last executing test programs: 11.84041038s ago: executing program 3 (id=6109): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) recvmsg$kcm(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x40002000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a00)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x3}, {}, {0xfff1, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040011}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40c0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x48}, [@ldst={0x3, 0x0, 0x3}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff52}, 0x37) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r8, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 11.425948326s ago: executing program 3 (id=6116): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r1, &(0x7f0000000040), 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) recvmmsg(r0, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/51, 0x33}, {&(0x7f0000001080)=""/4096, 0x1000}], 0x2}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/203, 0xcb}, {&(0x7f0000002080)=""/4096, 0x1000}, {&(0x7f0000000280)=""/191, 0xbf}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x3, 0x10000, 0x0) 11.292937128s ago: executing program 3 (id=6120): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r1, 0x89e1, &(0x7f0000003280)={'vxcan1\x00'}) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)=ANY=[@ANYBLOB="1c00000022000106"], 0x1c}], 0x1}, 0x0) 11.129643631s ago: executing program 3 (id=6123): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x3b, &(0x7f0000000080)=""/138, &(0x7f0000000000)=0x8a) 11.109122226s ago: executing program 3 (id=6124): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000001c0)="51cf05bcaa50a03fd81731734a2fcd414a6ce1808e7d7cd3c70b3bd5fe0f8538bb817bcf9417", 0x26}, {&(0x7f0000000440)="623b5fd4fe5db7194ad79ef3a0925050ffcfd4d4426f924dbeaf7ee37f7ccc91703037e7f4414e1a5bdec9a0756857fbb502085dfb29b239d3fa54a7e5252a7dd2eb639208cfc1a4fe037cba54f5387cb4405c3b939d6f35562163214643f55f984b54bfedbb449d3ecddfbaf1e1672a339b0c463b2f5ef273e05a26db6eb4fd2fa29084e4b0cb5b48cc58dc78bac6304eb113c37493796ef5c07af6758324c1", 0xa0}, {&(0x7f0000000580)="57be3589d3a2191dd69f49e684100fd322e99f6bdba7eea6033369050435b402a0074c0545a3841764b34def8001903f1a2eced97f658f37", 0x38}, {&(0x7f0000000b00)="f669811a1e28f8a182eabb0775899379b0680b5bf103dddba339bf68239d2a67dfa86a3c692714b3cdf05a4190c2d6750e5bba1e40616bcf5d3b3486ce233b5516b2b608d8c61f33ca4330b215fc3cf1389b38a01e639b783e86f100200b8e1033816eeecaa9b75b17312817ed96815527f98359101918faf25117f50383ffc4cc95c2210734d8d2e455b09b56b5c4a994c44de0af4eba41d90a4bee1d9e2e48b12a5e0442e35c6faa56110d146267813f062f46aecb500fc89b778306d422aefae222fce32ecdf678b791e15fa97c6909e2033a89a35b25e0c1034143830f90617c48584f7d99ab40635bf58e7f2ed90c9fa9ab30ce8d65cb0d1a315abfe63f7fecff2c216a6cda56c9a56c8cf6563204c0d270052bf4a94a0fc0ab5c02", 0x11e}, {&(0x7f0000000c40)="4fad58aa1ada9415a541c3d561de9c893bf27529a774f2890a1d20d6e31c55cebb50639fef01f4388ff95cda1e5253c9a74e618783e0155de041bc01000000af94cac01a596c9356082373ab891d1f6cd687dbc72110ab7bf68ad2a6843019cdda2edf3d99105f405f20da8ae15e9e4dc66ab89c45c5565bc38a8c1d9c76c8265a8992f3c66132ea5f0e11c1719fef4b8aa5213027f2188026bcfcda97e130c7a67f3a834d46849a49ec5d669c7cc94fccaceb4e30dcc3aa68728f9d8762d73ebd44e4d92eef1698acf7ab0512f4", 0xce}, {&(0x7f0000000840)="e22d0e77d0133d29b5e9a4165015cc6497f649a46a1fa2052e7ed531913a04f484c7a38f085c31e8148e93078543672d67613d0d", 0x34}, {&(0x7f0000000880)="5165b5f988920868bab23f607adc7f921922fc18cb995a51ca972d09c716aa49aa6d3e671ad97ced1a0f10505a349f33066ea44ebc857d8764b4959cb6e1d3883e3b6898346eec7451254fa4ca24c8db2360ffeb65504e6e1de94b4f5a9a7ea03b71814729a9f28b5513859e7323e301597cf779d3c8e2ae5c9a8da13c", 0x7d}, {&(0x7f0000000900)="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", 0xfd}, {&(0x7f0000000200)="38c06fefd944286daa564c71c1bc4bf26493b4681c7071fb4e718963d654934bb3924e966dedd2ef6227feb0b71458dad5de43ede5a501b5de8a4b4c26622c32f7ee600a4a45fef2539019fe00f92453a5218e9cda096e97cef6fcc3623ee06b92bceb090da83f9b62e28e04139b49aff6084400c0f255da4dbca79f00", 0x7d}], 0x9, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000300)=""/270, 0x10e}], 0x1}, 0x40002102) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c0100001a0013"], 0x16c}, 0x1, 0x0, 0x0, 0x200000d0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c010000100001000000000000000000e0000002000000000000000000000000e000000100000000000000000000000000000000fffc00000a000009000000007625", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa000000000000000000000000000000003c000000fc010000000000000000000000000000fdffffffffffffff000000000000000080000000000000000000000000000000000000000000000002000000000080000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002cbd7000000000000200000000000000000000004c001400686d616328736861312d6e656f6e2900"/244], 0x13c}}, 0x4854) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x8, 0x4, 0x4, 0x4}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000200)={r3, &(0x7f00000000c0), 0x0}, 0x20) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$netlink(r5, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000000080)={0x10, 0x3b, 0x1}, 0x10}, {&(0x7f00000000c0)={0x10, 0x0, 0x1}, 0x10}], 0x2}, 0x0) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000040)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190040000800000000000000ffff0800040000000000000000", 0x39}], 0x1) 10.160417839s ago: executing program 3 (id=6137): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x24, 0x4, 0x8, 0x201, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5}]}, 0x24}}, 0x0) syz_emit_ethernet(0x7a, &(0x7f00000002c0)={@remote, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "92c01f", 0x44, 0x2f, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @loopback}, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}}}}}}}, 0x0) 5.951156702s ago: executing program 0 (id=6166): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSCAUSE(r1, 0x89e1, 0x0) bind$rose(r1, &(0x7f00000000c0)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x1, @bcast}, 0x1c) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) 5.883068844s ago: executing program 0 (id=6167): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01000000000000000000010000000900010073797a3000000000a40000001f0a01000000000000000000010000000900010073797a3000030000090002003f20000000000000780003"], 0x11c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1400800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r2, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x10) (async) r3 = socket(0x10, 0x3, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x4, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}}}]}, 0x48}}, 0x0) getpid() r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@bridge_delneigh={0x30, 0x1e, 0x1, 0x0, 0x0, {0x7}, [@NDA_LLADDR={0xa}, @NDA_MASTER={0x8, 0x9, 0x9}]}, 0x30}}, 0x0) (async) socket$isdn(0x22, 0x2, 0x0) (async) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r7, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) 5.4948249s ago: executing program 0 (id=6172): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_bpf={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x83, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x10000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) recvmmsg(r3, &(0x7f00000060c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10094, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r9], 0x1c}}, 0x840) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x40}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x6}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x44}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x50}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) 5.444642407s ago: executing program 1 (id=6173): r0 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r1, 0x0) (async) sendmmsg$sock(r1, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, 0x0, &(0x7f00000001c0)) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000d40)=@nat={'nat\x00', 0x2, 0x5, 0x4b0, 0x0, 0xf0, 0xffffffff, 0x0, 0x310, 0x3e0, 0x3e0, 0xffffffff, 0x3e0, 0x3e0, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'batadv0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x20, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510) 5.055575699s ago: executing program 4 (id=6176): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a0900000000000000001d020000000900010073797a30000000000900030073797a32"], 0x54}}, 0x0) (async, rerun: 32) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) (rerun: 32) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000016c0)=""/4086, 0xff6}, {&(0x7f0000003700)=""/4087, 0xff7}, {&(0x7f0000000280)=""/58, 0x3a}, {&(0x7f00000026c0)=""/4083, 0xff3}, {&(0x7f0000000440)=""/209, 0xd1}, {&(0x7f0000004700)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/43, 0x2b}], 0x7}, 0x32120) 4.391834734s ago: executing program 2 (id=6177): socket$igmp(0x2, 0x3, 0x2) (async, rerun: 32) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async, rerun: 32) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') (async) unshare(0x6a040000) (async) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x5c, @local, 0x4e22, 0x3, 'rr\x00', 0x68, 0xffff9566, 0x72}, 0x2c) (async) r2 = socket$kcm(0xa, 0x2, 0x0) (async, rerun: 64) r3 = socket$inet_sctp(0x2, 0x5, 0x84) (rerun: 64) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa0100fe, 0x4e24, 0x3, 'lc\x00', 0x5, 0x8}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e20, 0x10000, 0x2, 0x2}}, 0x44) (async) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) (async) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x400448e3, &(0x7f00000000c0)) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4f23, 0x6, @loopback, 0xfffffffc}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x20000000) socket$inet(0x2, 0x3, 0x2) r5 = socket$kcm(0x10, 0x2, 0x4) (async, rerun: 32) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000ac0)={0x3, &(0x7f0000000a80)=[{0x48, 0x40}, {0x20, 0x1, 0x0, 0xfffff010}, {0x16, 0x7, 0x2, 0x6}]}, 0x10) (async) sendmsg$kcm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000140097fa7059ae08060c040002ff0f0200000000000001870182fa73a69d35b5cca84708f7abca1b4e7d06a6bd7c493872f750375ed08a560400000003c48f93b82a03000000469e", 0x4c}], 0x1}, 0x0) (async) r7 = socket(0x2a, 0x2, 0x0) (async, rerun: 32) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) (rerun: 32) getsockname$packet(r7, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) sendmsg$nl_route_sched(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000005e00)=@newtfilter={0x52c8, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xfffa, 0xfff3}, {0x0, 0xffe0}, {0x10, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0x4}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5, 0x51, 0xa}]}}, @filter_kind_options=@f_fw={{0x7}, {0x5274, 0x2, [@TCA_FW_ACT={0x3b60, 0x4, [@m_tunnel_key={0x160, 0x9, 0x0, 0x0, {{0xf}, {0x68, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast1}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x59, 0x9, 0x0, 0x54, 0x800}, 0x2}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private2}]}, {0xc9, 0x6, "24ed56004b76f33498b6ad47c276515b94c29ae55f8cf613e70897c47d61fcf33aef7552ab1c209fcd620418db832e19213ff2a00e312ea06f8540ecb37ce56fc3a703b7073c6a460ef2c84c36a9e5bf918318a2620559a49465e623726827042fd83ddb00468e815518a25d5c5e864144e14bfe9b1ba6fcd2b8e7dee42af1c5df0b596caf9181a67668edec1a61ebc6b9305cab4dd5b0c048a5d710446c6489ca9fb4c5a1f31e933109718ddbadbfd22fac4dee2f1d0579b43d38966f48f33b9e3735b819"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_skbedit={0xf8, 0x1d, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x7}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x2}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}]}, {0xb1, 0x6, "aaa2e24a069ea1882f9da96e2fd57f4e2f8189fdfe93624dea0519420aa62318a9c434b0701a3b781c52213c0a1cc5218a4cc0c1a463b483c818c143018605a91becfef8bedee429a67a4cf46970e9216060c7e38e8abc7c6480bec8aae020f9bbba750bec12a31c79969b5ac3553663e4dba7d0a61426e142927fbdeb2ce36914b60e1cd16b110374162c3d4b88a1987c12aad70fbd1e86675c40e0abcb06d98885cabe9aa6f3a815990db002"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_skbmod={0x188, 0x5, 0x0, 0x0, {{0xb}, {0xa4, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x2}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7, 0xb25, 0x10000000, 0x2a4, 0x2}, 0x8}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x1, 0x0, 0x6, 0x5}, 0x10}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_SMAC={0xa, 0x4, @random="661e61fdee6d"}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x1}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0xe, 0x9, 0x5, 0x80000001, 0xe}, 0xb}}]}, {0xb9, 0x6, "5fd9c55e562ddedbf799693d803b358d37994a6997af962908e3b0a237643573c96e62fa58701f97863cb4230f7c8ff79b02b0582120eb0437b66b092b412687920d090160c6e15feffc0e3fcb61e078bef7d38fea3ba2a41c5a69463f4c758d1c16990991e3c7a577790747b31f7c3384a8bb096246c9909e289a57dc218e7ee76d8073d4e15103245590b3a100e8182086bc49355d671e02fdab3323dc0cff7fc5bfe71d5c34d2488dec4b0207933d9ddbfc5217"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_skbedit={0x168, 0x1f, 0x0, 0x0, {{0xc}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x6}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff2, 0x8}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x8, 0x1, 0x2, 0x401}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x400}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x4}]}, {0x102, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_gact={0x140, 0x10, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0x6aa, 0xffffffffffffffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x55f1, 0xc657, 0x10000000, 0x2, 0x4}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x5b6, 0x4}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1505, 0x20000000}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1d28, 0x4}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x15ea, 0x10000000}}]}, {0xbf, 0x6, "24d951c3f10053013e02fce84cec77cae4afb3ac8cd44631d59a75a1ceac2be16fb84276429b2df6568521544695349c506351d3dcfabcc58dca8db4090f5107a043a9571865e1e75eeb1c326662e53392a240e6eee3f3046336a1893f60d7c9327ae7019c7a3a89df2f80d76d182440d9219ef1e2024afb2fd050065a1bdffb969655107c902e10ad51b218b9397fd394396e6f3f20b120f1dfa27a4717702dd9426e1e3835fa2e7a1fd966f11de1103cf6b743f2f907a26634d5"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}, @m_pedit={0x3174, 0x1e, 0x0, 