdown(0xffffffffffffffff, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r1) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0xf8, r5, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x14}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @key_params=[@NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d46746088977dd31b7b25418dd"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x28, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x24, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}], @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x401}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x14}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x16}]]}, 0xf8}, 0x1, 0x0, 0x0, 0x20008000}, 0x40000) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000780)={0xa077, 0x10, 0x0, 0x3d}, 0x8) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000800), r1) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x38, r6, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xf}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004010}, 0x8014) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000900)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000940)={0x1d, r7, 0x3, {0x0, 0x0, 0x1}, 0xfd}, 0x18) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r8, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x40, 0x140a, 0xa04, 0x70bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000a80)=0x7348, 0x4) ioctl$OCFS2_IOC_GROUP_ADD(r4, 0x40186f02, &(0x7f0000000ac0)={0x10, 0x8, 0x2, 0xfffc}) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000b00)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b80)=@ipv6_newrule={0x84, 0x20, 0x200, 0x70bd2b, 0x25dfdbfb, {0xa, 0x20, 0x80, 0x8, 0x7, 0x0, 0x0, 0x7, 0x1000a}, [@FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1}}, @FRA_SRC={0x14, 0x2, @mcast1}, @FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x4, 0x1ab5}, @FRA_SRC={0x14, 0x2, @loopback}, @FIB_RULE_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x4}, @FRA_DST={0x14, 0x1, @empty}, @FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x16}]}, 0x84}, 0x1, 0x0, 0x0, 0x40081}, 0x4005) 2.482923234s ago: executing program 2 (id=12052): r0 = socket$nl_route(0x10, 0x3, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r0, 0x8b25, &(0x7f0000000040)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=ANY=[@ANYBLOB="44000000100003052abd70000400000000000000", @ANYRES32=0x0, @ANYBLOB="18800300a0010200140012800b0001006d616373656300000400028008000500", @ANYRES32=r3, @ANYBLOB="080003"], 0x44}}, 0x800) sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)={0x44, 0xa, 0x6, 0x101, 0xd000000, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_LINENO={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 2.404218863s ago: executing program 0 (id=12053): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0xff05, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) socket$nl_audit(0x10, 0x3, 0x9) listen(r3, 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, &(0x7f00000000c0)=0xc8d3, 0x4) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r5, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r2) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="05fb00ffffffffffffff1f"], 0x18}}, 0x0) 2.358119947s ago: executing program 5 (id=12054): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x1000042, 0xa, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@name={0x1e, 0x2, 0x2, {{0x5364d1ba9e2c7eb6, 0x3}, 0x1}}, 0xfffffffffffffff7) close(0x4) 2.357555525s ago: executing program 6 (id=12055): r0 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @netrom}, [@netrom, @rose, @null, @netrom, @default, @rose, @rose, @null]}, &(0x7f0000000080)=0x48, 0x800) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x20, 0x52, 0x1, 0x0, 0x0, {0x1c}, [@typed={0xc, 0x5, 0x0, 0x0, @u64}]}, 0x20}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r3) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000190000000100800e000f01"}}}]}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000540)={'batadv0\x00', 0x0}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000580)={0x0, @private, @local}, &(0x7f00000005c0)=0xc) getpeername$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000640)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000700)={'ip6tnl0\x00', 0x0, 0x29, 0x5, 0x6d, 0x10000, 0x3c, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8, 0x8, 0xd, 0x9}}) getpeername$packet(r1, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000800)=0x14) sendmsg$ETHTOOL_MSG_EEE_GET(r3, &(0x7f0000000980)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000940)={&(0x7f0000000840)={0xd4, r5, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4000840}, 0x8000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd06, 0xfffffffd, {0x0, 0x0, 0x0, r15, {0x0, 0xe}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xdc, 0x0, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_TUPLE_REPLY={0x58, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2b}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2d}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x345e0566}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x101}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x800}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1}]}, @CTA_SEQ_ADJ_REPLY={0x2c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xfffffc00}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xa}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xbf}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x8000}, 0x4004045) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x60, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r15, {0xb}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_META={0x1c, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_LVALUE={0x4}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0x40}}}]}}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x0) r16 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r16, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x2}, @IFLA_BOND_TLB_DYNAMIC_LB={0x5}]}}}]}, 0x44}}, 0x0) 2.175413013s ago: executing program 5 (id=12056): r0 = socket$netlink(0x10, 0x3, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x7}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0x1, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b928, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x5, 0x7, 0x5, 0x1, 0x0, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r8, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_tx_ring(r8, 0x107, 0xd, &(0x7f0000000180)=@req={0x0, 0xff}, 0x10) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x24, r6, 0x1, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TX_RATES={0x8, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4, 0x4}]}]}, 0x24}}, 0x2400c090) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x40, r1, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x6, 0x6c}}}}, [@NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x7}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0xe}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0xc001) r9 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000001a40)=[@in={0x2, 0x2, @dev={0xac, 0x14, 0x14, 0x12}}, @in={0x2, 0x0, @local}], 0x20) r10 = socket$inet_sctp(0x2, 0x1, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x4, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}]}, &(0x7f00000003c0)='GPL\x00', 0x8a1, 0x97, &(0x7f00000004c0)=""/151, 0x41100, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x4, 0x4, 0x1000}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f00000006c0)=[{0x0, 0x2, 0x0, 0x6}, {0x2, 0x3, 0x8, 0x8}, {0x1, 0x1, 0x7, 0x7}, {0x1, 0x3, 0xd, 0x8}], 0x10, 0x5}, 0x94) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r10, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x64010102}], 0x10) shutdown(r10, 0x1) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r10, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x5}, &(0x7f0000000040)=0x8) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[], 0x1c}}, 0x8084) r12 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r12, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xc, 0x4, &(0x7f0000000140)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8b}]}, &(0x7f0000000280)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r12, 0x84, 0x6d, &(0x7f0000000000)={r13}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r9, 0x84, 0x75, &(0x7f0000000000)={r13, 0x5}, 0x8) 2.172983405s ago: executing program 2 (id=12057): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x2, 0x9, 0x0, 0x9, 0x2, 0x0, 0xffffffff, 0x25dfdc01}, 0x10}}, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000200)={'sit0\x00', &(0x7f00000000c0)={'gretap0\x00', 0x0, 0x8000, 0x760, 0x6, 0x6, {{0x8, 0x4, 0x3, 0x5, 0x20, 0x64, 0x0, 0x2, 0x29, 0x0, @private=0xa010101, @remote, {[@generic={0x94, 0x9, "9522262d00741b"}, @noop, @end]}}}}}) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@deltclass={0x40, 0x29, 0x0, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x2, 0xa}, {0xfff3, 0xffe0}, {0xfff2, 0xf}}, [@tclass_kind_options=@c_cbs={0x8}, @TCA_RATE={0x6, 0x5, {0x4, 0x2}}, @tclass_kind_options=@c_taprio={0xb}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000881) (async) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) (async) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_subtree(r7, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000340)={[{0x2b, 'pids'}, {0x2d, 'rlimit'}]}, 0xe) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x34, r5, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) (async) syz_emit_ethernet(0x46, &(0x7f00000004c0)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff}}}}}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001c0001fc28bd7000fcdbdf2507000000", @ANYRES32=r9, @ANYBLOB="8000260b0a0002000180c200000c00000c000e800500010003"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20040010) (async) r10 = bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8) r11 = socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r11, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r11], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r10, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0xb0, r12, 0x420, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x9c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x800}, 0x200400c5) 2.101222493s ago: executing program 0 (id=12058): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, 0x0, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x1, @broadcast, 'ip6gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r0, 0x40047452, &(0x7f00000000c0)={0x18, 0x0, {0x1, @empty, 'sit0\x00'}}) (async) ioctl$PPPOEIOCSFWD(r0, 0x40047452, &(0x7f00000000c0)={0x18, 0x0, {0x1, @empty, 'sit0\x00'}}) r2 = socket(0x10, 0x3, 0xffffffff) socket$netlink(0x10, 0x3, 0x1) (async) r3 = socket$netlink(0x10, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_GET_ADDR(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010f000000000000000003000000080004"], 0x1c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000001d00070f2cbd70000000000007000000", @ANYRES32=r4, @ANYBLOB="408052"], 0x1c}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000001d00070f2cbd70000000000007000000", @ANYRES32=r4, @ANYBLOB="408052"], 0x1c}}, 0x0) sendto$inet6(r2, &(0x7f0000000200)="7800000018002507b9409b14ffff00000200be040205e8056402040c5c0009003f0020030a0000000d0085a168d0bf46d32345653600648d27000b000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000402160020000a00000000e000e218bcddf66ed538f252325000", 0x78, 0x2400c090, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'vlan1\x00'}) bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) 2.031349416s ago: executing program 2 (id=12059): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100003052abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="1111020031000000200012800b0001006d61637365630000100002800c000100ffffffffffffffff08000500", @ANYRES32=r2], 0x48}, 0x1, 0x0, 0x0, 0x4040810}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000040)=ANY=[@ANYBLOB="0300000001"], 0xa) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'macsec0\x00', 0x1000}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x18) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000240)={'sit0\x00', @link_local}) 1.799326787s ago: executing program 0 (id=12060): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540), 0xffffffffffffffff) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000280)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e24, @multicast2}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f00000000c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e23, @multicast2}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x10) close(0x3) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000000000)={{r2}}) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x301, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000090}, 0x20000080) 724.11616ms ago: executing program 0 (id=12061): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005200ff0000000000000040000a00000008000100feffffff"], 0x1c}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newchain={0x498, 0x64, 0x0, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x1}, {0xf, 0xa}, {0xc}}, [@TCA_RATE={0x6, 0x5, {0xe, 0x2}}, @TCA_RATE={0x6, 0x5, {0x2, 0x3}}, @TCA_RATE={0x6, 0x5, {0x4}}, @filter_kind_options=@f_route={{0xa}, {0x440, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x72}, @TCA_ROUTE4_POLICE={0x10, 0x5, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1819}]}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xe, 0xc}}, @TCA_ROUTE4_POLICE={0x41c, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x0, 0x4b79, 0x400, 0x4, 0x1, 0xff, 0xb3e2, 0x50e, 0xfffffffa, 0x5b65, 0x824f, 0x9, 0x44b4, 0xfffffff7, 0x8, 0x0, 0x234, 0x9, 0x5, 0x9, 0x9, 0x5, 0x5, 0x1aff, 0x40, 0x9b55, 0xfffffff7, 0xffff8001, 0xfffffff7, 0x0, 0xff, 0x1, 0x3, 0xc8e, 0x1, 0x200, 0x8, 0x0, 0x0, 0x9, 0xd38, 0xf, 0x2, 0x9, 0x6, 0x0, 0x1, 0x0, 0x0, 0x6, 0x8, 0x2d, 0x1, 0x0, 0xff, 0x7, 0x6, 0x80000000, 0x9, 0x6, 0x7, 0x3, 0x81, 0x7fff, 0x0, 0x80, 0x9, 0x7a, 0x401, 0x5b6c, 0x80000001, 0x8, 0x5, 0x6, 0x5, 0x4, 0x9, 0x0, 0x7000, 0x50cb, 0x889, 0x0, 0x3, 0xfffff801, 0x3, 0x0, 0x6, 0x9, 0x9, 0x1, 0x10001, 0xfffffff9, 0xea132edf, 0xd, 0xd7, 0x1, 0x6, 0x0, 0x2f9, 0x0, 0x8, 0xf16, 0x9, 0x8, 0x401, 0x2, 0x4e6b, 0x6, 0x76a9, 0x1, 0xfd, 0x81, 0xffffff94, 0x0, 0x7, 0x101, 0x5, 0x9, 0x401, 0x111a, 0x100, 0x3, 0x3, 0x10001, 0xce5, 0x4, 0x101, 0x7fffffff, 0x86f4, 0x6, 0x8, 0x7, 0x4, 0xf, 0x7, 0xffffff65, 0xfff, 0x8, 0x6, 0xb8, 0x0, 0x7, 0x4ed, 0x30d, 0x7, 0xffffffff, 0x6, 0x3, 0x6, 0xfffffff9, 0x8, 0x101, 0x1ff, 0x8, 0x0, 0x9, 0xfff, 0x7fffffff, 0x1, 0x9, 0xcc, 0x0, 0x8, 0xff, 0x3, 0x8000000, 0x2a23, 0x40, 0x1, 0x98, 0x9, 0x8, 0x1, 0x3, 0x401, 0x100, 0x1, 0xffff, 0xffff, 0x2, 0x1, 0x6, 0x80, 0xd86f, 0x7, 0x2, 0x6, 0xde, 0xc, 0x2, 0x2, 0x3, 0x2ee, 0x8, 0x8, 0x8, 0x1, 0x2, 0x1000, 0x2, 0x10001, 0x1, 0x800, 0x9, 0x3, 0x2, 0x80, 0x9, 0x6, 0x2, 0x2, 0x2, 0x75ba, 0x6, 0x3, 0x0, 0x2, 0x6, 0x0, 0x8009, 0x139, 0x8000, 0x7fff, 0x200, 0x2, 0x1, 0x0, 0xbc6, 0xcf12, 0x2, 0x6, 0x100, 0x80000000, 0xe209, 0x7, 0x8000, 0x7, 0x8, 0x2, 0x4, 0x9, 0x527e, 0xea, 0x0, 0xc, 0x7, 0x4, 0x2, 0xf70, 0xfffffff9, 0xd9b6, 0x226, 0x538e, 0x4, 0x5]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xcc0d}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x99}, @TCA_RATE={0x6, 0x5, {0x9, 0xf7}}]}, 0x498}, 0x1, 0x0, 0x0, 0x4000890}, 0x0) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r5, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000300)=ANY=[@ANYBLOB="180300000005000000000000000000001401000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8", @ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006140)=@delchain={0x2c, 0x65, 0x1, 0x70bd2e, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0xc, 0xc}, {}, {0xfff2}}, [@TCA_CHAIN={0x8, 0xb, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004004) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r7) sendmsg$IEEE802154_ASSOCIATE_REQ(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r11, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xc}]}, 0x24}, 0x1, 0x0, 0x0, 0x45}, 0xc400) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r2, &(0x7f0000000a80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x68, r11, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x2}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x9}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x4}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x4) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001800010000000000000000000200000000000006000000000c00090008000000", @ANYRES32, @ANYBLOB="08000400", @ANYRES32, @ANYBLOB="080005"], 0x38}}, 0x0) 559.555073ms ago: executing program 5 (id=12062): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {0xe, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}}}, &(0x7f0000000000)=0x9c) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) mmap(&(0x7f000041f000/0x1000)=nil, 0x1000, 0x8, 0x8010, r2, 0x82ccb000) 471.150782ms ago: executing program 2 (id=12063): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x9, @ipv4={'\x00', '\xff\xff', @local}, 0x800001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f5d937e5523", "4705a7b6113b967d7314f7201eb2babf", "1d1cbe23", "fdffffffffffffff"}, 0x28) sendmmsg$inet(r3, &(0x7f0000002d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000000) sendmsg$rds(r2, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x2}, {0x0}, &(0x7f0000001880)=[{0x0}], 0x1}}], 0x48, 0x24080080}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x14, 0x3, 0x8, 0x3, 0x0, 0x0, {0x1, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x24000084}, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000280)={r5}, &(0x7f0000000340)=0x8) 381.593259ms ago: executing program 6 (id=12064): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x4c, r2, 0x1, 0x0, 0x0, {0x4, 0x74, 0x609}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}]}, 0x4c}, 0x1, 0xffffffff00000003}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)={0x24, r5, 0x1, 0x4, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x24}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00'}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r7, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x7, 0x801, 0x0, 0x0, {0x4}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40014) socket$netlink(0x10, 0x3, 0x4) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x14, 0x0, 0x1, 0x0, 0x0, {0x39}}, 0x14}}, 0x8094) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r9, 0x0, 0x61, 0x0, &(0x7f0000000040)) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r11 = accept4(r10, 0x0, 0x0, 0x0) sendmsg$alg(r11, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@iv={0x18}], 0x18, 0x2400c098}, 0x4000010) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000280012000900"], 0x48}}, 0x0) accept4(r6, &(0x7f0000000240)=@nfc, &(0x7f00000002c0)=0x80, 0x80000) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x13, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xd1, 0x35}, [@call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd0c}, 0x64) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001c00357428bd7000fed3df2502000000", @ANYRES64=r6, @ANYRESHEX=r12, @ANYRES16=r12], 0x2c}, 0x1, 0x0, 0x0, 0x20040001}, 0x200080c0) 313.041662ms ago: executing program 2 (id=12065): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000480)={{r0, &(0x7f0000000340)='ethtool\x00', 0xc01, &(0x7f0000000380)={@align=0x3, {0xee2, 0xc, 0x3, 0x8}}, 0x3, &(0x7f00000003c0)={@_ha_fsid}, &(0x7f0000000400)=0x1d1}, {[0x9e82, 0x401, 0x5, 0x6]}, 0x40, 0x31, &(0x7f0000000440)=""/49}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008800800030001"], 