last executing test programs: 6m50.156481085s ago: executing program 3 (id=5142): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004044}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$inet_tcp(0x2, 0x1, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f0000000040)={@void, @void, @eth={@multicast, @multicast, @val={@val={0x88a8, 0x7, 0x1, 0x1}, {0x8100, 0x6, 0x1}}, {@generic={0x88f7}}}}, 0x16) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)={0x40, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @action={{{}, {}, @device_a, @device_a, @from_mac=@broadcast, {0x0, 0xff}}, @ext_ch_sw={0x4, 0x4, {{0x0, 0x0, 0x2}, @void}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r10, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x2, 0x13}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008880}, 0xc800) r12 = socket(0x400000000010, 0x3, 0x0) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r15 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r15, 0x0, &(0x7f00000002c0)) sendmsg$nl_route_sched(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000022c0)=@newtfilter={0x90, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r14, {0xb, 0x6}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_simple={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x40, 0x9, 0x7, 0xb, 0x7}}, @TCA_DEF_DATA={0xa, 0x3, 'basic\x00'}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r9, 0x11}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)="27032400000514000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000780)="f058050000007f8f", 0x8}], 0x2}, 0x5) 6m49.452369012s ago: executing program 3 (id=5151): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xb6, 0xa, 0x0, 0x0, 0x90, 0x61, 0x11, 0x64}, [@initr0]}, &(0x7f0000000740)='syzkaller\x00'}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r3, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r1}, 0x20) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000280)={'erspan0\x00', 0x0, 0x7, 0x8080, 0xffff, 0x400, {{0xc, 0x4, 0x3, 0x28, 0x30, 0x65, 0x0, 0x7, 0x4, 0x0, @private=0xa010100, @local, {[@timestamp_prespec={0x44, 0x14, 0xbd, 0x3, 0x2, [{@local, 0x8001}, {@multicast1, 0x80000000}]}, @lsrr={0x83, 0x7, 0x23, [@private=0xa010100]}]}}}}}) pipe(&(0x7f0000000040)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0x25a5, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{0x1, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)='%pK \x00'}, 0x20) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000440), 0x8) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000004c0)=@o_path={&(0x7f0000000480)='./file0\x00', 0x0, 0x18, r0}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{0x1, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)=r0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x11, &(0x7f0000000140)=@raw=[@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x50e}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff7fff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], &(0x7f0000000200)='syzkaller\x00', 0x800, 0xc, &(0x7f0000000240)=""/12, 0x41000, 0x40, '\x00', r4, 0x25, r5, 0x8, &(0x7f0000000340)={0x7, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000005c0)=[r7, r8, r9, 0x1, r10, 0xffffffffffffffff], &(0x7f0000000600)=[{0x3, 0x2, 0x1, 0x9}, {0x3, 0x2, 0x9, 0xb}], 0x10, 0x3c}, 0x94) 6m48.488230827s ago: executing program 3 (id=5158): r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000002c0)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[], 0x32600) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e3, &(0x7f0000000180)={r0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000040)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x2d, 0x20040040) recvfrom$unix(r3, 0x0, 0xfffffffffffffdbe, 0x40010020, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0xfffd}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x78}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000001}, 0x60) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e22, @private=0xa010102}, @in={0x2, 0x4e20, @multicast2}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e20, 0x9, @loopback, 0xfffffdcc}], 0x4c) 6m48.433470853s ago: executing program 3 (id=5160): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x9, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x32}]}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) (async) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000140)={0x1, 'vcan0\x00', {}, 0x81}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xc, 0xd9, 0x1ff, 0x4, 0x8004, 0x1, 0xa9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3}, 0x50) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f0000000200)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$XFS_IOC_ERROR_INJECTION(0xffffffffffffffff, 0x40085874, &(0x7f0000000240)={r0, 0x1}) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x40, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xfff}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x8b1efe8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x32}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x17}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x26}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5d}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20004001}, 0xc010) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x50, r5, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r4, 0x4048587b, &(0x7f0000000740)={{r1, &(0x7f0000000580)='syz1\x00', 0x200, &(0x7f00000005c0)={@align=0x8, {0x1f5f, 0x8001, 0x65, 0x3}}, 0x1, &(0x7f0000000600)={@_ha_fsid}, &(0x7f0000000640)=0x7}, 0x1, &(0x7f0000000700)=[{0x2, 0x7, &(0x7f0000000680)='syz2\x00', &(0x7f00000006c0)="8427cbdd268e9ab803d5521d7ce3b68df93c6d", 0x13, 0x32}]}) ioctl$PPPIOCSMRRU(r6, 0x4004743b, &(0x7f00000007c0)=0x2) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@bloom_filter={0x1e, 0x2, 0x6, 0x3, 0x2a, r6, 0x2, '\x00', 0x0, r6, 0x2, 0x0, 0x2, 0xa}, 0x50) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000008c0), r2) sendmsg$IEEE802154_LLSEC_ADD_KEY(r7, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, r8, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xf8}]}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x24004001) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000009, 0x100010, r4, 0x294d1000) (async) bind$xdp(r6, &(0x7f00000009c0)={0x2c, 0x1, 0x0, 0x2a, r6}, 0x10) (async) close(r0) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000a00), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000a80)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r2, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x50, r8, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0xe}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x9}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x3}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x4}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}]}, 0x50}, 0x1, 0x0, 0x0, 0x801}, 0x8000) (async) getsockopt$inet_sctp_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000bc0), &(0x7f0000000c00)=0xe) accept(r0, 0x0, &(0x7f0000000c40)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000cc0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000d00)=0x0) sendmsg$NFC_CMD_LLC_SDREQ(r2, &(0x7f00000010c0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001080)={&(0x7f0000000d40)={0x334, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_LLC_SDP={0x14c, 0x13, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [{0x5, 0x1, '@'}, {0xa, 0x1, '-$-).\\'}, {0x9, 0x1, '{-:[%'}, {0x6, 0x1, '!{'}]}, {0xc, 0x0, 0x0, 0x1, [{0x5, 0x1, '\x00'}]}, {0xc, 0x0, 0x0, 0x1, [{0x5, 0x1, '\\'}]}, {0x40, 0x0, 0x0, 0x1, [{0x6, 0x1, '@['}, {0xd, 0x1, '>^*##}[*:'}, {0x8, 0x1, '\'@\x97#'}, {0x6, 0x1, ',\''}, {0x5, 0x1, '+'}, {0x5, 0x1, '\x00'}, {0x4}]}, {0x14, 0x0, 0x0, 0x1, [{0x5, 0x1, '%'}, {0x6, 0x1, '+,'}]}, {0x18, 0x0, 0x0, 0x1, [{0x9, 0x1, 'syz1\x00'}, {0x6, 0x1, '}\xfd'}]}, {0x50, 0x0, 0x0, 0x1, [{0x11, 0x1, '802.15.4 MAC\x00'}, {0xd, 0x1, 'mptcp_pm\x00'}, {0x8, 0x1, 'nbd\x00'}, {0x11, 0x1, '802.15.4 MAC\x00'}, {0xa, 0x1, 'wpan0\x00'}]}, {0xc, 0x0, 0x0, 0x1, [{0x8, 0x1, 'nbd\x00'}]}, {0x14, 0x0, 0x0, 0x1, [{0xa, 0x1, '\x19]\xcc^}!'}, {0x4}]}, {0x28, 0x0, 0x0, 0x1, [{0x7, 0x1, '(/}'}, {0xa, 0x1, 'wpan0\x00'}, {0xd, 0x1, 'mptcp_pm\x00'}]}]}, @NFC_ATTR_LLC_SDP={0x1c4, 0x13, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [{0x9, 0x1, 'syz1\x00'}, {0x7, 0x1, ':]$'}]}, {0x40, 0x0, 0x0, 0x1, [{0x8, 0x1, '[+$$'}, {0xd, 0x1, '^.@#-!)\\*'}, {0x5, 0x1, '\\'}, {0x8, 0x1, '-^@R'}, {0x11, 0x1, '802.15.4 MAC\x00'}]}, {0x18, 0x0, 0x0, 0x1, [{0x4}, {0x5, 0x1, '{'}, {0x8, 0x1, 'nbd\x00'}]}, {0x5c, 0x0, 0x0, 0x1, [{0x11, 0x1, 'NLBL_CIPSOv4\x00'}, {0x8, 0x1, ',]$-'}, {0x9, 0x1, 'syz0\x00'}, {0x4}, {0xa, 0x1, 'wpan0\x00'}, {0x11, 0x1, 'NLBL_CIPSOv4\x00'}, {0xa, 0x1, 'wpan0\x00'}]}, {0x1c, 0x0, 0x0, 0x1, [{0xb, 0x1, '\\&@:\']('}, {0xa, 0x1, '\xf3#]@{\\'}]}, {0x18, 0x0, 0x0, 0x1, [{0x11, 0x1, 'NLBL_CIPSOv4\x00'}]}, {0x28, 0x0, 0x0, 0x1, [{0x6, 0x1, '#.'}, {0xc, 0x1, '.[&@#!{%'}, {0x6, 0x1, '(\\'}, {0x8, 0x1, '}{*-'}]}, {0x4}, {0x58, 0x0, 0x0, 0x1, [{0x11, 0x1, 'NLBL_CIPSOv4\x00'}, {0x9, 0x1, 'syz0\x00'}, {0xf, 0x1, '#N}@-]\x94\xe0^#['}, {0x5, 0x1, '\\'}, {0x9, 0x1, 'syz2\x00'}, {0x5, 0x1, '\x00'}, {0x7, 0x1, '\x97[-'}]}, {0x3c, 0x0, 0x0, 0x1, [{0x5, 0x1, '\x00'}, {0x7, 0x1, ')(^'}, {0x11, 0x1, 'NLBL_CIPSOv4\x00'}, {0xa, 0x1, 'wpan0\x00'}, {0x4}, {0x4}]}]}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}]}, 0x334}, 0x1, 0x0, 0x0, 0x4008080}, 0x24000080) 6m48.157750999s ago: executing program 3 (id=5164): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x122}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb810018000000000000002000000020000a0007000000000000000000000d0a000000000000ffff00000604000093fa57583468de2100000030305f2e00"], &(0x7f0000000f40)=""/4089, 0x3f, 0xff9, 0x8}, 0x28) socketpair(0x1f, 0xa, 0x0, &(0x7f0000000000)) 6m48.016484393s ago: executing program 3 (id=5167): socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e21, 0xb, @empty, 0x205}, 0x1c) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="540000000206050000000000000000000700000005000100060000000d000300686173683a6e6574000000000900020073797a3100000000050005000200000005000400000000000c00078008001240"], 0x54}}, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000200), 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'vxcan1\x00', 0x6bf1c2d5adba8c32}) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/179, 0xb3, 0x40000062, &(0x7f0000000340)=@ethernet={0x6}, 0x80) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@setlink={0x34, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd41}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x42) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c00028008000140"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x8ab00, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_SEND(r4, 0x40489426, &(0x7f00000000c0)={{r4}, 0x0, &(0x7f0000000040), 0x2, 0x1, 0x1}) r5 = socket$alg(0x26, 0x5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) bind$alg(r5, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r6 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) r7 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000300), 0x12) sendfile(r6, r6, 0x0, 0x10001) r8 = accept4(r5, 0x0, 0x0, 0x0) recvmmsg$unix(r8, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 6m32.999345516s ago: executing program 32 (id=5167): socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e21, 0xb, @empty, 0x205}, 0x1c) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="540000000206050000000000000000000700000005000100060000000d000300686173683a6e6574000000000900020073797a3100000000050005000200000005000400000000000c00078008001240"], 0x54}}, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000200), 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'vxcan1\x00', 0x6bf1c2d5adba8c32}) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/179, 0xb3, 0x40000062, &(0x7f0000000340)=@ethernet={0x6}, 0x80) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@setlink={0x34, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd41}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x42) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c00028008000140"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x8ab00, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_SEND(r4, 0x40489426, &(0x7f00000000c0)={{r4}, 0x0, &(0x7f0000000040), 0x2, 0x1, 0x1}) r5 = socket$alg(0x26, 0x5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) bind$alg(r5, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r6 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) r7 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000300), 0x12) sendfile(r6, r6, 0x0, 0x10001) r8 = accept4(r5, 0x0, 0x0, 0x0) recvmmsg$unix(r8, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 4.669304867s ago: executing program 1 (id=8837): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'sit0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x1, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x24048840}, 0x40004) syz_genetlink_get_family_id$team(&(0x7f0000000280), 0xffffffffffffffff) socket$igmp6(0xa, 0x3, 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=ANY=[@ANYRES16=r2, @ANYRES32=0x0, @ANYBLOB="00030000000000002c0012800b00010062726964676500001c00028008000500010000000500250001000000050029000000000008000a00", @ANYRES32=r7, @ANYBLOB="5f534a67b0c007cd4666ecaa17f847a20b885dc71740ccf93ea3713f21c5aa"], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x8044) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000a80)={'syztnl0\x00', &(0x7f00000009c0)={'ip_vti0\x00', 0x0, 0x8, 0x8000, 0x2, 0x6, {{0x12, 0x4, 0x1, 0x3, 0x48, 0x65, 0x0, 0x0, 0x29, 0x0, @empty, @local, {[@lsrr={0x83, 0x17, 0x94, [@dev={0xac, 0x14, 0x14, 0xa}, @remote, @rand_addr=0x64010101, @remote, @multicast2]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x6, 0x2}, @lsrr={0x83, 0x13, 0x20, [@multicast2, @local, @dev={0xac, 0x14, 0x14, 0x38}, @broadcast]}]}}}}}) r8 = socket$nl_route(0x10, 0x3, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}], 0x1, 0x1) r9 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sh\x00', 0x1, 0x7, 0x72}, 0x2c) r10 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f00000001c0)) r11 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r11, &(0x7f0000000140)={&(0x7f0000000000)={0xa, 0x4e22, 0xfffffffb, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="280000000000000029000000040000002b0110000300000004", @ANYRES16=r11], 0x28}, 0x4004004) setsockopt$IP_VS_SO_SET_ADDDEST(r10, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e1f, 0x3, 'lc\x00', 0x4, 0x81, 0x28}, {@rand_addr=0x64010102, 0x4e26, 0x0, 0x2, 0x12d60, 0x9}}, 0x44) setsockopt$IP_VS_SO_SET_EDITDEST(r9, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'sh\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e26, 0x12002, 0x3, 0x8001, 0x1}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="54000000100003040007057007c78d9292cb0000", @ANYRES32=0x0, @ANYBLOB="00030000000000002c0012800b00010062726964676500001c00028008000500010000000500250001000000050029000000000008000a00", @ANYRES32=r12, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x8044) socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e04, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}, 0x23}, 0x1c) 3.403860048s ago: executing program 1 (id=8852): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000140)=0x40, 0x4) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x324) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r2, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) poll(&(0x7f0000000040)=[{}], 0x20000000000002d6, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b18, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000400)="d8000000180081054e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a8001600200003401c000200035c0461c1d67f", 0x43}, {&(0x7f0000000540)="8879980c666c1879782da85041d1296824f0fa0ec9432c970ad0e59485c15cd3f6c8fe0e9b6bca3589fffc8f2ed694abab2f88e4ecd8976dad48a15c9f8154792ef05a035d7af9f0bd9cf0e981190cb6a7c891047fc565132540b72605bdbf33d60f8942c5b2cf5c76913037a07ee4f74a9be51303e26691c2972d54ccb61e2e2e20d4e08f680ec11042005b2e9fa76336839e84e2", 0x95}], 0x2}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x3, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fffffff}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r10, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c98e16a6009e62476f000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r11, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000003c0)={0x30, r8, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) shutdown(r0, 0x1) sendmsg$ETHTOOL_MSG_DEBUG_SET(r7, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002000900000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2.591111156s ago: executing program 1 (id=8865): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0xc0d1}, 0x40043) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@ipv6_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x1c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf2501"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmsg(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/160, 0xa0}], 0x1}, 0x40012042) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280\x00'}, 0x58) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x27}, 0x62) listen(r3, 0x0) accept4(r3, 0x0, 0x0, 0x80800) r4 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x3, &(0x7f00000003c0)=""/89, &(0x7f0000000440)=0x59) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r5, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32, @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000000000000000000000000640000002503000000000000080026"], 0x80}}, 0x0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r4, 0xf505, 0x0) 1.534722614s ago: executing program 0 (id=8881): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, 0x0, &(0x7f0000000c80)) syz_emit_ethernet(0x86, &(0x7f0000002480)=ANY=[@ANYBLOB="aaaaaaaaaaaa1ab9000000008100000086dd60b70bff004c2f0000000000000000000000ffff7f000001ff02000000000000000000000000000100000800fcff"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = socket$packet(0x11, 0x3, 0x300) bind$packet(r3, &(0x7f0000000240)={0x11, 0xfa, 0x0, 0x1, 0x10, 0x6, @local}, 0x14) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000240)=ANY=[], 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000002b80)={r4}, 0xc) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000000)={0x7ff, 0x3a}) syz_genetlink_get_family_id$smc(&(0x7f0000000dc0), r5) 1.417525993s ago: executing program 4 (id=8884): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {}, 0xa}}, 0x26) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}}, 0x26) sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x325, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0xfffffffe) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000100000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xe, &(0x7f0000000000)=@raw=[@generic={0x0, 0x2, 0x8, 0x101, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x10}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x400}, @exit, @exit, @alu={0x4, 0x0, 0x1, 0x8, 0x5, 0x30, 0xffffffffffffffff}, @map_fd={0x18, 0x6, 0x1, 0x0, r7}, @jmp={0x5, 0x0, 0x4, 0xb, 0xa, 0xffffffffffffffff}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x4}], &(0x7f0000000580)='syzkaller\x00', 0xa, 0x5, &(0x7f0000000140)=""/5, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[r7, r7, r7, r7, 0xffffffffffffffff, r7], 0x0, 0x10, 0xfffffffe}, 0xc3) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r8, &(0x7f0000000800)=[{&(0x7f0000000840)="1db6ed74c738cb28b40c830581fcf00a2c8db5f572ec22607f90b21855ec8820c3880d023e1ef90d01c426a723a3daf81e8e1446ec90127d03310ab6b87335f5376b6123cb8848d106234481492dc42154be6f9ce1c4e1efd0771cc3a2ca5729b3d0a91bd6b2ee141c175a5df3dd1ab6094d3072f13dd9f126f3c09e28055b81b5f25e82a45f16530fecd7b8102375f2bac17cf2591223eeb22447a7704f5d4a6beba8465fab9e107d1ff5fb273a1d24252c8127c4236585d5403a075d022f6456a7080317a23cece9461e75bdac8475dd9a59536a9b6ace884345bea8832e8708ff2f", 0xe3}], 0x1) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) sendmsg$inet(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000140)="2ae2291b2f388f", 0x7}, {&(0x7f0000000280)="3cc5c48b32b27a215ed6734667e778fd5e31bd2a645c1ad3521f8bb3347afdda1150f0871a3dc29260bd8c43222471588c75a894d31eb4e0a8b9439adf553dd6c343aa6a7cb47d37bfcc1b89ff13a3e68d9ec5751948ea50e29915258db6597fa5c3ed168fe9704d5ecced81fd9dc1400a7b749d9495e6e621", 0x79}], 0xd4}, 0x24044014) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r10, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, r11, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r12}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x80) accept4$unix(r0, 0x0, 0x0, 0x0) r13 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r13, 0x1, 0x3c, &(0x7f0000000180)={0x4}, 0x8) syz_emit_ethernet(0x82, &(0x7f0000000100)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x74, 0x80, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x16, 0x4, 0x0, 0x2, 0x6, 0x67, 0x4, 0xd7, 0x6c, 0xfffc, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_prespec={0x44, 0x44, 0xe5, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0xfd, 0x0}}, {@remote, 0x1}, {@empty, 0x6d6c}, {@private=0xa010101, 0x10000004}, {@private=0xa010100, 0xffffff01}, {@loopback, 0x2}, {@loopback, 0x6}, {@empty, 0x80}]}]}}}}}}}, 0x0) 1.314518033s ago: executing program 0 (id=8885): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_netdev_private(r2, 0x89fb, &(0x7f0000000140)="3a3ab8") socket$kcm(0x2, 0x5, 0x84) (async) r3 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r3, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) sendmsg$inet(r3, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x4000080) (async) sendmsg$inet(r3, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x4000080) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_emit_ethernet(0x3a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000308004600002c0000000000019078000900020000672d000000010000000900"/58], 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) (async) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) (async) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r1, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x1, 0x20008000) (async) sendmmsg$inet(r1, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "be45f415d19a877b", "53a8e8ba641839da93589ef68e3aace9", "d6c25a50", "12b78d5d9ab7ce57"}, 0x28) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000049c0)=@newtaction={0x3ed0, 0x30, 0x871a15abc695fb3f, 0x70bd25, 0x1, {}, [{0x3ebc, 0x1, [@m_pedit={0x3e88, 0xa, 0x0, 0x0, {{0xa}, {0x3d68, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xef8, 0x4, {{{0x0, 0x8, 0x4, 0x3, 0x7fffffff}, 0x4, 0x7, [{0x1, 0xf, 0x1, 0x0, 0xffff0000, 0x35}, {0x9, 0x5, 0x59, 0x5, 0x4, 0x3c00c0}, {0x7, 0x7e0, 0x2, 0x7, 0x80000001, 0x3}, {0x6, 0x3, 0x7, 0xfca1, 0x7fffffff, 0x8}, {0x4, 0x5, 0xd, 0x88, 0x5, 0x1}, {0x6, 0x5, 0x4, 0x80000000, 0x1, 0xfe7}, {0x3, 0x8, 0x9, 0x5, 0x40, 0x6b5f}, {0xfffffffc, 0x2, 0xb2fd, 0x8, 0x9, 0x10001}, {0x8, 0x5, 0x313d, 0x82, 0xa, 0x9}]}, [{0x8001, 0x7, 0x2, 0xffff0001, 0x7, 0x5}, {0x7db5, 0x7, 0x8, 0x5, 0x3, 0x4}, {0xffffffff, 0x4, 0x4, 0x18000, 0x1}, {0x8e0000, 0x8, 0x5, 0x0, 0x9, 0x7}, {0x3, 0xfffffff8, 0x8, 0x1, 0x2, 0x7}, {0xa42, 0x4, 0x3, 0x7fffffff, 0x8, 0x9}, {0x400, 0x1, 0x2, 0x6, 0x1, 0x4}, {0x92, 0x0, 0x8001, 0x9, 0x2, 0x2}, {0x5, 0xbe6, 0xfffffffa, 0x2cd, 0xa98, 0x9}, {0x5, 0x3, 0x7, 0x2, 0x30f3, 0x8}, {0x1b, 0xf, 0xfb, 0x71782a01, 0x8, 0x3}, {0x9, 0x6, 0x7ff, 0xa2, 0x8, 0x4}, {0x0, 0x362f, 0x6, 0xfffffffa, 0x7, 0x9}, {0x4, 0x81, 0x776b7f33, 0x40, 0xbdd, 0x5}, {0x8, 0x9, 0x6, 0x4, 0x501, 0x4}, {0x4, 0x4a, 0x3, 0x8, 0x40, 0x8}, {0xcfb8, 0x25c, 0x41d9, 0xfffffff7, 0x6, 0x1000}, {0x2, 0x6, 0x1, 0x5, 0x2}, {0x5, 0x35540512, 0x3, 0x9, 0x3, 0x7f}, {0xb2, 0x4, 0x8, 0xea7, 0x101, 0x7}, {0x0, 0x2, 0x1, 0x7fffffff, 0x8}, {0x800, 0x94b, 0x5, 0x4, 0x4, 0x5}, {0x2c80, 0x2, 0x1, 0x800, 0x3, 0x80000001}, {0x0, 0x5, 0x10, 0x8c, 0xa, 0x8}, {0xff, 0x4, 0x6, 0x0, 0xffffff7f, 0x240000}, {0x8, 0x4, 0x2, 0x0, 0xb8fc, 0x1}, {0x8, 0x8, 0x80, 0x7c7, 0xfffffffb, 0x3}, {0x7f, 0x3, 0x2, 0x40, 0x4, 0xf}, {0x5, 0x9, 0x100, 0x0, 0x9, 0x80000001}, {0x101, 0xc, 0xffffffff, 0x8, 0x0, 0x9}, {0x3, 0xac7, 0x81, 0x7, 0x401, 0x3}, {0x7255, 0xb, 0x1, 0x9657, 0x3, 0x4}, {0x6, 0x2, 0x6, 0xfff, 0x7fff}, {0xfffffff3, 0xe40d, 0x8, 0x15f6, 0x0, 0x5}, {0x34af, 0x2, 0x0, 0x5, 0xfffff647, 0xf0}, {0x6, 0x9, 0x2, 0x0, 0x4800000, 0x40}, {0xff, 0x400, 0x4, 0x8, 0xffffffff, 0x7}, {0x401, 0x3, 0xffffffda, 0x8, 0xd8be, 0x2}, {0xc, 0x2, 0x9, 0x5, 0xffff, 0x80000001}, {0x6, 0x9, 0xfff, 0x2, 0xf0, 0x7f}, {0x7, 0x4, 0x3, 0x6a68, 0x401, 0x5e}, {0x9, 0x6d, 0x0, 0x8c, 0x4, 0xfff}, {0x1, 0x7f, 0xfffffffa, 0x8, 0x7, 0xad74}, {0x10000, 0x7fffffff, 0xc7, 0x800, 0x7, 0xffffffff}, {0x1, 0xfffffffc, 0x200, 0xb, 0xe, 0x7}, {0x8, 0x8, 0x9, 0x0, 0x3, 0x2}, {0x0, 0xfffff6f4, 0x2, 0x8, 0x0, 0xfffffffa}, {0x3bf95931, 0x208, 0x7, 0x8bd, 0x0, 0x743f136c}, {0x2, 0x1, 0x6dd, 0x5ed, 0x3, 0x5}, {0xfffffff8, 0x9, 0xc, 0x1, 0x7, 0x8}, {0x401, 0x8, 0x4, 0xf, 0x459, 0x8}, {0x5, 0x1, 0x7, 0x3ff3dfcf, 0xfd0b, 0x101}, {0x1, 0xa, 0x1, 0x100, 0xacbb, 0x4}, {0xffff, 0x7, 0x3, 0x11, 0x200, 0x1000}, {0x7fffffff, 0x10001, 0x1, 0x8, 0x2, 0x6}, {0x7, 0x80000001, 0x0, 0xfffffffc, 0xfff, 0x6}, {0x8, 0x3ff, 0x600, 0x6, 0x6, 0xffffffff}, {0x0, 0x5, 0xffffffc0, 0x2, 0x10001, 0x8}, {0x4, 0xdac5, 0x7ff, 0xf6, 0x4, 0x7}, {0xe9c, 0x8, 0x4, 0x0, 0x7, 0x3}, {0x5, 0x9, 0x1, 0xdb, 0x100, 0x7}, {0xce8c, 0x972, 0x3, 0x2, 0xfffffff1, 0x887a}, {0x36000, 0x3, 0xffffffff, 0x5, 0xfb2, 0x95a5}, {0x80000001, 0xfffffffb, 0xb3e, 0x7, 0x1, 0x1}, {0x3, 0x7f, 0x4, 0x1, 0xd406, 0xb4}, {0xe, 0x800, 0x0, 0xffff0001, 0x6118, 0x3}, {0xe, 0xa7cd, 0x9, 0x7, 0xc, 0x8a7}, {0x6, 0xfffffff8, 0x7, 0x2, 0x8001, 0x88}, {0x0, 0x7f, 0x40, 0xf6, 0x4, 0x1}, {0xfffffffc, 0x448, 0x5, 0xb8, 0xfffffff9, 0x3ff}, {0x8, 0x6, 0x5, 0x5, 0x973c, 0x8000}, {0x401, 0xbabb, 0x1, 0x4, 0x9, 0x9}, {0x543058cb, 0x2, 0x5, 0xe, 0x7, 0x5}, {0xe21, 0x6, 0x6, 0x1, 0x1, 0x6}, {0x3, 0x5, 0xfe0, 0x2, 0xfff, 0x9}, {0xff0667c3, 0x80000000, 0x7, 0x8000, 0x2, 0x4}, {0x2, 0x8, 0x7fff, 0x1, 0xfff, 0x7}, {0x0, 0x7, 0xfffffff8, 0x101, 0x80000000, 0xa564}, {0x1ff, 0x8, 0xfff, 0x3, 0xdeaf, 0x4}, {0x6, 0x6, 0xfcf7, 0x50000000, 0x9, 0x9}, {0x2800, 0x3, 0x7f, 0x1000, 0xb, 0x3ff}, {0x1, 0x5, 0x1000, 0x6, 0x2, 0x4}, {0x1, 0x1ff, 0x6, 0x7, 0xffffff48, 0x10001}, {0x81, 0x81, 0x2, 0x9, 0x9, 0x2}, {0xffff, 0x4, 0x8, 0x8, 0x400, 0x9}, {0x3, 0x6, 0x2c, 0x59, 0x952, 0x3}, {0x4, 0x8001, 0x9, 0x7, 0x2, 0x8}, {0x8, 0x3, 0x40, 0x3, 0x7ff, 0x2f0b}, {0x3ca69e5a, 0x6, 0x7fff, 0x65b9, 0x4, 0x1ff}, {0x9, 0x6, 0x7, 0x0, 0x3, 0x2}, {0x4, 0xd065, 0x1, 0x7, 0x4, 0x5}, {0x9, 0x6, 0x6, 0x889e, 0x57a, 0x10001}, {0x3, 0xd92, 0x9, 0xf1e3, 0x286d, 0xffff}, {0x2d4, 0x1, 0x7, 0xfffffff8, 0x6}, {0x1, 0x2, 0x400, 0x6635, 0x4, 0x2}, {0x1000, 0x0, 0x2f, 0x1, 0x76f200, 0x9}, {0x4000, 0x4, 0x0, 0x4, 0x5, 0x10000}, {0x10000, 0x6, 0xf54, 0x2, 0x7ff, 0x4}, {0x0, 0x2, 0x9, 0x40f751d7, 0x2, 0x1}, {0x6, 0x5, 0x7, 0xa, 0x0, 0xb}, {0xffffffff, 0x2, 0x20, 0x2, 0x6, 0x80}, {0x8, 0xa07, 0xe, 0x3, 0x8, 0x7}, {0x9, 0x178, 0xfffffffa, 0x0, 0x2, 0xffffffff}, {0x2, 0x5, 0x6, 0xcaa0, 0xbd, 0x7fff}, {0x9, 0x120000, 0x5, 0x1, 0x6, 0x3}, {0x5, 0x0, 0xf4000000, 0x0, 0x100, 0x8001}, {0x2, 