0x0, {{0xa}, {0x3074, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4c, 0x5, 0x0, 0x1, [{0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}, @TCA_PEDIT_KEYS_EX={0xdc, 0x5, 0x0, 0x1, [{0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_KEYS_EX={0x184, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x7}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x54, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}]}, @TCA_PEDIT_PARMS_EX={0xf10, 0x4, {{{0x5, 0x5, 0x7, 0x7, 0x4}, 0x5, 0xc, [{0x2, 0x8001, 0x43e1, 0x1, 0x603a, 0x2}, {0x80000000, 0x8, 0x7fff, 0x7, 0x0, 0x7fffffff}, {0x200ff, 0xdd, 0xff, 0xf7, 0x7fff, 0x6}, {0x8, 0xd, 0x2, 0x8, 0x1000, 0x9}, {0x3a2e, 0x5, 0x3, 0xd, 0x3, 0x81}, {0xffff, 0x0, 0x6, 0xf8c, 0x9, 0xf0}, {0xc, 0x4, 0x1, 0x3, 0x80, 0xffffff01}, {0x2, 0x5, 0xbe3, 0xcc, 0xc, 0x1}, {0x4, 0x145, 0xffff8946, 0x100, 0x4, 0x3}, {0x1ff, 0x5, 0xc79, 0x9, 0x60, 0x8}]}, [{0x1, 0x100, 0xc, 0xffff, 0xdba, 0x6}, {0x200, 0x5, 0x3, 0x4, 0x7b, 0x5}, {0x0, 0x3, 0x8, 0x1, 0x7f, 0x7ff}, {0xf4, 0x8001, 0x1, 0x10001, 0x6, 0xf0fc}, {0x4, 0x9, 0xc, 0x3, 0x8000, 0x798a}, {0x9, 0x6, 0x80000000, 0x9, 0x7e1b, 0x1}, {0x1400000, 0x0, 0x6, 0x7c, 0x4, 0x80000001}, {0x0, 0xd, 0x1, 0xcd86c19, 0x5, 0xcbb}, {0x8, 0xa572, 0x8, 0x3, 0x4e, 0x1}, {0x6, 0x8, 0x9, 0x8, 0xff}, {0x9, 0x10000, 0x3, 0x8, 0x7, 0x990}, {0xfffffffa, 0x7, 0xfffff171, 0x3, 0x7, 0x3}, {0xbb4, 0x800, 0x9, 0x9, 0x1, 0x89d3}, {0xfffffffd, 0x4, 0xc08, 0x1, 0x7, 0x6}, {0x9, 0x8, 0x1, 0x0, 0x0, 0x3}, {0x3, 0x101, 0x9, 0x8000, 0x1, 0x20}, {0x2, 0x101, 0x26f, 0x1, 0x6}, {0x8, 0x7fff, 0xd, 0x3, 0x5, 0x10001}, {0xe, 0x6, 0x7, 0x401, 0xfffffff8, 0x1}, {0x2, 0x0, 0x1, 0x4, 0x9, 0x9}, {0x4, 0x8, 0x3, 0x2, 0x0, 0x7}, {0x3, 0xb3, 0x1, 0x3, 0x8, 0x68a}, {0x0, 0xdfb8000, 0x8000, 0x3000, 0x101, 0x7}, {0x1, 0x9, 0x9, 0x7457, 0x101, 0x5}, {0x3, 0x4, 0xfffffffc, 0x400, 0xfff, 0x3}, {0x0, 0x604, 0xc70, 0x0, 0x9, 0x3}, {0x135, 0x4, 0x6, 0xfffff76e, 0x1000, 0xa}, {0x0, 0xffffffff, 0x498, 0x9, 0xe0000000, 0x8}, {0x7f, 0xdaf, 0xfffffff1, 0xbf66, 0x8, 0x10}, {0x80000001, 0x1, 0xd3c, 0x2, 0x8, 0xffff}, {0x2, 0x8, 0x5, 0x101, 0x3, 0x1}, {0xc, 0xff, 0x6, 0x0, 0x4}, {0x8b6, 0x2, 0xf89, 0x5, 0x3, 0x80}, {0x6, 0x40, 0x6, 0x3108e139, 0x7f, 0x7}, {0x4, 0x7, 0x9, 0x1938, 0x6, 0x1}, {0x7, 0x81, 0x9, 0x5f79, 0x8, 0x6}, {0x4, 0xba, 0x7, 0x1, 0x8, 0x3}, {0x2, 0x7, 0x2, 0x7, 0x1, 0x6}, {0xfffffff9, 0x8, 0x5, 0x7, 0x4, 0x5}, {0x5, 0xd, 0x8, 0x0, 0x4, 0xe5}, {0xb, 0xfffffffa, 0x48, 0x9, 0x8, 0x3ff}, {0x5, 0xff, 0x3, 0x3, 0x7, 0x7}, {0xc21f, 0x5, 0x1, 0x4, 0x8, 0x2}, {0x4, 0x8, 0x4, 0x7, 0x0, 0x4}, {0x2, 0x5, 0x0, 0x6, 0x2, 0xd08}, {0x7, 0xffffffff, 0x0, 0x9a, 0x2, 0x6}, {0x9a8e0004, 0x100000, 0x9, 0x8000, 0x8000, 0x9ab}, {0x6, 0x6000000, 0x1, 0x8, 0x2, 0xa8ff}, {0x10, 0x8, 0x5, 0x3, 0xa, 0x200}, {0x5, 0x8, 0x9, 0x5, 0x3, 0x5}, {0x3, 0x2, 0x9, 0x5, 0x62c, 0xdc}, {0x7fffffff, 0x5, 0xee, 0x1, 0x8, 0x2}, {0x3ff, 0x8, 0x1, 0x0, 0x8, 0x6}, {0x4, 0x7fffffff, 0xffffffff, 0x3, 0x2, 0x7}, {0xfffff001, 0x22a, 0x81, 0x9, 0x2, 0x3}, {0x800, 0x0, 0x6, 0x6, 0x0, 0xa}, {0x0, 0x3, 0x2, 0x9, 0x4, 0x6}, {0x8, 0xbb87, 0x6, 0x7, 0x1, 0xef0}, {0xcf2, 0x0, 0x5, 0x3d, 0x10000, 0x581}, {0x40, 0xa4af, 0x2, 0x7f, 0x28b755b7, 0x10}, {0x7f45, 0x4, 0x85c, 0x9, 0x7, 0x4}, {0x3, 0x8, 0xc0000000, 0x1, 0x2}, {0x2, 0x0, 0x1, 0x0, 0x9, 0x7}, {0x6, 0x5, 0x1, 0xb, 0x9, 0x7}, {0x3, 0x9, 0x5, 0x101, 0x2, 0xf70}, {0xfffffffa, 0x6, 0x6, 0x0, 0x2, 0xa}, {0x3, 0xfa, 0x10001, 0x3, 0x3, 0xfffffff9}, {0x6, 0x7, 0xa, 0x0, 0x7ff, 0xda}, {0x10000, 0x3, 0xfffffffe, 0x4, 0xfffffffa, 0xffffffff}, {0x97, 0x8, 0x1ff, 0x5fb4, 0x2, 0x3}, {0x401, 0x7ff, 0x80000000, 0x5ad6, 0x9, 0x3}, {0x2, 0x0, 0x9, 0x6, 0x8, 0xe}, {0x6, 0x4, 0x400, 0x1ff, 0x4, 0x2}, {0x4, 0x1, 0x41c, 0x1, 0x6, 0x6}, {0x3, 0x14, 0x7ff, 0x7, 0xf7e, 0x1ff}, {0xfffffff3, 0x0, 0x8, 0x6, 0x6, 0xfffffffb}, {0x1848, 0x6, 0x40, 0xfffffffa, 0x35f, 0x80000001}, {0x8, 0x0, 0x2, 0x9d, 0x1, 0xd8b8}, {0xf, 0xc, 0x4, 0x5, 0xac2, 0x8}, {0xfffffff9, 0xffe, 0x6, 0x8000, 0xd}, {0x401, 0x5, 0x2, 0x3, 0x40, 0x2}, {0x9, 0xffffffff, 0x1, 0x4, 0x7, 0x8}, {0x8, 0xc, 0x1000, 0x6, 0x3, 0x2}, {0xe0000000, 0x9, 0x2, 0x5, 0x3, 0x80000000}, {0x5, 0x800, 0x125bd57a, 0x9437, 0x7ff, 0x10001}, {0xffff8af7, 0x5, 0x48000000, 0x6, 0xa5, 0x4}, {0x3, 0x1, 0xff, 0x3ff, 0x7f7b, 0x8}, {0x7, 0x0, 0x6, 0xfffff800, 0x6, 0x3ff}, {0x4, 0x461, 0xb, 0x4, 0x6, 0x80000000}, {0x485, 0x0, 0xd0000, 0x81, 0x5, 0x3}, {0x3, 0xfffffffd, 0x4, 0x9, 0x1, 0x3}, {0x0, 0x4, 0x1d360000, 0x86, 0x9, 0x2}, {0x2, 0x73, 0x2a96, 0xfffffff7, 0x5, 0x2}, {0x8000, 0x9, 0x8, 0x5, 0x2, 0xc25}, {0x200, 0x9, 0x3, 0x7ff, 0x9, 0x6}, {0x7, 0x4, 0x3, 0xffffffff, 0xfffffff9, 0x6}, {0x9, 0xfffff70d, 0x5, 0x9, 0x7685, 0x19}, {0x4, 0x5aa, 0x6fb9c99a, 0x8, 0x5, 0x9e4e}, {0x9, 0x2040, 0xd50e, 0x5, 0x463b275e, 0x4}, {0x8, 0xdc8, 0x7, 0x8001, 0x2, 0x8}, {0x5eb, 0x6, 0x400, 0x7, 0x7, 0x8}, {0xf, 0x9, 0x4, 0xac, 0xb, 0xd4}, {0x4, 0x200, 0x3, 0x4, 0x7, 0x7}, {0x7, 0xffffffc0, 0x7fffffff, 0x6, 0x0, 0x80000000}, {0x0, 0x0, 0xfff, 0x7f, 0x6, 0x1}, {0x6, 0x4, 0x31f94a80, 0x1c, 0xc82, 0x5}, {0xfffff27d, 0x7, 0x6, 0x800, 0x39, 0xfd36}, {0xe0, 0x8, 0x59cc, 0x4, 0x3, 0x1}, {0x3, 0xc39b, 0x8, 0x2, 0x9, 0x7}, {0x8, 0x1ff, 0x3, 0x0, 0x4, 0x1}, {0x3, 0x7, 0x5, 0x179, 0x2, 0x3}, {0x9, 0xd, 0x3, 0x1, 0x8, 0x3}, {0xfff, 0x6, 0x1, 0x3, 0x0, 0x2}, {0x10, 0x1ff, 0x6, 0x9, 0x3, 0x7}, {0xfffffe01, 0xfffffff7, 0x0, 0x8, 0x8, 0xffffffff}, {0xc, 0x7fff, 0x22d, 0x4800000, 0x1, 0x4}, {0x6, 0x9, 0xfffff801, 0x3, 0x400, 0x8}, {0xfffffffc, 0x95d9, 0x5e2b, 0x40f, 0x3ff, 0xfffffffd}, {0x0, 0x1, 0x5, 0x0, 0x90, 0xa0e4}, {0x1, 0x4, 0x4, 0xfffffffe, 0x101, 0xb95c78ff}, {0x0, 0x7fffffff, 0x6, 0x8, 0x8000, 0x71cfb2e3}, {0x9, 0x4, 0x10001, 0x3, 0x5, 0x8}, {0x6, 0x5, 0x9, 0x6, 0x0, 0x2}, {0x3, 0x7, 0x2, 0x9, 0x0, 0xfffffffd}, {0x9, 0x4, 0x3, 0x6, 0x3, 0xfffffffa}, {0x100, 0x0, 0xb, 0x5, 0x7, 0x10}, {0x3, 0x8, 0x186d3c7f, 0x5, 0x7, 0x2}, {0xffffff43, 0x401, 0x2dcf, 0x4000000, 0x6a28, 0x7}], [{0x1}, {0x5}, {0x3}, {0x5, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1, 0xc5aefebfbad63652}, {0x0, 0x1}, {0x0, 0x3d908c653c817a8b}, {0x4, 0x6edcee2960638faf}, {}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x1, 0x1}, {}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x1}, {}, {0x5}, {0x2}, {0x3}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x5, 0xf210da10fef4edeb}, {0x4, 0x1}, {0x3, 0x3}, {0x2, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x5}, {}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x3}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {}, {0x3, 0x1}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x3}, {0x5}, {0x4}, {0x4}, {0x3, 0x1}, {0x5}, {0x4, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3}, {0x3, 0x1}, {0x4, 0x1}, {0x6}, {0x2, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x1}, {0x6, 0x1}, {0x4}, {0x5}, {0x5}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x2, 0x1}, {}, {0x5, 0x1}, {0x4}, {0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x6}, {0x5, 0x1}, {0x2}, {0x2}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x5, 0x1}, {}, {0x4}, {0x2}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x3}, {0x4}, {}, {0x2}, {0x1}, {0x4, 0x1}, {0x2}, {0x2, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5}, {0x5, 0x93a38f1f4b6980d4}], 0x1}}, @TCA_PEDIT_PARMS={0xec8, 0x2, {{{0x9, 0x800, 0x8, 0x1, 0x49f8a298}, 0x9, 0xa3, [{0x9, 0x2, 0x4, 0x1, 0x4, 0x530a}, {0x40, 0xef3c, 0x2, 0x6, 0xec, 0x4}, {0x1, 0x9, 0x8, 0x6, 0x19, 0x5}, {0x0, 0x2d0, 0x2, 0x0, 0x3, 0xffff}, {0x0, 0xc07, 0x81, 0x6, 0x1, 0x7fffffff}, {0x101, 0x400, 0x6, 0x3, 0x3, 0x7f}, {0x8, 0x7d9e, 0x7, 0x5c8, 0x81, 0x200}]}, [{0x2, 0x7, 0x5, 0xc, 0x7, 0x7}, {0x4, 0x1d, 0x400, 0xb, 0x1, 0x9}, {0xb, 0x2, 0x4, 0xb3, 0x9, 0x548}, {0x85, 0x0, 0x8001, 0x7, 0x4c}, {0x7fffffff, 0x4, 0x6b6, 0xff, 0x7, 0x5}, {0x592f, 0xffff, 0x4, 0x6, 0x3ff, 0x3}, {0x5, 0xc, 0x7, 0x2, 0xdb87, 0x1}, {0x1ff, 0x5, 0x2, 0x3, 0x0, 0x9}, {0x40, 0xfff, 0x74a627a3, 0x4, 0x0, 0x9}, {0x5, 0x5, 0x5, 0x2, 0x800, 0x7}, {0xff, 0x401, 0xfffffffc, 0x43ff, 0x200, 0x1000}, {0x8, 0x3, 0xa, 0x8, 0x2, 0x3}, {0x7, 0x7, 0x1, 0xf, 0x2, 0x16e94bdc}, {0x6, 0x3, 0x6, 0x9, 0x8, 0x4}, {0x7ff, 0x7fff, 0x4, 0x5, 0x6, 0x2}, {0x240, 0x6, 0x7, 0xfff, 0x4, 0xa}, {0x7cae, 0x0, 0x5, 0xb, 0x3, 0x2}, {0x452, 0x0, 0x2, 0x0, 0x8}, {0xaa67, 0xd, 0x81, 0x9, 0x0, 0xcb}, {0x6, 0x7, 0x7, 0xb72, 0x1, 0xfffffff2}, {0x80000000, 0xf, 0x6ac4bac5, 0x0, 0x23d9, 0x8}, {0xcce, 0x1ff, 0x0, 0xffffffeb, 0x5, 0xa}, {0x9, 0x7, 0x401, 0xffffffff, 0x101, 0x7}, {0x8, 0x2, 0x6, 0x10000, 0x3, 0x8001}, {0x4, 0x42a2c053, 0x10001, 0x5, 0x5, 0xfffffffc}, {0x9, 0x4, 0x1, 0x7, 0x9, 0x8}, {0xffffffc0, 0x8000, 0x3, 0x1, 0x8, 0x9}, {0xfff, 0x92, 0x4, 0x0, 0x5, 0x4}, {0x3, 0x4, 0x2, 0xf9, 0x2, 0x6}, {0x8, 0x5, 0x2, 0x1, 0x7ff, 0x1000}, {0x5, 0x5d00956c, 0x8, 0x4, 0x3, 0xfd1}, {0x200, 0x2, 0x5, 0x60e, 0x1000, 0x1}, {0x0, 0xffff7f8e, 0x7fff, 0x6, 0x9, 0x2}, {0xd0, 0x2, 0x2, 0xf2e0, 0x800, 0xd05d}, {0x80000001, 0xfff, 0x6, 0x8, 0x2, 0x8}, {0xff, 0x2, 0x7f, 0x0, 0x10001, 0x8}, {0x0, 0x6, 0x9, 0xa4, 0x8, 0x10001}, {0x800, 0x3, 0x18, 0x7, 0x2e, 0xe11a}, {0xc, 0x5, 0x800, 0x5, 0x0, 0x1ff}, {0x7fff, 0x1, 0xaaa4, 0x8, 0x5, 0x1}, {0xffffffff, 0x4b, 0x8, 0x3, 0x7, 0x61}, {0x80000001, 0xffffff22, 0x2, 0x6, 0xb, 0x400}, {0xe1, 0xcbfc, 0x7, 0xfffffffc, 0x5, 0x1e4}, {0xbb2, 0x7, 0x3, 0x5, 0x10004, 0xffffffff}, {0x3ff, 0x0, 0x7, 0x3, 0x8, 0x9}, {0x6, 0x8, 0x0, 0x2, 0xfffffffb, 0x2}, {0x7f, 0x4, 0x7fffffff, 0x22c, 0x4, 0x3}, {0xffff, 0x1, 0x672, 0x91, 0x8, 0x5}, {0x1, 0x7, 0xdd, 0x4, 0x0, 0x8001}, {0x30e, 0x101, 0x5d9, 0x5, 0x5, 0x3}, {0x5, 0xfffffffc, 0x9, 0x80, 0x5, 0x2}, {0xe, 0x1, 0x3521cb88, 0x7, 0x3, 0x630}, {0x4, 0x401, 0xfffffff7, 0x101, 0x7, 0x10}, {0x7, 0x9, 0x4, 0x80, 0x5, 0x8}, {0x9, 0x0, 0x0, 0x6, 0x0, 0x3ad}, {0xa, 0x1, 0x401, 0x70d, 0xfffffffd, 0x2}, {0x9, 0x9, 0x8, 0x0, 0x80000000, 0x2}, {0x789, 0x1, 0xffffff01, 0xffffff80}, {0x7f, 0x401, 0x4c8, 0xf08, 0x5, 0x4}, {0x2, 0x3, 0x200, 0x2, 0x2, 0xb}, {0x8001, 0x0, 0x101, 0x5, 0x0, 0x9}, {0x2, 0x0, 0x7, 0xfffffff8, 0x5, 0x7f}, {0x2, 0x9, 0x6, 0x1, 0x4, 0x7}, {0x0, 0x3800, 0x9, 0x71c, 0x7, 0x83}, {0x3, 0x7, 0x6, 0x1, 0xff, 0xb}, {0x8, 0x636, 0x5, 0x7, 0x7fffffff, 0x3}, {0x7f, 0x1, 0xff, 0x80000000, 0x0, 0x2}, {0x5, 0x10000, 0xbeb, 0xe9e, 0x10000}, {0x8, 0x7, 0x1, 0x3, 0x8, 0x7c}, {0xaf, 0x6de, 0x80000001, 0x0, 0x3, 0x4}, {0x3, 0xfffffffb, 0x314, 0x3667, 0xd, 0x9}, {0x4, 0x4, 0x5, 0x6, 0x7fff, 0x5}, {0x0, 0xba, 0x200, 0xf, 0x8, 0xfc64}, {0x80000000, 0xfff, 0x6, 0x2, 0x3, 0x7}, {0x1, 0x4, 0x7, 0xd3, 0x2, 0xce3}, {0x8, 0x6, 0x4, 0x0, 0x3, 0x1}, {0x80000001, 0x10000, 0x2, 0xbf7, 0x8000, 0x10}, {0x8, 0x1, 0x800, 0xffffff3a, 0x7, 0x29000000}, {0x5, 0x3e1e, 0x100, 0xfffffff3, 0x6, 0xcfdcaefc}, {0x6, 0xfffffffa, 0x30, 0xc9, 0x80000001, 0x5}, {0x5, 0x1, 0x6, 0x7, 0x81, 0x400}, {0x7, 0x41, 0x0, 0x44, 0xba, 0x6}, {0x7, 0x40, 0x8, 0xfffffff4, 0x8, 0x1}, {0x9, 0x40, 0x8, 0x1, 0xc41, 0x4270}, {0x7, 0x1, 0x5, 0x7ff0, 0x40}, {0x5, 0x5, 0x0, 0xc, 0x8, 0x8d5}, {0x0, 0x6, 0x4d0, 0x2, 0x7fff, 0x7fffffff}, {0x8, 0x81, 0x401, 0x80000000, 0x0, 0x1}, {0x9, 0x7, 0x5, 0x1, 0x10001, 0x4}, {0x4, 0x2, 0x7, 0x3, 0x401, 0x401}, {0x5, 0x1, 0x5, 0x9, 0xfffff001, 0x6c02}, {0x9, 0x8, 0x81, 0x8, 0x9, 0x5}, {0x1, 0x8, 0x5, 0x81, 0x89a0, 0x800}, {0x400000, 0x2d07, 0x1, 0xc12, 0x800, 0x5}, {0x9, 0x7fff, 0x5, 0x8, 0x2, 0x6}, {0x101, 0x7, 0x60, 0x9, 0x8, 0x5}, {0x83a8, 0x2, 0x8, 0x800003, 0xffffffff, 0x3}, {0x6, 0x3, 0x5, 0x5, 0x7, 0x2}, {0x467d, 0x800, 0x6, 0x8, 0xfffffff8, 0xb3d}, {0x4, 0x7f, 0x2, 0x8, 0xfff, 0xffffffff}, {0x1, 0x1, 0x1ff, 0x2, 0x0, 0xd}, {0x7fffffff, 0x7d5, 0x9, 0x6, 0x3, 0xbd9}, {0x7, 0x1, 0x3ff, 0x7f, 0x4, 0x5}, {0x3, 0xe4, 0x5, 0x0, 0x9, 0xc}, {0xffff, 0x9, 0x5, 0x4, 0xc}, {0xa, 0x8, 0xd, 0x80000001, 0x2, 0x753}, {0x2, 0x3ff, 0x0, 0x15, 0xaffe, 0x2}, {0x6, 0x5, 0x33d0, 0x1000, 0x94e8, 0xf}, {0x7, 0x4, 0xc5, 0x7fffffff, 0x9, 0x80000001}, {0x6, 0x7, 0x6, 0x4, 0x8000, 0xd5}, {0x2fae, 0x0, 0xdf54, 0x8, 0x0, 0x2b1}, {0x40, 0x8, 0xb6, 0x7, 0x7, 0xfc77}, {0xffffffff, 0x1, 0x3, 0x6, 0x2, 0x8}, {0x6, 0x4, 0x5, 0x7fffffff, 0x4, 0x6}, {0x3, 0x4, 0x2, 0xe49, 0x9, 0x2}, {0x0, 0xfffffff7, 0x4, 0x7ff, 0x3ff}, {0x0, 0x101, 0x3, 0x5, 0x5, 0x1}, {0x8, 0x880, 0x8, 0x3, 0x921, 0x6}, {0xc, 0x3, 0x9, 0xc, 0x6, 0x80000000}, {0x6d, 0x5, 0x8, 0x9, 0x100, 0x7}, {0x9, 0x8, 0x2, 0xe2, 0x5, 0x6}, {0x1, 0x6, 0x400, 0x0, 0x3, 0x200}, {0xb5, 0x7647, 0x1000, 0x8, 0x3, 0x674d}, {0x1, 0x1, 0x2, 0x0, 0x7fffffff, 0x3ff}, {0x8, 0x8, 0x0, 0x6, 0x2, 0x200}, {0x3, 0x401, 0x4, 0x8001, 0xfffffff7}, {0x0, 0x9608, 0x3ff, 0x1, 0x1}, {0x8f4, 0x5, 0x9c, 0x6, 0x6c5ef718, 0x5}], [{0x5}, {0x2}, {0x3, 0x1}, {0x0, 0x1d4277ea79d82e5e}, {0x3, 0x1}, {0x2}, {0x2, 0x1}, {}, {}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x3}, {0x2, 0x1}, {0x0, 0xd9c9e9684c24a7d8}, {0x1}, {0x4}, {0x2}, {0x2}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {}, {0x5}, {0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0xecbd1496216c20b4}, {0x3}, {}, {0x2, 0x1}, {0x2}, {0x1}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x4}, {0x4}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {}, {0x3, 0x1}, {0x1, 0x1}, {0x2}, {0x2}, {0x0, 0x1}, {}, {0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x5}, {}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x3}, {0x3}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x2}, {0x4, 0x1}, {}, {0x3}, {0x2}, {0x0, 0x1}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {}, {}, {0x4}, {0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x2}, {0x4, 0x1}, {0x2, 0x2af9c7e656fef437}, {0x0, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x2, 0x1}, {0x1}, {0x4}, {0x3, 0x1}, {0x3}, {}, {0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4, 0x1}], 0x1}}, @TCA_PEDIT_PARMS_EX={0xe80, 0x4, {{{0xc, 0x1, 0x8, 0x8, 0x1}, 0xf7, 0x7, [{0x101, 0x5, 0x6, 0x1, 0x5, 0x1}, {0x3, 0x80, 0x800, 0x2, 0x100, 0x200}, {0xd6, 0x3, 0x7, 0xcf, 0x0, 0x2}, {0x8, 0x36a5, 0x0, 0x219, 0x0, 0x9}]}, [{0xfffffff9, 0x0, 0x8, 0x4, 0xf7b1, 0x3}, {0x4, 0xc65, 0x8, 0x3ff, 0x2, 0xe29}, {0x3, 0x200, 0x9, 0x8, 0x1478, 0xe7}, {0x7, 0x9, 0x5, 0x1, 0x1, 0x20000}, {0x0, 0x8, 0x8000000, 0x5, 0x0, 0x400}, {0x7, 0x2, 0x2, 0x0, 0x9, 0x9}, {0x1ff, 0x5, 0xd3, 0xffff, 0x12000, 0x6}, {0x9f, 0x8, 0x1000, 0xfffffffb, 0x0, 0x80}, {0x3, 0x0, 0x4, 0x0, 0x1, 0x8}, {0x4, 0x2, 0x2, 0x8, 0x7fffffff, 0x8}, {0xfffffff7, 0x2, 0x3700, 0x6, 0x0, 0xb9}, {0x745, 0x5, 0x1000, 0x6, 0x0, 0x9d18}, {0x3, 0x8, 0x0, 0xcf2, 0x3}, {0x2, 0x2, 0x1, 0x0, 0x3, 0xe}, {0x7, 0x94, 0x3, 0x2, 0x8531, 0x4}, {0x200, 0x9, 0x1, 0xa5, 0x5, 0xc}, {0x1, 0xea2, 0x5, 0x7ff, 0xc3, 0x5}, {0x2, 0x0, 0x3, 0x1ff, 0x3, 0x80}, {0x1, 0x9, 0x6, 0x3, 0x7fff, 0x8}, {0x1000, 0x800, 0x7, 0xffffffff, 0x1000, 0xb54}, {0x80000000, 0x10000, 0x50c, 0x0, 0x8, 0xb90}, {0x9, 