0x48}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) (async) sendmmsg$inet(r2, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) (async) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000500), &(0x7f0000000580)=0x4) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x24, 0x14, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0x2}, {0xb}, {0x0, 0xffff}}}, 0x24}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01062bbd7000fbdbdf25510000000a000600ffffffffffff000005008a000000000005008a000200000005008a000000000005008a000200000005008a0200000008000000000300000005008a000400ddcbc0f0684bc16fa26ee4622fecf4297405d84d2eaa196b23a42797b3984b384f10abcedfac84"], 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x24004000) (async) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r6, @ANYRES16=r6, @ANYRES8=r0], 0xc4}}, 0x0) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r8, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe) connect$bt_l2cap(r8, &(0x7f0000000080)={0x1f, 0x76, @fixed, 0x0, 0x2}, 0xe) (async) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000000206030000000000000000000000280005000100070000000900020073797a31000000000c00078005001400750000000500050002000000050004000000000011000300686173683a69702c706f7274"], 0x58}}, 0x0) (async) r9 = socket$unix(0x1, 0x1, 0x0) r10 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r10, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r11, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_tracing={0x1a, 0x1c, &(0x7f00000005c0)=ANY=[@ANYBLOB="180100000001000000fb88000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018280000", @ANYRES32=r4, @ANYBLOB="000000000100000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000938a0c00ffffffff9500000000000000185a000006000000000000000000000018400000060000000000000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f00000006c0)='syzkaller\x00', 0xb04e0e0, 0xa1, &(0x7f00000007c0)=""/161, 0x40f00, 0x12, '\x00', r11, 0x19, r1, 0x8, &(0x7f0000000880)={0x5, 0x2}, 0x8, 0x10, &(0x7f00000008c0)={0x2, 0x10, 0x9, 0x3}, 0x10, 0x2620b}, 0x94) (async) sendmsg$IPCTNL_MSG_CT_GET_DYING(r7, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x6, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x900}, 0x4044014) 243.456105ms ago: executing program 5 (id=12066): bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) close(0x3) close(0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000000)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) 242.573058ms ago: executing program 0 (id=12067): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x40) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="6400000082f40a0000870d00"/21, @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) 89.536277ms ago: executing program 6 (id=12068): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29c}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0xfffffffc, 0x5, 0xb2, 0xa8}, 0x39}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x2) close(r1) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@allocspi={0x120, 0x16, 0x1, 0x70bd2a, 0x0, {{{@in6=@remote, @in6=@mcast2, 0xe21, 0x0, 0x4e23, 0x0, 0x0, 0xa0, 0x0, 0x1d}, {@in=@dev={0xac, 0x14, 0x14, 0x2d}, 0x0, 0x6c}, @in6=@mcast2, {0x10000, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x4}, {0x0, 0x6, 0xfff, 0xffffffffffdffffb}, {0x0, 0x4}, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x22}, 0x0, 0x1032}, [@address_filter={0x28, 0x1a, {@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@mcast1, 0xa, 0x9}}]}, 0x120}}, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r5, 0x84, 0x1e, &(0x7f0000000000)=0x2, 0x4) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r5, 0x8040942d, &(0x7f0000000100)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r3, 0x42}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)="27030200dc0f14000e00003c002400244000ff1100000066c1532cc10200000003125ce882cbf490d90812533f00", 0x2e}], 0x1}, 0x4005) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) socket(0x400000000010, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29c}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0xfffffffc, 0x5, 0xb2, 0xa8}, 0x39}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x2) (async) close(r1) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@allocspi={0x120, 0x16, 0x1, 0x70bd2a, 0x0, {{{@in6=@remote, @in6=@mcast2, 0xe21, 0x0, 0x4e23, 0x0, 0x0, 0xa0, 0x0, 0x1d}, {@in=@dev={0xac, 0x14, 0x14, 0x2d}, 0x0, 0x6c}, @in6=@mcast2, {0x10000, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x4}, {0x0, 0x6, 0xfff, 0xffffffffffdffffb}, {0x0, 0x4}, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x22}, 0x0, 0x1032}, [@address_filter={0x28, 0x1a, {@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@mcast1, 0xa, 0x9}}]}, 0x120}}, 0x0) (async) socket(0x10, 0x3, 0x0) (async) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r5, 0x84, 0x1e, &(0x7f0000000000)=0x2, 0x4) (async) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r5, 0x8040942d, &(0x7f0000000100)) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) socket$kcm(0x11, 0x3, 0x0) (async) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r3, 0x42}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)="27030200dc0f14000e00003c002400244000ff1100000066c1532cc10200000003125ce882cbf490d90812533f00", 0x2e}], 0x1}, 0x4005) (async) 52.260252ms ago: executing program 5 (id=12069): r0 = accept4$ax25(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) recvfrom$ax25(r0, &(0x7f0000000040)=""/58, 0x3a, 0x2000, &(0x7f0000000080)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) (async) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000100)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$XFS_IOC_AG_GEOMETRY(r0, 0xc080583d, &(0x7f0000000340)={0xb, 0xc100, 0x8000, 0x8, 0x6f, 0xfff, 0x80000001, 0x1000}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f00000003c0)={0x4, [0x1, 0xfffff800], 0x1}, 0x10) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000440)={0x0, @empty, @multicast1}, &(0x7f0000000480)=0xc) sendmsg$nl_route(r2, &(0x7f0000000680)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)=@can_delroute={0x16c, 0x19, 0x2, 0x70bd2a, 0x25dfdbfc, {0x1d, 0x1, 0x1}, [@CGW_CS_CRC8={0x11e, 0x6, {0x42, 0x1b, 0xa, 0x0, 0x8, "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", 0x0, "7f5ef26a674dae8da700961fda911f7e6d974fc0"}}, @CGW_MOD_SET={0x15, 0x4, {{{0x1}, 0x0, 0x1, 0x0, 0x0, "a7db8e42c422c54e"}, 0x1}}, @CGW_MOD_AND={0x15, 0x1, {{{0x3, 0x1, 0x1}, 0x7, 0x3, 0x0, 0x0, "6179c5faba8a0271"}, 0x5}}, @CGW_DST_IF={0x8, 0xa, r3}]}, 0x16c}, 0x1, 0x0, 0x0, 0xc00}, 0x800) (async) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r2, 0x80489439, &(0x7f00000006c0)) (async) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000007c0)={'syztnl0\x00', &(0x7f0000000740)={'syztnl0\x00', r3, 0x29, 0x8, 0xe, 0x0, 0x50, @dev={0xfe, 0x80, '\x00', 0x3e}, @mcast2, 0x8000, 0x10, 0x1, 0x2}}) ioctl$sock_inet6_SIOCDIFADDR(r4, 0x8936, &(0x7f0000000800)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x60, r5}) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000840), 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0xbc, r6, 0x800, 0x70bd26, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0x77, 0xa8, @random="4756415d72960653bc8867194b06f9b580e96062cf06b0a054dcde65a1c57e7b2fed01c15f6d0f2f96f75e09d287f92fba27e556386fa6009edbbbdb3e4639eaa301000842ee49a0f6c424f27e7860fdba60a1409bd6a8cb00104cf8997bfbb29156c6dc0e4c6f6b1ac0bbbb91347712f0afd7"}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0xbc}}, 0x800) (async) ioctl$OCFS2_IOC_RESVSP64(r1, 0x4030582a, &(0x7f0000000a00)={0x1, 0x2, 0x6, 0x8, 0x5, 0x9}) (async) r7 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFCONF(r7, 0x8912, &(0x7f0000000ac0)=@req={0x28, &(0x7f0000000a80)={'tunl0\x00', @ifru_settings={0x7, 0x7, @te1=&(0x7f0000000a40)={0x2, 0xffffff4c, 0x3ff, 0xffffff0f}}}}) (async) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000000b00), 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r9, 0x84, 0x1c, &(0x7f0000000b40), &(0x7f0000000b80)=0x4) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000bc0)='illinois', 0x8) (async) setsockopt$MRT6_ADD_MFC_PROXY(r9, 0x29, 0xd2, &(0x7f0000000c00)={{0xa, 0x4e22, 0x6, @empty, 0x5}, {0xa, 0x4e22, 0x34, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x504}, 0x0, {[0x4, 0x1, 0x19c85080, 0xc72, 0x80, 0x2592, 0x2, 0x8]}}, 0x5c) (async) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f0000000c80)=0x1) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0xb, 0xa, &(0x7f0000000cc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x5}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r9}}, @exit, @alu={0x0, 0x1, 0x6, 0x2, 0x2, 0x2, 0x8}]}, &(0x7f0000000d40)='syzkaller\x00', 0x2, 0x25, &(0x7f0000000d80)=""/37, 0x40f00, 0x2c, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, &(0x7f0000000dc0)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000e00)={0x0, 0x4, 0x0, 0x9}, 0x10, 0xffffffffffffffff, r9, 0x2, &(0x7f0000000e40)=[r9, r9, r9], &(0x7f0000000e80)=[{0x2, 0x3, 0x8, 0x5}, {0x2, 0x4, 0xe, 0x8}], 0x10, 0x1}, 0x94) (async) ioctl$NS_GET_OWNER_UID(r9, 0xb704, &(0x7f0000000f80)=0x0) ioctl$SIOCAX25GETUID(r0, 0x89e0, &(0x7f0000000fc0)={0x3, @bcast, r10}) (async) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000001040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(r9, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x38, r11, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x4000) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001a40)={0x30, 0x2b, &(0x7f0000001500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x30d3}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@tail_call, @ldst={0x3, 0x1, 0x4, 0x1, 0x3, 0x4, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @alu={0x7, 0x0, 0xd, 0xa, 0x1, 0xfffffffffffffffc, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_val={0x18, 0x7, 0x2, 0x0, r9, 0x0, 0x0, 0x0, 0x3}], {{}, {}, {0x85, 0x0, 0x0, 0x18e}}}, &(0x7f0000001680)='GPL\x00', 0x8, 0x86, &(0x7f00000016c0)=""/134, 0x40f00, 0x0, '\x00', r3, @fallback=0x3e, 0xffffffffffffffff, 0x8, &(0x7f0000001780)={0x7, 0x1}, 0x8, 0x10, &(0x7f00000017c0)={0x1, 0x1, 0x1}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, &(0x7f00000019c0)=[0xffffffffffffffff, 0xffffffffffffffff, r9, r9, r9, r9, 0xffffffffffffffff], &(0x7f0000001a00)=[{0x3, 0x2, 0xd, 0xc}, {0x5, 0x3, 0xf, 0x7}, {0x5, 0x1, 0xf, 0x6}], 0x10, 0x3}, 0x94) 0s ago: executing program 2 (id=12070): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000fcdbdf2503000000180001801400020073797a5f74756e00000000000000000005000200000000000500050000000000050003"], 0x44}, 0x1, 0x0, 0x0, 0x20009085}, 0x40040c0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000015000100fcfffffffcdbdf350f"], 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x801, 0x41, 0x25dfdbf7, {0x0, 0x0, 0x0, 0x0, 0x2202e}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x3}, @IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048050}, 0x40014) kernel console output (not intermixed with test programs): syz.1.10381 (pid 12426) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1028.769613][T12426] Use struct sctp_sack_info instead [ 1028.790137][T12444] netlink: 'syz.2.10384': attribute type 10 has an invalid length. [ 1028.820266][T12444] team0: Device ipvlan1 failed to register rx_handler [ 1028.838267][T12426] sctp: [Deprecated]: syz.1.10381 (pid 12426) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1028.838267][T12426] Use struct sctp_sack_info instead [ 1028.889351][T12426] sctp: [Deprecated]: syz.1.10381 (pid 12426) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1028.889351][T12426] Use struct sctp_sack_info instead [ 1029.304687][T12467] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1029.895674][T12501] syzkaller0: entered promiscuous mode [ 1029.917099][T12501] syzkaller0: entered allmulticast mode [ 1030.191339][T12516] netlink: 'syz.0.10400': attribute type 1 has an invalid length. [ 1030.481065][T12531] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10402'. [ 1030.521808][T12531] netlink: 'syz.2.10402': attribute type 13 has an invalid length. [ 1030.544058][T12534] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1030.613013][T12531] gretap0: refused to change device tx_queue_len [ 1030.650667][T12531] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1030.676252][T12537] netlink: 'syz.0.10404': attribute type 64 has an invalid length. [ 1030.862718][ T7515] lec:lec_start_xmit: lec0:No lecd attached [ 1030.903231][T12548] x_tables: duplicate entry at hook 1 [ 1031.060182][T12554] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.10408'. [ 1031.541264][T12587] macvtap1: entered allmulticast mode [ 1031.574862][T12587] veth0_macvtap: entered allmulticast mode [ 1031.737883][T12595] __nla_validate_parse: 1 callbacks suppressed [ 1031.737905][T12595] netlink: 236 bytes leftover after parsing attributes in process `syz.0.10417'. [ 1031.850940][T12597] bond5: option lp_interval: invalid value (0) [ 1031.864816][T12597] bond5: option lp_interval: allowed values 1 - 2147483647 [ 1031.889098][T12597] bond5 (unregistering): Released all slaves [ 1032.207020][T12614] veth0_virt_wifi: mtu less than device minimum [ 1032.500750][T12633] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10428'. [ 1032.530678][T12633] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10428'. [ 1032.572178][T12638] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1032.586256][T12638] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1032.604900][T12638] gretap1: entered promiscuous mode [ 1032.610688][T12638] gretap1: entered allmulticast mode [ 1032.631991][T12636] bridge_slave_1: left allmulticast mode [ 1032.640760][T12636] bridge_slave_1: left promiscuous mode [ 1032.681613][T12636] bridge0: port 2(bridge_slave_1) entered disabled state [ 1032.717897][T12636] bridge_slave_0: left allmulticast mode [ 1032.740210][T12636] bridge_slave_0: left promiscuous mode [ 1032.773320][T12636] bridge0: port 1(bridge_slave_0) entered disabled state [ 1033.178178][T12677] syzkaller1: entered promiscuous mode [ 1033.183732][T12677] syzkaller1: entered allmulticast mode [ 1033.265763][T12683] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10438'. [ 1033.322621][T12685] netlink: 144 bytes leftover after parsing attributes in process `syz.2.10439'. [ 1033.401106][T12688] netdevsim netdevsim2: Firmware load for '..' refused, path contains '..' component [ 1033.432600][T12685] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1033.486985][T12685] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 1033.660957][T12698] netlink: 256 bytes leftover after parsing attributes in process `syz.0.10442'. [ 1033.825473][T12709] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.10446'. [ 1033.946031][T12720] netlink: 'syz.0.10447': attribute type 15 has an invalid length. [ 1033.954044][T12720] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10447'. [ 1033.985236][T12720] netlink: 'syz.0.10447': attribute type 15 has an invalid length. [ 1033.997459][T12720] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10447'. [ 1034.015391][T12720] netlink: 'syz.0.10447': attribute type 15 has an invalid length. [ 1034.023879][T12720] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10447'. [ 1034.034323][T12724] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1034.094782][T12720] netlink: 'syz.0.10447': attribute type 15 has an invalid length. [ 1034.113644][T12720] netlink: 'syz.0.10447': attribute type 15 has an invalid length. [ 1034.141689][T12720] netlink: 'syz.0.10447': attribute type 15 has an invalid length. [ 1034.166979][T12720] netlink: 'syz.0.10447': attribute type 15 has an invalid length. [ 1034.176038][T12720] netlink: 'syz.0.10447': attribute type 15 has an invalid length. [ 1034.195237][T12720] netlink: 'syz.0.10447': attribute type 15 has an invalid length. [ 1034.205826][T12720] netlink: 'syz.0.10447': attribute type 15 has an invalid length. [ 1034.350219][T12731] af_packet: tpacket_rcv: packet too big, clamped from 216 to 4294967272. macoff=96 [ 1034.420315][T12737] hsr_slave_0: left promiscuous mode [ 1034.450142][T12737] hsr_slave_1: left promiscuous mode [ 1034.748445][T12744] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1034.750817][T30968] nci: nci_ntf_packet: unknown ntf opcode 0x300 [ 1035.643202][T12801] : entered promiscuous mode [ 1036.075067][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5210 ms [ 1036.083293][ C0] lec:lec_tx_timeout: lec0 [ 1036.898104][T12859] __nla_validate_parse: 141 callbacks suppressed [ 1036.898127][T12859] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10477'. [ 1037.723304][T12903] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10488'. [ 1038.391513][T12943] tipc: Enabled bearer , priority 0 [ 1038.430821][T12943] syzkaller0: entered promiscuous mode [ 1038.436434][T12943] syzkaller0: entered allmulticast mode [ 1038.442934][T12943] tipc: Resetting bearer [ 1038.451850][T12943] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10503'. [ 1038.465191][T12942] tipc: Resetting bearer [ 1039.292857][T12947] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10505'. [ 1040.698215][T12942] tipc: Disabling bearer [ 1040.958842][T12969] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10511'. [ 1041.658770][T13004] xt_hashlimit: size too large, truncated to 1048576 [ 1041.714868][T13005] –: renamed from vxcan1 (while UP) [ 1041.763938][T13008] syzkaller0: entered promiscuous mode [ 1041.781483][T13008] syzkaller0: entered allmulticast mode [ 1041.853014][T13008] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10521'. [ 1041.868831][T13011] validate_nla: 65 callbacks suppressed [ 1041.868855][T13011] netlink: 'syz.4.10522': attribute type 8 has an invalid length. [ 1041.885883][T13008] netlink: 'syz.0.10521': attribute type 24 has an invalid length. [ 1042.092796][T13016] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10524'. [ 1042.188517][T13021] netlink: 88 bytes leftover after parsing attributes in process `syz.4.10527'. [ 1042.205483][T13024] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10528'. [ 1042.216493][T13021] netem: invalid attributes len -24 [ 1042.221943][T13021] netem: change failed [ 1042.289237][T13026] netlink: 256 bytes leftover after parsing attributes in process `syz.2.10529'. [ 1042.606102][T13045] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10536'. [ 1042.617391][T13044] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10536'. [ 1042.667779][T13045] netlink: 'syz.4.10536': attribute type 10 has an invalid length. [ 1042.690626][T13045] bridge0: port 2(bridge_slave_1) entered disabled state [ 1042.698604][T13045] bridge0: port 1(0ľx9˙) entered disabled state [ 1042.732399][T13045] bridge0: port 2(bridge_slave_1) entered blocking state [ 1042.739985][T13045] bridge0: port 2(bridge_slave_1) entered listening state [ 1042.747831][T13045] bridge0: port 1(0ľx9˙) entered blocking state [ 1042.755014][T13045] bridge0: port 1(0ľx9˙) entered listening state [ 1042.800379][T13045] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1043.019697][T13058] netlink: 'syz.4.10540': attribute type 30 has an invalid length. [ 1043.081793][T13058] bond4: option downdelay: invalid value (18446744073709551611) [ 1043.110086][T13058] bond4: option downdelay: allowed values 0 - 2147483647 [ 1043.121212][T13058] bond4 (unregistering): Released all slaves [ 1043.163255][T13069] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10543'. [ 1043.178985][T13069] chnl_net:caif_netlink_parms(): no params data found [ 1043.258739][T13076] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10544'. [ 1043.311181][T13076] bond5: option xmit_hash_policy: invalid value (64) [ 1043.321436][T13076] bond5 (unregistering): Released all slaves [ 1043.476107][T13091] openvswitch: netlink: IP tunnel dst address not specified [ 1043.527481][T13095] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10549'. [ 