0x200, 0x1ff, 0x1, 0x8, 0x6}, {0x3, 0x4, 0x1, 0x3, 0x0, 0x1}, {0x7, 0x8, 0x35a6, 0x3, 0x5}, {0x4, 0x6, 0x9, 0x2, 0x98, 0x2}, {0x9, 0x0, 0x10, 0xfffffe00, 0x90d, 0x8}, {0x6fd, 0x7f96, 0x8e3, 0x7, 0x5, 0x1}, {0x9, 0x6, 0x6, 0x4, 0x2, 0x3}, {0x7, 0xfff, 0x7, 0x5, 0x7f, 0xc}, {0x81, 0x80000001, 0x1, 0x3, 0x5, 0x3}, {0x3, 0x3, 0x7, 0x2, 0x9, 0xffffff4d}, {0xc, 0xd6, 0x4, 0xfffffffa, 0x6, 0x3b05}, {0x7fffffff, 0x2, 0xdfe, 0x1000, 0x40, 0x10001}, {0x6, 0x3, 0x9, 0x37b, 0x10, 0x4d0}, {0x3, 0x7f, 0x4, 0x2218b322, 0x2, 0x8}, {0x1ff, 0x0, 0x8, 0x6, 0x4, 0x5}, {0x6, 0x32, 0x0, 0xabd, 0x6, 0x5}, {0x8, 0x4, 0x8001, 0x5, 0x730e, 0x6}, {0x57f, 0x7, 0x9, 0x3ff, 0x6, 0x3}, {0x1, 0x3, 0x1ff, 0x4, 0x6, 0x6}, {0xdb76, 0x8, 0x5, 0x6, 0x7, 0x8}, {0x9, 0x7f, 0x101, 0x6, 0x80000000, 0x1}, {0x1000, 0x8, 0x67, 0x0, 0xffffffff, 0xd687}], [{0x5}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x2}, {0x1}, {0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {}, {0x3, 0x1}, {0x5, 0x1}, {0x5adc11d9f3f85c95}, {0x4}, {0x5, 0x1}, {}, {}, {0x5, 0x1}, {}, {0x4}, {0x4}, {0x2}, {0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x4}, {0x4}, {0x3}, {0x1, 0x1}, {0x9713303993c622c6}, {0x6, 0x1}, {0x5, 0x1}, {}, {0x4}, {0x4, 0x1}, {0x2}, {0x5}, {0x3}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x5}, {0x1, 0x1}, {0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {}, {0x2}, {0x4}, {0x3}, {0x4, 0x1}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x5}, {0x3}, {0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x2}, {0x0, 0x1}, {0x3}, {0x2}, {0x1}, {0x5f5c085e0affd047, 0x1}, {0x3}, {0x5}, {0x2}, {0x5}, {}, {0x5, 0x1}, {0x1}, {0x7, 0x1}, {0x1, 0x1}, {0x2}, {0x2, 0x1}, {0x4}, {0x2, 0x1}, {0x2}, {0x2}, {0x4}, {0x2564bd2fee217ebe, 0x1}, {0x2}, {0x2, 0x1}, {0x125451d56df6d0bd}, {0x1, 0x1}, {0x2, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x3, 0x1}]}}, @TCA_PEDIT_PARMS_EX={0xf10, 0x4, {{{0x80, 0x7f, 0x8, 0x8, 0x7}, 0xef, 0x10, [{0x100, 0x5, 0x8, 0x0, 0x1, 0x3}, {0x0, 0x1, 0x1, 0x80, 0x401, 0xfff}, {0x6, 0xabd9, 0xe98, 0x6, 0x5, 0x44f7}, {0x2, 0x6, 0x80000001, 0x1fd2, 0x3, 0x3}, {0x7, 0x9, 0x1, 0x2, 0xfffffffc, 0x7fffffff}, {0x8, 0x1b, 0xfffb, 0x9, 0x80000001, 0x22}, {0x3ff, 0x8, 0x10001, 0x6, 0x8, 0x2}, {0xa19, 0x2, 0x4ea, 0x5, 0x7fff, 0x4}, {0xf0, 0xe, 0xd, 0x7fff, 0x5, 0xa6}, {0x1, 0x1, 0xfffffffd, 0x3, 0x4, 0x200}]}, [{0x8, 0x400, 0x0, 0x1, 0x9, 0x7}, {0xfffffffc, 0x0, 0xfffff801, 0xe37, 0xb001, 0x1}, {0xffff, 0x7, 0x7fffffff, 0x80, 0x5, 0x1}, {0x3, 0x5, 0x80000000, 0x8, 0xfffffffa, 0x4c369a57}, {0x4, 0x5, 0xe, 0x9000000, 0xfffffffd, 0x3}, {0x6, 0x9, 0x2c, 0x9, 0x401, 0x6}, {0x6, 0x4, 0x101, 0x0, 0x3, 0x7}, {0x2, 0x991, 0x10, 0x3, 0x800, 0xc3}, {0x200, 0x8, 0x5, 0xffff, 0x3}, {0xffffffff, 0x9, 0x4, 0x8, 0x3, 0x3}, {0x7f, 0x9, 0x31, 0x0, 0xf9, 0xffff}, {0xffff, 0x7fffffff, 0x0, 0x3, 0x5, 0xb}, {0x8000, 0xa, 0x4, 0x6, 0x3, 0x7}, {0xc0000000, 0x300000, 0xd, 0xffffffff, 0x1, 0x87}, {0x203, 0xffffffc0, 0x80000000, 0x7, 0x1000, 0x5}, {0x82, 0x495e, 0x80000001, 0xe4e, 0x5, 0x3}, {0x4, 0x7, 0xb, 0x4, 0x7, 0x2}, {0x2, 0x0, 0x8, 0x2, 0x10000, 0x7}, {0x1, 0x8, 0xa62, 0x3, 0x9, 0x5}, {0x6, 0x6, 0x9, 0x0, 0x200, 0x1}, {0x2, 0xf, 0x8001, 0x2, 0x3465, 0xb706}, {0x1d15f21e, 0xffffff68, 0x3, 0x3, 0x8, 0x7}, {0xfffffffb, 0xebc3, 0x0, 0x0, 0x0, 0x2}, {0x4, 0x5, 0x3, 0xffff, 0x4, 0x3}, {0xffffffff, 0x0, 0x7, 0x6, 0x4, 0x97fc}, {0xa, 0x6, 0xfffff49e, 0x1000, 0x8000}, {0x7, 0x4, 0x6, 0xc46, 0x9, 0xffffffff}, {0x6, 0x4, 0x7fff, 0xc, 0x5eb2, 0x9}, {0x2, 0x3f73, 0xffff, 0xffffff27, 0x93, 0x6}, {0x4, 0x3, 0x40, 0xfff, 0x5601, 0x996}, {0x9, 0xfffffffa, 0xfffffffe, 0xa4, 0x0, 0x10000}, {0x1, 0xf, 0x4c, 0x7, 0x7}, {0x2, 0x7, 0x4, 0x6, 0xffffb8ee, 0x3}, {0x101, 0x7fff, 0xfffffff7, 0x80000001, 0x4, 0x80000000}, {0x10001, 0x4, 0x2, 0x8, 0x99a, 0xf0f3}, {0x401, 0x80000001, 0xfff, 0x7, 0x9, 0x9}, {0x7, 0xe36e, 0x2, 0x0, 0x3, 0xf}, {0x8, 0x46, 0xffff1382, 0xfffffffd, 0x7, 0xfffff000}, {0x8001, 0x1, 0x59d4, 0x10000, 0x80000001, 0x3}, {0x9, 0x7fffffff, 0x5, 0x800, 0x2, 0x6}, {0xffff13bf, 0x8, 0xe, 0x0, 0x709, 0x7fff}, {0xfff, 0xe7c, 0xfffffa0b, 0xa96b, 0xd575, 0x6}, {0xfffffffc, 0xb43, 0x2, 0x7, 0x5, 0x8}, {0x23, 0xc, 0x9, 0x2, 0x3e, 0x80000000}, {0x8, 0x0, 0x9, 0x3, 0x1, 0x3457}, {0x1b, 0x80, 0x9, 0x2, 0x7}, {0xcb, 0x1, 0x7, 0x1, 0x3ff, 0xffffff7f}, {0xfffffffa, 0x0, 0x1, 0x3, 0x8, 0xc301}, {0xd, 0x40, 0x5, 0x7, 0x40, 0xa0000}, {0x686e1223, 0x0, 0x9, 0x200, 0x9, 0x80}, {0x785, 0x2, 0x3ff, 0x1, 0x101, 0x497e}, {0x1a, 0x9, 0x3, 0x6, 0x3, 0x5}, {0x24, 0x1, 0x4, 0x240000, 0x7e314802, 0xfffffff4}, {0xfffffff0, 0x2, 0x1, 0xfffffffc, 0x8, 0xfff}, {0x6, 0x101, 0x2, 0x3ff, 0x6, 0x5}, {0x3, 0x4, 0x4, 0x5, 0x2}, {0xe, 0x1f4c, 0x1000, 0x57, 0x3, 0x3}, {0x7ff, 0x2, 0xa0e9b39c, 0xe, 0x80000000, 0xf}, {0x3, 0x7fffffff, 0xf, 0x0, 0x7, 0x3}, {0x797, 0x7, 0x0, 0x20004, 0xdd1, 0xb83}, {0xfffffff9, 0x0, 0x800, 0x5, 0x40, 0x2}, {0x9, 0x4, 0x75, 0x104, 0x7, 0x6}, {0x6, 0x3, 0x1, 0x3, 0x2, 0xfffffffa}, {0x7f, 0xfff, 0x6, 0x4, 0x2, 0x1}, {0x7, 0x8, 0x6, 0x4, 0x1, 0x5}, {0x4553, 0x7fffffff, 0x3, 0x4, 0x965}, {0x1, 0xff, 0xfffffffb, 0xa, 0x4, 0x6}, {0x1, 0xe8, 0x861, 0xfffffffa, 0x7, 0x400}, {0x0, 0x5, 0x6dc7, 0x6, 0xb224, 0xffff}, {0x2, 0x1, 0x8, 0xbc, 0x99, 0xa6}, {0x10000, 0x8000, 0x10001, 0x9, 0x9, 0x1}, {0x42, 0x5, 0x6c5c, 0xfff, 0xe8, 0x1000}, {0xb2c, 0x4d4f, 0xdc, 0x40, 0x1, 0x3}, {0x0, 0x2, 0x80000000, 0xffffff7f, 0x9, 0x3}, {0x3ff, 0x8, 0x8, 0x4, 0x8, 0x3}, {0x1, 0xd, 0x7, 0x54, 0x1, 0x7541}, {0x3, 0x4, 0x80000000, 0x3, 0x7f, 0x7}, {0x8, 0x6, 0x697, 0xfff, 0x2}, {0x7, 0x2, 0x60b72e14, 0x4c19, 0x5, 0x8}, {0x401, 0x0, 0x7, 0x4, 0x0, 0x6}, {0x6, 0xfffffff1, 0x800, 0x0, 0x7, 0x3}, {0x7, 0x3, 0x4, 0x0, 0x21a0000, 0x68}, {0xab6, 0x1, 0x8000, 0x2, 0x6}, {0x200, 0x1, 0xffffffff, 0x1000, 0x4, 0x3}, {0x5, 0x5, 0x9, 0xf, 0xfffffff0, 0x101}, {0x1, 0x7ff, 0xff, 0x2, 0x4a, 0x2}, {0xfffffffd, 0xc, 0xa1, 0x7fffffff, 0x88d, 0x9}, {0x4, 0x7, 0xde, 0x5, 0x2, 0xb}, {0x7, 0xaf, 0x7, 0x7, 0x5, 0x800}, {0x9, 0x9, 0x80, 0x9, 0xd2, 0x5}, {0xffff7fff, 0xffffff80, 0x5, 0x0, 0x8, 0x1}, {0x4, 0xffffffff, 0x3, 0x0, 0x1, 0x2}, {0x2, 0x8, 0x3ff, 0x5, 0x4, 0x101}, {0xa79, 0xd, 0x0, 0x4, 0x5, 0x9}, {0x3, 0x2, 0x0, 0x4, 0x1c, 0x6da4b55f}, {0x2, 0x4, 0x4, 0x3, 0x2, 0xfffffff7}, {0x81, 0x600000, 0x3, 0x3, 0xa, 0x8000}, {0x5, 0x7, 0x4, 0x8, 0x1, 0x7}, {0x9, 0x2, 0x6, 0x7, 0xfffeffff, 0x3}, {0x3, 0x1, 0x7ff, 0x8, 0x0, 0x8fd3}, {0x8, 0x8001, 0x40, 0x4ba9, 0x7}, {0x9, 0x8, 0xffffffff, 0x0, 0x9ba8, 0x6}, {0x200000, 0xf, 0x5d9f, 0x6, 0x2, 0xc}, {0x0, 0x8000, 0x7, 0x3, 0x0, 0x1}, {0x10, 0x7fffffff, 0x8, 0x0, 0xeb, 0xfffffff7}, {0x200, 0xfffff972, 0x81, 0x6, 0x8, 0x8}, {0xd, 0x5, 0x6, 0x401, 0x4, 0x7}, {0x3, 0x4, 0x2, 0x4bcdf645, 0x3da}, {0x5, 0x6, 0x9c, 0x5, 0xfffff800, 0x9}, {0x4, 0xffff, 0x6, 0x9, 0x2, 0x6}, {0x10001, 0x2, 0x10, 0x10001, 0x7, 0x9}, {0x8, 0xfffffffc, 0x4, 0x80000001, 0x0, 0xd41}, {0x9, 0x2, 0x5, 0x5, 0x6146, 0x5965}, {0x5, 0x4, 0x3, 0x3, 0x89, 0x40}, {0x3, 0x3, 0x10000, 0x1, 0x2, 0xfff}, {0x3084, 0xc, 0x8, 0x9, 0x5, 0x9}, {0xd2, 0x2, 0x5, 0x0, 0x8, 0x1ff}, {0x914, 0x5a0, 0x0, 0x1, 0x1, 0x6961c966}, {0x8, 0x7fff, 0x4000000, 0x8001, 0x8, 0x3}, {0x6dc, 0x6, 0x2, 0x401, 0x7, 0xc0e3}, {0x473, 0x9b, 0x0, 0x6, 0x800, 0x5}, {0xa5, 0x6, 0x400, 0x7, 0x6, 0x8}, {0x4, 0x2, 0x4, 0x471f4f2, 0x7fff, 0x10001}, {0x1, 0x7fffffff, 0x6, 0xd, 0x0, 0x5773}, {0xb6e, 0xe5, 0x4, 0x8, 0x4, 0x180000}, {0x3, 0x5, 0x7, 0x5, 0x6, 0x100}, {0x9, 0x8, 0xffff, 0x8, 0x9, 0xcdb2}, {0x80000001, 0xc, 0x0, 0xd28, 0x7f, 0x8}], [{0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x1, 0x1}, {0x4}, {0x2}, {0x5, 0x1}, {0x4, 0x1}, {0x6}, {0x2}, {0x4, 0x1}, {0x5}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x1}, {0x3}, {0x4}, {0x4, 0xa9219061a1a9b53}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x5}, {0x4, 0x1}, {}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {}, {0x2, 0x1}, {0x5}, {0x4, 0x1}, {0x2}, {0x4}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x2, 0x1}, {0x5}, {0x5}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x2}, {0x4}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x3}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x3}, {0x5}, {0x3}, {0x3, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x4}, {0x3, 0x1}, {0x4, 0x1}, {}, {0x2}, {0x5}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x1}, {0x5}, {0x1, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {0x1, 0x1}, {0x2, 0x1}, {0x1}, {0x3}, {0x3}, {0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}]}}, @TCA_PEDIT_PARMS={0xe98, 0x2, {{{0x2, 0x6, 0x6, 0x0, 0xcddf}, 0x2, 0x2, [{0x3, 0x7, 0x1, 0x8, 0x7, 0x39ed}, {0xa, 0x7ff, 0x4, 0x6d59, 0xffffffa1, 0x670f91a6}, {0x52d, 0x1, 0x900, 0x4, 0x4, 0x70a}, {0xc8e3, 0x6, 0x6, 0x7, 0x10, 0x9}, {0x9, 0x9, 0x7fff, 0x0, 0x4, 0x1}]}, [{0x6, 0xa, 0xf86, 0x5, 0x1, 0x9}, {0xe02, 0x1, 0x8, 0x8, 0x1, 0x4}, {0xef6, 0x9, 0xffffff00, 0x45, 0x10001, 0xa86c}, {0x80, 0x200, 0x5, 0x101, 0x9, 0x401}, {0x1ff, 0xe3db, 0x8, 0x5, 0xff, 0x7}, {0x9, 0x5, 0x80, 0xfffffffd, 0x9, 0x9}, {0x400, 0x1, 0xe68e, 0x2, 0x2, 0x7}, {0x2, 0x8000, 0xfd, 0x8, 0x10000, 0x12}, {0xbe, 0x72, 0x2, 0x7, 0x3, 0x3}, {0x6beb5b2a, 0xfffffff6, 0x7ff, 0x7, 0x2, 0x3}, {0x4, 0x4, 0x9d6, 0x2, 0x8, 0x8000}, {0x4800, 0x3, 0x5, 0xf, 0x6, 0x9}, {0x5, 0x6000000, 0x2, 0x0, 0x4, 0xb458}, {0x800, 0xa0, 0x7fff, 0x6, 0x3ff, 0xbac}, {0x2, 0x7, 0x71, 0x7, 0x3, 0x5}, {0x1000, 0x456, 0x81, 0x5, 0x0, 0x7}, {0x9, 0x56, 0x7, 0x3ff, 0x4be, 0x6}, {0xffff, 0x9, 0x693c, 0xffff2e72, 0xd0, 0xffffff20}, {0x9, 0x6, 0x80000001, 0x101, 0x5, 0x2}, {0x9, 0x7ff, 0x7, 0x4, 0xd5, 0x1442}, {0x4, 0x8, 0x81, 0x9, 0xc, 0x6}, {0xe, 0x1, 0x8, 0x2, 0xba4, 0x2}, {0x2dee, 0x10001, 0x2, 0x3, 0x7, 0x6}, {0x1000, 0x7ff, 0x158c2a5b, 0x8, 0x1}, {0x0, 0x7, 0x6c, 0x54a, 0x81}, {0x80, 0x40, 0x9e4f, 0x8, 0x1ff, 0x8}, {0x100, 0xe4, 0xf, 0x1, 0x40000000, 0x80000000}, {0x10001, 0x3, 0x9, 0xd1ccbb8, 0x40, 0x7}, {0x10001, 0x2, 0xca, 0x0, 0x3, 0x1000}, {0x1, 0x8, 0x9, 0xfffffffa, 0x0, 0xc}, {0x101, 0x7, 0xde8a, 0x9, 0x1, 0xffffffff}, {0x0, 0x6, 0xfffffffa, 0x0, 0x3, 0x1}, {0x1, 0xf, 0x8, 0x4, 0x1, 0xfffffff8}, {0x830, 0x10001, 0xa, 0x6, 0x8, 0x72f7}, {0x4, 0x9, 0x1, 0x6, 0x0, 0x6}, {0x3ff, 0x4, 0x0, 0x5, 0x8, 0x6}, {0x1c9, 0x7fff, 0x7, 0x2, 0x2}, {0x3, 0x7fffffff, 0x9, 0x6, 0x6, 0xa39}, {0x6f4929e, 0xef3a, 0x5, 0x1, 0x7, 0xda}, {0xb, 0x9, 0x5, 0xeb6, 0x6, 0x2}, {0x7ff, 0x1, 0x4, 0x5, 0x5, 0xffffff29}, {0x8, 0x1, 0x8, 0x8000, 0x8, 0xfffff39a}, {0x3de, 0x5, 0x2, 0x0, 0x68e6, 0x1}, {0x8000, 0x4, 0x3, 0xe, 0x0, 0x5}, {0x9, 0x0, 0x8, 0x0, 0x9, 0x9}, {0x9, 0x9, 0x9, 0x8, 0x4, 0x3}, {0x2, 0x400, 0x3ab9, 0x4, 0xc, 0x2}, {0x8000, 0x4, 0x9, 0x800, 0x1, 0x8001}, {0x10001, 0x6, 0x0, 0x4, 0x200, 0x8}, {0xfffffff7, 0x3, 0x2, 0xff, 0x1, 0x6}, {0x7, 0xfffffffb, 0x5, 0x6, 0xd0, 0x69b4}, {0x3, 0x5, 0x9, 0x2, 0x6, 0x4}, {0x1, 0x81, 0x4, 0x6, 0x400, 0x10001}, {0x8, 0x10001, 0x9, 0x8, 0x7ff, 0x4}, {0x8, 0x8, 0x4481, 0x5, 0x6, 0x9}, {0x5, 0xffff8000, 0x3ff, 0x1, 0x1, 0x6}, {0x10001, 0x8, 0xa9, 0x0, 0x7, 0x80}, {0x10001, 0x2, 0x7, 0x26, 0xf11b, 0x5}, {0x3, 0x9, 0x48, 0x6, 0x8, 0xd}, {0x3, 0x3, 0x7, 0x9, 0xb76, 0x9}, {0x3, 0x8000, 0x6, 0x5, 0x9, 0x9}, {0x10001, 0x6e3, 0x6eb7, 0xff, 0x0, 0x3}, {0x5, 0x100, 0x3, 0x2, 0x3, 0x80}, {0x9, 0xffffff01, 0x7, 0x8, 0xfffffffd, 0xfffffffe}, {0x6, 0x8001, 0x6fd, 0x6, 0xf5, 0x6}, {0xfffffe01, 0x4, 0x0, 0xe5e, 0x7fffffff, 0x93}, {0x5, 0x9, 0x0, 0xc00, 0xfb, 0x7}, {0x7, 0x3, 0x8, 0x4, 0x1, 0x8bb}, {0x1, 0x2, 0x6, 0x712, 0x6, 0x3ff}, {0x6, 0x7, 0x4, 0xebaa, 0x80000000, 0x9}, {0x8, 0x5, 0x1, 0x8, 0x5, 0x8}, {0x7, 0x6, 0x800, 0x3, 0x6, 0x9}, {0x200, 0x0, 0x0, 0x5, 0x3, 0xfffffffc}, {0x4, 0x5, 0xfffff001, 0x5, 0x3, 0x7}, {0x200, 0x5, 0x80, 0x5, 0x0, 0x9}, {0x3, 0xa, 0x1, 0x5, 0x8}, {0x3, 0xf, 0x0, 0x5, 0x10, 0x1}, {0x6, 0x10, 0x1, 0x6, 0x6, 0x4}, {0x9, 0x8000, 0x78, 0x14ba, 0x2, 0x3ff}, {0x2, 0x6, 0x8af, 0x0, 0x0, 0x10001}, {0xffffff49, 0x101, 0x10001, 0x1, 0x9, 0x7ff}, {0x1, 0x1000, 0x81, 0xffffffff, 0x7, 0x6}, {0x7ff, 0x3, 0x8ca4, 0x4, 0xfffffffe, 0x1000}, {0x4, 0xf, 0x9, 0xb, 0x400, 0x10}, {0xc, 0x0, 0xd2, 0x1, 0xed1, 0x7fffffff}, {0x22c3, 0x7, 0x6, 0x3, 0x4, 0x8f0}, {0x2, 0x400, 0x2, 0x9, 0x0, 0x5}, {0x6, 0x8, 0x2, 0x4, 0x3, 0x31}, {0x481a, 0x0, 0x40, 0x7, 0x9, 0x6}, {0x3, 0x7, 0x7, 0x0, 0x1, 0x7}, {0x4, 0x6, 0x8, 0x9, 0x3a91, 0x5}, {0x7, 0x6, 0x3d6, 0x7, 0x7fffffff, 0x8}, {0xaf5, 0x9, 0x2d, 0x80000000, 0x1, 0xe}, {0x0, 0x3ff, 0x400, 0x4, 0x10, 0xba}, {0x400, 0x10001, 0x94, 0x400, 0x7, 0x33fb}, {0x7fffffff, 0x8, 0x2, 0xfffffff8, 0x2}, {0xfff, 0xa703, 0xe07, 0x1, 0x4e2, 0x2}, {0x5, 0x2, 0xa9, 0xfffff4a8, 0x2, 0x1}, {0x1, 0x1000, 0xd4d, 0x2, 0x9, 0x9b}, {0xfa3c, 0x98df, 0x4, 0x0, 0x8, 0x8}, {0x0, 0x4, 0x65b, 0x5, 0x70, 0x8}, {0x6, 0x10001, 0xb, 0x4, 0x2, 0x1}, {0x2, 0xffffd949, 0x0, 0xfffffff9, 0xa846, 0x7}, {0x2, 0xfffffffd, 0xba, 0x8000, 0xfffffffe, 0x380000}, {0xfffffff8, 0x7fffffff, 0x7be3, 0x40, 0x9, 0x7}, {0xe, 0x7f, 0x8, 0xffffffff, 0x7, 0x3}, {0x2, 0x3, 0x5, 0x81, 0xe, 0x3}, {0xfc, 0x3b7, 0x7f, 0x80000001, 0x1, 0x5}, {0x3, 0x7, 0x7fffffff, 0xffffffff, 0x2, 0x9}, {0xdf2, 0xfff, 0x3, 0x358a, 0x7, 0x3c2c459a}, {0x7148, 0x8, 0xf, 0x8, 0x2d, 0x76}, {0x49, 0x0, 0x0, 0x8, 0x0, 0x4395}, {0x40, 0x1, 0x2, 0x8, 0xfffffffe, 0x1}, {0x898, 0x8, 0x4, 0x0, 0x8, 0x1}, {0x354, 0x4, 0xbe, 0x40, 0x80000001, 0x80000001}, {0x0, 0x9, 0x7, 0x0, 0xfff, 0x401}, {0x40, 0x6, 0xce5, 0x6, 0x10000, 0x837b}, {0xf6d9, 0xf60f, 0x200, 0x40, 0x78, 0x5}, {0x2, 0xffffff80, 0x100, 0x10001, 0xaa, 0x2df5}, {0x6, 0x8, 0x5, 0x4ec, 0x3, 0x401}, {0x5, 0x1, 0x1, 0x7ff, 0x1, 0x7fc0000}, {0x401, 0xfffffff9, 0xb8, 0xa, 0xa, 0x5}, {0x9, 0x1, 0xd70c, 0x5, 0x3, 0x4}, {0xd, 0x1, 0x3, 0x7fff, 0xffff, 0x2}, {0x426, 0x0, 0x2, 0xffffffff, 0x9, 0x9}, {0x92, 0x8, 0x7, 0xb, 0xe, 0x6}, {0xfffffffe, 0x3, 0x3, 0x9, 0x1, 0x6}, {0x1, 0x4, 0x8, 0x7fbf, 0xaac, 0x5d}], [{0x1, 0x1}, {0x2}, {0x4, 0x1}, {0x2}, {}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x4, 0x1}, {}, {0x5}, {0x2}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x2}, {0x6, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x5}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x7, 0x1}, {0x3}, {0x3}, {0x4, 0x1}, {}, {0x4}, {0x3, 0x1}, {0x1bbe7028a93e119a}, {0x1, 0x1}, {0x4}, {0xe}, {0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4}, {0x4}, {0x2}, {0x5, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x1}, {0x2}, {0x3}, {0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x3}, {0x5}, {0x2}, {0x3, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x4}, {0x3}, {0x5, 0x1}, {0x3}, {0x5}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {}, {0x2}, {0x5}, {0x4, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1}, {0x3}, {0x1, 0x1}, {0x3}, {0x5, 0x1}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x6}, {0x3}, {0x1, 0x1}, {0x1}, {0x2}, {0x2}, {0x2, 0x1}, {0x4, 0x7b11ede44deffc80}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x2, 0x1}, {0x3}, {0x2}, {0x4, 0x1}, {0x5, 0x896eb4d88a61ce69}, {0x2}, {0x4, 0x1}], 0x1}}, @TCA_PEDIT_KEYS_EX={0xd0, 0x5, 0x0, 0x1, [{0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0x54, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}]}, @TCA_PEDIT_KEYS_EX={0x15c, 0x5, 0x0, 0x1, [{0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x4}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x54, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}, @TCA_PEDIT_PARMS={0xe98, 0x2, {{{0x4, 0x33a, 0x4, 0x5, 0x9}, 0x4, 0x7, [{0xfff, 0x401, 0x2, 0x5, 0x80, 0x8}, {0x8, 0x7, 0x2, 0x0, 0xffff, 0x80}, {0x9, 0x4, 0x6, 0x10000, 0x12}, {0x941, 0x7fffffff, 0x2, 0x100, 0x400}, {0x9, 0x7, 0x8001, 0xfffffffc, 0x59, 0x1}]}, [{0x10000, 0xfffffc00, 0x0, 0x3, 0x26, 0x7}, {0xd, 0x100, 0xffffffff, 0xd, 0x7ff, 0x7}, {0x7, 0x46, 0x9, 0x6, 0x0, 0xea}, {0x7, 0x5, 0x0, 0x10, 0x2, 0x6}, {0x91f, 0x6d8, 0x7, 0x3, 0x3, 0x4}, {0xffffffc0, 0xc95, 0x5, 0x9a2b, 0x5, 0x3}, {0x7, 0x10000, 0x5, 0x2, 0x5d9a, 0x4}, {0xc1, 0xffff8000, 0xaf, 0x2, 0xfffffffa, 0x7}, {0x34ce, 0x30000000, 0xee6, 0xe, 0x9, 0x8}, {0x3, 0x101, 0xc, 0xe4a, 0x8, 0x80}, {0x40, 0x9, 0x0, 0x7ff, 0x3}, {0x800, 0xc3aa, 0x3, 0x5, 0x7, 0x8}, {0x0, 0x445e, 0xf7, 0xffffffd6, 0x0, 0x4}, {0x4, 0x3, 0x0, 0xfffffffe, 0xfff, 0x1}, {0x9, 0x0, 0x1, 0xc12, 0x4, 0x1}, {0x3, 0x81, 0x401, 0x9e0a, 0x401, 0x80}, {0xec37, 0x93b, 0x3, 0xc00, 0x4, 0x6}, {0x3c, 0xe6, 0xffffffff, 0x0, 0x2, 0xbaa1}, {0x680f593e, 0x4, 0x1, 0x800, 0x3, 0x7}, {0x80000000, 0x80000001, 0x656, 0x5, 0x0, 0x5}, {0x0, 0x4, 0xbf23, 0x3, 0x7, 0x3}, {0x3, 0x2ae3, 0x4, 0x2, 0x5, 0x4}, {0x3, 0x0, 0x1, 0x1, 0xb2b, 0x3}, {0x0, 0x0, 0xd, 0x9, 0x2, 0xfffffffb}, {0x50f, 0x7, 0x8e, 0x9, 0x8, 0x3}, {0x4, 0x0, 0x7fffffff, 0xf, 0xe, 0x82b}, {0x4, 0x8f30, 0x8, 0x4, 0x2, 0x1}, {0x7, 0x9, 0x8, 0xffff, 0x9, 0x4d6}, {0xff, 0xb2, 0x7, 0x80000000, 0x51e2, 0x800}, {0x6, 0x6, 0x8, 0x1, 0x1, 0x9}, {0x7f, 0x0, 0x9, 0x4, 0xb63, 0x6a}, {0x682, 0xfffffff8, 0x5, 0x2, 0x58c, 0x7}, {0x80000000, 0x7cabc3d5, 0xf, 0x2, 0x0, 0x9}, {0x101, 0xc998, 0x2, 0x9, 0x4, 0x3}, {0xffff, 0x244, 0x20, 0x1, 0x9, 0x10}, {0x1, 0x3ff, 0x0, 0x7, 0x1, 0x7ff}, {0x0, 0x23d4, 0xfffffffd, 0x8, 0x9, 0xd}, {0x7, 0x0, 0x6154cefd, 0x200, 0x4, 0x2}, {0x800, 0xfffffffc, 0x6, 0x1, 0x2, 0x7}, {0x2, 0x1, 0x1, 0x5, 0xf, 0x3}, {0x1, 0x10, 0x6, 0x2, 0x1, 0x1}, {0x7fffffff, 0x8, 0x4, 0x8, 0x2, 0x7938}, {0x8, 0x0, 0x5, 0x10001, 0x5, 0x2}, {0x3ad2, 0x7, 0x8000, 0x6, 0x0, 0x8}, {0x40, 0x1, 0x100, 0x9, 0x4, 0xfff}, {0xc, 0x8, 0x7, 0x2, 0x8001, 0x1}, {0x7, 0x1, 0x4, 0x9, 0x5, 0x4}, {0x2, 0x88, 0x7fff, 0x800, 0x51b1, 0x3ff}, {0xfff, 0x80, 0x8, 0x6, 0x8, 0x2}, {0x212, 0x352e, 0x449a, 0x9, 0xffffffff, 0x68}, {0x1, 0x14b0, 0x3, 0x5, 0x8, 0xf}, {0x3, 0x1c29, 0x10000, 0x5, 0x0, 0x3}, {0xfffffff0, 0x3, 0x5, 0xa2, 0x5b5, 0xffff}, {0x7ff, 0xe, 0x6, 0x1, 0xffff0000, 0x4}, {0x5, 0x4, 0x6, 0x3, 0x5}, {0x4, 0x1d, 0x10001, 0xb, 0x0, 0x65c0e193}, {0x8, 0x2, 0x7d, 0x200, 0x2, 0xfff}, {0x5f, 0x1, 0x2, 0x1, 0x7, 0x9}, {0x1, 0xcdf, 0x0, 0xa730, 0x8001, 0x1}, {0x8, 0xffffffff, 0x7, 0xfffffffb, 0x5, 0xa}, {0x5, 0x1800000, 0x8, 0x4, 0x8, 0xf89}, {0xc84, 0xd6, 0x9, 0x2, 0x5, 0xfff}, {0x4, 0x60, 0x56bd3aa0, 0x5, 0x3, 0xb}, {0x8, 0xffa8, 0x1000, 0x6, 0x4, 0x8}, {0x7f, 0x32, 0x5, 0x80000001, 0x64, 0xffffffff}, {0x8, 0x80, 0x65f, 0x1, 0x50, 0x4}, {0x3, 0x5, 0x3, 0xffff0001, 0x0, 0x2}, {0x6, 0x6, 0xffffffff, 0x2, 0x9, 0x2}, {0x8, 0x7, 0x5, 0x9, 0x1000, 0x1}, {0x7ff, 0x6, 0x800, 0xfffffff8, 0x4, 0x6}, {0x1ff, 0x31800000, 0x9, 0x82, 0x8, 0x6}, {0x5, 0xe, 0x2, 0x1, 0x7, 0x9}, {0xc09c, 0x6, 0x9, 0x8, 0x3, 0x9}, {0x6, 0x9, 0xffffffff, 0x2, 0x1}, {0x3, 0xfffffff7, 0x4, 0xa2a5, 0x7, 0x2}, {0x7, 0x1, 0x4be4, 0x7fff, 0x5, 0x3}, {0x7fff, 0x6ac, 0x53f6, 0xff, 0xfffffffd, 0x9}, {0x767, 0xc, 0x7, 0xffff, 0xd5, 0x4}, {0x3, 0x6, 0xe28, 0x9, 0x7781, 0x4}, {0x6, 0x2, 0x1ff, 0x1, 0x1ff, 0x8}, {0x0, 0x99fe, 0x4, 0x80000001, 0x5, 0x4}, {0x9, 0x1, 0x5, 0x2, 0xffffffff, 0x8001}, {0x52c, 0x0, 0x800, 0x0, 0x7, 0x1}, {0x3, 0x40, 0x2, 0x1f, 0x9, 0x3e6}, {0x8, 0x1, 0x7f, 0x80000000, 0xaa3, 0x400}, {0x7, 0xf9, 0x80000000, 0xcf5d, 0x6867d470, 0x1}, {0xfffeffff, 0x3, 0x4, 0xfff, 0x1000, 0x6}, {0x7, 0x6b, 0xfffffff7, 0x800, 0xc6f, 0x7fffffff}, {0x9, 0xae, 0x101, 0xc941, 0xfffffff7, 0x6}, {0x7, 0x9, 0xff, 0xe0, 0x6, 0x10000}, {0x5, 0x5, 0xd37b, 0x80000001, 0x9, 0x7}, {0x8001, 0x9, 0xc, 0x69fc, 0x80000000, 0x2}, {0x7fffffff, 0x8, 0x7, 0x6, 0x2, 0xc5d2}, {0x9ba, 0x9, 0x6, 0x3, 0x6, 0x80000001}, {0x6, 0x587, 0x3, 0x3, 0x7fffffff, 0xf}, {0x5, 0x200, 0x7, 0x9, 0x1, 0x400}, {0x2f6, 0x1, 0x10000, 0x2, 0xb, 0x9}, {0x99c, 0x4b, 0x9, 0x6, 0x6, 0x9}, {0x4, 0x6, 0xa7e, 0x8, 0x4, 0x8}, {0x10, 0xe, 0xf90, 0x0, 0x1f6, 0x6}, {0xd, 0x2, 0x0, 0x5, 0x7, 0x6}, {0x0, 0x9, 0x1, 0xc02, 0x100, 0x91}, {0xa, 0x6, 0x6, 0x2, 0x9, 0x8}, {0x1, 0x8000000, 0x6, 0x3, 0xfffffffc, 0x37fe}, {0x81, 0x8000, 0xac, 0x0, 0x10, 0x9}, {0xa, 0x8, 0x3ff, 0x7, 0x4, 0x647}, {0x0, 0xfffffffb, 0xfffffff9, 0x0, 0x0, 0x34}, {0x2, 0xffff, 0x0, 0x10001, 0x9, 0x40}, {0x6, 0x200, 0x7, 0xfffffbff, 0x2, 0x6}, {0x8001, 0x3, 0x7, 0x4, 0x2, 0x7}, {0x2, 0xed5, 0x8, 0x1ff, 0x3ff, 0x4}, {0x1, 0x0, 0xff, 0x351, 0x7, 0x4}, {0x5, 0x1, 0xa, 0x10001, 0x3, 0x9}, {0x6, 0x2, 0x2, 0xb0, 0x4, 0x17d}, {0x6, 0x1, 0x1, 0x2, 0x0, 0x40}, {0x80000001, 0x6c7, 0x5e, 0x1, 0x1}, {0xc, 0xced6, 0x9, 0x2, 0x4, 0x80}, {0x7, 0x8, 0x7, 0xfffffffa, 0x5, 0xd8}, {0x3ad, 0x3, 0x5, 0x3, 0x3, 0x5}, {0x4, 0xbe2f, 0x8, 0xa, 0x1800, 0x8}, {0x0, 0x7, 0xf1ae, 0xfffffffe, 0x6, 0x595}, {0x10000, 0x3ff, 0xfffffff8, 0xa, 0x4a3, 0xffff}, {0x0, 0x3, 0x5, 0xfffff355, 0x3cc, 0x7}, {0x8000, 0x40, 0xa3, 0x6, 0x11, 0x800}, {0xffff, 0xffff, 0x7, 0x4, 0x1, 0xf}, {0x10000000, 0x8, 0x8000, 0x8, 0x5, 0x300}, {0xffffffff, 0x9, 0xc, 0x9b, 0x9, 0x6}, {0x0, 0x2, 0x18000000, 0x401, 0x6a, 0xf6}], [{0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3}, {0x6, 0x1}, {0x43497a8c70f87f59}, {0x5}, {0x4}, {0x4, 0x1}, {}, {}, {0x1}, {0x3}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x4, 0x1}, {0x1}, {0x3}, {0x4}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x3d243c90cc9a2c16}, {0x5, 0x1}, {0x1}, {0x2}, {0x3}, {0x1, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4}, {0x3}, {0x0, 0x1}, {0x1}, {0x2}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x2}, {0x4, 0x1}, {0x4}, {0x5}, {0x3}, {0x0, 0x1}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x1}, {0x1}, {0x1}, {0x5, 0x1}, {0x1}, {0x1, 0x1}, {}, {}, {0x1, 0x1}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x7}, {0x3}, {0x3}, {0x1, 0x1}, {0x1, 0x1}, {0x3}, {0x5}, {0x4}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x6}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x0, 0x1}, {0x5, 0x1}, {0x5}, {0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {0x3}, {0x5, 0x1}], 0x1}}]}, {0xf6, 0x6, "379c6331e625a1a53fc4a6b36eef83ba63baed7d3ba8108435cec28fa49cca1022ac3515512f0399845dd2cae08ecd6f3df2b73ba68e964c079f2242fd4992a3fd224fcb6c4382a06f1aa34876259bd2da941e03c0d1545ff1af8af893e5d7600d432835c9d0c55bacfadd75a982981bb034e36525673c7ce3798854a5ca61720d5298b9464e40af26cc3b7c3eb2cd34b4c292388a680198e41cfa4b4548b91c4615e7cbeb2c5701ab831bc89d600eed3fc5017a3b92b307f63ca7d89a461f1fdf29decdc946132465bc7602c10f1ad67893f54231da028bf3b495c0950b75de0b2aae2d522b1575cd76cb9bd27cecdea055"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_vlan={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x3ed0}, 0x1, 0x0, 0x0, 0x44001}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.313667328s ago: executing program 1 (id=8886): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f00000000c0)={r0, r0, 0x206, 0x0, 0x0, 0x1, 0x72, 0x1, 0x3, 0x7, 0x0, 0x8, 'syz1\x00'}) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x4) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000000)) r3 = socket(0xa, 0x5, 0x0) listen(r3, 0x100) sendmsg$inet_sctp(r3, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="200000eaffffffffb5000000020000000100048005000000380b0000", @ANYRES32=0x0], 0x20, 0x4002804}, 0x0) socket(0x22, 0x5, 0x9) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000250019033752a5f76a80000005000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x24044004) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000e80), r4) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f0000000000)={&(0x7f00000002c0)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x8, &(0x7f0000000200)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000000080)={0x3c, 0x9, 0x5, 0x18, 0x10000}, 0x14) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYRESOCT=r0], &(0x7f0000000240)='GPL\x00', 0x4, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) unshare(0xc020680) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, 0x0, 0x0) 1.302852525s ago: executing program 4 (id=8887): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) 1.234219168s ago: executing program 4 (id=8888): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e04, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}, 0x23}, 0x1c) (async) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e04, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}, 0x23}, 0x1c) sendto$inet6(r0, 0x0, 0xfffffffffffffe0e, 0x24048898, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket(0x18, 0x0, 0x1) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x7, 0x0, 0x9, 0xff, 0x0, 0x0, 0x0, 0x3}}) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000002880)=@raw={'raw\x00', 0x3c1, 0x3, 0x318, 0x160, 0xc8, 0x8, 0x160, 0x5803, 0x270, 0x2e8, 0x2e8, 0x270, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0x138, 0x0, {0x0, 0x2000000000000}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x15, 0x2, 0x200, 0x12, 'netbios-ns\x00', 'syz1\x00', {0x6}}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x1, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x378) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xc) (async) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x40000000}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000200), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x1, 0xd}, {0x6, 0x10}, {0x7, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r6, &(0x7f00000006c0)='memory.events\x00', 0x275a, 0x0) (async) r7 = openat$cgroup_ro(r6, &(0x7f00000006c0)='memory.events\x00', 0x275a, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000100)) (async) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r8, 0x40107446, &(0x7f0000001040)={0x2, &(0x7f0000000280)=[{0x40, 0x9, 0xff, 0xff}, {0x6, 0x1, 0xf7, 0x9}]}) write(r8, &(0x7f00000004c0)='t8', 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='io.stat\x00', 0x7a05, 0x1700) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='io.stat\x00', 0x7a05, 0x1700) socket$can_bcm(0x1d, 0x2, 0x2) (async) socket$can_bcm(0x1d, 0x2, 0x2) pwritev(r9, &(0x7f0000000100)=[{&(0x7f0000000000)="8e", 0x1}], 0x1, 0x8001, 0x80) close(r7) socket$can_bcm(0x1d, 0x2, 0x2) sendfile(r9, r7, 0x0, 0xf03a0005) socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r10) 1.12284422s ago: executing program 0 (id=8889): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2802, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0x4}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x6, 0x1, 0xff84}, {0x8001, 0x9, 0x78, 0x4, 0x6}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r1) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xc0, r3, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xd9}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xf24}]}, @TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4040004}, 0x80) r4 = socket(0x1, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) bind$unix(r4, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000001680)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) recvmmsg(r4, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) r5 = socket(0x1, 0x803, 0x0) close(0x3) sendto$unix(r5, 0x0, 0x0, 0x800, &(0x7f0000000700)=@file={0x1, './file0\x00'}, 0x6e) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000440)=@xdp={0x2c, 0x7, r2, 0x1b}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000740)="82a2b747b4", 0x5}], 0x1}, 0x5) 1.074190864s ago: executing program 4 (id=8891): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000001c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x35, &(0x7f0000000640)=[{}], 0x8, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x5b, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x10, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000004f000000180100006c2500000000002020207b1af8ff00000000bf4a00000000000007010000ffffe8f7ad802e09b702000008000000b703000000000000850000"], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$sock(r3, &(0x7f0000001040)=[{{&(0x7f00000005c0)=@un=@abs={0x0, 0x0, 0x4e23}, 0x80, 0x0}}], 0x1, 