0x8, 0x82b83ee, 0x0, 0x9, 0x7fff}, {0x8, 0x2, 0x3, 0x7ff, 0x3, 0x35}, {0x4, 0x4, 0x0, 0x3c3, 0x8, 0x4}, {0x3, 0x6, 0x9, 0x3b, 0x7, 0x9}, {0x9, 0x4, 0xc, 0x3, 0x3}, {0xa, 0x69, 0x1, 0x1, 0x800, 0x100}, {0x4, 0xfffff215, 0x8, 0x7, 0x10000, 0x8}, {0x8, 0x10001, 0x6, 0x7, 0x7, 0x8}, {0xfffffffb, 0xffffffff, 0x0, 0x8001, 0x9, 0x1}, {0xf06d, 0x10, 0x9, 0x0, 0x81, 0x2}, {0x3bc8d311, 0x9, 0x0, 0x6, 0x0, 0xff}, {0xfffffffe, 0x5, 0x8b7b, 0x40, 0xa0, 0x48}, {0x816, 0x3, 0x10000, 0x7, 0x5cb, 0x401}, {0x3, 0x3, 0x0, 0x7ff, 0x5, 0x200}, {0x7, 0x8, 0xfffffffd, 0x800, 0x6a7}, {0x5, 0xe, 0x8000, 0x52f, 0x3, 0x1}, {0x6, 0x4, 0x1, 0xfffffffb, 0x8, 0x1ff}, {0x9, 0x3, 0x200, 0x6, 0x0, 0x9}, {0xf5, 0x1, 0x0, 0xfff, 0xfff, 0x8001}, {0x100, 0x8, 0x7, 0x1, 0x57c, 0x81}, {0x3, 0x0, 0x0, 0xffff28bc, 0x0, 0x6}, {0x8, 0xa819, 0xb508, 0x3, 0x2, 0x8001}, {0xe, 0xfffffffa, 0x80, 0x9, 0xff, 0x7}, {0xf, 0x1000, 0xfff, 0x8001, 0xfffffff9}, {0x8, 0x4, 0xc3b, 0xfff, 0x9, 0xa81}, {0x100, 0x1, 0x1, 0x9, 0x0, 0x4}, {0x4, 0x7fffffff, 0x7, 0x5, 0x6, 0x9}, {0x4, 0x4, 0x1, 0x80, 0x80000000}, {0x1800000, 0x0, 0x5, 0x2, 0x2, 0x3}, {0x5, 0x7, 0x8, 0xc, 0x8, 0x1}, {0xf, 0x6, 0x6, 0x0, 0x9, 0x3}, {0x9, 0xa, 0x0, 0xa79, 0x5, 0x2}, {0xfffffffd, 0x4000000, 0x6ee, 0x1000, 0x8, 0x80000001}, {0x3, 0xffffffff, 0x9, 0x8, 0xfa9, 0x7}, {0xc, 0x0, 0x9, 0x5aa, 0xa, 0x7}, {0x33, 0x8, 0x4, 0x3, 0x9, 0x8}, {0x5c40, 0x5, 0x8000, 0x0, 0x86, 0x6}, {0x2, 0xee5f, 0xbfdb, 0x5, 0x8, 0x6}, {0x7, 0x5, 0x61e0f90d, 0xffff2a05, 0x0, 0x2}, {0x9, 0x3, 0xe, 0x1, 0x1, 0x80000001}, {0x6, 0x2, 0x9, 0x0, 0x5, 0x1}, {0x4, 0xfffffff8, 0xffffff1a, 0x5, 0x6, 0x10}, {0x1, 0x5, 0x36e, 0x800, 0x0, 0x9}, {0x0, 0x7, 0x8, 0x8, 0x10, 0x1}, {0x2000, 0x518c, 0xd4, 0x9, 0x5}, {0x6ac, 0x5, 0x78, 0x3, 0x1671}, {0xfffffff9, 0xc, 0xfffffff8, 0x81, 0xa, 0x3}, {0x100, 0x7, 0x5, 0x1b7, 0x10000, 0x41}, {0x8, 0x1, 0x8, 0x1, 0x0, 0xd}, {0x7, 0x9, 0x0, 0x800, 0x7, 0x8}, {0x6, 0x7, 0x7, 0x10000, 0xe99}, {0x2, 0x81, 0x8000, 0xad, 0x1, 0xa}, {0x5e51, 0x8001, 0x10000, 0x5, 0xe83, 0x3}, {0x2, 0x400, 0xa, 0x80000001, 0x5, 0x6}, {0x9, 0x2000000, 0xc, 0x28, 0x6, 0x9}, {0x4, 0x5, 0x4, 0x8, 0x10001, 0x7}, {0x7fffffff, 0x2, 0x42a, 0x0, 0x7, 0x6}, {0x100, 0x475f, 0xfffffffa, 0x7fffffff, 0x7}, {0x0, 0x2, 0x5, 0x2, 0xf8, 0x8}, {0x3, 0x495, 0x100, 0x8, 0xd1c, 0x4}, {0x0, 0x7, 0x8, 0x200, 0x400, 0x6}, {0x10000, 0xffffffff, 0x1, 0x2, 0x9, 0x3}, {0x80000000, 0x797c, 0x800000, 0x7, 0x8}, {0x10001, 0x9, 0x400, 0x6, 0x53800000, 0x3}, {0x0, 0x8, 0x3, 0x800, 0x8, 0x4}, {0x5, 0x3, 0xd13, 0x6b80c2a, 0xffffffff, 0x1}, {0xfffffffa, 0x200, 0x400, 0x0, 0x3, 0xfb37}, {0x8, 0x5, 0xa5f5, 0x4, 0x8, 0x2ef0}, {0xa, 0x1, 0x5, 0x1ff, 0x8, 0x8001}, {0x9, 0xffff0001, 0xc, 0x1, 0x7, 0x1000}, {0xfffffff3, 0x5, 0x5, 0x1, 0x4, 0xd}, {0xb2, 0xd, 0x9, 0x8, 0x7, 0x6}, {0xff, 0x1, 0x0, 0x10, 0x100}, {0x5, 0x4b7, 0x7, 0x4, 0xfd39, 0x9}, {0x3, 0x8, 0x4f, 0xffffff1d, 0x840f9a1, 0x4}, {0x800, 0x7, 0xe5d, 0x6, 0x1, 0xfffffffb}, {0xfffffffb, 0x8, 0x1, 0x4, 0x9, 0x4}, {0x10, 0x4, 0x4, 0xe50, 0x6, 0x9}, {0x8001, 0x3, 0x5, 0x81, 0x6, 0x2}, {0x3, 0x5, 0x2, 0x0, 0xc}, {0xb01, 0x0, 0x8, 0x7fffffff, 0x10000, 0x5}, {0xd, 0xa7, 0x3, 0x7fffffff, 0x5, 0x1ff}, {0x1, 0x3, 0x0, 0x9, 0x0, 0x7}, {0xfffffff9, 0x18eb, 0x2, 0x9, 0x7fffffff, 0x4}, {0x3, 0x8, 0x0, 0xfffffff5, 0x1, 0x80000001}, {0x1, 0x10, 0x3, 0x80000000, 0x1, 0x80}, {0x7f, 0x5, 0x9a1, 0x3, 0x10000, 0x9}, {0x0, 0x7fffffff, 0x6, 0x0, 0xe26, 0x2}, {0x0, 0x40, 0xe94, 0x5, 0xffffff95, 0x8}, {0x3, 0x100, 0xf, 0x264a, 0xe272, 0x3}, {0x6, 0x40, 0x3, 0xfffffffe, 0x9, 0x7}, {0x6b8, 0x3, 0x4, 0x240, 0x2, 0x1}, {0x3, 0x347, 0x1000, 0x2, 0x4, 0xfffffffe}, {0x5, 0x5, 0x5, 0x8, 0x0, 0xffffffff}, {0x0, 0x334, 0xffffff7f, 0x10000, 0xfffffff9, 0x2}, {0x1, 0x8, 0x4, 0x40, 0x7, 0x8}, {0x3ff, 0x3, 0xd6d, 0xf, 0xbb3b, 0x6}, {0xa, 0x6, 0xd, 0x10001, 0x1, 0x1}, {0x9, 0xbc, 0x3b, 0xb3, 0xe, 0xff}, {0x897b0000, 0x8, 0x9, 0x912, 0x5, 0x85f}, {0x8, 0x1, 0x1, 0x8000, 0x1, 0x3}, {0x1000, 0x4, 0x20, 0x2, 0x9, 0x2}, {0x3, 0x3, 0x8, 0x6, 0x23, 0x1}, {0x4, 0x0, 0x4, 0x1, 0xfffffff9, 0x3ff}, {0x910, 0x7fff, 0x2, 0x4, 0x1dc0, 0x285}, {0x4, 0xb, 0x6, 0xc, 0x6}, {0x8c, 0x0, 0xffffffc0, 0x4, 0x7fffffff}], [{0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x4}, {0x2, 0x1}, {0x5, 0x1}, {0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x3}, {0x1, 0x1}, {0x4}, {0x3, 0x1}, {0x3}, {0x5, 0x1}, {0x6}, {0x4}, {0x4}, {0x4, 0x1}, {0x5}, {0x1}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x2, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {0x1}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {}, {0x5, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5}, {}, {0x3, 0x1}, {}, {0x5}, {0x2, 0x1}, {0x1}, {}, {0x5, 0x1}, {0x2, 0x1}, {}, {0x2}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x4}, {0x1, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x8}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x3}, {}, {0x3}, {0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x1, 0x1}, {0x3}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x4}, {0x2, 0x1}, {0x3}, {0x1}, {}, {0x9df49e19445aa3ac}, {0x3}, {0x3, 0x1}, {0x2, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x16c, 0x5, 0x0, 0x1, [{0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}]}, {0xd6, 0x6, "db3d760ffac99f2c112f6c48fdc9537b3f07b6189319abca6297ef351c0cc576a32fc045f4dfed0c34735807cdc51052b905d4059c15119bcd6b615c45beae3a19e70768b167f41fffe34bba788caa0dd51ab30b0978998c900f05167bdd231fc6d2391003cdcee3a7fe8a1f4c9ff40f93077e171a823ebdc24aba144010f73c2f05b117dc979c407957d359a57637aea2cb40f11bad37b6611e742be77b191e7c4a3e57842e7898752ede109548534d0f34be58663a1b43871c3ee9c6760e47b61a45090f0d7d29e146fe4b33e176d62880"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x6, 0x2}}}}, @m_mpls={0x50, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x6, 0x9, 0x0, 0x3, 0x5}, 0x2}}]}, {0x7, 0x6, "9a333a"}, {0xc}, {0xc}}}, @m_bpf={0xc0, 0x17, 0x0, 0x0, {{0x8}, {0x5c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}, @TCA_ACT_BPF_OPS={0x1c, 0x4, [{0xf, 0x7, 0x8, 0x10000}, {0x6, 0x8, 0xe, 0x6}, {0x907a, 0x8, 0x9, 0x9}]}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x2, 0xc2, 0x0, 0xec3, 0x1}}]}, {0x3e, 0x6, "ac35a4d5b7da58dfa2239861eea837bf36b815e37751f8cb2f7659aa2d7540c15eeb1f8f8184344a1dadf452fba58e1546a2b79be69a46784803"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_mirred={0x1f8, 0x9, 0x0, 0x0, {{0xb}, {0x104, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x6, 0xfffffffffffffff7, 0x400, 0xc}, 0x1, r8}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x0, 0x6, 0xffffffff, 0x7}, 0x1, r8}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x6c3, 0x0, 0x4, 0x5c}, 0x0, r8}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x0, 0x8, 0x7, 0x8001}, 0x4, r8}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x0, 0x20000000, 0xf, 0x2}, 0x4, r8}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x3, 0x1, 0x4, 0x3}, 0x2, r8}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x91a3, 0x2, 0x7fff, 0xf6c}, 0x1, r8}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7ff, 0x8, 0xffffffffffffffff, 0x4, 0x4}, 0x1, r8}}]}, {0xca, 0x6, "02bbb37993db24354b43b01857b83dacd40f331f469d97b01c5a9cefe3e7bec7b0e818d4d5f7b7ece4e738b77a8def6d62196cf33d520b0169f3dcccacf74c0ed0e1fcaee2ebcbc67db824c6f503d02746bbc490bf8aa6ace3638095d0c7602bbe4f58fd49c60e805db214074c4fa6a248276fa553cea9f1a0eb2c1916b2050fac945a5f1d0a6553fd169d009175fc8c61a2f211d990294c75fc9a48e82e98c94994408209cd057044e14aaf29d77093f275b545f4a454b16578aa999f79b2a58ff413ee45ae"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_gact={0x58, 0x9, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x4, 0xffffffffffffffff, 0x2, 0x4}}]}, {0x13, 0x6, "ad98d672d038ca9db5dc7d50c813b9"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_FW_MASK={0x8, 0x5, 0x1}, @TCA_FW_INDEV={0x14, 0x3, 'veth1\x00'}, @TCA_FW_POLICE={0x414, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x80000000, 0x0, 0xd, 0x4, 0x6, 0x489, 0x10000, 0x2, 0x3ff, 0xffff, 0x10000, 0x1, 0x0, 0x81, 0xf, 0x3, 0x8, 0x8, 0x8, 0xfffffff7, 0x8, 0x1, 0x3, 0x3d, 0x80000000, 0xaf6, 0xa165, 0x8, 0x0, 0x35, 0x2aef, 0x8, 0x81, 0x1, 0x7, 0x7, 0x100, 0x9, 0x4, 0x14d7, 0xa, 0x4, 0xffffffff, 0x200, 0x2, 0x200, 0xc4df, 0x7, 0x6, 0x0, 0x4, 0x2, 0x3, 0x40, 0x6, 0xffffffff, 0x1000000, 0x5, 0x2, 0x4, 0x7fff, 0x2, 0x0, 0xfff, 0x7ff, 0x4ddc, 0xe, 0x9, 0x9, 0x768, 0x3, 0x4, 0x6, 0x9b23, 0x9, 0xd21, 0x6582, 0x2, 0x6, 0x80, 0x8, 0x0, 0xd65a, 0xfffffff3, 0xd, 0x4c, 0x1, 0x4, 0x9, 0x7, 0x4, 0x4, 0xfe2, 0x0, 0xff, 0x8, 0xc9, 0x10000, 0x8, 0x447, 0x4, 0x5, 0x401, 0xfffffffa, 0x50, 0xf, 0x2, 0x3, 0x292, 0x9, 0x7, 0x3, 0x3, 0xd, 0x4, 0x101, 0x3, 0x38, 0xcfd, 0x2, 0xfffffff7, 0x1, 0x9, 0x7, 0x7a, 0x6, 0xfff, 0xc, 0x3c, 0x5, 0x9bc0, 0x5, 0x3, 0x5, 0xa967, 0x3, 0x3, 0xe7, 0x6, 0x280, 0x8, 0x7, 0x7f, 0x6, 0x7, 0x2, 0x1, 0x3, 0x0, 0x7, 0x2, 0x39, 0x92, 0x7, 0x80000000, 0x3, 0x800, 0x9, 0x4, 0x7f, 0x5, 0x1000, 0x100000, 0x3, 0x1, 0x10000, 0xd, 0x1, 0x8, 0xfffffff3, 0x8a1, 0xb478ea67, 0x8, 0x1, 0xf, 0x9, 0x2, 0x2, 0x7, 0x33, 0x2, 0x7f, 0x101, 0x2, 0x4, 0x3a, 0x8000, 0xf, 0x8, 0x0, 0x1ff, 0x3, 0x5, 0x5, 0x8d6, 0x0, 0x0, 0x0, 0x100, 0x2, 0xf86, 0x400, 0xfffffffc, 0x6, 0x6, 0x6, 0x54, 0x8, 0x0, 0x8, 0x2, 0x36f7b2c7, 0x2b2a, 0x32, 0xa829, 0x5, 0x2, 0x7fff, 0x6, 0x7, 0x5, 0x9, 0x3ff, 0x6, 0x1000000, 0x88, 0xff, 0xd, 0x0, 0x401, 0xffffffff, 0xf, 0x800, 0x5, 0x8, 0x9, 0x7, 0x2d, 0x65, 0x9, 0x5, 0xb261, 0x5, 0x1, 0x1, 0x100, 0x1, 0x6, 0xfff, 0x101, 0xffffff1e, 0x6, 0x9f, 0x8000, 0xffffff98]}, @TCA_POLICE_RATE64={0xc, 0x8, 0xffffffff}]}, @TCA_FW_INDEV={0x14, 0x3, 'bridge_slave_0\x00'}, @TCA_FW_ACT={0x12c4, 0x4, [@m_ct={0x174, 0x0, 0x0, 0x0, {{0x7}, {0x64, 0x2, 0x0, 0x1, [@TCA_CT_LABELS_MASK={0x14, 0x8, "ee84e48720889822770c9af35183e4b1"}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x3}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e22}, @TCA_CT_ACTION={0x6, 0x3, 0x28}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e24}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @loopback}, @TCA_CT_LABELS_MASK={0x14, 0x8, "89ad8a445e788d4c7b2a21a84cfa211d"}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x100}, @TCA_CT_ACTION={0x6}]}, {0xec, 0x6, "44a0203e6050c9b8c6569daeb6149942476856c0a81378efa39dc8ef64b6254675929444e264a715fd3710d395a9007fc169f193f94902a061de0bcca3d3750775b25ce046b26f14c50ce59fe49620832ada58f06af9d2fa094ef07f7458a58a83cfc5885cb27e65b862a2cffe2d4c9c445b27ae90b3fb65c835f15b24e5a3ea0a5f69d6baf742a2fea1631b77c7e73be8b2b83d24257d69b6050a9096c3a2221ee7bbd93f2fc198178096e9019fa097132bbc946d562a5efac91abfa57b092c36fc6f001814e5ee6df3a6d0c57c569692058413298762263204055ad0fb200b9cf39e92b986059a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_simple={0xac, 0x1f, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xe, 0x3, '##@:\xd5*%--\x00'}, @TCA_DEF_DATA={0xa, 0x3, '^%}-\\\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x5, 0xffffff85, 0x0, 0x5, 0xc670}}, @TCA_DEF_DATA={0xb, 0x3, '[^:!{^\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x80000001, 0x800, 0xffffffffffffffff, 0x5, 0x1800000}}]}, {0x27, 0x6, "bd9ae77a5e523e1160cf863610d0cba436a8b85e1811378c4df1bc37d90f497e7a1216"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_skbmod={0x106c, 0x17, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x5, 0x7, 0x0, 0xc4, 0x8001}, 0x4}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @multicast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @random="6876a863dcd8"}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_vlan={0x34, 0xc, 0x0, 0x0, {{0x9}, {0x4}, {0x7, 0x6, "76e238"}, {0xc}, {0xc}}}]}, @TCA_FW_CLASSID={0x8, 0x1, {0x8, 0x8}}]}}, @TCA_RATE={0x6, 0x5, {0x4, 0x39}}]}, 0x52c8}, 0x1, 0x0, 0x0, 0x20048001}, 0x4044) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.265998154s ago: executing program 1 (id=6178): syz_emit_ethernet(0x89, &(0x7f00000000c0)={@multicast, @remote, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x4f, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @echo_reply={0x81, 0x0, 0x0, 0x5, 0x6, "46c9baf3ee3935d7337ea92b3dbe151bf5e59e19b6f66a80a995c36df37040115c72ca44980172d201ae5cbe0f8c9cbfd1d9602551ea058e71841bc5944c2434608ab19a50a5c7"}}}}}}, 0x0) 4.111566423s ago: executing program 1 (id=6179): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x30, r1, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xff}]}, 0x30}}, 0x0) getsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000100), &(0x7f00000001c0)=0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000005e0001"], 0x20}}, 0x0) setsockopt$packet_int(r4, 0x107, 0x9, &(0x7f0000000080)=0xfffffa0f, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x61, 0x10, 0x78}, [@ldst={0x6, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2}, 0x48) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x6}, 0x1c) clock_gettime(0xb, &(0x7f0000000980)) write(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000280)={@multicast, @empty, @void, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x8, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @mcast2, @local, @mcast1}}}}, &(0x7f0000000200)={0x0, 0x2, [0x587, 0x5e7, 0x422, 0x5a3]}) writev(r2, &(0x7f0000000240)=[{&(0x7f0000000a40)="2e9bfc8fae0e00000000df03c575963f8864", 0x12}, {&(0x7f0000000040)="aabbf7819900", 0x6}], 0x2) 4.097339646s ago: executing program 4 (id=6180): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x800) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x7c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'geneve0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:chfn_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'pimreg1\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x84) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, 0x0, 0x528, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x1a}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10044845}, 0x0) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000400)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000440)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_KEY(r2, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x78, r3, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x2}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "a2c265f9d1f703ab9cb701dd2e863842a133cb41e23a1b8db60faf00f07d2ae9"}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x9}]}, 0x78}, 0x1, 0x0, 0x0, 0x40001}, 0x5) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$netlink(r0, &(0x7f0000000580)={0x10, 0x0, 0x25dfdbfc, 0x2000}, 0xc) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f00000005c0)={r6, 0xfffffffffffffffa, 0xabf, 0x7ff}) setsockopt$inet6_tcp_buf(r7, 0x6, 