1043.562388][T13097] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10552'. [ 1043.572481][T13097] hsr_slave_0: left promiscuous mode [ 1043.579657][T13097] hsr_slave_1: left promiscuous mode [ 1043.749928][T13102] tap0: tun_chr_ioctl cmd 1074025672 [ 1043.755699][T13102] tap0: ignored: set checksum disabled [ 1044.097109][T13113] bond5: entered promiscuous mode [ 1044.102280][T13113] bond5: entered allmulticast mode [ 1044.108075][T13113] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1044.437870][T13135] debugfs: 'KŠźu ™crµ±K:‘Ł˙ĚĄÝBŤßÝŁ| “ĽÚŢlS·ś-!' already exists in 'ieee80211' [ 1044.605559][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1044.621971][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1044.631111][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1044.641191][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1044.649464][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1044.707293][T13145] hsr0 speed is unknown, defaulting to 1000 [ 1044.827952][T13154] "syz.3.10570" (13154) uses obsolete ecb(arc4) skcipher [ 1045.053578][T13145] chnl_net:caif_netlink_parms(): no params data found [ 1045.247202][T13171] nbd: socks must be embedded in a SOCK_ITEM attr [ 1045.272470][T13171] mac80211_hwsim hwsim105 wlan0: entered promiscuous mode [ 1045.422573][T13145] bridge0: port 1(bridge_slave_0) entered blocking state [ 1045.431495][T13145] bridge0: port 1(bridge_slave_0) entered disabled state [ 1045.440549][T13145] bridge_slave_0: entered allmulticast mode [ 1045.448965][T13145] bridge_slave_0: entered promiscuous mode [ 1045.457625][T13178] netlink: 'syz.3.10576': attribute type 29 has an invalid length. [ 1045.466532][T13179] netlink: 'syz.3.10576': attribute type 29 has an invalid length. [ 1045.488730][T13145] bridge0: port 2(bridge_slave_1) entered blocking state [ 1045.496973][T13178] unsupported nla_type 58 [ 1045.503719][T13145] bridge0: port 2(bridge_slave_1) entered disabled state [ 1045.516574][T13145] bridge_slave_1: entered allmulticast mode [ 1045.535314][T13145] bridge_slave_1: entered promiscuous mode [ 1045.583903][T13176] netlink: 'syz.0.10575': attribute type 1 has an invalid length. [ 1045.648230][T13145] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1045.674137][T13145] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1045.783047][T13145] team0: Port device team_slave_0 added [ 1045.808331][T13145] team0: Port device team_slave_1 added [ 1045.964242][T13195] sctp_setsockopt_delayed_ack: 23 callbacks suppressed [ 1045.964266][T13195] sctp: [Deprecated]: syz.2.10581 (pid 13195) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1045.964266][T13195] Use struct sctp_sack_info instead [ 1046.093471][T13145] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1046.101611][T13145] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1046.130037][T13145] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1046.161436][T13145] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1046.168622][T13145] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1046.195705][T13145] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1046.327543][T13145] hsr_slave_0: entered promiscuous mode [ 1046.337986][T13145] hsr_slave_1: entered promiscuous mode [ 1046.353992][T13145] debugfs: 'hsr0' already exists in 'hsr' [ 1046.360389][T13145] Cannot create hsr debugfs directory [ 1046.441162][T13209] netlink: zone id is out of range [ 1046.449853][T13209] netlink: zone id is out of range [ 1046.456589][T13209] netlink: zone id is out of range [ 1046.461932][T13209] netlink: zone id is out of range [ 1046.467862][T13209] netlink: zone id is out of range [ 1046.474338][T13209] netlink: zone id is out of range [ 1046.486137][ T5843] Bluetooth: hci1: command 0x0406 tx timeout [ 1046.500743][T13209] netlink: zone id is out of range [ 1046.518547][T13209] netlink: zone id is out of range [ 1046.528815][T13209] netlink: zone id is out of range [ 1046.715276][ T6071] Bluetooth: hci0: command tx timeout [ 1046.776708][T13145] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1046.802663][T13145] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1046.868185][T13145] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1046.891864][T13229] xt_TCPMSS: Only works on TCP SYN packets [ 1046.895429][T13228] xt_TCPMSS: Only works on TCP SYN packets [ 1046.906734][T13145] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1046.931763][T13226] syzkaller0: entered promiscuous mode [ 1046.944766][T13226] syzkaller0: entered allmulticast mode [ 1047.031078][T13243] IPv6: sit2: Disabled Multicast RS [ 1047.042199][T13243] sit2: entered allmulticast mode [ 1047.249910][T13253] syzkaller0: entered promiscuous mode [ 1047.255603][T13253] syzkaller0: entered allmulticast mode [ 1047.310335][T13145] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1047.319431][T13252] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1047.386378][T13145] 8021q: adding VLAN 0 to HW filter on device team0 [ 1047.419879][ T8621] bridge0: port 1(bridge_slave_0) entered blocking state [ 1047.427125][ T8621] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1048.342599][T13264] delete_channel: no stack [ 1048.797065][ T6071] Bluetooth: hci0: command tx timeout [ 1049.621222][ T8621] bridge0: port 2(bridge_slave_1) entered blocking state [ 1049.628535][ T8621] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1049.720596][T13268] net_ratelimit: 45 callbacks suppressed [ 1049.720614][T13268] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1049.860166][T13275] netlink: 'syz.3.10602': attribute type 10 has an invalid length. [ 1050.049952][T13145] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1050.262235][T13297] __nla_validate_parse: 35 callbacks suppressed [ 1050.262258][T13297] netlink: 104 bytes leftover after parsing attributes in process `syz.0.10605'. [ 1050.286606][T13298] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10605'. [ 1050.296784][T13297] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10605'. [ 1050.346591][T13302] netlink: 'syz.2.10606': attribute type 2 has an invalid length. [ 1050.375368][T13302] netlink: 244 bytes leftover after parsing attributes in process `syz.2.10606'. [ 1050.577493][T13310] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1050.584924][T13310] IPv6: NLM_F_CREATE should be set when creating new route [ 1050.589528][T13145] veth0_vlan: entered promiscuous mode [ 1050.592365][T13310] IPv6: NLM_F_CREATE should be set when creating new route [ 1050.620398][T13145] veth1_vlan: entered promiscuous mode [ 1050.683421][T13145] veth0_macvtap: entered promiscuous mode [ 1050.696152][T13145] veth1_macvtap: entered promiscuous mode [ 1050.740113][T13145] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1050.781589][T13145] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1050.803343][T30971] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1050.822052][T30971] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1050.839321][T30971] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1050.849969][T30971] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1050.875265][ T6071] Bluetooth: hci0: command tx timeout [ 1050.911950][T13315] : entered promiscuous mode [ 1051.040057][ T8631] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1051.048836][ T8631] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1051.160198][T30966] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1051.176137][T30966] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1051.479627][T13338] netlink: 'syz.5.10618': attribute type 11 has an invalid length. [ 1051.488898][T13338] netlink: 228 bytes leftover after parsing attributes in process `syz.5.10618'. [ 1051.503647][T13338] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1051.588732][T13340] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10619'. [ 1051.667727][T13344] Bluetooth: MGMT ver 1.23 [ 1051.809051][T13354] openvswitch: netlink: Key 20 has unexpected len 8 expected 4 [ 1051.824010][T13356] netlink: 'syz.3.10627': attribute type 10 has an invalid length. [ 1052.289926][T13386] erspan0: entered allmulticast mode [ 1052.373733][T13389] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10636'. [ 1052.876314][T13403] FAULT_INJECTION: forcing a failure. [ 1052.876314][T13403] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1052.944743][T13403] CPU: 1 UID: 0 PID: 13403 Comm: syz.5.10640 Not tainted syzkaller #0 PREEMPT(full) [ 1052.944775][T13403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1052.944789][T13403] Call Trace: [ 1052.944799][T13403] [ 1052.944809][T13403] dump_stack_lvl+0xe8/0x150 [ 1052.944847][T13403] should_fail_ex+0x412/0x560 [ 1052.944887][T13403] _copy_from_user+0x2d/0xb0 [ 1052.944915][T13403] ___sys_sendmsg+0x1c6/0x360 [ 1052.944951][T13403] ? __pfx____sys_sendmsg+0x10/0x10 [ 1052.944986][T13403] ? kstrtouint+0x6e/0xe0 [ 1052.945045][T13403] ? __fget_files+0x2a/0x420 [ 1052.945065][T13403] ? __fget_files+0x3a0/0x420 [ 1052.945096][T13403] __sys_sendmmsg+0x27c/0x4e0 [ 1052.945131][T13403] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1052.945156][T13403] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1052.945216][T13403] ? ksys_write+0x242/0x270 [ 1052.945242][T13403] ? __pfx_ksys_write+0x10/0x10 [ 1052.945274][T13403] __x64_sys_sendmmsg+0xa0/0xc0 [ 1052.945304][T13403] do_syscall_64+0x14d/0xf80 [ 1052.945331][T13403] ? trace_irq_disable+0x3b/0x150 [ 1052.945350][T13403] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1052.945372][T13403] ? clear_bhb_loop+0x40/0x90 [ 1052.945399][T13403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1052.945420][T13403] RIP: 0033:0x7f81c539c819 [ 1052.945441][T13403] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1052.945460][T13403] RSP: 002b:00007f81c6190028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1052.945484][T13403] RAX: ffffffffffffffda RBX: 00007f81c5615fa0 RCX: 00007f81c539c819 [ 1052.945500][T13403] RDX: 0000000000000001 RSI: 0000200000003180 RDI: 0000000000000003 [ 1052.945514][T13403] RBP: 00007f81c6190090 R08: 0000000000000000 R09: 0000000000000000 [ 1052.945528][T13403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1052.945541][T13403] R13: 00007f81c5616038 R14: 00007f81c5615fa0 R15: 00007fff7dca2468 [ 1052.945575][T13403] [ 1053.159262][ T6071] Bluetooth: hci0: command tx timeout [ 1053.186922][T13421] netlink: 220 bytes leftover after parsing attributes in process `syz.0.10646'. [ 1053.204463][T13421] pim6reg: entered allmulticast mode [ 1053.443124][T13428] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10648'. [ 1053.882008][T13436] netlink: 'syz.5.10651': attribute type 1 has an invalid length. [ 1053.925414][T13440] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10653'. [ 1054.085279][T13445] syzkaller0: entered promiscuous mode [ 1054.090945][T13445] syzkaller0: entered allmulticast mode [ 1054.103695][T13445] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1054.486104][T13471] netlink: 'syz.3.10659': attribute type 10 has an invalid length. [ 1054.517504][T13467] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1054.644481][ T1304] aoe: packet could not be sent on lo. consider increasing tx_queue_len [ 1054.653566][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.662753][ T1304] lec:lec_start_xmit: lec0:No lecd attached [ 1056.574985][T13430] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1056.721282][ T6071] Bluetooth: hci2: command 0x0406 tx timeout [ 1056.797647][ T5843] Bluetooth: hci0: command tx timeout [ 1056.886341][T13506] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 1057.147946][T13522] __nla_validate_parse: 4 callbacks suppressed [ 1057.147970][T13522] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10672'. [ 1057.246212][T13522] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10672'. [ 1057.541928][T13529] netlink: 108 bytes leftover after parsing attributes in process `syz.5.10676'. [ 1057.552627][T13529] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10676'. [ 1057.718070][T13535] bridge0: port 1(bridge_slave_0) entered disabled state [ 1057.836703][ C1] bridge0: port 1(0ľx9˙) entered learning state [ 1057.844862][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 1057.915852][T13548] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10681'. [ 1057.937451][T13548] netlink: 'syz.5.10681': attribute type 7 has an invalid length. [ 1057.955186][T13548] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10681'. [ 1057.990530][T13548] erspan0: entered promiscuous mode [ 1057.999770][T13548] gretap0: entered promiscuous mode [ 1058.033538][T13548] debugfs: 'hsr1' already exists in 'hsr' [ 1058.046883][T13548] Cannot create hsr debugfs directory [ 1058.064906][T13548] hsr1: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 1058.319559][T13558] netlink: 60 bytes leftover after parsing attributes in process `syz.5.10685'. [ 1058.330891][T13558] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10685'. [ 1058.568898][T13569] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10688'. [ 1058.834937][ T6071] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1058.845796][ T6071] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1058.855049][ T6071] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1058.863702][ T6071] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1058.873738][ T6071] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1058.947427][T13582] hsr0 speed is unknown, defaulting to 1000 [ 1059.378987][T13582] chnl_net:caif_netlink_parms(): no params data found [ 1059.413429][T13617] netlink: 56 bytes leftover after parsing attributes in process `syz.5.10700'. [ 1059.573280][T13621] hsr0 speed is unknown, defaulting to 1000 [ 1059.669539][T13627] syzkaller0: entered promiscuous mode [ 1059.684672][T13627] syzkaller0: entered allmulticast mode [ 1059.719952][T13582] bridge0: port 1(bridge_slave_0) entered blocking state [ 1059.730324][T13582] bridge0: port 1(bridge_slave_0) entered disabled state [ 1059.738811][T13582] bridge_slave_0: entered allmulticast mode [ 1059.747532][T13582] bridge_slave_0: entered promiscuous mode [ 1059.760871][T13634] Bluetooth: MGMT ver 1.23 [ 1059.768270][T13634] Bluetooth: hci1: expected 17410 bytes, got 2 bytes [ 1059.798163][T13582] bridge0: port 2(bridge_slave_1) entered blocking state [ 1059.806700][T13582] bridge0: port 2(bridge_slave_1) entered disabled state [ 1059.814133][T13582] bridge_slave_1: entered allmulticast mode [ 1059.822562][T13582] bridge_slave_1: entered promiscuous mode [ 1059.968057][T13642] bridge0: port 2(syz_tun) entered disabled state [ 1059.975245][T13642] bridge0: port 1(gretap0) entered disabled state [ 1059.996094][T13582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1060.027828][T13582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1060.074776][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5410 ms [ 1060.083323][ C0] lec:lec_tx_timeout: lec0 [ 1060.152675][T13645] netlink: 'syz.0.10706': attribute type 12 has an invalid length. [ 1060.202242][T13582] team0: Port device team_slave_0 added [ 1060.241500][T13582] team0: Port device team_slave_1 added [ 1060.287943][T13652] netlink: 'syz.3.10709': attribute type 1 has an invalid length. [ 1060.298443][T13652] netlink: 'syz.3.10709': attribute type 1 has an invalid length. [ 1060.325953][T13652] netlink: 'syz.3.10709': attribute type 8 has an invalid length. [ 1060.460764][T13582] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1060.479506][T13582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1060.636187][T13582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1060.654075][T13675] netlink: 'syz.5.10713': attribute type 1 has an invalid length. [ 1060.691507][T13669] hsr0 speed is unknown, defaulting to 1000 [ 1060.731734][T13582] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1060.748539][T13582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1060.829244][T13582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1060.955551][ T6071] Bluetooth: hci6: command tx timeout [ 1061.077171][T13582] hsr_slave_0: entered promiscuous mode [ 1061.084063][T13582] hsr_slave_1: entered promiscuous mode [ 1061.191671][T13582] debugfs: 'hsr0' already exists in 'hsr' [ 1061.212866][T13582] Cannot create hsr debugfs directory [ 1061.270100][T13698] bond12: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1061.289618][T13698] bond12 (unregistering): Released all slaves [ 1061.364191][T13704] openvswitch: netlink: Multiple metadata blocks provided [ 1061.741711][T13722] netlink: 'syz.3.10721': attribute type 21 has an invalid length. [ 1061.871109][T13718] syzkaller1: entered promiscuous mode [ 1061.887496][T13718] syzkaller1: entered allmulticast mode [ 1062.069438][T13728] IPVS: rr: TCP 172.20.20.170:0 - no destination available [ 1062.343513][T13736] __nla_validate_parse: 8 callbacks suppressed [ 1062.343534][T13736] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10725'. [ 1062.454076][T13582] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1062.480360][T13582] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1062.510692][T13582] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1062.561708][T13582] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1062.610157][T13743] bond1: option miimon: invalid value (18446744073709551585) [ 1062.618661][T13743] bond1: option miimon: allowed values 0 - 2147483647 [ 1062.628515][T13743] bond1 (unregistering): Released all slaves [ 1062.651025][T13754] netlink: 'syz.2.10729': attribute type 25 has an invalid length. [ 1062.660307][T13754] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10729'. [ 1062.675187][T13754] netlink: 'syz.2.10729': attribute type 25 has an invalid length. [ 1062.684190][T13754] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10729'. [ 1062.837417][T13765] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10731'. [ 1063.036599][ T6071] Bluetooth: hci6: command tx timeout [ 1063.051829][T13772] sit1: entered promiscuous mode [ 1063.107607][T13772] sit1: entered allmulticast mode [ 1063.272871][T13582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1063.291196][T13793] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1063.344454][T13582] 8021q: adding VLAN 0 to HW filter on device team0 [ 1063.452752][ T8650] bridge0: port 1(bridge_slave_0) entered blocking state [ 1063.460080][ T8650] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1063.480192][T13797] netlink: 108 bytes leftover after parsing attributes in process `syz.0.10743'. [ 1063.550051][ T8650] bridge0: port 2(bridge_slave_1) entered blocking state [ 1063.557354][ T8650] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1063.738939][T13805] syzkaller0: entered promiscuous mode [ 1063.790715][T13805] syzkaller0: entered allmulticast mode [ 1063.900104][T13817] openvswitch: netlink: IP tunnel dst address not specified [ 1064.220028][T13817] syzkaller1: entered promiscuous mode [ 1064.230464][T13817] syzkaller1: entered allmulticast mode [ 1064.615931][T13582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1064.667166][T13843] netlink: 'syz.3.10750': attribute type 8 has an invalid length. [ 1064.783747][T13853] netlink: 'syz.5.10751': attribute type 29 has an invalid length. [ 1064.792136][T13853] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10751'. [ 1064.805633][T13853] netlink: 'syz.5.10751': attribute type 29 has an invalid length. [ 1064.815323][T13853] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10751'. [ 1064.883541][T13855] netlink: 'syz.2.10747': attribute type 3 has an invalid length. [ 1064.908168][T13855] netlink: 766 bytes leftover after parsing attributes in process `syz.2.10747'. [ 1064.971425][T13859] netlink: 'syz.0.10753': attribute type 1 has an invalid length. [ 1064.982426][T13859] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10753'. [ 1065.115131][ T6071] Bluetooth: hci6: command tx timeout [ 1065.156447][T13582] veth0_vlan: entered promiscuous