0x20000800) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000004000a98000000060a0b040000000000000000020000006c00048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000c08000340000000042c0001800a0001006c696d69740000001c0002800c00014000000000000000230c00024000000000000000010900010073797a30000000000900020073797a320000000014000000110001"], 0xc0}}, 0x0) close(r4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) r6 = socket$packet(0x11, 0x2, 0x300) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r8, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) ioctl$int_in(r8, 0x5452, &(0x7f0000000000)=0x4) read$nci(r7, &(0x7f00000002c0)=""/80, 0x50) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x800000, 0x11, r6, 0x0) ioctl$sock_bt_hci(r2, 0x800448f0, &(0x7f0000000480)="adfd908cdaf027d591a6bc59b1109fc08d566afd68044f20a70a21eee43d00bcdfbf23b3a1983b29842626ce93840418d29b0d81f9f29775f6daab70276f50267b323b9b5c92646ef89bc5d9d69a21bdd9b78a2317afa31e8a21b3dd09330448df821ed43d929c8b9177c06a29ffc7926037a5c56d36bf472573171d99cd44f64a58de684b840088da4761d85f862b025e7c10392340001855cd7a8e8ee02cd62a09bb827bc29aacac6147dbace529cae30ac3d3b66fedecafa54191a59ea1dc68cd143ae0013a216abbfc64283db30be25dc9ad44bc9c703e751b") recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x84000000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x4031, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x2, &(0x7f0000000040)=0x24, 0x4) ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0x4010942a, &(0x7f0000000080)={0x0, 0x27fa5508}) setsockopt$inet_int(r5, 0x0, 0x13, &(0x7f0000000000)=0x800, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r2, 0x27, 0xe, 0x0, &(0x7f0000000100)="00f3ff00"/14, 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) 958.371035ms ago: executing program 4 (id=8893): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0xa, 0x3, 0x3a) getsockopt$MRT6(r1, 0x29, 0xd0, 0x0, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) (async) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}, 0xac}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000480)=""/77, 0x4d}, {&(0x7f0000001880)=""/4112, 0x370e}, {&(0x7f0000001680)=""/100, 0x64}, {&(0x7f0000001740)=""/72, 0x48}, {&(0x7f00000005c0)=""/48, 0x30}], 0x5}, 0xfffffffe}, {{0x0, 0x0, 0x0}, 0x8000d3a7}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0xef23fe83}, {{0x0, 0x0, 0x0}, 0x10003}, {{0x0, 0x0, 0x0}, 0xd9f}], 0x9, 0x2030, 0x0) 957.237624ms ago: executing program 1 (id=8894): ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000180)='basic\x00', 0x8000, &(0x7f0000000200)={@_ha_fsid={[0x1, 0x8e]}, {0x800, 0xff80, 0x4, 0xb}}, 0x4, &(0x7f0000000240)={@_ha_fsid}, &(0x7f00000002c0)}) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x2, 0x1}, 0x10) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000380)={0x0, r1, 0x4a0, 0x1, 0xd, 0x9}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl(0xffffffffffffffff, 0xd005, &(0x7f0000000440)="c9a2436c849c2b955191a68c932f46930a2908ff56b6b4c3251737db86f3eebfa046309c7a9e187d4b88f5d5549649a86a7a7e09601d0c69a90803f1b06917f25c98deb0164ec8d3c0a6ad97b9a93a383d0e5dd8916e2a31728b1c8a8589764195f4586c83281ec8be1dc513ab273e67f64adcab95d661e27b4f665e74aad161f919c201b46be4e4fe27ab5e69364ff03a8d2bf8b58c1b95cf97e23900d8c05e575a5004e426c8c2e9a2c5941a7bffaec56be1585ac1cfc092852b7756e0b70d2120d6844e5cfcf4d819bc") sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet6_buf(r0, 0x29, 0x23, &(0x7f0000000540)="390839edc3fab54cdefabf6f74ad5c9cc90e3b37af5e007a426451611452d047f80aa9c78c4cad40e0f9df5d7e697357ab3a0de92a6e7f542727d85b2505f55ae6fb80f0a16551b9dbe03475ca55034b3ff4", 0x52) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000002900)=r6, 0x4) bind$netlink(r5, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newlink={0x40, 0x10, 0x44b, 0x70bd28, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x54880}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xff}}]}, 0x40}}, 0x4) r8 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000400)={'geneve1\x00', &(0x7f00000003c0)=@ethtool_sset_info={0x37, 0x0, 0x80000000, [0x8, 0xff, 0x6, 0x1, 0x5, 0x6, 0x3, 0x3ff]}}) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=@newtfilter={0x6c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x55b1}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0xc0}}}]}}, @TCF_EM_CONTAINER={0x10, 0x2, 0x0, 0x0, {{0x3, 0x0, 0x8}, "a68e78"}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x403, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x12080, 0x42}, [@IFLA_LINKINFO={0xffffffffffffff0c, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6}, @IFLA_GTP_FD0={0x8}]}}}]}, 0x40}, 0x1, 0xba01}, 0x0) 889.146973ms ago: executing program 0 (id=8895): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x3e8, 0xffffffff, 0x218, 0x0, 0x218, 0xfeffffff, 0xffffffff, 0x318, 0x318, 0x318, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x8, 0x2], 0x6, 0x15, 0x2}}, @common=@dst={{0x48}, {0x2, 0x0, 0x1, [0x2, 0x376, 0x8, 0x7ff, 0x5, 0x4, 0x8, 0x7, 0x8, 0xfff8, 0x81, 0x7240, 0x7fff, 0x101, 0x0, 0x5], 0x6}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0xe9c, 0x7}}}, {{@ipv6={@empty, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff, 0x0, 0xff000000], [0x0, 0xffffff00, 0xff], 'team0\x00', 'batadv_slave_0\x00', {}, {}, 0x2e, 0x79, 0x4, 0x44}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d5, 0x4d6], 0xe, 0xab, 0x3}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x448) r1 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000480)={0x28, 0x0, 0x2710, @hyper}, 0x10, 0x0) bind$vsock_stream(r1, &(0x7f00000004c0)={0x28, 0x0, 0x0, @hyper}, 0x10) 800.677236ms ago: executing program 2 (id=8897): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f00000000c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff4, 0x0, 0x0, 0x0, 0xfffdfffd}, [@ldst={0x1, 0x3, 0x3, 0x9, 0xb, 0xffffffffffffffe0, 0xfffffffffffffff0}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xbd}, {0x85, 0x0, 0x0, 0x70}}]}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 796.003535ms ago: executing program 0 (id=8898): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000480)={0x0, {{0xa, 0x4e21, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x2000, @remote}}}, 0x108) unshare(0x20000400) unshare(0x44000000) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x6, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x1ff003, 0x81, 0x7f, 0x1}, 0x50) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000600), &(0x7f0000000700)=0x4) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x5b) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r3, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xffffffa9}, {&(0x7f00000002c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}, {0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="96e6e14d06cd2cd1dc6969313336a9017d94"}, {&(0x7f0000000400)="499b7fee4035c5b8beb1f70453870f0783c185665f5661dc54c5a1a1ad65e127a695fb29eb758e857595e5277fdfcd8246da633a7d6ed7e05fe75f4f36c670e755ca5142914fdc83650da6c01c7a06ebf495fbe36b151a4c207d9347308484a5891ad7c14310bd"}, {&(0x7f0000000640)="7caba4f81ffec1c44c4691773da226d91a54e9721f1f4c8f4d4f19a73292612c8ad72d40ac83e55148f6700815e6d140cfab03adc719caee1f3feed087bc616c3bc19a510350d0befe495457b7d16c139c6e6850f1e32a661bd7cc91e333472aae3e3eb8815a38aa8fea91788c44336c8437a86f885f3546456df377a81b43b22f543cad111ff0d0"}], 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="00000000000000001701000004000000040000000000000000000000000000001701000003000000000000000000000000000000000000001701000002000000000000008db6ba8669d9e3af336c9db7d7b600000000000067ab9dfade50263fca68064513414d4a7812c38b4c70753e9ef9f941ff7c1ebcfd79c64a594b41dd41b329d3cc14c29fa008f5c24363ad52e2bafeba6e55ac24ad2a44cbeacd365353b6541f21789daab56174ca2941b64022d67061ec8e2b1fa1eed6e9d4"], 0x0, 0x40088c0}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0xff1f}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) bpf$BPF_GET_PROG_INFO(0x3, &(0x7f0000000340)={r1, 0x0, 0x0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x9, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8, 0x0, 0xffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xc}, 0x94) 781.102147ms ago: executing program 2 (id=8899): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="b80000000001050500000000000000000a0000003c0002802c00018014000300ff02000000000000000000000000000114000400ff0200000020000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffffffffff08000740010000012400068014000400000000000000000000000000000000010c0003800640"], 0xb8}, 0x1, 0x0, 0x0, 0x8040}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1f, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="180500000000000000000000000000001800000020696c2500000000002020207b0af8ff00000000bd510000000000000701000000feffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0xde, &(0x7f0000003e40)=""/222, 0x41100, 0x73}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800900070069706970000000000c00028006000f0004000000"], 0x3c}}, 0x0) 719.998899ms ago: executing program 2 (id=8901): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r1, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x585a}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x40004) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xec, 0x0, 0x300, 0x70bd29, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6, 0x11, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0xd}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x23dccff5}, {0x6, 0x11, 0x9}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x80}, {0x6, 0x11, 0x8000}}]}, 0xec}, 0x1, 0x0, 0x0, 0x480}, 0x44) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000700)={{r0, &(0x7f0000000340)='0000:00:10.0\x00', 0x301001, &(0x7f0000000380)={@align=0xfe, {0x4, 0x2, 0x5, 0x4}}, 0x4102, &(0x7f00000003c0), &(0x7f0000000400)=0x282a4779}, 0x2, &(0x7f00000006c0)=[{0x1, 0x9, &(0x7f0000000440)='netdevsim\x00', &(0x7f0000000480)="29e33d5b127267d64673f167f95b38bfe77c34eec3c0c4da657fb0f254be4a74690de1f830a948b08e1ec0147976afe4cdc58523e0bcb9d89f7f975a3a28f0df44bee9e0320b5b06ba5ca319f3fbd104a7866bc692efdfbd5ef87dd34c6714401563f08c0bd1c2b7e68a4a855c43ae20beded8564cfb5156cb46d70492e0ee807f883f9db6ecfd9cf0a89f5d46104cdbcdf57533a59aa216d9422bedafddb577367ef04fabb9df8b4d843c195cb6a775bd214faae1806f69392ef98c0d5c7759fdaa8fd6d85a9eb888347340765864ef90a8bc2894adeaed55", 0xd9, 0x30}, {0x2, 0x7, &(0x7f0000000580)='netdevsim\x00', &(0x7f00000005c0)="7c9fc0b1e1295795490806fbb86404451a9367157151864fb70857244118b73332761f01ab31f453dd3214989ed99b7e28507efeb91c1c0709ab8321b3d5bee1bfec76914dbb2b7b847efc01fbf6358c720ae2e82cf493de01580c3e1fc85edb4d9024587e90a845939fab4d1038d67e5ed1c3e2da07c795bf4254253d890525d0312b862e51c1dbbed5c2de56ba3d1fa4eff5ccbab0b815cd3d64668d2239b70223c71f9a57b79f05de0684db770c94538c06bde50c7877e5d9da37a4b07c4046bcf344f9f06261705c7eea8ec2f42a", 0xd0, 0x20}]}) sendmsg$AUDIT_GET(r2, &(0x7f0000000840)={&(0x7f0000000780), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x10, 0x3e8, 0xa01, 0x70bd2b, 0x25dfdbfb, "", ["", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x804}, 0x4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000a80)={'gre0\x00', &(0x7f00000009c0)={'tunl0\x00', 0x0, 0x80, 0x10, 0x7, 0x4, {{0x23, 0x4, 0x3, 0x33, 0x8c, 0x64, 0x0, 0x8, 0x4, 0x0, @multicast2, @multicast2, {[@end, @timestamp_prespec={0x44, 0xc, 0x17, 0x3, 0xb, [{@loopback, 0x2d4}]}, @lsrr={0x83, 0x23, 0xf4, [@multicast1, @empty, @rand_addr=0x64010102, @private=0xa010102, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @empty]}, @noop, @generic={0x88, 0x8, "7265ddf34e7d"}, @timestamp={0x44, 0x14, 0xa1, 0x0, 0x3, [0x200, 0x5, 0x3c6b3dea, 0x6]}, @timestamp_prespec={0x44, 0xc, 0xf8, 0x3, 0x0, [{@empty, 0x8}]}, @timestamp_addr={0x44, 0x1c, 0xe2, 0x1, 0x6, [{@broadcast, 0x8}, {@loopback, 0x1}, {@multicast2, 0xbc13}]}]}}}}}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000b00)={0x2, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000880)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffc01, 0x0, 0x0, 0x0, 0x200}, [@jmp={0x5, 0x1, 0x0, 0x6, 0x6, 0xfffffffffffffff8, 0x4}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0xf1da}, @map_val={0x18, 0x8, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0xfdd8}]}, &(0x7f00000008c0)='syzkaller\x00', 0x1, 0x8a, &(0x7f0000000900)=""/138, 0x41000, 0x22, '\x00', r3, @fallback=0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000ac0)={0xecdf, 0x4}, 0x8, 0x10, 0x0, 0x0, r4, 0xffffffffffffffff, 0x0, &(0x7f0000000b40)=[r2, r2, r2], 0x0, 0x10, 0x3}, 0x94) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000c80), r0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000d80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x60, r5, 0x304, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}]}]}, 0x60}}, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000dc0), r0) socket$packet(0x11, 0x3, 0x300) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000e00)={0x0, 0x6, 0x20}, 0xc) r7 = accept4$inet6(r6, &(0x7f0000000e40)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000e80)=0x1c, 0x80000) sendmsg$sock(r7, &(0x7f0000002180)={&(0x7f0000000ec0)=@xdp={0x2c, 0xc, r3, 0x30}, 0x80, &(0x7f0000002100)=[{&(0x7f0000000f40)="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", 0x1000}, {&(0x7f0000001f40)="6bfee03aa111dfad55749f4aec1c482bcb3b12e19e7836ff431246d392650ae65774101971ca9c548779d986ba57070e645d7d6a62411fcdb298e77e6b06e81d48967ed18e3882dbbcf9cdf3bfe2fd2eb2e876690965f53bbe71a570c9f5715317f712e37ddb8541e8c8e0a846faed7b252b582e8a58ee6faf04cc8f77abdd0c", 0x80}, {&(0x7f0000001fc0)="032059aa7c85a54b0e7e99aa2bcca0f51e49f8dc35e00131d530a15ba5d908fc14d2b2d6f6222a26a9c89ec26d2334d2ecabde9bc8d53d446525892b14c157d64f2c10aba86ead3b82b1bd7aef97119e668bdd1936d6731e03ce6a06", 0x5c}, {&(0x7f0000002040)="708a2cd2760497284d5af4ec67f63e70c90f7c05a5019203451d82855fffbfa7246e71cbaeaedd94b6fd5be7c3083d52b07be7be66409d141b8b549fc6cf90e4c3ed6176a619ed2fba2b02c5b9d6165aad7ee99d5bf5d70932dc7ec7ab7398dc5b9143c9c9c0e68eb74d1afe9a972595d9dd00f68056e2582aace85c95e095bd695d543ee862845b50c0fd8716d0aa02f474354d6480fe49a31fb6966006abfb7645cad946e8a3f3bf20d1", 0xab}], 0x4, &(0x7f0000002140)}, 0x40000c0) setsockopt$TIPC_MCAST_BROADCAST(r2, 0x10f, 0x85) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002200), r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000002300)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000022c0)={&(0x7f0000002240)={0x74, r8, 0x6d9f041151b7b5f6, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x5}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x14}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xc}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x8d}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2af}]]}, 0x74}, 0x1, 0x0, 0x0, 0x4044000}, 0x48005) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000002480)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002440)={&(0x7f0000002380)={0x8c, r8, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x28}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40c6}, 0x20008000) getsockopt$inet6_mreq(r7, 0x29, 0x14, &(0x7f0000002500)={@rand_addr, 0x0}, &(0x7f0000002540)=0x14) sendmsg$nl_route_sched_retired(r2, &(0x7f0000002600)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x1807080}, 0xc, &(0x7f00000025c0)={&(0x7f0000002580)=@newqdisc={0x24, 0x24, 0x800, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x7, 0x6}, {0x3, 0x2}, {0x10, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40003}, 0x10) sendmsg$nl_route(r2, &(0x7f0000002700)={&(0x7f0000002640)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000026c0)={&(0x7f0000002680)=@bridge_setlink={0x34, 0x13, 0x0, 0x70bd2d, 0x25dfdbfb, {0x7, 0x0, 0x0, r9, 0x8008, 0x40210}, [@IFLA_BROADCAST={0xa, 0x2, @local}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x4000000) setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f0000002840)={@ll={0x11, 0x1b, r9, 0x1, 0x7}, {&(0x7f0000002740)=""/174, 0xae}, &(0x7f0000002800), 0x10}, 0xa0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000002900)={'veth1_to_batadv\x00'}) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000002940)={0x0, 0x792e, 0x5, [0x58, 0xa947, 0x7, 0xb37, 0xd]}, &(0x7f0000002980)=0x12) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000002a00)={r10, 0x30, &(0x7f00000029c0)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e22, @empty}]}, &(0x7f0000002a40)=0x10) sendmsg$nl_xfrm(r2, &(0x7f0000002bc0)={&(0x7f0000002a80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002b80)={&(0x7f0000002ac0)=@flushpolicy={0xbc, 0x1d, 0x400, 0x70bd2d, 0x25dfdbfb, "", [@policy={0xac, 0x7, {{@in6=@mcast1, @in6=@mcast2, 0x4e22, 0x2, 0x4e21, 0x0, 0x2, 0x20, 0xa0, 0x8f}, {0x37, 0x0, 0xfffffffffffffffb, 0x3, 0x7f, 0x6, 0x5, 0x10}, {0x2, 0x4, 0x6, 0x3}, 0x4545, 0x6e6bbc, 0x2, 0x1, 0x3, 0x2}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000000) ioctl$sock_inet6_tcp_SIOCINQ(r7, 0x541b, &(0x7f0000002c00)) 661.592946ms ago: executing program 5 (id=8902): r0 = socket(0x1000000000000010, 0x80802, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f00000001c0)={'ah\x00'}, &(0x7f0000000240)=0x1e) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x29}, 0x48) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000001f80)=@security={'security\x00', 0xe, 0x4, 0x360, 0xffffffff, 0x0, 0x0, 0x198, 0xffffffff, 0xffffffff, 0x310, 0x310, 0x310, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x8, 'system_u:object_r:qemu_device_t:s0\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x18, 0x8001, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) (async) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="5500000018007fd500fe01b2a4a280930a06000000a843089100fe800c00080008001100080000002d000f009b2c136ef75afb83de448daa72540d8102d2c55327c43ab82286ef1fdd20642383656d4d2449155037", 0x55}], 0x1}, 0x0) 526.981965ms ago: executing program 5 (id=8903): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x6, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0xb2b3}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @call={0x85, 0x0, 0x0, 0xad}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x9c, &(0x7f0000001300)=""/156, 0x40f00, 0x50, '\x00', 0x0, 0x0, r0}, 0x94) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f0000000040)=0x4, 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNGETFILTER(r3, 0x801054db, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x84, 0x0, 0x1, 0x201, 0x0, 0x0, {0x4, 0x0, 0x6}, [@CTA_PROTOINFO={0x10, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0xc, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x8}]}}, @CTA_LABELS_MASK={0x24, 0x17, [0x8, 0x7, 0xe, 0x8, 0x5, 0xe3, 0x1, 0x7]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x100}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x2}, @CTA_TUPLE_REPLY={0x1c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_ID={0x8}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x2d}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000800) 521.456955ms ago: executing program 1 (id=8904): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000010c0)=ANY=[@ANYBLOB="9400fa00", @ANYRES16=r1, @ANYBLOB="010000000000000000000a000000800004801300010062726f6164636173742d6c696e6b00002400078008000300000000000800030007000000080001000000000008000300050000002c000780080002000100000008000400000100000800030004000000080001001500000008000200030000006a00010073797a30000000000900010073797a3100000000"], 0x94}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x9, &(0x7f0000000240)=ANY=[@ANYBLOB="181bab8628000000000000003c790000185b000000000000000000000000000018100000", @ANYRES32, @ANYBLOB="0000000000000000098e0e0007000000a5460000f6ffffff9500000000000000"], &(0x7f00000002c0)='syzkaller\x00', 0x8, 0x4c, &(0x7f0000000600)=""/76, 0x40f00, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000006c0)={0x4, 0x6, 0x4}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000700)=[0x1, 0xffffffffffffffff], &(0x7f00000007c0)=[{0x5, 0x5, 0xc, 0x3}, {0x2, 0x1, 0x5, 0x5}, {0x2, 0x4, 0x6, 0x3}], 0x10, 0x401}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0xf1, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd4a, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x48, 0x0, 0x0, 0xffffffffffffff88, 0x0, 0x0, 0xffffffffffffffa2, 0x47, 0x0, 0xffffffffffffffab, 0x0}}, 0x10) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000004c0)={r3}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x2000000, 0xcc0, 0x0, &(0x7f0000000200)="63eced8e46dc3f13df33c9f7b986", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f00000001c0)=0x20) r6 = socket$packet(0x11, 0x2, 0x300) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x94) (async) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180002000000100000008000540efffffff0500010001"], 0x24}}, 0x0) (async) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="240000000104010100000000000500000005002300020046459a35b9941d52e57170dd00000600064000060000f6f78424796886000000"], 0x24}, 0x1, 0x0, 0x0, 0x31}, 0x20008888) (async) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r9, 0x0, 0xf3a, 0x0) (async) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r10, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) (async) bind$inet(r10, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x4, 0xe4}]}, 0x10) (async) sendto$inet(r10, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r10, &(0x7f0000002580)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000640)="80220ebd910ac0089289bf7c00bca5962c5bfb1a716ddd4cb96d929560eff333276dafb9550e", 0x26}], 0x1}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000040)="7350aa0f0648e34ae75b1ef5919f578796792e8ec84b396ec9d00237af3097d2f3838e", 0x23}], 0x1}}], 0x2, 0x4000810) setsockopt$inet_tcp_TCP_CONGESTION(r10, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) (async) sendmmsg$inet(r10, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000014c0)="cd5927a8b2a00ee8cc111509a5dcf0343c2c5b667c514bb3055b96ebda11b4c8308aef587ef82686dc7f027c402a00582f1b338d80160b21beef66b139a7061ff65ea9c6ed4de3c272fcce0b", 0x4c}], 0x1}}, {{0x0, 0x0, &(0x7f0000003d40)=[{&(0x7f0000002b00)="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", 0x2c5}], 0x1}}], 0x2, 0x42054) socket$kcm(0x2, 0xa, 0x2) (async) sendto$phonet(r8, &(0x7f00000008c0)="bced1a36e3d88e13df0cdd5a27218703f2c05786396316bae823475c8d30dddeb77d83ea735877b1b824ad2c1ccaac1207b563d3fd759e0f70f17065bce11e57d0572618c22c8a5173edf3c99796b8419b29a30542cc5cc430bfa82293a41fb423351718b583f72741e4b8007fa9ac7012d25c1023d978d77fcc13dae24ca125d612f23c2bffd6133bab8f415af404f2d5f9e1396a79892ff396f482563f53e86d7ac6d734eba06e036f75b8594697152f0e31d054e519e475294ddecf9b1a8a8b17d979", 0xc4, 0x40, &(0x7f00000009c0)={0x23, 0x9}, 0x10) 519.130408ms ago: executing program 2 (id=8905): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f0000000000)=0x1ff, 0x4) getsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f00000001c0)=""/16, &(0x7f0000000200)=0x10) (async) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0x0, &(0x7f0000000080)) (async) sendmsg$netlink(r0, &(0x7f00000001c0), 0x0) socket(0x2, 0x2, 0x8) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd42, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r2, &(0x7f0000000180)="bfc80f", &(0x7f00000000c0)=@tcp, 0x2}, 0x20) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32=0x0, @ANYBLOB="090001"], 0x38}}, 0x40000) (async) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x6, &(0x7f0000000200)={0x18, {{0x29, 0x0, 0x34000000, @private2}}}, 0x88) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 420.204357ms ago: executing program 5 (id=8906): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) (async) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) (async, rerun: 32) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) (rerun: 32) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}, @IFLA_ADDRESS={0xa, 0x1, @link_local}]}, 0x48}, 0x1, 0x0, 0x0, 0x45844}, 0x0) 365.783981ms ago: executing program 2 (id=8907): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x15763abfb6ecfa5e) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=ANY=[@ANYBLOB="000200000000000009000000cdb394498014000100020000000000000000000400003000"/52], 0x34}}, 0x0) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f00000002c0)=0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x20000880) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_lsm={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000020000000000000001000079100000000000007a00e0ff0000000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0xffffffffffffff65, 0x0, 0x0, 0x3, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20040}, 0x94) 295.914647ms ago: executing program 5 (id=8908): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000180)={0x0, 'lo\x00', {}, 0x2}) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="240000001200010000000000ffdbdf259bcd9f1930baec8bfba1cef234f4ff1c"], 0x24}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r3) getpeername$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000400)=0x14) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x48, r4, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x24}, 0x40) sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f00000001c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xe1}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x851}, 0x20000000) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffe800000000000000000000000000010ff02000000000000000000000000000189"], 0x340a) 295.092495ms ago: executing program 2 (id=8909): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@rand_addr=0x64010101, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xffff, 0x0, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x1d}, {@in6=@local, 0xfe, 0x32}, @in6=@empty, {0x0, 0x0, 0xfffffffffffffffd, 0x8, 0x1, 0xb, 0x7fffffff, 0x543}, {0x4, 0x8000000000000002}, {0x2}, 0x70bd2b, 0x3500, 0xa, 0x4, 0x0, 0x50}, [@encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e20, @in6=@dev={0xfe, 0x80, '\x00', 0x2d}}}, @algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000400)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x1c, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, {[], @mlv2_query={0x82, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4, 0x1, 0x8, 0x6}}}}}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="300000001a000100000000000000000081800000000000001000000014000200"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xd0}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x40002}, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'tunl0\x00', 0x800}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newrule={0x30, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_UID_RANGE={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040090}, 0x40000) unshare(0x6a040000) 156.799324ms ago: executing program 0 (id=8910): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_80211_join_ibss(0x0, 0x0, 0x0, 0x1) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=@can_newroute={0x14c, 0x18, 0x1, 0x70bd27, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_CS_CRC8={0x11e, 0x6, {0x7, 0x6c, 0x3, 0xfe, 0xff, "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", 0x3, "5c8dc9f00000e4ffff004d01ffffff2814edb2ea"}}, @CGW_MOD_XOR={0x15, 0x3, {{{0x3, 0x1}, 0x5, 0x1, 0x0, 0x0, "54831bdbae1d82b3"}, 0x6}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4040}, 