0x1f, &(0x7f0000000600)="a3cadd022432396ae0aa6841b861a7652d22ab80f73c5dd72686c26c09e45e8b4f9b7c201a21ef0d8f9e383ac193238ffc230a628952efa4e3180c255b6027ada69b7230a4c7898ab19d35e5afc7dac87fec0943340c357ea62a07a0b390099265434d65a907d0bbd4a1adbc6ffe3b3efe52af3335c9fd4e31fc5d6832df8992f2b628a3fdff67a43761f99f71afb79f661bf33aafc411f45a7b3160ba41b5aaabf8fc756c4a1ea3c780f07e5a04b3ce00d1cf8a14404a325d6a0208a51562e88ddc949bfc0178742a0b707a9a7a7590d2fc0d32c5b66e6c712995be", 0xdc) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r8, 0x84, 0x12, &(0x7f0000000700)=0x7, 0x4) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000780), r2) sendmsg$IEEE802154_LLSEC_DEL_DEV(r2, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000880)={&(0x7f00000007c0)={0x84, r9, 0xd05, 0x70bd2b, 0xfffffffc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x84}, 0x1, 0x0, 0x0, 0x24000}, 0x4000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r7) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r7, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x28, 0x4, 0x8, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x80000001}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x7fff}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x50}, 0x20040084) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a40), r2) setsockopt$TIPC_MCAST_BROADCAST(r7, 0x10f, 0x85) getsockopt$CAN_RAW_LOOPBACK(r7, 0x65, 0x3, &(0x7f0000000a80), &(0x7f0000000ac0)=0x4) ioctl$F2FS_IOC_SET_PIN_FILE(r8, 0x4004f50d, &(0x7f0000000b00)) r10 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r10, 0x84, 0x20, &(0x7f0000000b40), &(0x7f0000000b80)=0x4) ioctl$sock_inet_tcp_SIOCINQ(r8, 0x541b, &(0x7f0000000bc0)) setsockopt$inet_int(r7, 0x0, 0x32, &(0x7f0000000c00)=0x1a, 0x4) syz_init_net_socket$ax25(0x3, 0x2, 0xc3) 3.137248288s ago: executing program 2 (id=6181): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14, 0x25, 0x1, 0xfffffffd, 0x0, {0x2, 0x2}}, 0x14}}, 0x20000090) r1 = socket(0x11, 0x3, 0x0) syz_emit_ethernet(0x12, &(0x7f0000000080)={@random="659b3dfadf01", @link_local, @void, {@llc={0x4, {@llc={0x0, 0x0, "e3", "dd"}}}}}, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x29, 0x1, 0x2, 0x2, 0x28, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x700, 0x2, 0x6}}) 3.098252479s ago: executing program 2 (id=6182): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = socket(0x1d, 0x2, 0x6) accept$inet(r1, 0x0, 0x0) r2 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000140)=ANY=[@ANYBLOB='b 75:*\trmr'], 0xa) 3.049321405s ago: executing program 2 (id=6183): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x378, 0x0, 0x1170, 0x1398, 0x120, 0x1170, 0x2a8, 0x1398, 0x1398, 0x2a8, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [0xff, 0xffffffff], [], 'veth1_to_bridge\x00', 'veth0_to_hsr\x00', {}, {}, 0x2b, 0x3b, 0x3}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@inet=@set2={{}, {{0x1, 0x3, 0x1}}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x0, 'NFQUEUE\x00', 0x2, {0xfffe, 0x10, 0x2}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@srh1={{0x90}, {0x1, 0x0, 0x0, 0x0, 0x0, @loopback, @private0, @loopback, [0x0, 0x0, 0x0, 0xff], [], [0xffffff, 0x0, 0xff000000], 0x0, 0x803}}]}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xffffffffffffff36) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, r5, 0x1, 0x70bd29, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x41, 0x60}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x39a}]]}, 0x30}}, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000340)={r1, r1, 0xd, 0x0, 0x0, 0x9, 0x40, 0x16c0, 0x5545, 0x8b, 0x1, 0x9, 'syz0\x00'}) 2.26060328s ago: executing program 0 (id=6184): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000000b00)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x20001, @private2, 0x45af}, 0x1c, &(0x7f0000000580)}}], 0x1, 0x2004c000) (async) shutdown(r1, 0x1) (async) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000100), &(0x7f0000000000)=0x8) (async) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000ac0)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x84f}]}}}]}, 0x3c}}, 0x0) 2.253169234s ago: executing program 1 (id=6185): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r2, 0x0, 0x20008000) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010027bd7000fcdbdf2517000000500006804c00040067630600"/45], 0x64}}, 0x48c0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x14, 0x3a, 0x229, 0x0, 0x25dfdbfc, {0xa}}, 0x14}}, 0x8000) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3100100000e59550"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) 2.252037249s ago: executing program 2 (id=6186): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) pselect6(0x40, &(0x7f0000000040)={0xc, 0x1, 0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x400000000000, 0x400}, 0x0, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa23aaaaaaaaaabb0800450000b00000000000119078000000000000000000004e20009c907801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40abcfd56f1375461caaa2f19935e6996c7096ffeeb03000000000000649a3bfbc1d19cb307b3302ab9cdb042d2643fcbb2c5a57df67d074af6e8dafe09000000"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) r3 = socket(0x400000000010, 0x3, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r3) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x5, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="e8000000", @ANYRES16=r4, @ANYBLOB="00022dbd7000fbdbdf250500000008000500020000004400028008000700ad0200000800050009000000080007000900000005000d000100000008000800f4ffffff05000d000100000006000b000200000005000d00010000000800040006000000"], 0x68}}, 0x4008845) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x40, 0x2c, 0xd3f, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x0, 0x4}, {0xc}, {0x8}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}, @TCA_CHAIN={0x8, 0xb, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x24008050}, 0x0) r11 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r11, 0x84, 0x23, &(0x7f0000000240)={r12, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000100)={r12, 0xe}, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r13 = syz_genetlink_get_family_id$batadv(&(0x7f000009f580), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r13, @ANYBLOB="030300f8ffffffffffff0500000008000300", @ANYRES32=r14], 0x1c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0xe, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000071106f000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) 2.251097267s ago: executing program 4 (id=6187): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000400), &(0x7f0000000440)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={0x0, 0x8}, 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="8b040400000000002000128008000100736974001400028008000200c00002000600080003"], 0x40}}, 0x0) 2.133427053s ago: executing program 0 (id=6188): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x3a}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x80) r0 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, r0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_FAMILY={0x5, 0xd, 0xf}, @GTPA_MS_ADDR6={0x14, 0xc, @private0}, @GTPA_VERSION={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDR6={0x14, 0xb, @loopback}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_FLOW={0x6, 0x6, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x804}, 0x20000001) 2.045644247s ago: executing program 4 (id=6189): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socket$inet_mptcp(0x2, 0x1, 0x106) socketpair$unix(0x1, 0x2, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x10, 0x3}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newlink={0x48, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0x81}]}}}, @IFLA_ADDRESS={0x8, 0x1, @dev}]}, 0x48}}, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7000ffdbdf25030000000800010000000000400007800c000180", @ANYRES32, @ANYRES32, @ANYBLOB="0c000180080001"], 0x5c}, 0x1, 0x0, 0x0, 0x4050}, 0x100) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'ip6gre0\x00', 0x0, 0x29, 0x5, 0x2, 0x1, 0x9, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @private0, 0x8000, 0x48, 0x5, 0x10000}}) sendmsg$MPTCP_PM_CMD_ANNOUNCE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x88, r3, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x88}, 0x1, 0x0, 0x0, 0x2000040}, 0x20000000) setsockopt$sock_attach_bpf(r0, 0x1, 0xa, 0x0, 0x0) recvmsg$unix(r0, 0x0, 0x40000043) 1.912029344s ago: executing program 0 (id=6190): ioctl$XFS_IOC_FREE_EOFBLOCKS(0xffffffffffffffff, 0x8080583a, &(0x7f00000001c0)={0xf40e, 0x3, 0xfff, 0x1, 0x9, 0x0, 0x81}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000380), 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f0000000600)={0x0, 0x40, 0x1, [0x7, 0xd, 0xfffffffffffffff7, 0x9484, 0x9], [0x100000000, 0x5, 0x7ff, 0x3, 0xbe72, 0x5, 0x100, 0x7, 0x8, 0x23, 0x8, 0x9, 0x8e69, 0xc4e, 0x4, 0x1000000000000000, 0x4, 0x6, 0x7, 0x9, 0x9, 0x10, 0xffffffffffff0205, 0x5, 0xffffffffffffffff, 0x7f, 0x1, 0x7fffffff, 0x3, 0x4, 0x7f, 0x5d35, 0x10, 0x3ff, 0x672e, 0x1, 0x3ff, 0x7, 0x5, 0x80c000, 0x142, 0x10, 0x8, 0x3, 0x2, 0x7, 0x100000000, 0x9, 0x2, 0x18, 0x40, 0x8e, 0x5cf6f4d5, 0x9, 0x1, 0x9, 0x3, 0x28, 0x0, 0x40, 0x4, 0x5, 0x200, 0x6, 0x1, 0x8, 0xac03, 0x3081, 0x4, 0xff, 0x8b, 0x2, 0x355, 0x4, 0xdce, 0x7fff, 0x8, 0x80000000000000, 0xffdd, 0x9, 0x2, 0xa, 0x0, 0x8, 0xffffffffffffffc4, 0xffffffff, 0x934, 0x68a, 0x6, 0x3, 0x55, 0x2000000, 0xfffffffffffffffa, 0x2, 0xff, 0x5, 0x196d, 0x3ff, 0x9, 0x2, 0x10, 0xdbd, 0x731, 0xfffffffffffffffc, 0x7, 0x1, 0x8000, 0x10, 0x3, 0x5, 0x674, 0x4, 0x3, 0xffffffffffffffff, 0x7, 0x5, 0xb, 0x4, 0x1ff, 0x7ff, 0x4]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000a40)={r4, 0xf, 0x6}) r5 = socket(0x400000000010, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000380), 0x12) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r5) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_QUANTUM={0x2, 0x2, 0x700}]}}]}, 0x48}}, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f00000010c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001080)={&(0x7f0000000e40)={0x210, r9, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x210}, 0x1, 0x0, 0x0, 0x10}, 0x4) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5, 0x9}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0xc4, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x7, 0xf}, {0xffe0}, {0xffff, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x94, 0x2, [@TCA_FLOW_EMATCHES={0x90, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x58, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x8000, 0x7, 0x2}, {{0x3, 0x1, 0x1}, {0x3, 0x1}}}}, @TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x1000, 0x2, 0x7ef}, {0xc, 0x0, 0x4295a19d016a25aa}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0xfffd, 0x8, 0x5}, {0xffffffffffffffff, 0x3, 0x3}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0xd, 0x8, 0xffff}, {0x4, 0x1, 0x6}}}, @TCF_EM_NBYTE={0x10, 0x3, 0x0, 0x0, {{0x401, 0x2, 0x7fff}, {0x6, 0x0, 0x4}}}]}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x5, 0x7, 0x4c2}, {{0x2}, {0xf0ffff, 0x1, 0x0, 0x1}}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x1fde, 0x3, 0x5}, {0x2, 0x2, 0x4}}}]}]}]}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x24000045}, 0x2008c014) 1.879814822s ago: executing program 1 (id=6191): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0300002e00090027bd700000000000040000"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) (fail_nth: 4) 1.399784087s ago: executing program 4 (id=6192): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}}, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xffffffff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x5c}}, 0x0) (async, rerun: 64) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async, rerun: 64) r1 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000000), &(0x7f0000000140)=0x4) accept4(r0, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f0000000100)=0x80, 0xc0000) 148.433094ms ago: executing program 4 (id=6193): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004881) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0xffffffffffffff23, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x63, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x4, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/cgroup\x00') unshare(0x6a040000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x8, 0x3, 0x3) ioctl$sock_netrom_SIOCADDRT(r0, 0x6180, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) close(0x3) getpeername$l2tp6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @initdev}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$OCFS2_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000180)={0x2, 0x0, 0x8000000000000000, 0x4, 0x0, 0x8}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x2, 0x3a) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0xcf}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8}]}}}]}, 0x38}}, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x17, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1800000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @map_fd={0x18, 0x5}, @generic={0x9d, 0x9, 0x1, 0x2, 0x3}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @alu={0x7, 0x0, 0x1, 0x0, 0xb, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @call={0x85, 0x0, 0x0, 0x9e}]}, &(0x7f0000000440)='GPL\x00', 0x2, 0xf1, &(0x7f0000000480)=""/241, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x3, 0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x2, 0x10, 0xaf12, 0x7ff}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000600)=[0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000640)=[{0x2, 0x2, 0xf, 0x3}], 0x10, 0x400}, 0x94) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz1\x00', 0x200002, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2}, 0x50) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x18, 0x2a, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@cb_func={0x18, 0x0, 0x4, 0x0, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @cb_func={0x18, 0xc, 0x4, 0x0, 0xfffffffffffffffc}, @generic={0x0, 0x9, 0x7, 0x3, 0x5}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x200}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x6b, &(0x7f0000000980)=""/107, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000a00)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x3, 0xc, 0x11, 0x2}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000a80)=[0x1, 0xffffffffffffffff, 0x1, r7, r2, 0x1, 0x1], &(0x7f0000000ac0)=[{0x1, 0x5, 0x1, 0x5}, {0x0, 0x2, 0x0, 0x1}], 0x10, 0x51}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000740)={@cgroup=r6, r5, 0x23, 0x8, 0x0, @void, @value=r8}, 0x20) 407.481µs ago: executing program 1 (id=6194): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18010000000000000000000000000000850000002e00000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000340)={r0, &(0x7f0000000240)='!