mode [ 1065.171324][T13582] veth1_vlan: entered promiscuous mode [ 1065.209245][T13582] veth0_macvtap: entered promiscuous mode [ 1065.223708][T13582] veth1_macvtap: entered promiscuous mode [ 1065.249110][T13582] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1065.265252][T13582] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1065.287082][ T8650] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1065.296808][ T8650] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1065.315409][ T8650] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1065.326513][ T8650] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1067.071395][T13821] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1067.207576][ T6071] Bluetooth: hci6: command tx timeout [ 1067.296218][ T8621] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1067.304120][ T8621] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1067.417736][ T8650] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1067.447838][ T8650] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1067.520194][T13884] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10760'. [ 1067.556904][T13882] netlink: 'syz.3.10761': attribute type 83 has an invalid length. [ 1067.600037][T13884] netlink: 'syz.2.10760': attribute type 3 has an invalid length. [ 1067.633727][T13887] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10760'. [ 1067.657702][T13884] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10760'. [ 1067.741366][T13890] veth0_to_team: entered allmulticast mode [ 1067.903637][T13909] sctp: [Deprecated]: syz.2.10766 (pid 13909) Use of int in maxseg socket option. [ 1067.903637][T13909] Use struct sctp_assoc_value instead [ 1067.978428][T13911] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10766'. [ 1068.006183][T13915] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10766'. [ 1068.167345][T13922] netlink: 'syz.6.10770': attribute type 1 has an invalid length. [ 1068.276437][T13926] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.10771'. [ 1068.316986][T13930] netlink: 'syz.5.10774': attribute type 30 has an invalid length. [ 1068.326814][T13929] netlink: 'syz.3.10772': attribute type 1 has an invalid length. [ 1068.407294][T13930] bond1: option arp_missed_max: invalid value (0) [ 1068.421715][T13938] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10776'. [ 1068.432490][T13930] bond1: option arp_missed_max: allowed values 1 - 255 [ 1068.447427][T13930] bond1 (unregistering): Released all slaves [ 1068.733491][T13957] netlink: 192 bytes leftover after parsing attributes in process `syz.3.10777'. [ 1068.910174][T13958] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 1068.936031][T13969] : renamed from hsr0 (while UP) [ 1069.002777][T13972] syzkaller1: entered promiscuous mode [ 1069.009815][T13972] syzkaller1: entered allmulticast mode [ 1069.268133][T13984] tipc: Enabling of bearer rejected, failed to enable media [ 1069.282668][T13984] netlink: 294 bytes leftover after parsing attributes in process `syz.5.10784'. [ 1069.295886][T13984] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1069.475659][T13982] netlink: 17 bytes leftover after parsing attributes in process `syz.3.10785'. [ 1069.559876][T13982] Unsupported ieee802154 address type: 0 [ 1069.813002][T14011] validate_nla: 1 callbacks suppressed [ 1069.813023][T14011] netlink: 'syz.0.10794': attribute type 1 has an invalid length. [ 1070.206705][T14011] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1070.861624][T14037] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1070.909959][T14037] team0: Device macvlan3 is already an upper device of the team interface [ 1071.185628][T14048] syzkaller0: entered promiscuous mode [ 1071.224701][T14048] syzkaller0: entered allmulticast mode [ 1071.277437][T14053] syzkaller1: entered promiscuous mode [ 1071.286944][T14053] syzkaller1: entered allmulticast mode [ 1071.636536][T30967] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x5 [ 1072.105430][T14104] netlink: 'syz.6.10806': attribute type 1 has an invalid length. [ 1072.661590][T14124] bridge_slave_0: left allmulticast mode [ 1072.693422][T14124] bridge_slave_0: left promiscuous mode [ 1072.706901][T14124] bridge0: port 1(bridge_slave_0) entered disabled state [ 1072.733409][T14124] bridge_slave_1: left allmulticast mode [ 1072.739472][T14124] bridge_slave_1: left promiscuous mode [ 1072.747361][T14124] bridge0: port 2(bridge_slave_1) entered disabled state [ 1072.810336][T14124] bond0: (slave bond_slave_0): Releasing backup interface [ 1072.838530][T14124] bond_slave_0: left allmulticast mode [ 1072.862445][T14124] bond0: (slave bond_slave_1): Releasing backup interface [ 1072.900187][T14124] bond_slave_1: left allmulticast mode [ 1072.938351][T14124] team0: Port device team_slave_0 removed [ 1072.965680][T14124] team0: Port device team_slave_1 removed [ 1072.972988][T14124] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1072.983106][T14124] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1072.993298][T14124] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1073.003342][T14124] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1073.027484][T14124] bond0: (slave wlan1): Releasing backup interface [ 1073.040639][T14124] mac80211_hwsim hwsim99 wlan1: left allmulticast mode [ 1073.062301][T14124] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 1073.069849][T14124] batman_adv: batadv0: Removing interface: ipvlan2 [ 1073.116262][T14124] bond9: (slave bridge6): Releasing active interface [ 1073.195069][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1073.202448][ C1] bridge0: topology change detected, propagating [ 1073.209697][ C1] bridge0: port 1(0ľx9˙) entered forwarding state [ 1073.216335][ C1] bridge0: topology change detected, propagating [ 1073.720560][T14154] syzkaller0: entered promiscuous mode [ 1073.747556][T14161] netlink: 'syz.5.10828': attribute type 1 has an invalid length. [ 1073.764769][T14154] syzkaller0: entered allmulticast mode [ 1073.832959][T14161] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1074.219844][T14185] netlink: 'syz.3.10834': attribute type 1 has an invalid length. [ 1075.956540][T14189] netlink: 'syz.2.10835': attribute type 1 has an invalid length. [ 1077.066950][T14185] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 1077.290123][T14189] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1077.513745][T14212] openvswitch: netlink: Unexpected mask (mask=201040, allowed=10048) [ 1077.534180][T14212] __nla_validate_parse: 8 callbacks suppressed [ 1077.534205][T14212] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10840'. [ 1077.733555][T14216] gre0: entered promiscuous mode [ 1077.756639][T14216] gre0: entered allmulticast mode [ 1077.821308][T14219] netlink: 224 bytes leftover after parsing attributes in process `syz.5.10842'. [ 1077.878769][T14223] tipc: Started in network mode [ 1077.909014][T14223] tipc: Node identity ac14140f, cluster identity 4711 [ 1077.936846][T14223] tipc: New replicast peer: 255.255.255.255 [ 1078.006702][T14223] tipc: Enabled bearer , priority 10 [ 1078.079973][T14232] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10848'. [ 1078.108268][T14232] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10848'. [ 1078.327956][T14235] netlink: 112 bytes leftover after parsing attributes in process `syz.0.10850'. [ 1078.489184][T14257] netlink: 256 bytes leftover after parsing attributes in process `syz.3.10855'. [ 1078.759737][T14265] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10858'. [ 1078.780813][T14263] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10857'. [ 1078.792848][T14265] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1078.919856][T14274] xt_hashlimit: size too large, truncated to 1048576 [ 1082.142003][T14263] netlink: 'syz.5.10857': attribute type 1 has an invalid length. [ 1082.150341][T14263] netlink: 'syz.5.10857': attribute type 2 has an invalid length. [ 1082.199738][ T29] tipc: Node number set to 2886997007 [ 1082.397560][T14296] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 1082.930768][T14325] syzkaller0: entered promiscuous mode [ 1082.969015][T14325] syzkaller0: entered allmulticast mode [ 1083.092049][T14332] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10870'. [ 1083.429088][T14343] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10874'. [ 1083.499416][T14350] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1083.764058][T14367] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10884'. [ 1083.778626][T14369] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10882'. [ 1084.120664][T14389] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10889'. [ 1084.641044][T14409] netlink: 14 bytes leftover after parsing attributes in process `syz.5.10893'. [ 1084.730313][T14412] ip6gre1: entered promiscuous mode [ 1084.738579][T14412] ip6gre1: entered allmulticast mode [ 1084.997827][T14409] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1085.054158][T14409] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1085.116267][T14409] bond0 (unregistering): Released all slaves [ 1085.142513][T14431] openvswitch: netlink: Actions may not be safe on all matching packets [ 1085.188614][T14415] bond1: option fail_over_mac: invalid value (16) [ 1085.211169][T14415] bond1 (unregistering): Released all slaves [ 1085.617626][T30971] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1085.637133][T30971] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1085.647795][T18090] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1085.709971][T14455] netlink: 'syz.6.10906': attribute type 1 has an invalid length. [ 1086.136055][T14486] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 1086.140529][T18090] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1086.231017][T14490] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10917'. [ 1086.300910][T14487] tipc: Resetting bearer [ 1086.336019][T14487] tipc: Resetting bearer [ 1086.396392][T18090] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1086.426039][T30969] tipc: Resetting bearer [ 1086.432126][T14490] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10917'. [ 1086.593005][T14507] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10921'. [ 1086.607627][T14508] netlink: 36 bytes leftover after parsing attributes in process `syz.2.10922'. [ 1086.962459][T14519] netdevsim netdevsim5: Direct firmware load for . failed with error -2 [ 1086.972471][T14519] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 1087.654280][T14563] netlink: 'syz.0.10937': attribute type 1 has an invalid length. [ 1087.670077][T14563] netlink: 'syz.0.10937': attribute type 1 has an invalid length. [ 1087.767152][T14564] bond13: (slave bridge8): Enslaving as a backup interface with an up link [ 1087.875801][T14563] bond13: (slave bridge9): Enslaving as a backup interface with a down link [ 1087.979208][T14568] debugfs: 'KŠźu ™crµ±K:‘Ł˙ĚĄÝBŤßÝŁ| “ĽÚŢlS·ś-!' already exists in 'ieee80211' [ 1088.037328][T14575] tunl0: entered promiscuous mode [ 1088.074271][T14575] netlink: 'syz.5.10938': attribute type 3 has an invalid length. [ 1088.135152][T14575] __nla_validate_parse: 5 callbacks suppressed [ 1088.135172][T14575] netlink: 9 bytes leftover after parsing attributes in process `syz.5.10938'. [ 1088.355273][T30967] tipc: Subscription rejected, illegal request [ 1088.413664][T14597] H: renamed from dummy0 (while UP) [ 1088.509159][T14599] : entered promiscuous mode [ 1089.377580][T14624] bond0: option fail_over_mac: invalid value (16) [ 1089.420504][T14624] bond0 (unregistering): Released all slaves [ 1089.981114][T14674] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10970'. [ 1090.074844][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1090.435656][T14695] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10975'. [ 1090.703855][T14710] netlink: 72 bytes leftover after parsing attributes in process `syz.6.10980'. [ 1092.845547][T14661] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1093.062543][T14726] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10982'. [ 1093.190938][T14726] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10982'. [ 1093.323824][T14737] netlink: 'syz.2.10986': attribute type 21 has an invalid length. [ 1093.577247][T14742] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1093.808527][T14764] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 1093.880188][T14769] netlink: 'syz.5.10996': attribute type 1 has an invalid length. [ 1093.915647][T14769] netlink: 72 bytes leftover after parsing attributes in process `syz.5.10996'. [ 1093.972337][T14776] netlink: 207952 bytes leftover after parsing attributes in process `syz.5.10996'. [ 1094.081774][T14783] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 1094.141860][T14785] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11001'. [ 1094.151669][T14785] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11001'. [ 1094.224044][T14787] netlink: 'syz.5.11000': attribute type 1 has an invalid length. [ 1094.262303][T14787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1094.290318][T14790] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11002'. [ 1094.305765][ T7515] lec:lec_start_xmit: lec0:No lecd attached [ 1094.486268][T14796] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11003'. [ 1094.536683][T14804] netlink: 'syz.3.11006': attribute type 1 has an invalid length. [ 1094.574905][T14804] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1094.582258][T14804] IPv6: NLM_F_CREATE should be set when creating new route [ 1094.858224][T14826] netlink: 32 bytes leftover after parsing attributes in process `syz.6.11011'. [ 1094.868090][T14826] netlink: 24 bytes leftover after parsing attributes in process `syz.6.11011'. [ 1094.920385][T14831] bond4: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1094.933790][T14831] bond4 (unregistering): Released all slaves [ 1095.083340][T14837] sctp: [Deprecated]: syz.6.11014 (pid 14837) Use of int in maxseg socket option. [ 1095.083340][T14837] Use struct sctp_assoc_value instead [ 1097.699787][T14811] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1097.906688][T14850] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 1097.951200][T14854] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 1098.044063][T14861] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11020'. [ 1098.106726][T14861] vlan0: entered promiscuous mode [ 1098.122506][T14861] gretap0: entered promiscuous mode [ 1098.208683][T14869] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11023'. [ 1098.240220][T14869] syz_tun: left allmulticast mode [ 1098.264940][T14869] syz_tun: left promiscuous mode [ 1098.270278][T14869] bridge0: port 2(syz_tun) entered disabled state [ 1098.378972][T14869] gretap0: left allmulticast mode [ 1098.427677][T14869] gretap0: left promiscuous mode [ 1098.432942][T14869] bridge0: port 1(gretap0) entered disabled state [ 1098.556301][T14891] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11030'. [ 1098.580125][T14893] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11031'. [ 1098.650496][T14897] netlink: 14 bytes leftover after parsing attributes in process `syz.0.11031'. [ 1098.784779][T14903] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11030'. [ 1098.919287][T14889] bridge0: port 2(bridge_slave_1) entered disabled state [ 1098.927214][T14889] bridge0: port 1(bridge_slave_0) entered disabled state [ 1098.945136][T14906] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11030'. [ 1099.049195][T14889] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1099.067210][T14889] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1099.274149][T14903] bond6: entered promiscuous mode [ 1099.293217][T14903] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1099.327278][T30968] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1099.337227][T30969] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1099.415118][T14915] netlink: 14 bytes leftover after parsing attributes in process `syz.0.11033'. [ 1099.434833][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1099.514145][T30969] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1099.529981][T30969] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1099.934764][T14933] netlink: 'syz.3.11038': attribute type 10 has an invalid length. [ 1099.967893][T14933] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1100.014929][T14928] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1100.075038][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5770 ms [ 1100.083207][ C0] lec:lec_tx_timeout: lec0 [ 1100.230872][T14945] netlink: 56 bytes leftover after parsing attributes in process `syz.2.11041'. [ 1100.268676][T14945] netlink: 120 bytes leftover after parsing attributes in process `syz.2.11041'. [ 1100.284259][T14945] netlink: 'syz.2.11041': attribute type 1 has an invalid length. [ 1100.307035][T14945] netlink: 64 bytes leftover after parsing attributes in process `syz.2.11041'. [ 1100.405892][T14951] openvswitch: netlink: nsh attr 255 is out of range max 3 [ 1100.814949][T14975] netlink: 'syz.5.11051': attribute type 11 has an invalid length. [ 1100.832222][T14975] netlink: 'syz.5.11051': attribute type 11 has an invalid length. [ 1100.857373][T14975] netlink: 'syz.5.11051': attribute type 11 has an invalid length. [ 1101.090521][T14993] syzkaller0: entered promiscuous mode [ 1101.097022][T14993] syzkaller0: entered allmulticast mode [ 1101.463527][T15009] syz_tun: entered allmulticast mode [ 1101.479823][T15008] syz_tun: left allmulticast mode [ 1101.809367][T15029] netlink: 'syz.5.11065': attribute type 1 has an invalid length. [ 1102.070877][T15046] netlink: 'syz.2.11070': attribute type 29 has an invalid length. [ 1102.190798][T15044] netlink: 'syz.3.11071': attribute type 2 has an invalid length. [ 1102.260245][T15052] erspan0: entered promiscuous mode [ 1102.559308][T15080] netlink: 'syz.0.11079': attribute type 4 has an invalid length. [ 1102.652035][T15080] netlink: 'syz.0.11079': attribute type 4 has an invalid length. [ 1102.796359][ T5843] Bluetooth: hci4: command 0x0406 tx timeout [ 1102.908586][T15094] netlink: 'syz.6.11082': attribute type 11 has an invalid length. [ 1102.993192][T15099] veth0: entered promiscuous mode [ 1102.999885][T15101] netlink: 'syz.3.11083': attribute type 1 has an invalid length. [ 1103.010327][T15102] netlink: 'syz.3.11083': attribute type 1 has an invalid length. [ 1103.082527][T15099] veth0: left promiscuous mode [ 1103.392888][T15125] __nla_validate_parse: 16 callbacks suppressed [ 1103.392909][T15125] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11091'. [ 1103.525652][T15134] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11093'. [ 1103.558243][T15136] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11094'. [ 1103.647303][T15142] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11095'. [ 1103.730069][T15142] IPv6: sit2: Disabled Multicast RS [ 1103.788146][T15142] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11095'. [ 1103.992321][T15161] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11103'. [ 1104.024976][T15161] netlink: 28 bytes leftover after parsing attributes in process `syz.6.11103'. [ 1104.206080][T15171] tipc: Enabling of bearer rejected, failed to enable media [ 1104.218863][T15173] netlink: 156 bytes leftover after parsing attributes in process `syz.2.11109'. [ 1104.456460][T15183] netlink: 14 bytes leftover after parsing attributes in process `syz.2.11113'. [ 1104.469932][T15183] batman_adv: batadv0: Interface deactivated: dummy0 [ 1104.501584][T15183] batman_adv: batadv0: Removing interface: dummy0 [ 1104.806067][T15196] syzkaller0: entered promiscuous mode [ 1104.812118][T15196] syzkaller0: entered allmulticast mode [ 1104.957441][T15207] delete_channel: no stack [ 1104.982632][T15208] delete_channel: no stack [ 1105.086519][T15214] sch_fq: defrate 0 ignored. [ 1105.087576][T15215] validate_nla: 2 callbacks suppressed [ 