0x4004000) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="300000003f000701feffffff00000000037c0000040042801000018004000000080002491fb57b204c8e3d608228a4c2e82bba44412b6fcd9bfdc95a0fd21c4304118f1c1b38ad3a96cd7e60dfa1f0ced680f166911dd3cfa318fc3fadf762e0fcb868e2eceef61c6219859b4fcb8d5b7b141bc55e530a2cc3c0a765a5e90e697c66c9e1cd4fe52f8c2fe7cc83cd7594abea8db36981d7154be62867d633cd0be902180000000000000000000000000000000012f03d3dc1d67f57e292ff5b17e102dfbc769762775a1a2eba491520db19973aefe4a41600d7daf56dc050ee24fac353c2422dfed8ff825f9305e2432c3fda72810e2009ba7968d86e8bea0a6c8986bd32d18af18534f22c24e871fc708737706eceb0bea673e2a833d7750277b760ff49"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="500000006a00110929bd7000fbdbdf2502000000000000000800"], 0x50}, 0x1, 0x0, 0x0, 0x4000001}, 0x20024084) (async, rerun: 32) r6 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r3) sendmsg$DEVLINK_CMD_SB_POOL_SET(r6, &(0x7f0000000740)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000500)={0x200, r7, 0x200, 0x70bd26, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0xc59}, {0x8, 0x13, 0x9}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x4c9}, {0x8, 0x13, 0x8}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1000}, {0x6, 0x11, 0x9}, {0x8, 0x13, 0x8}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4cc9}, {0x6, 0x11, 0x68c}, {0x8, 0x13, 0x309c642d}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0xe}, {0x8, 0x13, 0x3}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6c}, {0x6, 0x11, 0x6}, {0x8, 0x13, 0xffff}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7a}, {0x6, 0x11, 0x9}, {0x8, 0x13, 0x10}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x626e}, {0x8, 0x13, 0x9}, {0x5, 0x14, 0x1}}]}, 0x200}, 0x1, 0x0, 0x0, 0x4000090}, 0x20044400) (async) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x70, r4, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'virt_wifi0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6tnl0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x24000040}, 0x20044840) (async) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) (async) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)={0x20, r2, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x4}]}, 0x20}}, 0x20048010) (async) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, 0x0, 0x0) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async, rerun: 64) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r9) (async, rerun: 64) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)=0x0) (rerun: 64) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r11], 0x1c}}, 0x4008054) (async) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x14, r10, 0x100, 0x70bd29, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000c0}, 0x0) 84.198698ms ago: executing program 4 (id=8911): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r2, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f00000001c0)={r1, &(0x7f0000000040)='\x00', 0x480000, &(0x7f0000000080)={@align, {0x80, 0x4, 0x80, 0x8}}, 0x1000, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000140)=0x81}) ioctl$TUNSETVNETLE(r3, 0x400454dc, &(0x7f0000000240)=0x1) write$tun(r0, &(0x7f00000004c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x9, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x20000, {{0x0, 0x2, 0xc, 0x0, 0x0, 0x2, 0x7, 0x8}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) 82.155554ms ago: executing program 5 (id=8912): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) (async) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f00000001c0)={&(0x7f0000000100)=""/167, 0xa7, 0x4, 0xc09}) (async) r2 = socket$inet6(0xa, 0x100003, 0x2) sendto$inet6(r2, &(0x7f0000000200)="6ba06f90e18beddefb3ffbff2968919a13cc144ce31a088a1e81f4dfdea1b246405c1f071e64ba635a5d281ef5fbcecd156f7799553bb8", 0x37, 0x4, &(0x7f0000000240)={0xa, 0x4e23, 0x80, @local, 0x9}, 0x1c) (async) r3 = accept4$nfc_llcp(r0, &(0x7f0000000280), &(0x7f0000000300)=0x60, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r3, 0x118, 0x1, &(0x7f0000000340)=0x6c4, 0x4) (async) ioctl$AUTOFS_IOC_ASKUMOUNT(r3, 0x80049370, &(0x7f0000000380)) (async) ioctl$FIBMAP(r1, 0x1, &(0x7f00000003c0)=0x5) (async) r4 = socket(0x9, 0x6, 0x7fffffff) bind$vsock_stream(r4, &(0x7f0000000400)={0x28, 0x0, 0x2711, @hyper}, 0x10) (async) socket(0x11, 0x5, 0x0) (async) getsockopt$inet_buf(r4, 0x0, 0x23, &(0x7f0000000440)=""/49, &(0x7f0000000480)=0x31) (async) r5 = socket$netlink(0x10, 0x3, 0x7) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f0000000840)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000800)={&(0x7f0000000540)={0x2ac, r6, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xff4f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x44}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1ff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xf39f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x42c}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xa}]}, @TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xb14}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffff6}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0x154, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffeff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd2f0}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x64f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb91}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x75226efa}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}]}, 0x2ac}, 0x1, 0x0, 0x0, 0x8dbb5672eae5e0fd}, 0xc0000) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f00000008c0)={'sit0\x00', &(0x7f0000000880)={@mcast2, @local, 0x16, 0x3}}) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000900)={0x0, 0x9}, &(0x7f0000000940)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000980)={0x8, 0x800b, 0x7066, 0x1, r7}, &(0x7f00000009c0)=0x10) (async) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) getsockopt$sock_linger(r8, 0x1, 0xd, &(0x7f0000000a00), &(0x7f0000000a40)=0x8) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000a80)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r4, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x1d, r9}, 0x10, &(0x7f0000000b80)={&(0x7f0000000b00)={0x4, 0x301, 0x46, {0x0, 0xea60}, {0x0, 0x2710}, {0x0, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x0, 0x1}, 0x2b, 0x2, 0x0, 0x0, "b597b5088b4541a8375e5cbd0157b0893c544ac57db0e67df5ee06e16b6e96e69f866ed45273f1e614bcda3f34d6a2e7cd3b8a42a4cb44cb96fd681de8677f5c"}}, 0x80}, 0x1, 0x0, 0x0, 0x4000880}, 0xd0) (async) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r4, 0x8010661b, &(0x7f0000000c00)) (async) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000c40)=0x0) syz_open_procfs$namespace(r10, &(0x7f0000000c80)='ns/cgroup\x00') ioctl$XFS_IOC_PATH_TO_HANDLE(r4, 0xc0385869, &(0x7f0000000dc0)={r0, &(0x7f0000000cc0)=',[}\x00', 0x200, &(0x7f0000000d00)={@align=0xe22, {0x101, 0x3, 0xfff, 0x1}}, 0x3, &(0x7f0000000d40), &(0x7f0000000d80)=0x4}) sendmsg$TIPC_NL_KEY_SET(r11, &(0x7f0000001040)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001000)={&(0x7f0000000e40)={0x198, r6, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3ff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x81}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8bfc}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xd17d}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4a27483c}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA={0xf0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x490}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4800}, 0x41) 0s ago: executing program 5 (id=8913): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007", @ANYRESDEC=r0], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a800000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b70400000000000085000000c300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r2}, 0xc) r3 = socket$alg(0x26, 0x5, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f00000004c0)={r0, &(0x7f0000000280)='cbcmac(anubis)\x00', 0x101880, &(0x7f0000000380)={@_ha_fsid={[0xb, 0x38c]}, {0x3, 0x9, 0x8, 0x7fff}}, 0xd, &(0x7f0000000400), &(0x7f0000000480)=0x81}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r4, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x34, r5, 0x300, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x2a}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x11}, 0x20004000) bind$alg(r3, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(anubis)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0x401, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x31943, 0x80}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @sit={{0x8}, {0x28, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @private=0xa010101}, @IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x3}, @IFLA_IPTUN_6RD_PREFIX={0x14, 0xb, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x2004d808}, 0x2c000) r7 = accept4(r3, 0x0, 0x0, 0x80800) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x1410, 0x400, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x100}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x94}, [@call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) sendmsg$NL80211_CMD_NEW_INTERFACE(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x38, r10, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x24040894) r12 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r12) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r12, 0x84, 0x1d, &(0x7f0000002440)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0) setsockopt$packet_int(r12, 0x107, 0x14, &(0x7f0000000240)=0xffff, 0x4) sendmsg$NL80211_CMD_LEAVE_MESH(r7, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r8, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x9, 0x1f}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x200000c0}, 0x8008000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x439, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21801, 0x6536d5ef40a93735}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x8}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x1}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x410c0}, 0x4000020) kernel console output (not intermixed with test programs): ing batadv-on-batadv check for gretap2 [ 759.357871][ T3504] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7577'. [ 759.678918][ T3513] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7579'. [ 759.691048][ T3513] lo: Caught tx_queue_len zero misconfig [ 759.858170][ T3524] "syz.4.7581" (3524) uses obsolete ecb(arc4) skcipher [ 759.922040][ T3528] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 760.028888][ T3536] vlan3: entered promiscuous mode [ 760.041810][ T3536] netlink: 'syz.1.7586': attribute type 4 has an invalid length. [ 760.082532][ T3534] SET target dimension over the limit! [ 760.278362][ T3554] tipc: Enabled bearer , priority 0 [ 760.291163][ T3554] syzkaller0: entered promiscuous mode [ 760.303352][ T3554] syzkaller0: entered allmulticast mode [ 760.322511][ T3554] netlink: 'syz.2.7596': attribute type 2 has an invalid length. [ 760.330650][ T3554] netlink: 116 bytes leftover after parsing attributes in process `syz.2.7596'. [ 760.340395][ T3554] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 760.358760][ T3549] mac80211_hwsim hwsim85 syzkaller0: entered promiscuous mode [ 760.373611][ T3549] mac80211_hwsim hwsim85 syzkaller0: entered allmulticast mode [ 760.382288][ T3554] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 760.400388][ T3554] tipc: Resetting bearer [ 760.417338][ T3553] tipc: Resetting bearer [ 760.430894][ T3553] tipc: Disabling bearer [ 760.511225][ T3566] lo speed is unknown, defaulting to 1000 [ 761.192865][ T3606] netlink: 'syz.2.7611': attribute type 1 has an invalid length. [ 761.427490][ T3643] netlink: 'syz.0.7617': attribute type 23 has an invalid length. [ 761.488184][ T3648] syzkaller1: entered promiscuous mode [ 761.497344][ T3648] syzkaller1: entered allmulticast mode [ 761.509039][ T30] audit: type=1800 audit(1782125038.566:26): pid=3645 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.7615" name="memory.events" dev="tmpfs" ino=1870 res=0 errno=0 [ 761.549963][ T3651] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 762.123037][ T3680] lo speed is unknown, defaulting to 1000 [ 762.477337][ T3694] bond4 (unregistering): Released all slaves [ 762.514159][ T3712] ip6_vti0: Caught tx_queue_len zero misconfig [ 762.643850][ T3721] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20002 [ 762.719287][ T3732] xt_l2tp: v2 doesn't support IP mode [ 762.819189][ T3734] netlink: 'syz.5.7641': attribute type 1 has an invalid length. [ 762.879437][ T3734] bond9: entered promiscuous mode [ 762.884966][ T3734] 8021q: adding VLAN 0 to HW filter on device bond9 [ 762.920432][ T3739] pim6reg: entered allmulticast mode [ 762.926572][ T3736] syzkaller1: entered promiscuous mode [ 762.932165][ T3736] syzkaller1: entered allmulticast mode [ 763.259099][ T3755] kthread_run failed with err -4 [ 763.310530][ T3750] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 763.850757][ T3791] netlink: 'syz.1.7658': attribute type 26 has an invalid length. [ 763.868537][ T3791] __nla_validate_parse: 19 callbacks suppressed [ 763.868561][ T3791] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7658'. [ 764.029369][ T3805] hmac(sha2: entered promiscuous mode [ 764.330054][ T3829] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 764.349980][ T3829] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 764.503385][ T3845] netlink: 404 bytes leftover after parsing attributes in process `syz.4.7676'. [ 764.518136][ T3841] netlink: 'syz.0.7675': attribute type 7 has an invalid length. [ 764.526445][ T3841] netlink: 'syz.0.7675': attribute type 27 has an invalid length. [ 764.534473][ T3845] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7676'. [ 764.546475][ T3845] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7676'. [ 764.556401][ T3845] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7676'. [ 764.566591][ T3841] syzkaller0: left promiscuous mode [ 764.573234][ T3845] netlink: 'syz.4.7676': attribute type 2 has an invalid length. [ 764.580508][ T3841] syzkaller0: left allmulticast mode [ 764.582595][ T3845] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7676'. [ 764.587903][ T3841] tipc: Resetting bearer [ 764.669854][ T3850] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7677'. [ 764.728714][ T3855] bridge0: port 3(team0) entered blocking state [ 764.735194][ T3855] bridge0: port 3(team0) entered forwarding state [ 764.741913][ T3855] bridge0: port 2(bridge_slave_1) entered blocking state [ 764.749126][ T3855] bridge0: port 2(bridge_slave_1) entered forwarding state [ 764.756628][ T3855] bridge0: port 1(bridge_slave_0) entered blocking state [ 764.763805][ T3855] bridge0: port 1(bridge_slave_0) entered forwarding state [ 764.855827][ T5719] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 764.882328][ T3855] 8021q: adding VLAN 0 to HW filter on device bond4 [ 764.892728][ T3855] 8021q: adding VLAN 0 to HW filter on device bond6 [ 764.904910][ T3855] 8021q: adding VLAN 0 to HW filter on device bond7 [ 764.916369][ T3855] 8021q: adding VLAN 0 to HW filter on device bond8 [ 764.932693][ T3630] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 764.966901][ T3630] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 764.973544][ T3863] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7682'. [ 765.197649][ T3880] bond10: Unable to set up delay as MII monitoring is disabled [ 765.207185][ T3880] bond10 (unregistering): Released all slaves [ 765.218392][ T3890] netlink: 'syz.5.7689': attribute type 5 has an invalid length. [ 765.252232][ T3886] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7691'. [ 765.256946][ T3887] bridge0: port 3(team0) entered disabled state [ 765.267793][ T3887] bridge0: port 2(bridge_slave_1) entered disabled state [ 765.275159][ T3887] bridge0: port 1(bridge_slave_0) entered disabled state [ 765.294538][ T3887] vxcan1: left promiscuous mode [ 765.300058][ T3887] vxcan1: left allmulticast mode [ 765.384768][ T3887] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 765.424392][ T3887] bond2: left promiscuous mode [ 765.430076][ T3887] bond2: left allmulticast mode [ 765.446011][ T3887] ip6tnl2: left allmulticast mode [ 765.463789][ T3887] bridge6: left allmulticast mode [ 765.492139][ T3886] 8021q: adding VLAN 0 to HW filter on device bond10 [ 765.510674][ T8744] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 765.525766][ T8744] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.534752][ T8744] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 765.544493][ T8744] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.560337][ T8744] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 765.569581][ T8744] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.579946][ T8744] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 765.592126][ T8744] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.672983][ T3904] netlink: 'syz.2.7693': attribute type 11 has an invalid length. [ 765.688025][ T3904] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7693'. [ 765.740439][ T3910] ip6t_srh: unknown srh match flags 4000 [ 765.800949][ T3914] x_tables: ip_tables: ah match: only valid for protocol 51 [ 765.924384][ T3922] netlink: 'syz.0.7701': attribute type 61 has an invalid length. [ 765.932434][ T3922] netlink: 'syz.0.7701': attribute type 105 has an invalid length. [ 766.008974][ T3929] vlan2: entered promiscuous mode [ 766.014119][ T3929] erspan0: entered promiscuous mode [ 766.158378][ T3940] netlink: 'syz.5.7707': attribute type 1 has an invalid length. [ 766.664304][ T30] audit: type=1804 audit(1782125043.716:27): pid=3967 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.7714" name="/newroot/446/cgroup.controllers" dev="tmpfs" ino=2307 res=1 errno=0 [ 766.687330][ T30] audit: type=1800 audit(1782125043.716:28): pid=3967 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.7714" name="cgroup.controllers" dev="tmpfs" ino=2307 res=0 errno=0 [ 767.217561][ T3974] syz_tun: entered allmulticast mode [ 767.240157][ T3974] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma? [ 767.314210][ T3984] syzkaller0: entered promiscuous mode [ 767.320957][ T3984] syzkaller0: entered allmulticast mode [ 767.327257][ T3984] tipc: Resetting bearer [ 767.401045][ T3990] netlink: 'syz.1.7720': attribute type 1 has an invalid length. [ 767.472641][ T3998] ip6gre2: entered promiscuous mode [ 767.479283][ T3998] ip6gre2: entered allmulticast mode [ 767.487986][ T3622] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 767.496384][ T3622] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 767.507162][ T3998] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 767.515641][ T7319] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 768.298363][ T7319] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 768.375378][ T7319] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 771.895378][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 780.615358][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 797.729586][ T4010] netlink: 'syz.4.7728': attribute type 4 has an invalid length. [ 797.775695][ T4011] lo speed is unknown, defaulting to 1000 [ 798.067890][ T4046] syzkaller0: entered promiscuous mode [ 798.073445][ T4046] syzkaller0: entered allmulticast mode [ 798.110170][ T4049] __nla_validate_parse: 13 callbacks suppressed [ 798.110191][ T4049] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7736'. [ 798.174912][ T4055] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7737'. [ 798.238930][ T4061] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7739'. [ 798.280914][ T4063] netlink: 'syz.4.7740': attribute type 15 has an invalid length. [ 798.301246][ T4063] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7740'. [ 798.343168][ T4068] bridge_slave_0 (unregistering): left allmulticast mode [ 798.350883][ T4068] bridge_slave_0 (unregistering): left promiscuous mode [ 798.358484][ T4068] bridge0: port 1(bridge_slave_0) entered disabled state [ 798.424897][ T4071] macvtap1: entered allmulticast mode [ 798.437131][ T4071] dummy0: entered allmulticast mode [ 798.444546][ T4071] dummy0: left allmulticast mode [ 798.535974][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 798.612623][ T4012] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 798.800381][ T4103] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7751'. [ 798.808229][ T4104] syz_tun: entered allmulticast mode [ 798.830186][ T4104] lo speed is unknown, defaulting to 1000 [ 798.883368][ T4106] pimreg: entered allmulticast mode [ 798.912491][ T4100] syz_tun: left allmulticast mode [ 799.013797][ T4113] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7755'. [ 799.560213][ T4121] netlink: 'syz.5.7758': attribute type 2 has an invalid length. [ 799.581562][ T4121] netlink: 'syz.5.7758': attribute type 2 has an invalid length. [ 799.702713][ T4128] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7761'. [ 799.756935][ T4129] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7760'. [ 799.833975][ T4141] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7764'. [ 800.181046][ T4152] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7767'. [ 800.219822][ T4152] hsr_slave_1 (unregistering): left promiscuous mode [ 800.271122][ T4158] xt_TCPMSS: Only works on TCP SYN packets [ 800.281948][ T4157] syz.0.7766: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 800.298410][ T4157] CPU: 0 UID: 0 PID: 4157 Comm: syz.0.7766 Not tainted syzkaller #0 PREEMPT(full) [ 800.298446][ T4157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 800.298465][ T4157] Call Trace: [ 800.298479][ T4157] [ 800.298489][ T4157] dump_stack_lvl+0xe8/0x150 [ 800.298520][ T4157] warn_alloc+0x249/0x340 [ 800.298551][ T4157] ? __pfx_stack_trace_save+0x10/0x10 [ 800.298582][ T4157] ? __pfx_warn_alloc+0x10/0x10 [ 800.298609][ T4157] ? __resched_curr+0x23e/0x530 [ 800.298642][ T4157] ? __kasan_kmalloc+0x93/0xb0 [ 800.298669][ T4157] ? __kmalloc_cache_noprof+0x318/0x660 [ 800.298697][ T4157] ? xskq_create+0x56/0x170 [ 800.298720][ T4157] ? xsk_init_queue+0x8a/0xe0 [ 800.298742][ T4157] ? xsk_setsockopt+0x52a/0x960 [ 800.298764][ T4157] ? do_sock_setsockopt+0x17c/0x1b0 [ 800.298792][ T4157] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 800.298820][ T4157] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 800.298845][ T4157] __vmalloc_node_range_noprof+0x12c/0x1730 [ 800.298889][ T4157] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 800.298920][ T4157] ? __kasan_kmalloc+0x93/0xb0 [ 800.298952][ T4157] vmalloc_user_noprof+0xad/0xe0 [ 800.298979][ T4157] ? xskq_create+0xbf/0x170 [ 800.299004][ T4157] xskq_create+0xbf/0x170 [ 800.299030][ T4157] xsk_init_queue+0x8a/0xe0 [ 800.299056][ T4157] xsk_setsockopt+0x52a/0x960 [ 800.299080][ T4157] ? __pfx_xsk_setsockopt+0x10/0x10 [ 800.299103][ T4157] ? __pfx_aa_sk_perm+0x10/0x10 [ 800.299204][ T4157] ? lock_release+0x4b/0x3c0 [ 800.299235][ T4157] ? aa_sock_opt_perm+0xff/0x1a0 [ 800.299258][ T4157] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 800.299284][ T4157] ? __pfx_xsk_setsockopt+0x10/0x10 [ 800.299308][ T4157] do_sock_setsockopt+0x17c/0x1b0 [ 800.299339][ T4157] __x64_sys_setsockopt+0x13d/0x1b0 [ 800.299370][ T4157] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 800.299392][ T4157] do_syscall_64+0x174/0x580 [ 800.299419][ T4157] ? trace_irq_disable+0x3b/0x140 [ 800.299447][ T4157] ? clear_bhb_loop+0x40/0x90 [ 800.299470][ T4157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 800.299492][ T4157] RIP: 0033:0x7fdd7259ce59 [ 800.299513][ T4157] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 800.299531][ T4157] RSP: 002b:00007fdd734af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 800.299555][ T4157] RAX: ffffffffffffffda RBX: 00007fdd72816180 RCX: 00007fdd7259ce59 [ 800.299572][ T4157] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 800.299585][ T4157] RBP: 00007fdd72632e6f R08: 0000000000000004 R09: 0000000000000000 [ 800.299599][ T4157] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 800.299613][ T4157] R13: 00007fdd72816218 R14: 00007fdd72816180 R15: 00007fff42e99608 [ 800.299639][ T4157] [ 800.299766][ T4157] Mem-Info: [ 800.586261][ T4157] active_anon:12722 inactive_anon:0 isolated_anon:0 [ 800.586261][ T4157] active_file:2647 inactive_file:40687 isolated_file:0 [ 800.586261][ T4157] unevictable:768 dirty:145 writeback:0 [ 800.586261][ T4157] slab_reclaimable:13881 slab_unreclaimable:150169 [ 800.586261][ T4157] mapped:30580 shmem:1347 pagetables:1617 [ 800.586261][ T4157] sec_pagetables:0 bounce:0 [ 800.586261][ T4157] kernel_misc_reclaimable:0 [ 800.586261][ T4157] free:1226087 free_pcp:28099 free_cma:0 [ 800.632726][ T4157] Node 0 active_anon:50688kB inactive_anon:0kB active_file:10588kB inactive_file:162544kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:24016kB dirty:580kB writeback:0kB shmem:3652kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17760kB pagetables:6352kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 800.691075][ T4160] lo speed is unknown, defaulting to 1000 [ 800.702240][ T4157] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98304kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:116kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 800.771392][ T4157] Node 0 DMA free:15204kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:156kB local_pcp:84kB free_cma:0kB [ 800.856499][ T4157] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 800.866923][ T4157] Node 0 DMA32 free:1214528kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB free_highatomic:0KB active_anon:39288kB inactive_anon:0kB active_file:10588kB inactive_file:162544kB unevictable:1536kB writepending:580kB zspages:0kB present:3129332kB managed:2552592kB mlocked:0kB bounce:0kB free_pcp:62592kB local_pcp:29460kB free_cma:0kB [ 800.908211][ T4157] lowmem_reserve[]: 0 0 0 0 0 [ 800.913120][ T4157] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:664kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 800.964208][ T4157] lowmem_reserve[]: 0 0 0 0 0 [ 801.002895][ T4157] Node 1 Normal free:3674808kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:60944kB local_pcp:26688kB free_cma:0kB [ 801.042060][ T4157] lowmem_reserve[]: 0 0 0 0 0 [ 801.047518][ T4157] Node 0 DMA: 1*4kB (U) 2*8kB (U) 1*16kB (U) 2*32kB (U) 0*64kB 2*128kB (U) 2*256kB (U) 2*512kB (U) 3*1024kB (U) 3*2048kB (UM) 1*4096kB (U) = 15204kB [ 801.063148][ T4157] Node 0 DMA32: 8688*4kB (U) 8902*8kB (UME) 4479*16kB (UME) 1*32kB (M) 108*64kB (UME) 715*128kB (UM) 693*256kB (UM) 414*512kB (UM) 298*1024kB (UM) 119*2048kB (UM) 0*4096kB = 1214336kB [ 801.082505][ T4157] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 801.098265][ T4157] Node 1 Normal: 1*4kB (U) 10*8kB (UM) 18*16kB (UM) 4*32kB (UM) 15*64kB (UM) 8*128kB (UM) 6*256kB (UM) 8*512kB (UM) 5*1024kB (UM) 6*2048kB (U) 891*4096kB (UM) = 3675060kB [ 801.116238][ T4157] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 801.126635][ T4157] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 801.136263][ T4157] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 801.149292][ T4157] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 801.158968][ T4157] 47489 total pagecache pages [ 801.163808][ T4157] 0 pages in swap cache [ 801.168318][ T4157] Free swap = 124996kB [ 801.172619][ T4157] Total swap = 124996kB [ 801.178170][ T4157] 2097051 pages RAM [ 801.186491][ T4157] 0 pages HighMem/MovableOnly [ 801.201482][ T4157] 427122 pages reserved [ 801.206057][ T4157] 0 pages cma