\x00', 0x880, &(0x7f0000000280)={@_ha_fsid={[0x7, 0x478]}, {0xa929, 0x0, 0x6, 0x7}}, 0x4, &(0x7f00000002c0), &(0x7f0000000300)=0x3}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x0, 0x0, r1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x2}, 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0, r2}, 0xc) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000140)=0x8) 0s ago: executing program 2 (id=6195): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@gettfilter={0x24, 0x2e, 0x800, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x9, 0xd}, {0x7, 0x7}, {0xfff1, 0xffff}}}, 0x24}}, 0x844) kernel console output (not intermixed with test programs): length. [ 457.133163][T23008] bond1: option coupled_control: invalid value (192) [ 457.153802][T23008] bond1 (unregistering): Released all slaves [ 457.298449][T23020] netlink: 'syz.3.4736': attribute type 10 has an invalid length. [ 457.316303][T23020] bond0: (slave wlan1): Enslaving as an active interface with a down link [ 457.650419][T23036] netlink: 'syz.3.4740': attribute type 1 has an invalid length. [ 457.658471][T23037] netlink: 'syz.3.4740': attribute type 1 has an invalid length. [ 457.707726][T23036] 8021q: adding VLAN 0 to HW filter on device bond1 [ 457.748297][T23039] bond1: (slave veth11): Enslaving as an active interface with a down link [ 457.765546][T23036] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 457.775025][T23036] bond1: (slave batadv0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 457.897894][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 457.905942][ C1] lec:lec_tx_timeout: lec0 [ 457.910526][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 458.122941][T23054] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 458.162427][T23013] syz.4.4733 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 458.270010][T23013] CPU: 0 UID: 0 PID: 23013 Comm: syz.4.4733 Not tainted syzkaller #0 PREEMPT(full) [ 458.270033][T23013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 458.270048][T23013] Call Trace: [ 458.270054][T23013] [ 458.270060][T23013] dump_stack_lvl+0xe8/0x150 [ 458.270085][T23013] dump_header+0xd3/0x4c0 [ 458.270104][T23013] oom_kill_process+0x3ab/0x970 [ 458.270122][T23013] out_of_memory+0x106c/0x1410 [ 458.270136][T23013] ? percpu_ref_put+0x19/0x180 [ 458.270154][T23013] ? __pfx___mutex_lock+0x10/0x10 [ 458.270178][T23013] ? __pfx_out_of_memory+0x10/0x10 [ 458.270190][T23013] ? do_raw_spin_unlock+0xf5/0x210 [ 458.270212][T23013] try_charge_memcg+0xc53/0x1560 [ 458.270242][T23013] ? __pfx_try_charge_memcg+0x10/0x10 [ 458.270266][T23013] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 458.270285][T23013] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 458.270306][T23013] mem_cgroup_swapin_charge_folio+0x2e3/0x4d0 [ 458.270327][T23013] __swap_cache_prepare_and_add+0xe8/0x760 [ 458.270352][T23013] ? page_rmappable_folio+0x9a/0x170 [ 458.270375][T23013] swap_cache_alloc_folio+0xf1/0x240 [ 458.270397][T23013] swap_cluster_readahead+0x369/0x690 [ 458.270415][T23013] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 458.270438][T23013] ? get_vma_policy+0x27b/0x3c0 [ 458.270457][T23013] swapin_readahead+0x196/0xc50 [ 458.270480][T23013] ? __pfx_swapin_readahead+0x10/0x10 [ 458.270494][T23013] ? swap_table_get+0x1e/0x260 [ 458.270511][T23013] ? swap_table_get+0x1e/0x260 [ 458.270528][T23013] ? swap_table_get+0x1e/0x260 [ 458.270546][T23013] ? swap_table_get+0x216/0x260 [ 458.270565][T23013] ? swap_cache_get_folio+0x513/0x520 [ 458.270588][T23013] do_swap_page+0x56f/0x5a20 [ 458.270623][T23013] ? do_swap_page+0x127/0x5a20 [ 458.270640][T23013] ? __pfx_do_swap_page+0x10/0x10 [ 458.270657][T23013] ? __pte_offset_map+0x1ae/0x240 [ 458.270673][T23013] ? pte_offset_map_rw_nolock+0xea/0x160 [ 458.270688][T23013] handle_mm_fault+0x12d2/0x3310 [ 458.270718][T23013] ? handle_mm_fault+0xee/0x3310 [ 458.270750][T23013] ? __pfx_handle_mm_fault+0x10/0x10 [ 458.270767][T23013] ? lock_vma_under_rcu+0x45a/0x500 [ 458.270805][T23013] do_user_addr_fault+0xa73/0x1340 [ 458.270828][T23013] ? rcu_is_watching+0x15/0xb0 [ 458.270846][T23013] ? trace_page_fault_user+0x84/0x210 [ 458.270865][T23013] exc_page_fault+0x6a/0xc0 [ 458.270882][T23013] asm_exc_page_fault+0x26/0x30 [ 458.270898][T23013] RIP: 0033:0x7f10a355797e [ 458.270912][T23013] Code: 41 51 4c 8d 9b 08 03 00 00 49 89 c9 48 89 f1 41 50 48 8b 74 24 20 49 89 d0 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 <59> 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 [ 458.270922][T23013] RSP: 002b:00007ffde1cbccf0 EFLAGS: 00010246 [ 458.270935][T23013] RAX: 0000000000000000 RBX: 0000555561a35500 RCX: 00007f10a355d04e [ 458.270944][T23013] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 458.270952][T23013] RBP: 00007f10a3817da0 R08: 0000000000000000 R09: 0000000000000000 [ 458.270960][T23013] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000006fcfa [ 458.270968][T23013] R13: 00007f10a381609c R14: 000000000006fa35 R15: 00007f10a3816090 [ 458.270991][T23013] [ 458.578547][T23013] memory: usage 307200kB, limit 307200kB, failcnt 613 [ 458.586961][T23066] netlink: 'syz.0.4749': attribute type 4 has an invalid length. [ 458.597399][T23013] memory+swap: usage 307388kB, limit 9007199254740988kB, failcnt 0 [ 458.605697][T23013] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 458.613375][T23013] Memory cgroup stats for /syz4: [ 458.613653][T23013] cache 0 [ 458.621647][T23013] rss 0 [ 458.624511][T23013] rss_huge 0 [ 458.627758][T23013] shmem 0 [ 458.632596][T23013] mapped_file 0 [ 458.656678][T23013] dirty 0 [ 458.704480][T23013] writeback 0 [ 458.716688][T23013] workingset_refault_anon 25 [ 458.734004][T23013] workingset_refault_file 39 [ 458.749736][T23013] swap 192512 [ 458.761253][T23013] swapcached 303104 [ 458.777284][T23013] pgpgin 86807 [ 458.793340][T23013] pgpgout 86805 [ 458.804630][T23013] pgfault 164427 [ 458.857977][T23013] pgmajfault 20 [ 458.873125][T23013] inactive_anon 0 [ 458.877179][T23013] active_anon 8192 [ 458.903114][T23013] inactive_file 0 [ 458.914646][T23013] active_file 0 [ 458.937949][T23013] unevictable 0 [ 458.943172][T23013] hierarchical_memory_limit 314572800 [ 458.963690][T23013] hierarchical_memsw_limit 9223372036854771712 [ 458.985148][T23013] total_cache 0 [ 459.002816][T23013] total_rss 0 [ 459.017137][T23013] total_rss_huge 0 [ 459.038062][T23013] total_shmem 0 [ 459.065994][T23013] total_mapped_file 0 [ 459.090676][T23013] total_dirty 0 [ 459.104428][T23013] total_writeback 0 [ 459.119668][T23013] total_workingset_refault_anon 25 [ 459.164920][T23013] total_workingset_refault_file 39 [ 459.180135][T23013] total_swap 192512 [ 459.193272][T23013] total_swapcached 303104 [ 459.212007][T23013] total_pgpgin 86807 [ 459.230300][T23013] total_pgpgout 86805 [ 459.248839][T23013] total_pgfault 164438 [ 459.261748][T23013] total_pgmajfault 20 [ 459.288961][T23013] total_inactive_anon 0 [ 459.293281][T23013] total_active_anon 8192 [ 459.305591][T23090] __nla_validate_parse: 26 callbacks suppressed [ 459.305607][T23090] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4755'. [ 459.330359][T23013] total_inactive_file 0 [ 459.342165][T23013] total_active_file 0 [ 459.346859][T23013] total_unevictable 0 [ 459.356546][T23013] anon_cost 0 [ 459.366495][T23013] file_cost 0 [ 459.370088][T23013] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.4733,pid=23013,uid=0 [ 459.373210][T23092] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4755'. [ 459.395326][T23091] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 459.431464][T23013] Memory cgroup out of memory: Killed process 23013 (syz.4.4733) total-vm:102288kB, anon-rss:1244kB, file-rss:22532kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 459.565590][T23090] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4755'. [ 459.568806][T23099] ipt_REJECT: TCP_RESET invalid for non-tcp [ 459.620360][T23103] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.4758'. [ 459.769057][T14424] wlan1: Trigger new scan to find an IBSS to join [ 459.826599][T23111] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 460.006137][T23120] batadv_slave_0: entered promiscuous mode [ 460.030784][T23118] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4764'. [ 460.105477][T23128] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4767'. [ 460.116456][T23129] xt_ct_set_helper: 24 callbacks suppressed [ 460.116473][T23129] xt_CT: You must specify a L4 protocol and not use inversions on it [ 460.175822][T23123] batadv_slave_0: left promiscuous mode [ 460.229395][T23133] ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 460.559424][T23147] bond4: option fail_over_mac: invalid value (16) [ 460.570820][T23147] bond4 (unregistering): Released all slaves [ 460.863838][T23169] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4777'. [ 461.039862][T23184] netlink: 248 bytes leftover after parsing attributes in process `syz.3.4783'. [ 461.080328][T23184] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4783'. [ 461.098378][T23184] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4783'. [ 461.111824][T23188] validate_nla: 1 callbacks suppressed [ 461.111842][T23188] netlink: 'syz.4.4784': attribute type 1 has an invalid length. [ 461.162249][T23188] netlink: 'syz.4.4784': attribute type 1 has an invalid length. [ 462.142715][T23243] wg1 speed is unknown, defaulting to 1000 [ 462.151970][T23243] lo speed is unknown, defaulting to 1000 [ 462.176991][T23248] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 462.356344][T23263] netlink: 'syz.2.4802': attribute type 39 has an invalid length. [ 462.479805][T23268] netlink: 'syz.4.4806': attribute type 1 has an invalid length. [ 462.512706][T23268] NCSI netlink: No device for ifindex 0 [ 462.728794][T14421] wlan1: Trigger new scan to find an IBSS to join [ 462.749805][T23288] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 462.781273][T23288] mac80211_hwsim hwsim42 ÿ: renamed from wlan1 (while UP) [ 462.917879][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 462.925930][ C1] lec:lec_tx_timeout: lec0 [ 462.930580][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 463.032074][T23305] tipc: Enabling of bearer rejected, media not registered [ 463.156431][T23314] vlan3: entered promiscuous mode [ 463.181974][T23315] wg1 speed is unknown, defaulting to 1000 [ 463.190253][T23315] lo speed is unknown, defaulting to 1000 [ 463.677215][T23349] netlink: 'syz.3.4831': attribute type 83 has an invalid length. [ 463.785943][T23359] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.793235][T23359] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.817775][T23359] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.824968][T23359] bridge0: port 2(bridge_slave_1) entered forwarding state [ 463.832470][T23359] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.839619][T23359] bridge0: port 1(bridge_slave_0) entered forwarding state [ 463.852866][T23359] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.860113][T23359] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.372223][T23403] 8021q: VLANs not supported on caif0 [ 464.476239][T23408] Cannot find add_set index 2 as target [ 464.533962][T23415] Cannot find add_set index 2 as target [ 464.605927][T23418] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 464.650234][T23423] __nla_validate_parse: 21 callbacks suppressed [ 464.650250][T23423] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4855'. [ 464.667991][T23424] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4855'. [ 464.691938][T23427] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4854'. [ 464.714523][T23427] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4854'. [ 464.829737][T23433] openvswitch: netlink: IP tunnel dst address not specified [ 464.930855][T23443] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 465.021163][T23447] veth0: entered promiscuous mode [ 465.042247][T23444] veth0: left promiscuous mode [ 465.100600][T23449] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4863'. [ 465.294625][T23469] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4869'. [ 465.671243][T23489] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4875'. [ 465.741157][T23496] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4878'. [ 465.747179][T23500] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4879'. [ 465.769048][T14421] wlan1: Trigger new scan to find an IBSS to join [ 465.785399][T23503] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 465.896661][T23511] netlink: 'syz.3.4883': attribute type 58 has an invalid length. [ 465.905778][T23511] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4883'. [ 466.091569][T23521] netlink: 'syz.2.4887': attribute type 83 has an invalid length. [ 466.254738][T23543] netlink: 'syz.4.4891': attribute type 1 has an invalid length. [ 466.308564][T23543] netlink: 'syz.4.4891': attribute type 4 has an invalid length. [ 466.526991][T23557] nbd: device at index 64 is going down [ 466.534449][T23550] IPVS: sh: FWM 3 0x00000003 - no destination available [ 466.543141][T23550] IPVS: sh: FWM 3 0x00000003 - no destination available [ 466.573809][ T796] IPVS: starting estimator thread 0... [ 466.670985][T23561] IPVS: using max 32 ests per chain, 76800 per kthread [ 466.702934][T14426] wlan1: Creating new IBSS network, BSSID 7e:ad:6b:d6:09:a9 [ 466.816554][T23564] udevd[23564]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 466.852066][T23564] udevd[23564]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 466.966259][T23580] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 467.027037][T23585] tipc: Enabling of bearer rejected, failed to enable media [ 467.077136][T23592] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 467.217747][T23602] netlink: 'syz.3.4910': attribute type 12 has an invalid length. [ 467.937909][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 467.946005][ C1] lec:lec_tx_timeout: lec0 [ 467.950636][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 470.632023][T23641] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 470.633193][T23644] __nla_validate_parse: 12 callbacks suppressed [ 470.633210][T23644] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4920'. [ 470.693517][T23651] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 