1105.087622][T15215] netlink: 'syz.3.11122': attribute type 15 has an invalid length. [ 1105.762453][T15245] netlink: 68 bytes leftover after parsing attributes in process `syz.3.11131'. [ 1106.299831][T15270] openvswitch: netlink: Key type 257 is out of range max 32 [ 1106.377113][ T8625] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1106.393644][ T8625] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1106.411075][ T8625] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1106.420733][ T8625] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1106.445675][T15275] veth0: entered promiscuous mode [ 1106.524228][T15274] veth0: left promiscuous mode [ 1106.616917][T15284] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1106.876496][T15295] bond2: entered promiscuous mode [ 1106.883316][T15295] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1106.885725][T15306] x_tables: duplicate underflow at hook 2 [ 1106.983293][T15303] bridge4: entered promiscuous mode [ 1106.991178][T15303] bond2: (slave bridge4): Enslaving as an active interface with an up link [ 1107.010633][T15293] macvlan2: entered promiscuous mode [ 1107.029916][T15293] macvlan2: entered allmulticast mode [ 1107.061419][T15293] bond2: (slave macvlan2): Error -98 calling set_mac_address [ 1107.388608][T15321] can: request_module (can-proto-5) failed. [ 1107.674846][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1107.749941][T15346] netlink: 'syz.3.11162': attribute type 11 has an invalid length. [ 1107.762436][T15346] netlink: 'syz.3.11162': attribute type 4 has an invalid length. [ 1107.865694][T15344] netlink: 'syz.6.11161': attribute type 3 has an invalid length. [ 1107.877468][T15346] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1108.047428][T15359] netlink: 'syz.2.11164': attribute type 1 has an invalid length. [ 1108.427073][T15374] __nla_validate_parse: 12 callbacks suppressed [ 1108.427096][T15374] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11169'. [ 1108.972831][T15415] netlink: 'syz.6.11182': attribute type 5 has an invalid length. [ 1109.004750][T15415] netlink: 140 bytes leftover after parsing attributes in process `syz.6.11182'. [ 1109.098559][T15418] netlink: 32 bytes leftover after parsing attributes in process `syz.0.11180'. [ 1109.152736][T15421] x_tables: duplicate underflow at hook 1 [ 1109.161790][T15421] netlink: 'syz.3.11183': attribute type 4 has an invalid length. [ 1109.219539][T15424] netlink: 'syz.6.11185': attribute type 12 has an invalid length. [ 1109.274634][T15424] netlink: 190972 bytes leftover after parsing attributes in process `syz.6.11185'. [ 1109.493030][T15443] netlink: 'syz.3.11190': attribute type 1 has an invalid length. [ 1109.542160][T15443] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 1109.733883][T15460] netlink: 76 bytes leftover after parsing attributes in process `syz.3.11195'. [ 1109.774182][T15462] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11194'. [ 1109.813349][T15460] netlink: 320 bytes leftover after parsing attributes in process `syz.3.11195'. [ 1109.827715][T15462] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11194'. [ 1109.951715][T15471] netlink: 28 bytes leftover after parsing attributes in process `syz.6.11194'. [ 1109.962638][T15471] netlink: 28 bytes leftover after parsing attributes in process `syz.6.11194'. [ 1110.145592][T15482] tipc: Enabling of bearer rejected, already enabled [ 1110.394197][T15489] syzkaller0: entered promiscuous mode [ 1110.435887][T15489] syzkaller0: entered allmulticast mode [ 1110.849766][T15512] mac80211_hwsim hwsim124 wlan0: entered promiscuous mode [ 1111.006214][T15518] netlink: 'syz.2.11211': attribute type 2 has an invalid length. [ 1111.476178][T15534] syzkaller0: entered promiscuous mode [ 1111.481754][T15534] syzkaller0: entered allmulticast mode [ 1111.718912][T15553] netlink: 'syz.2.11219': attribute type 10 has an invalid length. [ 1114.328812][T15545] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1114.356013][T15555] syzkaller0: entered promiscuous mode [ 1114.361558][T15555] syzkaller0: entered allmulticast mode [ 1114.588024][T15565] ˙˙˙˙˙˙: renamed from virt_wifi0 [ 1114.618799][T15570] __nla_validate_parse: 2 callbacks suppressed [ 1114.618822][T15570] netlink: 264 bytes leftover after parsing attributes in process `syz.2.11224'. [ 1114.670323][T15574] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1114.760375][T15577] netlink: 808 bytes leftover after parsing attributes in process `syz.3.11225'. [ 1115.099862][T15598] netlink: 40 bytes leftover after parsing attributes in process `syz.6.11229'. [ 1115.109404][T15597] netlink: 'syz.3.11232': attribute type 10 has an invalid length. [ 1115.137029][T15597] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11232'. [ 1115.170388][T15597] batadv0: entered promiscuous mode [ 1115.181615][T15597] batadv0: entered allmulticast mode [ 1115.188168][T15597] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1115.376112][T15609] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1115.618130][T15633] netlink: 'syz.0.11242': attribute type 3 has an invalid length. [ 1115.677949][T15633] netlink: 'syz.0.11242': attribute type 3 has an invalid length. [ 1115.739900][T15633] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11242'. [ 1115.764988][T15636] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11243'. [ 1115.788586][T15636] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11243'. [ 1115.848432][T15639] tipc: Started in network mode [ 1115.854242][T15639] tipc: Node identity da4d4685ed7c, cluster identity 4711 [ 1115.862471][T15639] tipc: Enabled bearer , priority 0 [ 1115.885085][T15636] erspan0: entered promiscuous mode [ 1115.897399][T15636] gretap0: entered promiscuous mode [ 1115.904126][T15636] debugfs: 'hsr0' already exists in 'hsr' [ 1115.913378][T15636] Cannot create hsr debugfs directory [ 1115.928374][T15636] hsr0: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 1115.940997][T15636] hsr0: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 1116.079022][ T1304] aoe: packet could not be sent on lo. consider increasing tx_queue_len [ 1116.088216][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.097110][ T1304] lec:lec_start_xmit: lec0:No lecd attached [ 1116.131833][T15639] syzkaller0: entered promiscuous mode [ 1116.162541][T15639] syzkaller0: entered allmulticast mode [ 1116.182070][T15639] tipc: Resetting bearer [ 1116.231471][T15638] tipc: Resetting bearer [ 1116.250444][T15659] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11246'. [ 1118.000638][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1118.760698][T15638] tipc: Disabling bearer [ 1118.778776][T15659] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1118.864232][T30556] tipc: Node number set to 925976197 [ 1119.032741][T15675] syzkaller0: entered promiscuous mode [ 1119.058054][T15675] syzkaller0: entered allmulticast mode [ 1119.217441][T15688] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.11254'. [ 1119.233990][T15681] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11253'. [ 1119.253857][T15687] erspan0: left promiscuous mode [ 1119.431685][T15687] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1119.449021][T15687] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1119.633348][T15687] tipc: Resetting bearer [ 1119.710853][T15687] vlan2: left allmulticast mode [ 1119.723696][T15687] vlan3: left allmulticast mode [ 1119.729026][T15687] bond2: left allmulticast mode [ 1119.742972][T15687] hsr0: left allmulticast mode [ 1119.749433][T15687] hsr_slave_0: left allmulticast mode [ 1119.755325][T15687] hsr_slave_1: left allmulticast mode [ 1119.761614][T15687] macvlan2: left allmulticast mode [ 1119.776863][T15687] gretap1: left promiscuous mode [ 1119.782045][T15687] gretap1: left allmulticast mode [ 1119.790282][T15687] sit1: left promiscuous mode [ 1119.795960][T15687] sit1: left allmulticast mode [ 1119.805571][T15692] syzkaller0: entered promiscuous mode [ 1119.811174][T15692] syzkaller0: entered allmulticast mode [ 1119.868895][T15701] syzkaller0: entered promiscuous mode [ 1119.889664][T15701] syzkaller0: entered allmulticast mode [ 1119.918323][T15713] __nla_validate_parse: 2 callbacks suppressed [ 1119.918344][T15713] netlink: 24 bytes leftover after parsing attributes in process `syz.6.11253'. [ 1119.949953][T30971] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1119.962060][T30971] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1120.021776][T15718] IPVS: set_ctl: invalid protocol: 94 127.0.0.1:20004 [ 1120.105561][T15722] netlink: 112 bytes leftover after parsing attributes in process `syz.5.11261'. [ 1120.147303][T30971] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1120.171852][T30971] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1120.215317][T30971] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1120.237365][T30971] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1120.267643][T30971] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1120.325374][T30971] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1120.527923][ T8625] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1120.540597][ T8625] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1120.553193][T15742] syzkaller0: entered promiscuous mode [ 1120.566948][T15742] syzkaller0: entered allmulticast mode [ 1120.666532][T15755] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1120.724392][T15759] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11268'. [ 1120.737389][T15759] netlink: 'syz.5.11268': attribute type 3 has an invalid length. [ 1120.887269][T15769] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11269'. [ 1120.896554][T15769] netlink: 'syz.6.11269': attribute type 5 has an invalid length. [ 1120.906145][T15769] netlink: 20 bytes leftover after parsing attributes in process `syz.6.11269'. [ 1120.923042][T15771] netlink: 'syz.5.11270': attribute type 1 has an invalid length. [ 1120.935680][T15769] geneve2: entered promiscuous mode [ 1120.941660][T15769] geneve2: entered allmulticast mode [ 1120.950913][ T8631] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 1120.961612][ T8631] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 1121.004094][T15771] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1121.013839][ T8631] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 1121.023895][T15771] netlink: 20 bytes leftover after parsing attributes in process `syz.5.11270'. [ 1121.026920][ T8631] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 1121.060051][T15771] bond3: (slave geneve2): making interface the new active one [ 1121.070010][T15771] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 1121.115305][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 1121.123455][ C0] lec:lec_tx_timeout: lec0 [ 1121.384000][ T29] IPVS: starting estimator thread 0... [ 1121.391455][T15786] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1121.399703][T15786] syzkaller1: linktype set to 823 [ 1121.496079][T15789] IPVS: using max 29 ests per chain, 69600 per kthread [ 1121.532012][T15782] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 1121.751299][T15811] netlink: 'syz.3.11281': attribute type 1 has an invalid length. [ 1121.775029][T15813] netlink: 'syz.0.11279': attribute type 2 has an invalid length. [ 1121.859919][T15816] netlink: 67 bytes leftover after parsing attributes in process `syz.0.11279'. [ 1122.040003][T15811] bond7: entered promiscuous mode [ 1122.055213][T15811] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1122.241515][T15818] bond8: Removing last arp target with arp_interval on [ 1122.320083][T15841] netlink: 'syz.6.11284': attribute type 10 has an invalid length. [ 1122.349876][T15811] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1122.400001][T15811] bond7: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 1122.510071][T15811] bond7: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 1122.542027][T15811] bond7: (slave ip6gre2): making interface the new active one [ 1122.568128][T15811] ip6gre2: entered promiscuous mode [ 1122.583009][T15856] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11287'. [ 1122.594455][T15811] bond7: (slave ip6gre2): Enslaving as an active interface with an up link [ 1122.649923][T15856] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11287'. [ 1122.701745][T15854] netlink: 'syz.5.11287': attribute type 2 has an invalid length. [ 1122.995777][T15873] erspan0: entered allmulticast mode [ 1123.093717][T15886] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 1123.304943][T15897] netlink: 'syz.6.11299': attribute type 2 has an invalid length. [ 1123.411489][T15886] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1123.453466][T15894] netlink: 'syz.3.11298': attribute type 1 has an invalid length. [ 1123.467066][T15897] vţ: entered promiscuous mode [ 1123.472802][T15894] netlink: 224 bytes leftover after parsing attributes in process `syz.3.11298'. [ 1123.567424][T15903] netlink: 'syz.2.11300': attribute type 1 has an invalid length. [ 1123.696814][T15886] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1123.761530][T15922] Bluetooth: MGMT ver 1.23 [ 1123.778681][T15903] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1123.808139][T15915] bond4: (slave geneve2): making interface the new active one [ 1123.818009][T15915] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 1123.901070][T15922] bridge1: entered promiscuous mode [ 1123.908769][T15922] bridge1: entered allmulticast mode [ 1123.935522][T15922] team0: Port device bridge1 added [ 1123.965394][T15925] bridge2: entered promiscuous mode [ 1123.970771][T15925] bridge2: entered allmulticast mode [ 1123.997885][T15925] team0: Port device bridge2 added [ 1124.032165][T30966] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1124.047424][T30966] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1124.178774][T15886] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1124.326573][T30966] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1124.355948][T30966] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1124.433337][T15886] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1124.614450][T30971] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1124.655226][T30971] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1124.683683][T30971] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1124.706918][T30971] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1124.944909][T15970] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11314'. [ 1124.977537][T15975] "syz.0.11315" (15975) uses obsolete ecb(arc4) skcipher [ 1125.043649][T15976] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11314'. [ 1125.061185][T15980] "syz.0.11315" (15980) uses obsolete ecb(arc4) skcipher [ 1125.278270][T15988] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11320'. [ 1125.483151][T15999] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1125.776882][T16011] netlink: 52 bytes leftover after parsing attributes in process `syz.6.11324'. [ 1125.816523][T16010] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1125.930748][T16019] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11329'. [ 1126.068170][T16017] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 1126.569607][T16056] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1126.665335][T16063] validate_nla: 3 callbacks suppressed [ 1126.665357][T16063] netlink: 'syz.5.11345': attribute type 1 has an invalid length. [ 1126.786052][T16072] bond4: (slave gretap1): making interface the new active one [ 1126.796444][T16072] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 1126.821133][T16076] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11347'. [ 1126.832483][T16079] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 1127.045159][T16087] netlink: 'syz.3.11350': attribute type 1 has an invalid length. [ 1127.150085][T16095] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11353'. [ 1127.167981][T16087] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1127.285698][T16099] netlink: 108 bytes leftover after parsing attributes in process `syz.0.11354'. [ 1127.482447][T16108] syzkaller0: entered promiscuous mode [ 1127.502886][T16108] syzkaller0: entered allmulticast mode [ 1127.592340][T16108] netlink: 256 bytes leftover after parsing attributes in process `syz.0.11358'. [ 1127.612893][T16110] hsr0 speed is unknown, defaulting to 1000 [ 1127.618589][T16108] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11358'. [ 1127.826673][T16121] veth0: entered promiscuous mode [ 1127.856116][T16121] veth0 (unregistering): left promiscuous mode [ 1127.949095][T16128] netlink: 'syz.3.11365': attribute type 10 has an invalid length. [ 1128.121283][T16134] 8021q: VLANs not supported on lo [ 1128.392835][T16151] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1129.020194][T16155] lec:lec_atm_close: lec0: Shut down! [ 1129.581702][T16192] gretap2: entered promiscuous mode [ 1129.613104][T16192] batman_adv: batadv0: Adding interface: gretap2 [ 1129.657145][T16192] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 1129.701535][T16192] batman_adv: batadv0: Not using interface gretap2 (retrying later): interface not active [ 1129.713877][T16191] 0·: renamed from hsr_slave_1 (while UP) [ 1129.739490][T16191] 0·: entered allmulticast mode [ 1129.745487][T16191] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 1129.882544][T16198] syzkaller0: entered promiscuous mode [ 1129.894968][T16198] syzkaller0: entered allmulticast mode [ 1129.933912][T16204] netlink: 'syz.5.11387': attribute type 1 has an invalid length. [ 1129.965122][T16198] __nla_validate_parse: 6 callbacks suppressed [ 1129.965144][T16198] netlink: 236 bytes leftover after parsing attributes in process `syz.2.11385'. [ 1130.892007][T16240] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input5 [ 1131.003254][T16240] sctp: [Deprecated]: syz.2.11397 (pid 16240) Use of int in max_burst socket option. [ 1131.003254][T16240] Use struct sctp_assoc_value instead [ 1132.852172][T16204] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1132.863762][T16209] netlink: 'syz.0.11388': attribute type 1 has an invalid length. [ 1133.090350][T16257] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11400'. [ 1133.343798][T16257] macvtap0: entered promiscuous mode [ 1133.357899][T16257] vlan0: entered promiscuous mode [ 1133.366106][T16257] macvtap0: entered allmulticast mode [ 1133.371977][T16257] vlan0: entered allmulticast mode [ 1133.379853][T16257] veth0_vlan: entered allmulticast mode [ 1133.479235][T16282] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11410'. [ 1133.510794][T16282] team0: No ports can be present during mode change [ 1133.582222][T16279] A link change request failed with some changes committed already. Interface veth0_to_team may have been left with an inconsistent configuration, please check. [ 1133.700008][T16288] bond0: entered promiscuous mode [ 1133.705370][T16288] bond_slave_0: entered promiscuous mode [ 1133.712099][T16288] bond_slave_1: entered promiscuous mode [ 1133.805690][T16296] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11413'. [ 1133.935975][T16306] netlink: 84 bytes leftover after parsing attributes in process `syz.0.11415'. [ 1134.074645][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5060 ms [ 1134.082717][ C0] lec:lec_tx_timeout: lec0 [ 1134.097583][T16316] netlink: 16 bytes leftover after parsing attributes in process `syz.6.11420'. [ 1134.731785][T16367] 8021q: adding VLAN 0 to HW filter on device team0 [ 1134.858545][T16373] netlink: 36 bytes leftover after parsing attributes in process `syz.5.11438'. [ 1134.965729][T16373] netlink: 16 bytes leftover after parsing attributes in process `syz.5.11438'. [ 1135.135688][T16380] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11438'. [ 1135.466823][T16402] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11442'. [ 1135.510041][T16406] netlink: 212356 bytes leftover after parsing