reserved [ 801.242123][ T4177] lo speed is unknown, defaulting to 1000 [ 801.601155][ T4216] lo speed is unknown, defaulting to 1000 [ 801.934450][ T4234] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 801.969116][ T4233] xt_CT: No such helper "snmp_trap" [ 802.325761][ T4249] erspan0: entered promiscuous mode [ 802.331474][ T4249] vlan4: entered promiscuous mode [ 802.539093][ T4273] netlink: 'syz.4.7796': attribute type 3 has an invalid length. [ 802.662136][ T4284] veth0_to_bond: default FDB implementation only supports local addresses [ 803.032571][ T4323] nbd: socks must be embedded in a SOCK_ITEM attr [ 803.254834][ T4345] tipc: Enabling of bearer rejected, already enabled [ 803.286139][ T4329] lo speed is unknown, defaulting to 1000 [ 803.292530][ T4345] sch_tbf: burst 255 is lower than device syzkaller0 mtu (313) ! [ 803.502914][ T4349] __nla_validate_parse: 11 callbacks suppressed [ 803.502933][ T4349] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7819'. [ 803.519297][ T4349] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7819'. [ 803.528587][ T4349] tipc: Invalid UDP bearer configuration [ 803.528628][ T4349] tipc: Enabling of bearer rejected, failed to enable media [ 803.845010][ T4385] tipc: Enabling of bearer rejected, already enabled [ 803.914852][ T4385] sch_tbf: burst 255 is lower than device syzkaller0 mtu (313) ! [ 803.928565][ T4389] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7827'. [ 803.943487][ T4385] ip6erspan0: mtu less than device minimum [ 803.961298][ T4389] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7827'. [ 803.983263][ T5281] 8021q: adding VLAN 0 to HW filter on device bond1 [ 804.013536][ T4389] netlink: 'syz.2.7827': attribute type 1 has an invalid length. [ 804.087433][ T4391] netlink: 152 bytes leftover after parsing attributes in process `syz.0.7828'. [ 804.186003][ T4377] nbd4: detected capacity change from 0 to 63 [ 804.221146][T26492] block nbd4: Receive control failed (result -104) [ 804.817850][ T4451] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7839'. [ 804.844986][ T4451] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7839'. [ 804.971455][ T3626] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 804.971539][ T4451] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7839'. [ 805.003435][ T3626] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 805.039687][ T3626] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 805.051796][ T4451] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7839'. [ 805.063281][ T3626] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 805.088098][ T3626] netdevsim netdevsim3 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 805.097386][ T4475] netlink: 260 bytes leftover after parsing attributes in process `syz.2.7843'. [ 806.368071][ T4580] syzkaller1: entered promiscuous mode [ 806.373862][ T4580] syzkaller1: entered allmulticast mode [ 806.464993][ T4587] tipc: Invalid UDP bearer configuration [ 806.465035][ T4587] tipc: Enabling of bearer rejected, failed to enable media [ 806.593306][ T4592] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 806.965629][ T4562] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 807.273262][ T4611] geneve2: entered promiscuous mode [ 807.278994][ T4611] geneve2: entered allmulticast mode [ 807.285899][ T3629] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20003 - 0 [ 807.298288][ T3629] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20003 - 0 [ 807.308023][ T3629] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20003 - 0 [ 807.316999][ T3629] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20003 - 0 [ 807.576510][ T4646] netlink: 'syz.0.7880': attribute type 1 has an invalid length. [ 807.602718][ T4646] 8021q: adding VLAN 0 to HW filter on device bond4 [ 807.731231][ T4660] syzkaller0: entered promiscuous mode [ 807.738444][ T4660] syzkaller0: entered allmulticast mode [ 807.751032][ T4660] syzkaller1: entered promiscuous mode [ 807.757225][ T4660] syzkaller1: entered allmulticast mode [ 807.892701][ T4671] 8021q: adding VLAN 0 to HW filter on device bond10 [ 807.984947][ T4671] 8021q: adding VLAN 0 to HW filter on device bond11 [ 807.998119][ T4671] bond10: (slave bond11): Enslaving as an active interface with an up link [ 808.061859][ T4675] bond10 (unregistering): (slave bond11): Releasing backup interface [ 808.083246][ T4675] bond10 (unregistering): Released all slaves [ 808.121029][ T4681] syzkaller0: entered promiscuous mode [ 808.134982][ T4681] syzkaller0: entered allmulticast mode [ 808.560108][ T4735] ipvlan0: mtu less than device minimum [ 808.587521][ T4738] __nla_validate_parse: 70 callbacks suppressed [ 808.587540][ T4738] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7903'. [ 808.618400][ T4738] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7903'. [ 808.629737][ T4738] syzkaller0: entered promiscuous mode [ 808.639908][ T4738] syzkaller0: entered allmulticast mode [ 808.672125][ T4743] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7904'. [ 809.424179][ T4765] netlink: 'syz.4.7912': attribute type 13 has an invalid length. [ 809.483491][ T4767] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7911'. [ 809.595703][ T4773] tipc: Resetting bearer [ 809.601517][ T4773] tipc: Resetting bearer [ 809.614650][ T4773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 809.678668][ T4773] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 809.787945][ T4784] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7917'. [ 809.801582][ T4788] netlink: 'syz.5.7919': attribute type 1 has an invalid length. [ 809.940696][ T4798] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7921'. [ 809.969592][ T4798] veth0_to_bond: entered allmulticast mode [ 809.979741][ T4798] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7921'. [ 810.021090][ T4804] netlink: 'syz.2.7923': attribute type 1 has an invalid length. [ 810.030049][ T4804] netlink: 'syz.2.7923': attribute type 11 has an invalid length. [ 810.040221][ T4804] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7923'. [ 810.258766][ T4826] block nbd5: server does not support multiple connections per device. [ 810.271316][ T4826] block nbd5: shutting down sockets [ 810.674102][ T4860] netlink: 256 bytes leftover after parsing attributes in process `syz.5.7933'. [ 810.679933][ T4862] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7934'. [ 810.736380][ T4862] 8021q: adding VLAN 0 to HW filter on device bond6 [ 810.869919][ T4865] netlink: 'syz.0.7935': attribute type 6 has an invalid length. [ 810.930300][ T4868] 8021q: adding VLAN 0 to HW filter on device bond7 [ 810.948669][ T4868] bond6: (slave bond7): Enslaving as an active interface with an up link [ 811.157232][ T4868] bond6 (unregistering): (slave bond7): Releasing backup interface [ 811.168600][ T4868] bond6 (unregistering): Released all slaves [ 811.463259][ T4910] xt_bpf: check failed: parse error [ 811.737392][ T4943] netlink: 'syz.0.7957': attribute type 3 has an invalid length. [ 811.790165][ T4929] geneve3: entered promiscuous mode [ 811.797234][ T4940] bridge_slave_1: left allmulticast mode [ 811.804523][ T4940] bridge_slave_1: left promiscuous mode [ 811.811978][ T4940] bridge0: port 2(bridge_slave_1) entered disabled state [ 811.825058][ T4940] bond0: (slave bond_slave_0): Releasing backup interface [ 811.840314][ T4940] bond0: (slave bond_slave_1): Releasing backup interface [ 811.850513][ T4940] team0: Port device team_slave_0 removed [ 811.858852][ T4940] team0: Port device team_slave_1 removed [ 811.867073][ T4940] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 811.890805][ T4938] lo speed is unknown, defaulting to 1000 [ 812.558259][ T5006] netlink: 'syz.2.7970': attribute type 11 has an invalid length. [ 812.799959][ T5017] lo speed is unknown, defaulting to 1000 [ 812.976785][ T5026] netlink: 'syz.2.7976': attribute type 13 has an invalid length. [ 813.004229][ T5026] netlink: 'syz.2.7976': attribute type 17 has an invalid length. [ 813.294938][ T5023] batman_adv: batadv0: Interface deactivated: dummy0 [ 813.455053][ T5026] 8021q: adding VLAN 0 to HW filter on device team0 [ 813.464248][ T5026] batman_adv: batadv0: Interface activated: dummy0 [ 813.473889][ T5026] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 813.514285][ T5026] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 813.525735][ T5026] 0·: left allmulticast mode [ 813.530452][ T5026] hsr_slave_0: left allmulticast mode [ 813.551159][ T5026] veth1_vlan: left promiscuous mode [ 813.558991][ T5026] veth0_vlan: left promiscuous mode [ 813.566136][ T5026] veth0_vlan: entered promiscuous mode [ 813.575902][ T5026] veth1_vlan: entered promiscuous mode [ 813.586445][ T5026] veth1_macvtap: left promiscuous mode [ 813.593231][ T5026] veth0_macvtap: left promiscuous mode [ 813.599944][ T5026] veth0_macvtap: entered promiscuous mode [ 813.613748][ T5026] veth1_macvtap: entered promiscuous mode [ 813.622178][ T5026] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 813.630565][ T5026] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 813.642459][ T5026] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 813.654576][ T5026] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 813.668942][ T5026] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 813.681917][ T5026] ip6tnl1: left allmulticast mode [ 813.688030][ T5026] 8021q: adding VLAN 0 to HW filter on device bond1 [ 813.700334][ T5026] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 813.709374][ T5026] ip6erspan0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 813.717540][ T5026] ip6erspan0: left allmulticast mode [ 813.724884][ T5026] bond2: left promiscuous mode [ 813.730097][ T5026] 8021q: adding VLAN 0 to HW filter on device bond2 [ 813.739915][ T5026] 8021q: adding VLAN 0 to HW filter on device bond3 [ 813.748688][ T5026] 8021q: adding VLAN 0 to HW filter on device bond4 [ 813.757894][ T5026] team1: left promiscuous mode [ 813.762709][ T5026] team1: left allmulticast mode [ 813.768624][ T5026] 8021q: adding VLAN 0 to HW filter on device team1 [ 813.777379][ T5026] team2: left promiscuous mode [ 813.782176][ T5026] team2: left allmulticast mode [ 813.787532][ T5026] 8021q: adding VLAN 0 to HW filter on device team2 [ 813.798826][ T5026] 8021q: adding VLAN 0 to HW filter on device bond0 [ 813.808842][ T5026] 8021q: adding VLAN 0 to HW filter on device bond5 [ 813.829889][ T5026] 8021q: adding VLAN 0 to HW filter on device bond7 [ 813.902157][ T5055] netlink: 'syz.1.7984': attribute type 13 has an invalid length. [ 813.930407][ T3622] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 813.994623][ T5055] __nla_validate_parse: 7 callbacks suppressed [ 813.994643][ T5055] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7984'. [ 814.016137][ T3630] bond5: (slave veth9): link status definitely up, 10000 Mbps full duplex [ 814.035542][ T3630] bond5: (slave veth9): making interface the new active one [ 814.064095][ T3630] bond5: active interface up! [ 814.199593][ T5074] tipc: Resetting bearer [ 814.246568][ T5352] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 814.372289][ T5088] netlink: 'syz.1.7992': attribute type 1 has an invalid length. [ 814.387587][ T5088] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7992'. [ 814.399554][ T5095] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7992'. [ 814.461031][ T5093] tipc: Enabling of bearer rejected, failed to enable media [ 814.598285][ T5112] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7998'. [ 814.635773][ T5352] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 814.648110][ T5112] ip6gre1: entered promiscuous mode [ 814.667674][ T5112] ip6gre1: entered allmulticast mode [ 814.822552][ T5126] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7999'. [ 815.106886][ T5141] validate_nla: 1 callbacks suppressed [ 815.106992][ T5141] netlink: 'syz.1.8001': attribute type 1 has an invalid length. [ 815.210330][ T5141] 8021q: adding VLAN 0 to HW filter on device bond7 [ 815.218694][ T5145] bond7: option lp_interval: invalid value (18446744073709551607) [ 815.227163][ T5145] bond7: option lp_interval: allowed values 1 - 2147483647 [ 817.531235][ T5145] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8001'. [ 817.815599][ C1] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 817.915876][ T5188] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8010'. [ 817.947860][ T5192] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8009'. [ 817.968051][ T5192] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8009'. [ 817.997613][ T5192] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8009'. [ 818.452283][ T5237] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 818.529873][ T5237] bond10: option lacp_rate: invalid value (128) [ 818.541754][ T5237] bond10 (unregistering): Released all slaves [ 818.722186][ T5253] syzkaller0: entered promiscuous mode [ 818.729471][ T5253] syzkaller0: entered allmulticast mode [ 818.946138][ T5284] netlink: 'syz.2.8029': attribute type 30 has an invalid length. [ 818.973470][ T5277] x_tables: duplicate underflow at hook 2 [ 819.121012][ T5301] __nla_validate_parse: 3 callbacks suppressed [ 819.121034][ T5301] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8031'. [ 819.214279][ T5306] netlink: 'syz.2.8033': attribute type 4 has an invalid length. [ 819.252330][ T5306] netlink: 'syz.2.8033': attribute type 4 has an invalid length. [ 819.440416][ T5317] syzkaller1: entered promiscuous mode [ 819.456891][ T5317] syzkaller1: entered allmulticast mode [ 819.652974][ T5330] tipc: Resetting bearer [ 819.674193][ T5330] netlink: 224 bytes leftover after parsing attributes in process `syz.0.8041'. [ 819.695429][ T5352] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 819.788255][ T5332] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input12 [ 819.985238][ T5345] ip6erspan2: entered allmulticast mode [ 820.017339][ T5350] netlink: 'syz.2.8048': attribute type 21 has an invalid length. [ 820.025966][ T5350] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8048'. [ 820.084563][ T5350] lo speed is unknown, defaulting to 1000 [ 820.189261][ T5363] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8050'. [ 820.341030][ T5363] batman_adv: batadv0: Interface deactivated: dummy0 [ 820.695461][ T24] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 821.000175][ T139] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 821.013055][ T139] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 821.047368][ T5388] vlan2: entered allmulticast mode [ 821.065930][ T5388] bond0: entered allmulticast mode [ 821.079089][ T5388] bond_slave_0: entered allmulticast mode [ 821.103830][ T5388] bond_slave_1: entered allmulticast mode [ 821.122890][ T5398] netlink: 'syz.0.8055': attribute type 10 has an invalid length. [ 821.152901][ T139] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 821.165898][ T5398] netlink: 228 bytes leftover after parsing attributes in process `syz.0.8055'. [ 821.185779][ T139] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 821.198389][ T5399] netlink: 'syz.0.8055': attribute type 10 has an invalid length. [ 821.209699][ T139] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 821.230560][ T5407] sctp: [Deprecated]: syz.2.8056 (pid 5407) Use of int in max_burst socket option. [ 821.230560][ T5407] Use struct sctp_assoc_value instead [ 821.235300][ T139] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 821.254269][ T5399] netlink: 228 bytes leftover after parsing attributes in process `syz.0.8055'. [ 821.298049][ T139] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 821.332758][ T139] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 821.453988][ T5421] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8058'. [ 821.551884][ T5428] syzkaller1: entered promiscuous mode [ 821.557692][ T5428] syzkaller1: entered allmulticast mode [ 821.566500][ T5428] netlink: 'syz.0.8061': attribute type 39 has an invalid length. [ 821.612230][ T5432] lo speed is unknown, defaulting to 1000 [ 821.792002][ T5444] lo: Caught tx_queue_len zero misconfig [ 821.797848][ T5444] netlink: 'syz.4.8064': attribute type 14 has an invalid length. [ 821.811868][ T5442] mac80211_hwsim hwsim85 syzkaller0: left promiscuous mode [ 821.830221][ T5442] mac80211_hwsim hwsim85 syzkaller0: left allmulticast mode [ 821.868059][ T5442] tc action pedit unable to extract header offset for header type (0x4) [ 822.066793][ T5462] macsec1: entered promiscuous mode [ 822.089439][ T5462] mac80211_hwsim hwsim97 wlan1: entered promiscuous mode [ 822.237640][ T5462] mac80211_hwsim hwsim97 wlan1: left promiscuous mode [ 822.735722][ T5523] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8082'. [ 822.920531][ T139] nci: nci_ntf_packet: unknown ntf opcode 0x227 [ 823.038602][ T5557] netlink: 'syz.2.8088': attribute type 2 has an invalid length. [ 823.128012][ T5559] bond8 (unregistering): Released all slaves [ 823.352368][ T5576] netlink: 'syz.0.8093': attribute type 1 has an invalid length. [ 823.386657][ T5576] bond5: entered promiscuous mode [ 823.392113][ T5576] 8021q: adding VLAN 0 to HW filter on device bond5 [ 823.474388][ T5580] netlink: 'syz.1.8094': attribute type 4 has an invalid length. [ 823.488489][ T5580] netlink: 'syz.1.8094': attribute type 4 has an invalid length. [ 823.667148][ T5538] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 823.803073][ T5589] team0: Mode changed to "broadcast" [ 823.891771][ T5595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 823.901309][ T5594] netlink: 67 bytes leftover after parsing attributes in process `syz.4.8099'. [ 823.916081][ T5595] 8021q: adding VLAN 0 to HW filter on device team0 [ 823.925683][ T5600] netlink: 'syz.2.8097': attribute type 1 has an invalid length. [ 823.991951][ T5607] Set syz1 is full, maxelem 65536 reached [ 824.118800][ T5595] veth1_vlan: left promiscuous mode [ 824.125713][ T5595] veth0_vlan: left promiscuous mode [ 824.131732][ T5595] veth0_vlan: entered promiscuous mode [ 824.141928][ T5595] veth1_vlan: entered promiscuous mode [ 824.150994][ T5595] veth1_macvtap: left promiscuous mode [ 824.160462][ T5595] veth0_macvtap: left promiscuous mode [ 824.167435][ T5595] veth0_macvtap: entered promiscuous mode [ 824.174168][ T5595] veth1_macvtap: entered promiscuous mode [ 824.184258][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 824.192621][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 824.201150][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 824.209426][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 824.228224][ T5595] 8021q: adding VLAN 0 to HW filter on device bond1 [ 824.241755][ T5595] 8021q: adding VLAN 0 to HW filter on device bond2 [ 824.250840][ T5595] 8021q: adding VLAN 0 to HW filter on device bond3 [ 824.268469][ T5595] 8021q: adding VLAN 0 to HW filter on device bond4 [ 824.277347][ T5595] 8021q: adding VLAN 0 to HW filter on device bond5 [ 824.286068][ T5595] 8021q: adding VLAN 0 to HW filter on device bond6 [ 824.296924][ T5595] 8021q: adding VLAN 0 to HW filter on device bond7 [ 824.304713][ T5595] 8021q: adding VLAN 0 to HW filter on device bond8 [ 824.314309][ T5595] 8021q: adding VLAN 0 to HW filter on device bond9 [ 824.325992][ T5595] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 824.339016][ T5616] SET target dimension over the limit! [ 824.464324][ T3626] bridge0: port 1(bridge_slave_0) entered blocking state [ 824.471605][ T3626] bridge0: port 1(bridge_slave_0) entered forwarding state [ 824.496391][ T3626] bridge0: port 2(bridge_slave_1) entered blocking state [ 824.503571][ T3626] bridge0: port 2(bridge_slave_1) entered forwarding state [ 824.575304][ T3630] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 824.583894][ T5625] sctp: [Deprecated]: syz.0.8104 (pid 5625) Use of int in max_burst socket option. [ 824.583894][ T5625] Use struct sctp_assoc_value instead [ 824.598727][ T3630] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.598786][ T3630] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 824.598814][ T3630] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.598846][ T3630] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 824.598873][ T3630] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.598905][ T3630] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 824.598931][ T3630] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.678388][ T5626] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8103'. [ 824.729790][ T5623] RDS: rds_bind could not find a transport for fe88::105, load rds_tcp or rds_rdma? [ 824.861287][ T139] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 824.869807][ T139] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 824.884624][ T3626] bridge0: port 3(team0) entered blocking state [ 824.891086][ T3626] bridge0: port 3(team0) entered forwarding state [ 824.896572][ T9] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 824.947770][ T139] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 824.964146][ T139] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 824.978514][ T5751] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 824.992071][ T139] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 825.000682][ T139] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 825.016224][ T5742] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 825.073506][ T5742] ip6_tunnel: ip6erspan2 xmit: Local address not yet configured! [ 825.137941][ T5650] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8111'. [ 825.160356][ T5646] netlink: 'syz.0.8110': attribute type 1 has an invalid length. [ 825.227392][ T5655] netlink: 820 bytes leftover after parsing attributes in process `syz.5.8112'. [ 825.241894][ T5655] netlink: 820 bytes leftover after parsing attributes in process `syz.5.8112'. [ 825.559013][ T5681] netdevsim netdevsim4 netdevsim0: refused to change device tx_queue_len [ 825.578174][ T5692] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8120'. [ 825.601813][ T5692] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8120'. [ 825.627993][ T5681] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8120'. [ 825.651433][ T5681] netlink: 212004 bytes leftover after parsing attributes in process `syz.4.8120'. [ 825.880674][ T5729] netlink: 'syz.4.8130': attribute type 11 has an invalid length. [ 825.918386][ T5744] x_tables: duplicate underflow at hook 1 [ 825.971419][ T5729] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 825.993799][ T5729] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 826.017887][ T5750] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 826.024124][ T5750] syzkaller1: linktype set to 773 [ 826.054530][ T5729] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 826.071622][ T5729] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 826.151493][ T5729] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 826.162269][ T5729] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 826.183729][ T5762] validate_nla: 3 callbacks suppressed [ 826.183750][ T5762] netlink: 'syz.5.8135': attribute type 1 has an invalid length. [ 826.215009][ T5762] bond10: entered promiscuous mode [ 826.221590][ T5762] 8021q: adding VLAN 0 to HW filter on device bond10 [ 826.232222][ T5767] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 826.256685][ T5729] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 826.284393][ T5762] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8135'. [ 826.293751][ T5729] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 826.336549][ T5771] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8136'. [ 826.395689][ T5764] lo speed is unknown, defaulting to 1000 [ 826.494240][ T5787] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 826.780914][ T3626] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 826.789398][ T3626] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.805825][ T3630] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 826.814258][ T3630] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.830990][ T139] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 826.839427][ T139] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.853801][ T139] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 826.862530][ T139] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 827.164490][ T5773] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 827.212761][ T5813] tipc: Enabling of bearer rejected, failed to enable media [ 827.350321][ T5822] tipc: Enabling of bearer rejected, already enabled [ 827.366161][ T5822] mac80211_hwsim hwsim85 syzkaller0: entered promiscuous mode [ 827.381873][ T5822] mac80211_hwsim hwsim85 syzkaller0: entered allmulticast mode [ 827.419694][ T5834] netlink: 'syz.2.8154': attribute type 2 has an invalid length. [ 827.676101][ T5848] bond12: option ad_user_port_key: invalid value (65533) [ 827.689574][ T5848] bond12: option ad_user_port_key: allowed values 0 - 1023 [ 827.711346][ T5848] bond12 (unregistering): Released all slaves [ 827.731294][ T5860] erspan0: entered promiscuous mode [ 828.324537][ T5894] syzkaller1: entered promiscuous mode [ 828.330242][ T5894] syzkaller1: entered allmulticast mode [ 829.005802][ T5898] Unsupported ieee802154 address type: 0 [ 829.066960][ T5910] openvswitch: netlink: Flow key attribute not present in set flow. [ 829.075922][ T5909] openvswitch: netlink: Flow key attribute not present in set flow. [ 829.417917][ T5937] netlink: 'syz.4.8184': attribute type 4 has an invalid length. [ 829.466884][ T5930] syzkaller0: entered promiscuous mode [ 829.472538][ T5930] syzkaller0: entered allmulticast mode [ 829.678717][ T5967] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 829.872758][ T5983] ip6t_REJECT: ECHOREPLY is not supported [ 829.899120][ T5985] tunl0: Caught tx_queue_len zero misconfig [ 829.911554][ T5988] __nla_validate_parse: 56 callbacks suppressed [ 829.911574][ T5988] netlink: 84 bytes leftover after parsing attributes in process `syz.0.8195'. [ 829.929436][ T5989] ip6tnl0: Caught tx_queue_len zero misconfig [ 830.051568][ T5971] syzkaller1: entered promiscuous mode [ 830.064134][ T5971] syzkaller1: entered allmulticast mode [ 830.087627][ T5998] x_tables: duplicate underflow at hook 2 [ 830.152852][ T6006] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.8200'. [ 830.260803][ T6014] bridge54: entered promiscuous mode [ 830.274698][ T6014] bridge54: entered allmulticast mode [ 830.303165][ T6014] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8202'. [ 830.386828][ T5924] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8172'. [ 830.407327][ T6020] tipc: Enabled bearer , priority 0 [ 830.429225][ T6020] syzkaller0: entered promiscuous mode [ 830.440661][ T6020] syzkaller0: entered allmulticast mode [ 830.454137][ T6022] netlink: 'syz.4.8206': attribute type 10 has an invalid length. [ 830.469731][ T6020] tipc: Resetting bearer [ 830.475879][ T6022] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8206'. [ 830.487714][ T6019] tipc: Resetting bearer [ 830.498908][ T6019] tipc: Disabling bearer [ 830.518263][ T6022] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8206'. [ 830.623528][ T6036] openvswitch: netlink: Message has 4 unknown bytes. [ 830.631280][ T6036] netlink: 48 bytes leftover after parsing attributes in process `syz.5.8210'. [ 830.697881][ T6044] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 830.711746][ T6043] netlink: 92 bytes leftover after parsing attributes in process `syz.5.8212'. [ 830.775238][ C1] ip6_tnl_xmit_ctl: 