470.713349][T23658] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 470.714125][T23657] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 470.822962][T23668] delete_channel: no stack [ 470.838733][T23668] delete_channel: no stack [ 470.861596][T23673] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4927'. [ 470.884753][T23673] xt_hashlimit: size too large, truncated to 1048576 [ 471.063311][T23689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4932'. [ 471.114866][T23689] vlan2: entered allmulticast mode [ 471.132144][T23689] mac80211_hwsim hwsim43 wlan0: entered allmulticast mode [ 471.501962][T23722] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4942'. [ 471.626992][T23728] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4944'. [ 472.089678][T23760] geneve2: entered promiscuous mode [ 472.105467][T14422] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 56720 - 0 [ 472.145202][T14422] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 56720 - 0 [ 472.166952][T14422] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 56720 - 0 [ 472.168802][T23760] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4955'. [ 472.185702][T23765] netlink: 16166 bytes leftover after parsing attributes in process `syz.2.4954'. [ 472.205765][T14422] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 56720 - 0 [ 472.235727][T23769] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4956'. [ 472.266843][T23768] netlink: 'syz.1.4957': attribute type 1 has an invalid length. [ 472.362599][T23768] 8021q: adding VLAN 0 to HW filter on device bond4 [ 472.405488][T23768] Cannot find del_set index 4 as target [ 472.420861][T23784] gretap0: left allmulticast mode [ 472.426119][T23784] bridge0: port 3(gretap0) entered disabled state [ 472.505907][T23784] bridge_slave_0: left promiscuous mode [ 472.528215][T23784] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.542977][T23785] netlink: 'syz.0.4960': attribute type 16 has an invalid length. [ 472.551198][T23785] netlink: 'syz.0.4960': attribute type 17 has an invalid length. [ 472.559813][T23793] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4959'. [ 472.607504][T23784] bridge_slave_1: left allmulticast mode [ 472.619900][T23784] bridge_slave_1: left promiscuous mode [ 472.625939][T23784] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.641745][T23784] bond0: (slave bond_slave_0): Releasing backup interface [ 472.665598][T23784] bond0: (slave bond_slave_1): Releasing backup interface [ 472.695441][T23784] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 472.714235][T23784] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 472.736206][T23784] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 472.750110][T23784] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 472.772936][T23784] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 472.977980][T23785] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 473.103950][T23809] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4962'. [ 473.180770][T23809] xfrm1: entered promiscuous mode [ 473.210683][T23809] xfrm1: entered allmulticast mode [ 473.767907][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5820 ms [ 473.776019][ C1] lec:lec_tx_timeout: lec0 [ 473.782048][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 474.053561][T23872] netlink: 'syz.0.4980': attribute type 75 has an invalid length. [ 474.083388][T23872] netlink: 'syz.0.4980': attribute type 1 has an invalid length. [ 474.427271][T23892] ip6t_srh: unknown srh match flags 5F28 [ 474.903802][T23914] x_tables: duplicate underflow at hook 1 [ 475.082771][T23916] 8021q: adding VLAN 0 to HW filter on device bond6 [ 475.126778][T23924] netlink: 'syz.4.4990': attribute type 51 has an invalid length. [ 475.200510][T23928] SET target dimension over the limit! [ 475.213934][T23924] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 476.021787][T23973] __nla_validate_parse: 5 callbacks suppressed [ 476.021804][T23973] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5001'. [ 476.069842][T23973] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5001'. [ 476.077540][T23978] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5003'. [ 476.229599][T23981] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5004'. [ 476.551593][T24010] bridge7: entered promiscuous mode [ 476.577673][T24010] bridge7: entered allmulticast mode [ 476.610007][T24020] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 476.677985][ T29] audit: type=1107 audit(1775213294.045:5): pid=24012 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 476.700390][T24001] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 476.839548][T24027] netlink: 'syz.2.5014': attribute type 21 has an invalid length. [ 476.950235][T24027] bond3: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 476.966598][T24031] netlink: 'syz.0.5013': attribute type 2 has an invalid length. [ 476.981536][T24031] netlink: 'syz.0.5013': attribute type 1 has an invalid length. [ 476.991706][T24027] bond3 (unregistering): Released all slaves [ 477.020642][T24034] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5016'. [ 477.040680][T24034] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5016'. [ 477.091865][T24034] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5016'. [ 477.105108][T24034] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5016'. [ 477.117283][T24034] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5016'. [ 477.149228][T24034] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5016'. [ 477.826550][T24096] xt_hashlimit: size too large, truncated to 1048576 [ 478.150051][T24126] netlink: 'syz.4.5037': attribute type 142 has an invalid length. [ 478.421875][T24145] netlink: 'syz.2.5043': attribute type 5 has an invalid length. [ 478.495319][T24148] netlink: 'syz.3.5044': attribute type 3 has an invalid length. [ 478.640692][T24161] batman_adv: batadv0: Adding interface: dummy0 [ 478.657257][T24161] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 478.710274][T24161] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 478.758723][T24169] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 478.797880][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 478.805958][ C1] lec:lec_tx_timeout: lec0 [ 478.811248][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 479.508783][T24212] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 480.915106][T24302] bond4: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 480.961860][T24302] bond4 (unregistering): Released all slaves [ 482.733372][T24237] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 482.889642][T24365] syzkaller1: entered promiscuous mode [ 482.895165][T24365] syzkaller1: entered allmulticast mode [ 482.903930][T24368] netlink: 'syz.2.5078': attribute type 4 has an invalid length. [ 482.917794][T24370] __nla_validate_parse: 34 callbacks suppressed [ 482.924365][T24370] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5080'. [ 482.924554][T24372] netlink: 'syz.3.5081': attribute type 10 has an invalid length. [ 482.952767][T24368] netlink: 'syz.2.5078': attribute type 4 has an invalid length. [ 482.969686][T24369] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5080'. [ 482.969897][T24372] team0: Device vxcan1 is of different type [ 483.022213][T24365] syzkaller1: left promiscuous mode [ 483.027481][T24365] syzkaller1: left allmulticast mode [ 483.036800][T24365] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5079'. [ 483.133886][T24380] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5084'. [ 483.135194][T24384] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5083'. [ 483.180326][T24380] team0: Port device team_slave_0 removed [ 483.418224][T24407] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5092'. [ 483.554673][T24427] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 483.704923][T24435] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5099'. [ 483.760824][T24432] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5099'. [ 483.771898][T24432] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5099'. [ 483.801538][T24441] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5101'. [ 483.817880][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 483.825889][ C1] lec:lec_tx_timeout: lec0 [ 483.830948][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 484.473794][T24494] sctp: [Deprecated]: syz.0.5118 (pid 24494) Use of int in maxseg socket option. [ 484.473794][T24494] Use struct sctp_assoc_value instead [ 484.519800][T24494] netlink: 'syz.0.5118': attribute type 4 has an invalid length. [ 484.606874][T24505] netlink: 'syz.4.5122': attribute type 83 has an invalid length. [ 485.228186][T24531] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 485.716134][T24554] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 485.756380][T24554] team0: Port device batadv3 added [ 485.866313][T24571] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 486.055583][ T796] wg1 speed is unknown, defaulting to 1000 [ 486.069141][ T796] syz2: Port: 1 Link DOWN [ 486.191739][T14424] bridge_slave_1: left allmulticast mode [ 486.199640][T14424] bridge_slave_1: left promiscuous mode [ 486.208798][T14424] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.237592][T14424] bridge_slave_0: left allmulticast mode [ 486.277994][T14424] bridge_slave_0: left promiscuous mode [ 486.291639][T14424] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.707157][T14424] erspan0 (unregistering): left promiscuous mode [ 486.731642][T14424] gretap0 (unregistering): left promiscuous mode [ 486.773157][T14424] bond7 (unregistering): (slave gretap3): Releasing active interface [ 486.821228][T14424] bond4 (unregistering): (slave geneve4): Releasing active interface [ 486.833647][T14424] bond2 (unregistering): (slave geneve3): Releasing active interface [ 486.902826][T14424] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 486.911645][T14424] bridge1 (unregistering): left promiscuous mode [ 487.232604][T14424] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 487.243925][T14424] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 487.253982][T14424] bond0 (unregistering): Released all slaves [ 487.266806][T14424] bond1 (unregistering): Released all slaves [ 487.280555][T14424] bond2 (unregistering): Released all slaves [ 487.294354][T14424] bond3 (unregistering): (slave lo): Releasing backup interface [ 487.303128][T14424] bond3 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 487.315459][T14424] bond3 (unregistering): Released all slaves [ 487.329113][T14424] bond4 (unregistering): Released all slaves [ 487.341306][T14424] bond5 (unregistering): Released all slaves [ 487.354547][T14424] bond6 (unregistering): Released all slaves [ 487.366805][T14424] bond7 (unregistering): Released all slaves [ 487.381801][T14424] bond8 (unregistering): (slave vlan0): Releasing backup interface [ 487.390183][T14424] tipc: Resetting bearer [ 487.396365][T14424] veth0_vlan: left promiscuous mode [ 487.405334][T14424] tipc: Resetting bearer [ 487.412151][T14424] bond8 (unregistering): Released all slaves [ 487.426744][T14424] bond9 (unregistering): (slave veth7): Releasing active interface [ 487.434850][T14424] dummy0: entered promiscuous mode [ 487.442556][T14424] bond9 (unregistering): (slave dummy0): Releasing active interface [ 487.454084][T14424] bond9 (unregistering): Released all slaves [ 487.665147][T14424] 9: left promiscuous mode [ 487.688173][T24635] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 487.796187][T14424] tipc: Disabling bearer [ 487.807325][T14424] tipc: Left network mode [ 488.102964][T24662] gre0: entered promiscuous mode [ 488.108040][T24662] gre0: entered allmulticast mode [ 488.575390][T24693] bond3 (unregistering): Released all slaves [ 488.700231][T24707] netlink: 'syz.3.5168': attribute type 30 has an invalid length. [ 488.743844][T24708] netlink: 'syz.2.5166': attribute type 1 has an invalid length. [ 488.768533][T24711] netlink: 'syz.3.5168': attribute type 62 has an invalid length. [ 488.837851][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 488.845927][ C1] lec:lec_tx_timeout: lec0 [ 488.887202][T24719] __nla_validate_parse: 13 callbacks suppressed [ 488.887231][T24719] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5172'. [ 488.941221][T24723] netlink: 'syz.3.5173': attribute type 75 has an invalid length. [ 488.958077][T14424] hsr_slave_0: left promiscuous mode [ 489.007927][T14424] hsr_slave_1: left promiscuous mode [ 489.028423][T14424] veth1_macvtap: left promiscuous mode [ 489.034238][T14424] veth1_vlan: left promiscuous mode [ 489.751060][T24719] veth0_macvtap: left promiscuous mode [ 489.799169][T24737] IPv6: sit1: Disabled Multicast RS [ 489.805481][T24737] sit1: entered allmulticast mode [ 489.938525][T24730] syzkaller0: entered promiscuous mode [ 489.952145][T24730] syzkaller0: entered allmulticast mode [ 490.032673][T24754] syzkaller0: entered promiscuous mode [ 490.040850][T24754] syzkaller0: entered allmulticast mode [ 493.126427][T14424] IPVS: stop unused estimator thread 0... [ 493.355458][T24824] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.5192'. [ 493.379290][T24828] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5193'. [ 493.596934][T24845] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5198'. [ 493.636524][T24848] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5200'. [ 493.652769][T24848] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5200'. [ 493.672530][T24848] pim6reg: entered allmulticast mode [ 493.877584][T24859] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5204'. [ 493.911654][T24862] netlink: 'syz.0.5205': attribute type 1 has an invalid length. [ 493.930319][T24862] netlink: 'syz.0.5205': attribute type 2 has an invalid length. [ 494.073862][T24871] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 494.191640][T24882] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 494.220366][T24884] xt_TCPMSS: Only works on TCP SYN packets [ 494.296123][T24888] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5216'. [ 494.341105][T24888] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5216'. [ 494.377660][T24893] netlink: 368 bytes leftover after parsing attributes in process `syz.1.5217'. [ 494.396051][T24893] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5217'. [ 494.412242][T24894] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5218'. [ 494.446143][T24893] netlink: 'syz.1.5217': attribute type 1 has an invalid length. [ 494.461798][T24893] netlink: 'syz.1.5217': attribute type 2 has