attributes in process `syz.6.11443'. [ 1135.600620][T16411] netlink: 32 bytes leftover after parsing attributes in process `syz.3.11444'. [ 1135.677117][T16420] netlink: 'syz.0.11445': attribute type 1 has an invalid length. [ 1135.753624][T16420] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 1135.767072][T16429] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1135.797937][T16432] netlink: 36 bytes leftover after parsing attributes in process `syz.2.11449'. [ 1135.821915][T16430] netlink: 'syz.6.11448': attribute type 4 has an invalid length. [ 1135.837683][T16430] netlink: 'syz.6.11448': attribute type 4 has an invalid length. [ 1135.919962][T16440] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1136.011861][T16440] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1136.137182][T16444] ip6gre0: entered promiscuous mode [ 1136.152034][T16444] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11450'. [ 1136.326840][T16462] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 1136.516964][T16467] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11456'. [ 1136.602682][T16471] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11455'. [ 1136.667379][T16448] infiniband sy‡1: set active [ 1136.680089][T16448] infiniband sy‡1: added bond0 [ 1136.863289][T16448] RDS/IB: sy‡1: added [ 1136.906788][T16448] smc: adding ib device sy‡1 with port count 1 [ 1136.924437][T16448] smc: ib device sy‡1 port 1 has no pnetid [ 1137.175883][T16498] netlink: 'syz.5.11466': attribute type 32 has an invalid length. [ 1137.195792][T16498] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11466'. [ 1137.259082][T16498] bond5: Setting coupled_control to off (0) [ 1137.336636][T16502] IPVS: rr: TCP 172.20.20.170:0 - no destination available [ 1137.400475][T16507] netlink: 'syz.2.11469': attribute type 28 has an invalid length. [ 1137.435327][T16507] netlink: 'syz.2.11469': attribute type 3 has an invalid length. [ 1137.462153][T16507] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11469'. [ 1137.486085][T16513] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1137.497404][T16513] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1137.672598][T16519] netlink: 'syz.5.11473': attribute type 2 has an invalid length. [ 1137.685503][T16515] netlink: 'syz.2.11472': attribute type 16 has an invalid length. [ 1137.708721][T16521] netlink: 'syz.5.11473': attribute type 2 has an invalid length. [ 1137.870121][T16515] 8021q: adding VLAN 0 to HW filter on device team0 [ 1137.910567][T16515] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1140.136825][T16640] bond1: (slave lo): Releasing backup interface [ 1140.149179][T16640] bond1: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 1140.182237][T16640] team0: Port device team_slave_0 removed [ 1140.191290][T16640] team0: Port device team_slave_1 removed [ 1140.199280][T16640] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1140.209546][T16640] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1140.218980][T16645] __nla_validate_parse: 8 callbacks suppressed [ 1140.218998][T16645] netlink: 277 bytes leftover after parsing attributes in process `syz.6.11509'. [ 1140.221297][T16640] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1140.287816][T16644] team0: Mode changed to "random" [ 1140.440986][T16643] syzkaller1: entered promiscuous mode [ 1140.543263][T16653] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11511'. [ 1140.638346][T16659] validate_nla: 1 callbacks suppressed [ 1140.638371][T16659] netlink: 'syz.0.11511': attribute type 1 has an invalid length. [ 1140.839358][T16676] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1141.017071][T16681] syzkaller0: entered promiscuous mode [ 1141.039508][T16681] syzkaller0: entered allmulticast mode [ 1141.155328][T16685] x_tables: duplicate underflow at hook 2 [ 1141.272575][T16690] delete_channel: no stack [ 1141.331508][T16690] bridge5: entered promiscuous mode [ 1141.349370][T16690] bridge5: entered allmulticast mode [ 1141.472784][T16700] tipc: Enabling of bearer rejected, failed to enable media [ 1141.642710][T16706] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11529'. [ 1141.907218][T16718] netlink: 68 bytes leftover after parsing attributes in process `syz.2.11533'. [ 1142.284091][T16734] syzkaller0: entered promiscuous mode [ 1142.293844][T16734] syzkaller0: entered allmulticast mode [ 1142.336556][T16739] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11540'. [ 1142.360382][T16739] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11540'. [ 1142.372369][T16734] netlink: 'syz.0.11539': attribute type 2 has an invalid length. [ 1142.672988][T16749] tipc: New replicast peer: 255.255.255.255 [ 1142.685475][T16749] tipc: Enabled bearer , priority 10 [ 1142.693748][T16753] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11542'. [ 1142.718568][T16754] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11542'. [ 1142.762985][T16757] netlink: 212356 bytes leftover after parsing attributes in process `syz.6.11544'. [ 1142.877759][T16768] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11547'. [ 1142.928692][T16761] bond14: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1142.977517][T16761] bond14 (unregistering): Released all slaves [ 1143.056361][T16774] netlink: 'syz.6.11550': attribute type 1 has an invalid length. [ 1143.111393][T16774] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1143.287920][T16774] bond2: (slave veth3): Enslaving as an active interface with a down link [ 1143.382563][T16784] tipc: Failed to remove unknown binding: 66,0,0/9480874:1835667584/1835667586 [ 1143.393934][T16784] tipc: Failed to remove unknown binding: 66,0,0/9480874:1835667584/1835667585 [ 1143.411030][T16784] tipc: Failed to remove unknown binding: 66,0,0/9480874:1835667584/1835667586 [ 1143.421845][T16784] tipc: Failed to remove unknown binding: 66,0,0/9480874:1835667584/1835667585 [ 1143.547449][T16797] netlink: 'syz.6.11554': attribute type 1 has an invalid length. [ 1143.562041][T16797] netlink: 'syz.6.11554': attribute type 1 has an invalid length. [ 1143.581086][T16797] netlink: 'syz.6.11554': attribute type 1 has an invalid length. [ 1143.589848][T16797] netlink: 'syz.6.11554': attribute type 1 has an invalid length. [ 1143.610386][T16797] netlink: 'syz.6.11554': attribute type 1 has an invalid length. [ 1143.624062][T16797] netlink: 'syz.6.11554': attribute type 1 has an invalid length. [ 1143.658943][T16797] netlink: 'syz.6.11554': attribute type 1 has an invalid length. [ 1143.682478][T16803] syzkaller0: entered promiscuous mode [ 1143.698730][T16803] syzkaller0: entered allmulticast mode [ 1144.029347][T16820] syzkaller0: entered promiscuous mode [ 1144.045154][T16820] syzkaller0: entered allmulticast mode [ 1144.057403][T16820] TC_ACT_REPEAT abuse ? [ 1144.125905][T16826] x_tables: duplicate underflow at hook 2 [ 1144.787312][T16846] workqueue: Failed to create a rescuer kthread for wq "bond14": -EINTR [ 1145.153269][T16893] syz_tun: refused to change device tx_queue_len [ 1145.203541][T16893] openvswitch: netlink: Flow actions attr not present in new flow. [ 1145.470099][T16910] __nla_validate_parse: 73 callbacks suppressed [ 1145.470119][T16910] netlink: 1044 bytes leftover after parsing attributes in process `syz.3.11585'. [ 1145.643714][T16928] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11589'. [ 1145.820125][T16933] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11595'. [ 1145.908227][T16939] validate_nla: 61 callbacks suppressed [ 1145.908249][T16939] netlink: 'syz.3.11593': attribute type 1 has an invalid length. [ 1145.963062][T16946] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 1145.997714][T16939] netlink: 224 bytes leftover after parsing attributes in process `syz.3.11593'. [ 1146.228507][T16964] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11602'. [ 1146.464284][T16974] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11607'. [ 1146.595398][T16983] netlink: 'syz.3.11609': attribute type 1 has an invalid length. [ 1146.608486][T16986] 8021q: VLANs not supported on gre0 [ 1146.617351][T16987] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 1146.758010][T17002] netlink: 'syz.2.11614': attribute type 1 has an invalid length. [ 1146.868714][T17002] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1146.898083][T17010] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11616'. [ 1147.068828][T17020] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 1147.138201][T17025] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11621'. [ 1147.147702][T17025] block nbd3: Unsupported socket: should be TCP or UNIX. [ 1147.185980][T17030] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11620'. [ 1147.323008][T17035] syzkaller0: entered promiscuous mode [ 1147.329305][T17035] syzkaller0: entered allmulticast mode [ 1147.338078][T30968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1147.346845][T30968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1147.384587][T17035] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1147.393547][T17035] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1147.506876][T17045] x_tables: duplicate entry at hook 1 [ 1147.568629][T17045] xt_hashlimit: size too large, truncated to 1048576 [ 1148.135879][T17073] netlink: 'syz.6.11634': attribute type 39 has an invalid length. [ 1148.344327][T17083] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11637'. [ 1148.612308][ T5843] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1148.633939][ T5843] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1148.645471][ T5843] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1148.657814][ T5843] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1148.667141][ T5843] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1148.714054][T17088] hsr0 speed is unknown, defaulting to 1000 [ 1149.179432][T17097] netlink: 'syz.6.11641': attribute type 83 has an invalid length. [ 1149.188133][T17098] netlink: 'syz.6.11641': attribute type 83 has an invalid length. [ 1149.628403][ T8621] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 1149.648744][ T8621] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1149.660886][ T8621] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 1149.789510][ T8621] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 1149.800823][ T8621] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1149.812761][ T8621] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 1149.943009][ T8621] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 1149.953867][ T8621] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1149.967093][ T8621] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 1150.091304][ T8621] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 1150.103476][ T8621] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1150.115155][ T8621] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 1150.181398][T17135] hsr0 speed is unknown, defaulting to 1000 [ 1150.500005][T17088] chnl_net:caif_netlink_parms(): no params data found [ 1150.716657][ T5843] Bluetooth: hci7: command tx timeout [ 1151.551209][ T8621] bond13 (unregistering): (slave bridge8): Releasing backup interface [ 1151.559913][ T8621] bond13 (unregistering): (slave bridge8): the permanent HWaddr of slave - fe:38:80:8d:e6:8f - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1151.629763][ T8621] bond13 (unregistering): (slave bridge9): Releasing backup interface [ 1151.730243][ T8621] bond0 (unregistering): Released all slaves [ 1151.743159][ T8621] bond1 (unregistering): Released all slaves [ 1151.760234][ T8621] bond2 (unregistering): Released all slaves [ 1151.780971][ T8621] bond3 (unregistering): Released all slaves [ 1151.796625][ T8621] bond4 (unregistering): Released all slaves [ 1151.812026][ T8621] bond5 (unregistering): Released all slaves [ 1151.828775][ T8621] bond6 (unregistering): Released all slaves [ 1151.847282][ T8621] bond7 (unregistering): Released all slaves [ 1151.863477][ T8621] bond8 (unregistering): Released all slaves [ 1151.883562][ T8621] bond9 (unregistering): Released all slaves [ 1151.903679][ T8621] bond10 (unregistering): Released all slaves [ 1151.932148][ T8621] bond11 (unregistering): Released all slaves [ 1151.948844][ T8621] bond12 (unregistering): Released all slaves [ 1151.970203][ T8621] bond13 (unregistering): Released all slaves [ 1152.197982][T17088] bridge0: port 1(bridge_slave_0) entered blocking state [ 1152.237048][T17088] bridge0: port 1(bridge_slave_0) entered disabled state [ 1152.263694][T17088] bridge_slave_0: entered allmulticast mode [ 1152.283562][T17088] bridge_slave_0: entered promiscuous mode [ 1152.300154][T17088] bridge0: port 2(bridge_slave_1) entered blocking state [ 1152.326451][T17088] bridge0: port 2(bridge_slave_1) entered disabled state [ 1152.342933][T17088] bridge_slave_1: entered allmulticast mode [ 1152.351182][T17088] bridge_slave_1: entered promiscuous mode [ 1152.364394][ T8621] : left promiscuous mode [ 1152.419131][T17209] xt_socket: unknown flags 0x50 [ 1152.503057][T17213] xt_NFQUEUE: number of total queues is 0 [ 1152.575528][T17088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1152.748769][T17210] syzkaller0: entered promiscuous mode [ 1152.754329][T17210] syzkaller0: entered allmulticast mode [ 1152.795260][ T5843] Bluetooth: hci7: command tx timeout [ 1152.811009][T17088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1154.875277][ T5843] Bluetooth: hci7: command tx timeout [ 1155.116432][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1155.357246][T17088] team0: Port device team_slave_0 added [ 1155.389008][T17088] team0: Port device team_slave_1 added [ 1155.513863][T17088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1155.523668][T17088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1155.552923][T17088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1155.599434][T17088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1155.616687][T17088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1155.694568][T17088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1155.772453][T17252] __nla_validate_parse: 7 callbacks suppressed [ 1155.772475][T17252] netlink: 1 bytes leftover after parsing attributes in process `syz.3.11678'. [ 1155.807239][T17252] xt_policy: neither incoming nor outgoing policy selected [ 1156.247064][T17088] hsr_slave_0: entered promiscuous mode [ 1156.276969][T17088] hsr_slave_1: entered promiscuous mode [ 1156.283609][T17088] debugfs: 'hsr0' already exists in 'hsr' [ 1156.305331][T17088] Cannot create hsr debugfs directory [ 1156.367777][T17274] xt_hashlimit: size too large, truncated to 1048576 [ 1156.956907][ T5843] Bluetooth: hci7: command tx timeout [ 1157.122850][T17318] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11688'. [ 1157.150704][T17310] netlink: 24 bytes leftover after parsing attributes in process `syz.6.11688'. [ 1157.466615][ T8621] veth1_macvtap: left promiscuous mode [ 1157.483648][ T8621] veth0_macvtap: left promiscuous mode [ 1157.581538][ T8621] pim6reg (unregistering): left allmulticast mode [ 1157.844173][ T8621] veth0_to_team (unregistering): left allmulticast mode [ 1158.309789][T17348] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11693'. [ 1158.622176][ T8621] IPVS: stop unused estimator thread 0... [ 1159.850953][T17303] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1159.868832][T17088] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1159.940559][T17088] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1160.040800][T17088] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1160.170402][T17359] bond11: option all_slaves_active: invalid value (222) [ 1160.201354][T17359] bond11 (unregistering): Released all slaves [ 1160.333750][T17088] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1160.729465][T17088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1160.788951][T17400] syzkaller0: entered promiscuous mode [ 1160.804346][T17400] syzkaller0: entered allmulticast mode [ 1160.825272][T17404] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1160.895858][T17088] 8021q: adding VLAN 0 to HW filter on device team0 [ 1160.938776][ T8631] bridge0: port 1(bridge_slave_0) entered blocking state [ 1160.939198][T17410] netlink: 'syz.6.11707': attribute type 4 has an invalid length. [ 1160.946319][ T8631] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1160.978335][T17400] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11705'. [ 1160.987829][T17400] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11705'. [ 1161.008064][T17411] netlink: 'syz.6.11707': attribute type 4 has an invalid length. [ 1161.016088][T17400] netlink: 2 bytes leftover after parsing attributes in process `syz.2.11705'. [ 1161.027421][T17400] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11705'. [ 1161.037291][T17400] netlink: 2 bytes leftover after parsing attributes in process `syz.2.11705'. [ 1161.073965][ T8625] bridge0: port 2(bridge_slave_1) entered blocking state [ 1161.081294][ T8625] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1161.130937][T17413] netlink: 212304 bytes leftover after parsing attributes in process `syz.3.11708'. [ 1161.165687][T17413] openvswitch: netlink: Message has 6 unknown bytes. [ 1161.181540][T17415] netlink: 'syz.3.11708': attribute type 1 has an invalid length. [ 1161.183398][ T7515] lec:lec_start_xmit: lec0:No lecd attached [ 1161.305944][T17415] bond11: entered promiscuous mode [ 1161.311546][T17415] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1161.319976][T17424] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11709'. [ 1161.320002][T17424] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11709'. [ 1161.360190][T17422] netlink: 108 bytes leftover after parsing attributes in process `syz.2.11711'. [ 1161.381849][T17413] bond11: (slave bridge7): making interface the new active one [ 1161.390335][T17413] bridge7: entered promiscuous mode [ 1161.397806][T17413] bond11: (slave bridge7): Enslaving as an active interface with an up link [ 1161.629633][T17434] netlink: 144 bytes leftover after parsing attributes in process `syz.3.11713'. [ 1162.041334][T17452] ip6erspan0: entered promiscuous mode [ 1162.270876][T17474] Cannot find add_set index 2 as target [ 1162.416004][T17088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1162.590960][T17088] veth0_vlan: entered promiscuous mode [ 1162.687153][T17088] veth1_vlan: entered promiscuous mode [ 1163.041937][T17088] veth0_macvtap: entered promiscuous mode [ 1163.066537][T17088] veth1_macvtap: entered promiscuous mode [ 1163.142075][T17088] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1163.227507][T17088] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1163.295888][ T8625] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1163.327694][ T8625] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1163.338909][T17512] hsr0 speed is unknown, defaulting to 1000 [ 1163.346079][ T8625] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1163.360165][T17516] ip6t_srh: unknown srh invflags 4000 [ 1163.419639][ T8625] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1163.908289][ T8631] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1163.942450][ T8631] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1164.166637][ T8625] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1164.211897][ T8625] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1165.019892][T17590] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1165.087113][T17590] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1166.205018][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1166.213183][ C0] lec:lec_tx_timeout: lec0 [ 1167.100857][T17553] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1167.112400][T17561] __nla_validate_parse: 16 callbacks suppressed [ 1167.112426][T17561] netlink: 36 bytes leftover after parsing attributes in process `syz.2.11743'. [ 1167.128989][T17561] ksmbd: Unknown