13 callbacks suppressed [ 830.775258][ C1] ip6_tunnel: ip6erspan2 xmit: Local address not yet configured! [ 830.877586][ T6061] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 830.894281][ T6063] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8215'. [ 830.985484][ T6057] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 831.036898][ T6069] netlink: 56 bytes leftover after parsing attributes in process `syz.2.8219'. [ 831.503795][ T6092] netlink: 'syz.0.8227': attribute type 7 has an invalid length. [ 831.512014][ T6089] netlink: 'syz.2.8226': attribute type 1 has an invalid length. [ 831.514085][ T6090] netlink: 'syz.2.8226': attribute type 1 has an invalid length. [ 831.552842][ T6089] 8021q: adding VLAN 0 to HW filter on device bond8 [ 831.572894][ T6089] bond8: (slave veth1): Enslaving as a backup interface with a down link [ 831.583143][ T6095] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 831.637355][ T6098] netlink: 'syz.2.8229': attribute type 1 has an invalid length. [ 831.873153][ T6114] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 831.998426][ T6120] syzkaller1: entered promiscuous mode [ 832.009825][ T6120] syzkaller1: entered allmulticast mode [ 832.128707][ T6124] block nbd0: NBD_DISCONNECT [ 832.138465][ T6124] block nbd0: Send disconnect failed -32 [ 832.154661][ T6124] block nbd0: shutting down sockets [ 832.241289][ T3626] team0: left promiscuous mode [ 832.247305][ T3626] bond6: left promiscuous mode [ 832.252899][ T3626] bridge0: port 1(team0) entered disabled state [ 832.297953][ T3626] dummy0: left allmulticast mode [ 832.305043][ T3626] pimreg9: left allmulticast mode [ 832.568617][ T3626] bond5 (unregistering): (slave ip6gretap1): Releasing active interface [ 832.616633][ T3626] bond13 (unregistering): (slave erspan0): Releasing active interface [ 832.646253][ T3626] bond3 (unregistering): (slave gretap2): Releasing active interface [ 832.654469][ T3626] bridge5 (unregistering): entered promiscuous mode [ 832.708710][ T3626] bond4 (unregistering): (slave geneve2): Releasing active interface [ 832.764992][ T3626] bond2 (unregistering): (slave bridge3): Releasing backup interface [ 832.790402][ T3626] bond3 (unregistering): (slave bridge5): Releasing active interface [ 832.799047][ T3626] bridge5 (unregistering): left promiscuous mode [ 832.848490][ T3626] bond0 (unregistering): Released all slaves [ 832.861128][ T3626] bond1 (unregistering): Released all slaves [ 832.874213][ T3626] bond2 (unregistering): Released all slaves [ 832.898782][ T3626] bond3 (unregistering): Released all slaves [ 832.911323][ T3626] bond4 (unregistering): Released all slaves [ 832.927276][ T3626] bond5 (unregistering): Released all slaves [ 832.943635][ T3626] team0: Port device bond6 removed [ 832.960695][ T3626] bond6 (unregistering): Released all slaves [ 832.973268][ T3626] bond7 (unregistering): Released all slaves [ 832.985988][ T3626] bond8 (unregistering): Released all slaves [ 832.999555][ T3626] bond9 (unregistering): Released all slaves [ 833.012128][ T3626] bond10 (unregistering): Released all slaves [ 833.035473][ T3626] bond11 (unregistering): Released all slaves [ 833.047993][ T3626] bond12 (unregistering): Released all slaves [ 833.060420][ T3626] bond13 (unregistering): Released all slaves [ 833.081145][ T3626] bond14 (unregistering): (slave bond15): Releasing backup interface [ 833.090835][ T3626] bond14 (unregistering): Released all slaves [ 833.097261][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 833.112451][ T3626] bond15 (unregistering): Released all slaves [ 833.282974][ T3626] tipc: Disabling bearer [ 833.291738][ T3626] tipc: Disabling bearer [ 833.298279][ T3626] tipc: Left network mode [ 833.317499][ T3626] IPVS: stopping master sync thread 19099 ... [ 833.323917][ T3626] IPVS: stopping backup sync thread 22115 ... [ 833.532949][ T6161] ip6gre1: left promiscuous mode [ 833.538641][ T6161] ip6gre1: left allmulticast mode [ 834.230046][ T3626] hsr_slave_0: left promiscuous mode [ 834.240734][ T3626] veth1_macvtap: left promiscuous mode [ 834.247089][ T3626] veth0_macvtap: left promiscuous mode [ 834.252830][ T3626] veth1_vlan: left promiscuous mode [ 834.258551][ T3626] veth0_vlan: left promiscuous mode [ 834.377169][ T1749] block nbd4: Possible stuck request ffff888027b61880: control (read@0,1024B). Runtime 30 seconds [ 834.388083][ T1749] block nbd4: Possible stuck request ffff888027b61a40: control (read@1024,1024B). Runtime 30 seconds [ 834.399409][ T1749] block nbd4: Possible stuck request ffff888027b61c00: control (read@2048,1024B). Runtime 30 seconds [ 834.410485][ T1749] block nbd4: Possible stuck request ffff888027b61dc0: control (read@3072,1024B). Runtime 30 seconds [ 834.690035][ T7330] lo speed is unknown, defaulting to 1000 [ 834.696877][T21238] smbdirect: ib_dev[syz2] removed [ 834.702343][ T7330] syz2: Port: 1 Link DOWN [ 834.952188][ T3626] IPVS: stop unused estimator thread 0... [ 835.036933][ T6219] __nla_validate_parse: 80 callbacks suppressed [ 835.036954][ T6219] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8267'. [ 835.112973][ T6219] 8021q: adding VLAN 0 to HW filter on device bond12 [ 835.145600][ T6220] gretap1: entered allmulticast mode [ 835.154706][ T6220] bond12: (slave gretap1): Enslaving as an active interface with an up link [ 835.280169][ T6230] openvswitch: netlink: Missing valid actions attribute. [ 835.287696][ T6230] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 835.306174][ T6230] lo speed is unknown, defaulting to 1000 [ 835.325008][ T6230] lo speed is unknown, defaulting to 1000 [ 835.356008][ T6230] lo speed is unknown, defaulting to 1000 [ 835.437554][ T6235] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8271'. [ 835.533704][ T6230] infiniband syz0: set active [ 835.538683][ T6230] infiniband syz0: added lo [ 835.551930][ T6230] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 835.568042][ T6230] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 835.585810][ T6230] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 835.611206][ T6230] RDS/IB: syz0: added [ 835.620586][ T6230] smc: adding ib device syz0 with port count 1 [ 835.627388][ T6230] smc: ib device syz0 port 1 has no pnetid [ 835.639585][ T5751] lo speed is unknown, defaulting to 1000 [ 835.645663][ T5742] lo speed is unknown, defaulting to 1000 [ 835.651620][ T6230] lo speed is unknown, defaulting to 1000 [ 835.776372][ T6243] pim6reg: left allmulticast mode [ 835.879421][ T6244] lo speed is unknown, defaulting to 1000 [ 835.911416][ T6245] xt_CT: No such helper "syz0" [ 836.013173][ T6230] lo speed is unknown, defaulting to 1000 [ 836.149721][ T6252] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8274'. [ 836.183141][ T6252] vlan0: entered allmulticast mode [ 836.195273][ T6252] macvtap0: entered allmulticast mode [ 836.243722][ T6230] lo speed is unknown, defaulting to 1000 [ 836.295230][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 836.370363][ T6230] lo speed is unknown, defaulting to 1000 [ 836.501061][ T6230] lo speed is unknown, defaulting to 1000 [ 836.650170][ T6230] lo speed is unknown, defaulting to 1000 [ 836.722071][ T6271] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8277'. [ 836.769468][ T6230] lo speed is unknown, defaulting to 1000 [ 836.839001][ T6276] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8281'. [ 836.926234][ T6230] lo speed is unknown, defaulting to 1000 [ 836.935837][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 837.070537][ T6251] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 837.087246][ T6282] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20004 [ 837.203261][ T6292] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8285'. [ 837.243022][ T6292] Bluetooth: MGMT ver 1.23 [ 837.355731][ T6304] netlink: 'syz.0.8288': attribute type 21 has an invalid length. [ 837.363687][ T6304] netlink: 128 bytes leftover after parsing attributes in process `syz.0.8288'. [ 837.373022][ T6304] netlink: 'syz.0.8288': attribute type 4 has an invalid length. [ 837.381241][ T6304] netlink: 3 bytes leftover after parsing attributes in process `syz.0.8288'. [ 837.430051][ T6306] netlink: 72 bytes leftover after parsing attributes in process `syz.5.8289'. [ 837.463836][ T6311] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8292'. [ 837.563728][ T6321] netlink: 'syz.1.8290': attribute type 14 has an invalid length. [ 837.619096][ T6324] bridge0: port 3(team0) entered disabled state [ 837.625785][ T6324] bridge0: port 2(bridge_slave_1) entered disabled state [ 837.633094][ T6324] bridge0: port 1(bridge_slave_0) entered disabled state [ 837.644400][ T6332] sctp: [Deprecated]: syz.4.8296 (pid 6332) Use of int in max_burst socket option. [ 837.644400][ T6332] Use struct sctp_assoc_value instead [ 837.908526][ T6324] ip6erspan2: left allmulticast mode [ 837.917502][ T6324] vlan2: left allmulticast mode [ 837.922464][ T6324] bond0: left allmulticast mode [ 837.927571][ T6324] bond_slave_0: left allmulticast mode [ 837.933108][ T6324] bond_slave_1: left allmulticast mode [ 837.941544][ T6324] bridge54: left promiscuous mode [ 837.946765][ T6324] bridge54: left allmulticast mode [ 837.961767][T21238] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 837.990441][T21238] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.015110][T21238] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 838.023599][T21238] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.044438][T21238] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 838.059940][T21238] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.082523][T21238] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 838.097733][T21238] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.143822][ T6348] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 838.173725][ T6348] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 838.183136][ T6348] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 838.198149][ T6352] bridge8: entered allmulticast mode [ 838.288584][ T6361] netlink: 'syz.5.8305': attribute type 1 has an invalid length. [ 838.359775][ T6363] bond13: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 838.372331][ T6363] bond13 (unregistering): Released all slaves [ 838.392023][ T6321] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 838.475695][ T6367] netlink: 'syz.5.8307': attribute type 3 has an invalid length. [ 838.483863][ T6368] netlink: 'syz.5.8307': attribute type 3 has an invalid length. [ 838.968475][ T6401] sctp: [Deprecated]: syz.2.8319 (pid 6401) Use of int in max_burst socket option. [ 838.968475][ T6401] Use struct sctp_assoc_value instead [ 839.123096][ T6410] lo speed is unknown, defaulting to 1000 [ 839.320011][ T6427] tipc: Resetting bearer [ 839.328859][ T6427] A link change request failed with some changes committed already. Interface bond4 may have been left with an inconsistent configuration, please check. [ 839.349544][ T6427] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 839.365612][ T808] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 839.905262][ T808] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 839.978443][ T6468] openvswitch: netlink: Unexpected mask (mask=4400040, allowed=410048) [ 840.150046][ T6474] __nla_validate_parse: 14 callbacks suppressed [ 840.150068][ T6474] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8343'. [ 840.278789][ T6481] hmac(sha224: entered promiscuous mode [ 840.521685][ T6502] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8350'. [ 840.984548][ T6543] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8355'. [ 841.280533][ T6556] IPVS: Scheduler module ip_vs_sip not found [ 841.321642][ T6552] gtp0: entered allmulticast mode [ 841.338481][ T6563] x_tables: duplicate underflow at hook 3 [ 841.454150][ T6570] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8367'. [ 841.464255][ T6570] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8367'. [ 841.548911][ T6571] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8365'. [ 841.772050][ T6582] bond8 (unregistering): Released all slaves [ 842.082722][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 842.091524][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 842.099175][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 842.109385][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 842.117527][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 842.271775][ T6600] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.8376'. [ 842.534095][ T6592] lo speed is unknown, defaulting to 1000 [ 842.578313][ T6621] bond6: option ad_select: invalid value (34) [ 842.603720][ T6621] bond6 (unregistering): Released all slaves [ 842.680068][ T6635] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 842.770824][ T6638] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8384'. [ 842.864707][ T6644] bond6: option all_slaves_active: invalid value (127) [ 842.873781][ T6644] bond6 (unregistering): Released all slaves [ 843.152676][ T6592] bridge0: port 1(bridge_slave_0) entered blocking state [ 843.160125][ T6592] bridge0: port 1(bridge_slave_0) entered disabled state [ 843.167967][ T6592] bridge_slave_0: entered allmulticast mode [ 843.175735][ T6592] bridge_slave_0: entered promiscuous mode [ 843.184192][ T6592] bridge0: port 2(bridge_slave_1) entered blocking state [ 843.191936][ T6592] bridge0: port 2(bridge_slave_1) entered disabled state [ 843.200019][ T6592] bridge_slave_1: entered allmulticast mode [ 843.209559][ T6592] bridge_slave_1: entered promiscuous mode [ 843.251098][ T6592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 843.264986][ T6592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 843.297325][ T6592] team0: Port device team_slave_0 added [ 843.306131][ T6592] team0: Port device team_slave_1 added [ 843.330493][ T6592] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 843.338236][ T6592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 843.364516][ T6592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 843.377177][ T6592] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 843.384160][ T6592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 843.410446][ T6592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 843.452228][ T6592] hsr_slave_0: entered promiscuous mode [ 843.458980][ T6592] hsr_slave_1: entered promiscuous mode [ 843.548165][ T6592] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 843.600641][ T6592] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 843.613501][ T6592] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.697079][ T6592] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 843.715193][ T6592] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.801093][ T6592] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 843.811899][ T6592] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.856546][ T6662] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 843.961913][ T6592] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 843.978194][ T6592] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 844.135207][ T50] Bluetooth: hci3: command tx timeout [ 844.336696][ T6592] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 844.364409][ T6592] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 844.386111][ T6592] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 844.417691][ T6592] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 844.431559][ T6592] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 844.449725][ T6592] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 844.508591][ T6730] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8401'. [ 844.520212][ T6730] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8401'. [ 844.607308][ T6592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 844.644920][ T6592] 8021q: adding VLAN 0 to HW filter on device team0 [ 844.662065][ T3630] bridge0: port 1(bridge_slave_0) entered blocking state [ 844.669351][ T3630] bridge0: port 1(bridge_slave_0) entered forwarding state [ 844.702320][ T3623] bridge0: port 2(bridge_slave_1) entered blocking state [ 844.709508][ T3623] bridge0: port 2(bridge_slave_1) entered forwarding state [ 845.271360][ T6781] syz_tun: entered allmulticast mode [ 845.386422][ T6592] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 845.562517][ T6797] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8413'. [ 845.573217][ T6797] netlink: 88 bytes leftover after parsing attributes in process `syz.1.8413'. [ 845.746857][ T6820] 8021q: adding VLAN 0 to HW filter on device team0 [ 845.768994][ T6820] batman_adv: batadv0: Interface activated: dummy0 [ 845.788295][ T6820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 845.813886][ T6820] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 845.828760][ T6820] veth1_macvtap: left promiscuous mode [ 845.835562][ T6820] veth0_macvtap: left promiscuous mode [ 845.842002][ T6820] veth0_macvtap: entered promiscuous mode [ 845.849141][ T6820] veth1_macvtap: entered promiscuous mode [ 845.858218][ T6820] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 845.866643][ T6820] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 845.875417][ T6820] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 845.883844][ T6820] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 845.893306][ T6820] 8021q: adding VLAN 0 to HW filter on device bond1 [ 845.906073][ T6820] 8021q: adding VLAN 0 to HW filter on device bond2 [ 845.915181][ T6820] 8021q: adding VLAN 0 to HW filter on device bond3 [ 845.923224][ T6820] 8021q: adding VLAN 0 to HW filter on device bond4 [ 845.932178][ T6820] 8021q: adding VLAN 0 to HW filter on device team1 [ 845.940053][ T6820] 8021q: adding VLAN 0 to HW filter on device team2 [ 845.950050][ T6820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 845.962868][ T6820] 8021q: adding VLAN 0 to HW filter on device bond5 [ 845.979577][ T6820] 8021q: adding VLAN 0 to HW filter on device bond7 [ 845.990923][ T6820] 8021q: adding VLAN 0 to HW filter on device bond6 [ 846.001772][ T3626] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 846.012468][ T6820] 8021q: adding VLAN 0 to HW filter on device bond8 [ 846.020711][ T6820] 8021q: adding VLAN 0 to HW filter on device bond9 [ 846.029464][ T6820] 8021q: adding VLAN 0 to HW filter on device bond10 [ 846.038299][ T6820] gtp0: left allmulticast mode [ 846.124942][ T139] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 846.134545][ T139] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 846.139307][ T6828] netlink: 2384 bytes leftover after parsing attributes in process `syz.2.8420'. [ 846.154912][ T139] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 846.164199][ T139] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 846.178893][ T3630] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 846.187011][ T3630] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 846.200164][ T139] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 846.210514][ T7330] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 846.215502][ T50] Bluetooth: hci3: command tx timeout [ 846.231135][ T139] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 846.258350][ T139] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 846.268755][ T6829] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8421'. [ 846.281103][ T139] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 846.310140][ T3630] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured! [ 846.324302][ T3630] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured! [ 846.336018][ T7330] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured! [ 846.368499][ T6592] veth0_vlan: entered promiscuous mode [ 846.401517][ T6592] veth1_vlan: entered promiscuous mode [ 846.416956][ T7330] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 846.486212][ T5742] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured! [ 846.495674][ T139] bond8: (slave veth1): link status definitely up, 10000 Mbps full duplex [ 846.519863][ T139] bond8: active interface up! [ 846.527002][ T6592] veth0_macvtap: entered promiscuous mode [ 846.558333][ T6592] veth1_macvtap: entered promiscuous mode [ 846.608497][ T6592] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 846.638770][ T6592] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 846.661252][ T3623] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 846.718549][ T3623] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 846.728529][ T3623] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 846.740652][ T3623] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 846.855478][ T7330] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 846.931052][ T3623] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 846.952830][ T3623] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 846.983867][ T6859] syzkaller0: entered promiscuous mode [ 846.996963][ T6859] syzkaller0: entered allmulticast mode [ 847.009359][ T6859] 0: reclassify loop, rule prio 0, protocol 800 [ 847.055441][ T6866] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8430'. [ 847.066718][ T6866] netlink: 'syz.0.8430': attribute type 83 has an invalid length. [ 847.184285][ T3633] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 847.198484][ T3633] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 847.256858][ T808] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured! [ 847.284637][ T6879] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8374'. [ 847.524381][ T6898] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8440'. [ 847.678839][ T6911] netlink: 'syz.4.8443': attribute type 16 has an invalid length. [ 847.698247][ T6911] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.8443'. [ 847.932952][ T6916] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8445'. [ 848.054034][ T6929] netlink: 220 bytes leftover after parsing attributes in process `syz.5.8450'. [ 848.063863][ T6929] NCSI netlink: No device for ifindex 566712438 [ 848.157927][ T6932] netlink: 'syz.5.8451': attribute type 1 has an invalid length. [ 848.261723][ T6938] bond1: entered promiscuous mode [ 848.268560][ T6938] 8021q: adding VLAN 0 to HW filter on device bond1 [ 848.281674][ T6941] netlink: 'syz.2.8454': attribute type 4 has an invalid length. [ 848.295750][ T50] Bluetooth: hci3: command tx timeout [ 848.568521][ T6961] netlink: 'syz.1.8460': attribute type 1 has an invalid length. [ 848.580618][ T6967] TCP: tcp_parse_options: Illegal window scaling value 81 > 14 received [ 848.587462][ T6968] tipc: Enabling of bearer rejected, already enabled [ 848.767544][ T6981] netlink: 'syz.4.8464': attribute type 3 has an invalid length. [ 848.779545][ T6981] netlink: 'syz.4.8464': attribute type 1 has an invalid length. [ 848.789195][ T6981] NCSI netlink: No device for ifindex 0 [ 848.897064][ T6993] gre0: entered promiscuous mode [ 848.902195][ T6993] gre0: entered allmulticast mode [ 848.912345][ T6993] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 849.140833][ T7005] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 849.276825][ T7015] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 849.292220][ T7016] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 849.317539][ T7012] can: request_module (can-proto-0) failed. [ 849.350513][ T7012] netlink: 'syz.2.8475': attribute type 1 has an invalid length. [ 849.383289][ T7012] batadv0: mtu less than device minimum [ 849.390031][ T7012] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 849.401263][ T7012] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 849.412412][ T7012] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 849.423540][ T7012] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 849.434665][ T7012] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 849.459060][ T7024] sctp: [Deprecated]: syz.5.8479 (pid 7024) Use of int in max_burst socket option. [ 849.459060][ T7024] Use struct sctp_assoc_value instead [ 849.488709][ T7020] vxlan1: entered promiscuous mode [ 849.495045][ T7020] vxlan1: entered allmulticast mode [ 849.623803][ T7032] xt_hashlimit: size too large, truncated to 1048576 [ 849.679219][ T7035] syzkaller0: entered promiscuous mode [ 849.686126][ T7035] syzkaller0: entered allmulticast mode [ 849.743361][ T3630] bridge_slave_1: left allmulticast mode [ 849.764613][ T3630] bridge_slave_1: left promiscuous mode [ 849.780697][ T3630] bridge0: port 2(bridge_slave_1) entered disabled state [ 849.814466][ T3630] bridge_slave_0: left allmulticast mode [ 849.832136][ T3630] bridge_slave_0: left promiscuous mode [ 849.848744][ T3630] bridge0: port 1(bridge_slave_0) entered disabled state [ 849.937625][ T3630] erspan0 (unregistering): left promiscuous mode [ 849.954452][ T3630] 0ªî{X¹¦ (unregistering): left promiscuous mode [ 850.010601][ T3630] bond2 (unregistering): (slave geneve2): Releasing active interface [ 850.026420][ T3630] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 850.062841][ T3630] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 850.072991][ T3630] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 850.082862][ T3630] bond0 (unregistering): Released all slaves [ 850.094966][ T3630] bond1 (unregistering): Released all slaves [ 850.106960][ T3630] bond2 (unregistering): Released all slaves [ 850.114265][ T7065] netlink: 'syz.5.8489': attribute type 1 has an invalid length. [ 850.124357][ T3630] bond3 (unregistering): (slave veth3): Releasing active interface [ 850.133244][ T3630] bond3 (unregistering): Released all slaves [ 850.149086][ T3630] bond4 (unregistering): Released all slaves [ 850.161169][ T3630] bond5 (unregistering): Released all slaves [ 850.173235][ T3630] bond6 (unregistering): Released all slaves [ 850.185927][ T3630] bond7 (unregistering): Released all slaves [ 850.196734][ T3630] bond8 (unregistering): Released all slaves [ 850.211182][ T3630] bond9 (unregistering): Released all slaves [ 850.223943][ T3630] bond10 (unregistering): Released all slaves [ 850.237895][ T3630] bond11 (unregistering): Released all slaves [ 850.249310][ T3630] bond12 (unregistering): Released all slaves [ 850.259765][ T3630] bond13 (unregistering): Released all slaves [ 850.272925][ T3630] bond14 (unregistering): Released all slaves [ 850.283878][ T3630] bond15 (unregistering): Released all slaves [ 850.294907][ T3630] bond16 (unregistering): Released all slaves [ 850.318641][ T3630] bond17 (unregistering): Released all slaves [ 850.373295][ T7060] bridge0: port 3(team0) entered disabled state [ 850.380061][ T7060] bridge0: port 2(bridge_slave_1) entered disabled state [ 850.387387][ T7060] bridge0: port 1(bridge_slave_0) entered disabled state [ 850.403634][ T50] Bluetooth: hci3: command tx timeout [ 850.549099][ T7063] bridge0: port 3(team0) entered blocking state [ 850.555537][ T7063] bridge0: port 3(team0) entered forwarding state [ 850.562244][ T7063] bridge0: port 2(bridge_slave_1) entered blocking state [ 850.569436][ T7063] bridge0: port 2(bridge_slave_1) entered forwarding state [ 850.576908][ T7063] bridge0: port 1(bridge_slave_0) entered blocking state [ 850.584048][ T7063] bridge0: port 1(bridge_slave_0) entered forwarding state [ 850.631801][ T7063] __nla_validate_parse: 17 callbacks suppressed [ 850.631822][ T7063] netlink: 52 bytes leftover after parsing attributes in process `syz.1.8491'. [ 850.648624][ T3630] : left promiscuous mode [ 850.732161][ T7063] bridge0: port 3(team0) entered disabled state [ 850.738701][ T7063] bridge0: port 2(bridge_slave_1) entered disabled state [ 850.745970][ T7063] bridge0: port 1(bridge_slave_0) entered disabled state [ 850.829839][ T3630] tipc: Disabling bearer [ 850.838010][ T3630] tipc: Left network mode [ 850.850734][ T7098] tipc: Enabled bearer , priority 0 [ 850.871007][ T7090] tipc: Resetting bearer [ 850.933960][ T7089] tipc: Disabling bearer [ 850.964753][ T7107] netlink: 'syz.5.8505': attribute type 2 has an invalid length. [ 850.966252][ T7103] tipc: Enabling of bearer rejected, already enabled [ 851.107564][ T7113] tipc: Enabling of bearer rejected, already enabled [ 851.123126][ T7114] netlink: 'syz.5.8509': attribute type 11 has an invalid length. [ 851.136230][ T7118] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8508'. [ 851.136679][ T7113] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8507'. [ 851.171122][ T7113] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8507'. [ 851.234760][ T7123] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8510'. [ 851.297120][ T7129] netlink: 224 bytes leftover after parsing attributes in process `syz.0.8513'. [ 851.334402][ T7124] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8511'. [ 851.983886][ T7158] batman_adv: batadv0: Interface deactivated: dummy0 [ 852.384548][ T3630] hsr_slave_0: left promiscuous mode [ 852.399495][ T3630] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 852.416796][ T3630] batman_adv: batadv0: Removing interface: dummy0 [ 852.545602][ T3630] team0 (unregistering): Port device team_slave_1 removed [ 852.660558][ T139] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 852.715651][ T139] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.780034][ T139] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 852.811834][ T7198] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.8524'. [ 852.838341][ T139] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.855421][ T50] Bluetooth: hci3: command tx timeout [ 852.873643][ T139] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 852.921602][ T139] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 853.098912][ T7212] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8526'. [ 853.118962][T26492] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 853.126543][T26492] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 853.134669][T26492] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 853.142646][T26492] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 853.150730][T26492] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 853.170421][ T7181] tunl0: Caught tx_queue_len zero misconfig [ 853.220200][ T139] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 853.249970][ T139] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 854.031661][T28106] syz_tun (unregistering): left allmulticast mode [ 854.129626][ T7260] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8535'. [ 854.301127][ T7220] lo speed is unknown, defaulting to 1000 [ 854.307720][ T3630] IPVS: stop unused estimator thread 0... [ 854.625570][ T7292] net_ratelimit: 15 callbacks suppressed [ 854.625590][ T7292] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 854.705742][ T7298] lo speed is unknown, defaulting to 1000 [ 854.714865][ T7298] lo speed is unknown, defaulting to 1000 [ 854.743197][ T7298] lo speed is unknown, defaulting to 1000 [ 854.856789][ T7220] bridge0: port 1(bridge_slave_0) entered blocking state [ 854.864063][ T7220] bridge0: port 1(bridge_slave_0) entered disabled state [ 854.873365][ T7220] bridge_slave_0: entered allmulticast mode [ 854.881634][ T7220] bridge_slave_0: entered promiscuous mode [ 854.893764][ T7311] sctp: [Deprecated]: syz.2.8546 (pid 7311) Use of struct sctp_assoc_value in delayed_ack socket option. [ 854.893764][ T7311] Use struct sctp_sack_info instead [ 854.894086][ T7220] bridge0: port 2(bridge_slave_1) entered blocking state [ 854.917616][ T7220] bridge0: port 2(bridge_slave_1) entered disabled state [ 854.924941][ T7220] bridge_slave_1: entered allmulticast mode [ 854.932729][ T7220] bridge_slave_1: entered promiscuous mode [ 855.003690][ T7309] syzkaller1: entered promiscuous mode [ 855.010394][ T7309] syzkaller1: entered allmulticast mode [ 855.045918][ T7220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 855.060905][ T7220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 855.083166][ T7326] RDS: rds_bind could not find a transport for ::8000:0:20:0, load rds_tcp or rds_rdma? [ 855.113953][ T7220] team0: Port device team_slave_0 added [ 855.122648][ T7298] infiniband syz1: set down [ 855.127428][ T808] lo speed is unknown, defaulting to 1000 [ 855.137582][ T7220] team0: Port device team_slave_1 added [ 855.143229][ T7298] infiniband syz1: added lo [ 855.159281][ T7298] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 855.174830][ T7298] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 855.176814][T26492] Bluetooth: hci4: command tx timeout [ 855.194346][ T7298] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 855.230888][ T7298] RDS/IB: syz1: added [ 855.235273][ T7298] smc: adding ib device syz1 with port count 1 [ 855.241579][ T7298] smc: ib device syz1 port 1 has no pnetid [ 855.265962][ T7336] lo speed is unknown, defaulting to 1000 [ 855.271792][ T7220] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 855.279217][ T7220] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 855.306175][ T7220] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 855.318916][ T7298] lo speed is unknown, defaulting to 1000 [ 855.325666][ T7220] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 855.340739][ T7220] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 855.367804][ T7220] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 855.426968][ T7220] hsr_slave_0: entered promiscuous mode [ 855.433546][ T7220] hsr_slave_1: entered promiscuous mode [ 855.440393][ T7220] debugfs: 'hsr0' already exists in 'hsr' [ 855.447056][ T7220] Cannot create hsr debugfs directory [ 855.622330][ T7298] lo speed is unknown, defaulting to 1000 [ 855.712508][ T7220] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 855.737800][ T7220] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0 [ 855.785653][ T7359] __nla_validate_parse: 20 callbacks suppressed [ 855.785674][ T7359] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8555'. [ 855.811561][ T7220] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 855.828074][ T7220] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0 [ 855.841633][ T7298] lo speed is unknown, defaulting to 1000 [ 855.900655][ T7220] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 855.926898][ T7220] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0 [ 855.978929][ T7298] lo speed is unknown, defaulting to 1000 [ 856.009737][ T7220] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 856.024176][ T7220] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0 [ 856.129273][ T7298] lo speed is unknown, defaulting to 1000 [ 856.157486][ T7365] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8557'. [ 856.182445][ T7365] 8021q: adding VLAN 0 to HW filter on device bond2 [ 856.216017][ T7365] bond2: entered promiscuous mode [ 856.221313][ T7365] bond2: entered allmulticast mode [ 856.231733][ T7365] 8021q: adding VLAN 0 to HW filter on device bond2 [ 856.240555][ T7365] team0: Port device bond2 added [ 856.301755][ T7220] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 856.311417][ T7220] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 856.319285][ T7298] lo speed is unknown, defaulting to 1000 [ 856.319859][ T7365] team_slave_1: entered promiscuous mode [ 856.348519][ T7365] team0: Port device team_slave_1 removed [ 856.358946][ T7365] team_slave_1: entered allmulticast mode [ 856.366147][ T7365] bond2: (slave team_slave_1): Enslaving as an active interface with an up link [ 856.434533][ T7220] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 856.447066][ T7220] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 856.459414][ T7220] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 856.469028][ T7220] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 856.477728][ T7298] lo speed is unknown, defaulting to 1000 [ 856.483708][ T7220] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 856.495663][ T7220] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 856.599229][ T7220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 856.630343][ T7220] 8021q: adding VLAN 0 to HW filter on device team0 [ 856.671533][ T3628] bridge0: port 1(bridge_slave_0) entered blocking state [ 856.678750][ T3628] bridge0: port 1(bridge_slave_0) entered forwarding state [ 856.727065][ T3628] bridge0: port 2(bridge_slave_1) entered blocking state [ 856.734280][ T3628] bridge0: port 2(bridge_slave_1) entered forwarding state [ 856.764366][ T7298] lo speed is unknown, defaulting to 1000 [ 856.997121][ T7298] lo speed is unknown, defaulting to 1000 [ 857.100708][ T7382] syzkaller0: entered promiscuous mode [ 857.108534][ T7382] syzkaller0: entered allmulticast mode [ 857.317075][T26492] Bluetooth: hci4: command tx timeout [ 857.402541][ T7420] validate_nla: 1 callbacks suppressed [ 857.402561][ T7420] netlink: 'syz.5.8567': attribute type 3 has an invalid length. [ 857.417156][ T7420] netlink: 'syz.5.8567': attribute type 16 has an invalid length. [ 857.464751][ T7420] netlink: 132 bytes leftover after parsing attributes in process `syz.5.8567'. [ 857.539095][ T7220] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 857.665388][ T7220] veth0_vlan: entered promiscuous mode [ 857.702063][ T7220] veth1_vlan: entered promiscuous mode [ 857.730948][ T7442] pim6reg: entered allmulticast mode [ 857.813685][ T7220] veth0_macvtap: entered promiscuous mode [ 857.847280][ T7451] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8572'. [ 857.858679][ T7220] veth1_macvtap: entered promiscuous mode [ 857.903492][ T7454] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input13 [ 857.929396][ T7220] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 857.999445][ T7220] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 858.110426][ T3628] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 858.149017][ T3628] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 858.212678][ T7467] RDS: rds_bind could not find a transport for ::ffff:10.1.1.3, load rds_tcp or rds_rdma? [ 858.252652][ T3628] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 858.280087][ T3628] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 858.465129][ T3626] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 858.476861][ T3626] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 858.519184][ T7489] syzkaller1: entered promiscuous mode [ 858.527053][ T7489] syzkaller1: entered allmulticast mode [ 858.780816][ T7507] netlink: 'syz.4.8581': attribute type 61 has an invalid length. [ 858.791326][ T7507] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8581'. [ 858.793070][ T3626] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 858.811343][ T3626] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 858.923697][ T7514] bridge_slave_0: left allmulticast mode [ 858.930355][ T7519] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8583'. [ 858.957963][ T7514] bridge_slave_0: left promiscuous mode [ 858.973187][ T7514] bridge0: port 1(bridge_slave_0) entered disabled state [ 858.984457][ T7514] bridge_slave_1: left allmulticast mode [ 858.991115][ T7514] bridge_slave_1: left promiscuous mode [ 858.997445][ T7514] bridge0: port 2(bridge_slave_1) entered disabled state [ 859.009905][ T7514] bond0: (slave bond_slave_0): Releasing backup interface [ 859.020834][ T7514] bond0: (slave bond_slave_1): Releasing backup interface [ 859.034567][ T7514] team0: Port device team_slave_0 removed [ 859.042253][ T7514] bond2: (slave team_slave_1): Releasing backup interface [ 859.051463][ T7514] team_slave_1: left allmulticast mode [ 859.059803][ T7514] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 859.067373][ T7514] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 859.076674][ T7514] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 859.084165][ T7514] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 859.093985][ T7514] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 859.111733][ T7511] pim6reg1: entered allmulticast mode [ 859.138533][ T7529] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 859.152078][ T7529] batman_adv: batadv0: Adding interface: gretap1 [ 859.159375][ T7529] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1568 would solve the problem. [ 859.186331][ T7529] batman_adv: batadv0: Interface activated: gretap1 [ 859.335363][T26492] Bluetooth: hci4: command tx timeout [ 859.410367][ T7545] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8590'. [ 859.427138][ T7545] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8590'. [ 859.504111][ T7552] netlink: 'syz.2.8591': attribute type 29 has an invalid length. [ 860.096647][ T7587] netlink: 'syz.4.8596': attribute type 1 has an invalid length. [ 860.130421][ T7587] netlink: 96 bytes leftover after parsing attributes in process `syz.4.8596'. [ 860.145345][ T7587] netlink: 1 bytes leftover after parsing attributes in process `syz.4.8596'. [ 860.156930][ T7587] netlink: 'syz.4.8596': attribute type 1 has an invalid length. [ 860.164798][ T7587] netlink: 'syz.4.8596': attribute type 8 has an invalid length. [ 860.399462][ T30] audit: type=1804 audit(1782125137.456:29): pid=7602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.8603" name="/newroot/587/cgroup.controllers" dev="tmpfs" ino=3030 res=1 errno=0 [ 860.471384][ T30] audit: type=1800 audit(1782125137.456:30): pid=7602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.8603" name="cgroup.controllers" dev="tmpfs" ino=3030 res=0 errno=0 [ 860.483087][ T7607] bond3: Unable to set up delay as MII monitoring is disabled [ 860.508327][ T7607] bond3 (unregistering): Released all slaves [ 860.621372][ T7612] netlink: 'syz.0.8605': attribute type 1 has an invalid length. [ 860.861902][ T7637] syzkaller1: entered promiscuous mode [ 860.871802][ T7640] netlink: 'syz.5.8612': attribute type 3 has an invalid length. [ 860.881697][ T7637] syzkaller1: entered allmulticast mode [ 861.415225][T26492] Bluetooth: hci4: command tx timeout [ 862.080591][ T7663] __nla_validate_parse: 6 callbacks suppressed [ 862.080613][ T7663] netlink: 36 bytes leftover after parsing attributes in process `syz.5.8617'. [ 862.329066][ T7669] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8618'. [ 862.340523][ T7668] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8619'. [ 862.497312][ T7675] netlink: 'syz.4.8620': attribute type 12 has an invalid length. [ 862.592758][ T7682] sctp: [Deprecated]: syz.0.8623 (pid 7682) Use of struct sctp_assoc_value in delayed_ack socket option. [ 862.592758][ T7682] Use struct sctp_sack_info instead [ 862.617647][ T7686] batadv_slave_1: entered promiscuous mode [ 862.739037][ T7697] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8627'. [ 862.784060][ T7698] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8626'. [ 862.871668][ T7705] netlink: 'syz.2.8629': attribute type 1 has an invalid length. [ 862.873008][ T7685] batadv_slave_1: left promiscuous mode [ 862.879881][ T7705] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 862.935962][ T3626] wlan0: Trigger new scan to find an IBSS to join [ 862.971224][ T7713] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8632'. [ 862.996345][ T7713] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8632'. [ 863.108621][ T7714] bridge0: port 2(bridge_slave_1) entered disabled state [ 863.116196][ T7714] bridge0: port 1(bridge_slave_0) entered disabled state [ 863.259527][ T7714] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 863.291253][ T7714] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 863.492419][ T7730] netdevsim netdevsim2 €Â: renamed from netdevsim0 [ 863.519487][ T3622] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 863.543264][ T3622] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 863.574192][ T3622] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 863.608924][ T3622] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 863.652131][ T7741] netlink: 'syz.5.8634': attribute type 21 has an invalid length. [ 863.695247][ T7741] netlink: 132 bytes leftover after parsing attributes in process `syz.5.8634'. [ 863.998173][ T7753] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 864.190459][ T7770] netlink: 128 bytes leftover after parsing attributes in process `syz.2.8641'. [ 864.211550][ T7770] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 864.260307][ T7770] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8641'. [ 864.294975][ T7785] bridge_slave_1: Caught tx_queue_len zero misconfig [ 864.456304][ T1749] block nbd4: Possible stuck request ffff888027b61880: control (read@0,1024B). Runtime 60 seconds [ 864.467638][ T1749] block nbd4: Possible stuck request ffff888027b61a40: control (read@1024,1024B). Runtime 60 seconds [ 864.479050][ T1749] block nbd4: Possible stuck request ffff888027b61c00: control (read@2048,1024B). Runtime 60 seconds [ 864.492707][ T1749] block nbd4: Possible stuck request ffff888027b61dc0: control (read@3072,1024B). Runtime 60 seconds [ 864.972275][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 864.979743][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 864.988923][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 864.996957][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 865.004508][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 865.252440][ T7841] pim6reg: entered allmulticast mode [ 865.314091][ T7833] pim6reg: left allmulticast mode [ 865.406234][ T7856] netlink: 'syz.5.8658': attribute type 11 has an invalid length. [ 865.422235][ T7854] xt_TPROXY: Can be used only with -p tcp or -p udp [ 865.458035][ T3626] netdevsim netdevsim2 eth5: set [0, 0] type 1 family 0 port 8472 - 0 [ 865.498724][ T7852] 8021q: VLANs not supported on lo [ 865.504843][ T3626] netdevsim netdevsim2 eth6: set [0, 0] type 1 family 0 port 8472 - 0 [ 865.513866][ T3626] netdevsim netdevsim2 eth7: set [0, 0] type 1 family 0 port 8472 - 0 [ 865.537747][ T3623] netdevsim netdevsim2 eth8: set [0, 0] type 1 family 0 port 8472 - 0 [ 865.547917][ T7859] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 865.554388][ T7825] lo speed is unknown, defaulting to 1000 [ 865.592260][T21238] batman_adv: batadv0: Interface deactivated: gretap1 [ 865.782535][T21238] batman_adv: batadv0: Removing interface: gretap1 [ 865.851478][T21238] bond1 (unregistering): Released all slaves [ 865.875283][T21238] bond2 (unregistering): Released all slaves [ 865.888179][T21238] bond3 (unregistering): Released all slaves [ 865.902638][T21238] bond4 (unregistering): Released all slaves [ 865.923661][T21238] bond0 (unregistering): Released all slaves [ 865.944754][T21238] bond5 (unregistering): (slave veth9): Releasing active interface [ 865.953709][T21238] bond5 (unregistering): Released all slaves [ 865.966285][T21238] bond7 (unregistering): Released all slaves [ 865.978562][T21238] bond6 (unregistering): Released all slaves [ 865.990011][T21238] bond8 (unregistering): (slave veth1): Removing an active aggregator [ 865.999050][T21238] bond8 (unregistering): (slave veth1): Releasing backup interface [ 866.009081][T21238] bond8 (unregistering): Released all slaves [ 866.020774][T21238] bond9 (unregistering): Released all slaves [ 866.031647][T21238] bond10 (unregistering): Released all slaves [ 866.042736][ T7825] lo speed is unknown, defaulting to 1000 [ 866.146843][T21238] tipc: Left network mode [ 866.722412][ T7915] lo speed is unknown, defaulting to 1000 [ 867.025016][ T5281] 8021q: adding VLAN 0 to HW filter on device eth5 [ 867.041423][ T7915] lo speed is unknown, defaulting to 1000 [ 867.095163][ T50] Bluetooth: hci1: command tx timeout [ 867.172244][ T7825] bridge0: port 1(bridge_slave_0) entered blocking state [ 867.185604][ T7938] __nla_validate_parse: 3 callbacks suppressed [ 867.185625][ T7938] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8671'. [ 867.214948][ T7825] bridge0: port 1(bridge_slave_0) entered disabled state [ 867.242867][ T7825] bridge_slave_0: entered allmulticast mode [ 867.263151][ T7825] bridge_slave_0: entered promiscuous mode [ 867.307588][ T7825] bridge0: port 2(bridge_slave_1) entered blocking state [ 867.336613][ T7825] bridge0: port 2(bridge_slave_1) entered disabled state [ 867.344104][ T7825] bridge_slave_1: entered allmulticast mode [ 867.352304][ T7825] bridge_slave_1: entered promiscuous mode [ 867.394389][ T7825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 867.405661][ T7954] Bluetooth: MGMT ver 1.23 [ 867.415405][ T7825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 867.431561][ T7956] netlink: 72 bytes leftover after parsing attributes in process `syz.0.8676'. [ 867.472657][ T7825] team0: Port device team_slave_0 added [ 867.481203][ T7957] netlink: 7064 bytes leftover after parsing attributes in process `syz.5.8675'. [ 867.496792][ T7825] team0: Port device team_slave_1 added [ 867.515852][ T7957] openvswitch: netlink: Missing key (keys=40, expected=100) [ 867.732083][ T7825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 867.751663][ T7825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 867.804264][ T4466] udevd[4466]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 867.850437][ T7825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 867.887349][ T7825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 867.904346][ T7825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 867.949404][ T7825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 867.960738][ T7970] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8671'. [ 867.979047][ T139] wlan0: Trigger new scan to find an IBSS to join [ 868.011542][T21238] hsr_slave_0: left promiscuous mode [ 868.025177][T21238] batman_adv: batadv0: Removing interface: dummy0 [ 868.209111][ T7938] netlink: 'syz.1.8671': attribute type 11 has an invalid length. [ 868.218315][ T7938] netlink: 180760 bytes leftover after parsing attributes in process `syz.1.8671'. [ 868.329438][ T4466] udevd[4466]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 868.411443][ T5281] 8021q: adding VLAN 0 to HW filter on device eth6 [ 868.504350][ T7985] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8677'. [ 868.529487][ T7825] hsr_slave_0: entered promiscuous mode [ 868.553162][ T7825] hsr_slave_1: entered promiscuous mode [ 868.587625][ T7825] debugfs: 'hsr0' already exists in 'hsr' [ 868.588798][ T7991] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8678'. [ 868.606799][ T7825] Cannot create hsr debugfs directory [ 868.784344][ T7993] tipc: Started in network mode [ 868.795618][ T7993] tipc: Node identity ff020000000000000000000000000001, cluster identity 4711 [ 868.816491][ T7993] tipc: Enabling of bearer rejected, failed to enable media [ 868.851911][ T7996] bridge1: port 1(vlan2) entered blocking state [ 868.868115][ T7996] bridge1: port 1(vlan2) entered disabled state [ 868.890778][ T3633] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 868.905486][ T7996] vlan2: entered allmulticast mode [ 868.933141][ T7996] bridge1: entered allmulticast mode [ 868.950077][ T7996] vlan2: left allmulticast mode [ 868.955380][ T7996] bridge1: left allmulticast mode [ 869.116897][ T5281] 8021q: adding VLAN 0 to HW filter on device eth7 [ 869.160862][ T8016] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8681'. [ 869.175171][ T50] Bluetooth: hci1: command tx timeout [ 869.182583][ T7825] netdevsim netdevsim2 eth8 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 869.216059][ T8016] netlink: 'syz.5.8681': attribute type 5 has an invalid length. [ 869.234103][T21238] IPVS: stop unused estimator thread 0... [ 869.266581][ T7825] netdevsim netdevsim2 eth7 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 869.287567][ T8020] netlink: 124 bytes leftover after parsing attributes in process `syz.1.8683'. [ 869.445225][ T8035] netlink: 'syz.0.8687': attribute type 6 has an invalid length. [ 869.631115][ T8046] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8688'. [ 869.765586][ T7825] netdevsim netdevsim2 eth6 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 869.777284][ T8058] SET target dimension over the limit! [ 869.853577][ T7825] netdevsim netdevsim2 eth5 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 869.987997][ T7825] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 869.999895][ T7825] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 870.010048][ T7825] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 870.021779][ T7825] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 870.030565][ T7825] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 870.074499][ T7825] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 870.085465][ T7825] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 870.103301][ T7825] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 870.215916][ C1] ip6_tnl_xmit_ctl: 2 callbacks suppressed [ 870.215938][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 870.252685][ T8092] netlink: 'syz.4.8697': attribute type 3 has an invalid length. [ 870.332921][ T7825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 870.395349][ T8100] xt_connbytes: Forcing CT accounting to be enabled [ 870.403439][ T7825] 8021q: adding VLAN 0 to HW filter on device team0 [ 870.421447][ T3633] bridge0: port 1(bridge_slave_0) entered blocking state [ 870.428651][ T3633] bridge0: port 1(bridge_slave_0) entered forwarding state [ 870.464533][ T8096] tipc: Started in network mode [ 870.476528][ T8096] tipc: Node identity f29f0645f8cf, cluster identity 4711 [ 870.486159][ T8096] tipc: Enabled bearer , priority 0 [ 870.522636][ T3633] bridge0: port 2(bridge_slave_1) entered blocking state [ 870.529921][ T3633] bridge0: port 2(bridge_slave_1) entered forwarding state [ 870.551593][ T8097] syzkaller0: entered promiscuous mode [ 870.565330][ T8097] syzkaller0: entered allmulticast mode [ 870.679249][ T8097] tipc: Resetting bearer [ 870.713987][ T8097] tipc: Disabling bearer [ 871.255171][ T50] Bluetooth: hci1: command tx timeout [ 871.352713][ T8157] syzkaller0: entered promiscuous mode [ 871.359532][ T8157] syzkaller0: entered allmulticast mode [ 871.393898][ T8176] xt_NFQUEUE: number of total queues is 0 [ 871.456591][ T7825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 871.496629][ T7825] veth0_vlan: entered promiscuous mode [ 871.510608][ T7825] veth1_vlan: entered promiscuous mode [ 871.568178][ T7825] veth0_macvtap: entered promiscuous mode [ 871.595004][ T7825] veth1_macvtap: entered promiscuous mode [ 871.634546][ T7825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 871.654238][ T7825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 871.669739][ T3626] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 871.684608][ T3626] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 871.718698][ T3626] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 871.731685][ T3626] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 871.747550][ T8191] hsr0: entered promiscuous mode [ 871.764642][ T8191] gretap1: entered allmulticast mode [ 871.797910][ T8194] syzkaller1: entered promiscuous mode [ 871.803758][ T8194] syzkaller1: entered allmulticast mode [ 871.814899][ T8189] hsr0: left promiscuous mode [ 872.138915][ T8157] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 872.248728][ T8232] veth1_to_bond: entered allmulticast mode [ 872.289492][ T8236] __nla_validate_parse: 12 callbacks suppressed [ 872.289516][ T8236] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8721'. [ 872.309272][ T8236] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8721'. [ 872.318755][ T8236] netlink: 'syz.1.8721': attribute type 20 has an invalid length. [ 873.216514][ T8296] netlink: 84 bytes leftover after parsing attributes in process `syz.5.8725'. [ 873.335258][ T50] Bluetooth: hci1: command tx timeout [ 874.252482][ T8160] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 874.332267][T21238] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 874.359308][T21238] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 874.412759][ T3623] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 874.432474][ T3623] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 874.638187][ T8319] netlink: 104 bytes leftover after parsing attributes in process `syz.2.8730'. [ 874.865769][ T8329] syzkaller1: entered promiscuous mode [ 874.871320][ T8329] syzkaller1: entered allmulticast mode [ 874.927124][ T8327] syzkaller1: left promiscuous mode [ 874.937646][ T8327] syzkaller1: left allmulticast mode [ 875.131697][ T8347] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8737'. [ 875.407168][ T8358] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8741'. [ 875.463984][ T8358] netlink: 'syz.1.8741': attribute type 25 has an invalid length. [ 875.472409][ T8358] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8741'. [ 875.712544][ T8388] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8748'. [ 875.721579][ T8388] netlink: 'syz.5.8748': attribute type 12 has an invalid length. [ 875.743822][ T139] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 875.744050][ T8388] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8748'. [ 875.761904][ T8388] netlink: 'syz.5.8748': attribute type 12 has an invalid length. [ 875.770630][ T139] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 875.803252][ T139] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 875.818102][ T139] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 875.849806][ T8394] netlink: 'syz.1.8750': attribute type 1 has an invalid length. [ 875.859386][ T8391] syzkaller1: entered promiscuous mode [ 875.867874][ T8391] syzkaller1: entered allmulticast mode [ 875.890865][ T8394] bond8: entered promiscuous mode [ 875.896745][ T8394] 8021q: adding VLAN 0 to HW filter on device bond8 [ 875.961143][ T8399] IPVS: set_ctl: invalid protocol: 4 172.20.20.19:20004 [ 876.368103][ T8428] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8762'. [ 876.377884][ T8428] nbd: must specify at least one socket [ 876.471429][ T8433] nbd: must specify at least one socket [ 876.498179][ T8429] netlink: 'syz.2.8760': attribute type 1 has an invalid length. [ 876.511021][ T8429] netlink: 'syz.2.8760': attribute type 2 has an invalid length. [ 876.532725][ T8436] netlink: 'syz.5.8764': attribute type 1 has an invalid length. [ 876.673310][ T8442] lo speed is unknown, defaulting to 1000 [ 876.842897][ T8442] lo speed is unknown, defaulting to 1000 [ 876.991015][ T8464] 8021q: adding VLAN 0 to HW filter on device bond1 [ 876.998650][ T8464] bridge0: port 3(bond1) entered blocking state [ 877.005268][ T8464] bridge0: port 3(bond1) entered disabled state [ 877.012048][ T8464] bond1: entered allmulticast mode [ 877.020618][ T8464] bond1: entered promiscuous mode [ 877.037195][ T8465] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 877.055242][ T8465] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 877.065763][ T8465] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 877.164159][ T8476] netlink: 'syz.5.8775': attribute type 5 has an invalid length. [ 877.291543][ T8486] žÿ: renamed from team_slave_1 [ 877.445978][ T8504] __nla_validate_parse: 4 callbacks suppressed [ 877.445998][ T8504] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8782'. [ 877.671987][ T8524] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 877.678093][ T8524] pim6reg0: linktype set to 774 [ 880.523385][ T8509] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 883.546351][ T4986] udevd[4986]: worker [4020] /devices/virtual/block/nbd4 is taking a long time [ 894.535907][ T1749] block nbd4: Possible stuck request ffff888027b61880: control (read@0,1024B). Runtime 90 seconds [ 894.546656][ T1749] block nbd4: Possible stuck request ffff888027b61a40: control (read@1024,1024B). Runtime 90 seconds [ 894.557761][ T1749] block nbd4: Possible stuck request ffff888027b61c00: control (read@2048,1024B). Runtime 90 seconds [ 894.568983][ T1749] block nbd4: Possible stuck request ffff888027b61dc0: control (read@3072,1024B). Runtime 90 seconds [ 898.785576][ T8539] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 898.814285][ T8542] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8787'. [ 898.824131][ T8529] syzkaller1: entered promiscuous mode [ 898.829823][ T8529] syzkaller1: entered allmulticast mode [ 899.056895][ T8559] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8795'. [ 899.149028][ T8565] netlink: 'syz.1.8794': attribute type 21 has an invalid length. [ 899.159968][ T8565] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8794'. [ 899.225970][ T8570] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8796'. [ 899.257556][ T8571] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8796'. [ 899.279939][ T8574] netlink: 'syz.2.8797': attribute type 46 has an invalid length. [ 899.468858][ T8587] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8802'. [ 899.505457][ T8585] syzkaller0: entered promiscuous mode [ 899.517668][ T8585] syzkaller0: entered allmulticast mode [ 899.711025][ T8593] sock: sock_timestamping_bind_phc: sock not bind to device [ 899.821955][ T8595] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8805'. [ 899.851943][ T8595] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8805'. [ 899.881409][ T8595] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8805'. [ 900.164391][ T8623] netlink: 'syz.2.8810': attribute type 7 has an invalid length. [ 900.181423][ T8621] netlink: 44 bytes leftover after parsing attributes in process `syz.5.8812'. [ 900.202156][ T8627] No such timeout policy "syz0" [ 900.281775][ T8631] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 900.751296][ T3623] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 900.760794][ T3623] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 900.770879][ T3623] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 900.780094][ T3623] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 900.812802][ T8671] vlan2: entered promiscuous mode [ 900.818416][ T8671] erspan0: entered promiscuous mode [ 900.935251][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 900.945446][ T3628] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 901.556844][ T8689] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 901.564161][T26492] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 901.572533][T26492] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 901.582629][T26492] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 901.590238][T26492] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 901.664592][T28472] syz_tun (unregistering): left allmulticast mode [ 901.672990][T28472] bond3: (slave syz_tun): Removing an active aggregator [ 901.681521][T28472] bond3: (slave syz_tun): Releasing backup interface [ 901.815785][ T8688] lo speed is unknown, defaulting to 1000 [ 901.889798][ T8688] lo speed is unknown, defaulting to 1000 [ 902.099402][ T8688] bridge0: port 1(bridge_slave_0) entered blocking state [ 902.106990][ T8688] bridge0: port 1(bridge_slave_0) entered disabled state [ 902.114394][ T8688] bridge_slave_0: entered allmulticast mode [ 902.121577][ T8688] bridge_slave_0: entered promiscuous mode [ 902.129259][ T8688] bridge0: port 2(bridge_slave_1) entered blocking state [ 902.136648][ T8688] bridge0: port 2(bridge_slave_1) entered disabled state [ 902.143918][ T8688] bridge_slave_1: entered allmulticast mode [ 902.151044][ T8688] bridge_slave_1: entered promiscuous mode [ 902.173368][ T8688] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 902.185423][ T8688] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 902.208743][ T8688] team0: Port device team_slave_0 added [ 902.217509][ T8688] team0: Port device team_slave_1 added [ 902.236376][ T8688] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 902.243360][ T8688] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 902.269694][ T8688] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 902.283235][ T8688] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 902.290267][ T8688] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 902.317206][ T8688] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 902.349289][ T8688] hsr_slave_0: entered promiscuous mode [ 902.355978][ T8688] hsr_slave_1: entered promiscuous mode [ 902.362903][ T8688] debugfs: 'hsr0' already exists in 'hsr' [ 902.368849][ T8688] Cannot create hsr debugfs directory [ 903.342598][ T8635] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 903.354267][ T8688] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 903.372804][ T8688] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 903.382679][ T8688] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 903.398905][ T8688] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 903.409583][ T8688] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 903.454894][ T8688] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 903.466294][ T8688] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 903.480317][ T8688] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 903.574352][ T8688] 8021q: adding VLAN 0 to HW filter on device bond0 [ 903.606939][ T8688] 8021q: adding VLAN 0 to HW filter on device team0 [ 903.629144][ T3622] bridge0: port 1(bridge_slave_0) entered blocking state [ 903.636352][ T3622] bridge0: port 1(bridge_slave_0) entered forwarding state [ 903.647003][ T3622] bridge0: port 2(bridge_slave_1) entered blocking state [ 903.654221][ T3622] bridge0: port 2(bridge_slave_1) entered forwarding state [ 903.662833][ T50] Bluetooth: hci5: command tx timeout [ 903.754102][ T7336] IPVS: starting estimator thread 0... [ 903.856725][ T8730] IPVS: using max 40 ests per chain, 96000 per kthread [ 903.969051][ T8754] __nla_validate_parse: 103 callbacks suppressed [ 903.969072][ T8754] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8841'. [ 903.993481][ T8752] netlink: 'syz.2.8840': attribute type 11 has an invalid length. [ 904.003297][ T8752] netlink: 199828 bytes leftover after parsing attributes in process `syz.2.8840'. [ 904.022489][ T8754] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8841'. [ 904.193426][ T8737] bridge2: entered promiscuous mode [ 904.199598][ T8737] bridge2: entered allmulticast mode [ 904.218405][ T8737] team0: Port device bridge2 added [ 904.308911][ T8688] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 904.627285][ T8771] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8842'. [ 904.701515][ T8794] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8848'. [ 904.754699][ T8794] lo speed is unknown, defaulting to 1000 [ 904.768081][ T8688] veth0_vlan: entered promiscuous mode [ 904.793291][ T8688] veth1_vlan: entered promiscuous mode [ 904.855570][ T8688] veth0_macvtap: entered promiscuous mode [ 904.884452][ T8688] veth1_macvtap: entered promiscuous mode [ 904.918873][ T8688] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 904.942366][ T8688] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 904.994782][ T8794] lo speed is unknown, defaulting to 1000 [ 905.000678][ T3623] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 905.021603][ T3623] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 905.053268][ T3623] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 905.076495][ T3623] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 905.228905][ T8819] netlink: 'syz.5.8853': attribute type 11 has an invalid length. [ 905.253211][ T8823] openvswitch: netlink: Actions may not be safe on all matching packets [ 905.391873][ T139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 905.437974][ T139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 905.528854][ T8834] syz_tun: entered promiscuous mode [ 905.534952][ T8834] macsec1: entered allmulticast mode [ 905.541444][ T8834] syz_tun: entered allmulticast mode [ 905.550018][ T8834] syz_tun: left allmulticast mode [ 905.555203][ T8834] syz_tun: left promiscuous mode [ 905.599961][ T139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 905.608244][ T139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 905.703639][ T8839] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8829'. [ 905.714820][ T8839] netlink: 'syz.4.8829': attribute type 4 has an invalid length. [ 905.736142][ T50] Bluetooth: hci5: command tx timeout [ 905.834529][ T8842] lo speed is unknown, defaulting to 1000 [ 905.854691][ T8844] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8862'. [ 905.868810][ T8846] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8863'. [ 905.886895][ T8844] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8862'. [ 905.902359][ T8844] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8862'. [ 906.021281][ T8855] netlink: 'syz.5.8867': attribute type 11 has an invalid length. [ 906.062029][ T8855] netlink: 'syz.5.8867': attribute type 11 has an invalid length. [ 906.094647][ T8842] lo speed is unknown, defaulting to 1000 [ 906.274803][ T8847] rdma_rxe: rxe_newlink: failed to add lo [ 906.401066][ T8872] netlink: 'syz.4.8871': attribute type 4 has an invalid length. [ 906.698945][ T8889] ±ÿ: renamed from lo (while UP) [ 907.194091][ T8926] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input14 [ 907.239346][ T8929] team0: Port device team_slave_0 removed [ 907.452454][ T8947] netlink: 'syz.5.8892': attribute type 1 has an invalid length. [ 907.484710][ T8951] batadv_slave_0: Caught tx_queue_len zero misconfig [ 907.559142][ T8953] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 907.706267][ T8959] lo speed is unknown, defaulting to 1000 [ 907.810340][ T8969] netlink: 'syz.5.8902': attribute type 15 has an invalid length. [ 907.818536][ T50] Bluetooth: hci5: command tx timeout [ 908.003441][ T8959] lo speed is unknown, defaulting to 1000 [ 908.129923][ T8993] 8021q: VLANs not supported on lo [ 908.181975][ T8995] lo speed is unknown, defaulting to 1000 [ 908.356069][ T8995] lo speed is unknown, defaulting to 1000 [ 908.448711][ C0] ------------[ cut here ]------------ [ 908.454274][ C0] len > ((int)(~0U >> 1)) [ 908.454302][ C0] WARNING: ./include/linux/skbuff.h:2866 at qdisc_pkt_len_segs_init+0x4b4/0xa30, CPU#0: syz.4.8911/9010 [ 908.469918][ C0] Modules linked in: [ 908.473863][ C0] CPU: 0 UID: 0 PID: 9010 Comm: syz.4.8911 Not tainted syzkaller #0 PREEMPT(full) [ 908.483234][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 908.493365][ C0] RIP: 0010:qdisc_pkt_len_segs_init+0x4b4/0xa30 [ 908.499729][ C0] Code: 00 00 02 00 31 ff e8 7b 0f 4b f8 81 e3 00 00 02 00 0f 85 fd 00 00 00 e8 2a 0b 4b f8 45 89 e7 e9 2c ff ff ff e8 1d 0b 4b f8 90 <0f> 0b 90 e9 ee fd ff ff 44 89 e7 89 de e8 ca 0c 4b f8 41 39 dc 0f [ 908.519416][ C0] RSP: 0018:ffffc90000007660 EFLAGS: 00010246 [ 908.525563][ C0] RAX: ffffffff897aeb03 RBX: 0000000000000003 RCX: ffff88807be21f00 [ 908.533579][ C0] RDX: 0000000000000100 RSI: 00000000fffffffe RDI: 0000000000000000 [ 908.541639][ C0] RBP: ffff88807a8d98c0 R08: ffff888033180067 R09: 1ffff1100663000c [ 908.549681][ C0] R10: dffffc0000000000 R11: ffffed100663000d R12: 00000000fffffffe [ 908.557768][ C0] R13: dffffc0000000000 R14: 1ffff1100f51b333 R15: ffff88809a79af18 [ 908.565812][ C0] FS: 00007fba737d56c0(0000) GS:ffff88812527c000(0000) knlGS:0000000000000000 [ 908.574791][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 908.581454][ C0] CR2: 00007fba737d4ff8 CR3: 000000003bcfe000 CR4: 00000000003526f0 [ 908.589502][ C0] Call Trace: [ 908.592821][ C0] [ 908.595750][ C0] __netif_receive_skb_core+0x13aa/0x30b0 [ 908.601521][ C0] ? rcu_is_watching+0x15/0xb0 [ 908.606387][ C0] ? lock_release+0x4b/0x3c0 [ 908.611044][ C0] ? unwind_next_frame+0x8f/0x2550 [ 908.616275][ C0] ? unwind_next_frame+0x8f/0x2550 [ 908.621465][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 908.627600][ C0] ? unwind_next_frame+0x8f/0x2550 [ 908.632755][ C0] ? rcu_is_watching+0x15/0xb0 [ 908.637618][ C0] ? get_stack_info_noinstr+0x19/0x130 [ 908.643123][ C0] ? deref_stack_reg+0x18e/0x220 [ 908.648152][ C0] ? unwind_next_frame+0x1baf/0x2550 [ 908.653510][ C0] __netif_receive_skb_list_core+0x24d/0x830 [ 908.659579][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 908.664568][ C0] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 908.671176][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 908.676204][ C0] netif_receive_skb_list_internal+0x995/0xcf0 [ 908.682413][ C0] ? netif_receive_skb_list_internal+0x501/0xcf0 [ 908.688822][ C0] ? rcu_is_watching+0x15/0xb0 [ 908.693627][ C0] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 908.700396][ C0] ? lock_release+0x4b/0x3c0 [ 908.705074][ C0] napi_complete_done+0x299/0x730 [ 908.710152][ C0] ? __pfx_napi_complete_done+0x10/0x10 [ 908.715838][ C0] ? rcu_is_watching+0x15/0xb0 [ 908.720644][ C0] ? gro_receive_skb+0x70e/0xc30 [ 908.725674][ C0] gro_cell_poll+0x5ab/0x5d0 [ 908.730318][ C0] ? gro_cell_poll+0x175/0x5d0 [ 908.735169][ C0] __napi_poll+0xaa/0x330 [ 908.739566][ C0] net_rx_action+0x61d/0xf50 [ 908.744223][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 908.749446][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 908.754700][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 908.760083][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 908.765367][ C0] ? sched_clock+0x3f/0x60 [ 908.769850][ C0] handle_softirqs+0x225/0x840 [ 908.774668][ C0] ? do_softirq+0x76/0xd0 [ 908.779086][ C0] ? tun_rx_batched+0x185/0x790 [ 908.784074][ C0] do_softirq+0x76/0xd0 [ 908.788319][ C0] [ 908.791279][ C0] [ 908.794248][ C0] __local_bh_enable_ip+0xf8/0x130 [ 908.799466][ C0] ? tun_rx_batched+0x185/0x790 [ 908.804367][ C0] tun_rx_batched+0x616/0x790 [ 908.809130][ C0] ? trace_irq_enable+0x3b/0x140 [ 908.814121][ C0] ? irqentry_exit+0x218/0x8f0 [ 908.818972][ C0] ? __pfx_tun_rx_batched+0x10/0x10 [ 908.824252][ C0] ? tun_get_user+0x26ca/0x4350 [ 908.829206][ C0] ? rcu_is_watching+0x15/0xb0 [ 908.834043][ C0] ? lock_acquire+0x5f/0x350 [ 908.838723][ C0] ? tun_get_user+0x2373/0x4350 [ 908.843715][ C0] ? rcu_is_watching+0x15/0xb0 [ 908.848571][ C0] ? trace_irq_enable+0x3b/0x140 [ 908.853585][ C0] tun_get_user+0x2b04/0x4350 [ 908.858461][ C0] ? lock_release+0x4b/0x3c0 [ 908.863110][ C0] ? tun_get_user+0x26ca/0x4350 [ 908.868068][ C0] ? aa_file_perm+0x4ed/0x15f0 [ 908.872887][ C0] ? __pfx_tun_get_user+0x10/0x10 [ 908.878011][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 908.883439][ C0] ? preempt_schedule_common+0x82/0xd0 [ 908.888996][ C0] ? ref_tracker_alloc+0x341/0x4b0 [ 908.894257][ C0] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 908.899806][ C0] ? tun_get+0x1c/0x2f0 [ 908.904016][ C0] ? tun_get+0x1c/0x2f0 [ 908.908278][ C0] ? rcu_is_watching+0x15/0xb0 [ 908.913088][ C0] ? tun_get+0x1c/0x2f0 [ 908.917333][ C0] ? lock_release+0x4b/0x3c0 [ 908.921982][ C0] ? apparmor_file_permission+0x1f4/0x300 [ 908.927874][ C0] ? tun_get+0x1c/0x2f0 [ 908.932079][ C0] tun_chr_write_iter+0x113/0x200 [ 908.937181][ C0] vfs_write+0x612/0xba0 [ 908.941492][ C0] ? __pfx_vfs_write+0x10/0x10 [ 908.946341][ C0] ? __fget_files+0x2a/0x420 [ 908.950980][ C0] ksys_write+0x150/0x270 [ 908.955389][ C0] ? __pfx_ksys_write+0x10/0x10 [ 908.960306][ C0] ? rcu_is_watching+0x15/0xb0 [ 908.965150][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 908.971271][ C0] do_syscall_64+0x174/0x580 [ 908.975961][ C0] ? trace_irq_disable+0x3b/0x140 [ 908.981033][ C0] ? clear_bhb_loop+0x40/0x90 [ 908.985782][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 908.991721][ C0] RIP: 0033:0x7fba7559ce59 [ 908.996205][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 909.015886][ C0] RSP: 002b:00007fba737d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 909.024351][ C0] RAX: ffffffffffffffda RBX: 00007fba75816090 RCX: 00007fba7559ce59 [ 909.032380][ C0] RDX: 000000000000007a RSI: 00002000000004c0 RDI: 0000000000000003 [ 909.040417][ C0] RBP: 00007fba75632e6f R08: 0000000000000000 R09: 0000000000000000 [ 909.048452][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 909.056474][ C0] R13: 00007fba75816128 R14: 00007fba75816090 R15: 00007ffe9e642bb8 [ 909.064498][ C0] [ 909.067595][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 909.074902][ C0] CPU: 0 UID: 0 PID: 9010 Comm: syz.4.8911 Not tainted syzkaller #0 PREEMPT(full) [ 909.084196][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 909.094277][ C0] Call Trace: [ 909.097614][ C0] [ 909.100494][ C0] vpanic+0x56c/0xa60 [ 909.104504][ C0] ? __pfx__printk+0x10/0x10 [ 909.109114][ C0] ? __pfx_vpanic+0x10/0x10 [ 909.113654][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 909.118965][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 909.124214][ C0] panic+0xc5/0xd0 [ 909.127952][ C0] ? __pfx_panic+0x10/0x10 [ 909.132402][ C0] __warn+0x315/0x4c0 [ 909.136394][ C0] ? qdisc_pkt_len_segs_init+0x4b4/0xa30 [ 909.142044][ C0] ? qdisc_pkt_len_segs_init+0x4b4/0xa30 [ 909.147699][ C0] __report_bug+0x331/0x530 [ 909.152237][ C0] ? __local_bh_enable_ip+0xf8/0x130 [ 909.157542][ C0] ? tun_rx_batched+0x616/0x790 [ 909.162410][ C0] ? tun_get_user+0x2b04/0x4350 [ 909.167285][ C0] ? qdisc_pkt_len_segs_init+0x4b4/0xa30 [ 909.172967][ C0] ? __pfx___report_bug+0x10/0x10 [ 909.178027][ C0] ? qdisc_pkt_len_segs_init+0x4b4/0xa30 [ 909.183700][ C0] report_bug+0x16a/0x220 [ 909.188054][ C0] ? qdisc_pkt_len_segs_init+0x4b4/0xa30 [ 909.193696][ C0] ? qdisc_pkt_len_segs_init+0x4b6/0xa30 [ 909.199348][ C0] handle_bug+0x9c/0x200 [ 909.203629][ C0] exc_invalid_op+0x1a/0x50 [ 909.208159][ C0] asm_exc_invalid_op+0x1a/0x20 [ 909.213047][ C0] RIP: 0010:qdisc_pkt_len_segs_init+0x4b4/0xa30 [ 909.219315][ C0] Code: 00 00 02 00 31 ff e8 7b 0f 4b f8 81 e3 00 00 02 00 0f 85 fd 00 00 00 e8 2a 0b 4b f8 45 89 e7 e9 2c ff ff ff e8 1d 0b 4b f8 90 <0f> 0b 90 e9 ee fd ff ff 44 89 e7 89 de e8 ca 0c 4b f8 41 39 dc 0f [ 909.238930][ C0] RSP: 0018:ffffc90000007660 EFLAGS: 00010246 [ 909.245033][ C0] RAX: ffffffff897aeb03 RBX: 0000000000000003 RCX: ffff88807be21f00 [ 909.253044][ C0] RDX: 0000000000000100 RSI: 00000000fffffffe RDI: 0000000000000000 [ 909.261041][ C0] RBP: ffff88807a8d98c0 R08: ffff888033180067 R09: 1ffff1100663000c [ 909.269034][ C0] R10: dffffc0000000000 R11: ffffed100663000d R12: 00000000fffffffe [ 909.277062][ C0] R13: dffffc0000000000 R14: 1ffff1100f51b333 R15: ffff88809a79af18 [ 909.285093][ C0] ? qdisc_pkt_len_segs_init+0x4b3/0xa30 [ 909.290778][ C0] __netif_receive_skb_core+0x13aa/0x30b0 [ 909.296524][ C0] ? rcu_is_watching+0x15/0xb0 [ 909.301307][ C0] ? lock_release+0x4b/0x3c0 [ 909.305929][ C0] ? unwind_next_frame+0x8f/0x2550 [ 909.311065][ C0] ? unwind_next_frame+0x8f/0x2550 [ 909.316196][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 909.322278][ C0] ? unwind_next_frame+0x8f/0x2550 [ 909.327400][ C0] ? rcu_is_watching+0x15/0xb0 [ 909.332186][ C0] ? get_stack_info_noinstr+0x19/0x130 [ 909.337672][ C0] ? deref_stack_reg+0x18e/0x220 [ 909.342659][ C0] ? unwind_next_frame+0x1baf/0x2550 [ 909.347970][ C0] __netif_receive_skb_list_core+0x24d/0x830 [ 909.353974][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 909.358932][ C0] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 909.365459][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 909.370437][ C0] netif_receive_skb_list_internal+0x995/0xcf0 [ 909.376638][ C0] ? netif_receive_skb_list_internal+0x501/0xcf0 [ 909.383006][ C0] ? rcu_is_watching+0x15/0xb0 [ 909.387807][ C0] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 909.394530][ C0] ? lock_release+0x4b/0x3c0 [ 909.399147][ C0] napi_complete_done+0x299/0x730 [ 909.404185][ C0] ? __pfx_napi_complete_done+0x10/0x10 [ 909.409745][ C0] ? rcu_is_watching+0x15/0xb0 [ 909.414522][ C0] ? gro_receive_skb+0x70e/0xc30 [ 909.419481][ C0] gro_cell_poll+0x5ab/0x5d0 [ 909.424093][ C0] ? gro_cell_poll+0x175/0x5d0 [ 909.428872][ C0] __napi_poll+0xaa/0x330 [ 909.433225][ C0] net_rx_action+0x61d/0xf50 [ 909.437835][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 909.442966][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 909.448178][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 909.453480][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 909.458729][ C0] ? sched_clock+0x3f/0x60 [ 909.463173][ C0] handle_softirqs+0x225/0x840 [ 909.467972][ C0] ? do_softirq+0x76/0xd0 [ 909.472334][ C0] ? tun_rx_batched+0x185/0x790 [ 909.477224][ C0] do_softirq+0x76/0xd0 [ 909.481413][ C0] [ 909.484345][ C0] [ 909.487281][ C0] __local_bh_enable_ip+0xf8/0x130 [ 909.492412][ C0] ? tun_rx_batched+0x185/0x790 [ 909.497297][ C0] tun_rx_batched+0x616/0x790 [ 909.501999][ C0] ? trace_irq_enable+0x3b/0x140 [ 909.506950][ C0] ? irqentry_exit+0x218/0x8f0 [ 909.511724][ C0] ? __pfx_tun_rx_batched+0x10/0x10 [ 909.516949][ C0] ? tun_get_user+0x26ca/0x4350 [ 909.521828][ C0] ? rcu_is_watching+0x15/0xb0 [ 909.526606][ C0] ? lock_acquire+0x5f/0x350 [ 909.531257][ C0] ? tun_get_user+0x2373/0x4350 [ 909.536128][ C0] ? rcu_is_watching+0x15/0xb0 [ 909.540935][ C0] ? trace_irq_enable+0x3b/0x140 [ 909.545893][ C0] tun_get_user+0x2b04/0x4350 [ 909.550640][ C0] ? lock_release+0x4b/0x3c0 [ 909.555249][ C0] ? tun_get_user+0x26ca/0x4350 [ 909.560135][ C0] ? aa_file_perm+0x4ed/0x15f0 [ 909.564906][ C0] ? __pfx_tun_get_user+0x10/0x10 [ 909.569948][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 909.575347][ C0] ? preempt_schedule_common+0x82/0xd0 [ 909.580863][ C0] ? ref_tracker_alloc+0x341/0x4b0 [ 909.586011][ C0] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 909.591486][ C0] ? tun_get+0x1c/0x2f0 [ 909.595657][ C0] ? tun_get+0x1c/0x2f0 [ 909.599828][ C0] ? rcu_is_watching+0x15/0xb0 [ 909.604606][ C0] ? tun_get+0x1c/0x2f0 [ 909.608787][ C0] ? lock_release+0x4b/0x3c0 [ 909.613405][ C0] ? apparmor_file_permission+0x1f4/0x300 [ 909.619222][ C0] ? tun_get+0x1c/0x2f0 [ 909.623392][ C0] tun_chr_write_iter+0x113/0x200 [ 909.628428][ C0] vfs_write+0x612/0xba0 [ 909.632712][ C0] ? __pfx_vfs_write+0x10/0x10 [ 909.637516][ C0] ? __fget_files+0x2a/0x420 [ 909.642122][ C0] ksys_write+0x150/0x270 [ 909.646469][ C0] ? __pfx_ksys_write+0x10/0x10 [ 909.651331][ C0] ? rcu_is_watching+0x15/0xb0 [ 909.656106][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 909.662188][ C0] do_syscall_64+0x174/0x580 [ 909.666793][ C0] ? trace_irq_disable+0x3b/0x140 [ 909.671836][ C0] ? clear_bhb_loop+0x40/0x90 [ 909.676525][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 909.682427][ C0] RIP: 0033:0x7fba7559ce59 [ 909.686856][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 909.706473][ C0] RSP: 002b:00007fba737d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 909.714909][ C0] RAX: ffffffffffffffda RBX: 00007fba75816090 RCX: 00007fba7559ce59 [ 909.722930][ C0] RDX: 000000000000007a RSI: 00002000000004c0 RDI: 0000000000000003 [ 909.730933][ C0] RBP: 00007fba75632e6f R08: 0000000000000000 R09: 0000000000000000 [ 909.738918][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 909.746898][ C0] R13: 00007fba75816128 R14: 00007fba75816090 R15: 00007ffe9e642bb8 [ 909.754888][ C0] [ 909.758551][ C0] Kernel Offset: disabled [ 909.762888][ C0] Rebooting in 86400 seconds..