an invalid length. [ 494.471709][T24893] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5217'. [ 494.484411][T24893] netlink: 43 bytes leftover after parsing attributes in process `syz.1.5217'. [ 494.499788][T24893] netlink: 'syz.1.5217': attribute type 5 has an invalid length. [ 494.507640][T24893] netlink: 43 bytes leftover after parsing attributes in process `syz.1.5217'. [ 494.536887][T24897] bond3: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 494.551211][T24897] bond3 (unregistering): Released all slaves [ 494.573173][T24909] netlink: 'syz.0.5221': attribute type 21 has an invalid length. [ 494.581456][T24909] IPv6: NLM_F_CREATE should be specified when creating new route [ 494.693850][T24911] syzkaller0: entered promiscuous mode [ 494.699749][T24911] syzkaller0: entered allmulticast mode [ 494.850535][T24925] xt_hashlimit: overflow, rate too high: 0 [ 494.913309][T24933] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5230'. [ 494.974315][T24936] netlink: 'syz.3.5232': attribute type 11 has an invalid length. [ 494.983087][T24936] netlink: 'syz.3.5232': attribute type 4 has an invalid length. [ 494.991534][T24936] netlink: 199768 bytes leftover after parsing attributes in process `syz.3.5232'. [ 495.400315][T24977] netlink: 'syz.0.5244': attribute type 2 has an invalid length. [ 495.994534][T25023] netlink: 'syz.4.5258': attribute type 1 has an invalid length. [ 496.052890][T25023] bond4: entered promiscuous mode [ 496.060192][T25023] bond4: entered allmulticast mode [ 496.065725][T25023] 8021q: adding VLAN 0 to HW filter on device bond4 [ 496.095690][T25028] macvlan4: entered promiscuous mode [ 496.101233][T25028] macvlan4: entered allmulticast mode [ 496.109043][T25028] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 496.148405][T25023] netlink: 'syz.4.5258': attribute type 1 has an invalid length. [ 496.203766][T25031] syzkaller0: entered promiscuous mode [ 496.209395][T25031] syzkaller0: entered allmulticast mode [ 496.513461][T25050] bond7: Removing last arp target with arp_interval on [ 496.715393][T25068] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 496.764148][T14422] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 496.798856][T25071] 8021q: adding VLAN 0 to HW filter on device bond3 [ 496.919214][T25075] bond3: (slave veth5): Enslaving as an active interface with a down link [ 496.949946][T25080] bond3: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 497.104385][T25095] bond3: (slave veth0_to_bond): Releasing active interface [ 497.117682][T25095] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 497.272932][T25095] syzkaller0: entered promiscuous mode [ 499.113546][T25135] ipvlan2: entered allmulticast mode [ 499.119717][T25135] batadv_slave_1: entered allmulticast mode [ 499.126991][T25135] batman_adv: batadv0: Adding interface: ipvlan2 [ 499.133549][T25135] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 499.160998][T25135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 499.172281][T25135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.184062][T25135] batman_adv: batadv0: Interface activated: ipvlan2 [ 499.437635][T25172] __nla_validate_parse: 22 callbacks suppressed [ 499.437654][T25172] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5299'. [ 499.494046][T25175] validate_nla: 5 callbacks suppressed [ 499.494065][T25175] netlink: 'syz.3.5301': attribute type 13 has an invalid length. [ 499.652783][T25179] pim6reg: entered allmulticast mode [ 499.662538][T25184] pim6reg: left allmulticast mode [ 499.686655][T25188] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5306'. [ 499.703220][T25175] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5301'. [ 499.952063][T25211] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5310'. [ 499.973097][T25191] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 500.070029][T25216] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5312'. [ 500.112403][T25218] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 500.143852][T25223] syzkaller0: entered promiscuous mode [ 500.154609][T25223] syzkaller0: entered allmulticast mode [ 500.471341][T25243] bond3: option packets_per_slave: invalid value (18446744073709551615) [ 500.479805][T25243] bond3: option packets_per_slave: allowed values 0 - 65535 [ 500.506010][T25243] bond3 (unregistering): Released all slaves [ 500.585932][T25244] : entered promiscuous mode [ 500.733502][T25266] netlink: 'syz.0.5324': attribute type 16 has an invalid length. [ 500.752687][T25266] netlink: 'syz.0.5324': attribute type 17 has an invalid length. [ 500.783769][T25266] F: left allmulticast mode [ 500.851097][T25266] erspan0: left allmulticast mode [ 500.862738][T25272] xt_CT: No such helper "snmp_trap" [ 500.884552][T25266] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 500.901484][ T5880] lo speed is unknown, defaulting to 1000 [ 500.918010][ T5880] syz0: Port: 1 Link ACTIVE [ 501.245643][T25294] netlink: 294 bytes leftover after parsing attributes in process `syz.2.5332'. [ 501.254936][T25294] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 501.376081][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 501.865783][T25335] lo speed is unknown, defaulting to 1000 [ 502.125343][T25359] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5355'. [ 502.130068][T25351] netlink: 'syz.1.5356': attribute type 1 has an invalid length. [ 502.137174][T25359] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5355'. [ 502.315547][T25360] bond6: (slave ip6gretap1): making interface the new active one [ 502.338882][T25360] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 502.346670][T25360] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 502.381157][T25360] bond6: (slave ip6gretap1): Enslaving as an active interface with an up link [ 502.392129][T25371] IPVS: sh: FWM 3 0x00000003 - no destination available [ 502.412085][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 502.566642][T25377] veth1_macvtap: renamed from veth0_vlan [ 502.579739][T25384] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5364'. [ 502.922061][T25420] netlink: 'syz.3.5375': attribute type 12 has an invalid length. [ 503.379351][T25456] kthread_run failed with err -4 [ 503.622143][T25473] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5384'. [ 503.921615][T25491] openvswitch: netlink: Unknown nsh attribute 0 [ 503.962252][T25496] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 504.062915][ T5488] veth1_macvtap: left promiscuous mode [ 504.126371][ T5488] veth1_macvtap: entered promiscuous mode [ 504.658747][T25537] delete_channel: no stack [ 504.687601][T25528] pim6reg1: entered promiscuous mode [ 504.704238][T25528] pim6reg1: entered allmulticast mode [ 504.719774][T25525] __nla_validate_parse: 5 callbacks suppressed [ 504.719791][T25525] netlink: 788 bytes leftover after parsing attributes in process `syz.2.5395'. [ 505.001938][T25561] netlink: 'syz.3.5404': attribute type 1 has an invalid length. [ 505.013308][T25561] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5404'. [ 505.026090][T25558] netlink: 296 bytes leftover after parsing attributes in process `syz.0.5403'. [ 505.046463][T25561] NCSI netlink: No device for ifindex 0 [ 505.161853][T25569] set match dimension is over the limit! [ 505.601808][T25601] ip6tnl0: Caught tx_queue_len zero misconfig [ 505.643823][T25601] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5415'. [ 505.901484][T25612] syzkaller0: entered promiscuous mode [ 505.917688][T25612] syzkaller0: entered allmulticast mode [ 506.104476][T25626] netlink: 'syz.4.5421': attribute type 13 has an invalid length. [ 506.261238][T25653] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5426'. [ 506.342193][T25632] syzkaller1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 506.365475][T25666] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5426'. [ 506.597531][T25677] netlink: 148 bytes leftover after parsing attributes in process `syz.2.5430'. [ 506.668656][T25681] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5430'. [ 506.728081][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5350 ms [ 506.736161][ C1] lec:lec_tx_timeout: lec0 [ 506.801205][T25681] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5430'. [ 506.922588][T25681] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5430'. [ 507.139679][T25702] netlink: 'syz.3.5437': attribute type 1 has an invalid length. [ 507.151521][T25696] syzkaller0: entered promiscuous mode [ 507.157028][T25696] syzkaller0: entered allmulticast mode [ 507.226896][T25711] FAULT_INJECTION: forcing a failure. [ 507.226896][T25711] name failslab, interval 1, probability 0, space 0, times 1 [ 507.256896][T25711] CPU: 0 UID: 0 PID: 25711 Comm: syz.0.5440 Not tainted syzkaller #0 PREEMPT(full) [ 507.256922][T25711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 507.256933][T25711] Call Trace: [ 507.256940][T25711] [ 507.256947][T25711] dump_stack_lvl+0xe8/0x150 [ 507.256976][T25711] should_fail_ex+0x412/0x560 [ 507.257007][T25711] should_failslab+0xa8/0x100 [ 507.257033][T25711] __kmalloc_noprof+0xe8/0x760 [ 507.257053][T25711] ? rcu_is_watching+0x15/0xb0 [ 507.257076][T25711] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 507.257107][T25711] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 507.257137][T25711] genl_family_rcv_msg_doit+0xd9/0x330 [ 507.257161][T25711] ? __asan_memcpy+0x40/0x70 [ 507.257182][T25711] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 507.257213][T25711] ? apparmor_capable+0x126/0x170 [ 507.257236][T25711] ? bpf_lsm_capable+0x9/0x20 [ 507.257260][T25711] ? security_capable+0x7e/0x2c0 [ 507.257292][T25711] genl_rcv_msg+0x61c/0x7a0 [ 507.257320][T25711] ? __pfx_genl_rcv_msg+0x10/0x10 [ 507.257340][T25711] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 507.257360][T25711] ? __pfx_nl802154_wpan_phy_netns+0x10/0x10 [ 507.257379][T25711] ? __pfx_nl802154_post_doit+0x10/0x10 [ 507.257399][T25711] ? __lock_acquire+0x6b5/0x2cf0 [ 507.257433][T25711] netlink_rcv_skb+0x232/0x4b0 [ 507.257452][T25711] ? __pfx_genl_rcv_msg+0x10/0x10 [ 507.257476][T25711] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 507.257512][T25711] ? down_read+0x272/0x2e0 [ 507.257535][T25711] ? genl_rcv+0xd/0x40 [ 507.257557][T25711] genl_rcv+0x28/0x40 [ 507.257585][T25711] netlink_unicast+0x80f/0x9b0 [ 507.257619][T25711] ? __pfx_netlink_unicast+0x10/0x10 [ 507.257646][T25711] ? netlink_sendmsg+0x650/0xb40 [ 507.257663][T25711] ? skb_put+0x11b/0x210 [ 507.257687][T25711] netlink_sendmsg+0x813/0xb40 [ 507.257715][T25711] ? __pfx_netlink_sendmsg+0x10/0x10 [ 507.257737][T25711] ? aa_sock_msg_perm+0xf1/0x1b0 [ 507.257765][T25711] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 507.257789][T25711] ____sys_sendmsg+0x972/0x9f0 [ 507.257821][T25711] ? __pfx_____sys_sendmsg+0x10/0x10 [ 507.257851][T25711] ? import_iovec+0x73/0xa0 [ 507.257875][T25711] ___sys_sendmsg+0x2a5/0x360 [ 507.257903][T25711] ? __pfx____sys_sendmsg+0x10/0x10 [ 507.257961][T25711] ? __fget_files+0x2a/0x420 [ 507.257977][T25711] ? __fget_files+0x3a0/0x420 [ 507.258004][T25711] __x64_sys_sendmsg+0x1bd/0x2a0 [ 507.258029][T25711] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 507.258062][T25711] ? __pfx_ksys_write+0x10/0x10 [ 507.258094][T25711] do_syscall_64+0x14d/0xf80 [ 507.258115][T25711] ? trace_irq_disable+0x3b/0x150 [ 507.258130][T25711] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.258148][T25711] ? clear_bhb_loop+0x40/0x90 [ 507.258170][T25711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.258188][T25711] RIP: 0033:0x7f242ad9c819 [ 507.258205][T25711] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 507.258220][T25711] RSP: 002b:00007f242bbc3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 507.258239][T25711] RAX: ffffffffffffffda RBX: 00007f242b015fa0 RCX: 00007f242ad9c819 [ 507.258252][T25711] RDX: 0000000000000050 RSI: 0000200000000940 RDI: 0000000000000004 [ 507.258263][T25711] RBP: 00007f242bbc3090 R08: 0000000000000000 R09: 0000000000000000 [ 507.258274][T25711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 507.258285][T25711] R13: 00007f242b016038 R14: 00007f242b015fa0 R15: 00007ffe1ca35b28 [ 507.258316][T25711] [ 508.064527][T25741] netlink: 'syz.0.5448': attribute type 12 has an invalid length. [ 508.229129][T25756] openvswitch: netlink: IP tunnel dst address not specified [ 508.350174][T25761] syzkaller0: entered promiscuous mode [ 508.364572][T25761] syzkaller0: entered allmulticast mode [ 508.515767][T25775] netlink: 'syz.3.5456': attribute type 142 has an invalid length. [ 508.532010][T25775] netlink: 'syz.3.5456': attribute type 10 has an invalid length. [ 508.655635][T25783] vlan3: entered allmulticast mode [ 508.663571][T25783] batadv_slave_0: entered allmulticast mode [ 508.877584][T25797] netlink: 'syz.4.5464': attribute type 1 has an invalid length. [ 509.193805][T25818] openvswitch: netlink: Tunnel attr 16 has unexpected len 20 expected 0 [ 509.269333][T25818] bridge8: port 1(veth5) entered blocking state [ 509.289706][T25818] bridge8: port 1(veth5) entered disabled state [ 509.296210][T25818] veth5: entered allmulticast mode [ 509.316421][T25818] veth5: entered promiscuous mode [ 509.391734][T25827] bridge8: port 2(veth7) entered blocking state [ 509.408979][T25827] bridge8: port 2(veth7) entered disabled state [ 509.418754][T25827] veth7: entered allmulticast mode [ 509.426378][T25827] veth7: entered promiscuous mode [ 509.607707][T25862] netlink: 'syz.4.5476': attribute type 12 has an invalid length. [ 509.790567][T25882] x_tables: duplicate entry at hook 1 [ 509.875211][T25888] syzkaller0: entered promiscuous mode [ 510.764508][T25900] __nla_validate_parse: 15 callbacks suppressed [ 510.764520][T25900] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5487'. [ 511.608660][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 512.518066][T25848] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 512.539471][T25874] netlink: 'syz.0.5477': attribute type 9 has an invalid length. [ 512.882394][T25939] Cannot find map_set index 65533 as target [ 513.251969][T25971] xt_hashlimit: size too large, truncated to 1048576 [ 513.386639][T25986] netlink: 'syz.1.5510': attribute type 10 has an invalid length. [ 513.414200][T25986] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.422511][T25986] bridge_slave_1: left allmulticast mode [ 513.428480][T25986] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.452348][T25986] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 513.529492][T25993] sctp: [Deprecated]: syz.3.5512 (pid 25993) Use of int in maxseg socket option. [ 513.529492][T25993] Use struct