IPC event: 3, ignore. [ 1167.482042][T17622] hsr0 speed is unknown, defaulting to 1000 [ 1167.670961][T17631] netlink: 'syz.5.11755': attribute type 21 has an invalid length. [ 1167.714279][T17631] netlink: 128 bytes leftover after parsing attributes in process `syz.5.11755'. [ 1167.880010][T17631] netlink: 3 bytes leftover after parsing attributes in process `syz.5.11755'. [ 1167.906201][T17637] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1167.973271][T17637] bond1: (slave lo): Enslaving as an active interface with an up link [ 1168.039389][T17637] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1168.307575][T17650] openvswitch: netlink: Unexpected mask (mask=2020040, allowed=2010048) [ 1168.421135][T17648] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1168.532402][T17656] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1169.092162][T17682] IPVS: set_ctl: invalid protocol: 135 0.0.0.0:20003 [ 1169.567759][T17712] syzkaller0: entered promiscuous mode [ 1169.590061][T17712] syzkaller0: entered allmulticast mode [ 1169.631454][T17715] netlink: 64 bytes leftover after parsing attributes in process `syz.3.11777'. [ 1169.641291][T17715] netlink: 64 bytes leftover after parsing attributes in process `syz.3.11777'. [ 1169.696038][T17717] syzkaller0: entered promiscuous mode [ 1169.701854][T17717] syzkaller0: entered allmulticast mode [ 1169.721038][T17722] x_tables: duplicate underflow at hook 4 [ 1169.733074][T17723] bridge0: port 2(bridge_slave_1) entered disabled state [ 1169.740917][T17723] bridge0: port 1(bridge_slave_0) entered disabled state [ 1169.882960][T17730] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11782'. [ 1170.121703][T17733] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1170.153973][T17733] bond3 (unregistering): Released all slaves [ 1170.216692][T17739] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11784'. [ 1170.227099][T17739] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11784'. [ 1170.414007][T17748] bond2: Unable to set peer notification delay as MII monitoring is disabled [ 1170.468306][T17748] bond2 (unregistering): Released all slaves [ 1170.585558][T17764] netlink: 'syz.5.11792': attribute type 10 has an invalid length. [ 1170.672886][T17764] veth0_vlan: left promiscuous mode [ 1170.681864][T17764] veth0_vlan: entered promiscuous mode [ 1170.718963][T17764] team0: Device veth0_vlan failed to register rx_handler [ 1170.867233][T17779] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11795'. [ 1170.998110][T17779] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1171.040548][T17786] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11796'. [ 1171.329476][T17811] netlink: 'syz.0.11804': attribute type 10 has an invalid length. [ 1171.367633][T17811] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1171.766563][T17834] netlink: 'syz.6.11809': attribute type 7 has an invalid length. [ 1171.881879][T17848] netlink: 'syz.5.11815': attribute type 12 has an invalid length. [ 1171.891341][T17848] netlink: 'syz.5.11815': attribute type 29 has an invalid length. [ 1172.312461][T17875] __nla_validate_parse: 4 callbacks suppressed [ 1172.312492][T17875] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11821'. [ 1172.331855][T17875] netlink: 'syz.5.11821': attribute type 3 has an invalid length. [ 1172.345538][T17873] xt_addrtype: ipv6 does not support BROADCAST matching [ 1172.509961][T17879] netlink: 'syz.3.11825': attribute type 21 has an invalid length. [ 1172.522561][T17879] netlink: 128 bytes leftover after parsing attributes in process `syz.3.11825'. [ 1172.540309][T17881] netlink: 88 bytes leftover after parsing attributes in process `syz.2.11826'. [ 1172.561939][T17887] x_tables: duplicate underflow at hook 1 [ 1172.574782][T17881] netem: invalid attributes len -24 [ 1172.582835][T17881] netem: change failed [ 1172.595109][T17879] netlink: 3 bytes leftover after parsing attributes in process `syz.3.11825'. [ 1172.627792][T17888] netlink: 16 bytes leftover after parsing attributes in process `syz.6.11827'. [ 1172.794139][T17896] syzkaller1: entered promiscuous mode [ 1172.802192][T17903] netlink: 'syz.2.11831': attribute type 1 has an invalid length. [ 1172.826244][T17896] syzkaller1: entered allmulticast mode [ 1173.089725][T17918] Cannot find del_set index 4 as target [ 1173.181365][T17927] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11839'. [ 1173.341056][T17936] netlink: 104 bytes leftover after parsing attributes in process `syz.3.11842'. [ 1173.740489][ T6071] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1173.751719][ T6071] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1173.765740][ T6071] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1173.773897][ T6071] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1173.783520][ T6071] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1173.855601][T17961] netlink: 'syz.5.11849': attribute type 1 has an invalid length. [ 1174.021681][T17964] bond7: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 1174.059197][T17955] hsr0 speed is unknown, defaulting to 1000 [ 1174.152502][T17961] bond7 (unregistering): (slave ip6gretap1): Releasing backup interface [ 1174.189937][T17961] bond7 (unregistering): Released all slaves [ 1174.303539][T17965] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1174.320834][T17965] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1174.332030][T17965] gretap1: entered promiscuous mode [ 1174.337791][T17965] gretap1: entered allmulticast mode [ 1174.556538][T17980] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11855'. [ 1174.571389][T17980] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11855'. [ 1175.021431][T18009] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11863'. [ 1175.184061][T17955] chnl_net:caif_netlink_parms(): no params data found [ 1175.442196][T18028] netlink: 'syz.5.11867': attribute type 1 has an invalid length. [ 1175.448816][T17955] bridge0: port 1(bridge_slave_0) entered blocking state [ 1175.477219][T17955] bridge0: port 1(bridge_slave_0) entered disabled state [ 1175.486168][T17955] bridge_slave_0: entered allmulticast mode [ 1175.494369][T17955] bridge_slave_0: entered promiscuous mode [ 1175.507240][T17955] bridge0: port 2(bridge_slave_1) entered blocking state [ 1175.527854][T17955] bridge0: port 2(bridge_slave_1) entered disabled state [ 1175.544307][T17955] bridge_slave_1: entered allmulticast mode [ 1175.556863][T17955] bridge_slave_1: entered promiscuous mode [ 1175.684189][T18035] xt_TCPMSS: Only works on TCP SYN packets [ 1175.691348][T17955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1175.701104][T18037] netlink: 'syz.0.11871': attribute type 2 has an invalid length. [ 1175.731445][T17955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1175.834984][ T6071] Bluetooth: hci3: command tx timeout [ 1175.858957][T18044] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 1175.876927][T18043] batadv2: entered allmulticast mode [ 1175.913268][T17955] team0: Port device team_slave_0 added [ 1175.952739][T17955] team0: Port device team_slave_1 added [ 1176.082623][T17955] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1176.092838][T17955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1176.121367][T17955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1176.151265][T17955] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1176.160256][T17955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1176.187430][T17955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1176.270037][T17955] hsr_slave_0: entered promiscuous mode [ 1176.277959][T17955] hsr_slave_1: entered promiscuous mode [ 1176.284929][T17955] debugfs: 'hsr0' already exists in 'hsr' [ 1176.290878][T17955] Cannot create hsr debugfs directory [ 1176.646066][T18064] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 1176.740834][T17955] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1176.788328][T18070] netlink: zone id is out of range [ 1176.794233][T18070] netlink: zone id is out of range [ 1176.837009][T18070] netlink: zone id is out of range [ 1176.863162][T18070] netlink: zone id is out of range [ 1176.870750][T18070] netlink: zone id is out of range [ 1176.877734][T18070] netlink: zone id is out of range [ 1176.883728][T18070] netlink: zone id is out of range [ 1176.893618][T18070] netlink: zone id is out of range [ 1176.899646][T18070] netlink: zone id is out of range [ 1177.059959][T17955] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1177.217523][T17955] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1177.244104][T18093] syzkaller1: entered promiscuous mode [ 1177.249990][T18093] syzkaller1: entered allmulticast mode [ 1177.273914][T18093] syzkaller1: left promiscuous mode [ 1177.279682][T18093] syzkaller1: left allmulticast mode [ 1177.309783][T17955] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1177.523163][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.534972][ T1304] lec:lec_start_xmit: lec0:No lecd attached [ 1177.564271][T18108] __nla_validate_parse: 2 callbacks suppressed [ 1177.564292][T18108] netlink: 48 bytes leftover after parsing attributes in process `syz.5.11892'. [ 1177.596406][T17955] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1177.604250][T18108] netlink: 28 bytes leftover after parsing attributes in process `syz.5.11892'. [ 1177.626419][T17955] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1177.658488][T17955] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1177.680966][T17955] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1177.731446][T18112] netlink: 'syz.3.11893': attribute type 1 has an invalid length. [ 1177.792440][T18112] bond12: entered promiscuous mode [ 1177.798699][T18112] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1177.823553][T18125] bond12: (slave bridge8): making interface the new active one [ 1177.832006][T18125] bridge8: entered promiscuous mode [ 1177.838990][T18125] bond12: (slave bridge8): Enslaving as an active interface with an up link [ 1177.872820][T18112] bond12: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1177.889272][T18112] bond12: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 1177.915471][ T6071] Bluetooth: hci3: command tx timeout [ 1178.131274][T18134] netlink: 48 bytes leftover after parsing attributes in process `syz.0.11901'. [ 1178.142606][T17955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1178.167001][T18139] netlink: 48 bytes leftover after parsing attributes in process `syz.0.11901'. [ 1178.203059][T17955] 8021q: adding VLAN 0 to HW filter on device team0 [ 1178.260456][ T8625] bridge0: port 1(bridge_slave_0) entered blocking state [ 1178.267693][ T8625] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1178.309387][ T8625] bridge0: port 2(bridge_slave_1) entered blocking state [ 1178.316906][ T8625] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1178.371164][T18146] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.11905'. [ 1178.406125][T18150] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.11903'. [ 1178.428238][T18149] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.11903'. [ 1178.529967][T18153] netlink: 'syz.6.11906': attribute type 3 has an invalid length. [ 1178.580050][T18153] netlink: 244 bytes leftover after parsing attributes in process `syz.6.11906'. [ 1178.680900][T18163] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11909'. [ 1178.739893][T18166] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11910'. [ 1178.834155][T18163] netlink: 'syz.0.11909': attribute type 1 has an invalid length. [ 1178.968609][T17955] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1179.026320][T18179] IPVS: sync thread started: state = MASTER, mcast_ifn = team0, syncid = 1, id = 0 [ 1179.163740][T17955] veth0_vlan: entered promiscuous mode [ 1179.316404][T17955] veth1_vlan: entered promiscuous mode [ 1179.612712][T17955] veth0_macvtap: entered promiscuous mode [ 1179.627501][T17955] veth1_macvtap: entered promiscuous mode [ 1179.661584][T17955] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1179.961218][T17955] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1179.995090][ T6071] Bluetooth: hci3: command tx timeout [ 1180.051600][T30966] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1180.083989][T30966] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1180.093258][T30966] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1180.164061][T30966] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1180.367761][T30968] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1180.391191][T30968] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1180.457249][T18240] syzkaller0: entered promiscuous mode [ 1180.462795][T18240] syzkaller0: entered allmulticast mode [ 1180.470994][T30967] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1180.487022][T30967] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1181.020310][T18261] IPv6: Can't replace route, no match found [ 1181.177882][ T5843] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1181.189664][ T5843] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1181.207237][ T5843] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1181.223990][ T5843] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1181.232287][ T5843] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1181.411774][T18275] hsr0 speed is unknown, defaulting to 1000 [ 1181.714104][T18296] netlink: 'syz.0.11949': attribute type 16 has an invalid length. [ 1181.743262][T18296] netlink: 'syz.0.11949': attribute type 17 has an invalid length. [ 1181.899523][T18296] bridge0: port 2(bridge_slave_1) entered blocking state [ 1181.906875][T18296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1181.914566][T18296] bridge0: port 1(bridge_slave_0) entered blocking state [ 1181.921788][T18296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1182.035066][T18296] net_ratelimit: 56 callbacks suppressed [ 1182.035080][T18296] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1182.059658][T18308] netlink: 'syz.6.11951': attribute type 1 has an invalid length. [ 1182.074695][ T6071] Bluetooth: hci3: command tx timeout [ 1182.126031][T18281] netlink: 'syz.2.11943': attribute type 1 has an invalid length. [ 1182.365731][T30968] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1182.513006][T30968] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1182.653096][T30968] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1182.852511][T30968] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1183.073439][T18354] __nla_validate_parse: 6 callbacks suppressed [ 1183.073463][T18354] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11965'. [ 1183.114998][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5580 ms [ 1183.123155][ C0] lec:lec_tx_timeout: lec0 [ 1183.140547][T18354] syzkaller0: entered promiscuous mode [ 1183.163767][T18354] syzkaller0: entered allmulticast mode [ 1183.355236][ T6071] Bluetooth: hci5: command tx timeout [ 1183.680537][T30968] bond7 (unregistering): (slave ip6gre2): Releasing backup interface [ 1183.691342][T30968] ip6gre2 (unregistering): left promiscuous mode [ 1183.808199][T30968] gretap0 (unregistering): left promiscuous mode [ 1184.179724][T30968] bond11 (unregistering): (slave bridge7): Releasing backup interface [ 1184.188586][T30968] bridge7 (unregistering): left promiscuous mode [ 1184.220151][T30968] bond12 (unregistering): (slave bridge8): Releasing backup interface [ 1184.229824][T30968] bridge8 (unregistering): left promiscuous mode [ 1184.310261][T30970] smc: removing ib device sy‡1 [ 1184.316460][T30968] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1184.330221][T30968] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1184.343436][T30968] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1184.359700][T30968] bond0 (unregistering): Released all slaves [ 1184.371705][T30968] bond1 (unregistering): Released all slaves [ 1184.387661][T30968] bond2 (unregistering): Released all slaves [ 1184.406378][T30968] bond3 (unregistering): Released all slaves [ 1184.431300][T30968] bond4 (unregistering): Released all slaves [ 1184.450688][T30968] bond5 (unregistering): Released all slaves [ 1184.469013][T30968] bond6 (unregistering): Released all slaves [ 1184.489385][T30968] bond7 (unregistering): Released all slaves [ 1184.507842][T30968] bond8 (unregistering): Released all slaves [ 1184.523703][T30968] bond9 (unregistering): Released all slaves [ 1184.547107][T30968] bond10 (unregistering): Released all slaves [ 1184.566775][T30968] bond11 (unregistering): Released all slaves [ 1184.585796][T30968] bond12 (unregistering): Released all slaves [ 1184.785756][T18389] tipc: Enabling of bearer rejected, failed to enable media [ 1184.815402][T18398] netlink: 'syz.5.11973': attribute type 1 has an invalid length. [ 1184.840709][T18275] chnl_net:caif_netlink_parms(): no params data found [ 1184.889576][T18403] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11973'. [ 1184.925418][T18403] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11973'. [ 1185.120301][T18398] bond7: entered promiscuous mode [ 1185.127192][T18398] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1185.357844][T18407] bond7: (slave bridge5): making interface the new active one [ 1185.367610][T18407] bridge5: entered promiscuous mode [ 1185.397839][T18407] bond7: (slave bridge5): Enslaving as an active interface with an up link [ 1185.437043][ T6071] Bluetooth: hci5: command tx timeout [ 1185.686417][T18439] netlink: 'syz.5.11980': attribute type 10 has an invalid length. [ 1186.176731][T18462] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11985'. [ 1186.399311][T18462] macvlan2: entered promiscuous mode [ 1186.413983][T18462] macvlan2: entered allmulticast mode [ 1186.430156][T18462] veth0_virt_wifi: entered promiscuous mode [ 1186.484913][T18462] veth0_virt_wifi: entered allmulticast mode [ 1186.541089][T18462] team0: Port device macvlan2 added [ 1186.699656][T18472] vcan1: entered promiscuous mode [ 1186.721926][T18472] vcan1: entered allmulticast mode [ 1187.023699][T18275] bridge0: port 1(bridge_slave_0) entered blocking state [ 1187.045089][T18275] bridge0: port 1(bridge_slave_0) entered disabled state [ 1187.062956][T18275] bridge_slave_0: entered allmulticast mode [ 1187.103575][T18275] bridge_slave_0: entered promiscuous mode [ 1187.135555][T18275] bridge0: port 2(bridge_slave_1) entered blocking state [ 1187.163498][T18275] bridge0: port 2(bridge_slave_1) entered disabled state [ 1187.181299][T18275] bridge_slave_1: entered allmulticast mode [ 1187.234242][T18495] l2tp_mt_check6: 23 callbacks suppressed [ 1187.234287][T18495] xt_l2tp: v2 doesn't support IP mode [ 1187.258942][T18275] bridge_slave_1: entered promiscuous mode [ 1187.360701][T18497] netlink: 256 bytes leftover after parsing attributes in process `syz.2.11993'. [ 1187.516253][ T6071] Bluetooth: hci5: command tx timeout [ 1187.535293][T18507] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11995'. [ 1187.616720][T18517] netlink: 'syz.5.11994': attribute type 3 has an invalid length. [ 1187.802884][T18275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1187.858290][T18275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1188.125548][T18535] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12001'. [ 1188.209245][T18275] team0: Port device team_slave_0 added [ 1188.233800][T18275] team0: Port device team_slave_1 added [ 1188.261379][T18535] netlink: 36 bytes leftover after parsing attributes in process `syz.2.12001'. [ 1188.270833][T18544] netlink: 36 bytes leftover after parsing attributes in process `syz.2.12001'. [ 1188.392632][ C1] vcan0: j1939_tp_rxtimer: 0xffff888035161000: rx timeout, send abort [ 1188.646240][T18275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1188.653257][T18275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1188.751638][T18275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1188.827772][T18565] xt_ecn: cannot match TCP bits for non-tcp packets [ 1188.892602][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805efb7000: rx timeout, send abort [ 1188.901134][ C1] vcan0: j1939_tp_rxtimer: 0xffff888035161000: abort rx timeout. Force session deactivation [ 1188.995677][T18275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1189.010425][T18275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1189.110136][T18275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1189.400956][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805efb7000: abort rx timeout. Force session deactivation [ 1189.497480][T18275] hsr_slave_0: entered promiscuous mode [ 1189.531289][T18275] hsr_slave_1: entered promiscuous mode [ 1189.553246][T18275] debugfs: 'hsr0' already exists in 'hsr' [ 1189.570863][T18275] Cannot create hsr debugfs directory [ 1189.597713][ T6071] Bluetooth: hci5: command tx timeout [ 1189.644033][T18587] ip6gre1: entered allmulticast mode [ 1189.689101][T18590] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12013'. [ 1189.862562][T18597] sctp: [Deprecated]: syz.0.12014 (pid 18597) Use of int in maxseg socket option. [ 1189.862562][T18597] Use struct sctp_assoc_value instead [ 1190.495539][T18621] netlink: 'syz.6.12019': attribute type 9 has an invalid length. [ 1190.899032][T18605] netlink: 'syz.5.12017': attribute type 2 has an invalid length. [ 1191.187820][T18645] netlink: 16 bytes leftover after parsing attributes in process `syz.6.12026'. [ 1191.249120][T18645] syzkaller1: entered promiscuous mode [ 1191.256537][T18645] syzkaller1: entered allmulticast mode [ 1191.348721][T30968] : left promiscuous mode [ 1191.573788][T30968] tipc: Disabling bearer [ 1191.591184][T18661] tipc: Failed to remove unknown binding: 66,0,0/0:4281315280/4281315282 [ 1191.593443][T30968] tipc: Left network mode [ 1191.609255][T18661] tipc: Failed to remove unknown binding: 66,0,0/0:4281315280/4281315281 [ 1191.726826][T18661] tipc: Failed to remove unknown binding: 66,0,0/0:4281315280/4281315282 [ 1191.776908][T18661] tipc: Failed to remove unknown binding: 66,0,0/0:4281315280/4281315281 [ 1192.182926][T18683] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12034'. [ 1192.273601][T18689] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 1192.404418][T18702] netlink: 64 bytes leftover after parsing attributes in process `syz.6.12038'. [ 1192.469131][T18705] netlink: 'syz.2.12033': attribute type 64 has an invalid length. [ 1192.529198][T18697] netlink: 'syz.5.12034': attribute type 1 has an invalid length. [ 1192.566817][T18703] syzkaller0: entered promiscuous mode [ 1192.584987][T18703] syzkaller0: entered allmulticast mode [ 1192.964085][T18721] netlink: 'syz.5.12042': attribute type 1 has an invalid length. [ 1193.071297][T18723] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12043'. [ 1193.162785][T18728] syzkaller0: entered promiscuous mode [ 1193.168516][T18728] syzkaller0: entered allmulticast mode [ 1193.236532][T18724] bond9: (slave bridge6): making interface the new active one [ 1193.266381][T18724] bond9: (slave bridge6): Enslaving as an active interface with an up link [ 1193.436856][T18734] netlink: 'syz.6.12044': attribute type 24 has an invalid length. [ 1193.496303][T18740] netlink: 'syz.2.12046': attribute type 21 has an invalid length. [ 1193.505157][T18740] netlink: 128 bytes leftover after parsing attributes in process `syz.2.12046'. [ 1193.557238][T18743] netlink: 'syz.2.12046': attribute type 21 has an invalid length. [ 1193.576137][T18744] netlink: 'syz.2.12046': attribute type 21 has an invalid length. [ 1193.584120][T18744] netlink: 128 bytes leftover after parsing attributes in process `syz.2.12046'. [ 1193.590743][T18743] netlink: 128 bytes leftover after parsing attributes in process `syz.2.12046'. [ 1193.632117][T18740] netlink: 'syz.2.12046': attribute type 4 has an invalid length. [ 1193.645003][T18740] netlink: 3 bytes leftover after parsing attributes in process `syz.2.12046'. [ 1193.693312][T18743] netlink: 3 bytes leftover after parsing attributes in process `syz.2.12046'. [ 1193.726939][T18744] netlink: 3 bytes leftover after parsing attributes in process `syz.2.12046'. [ 1193.852135][T18758] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12048'. [ 1193.872319][T18754] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12047'. [ 1193.894678][T18275] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1193.961431][T18758] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1194.092479][T18275] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1194.123736][T18275] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1194.227234][T18275] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1194.384369][T30968] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1194.403087][T30968] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1194.449164][T30968] vlan0: left allmulticast mode [ 1194.454360][T30968] veth0_vlan: left allmulticast mode [ 1194.496981][T30968] vlan0: left promiscuous mode [ 1194.516077][T30968] veth0_macvtap: left allmulticast mode [ 1194.521735][T30968] veth1_macvtap: left promiscuous mode [ 1194.579199][T30968] veth1_vlan: left promiscuous mode [ 1194.603011][T30968] veth0_vlan: left promiscuous mode [ 1195.614758][T30968] team0 (unregistering): Port device team_slave_1 removed [ 1195.630753][T30968] team0 (unregistering): Port device team_slave_0 removed [ 1195.858425][T18806] bond5: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 1195.871514][T18806] bond5 (unregistering): Released all slaves [ 1195.901784][T18811] erspan0: entered promiscuous mode [ 1196.321212][T18840] netlink: 24 bytes leftover after parsing attributes in process `syz.6.12064'. [ 1196.347941][T18275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1196.375673][T18840] netlink: 16 bytes leftover after parsing attributes in process `syz.6.12064'. [ 1196.415652][T18847] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1196.445886][T18275] 8021q: adding VLAN 0 to HW filter on device team0 [ 1196.528200][ T8621] bridge0: port 1(bridge_slave_0) entered blocking state [ 1196.535526][ T8621] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1196.571692][ T8621] bridge0: port 2(bridge_slave_1) entered blocking state [ 1196.579040][ T8621] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1196.812808][T18860] bridge0: port 2(bridge_slave_1) entered disabled state [ 1196.820590][T18860] bridge0: port 1(bridge_slave_0) entered disabled state [ 1196.909243][T18860] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1197.050028][T30968] IPVS: stop unused estimator thread 0... [ 1197.497291][T18899] veth1_macvtap: renamed from vlan1 [ 1197.679635][T18275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1197.751893][T18275] veth0_vlan: entered promiscuous mode [ 1197.779947][T18275] veth1_vlan: entered promiscuous mode [ 1197.847719][T18275] veth0_macvtap: entered promiscuous mode [ 1197.859751][T18275] veth1_macvtap: entered promiscuous mode [ 1197.884049][T18275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1197.903900][T18275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1197.920758][T30966] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1197.934380][T30966] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1197.947500][T30966] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1197.960454][T30966] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1198.131234][T30967] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1198.147083][T30967] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1198.210066][T30967] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1198.220402][T30967] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1206.315437][ T31] INFO: task syz.4.10548:13083 blocked for more than 143 seconds. [ 1206.326355][ T31] Not tainted syzkaller #0 [ 1206.331514][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1206.341343][ T31] task:syz.4.10548 state:D stack:25120 pid:13083 tgid:13082 ppid:7606 task_flags:0x400140 flags:0x00080002 [ 1206.353772][ T31] Call Trace: [ 1206.358397][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 1206.361687][ T31] __schedule+0x15dd/0x52d0 [ 1206.367146][ T31] ? __pfx___schedule+0x10/0x10 [ 1206.372944][ T31] ? schedule+0x90/0x360 [ 1206.378200][ T31] schedule+0x164/0x360 [ 1206.382868][ T31] schedule_preempt_disabled+0x13/0x30 [ 1206.388919][ T31] __mutex_lock+0x7fe/0x1300 [ 1206.393608][ T31] ? __mutex_lock+0x5ac/0x1300 [ 1206.398945][ T31] ? nfsd_nl_version_get_doit+0x17c/0xc40 [ 1206.407334][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1206.412486][ T31] ? __nlmsg_put+0xef/0x1b0 [ 1206.417497][ T31] ? genlmsg_put+0x137/0x2e0 [ 1206.422188][ T31] nfsd_nl_version_get_doit+0x17c/0xc40 [ 1206.431089][ T31] ? kmem_cache_free+0x187/0x630 [ 1206.436353][ T31] ? nlmon_xmit+0xb0/0x100 [ 1206.440982][ T31] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 1206.447426][ T31] ? dev_hard_start_xmit+0x802/0x870 [ 1206.453028][ T31] genl_family_rcv_msg_doit+0x22a/0x330 [ 1206.460808][ T31] ? __asan_memcpy+0x40/0x70 [ 1206.467877][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1206.474171][ T31] genl_rcv_msg+0x61c/0x7a0 [ 1206.552260][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1206.614593][ T31] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 1206.620818][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1206.654547][ T31] netlink_rcv_skb+0x232/0x4b0 [ 1206.659440][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1206.674758][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1206.680219][ T31] ? down_read+0x272/0x2e0 [ 1206.695076][ T31] ? genl_rcv+0xd/0x40 [ 1206.699274][ T31] genl_rcv+0x28/0x40 [ 1206.703425][ T31] netlink_unicast+0x80f/0x9b0 [ 1206.724894][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1206.730315][ T31] ? netlink_sendmsg+0x650/0xb40 [ 1206.754851][ T31] ? skb_put+0x11b/0x210 [ 1206.759433][ T31] netlink_sendmsg+0x813/0xb40 [ 1206.764311][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1206.784850][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1206.789945][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1206.804986][ T31] ____sys_sendmsg+0x972/0x9f0 [ 1206.809887][ T31] ? futex_unqueue+0x211/0x240 [ 1206.825017][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1206.830540][ T31] ? import_iovec+0x73/0xa0 [ 1206.854820][ T31] ___sys_sendmsg+0x2a5/0x360 [ 1206.859653][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 1206.884857][ T31] ? futex_wait+0x29a/0x380 [ 1206.889560][ T31] ? __fget_files+0x2a/0x420 [ 1206.894212][ T31] ? __fget_files+0x3a0/0x420 [ 1206.916109][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1206.921185][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1206.935202][ T31] ? rcu_is_watching+0x15/0xb0 [ 1206.944906][ T31] do_syscall_64+0x14d/0xf80 [ 1206.950029][ T31] ? trace_irq_disable+0x3b/0x150 [ 1206.967356][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1206.973541][ T31] ? clear_bhb_loop+0x40/0x90 [ 1206.995209][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1207.001614][ T31] RIP: 0033:0x7f4b7979c819 [ 1207.014611][ T31] RSP: 002b:00007f4b7a64d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1207.023147][ T31] RAX: ffffffffffffffda RBX: 00007f4b79a15fa0 RCX: 00007f4b7979c819 [ 1207.043951][ T31] RDX: 0000000020000000 RSI: 0000200000000140 RDI: 0000000000000005 [ 1207.052302][ T31] RBP: 00007f4b79832c91 R08: 0000000000000000 R09: 0000000000000000 [ 1207.061316][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1207.069968][ T31] R13: 00007f4b79a16038 R14: 00007f4b79a15fa0 R15: 00007ffe34610688 [ 1207.080957][ T31] [ 1207.130755][ T31] [ 1207.130755][ T31] Showing all locks held in the system: [ 1207.145035][ T31] 1 lock held by khungtaskd/31: [ 1207.150159][ T31] #0: ffffffff8e75e5e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1207.196779][ T31] 2 locks held by getty/5582: [ 1207.201610][ T31] #0: ffff888031cee0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1207.246101][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 1207.284572][ T31] 3 locks held by kworker/0:3/30561: [ 1207.290819][ T31] #0: ffff88813fe0f148 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 1207.324867][ T31] #1: ffffc90004907c40 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 1207.365207][ T31] #2: ffffffff8e7648f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 1207.404833][ T31] 2 locks held by syz.1.10389/12460: [ 1207.410360][ T31] #0: ffffffff8fc3de70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1207.444930][ T31] #1: ffffffff8ea86b88 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670 [ 1207.474566][ T31] 2 locks held by syz.4.10548/13083: [ 1207.479940][ T31] #0: ffffffff8fc3de70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1207.497499][ T31] #1: ffffffff8ea86b88 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_get_doit+0x17c/0xc40 [ 1207.508707][ T31] 1 lock held by syz-executor/13145: [ 1207.514143][ T31] 3 locks held by syz-executor/13582: [ 1207.534741][ T31] #0: ffff88807490cec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0 [ 1207.564660][ T31] #1: ffff88807490c0c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x10e0 [ 1207.584620][ T31] #2: ffffffff8fd5d5a8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260 [ 1207.605139][ T31] 1 lock held by syz-executor/17088: [ 1207.610617][ T31] 5 locks held by syz-executor/17955: [ 1207.625242][ T31] #0: ffff888067b90ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0 [ 1207.655445][ T31] #1: ffff888067b900c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x10e0 [ 1207.667319][ T31] #2: ffffffff8fd5d5a8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260 [ 1207.677859][ T31] #3: ffff8880306ceb00 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x92/0x570 [ 1207.688354][ T31] #4: ffffffff8e7648f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 1207.700364][ T31] 1 lock held by syz-executor/18275: [ 1207.706113][ T31] 1 lock held by dhcpcd/18944: [ 1207.710930][ T31] #0: ffff88802583a260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe10 [ 1207.723728][ T31] [ 1207.739544][ T31] ============================================= [ 1207.739544][ T31] [ 1207.750039][ T31] NMI backtrace for cpu 0 [ 1207.750059][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1207.750082][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1207.750095][ T31] Call Trace: [ 1207.750104][ T31] [ 1207.750114][ T31] dump_stack_lvl+0xe8/0x150 [ 1207.750151][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 1207.750254][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1207.750299][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1207.750325][ T31] sys_info+0x135/0x170 [ 1207.750356][ T31] watchdog+0xfd9/0x1030 [ 1207.750390][ T31] ? watchdog+0x21a/0x1030 [ 1207.750418][ T31] kthread+0x388/0x470 [ 1207.750447][ T31] ? __pfx_watchdog+0x10/0x10 [ 1207.750464][ T31] ? __pfx_kthread+0x10/0x10 [ 1207.750487][ T31] ret_from_fork+0x51e/0xb90 [ 1207.750520][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1207.750546][ T31] ? __switch_to+0xc7d/0x1450 [ 1207.750591][ T31] ? __pfx_kthread+0x10/0x10 [ 1207.750614][ T31] ret_from_fork_asm+0x1a/0x30 [ 1207.750662][ T31] [ 1207.750670][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1207.871817][ C1] NMI backtrace for cpu 1 [ 1207.871837][ C1] CPU: 1 UID: 0 PID: 5196 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 1207.871858][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1207.871870][ C1] RIP: 0010:copy_pmd_range+0x93d/0x8050 [ 1207.871896][ C1] Code: 48 89 44 24 18 48 8d 58 08 48 89 d8 48 c1 e8 03 4d 89 e5 48 89 44 24 20 42 80 3c 20 00 74 08 48 89 df e8 c6 65 19 00 4c 8b 23 <4c> 89 e6 48 83 e6 01 31 ff e8 75 1d af ff 4c 89 e0 48 83 e0 01 48 [ 1207.871913][ C1] RSP: 0018:ffffc90003237320 EFLAGS: 00000246 [ 1207.871930][ C1] RAX: 1ffffd400008c991 RBX: ffffea0000464c88 RCX: ffff88807c255b80 [ 1207.871945][ C1] RDX: 0000000000000000 RSI: 0000000000011800 RDI: ffffffffffffffff [ 1207.871957][ C1] RBP: ffffc900032375b0 R08: ffff88801e5256fb R09: 1ffff11003ca4adf [ 1207.871970][ C1] R10: dffffc0000000000 R11: ffffed1003ca4ae0 R12: ffffea0001fb8948 [ 1207.871984][ C1] R13: dffffc0000000000 R14: ffff88808ab97a70 R15: 0000555f5314e000 [ 1207.871998][ C1] FS: 00007f9f19d9c880(0000) GS:ffff888125557000(0000) knlGS:0000000000000000 [ 1207.872013][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1207.872026][ C1] CR2: 000055b485406168 CR3: 000000007ca54000 CR4: 00000000003526f0 [ 1207.872042][ C1] Call Trace: [ 1207.872049][ C1] [ 1207.872057][ C1] ? anon_vma_clone+0x3e5/0x9f0 [ 1207.872081][ C1] ? anon_vma_clone+0x3e5/0x9f0 [ 1207.872114][ C1] ? __pfx_copy_pmd_range+0x10/0x10 [ 1207.872131][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1207.872156][ C1] ? mas_wr_walk_descend+0x525/0x860 [ 1207.872254][ C1] ? copy_page_range+0x27b/0x11f0 [ 1207.872291][ C1] copy_page_range+0xbe8/0x11f0 [ 1207.872325][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 1207.872357][ C1] dup_mmap+0xf40/0x1d90 [ 1207.872387][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 1207.872412][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 1207.872447][ C1] copy_mm+0x13b/0x4a0 [ 1207.872473][ C1] copy_process+0x18b6/0x3cd0 [ 1207.872503][ C1] ? copy_process+0x921/0x3cd0 [ 1207.872534][ C1] ? __pfx_copy_process+0x10/0x10 [ 1207.872559][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1207.872586][ C1] kernel_clone+0x248/0x8e0 [ 1207.872610][ C1] ? cgroup1_freezing+0x20/0x350 [ 1207.872637][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 1207.872673][ C1] __x64_sys_clone+0x1b6/0x230 [ 1207.872701][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 1207.872737][ C1] ? do_sock_setsockopt+0x185/0x1b0 [ 1207.872767][ C1] do_syscall_64+0x14d/0xf80 [ 1207.872790][ C1] ? trace_irq_disable+0x3b/0x150 [ 1207.872806][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1207.872825][ C1] ? clear_bhb_loop+0x40/0x90 [ 1207.872846][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1207.872864][ C1] RIP: 0033:0x7f9f196f1636 [ 1207.872880][ C1] Code: 89 df e8 6d e8 f6 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 52 89 c5 85 c0 75 31 64 48 8b 04 25 10 00 00 [ 1207.872895][ C1] RSP: 002b:00007ffcf7566d30 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1207.872914][ C1] RAX: ffffffffffffffda RBX: 00007ffcf7566d38 RCX: 00007f9f196f1636 [ 1207.872927][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1207.872939][ C1] RBP: 0000555f530ab910 R08: 0000000000000000 R09: 0000555f530b38e0 [ 1207.872951][ C1] R10: 00007f9f19d9cb50 R11: 0000000000000246 R12: 00007ffcf75670f0 [ 1207.872964][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1207.872985][ C1] [ 1208.230862][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1208.237865][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1208.247024][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1208.257209][ T31] Call Trace: [ 1208.260534][ T31] [ 1208.263552][ T31] vpanic+0x56c/0xa60 [ 1208.267683][ T31] ? __pfx___schedule+0x10/0x10 [ 1208.272596][ T31] ? __pfx_vpanic+0x10/0x10 [ 1208.278816][ T31] ? __pfx_console_unlock+0x10/0x10 [ 1208.284089][ T31] panic+0xc5/0xd0 [ 1208.287892][ T31] ? __pfx_panic+0x10/0x10 [ 1208.292366][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1208.297811][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1208.304100][ T31] watchdog+0x1023/0x1030 [ 1208.308466][ T31] ? watchdog+0x21a/0x1030 [ 1208.313433][ T31] kthread+0x388/0x470 [ 1208.317618][ T31] ? __pfx_watchdog+0x10/0x10 [ 1208.322319][ T31] ? __pfx_kthread+0x10/0x10 [ 1208.326939][ T31] ret_from_fork+0x51e/0xb90 [ 1208.331599][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1208.336934][ T31] ? __switch_to+0xc7d/0x1450 [ 1208.341652][ T31] ? __pfx_kthread+0x10/0x10 [ 1208.346275][ T31] ret_from_fork_asm+0x1a/0x30 [ 1208.351088][ T31] [ 1208.354801][ T31] Kernel Offset: disabled [ 1208.359162][ T31] Rebooting in 86400 seconds..