sctp_assoc_value instead [ 513.622636][T26001] tipc: Enabled bearer , priority 10 [ 513.630718][T26003] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5515'. [ 513.686739][T26006] openvswitch: netlink: Message has 8 unknown bytes. [ 513.714424][T26006] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 513.759359][T26012] netlink: 80 bytes leftover after parsing attributes in process `syz.0.5515'. [ 513.789161][T26012] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5515'. [ 513.820016][T26012] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5515'. [ 513.861972][T26014] netlink: 168 bytes leftover after parsing attributes in process `syz.1.5519'. [ 514.021518][T26023] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5523'. [ 514.125809][T26026] netlink: 'syz.1.5524': attribute type 2 has an invalid length. [ 514.141367][T26028] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5525'. [ 514.161116][T26028] netlink: 232 bytes leftover after parsing attributes in process `syz.3.5525'. [ 514.188382][T26030] syz_tun: entered allmulticast mode [ 514.239365][T26030] syz_tun: left allmulticast mode [ 514.301855][T26037] Cannot find del_set index 4 as target [ 514.313624][T26037] netlink: 232 bytes leftover after parsing attributes in process `syz.2.5528'. [ 514.325911][T14422] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 514.330602][T26039] netlink: 'syz.1.5530': attribute type 3 has an invalid length. [ 514.338298][T14422] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 514.342938][T26039] netlink: 'syz.1.5530': attribute type 1 has an invalid length. [ 514.353152][T14422] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 514.397287][T14422] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 514.782025][T26074] netlink: 'syz.3.5538': attribute type 4 has an invalid length. [ 514.822447][T26074] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 514.822945][T26076] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 514.877213][T26071] syzkaller0: entered promiscuous mode [ 514.886477][T26071] 0: reclassify loop, rule prio 0, protocol 800 [ 515.124201][T26094] tipc: Enabled bearer , priority 0 [ 515.236799][T26094] syzkaller0: entered promiscuous mode [ 515.243336][T26094] syzkaller0: entered allmulticast mode [ 515.250116][T26094] tipc: Resetting bearer [ 515.398102][T26094] tipc: Resetting bearer [ 516.060992][T26144] netlink: 'syz.2.5557': attribute type 1 has an invalid length. [ 516.069018][T26144] netlink: 'syz.2.5557': attribute type 2 has an invalid length. [ 516.077002][T26144] netlink: 'syz.2.5557': attribute type 1 has an invalid length. [ 516.085052][T26144] netlink: 'syz.2.5557': attribute type 3 has an invalid length. [ 516.093644][T26144] __nla_validate_parse: 5 callbacks suppressed [ 516.093658][T26144] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5557'. [ 516.809287][T14426] wlan1: Trigger new scan to find an IBSS to join [ 517.027246][T26094] tipc: Disabling bearer [ 517.119624][T26153] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5559'. [ 517.191586][T26158] netlink: 256 bytes leftover after parsing attributes in process `syz.0.5561'. [ 517.280490][T26169] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5560'. [ 517.308292][T26169] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5560'. [ 517.329622][T26171] openvswitch: netlink: VXLAN extension 78 out of range max 1 [ 517.365872][T15556] lec:lec_start_xmit: lec0:No lecd attached [ 517.394552][T26163] bond5: entered promiscuous mode [ 517.404880][T26163] bond5: entered allmulticast mode [ 517.411446][T26163] 8021q: adding VLAN 0 to HW filter on device bond5 [ 517.610508][T26188] 8021q: adding VLAN 0 to HW filter on device bond8 [ 517.625636][T26188] validate_nla: 1 callbacks suppressed [ 517.625654][T26188] netlink: 'syz.1.5567': attribute type 21 has an invalid length. [ 517.653878][T26188] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5567'. [ 517.795820][T26199] bond3: Unable to set peer notification delay as MII monitoring is disabled [ 517.810677][T26199] bond3 (unregistering): Released all slaves [ 517.909541][T26203] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5572'. [ 518.149468][T26223] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 518.173580][T26223] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 518.540982][T26236] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5579'. [ 519.644740][T26281] netem: change failed [ 519.769122][T14422] wlan1: Trigger new scan to find an IBSS to join [ 519.930129][T26301] netlink: 'syz.0.5596': attribute type 25 has an invalid length. [ 520.022911][T26311] netlink: 'syz.1.5599': attribute type 11 has an invalid length. [ 520.048950][T26311] netlink: 'syz.1.5599': attribute type 4 has an invalid length. [ 520.071683][T26311] netlink: 'syz.1.5599': attribute type 5 has an invalid length. [ 520.119547][T26311] netlink: 'syz.1.5599': attribute type 6 has an invalid length. [ 520.127307][T26311] netlink: 199748 bytes leftover after parsing attributes in process `syz.1.5599'. [ 520.183210][T26317] syzkaller1: entered promiscuous mode [ 520.210762][T26317] syzkaller1: entered allmulticast mode [ 520.238307][T26317] netlink: 'syz.2.5601': attribute type 2 has an invalid length. [ 520.268052][T26317] netlink: 119 bytes leftover after parsing attributes in process `syz.2.5601'. [ 520.498997][T26333] netlink: 'syz.1.5607': attribute type 21 has an invalid length. [ 520.722590][T26348] netlink: 'syz.2.5609': attribute type 1 has an invalid length. [ 520.748084][T26348] netlink: 'syz.2.5609': attribute type 1 has an invalid length. [ 520.905080][T26356] openvswitch: netlink: IPv4 tun info is not correct [ 521.077464][T26367] sctp: [Deprecated]: syz.3.5618 (pid 26367) Use of int in max_burst socket option deprecated. [ 521.077464][T26367] Use struct sctp_assoc_value instead [ 521.142828][T26371] syzkaller0: entered promiscuous mode [ 521.150070][T26367] sctp: [Deprecated]: syz.3.5618 (pid 26367) Use of int in max_burst socket option deprecated. [ 521.150070][T26367] Use struct sctp_assoc_value instead [ 521.154516][T26371] syzkaller0: entered allmulticast mode [ 521.231107][T26383] __nla_validate_parse: 6 callbacks suppressed [ 521.231126][T26383] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5618'. [ 521.328465][T26386] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5621'. [ 521.374382][T26379] netlink: 'syz.4.5620': attribute type 6 has an invalid length. [ 521.403851][T26379] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5620'. [ 521.510092][T26399] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5624'. [ 521.562477][T26379] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5620'. [ 521.715539][T26415] netlink: 54 bytes leftover after parsing attributes in process `syz.2.5626'. [ 521.727387][T26415] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5626'. [ 521.859406][T26423] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5629'. [ 521.999889][T26434] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5632'. [ 522.144503][T26449] xt_TPROXY: Can be used only with -p tcp or -p udp [ 522.464658][T26483] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.5642'. [ 522.727849][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5360 ms [ 522.735935][ C1] lec:lec_tx_timeout: lec0 [ 522.742133][T14421] wlan1: Trigger new scan to find an IBSS to join [ 523.098312][T26521] sctp: [Deprecated]: syz.0.5649 (pid 26521) Use of int in max_burst socket option. [ 523.098312][T26521] Use struct sctp_assoc_value instead [ 523.150896][T26523] ipvlan3: entered allmulticast mode [ 523.156239][T26523] batadv_slave_1: entered allmulticast mode [ 523.176057][T26523] batman_adv: batadv0: Adding interface: ipvlan3 [ 523.187321][T26523] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 523.214351][T26523] batman_adv: batadv0: Interface activated: ipvlan3 [ 523.330983][T26530] smc: adding net device team0 with user defined pnetid SYZ2 [ 523.353384][T26530] team0: entered promiscuous mode [ 523.372860][T26530] team0: entered allmulticast mode [ 523.543264][T26555] lo speed is unknown, defaulting to 1000 [ 523.673507][T14426] wlan1: Creating new IBSS network, BSSID 00:8d:ff:ff:00:00 [ 524.143033][T26604] syzkaller0: entered promiscuous mode [ 524.186025][T26613] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 524.211570][T26611] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 524.234271][T26613] syzkaller0: entered promiscuous mode [ 524.244569][T26613] syzkaller0: entered allmulticast mode [ 524.504359][T26623] bridge_slave_1: default FDB implementation only supports local addresses [ 524.514393][T26628] team_slave_1: Caught tx_queue_len zero misconfig [ 524.527493][T26625] syzkaller0: entered promiscuous mode [ 524.533291][T26625] syzkaller0: entered allmulticast mode [ 524.874845][T26653] netlink: 'syz.3.5684': attribute type 1 has an invalid length. [ 524.885003][T26650] netlink: 'syz.3.5684': attribute type 1 has an invalid length. [ 524.937429][T26653] 8021q: adding VLAN 0 to HW filter on device bond3 [ 524.987595][T14418] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 256 - 0 [ 525.014222][T14418] netdevsim netdevsim0 netdevsim0: unset [0, 1] type 1 family 0 port 8472 - 0 [ 525.046175][T14418] netdevsim netdevsim0 netdevsim0: unset [0, 2] type 1 family 0 port 2816 - 0 [ 525.058285][T14418] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.153154][T26684] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 528.175816][T26700] netlink: 'syz.2.5697': attribute type 1 has an invalid length. [ 528.387251][T26739] __nla_validate_parse: 18 callbacks suppressed [ 528.387270][T26739] netlink: 260 bytes leftover after parsing attributes in process `syz.1.5708'. [ 528.543222][T26754] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5710'. [ 528.628293][T26758] IPVS: persistence engine module ip_vs_pe_À not found [ 528.631791][T26761] bond8: entered promiscuous mode [ 528.641401][T26761] bond8: entered allmulticast mode [ 528.646905][T26761] 8021q: adding VLAN 0 to HW filter on device bond8 [ 528.878662][T26781] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5715'. [ 529.056024][T26792] FAULT_INJECTION: forcing a failure. [ 529.056024][T26792] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 529.081816][T26796] syzkaller0: entered promiscuous mode [ 529.090885][T26792] CPU: 0 UID: 0 PID: 26792 Comm: syz.4.5720 Not tainted syzkaller #0 PREEMPT(full) [ 529.090908][T26792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 529.090918][T26792] Call Trace: [ 529.090925][T26792] [ 529.090932][T26792] dump_stack_lvl+0xe8/0x150 [ 529.090961][T26792] should_fail_ex+0x412/0x560 [ 529.090992][T26792] _copy_from_user+0x2d/0xb0 [ 529.091014][T26792] ___sys_sendmsg+0x1c6/0x360 [ 529.091042][T26792] ? __pfx____sys_sendmsg+0x10/0x10 [ 529.091094][T26792] ? __fget_files+0x2a/0x420 [ 529.091110][T26792] ? __fget_files+0x3a0/0x420 [ 529.091142][T26792] __x64_sys_sendmsg+0x1bd/0x2a0 [ 529.091168][T26792] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 529.091198][T26792] ? __pfx_ksys_write+0x10/0x10 [ 529.091229][T26792] do_syscall_64+0x14d/0xf80 [ 529.091250][T26792] ? trace_irq_disable+0x3b/0x150 [ 529.091265][T26792] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.091283][T26792] ? clear_bhb_loop+0x40/0x90 [ 529.091304][T26792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.091321][T26792] RIP: 0033:0x7f10a359c819 [ 529.091337][T26792] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 529.091351][T26792] RSP: 002b:00007f10a4428028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 529.091370][T26792] RAX: ffffffffffffffda RBX: 00007f10a3815fa0 RCX: 00007f10a359c819 [ 529.091383][T26792] RDX: 0000000000000050 RSI: 0000200000000940 RDI: 0000000000000004 [ 529.091394][T26792] RBP: 00007f10a4428090 R08: 0000000000000000 R09: 0000000000000000 [ 529.091404][T26792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 529.091414][T26792] R13: 00007f10a3816038 R14: 00007f10a3815fa0 R15: 00007ffde1cbcc08 [ 529.091442][T26792] [ 529.101711][T26796] syzkaller0: entered allmulticast mode [ 529.265196][T26811] netlink: 380 bytes leftover after parsing attributes in process `syz.4.5724'. [ 529.284221][T26798] xt_hashlimit: size too large, truncated to 1048576 [ 529.711900][T26838] netlink: 276 bytes leftover after parsing attributes in process `syz.3.5732'. [ 529.734875][T26838] netlink: 'syz.3.5732': attribute type 25 has an invalid length. [ 529.753151][T26833] lo speed is unknown, defaulting to 1000 [ 529.782008][T26838] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5732'. [ 530.099443][T26849] syzkaller1: entered promiscuous mode [ 530.105041][T26849] syzkaller1: entered allmulticast mode [ 530.162549][T26855] netlink: 256 bytes leftover after parsing attributes in process `syz.1.5739'. [ 530.173561][T26855] netlink: 256 bytes leftover after parsing attributes in process `syz.1.5739'. [ 530.196285][T26857] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5738'. [ 530.205547][T26857] openvswitch: netlink: Missing key (keys=40, expected=80) [ 530.521650][T26882] netlink: 144 bytes leftover after parsing attributes in process `syz.4.5747'. [ 530.553986][T26882] netlink: 'syz.4.5747': attribute type 29 has an invalid length. [ 530.584928][T26885] tipc: Started in network mode [ 530.592413][T26885] tipc: Node identity , cluster identity 4711 [ 530.606490][T26885] tipc: Failed to set node id, please configure manually [ 530.614338][T26885] tipc: Enabling of bearer rejected, failed to enable media [ 530.916859][T26913] netlink: 'syz.4.5757': attribute type 1 has an invalid length. [ 530.954064][T26919] xt_socket: unknown flags 0x50 [ 531.154528][T26934] netlink: 'syz.0.5765': attribute type 10 has an invalid length. [ 531.219367][T26945] FAULT_INJECTION: forcing a failure. [ 531.219367][T26945] name failslab, interval 1, probability 0, space 0, times 0 [ 531.235586][T26945] CPU: 1 UID: 0 PID: 26945 Comm: syz.4.5767 Not tainted syzkaller #0 PREEMPT(full) [ 531.235609][T26945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 531.235620][T26945] Call Trace: [ 531.235627][T26945] [ 531.235634][T26945] dump_stack_lvl+0xe8/0x150 [ 531.235671][T26945] should_fail_ex+0x412/0x560 [ 531.235703][T26945] should_failslab+0xa8/0x100 [ 531.235728][T26945] __kmalloc_noprof+0xe8/0x760 [ 531.235748][T26945] ? rcu_is_watching+0x15/0xb0 [ 531.235771][T26945] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 531.235801][T26945] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 531.235831][T26945] genl_family_rcv_msg_doit+0xd9/0x330 [ 531.235855][T26945] ? __asan_memcpy+0x40/0x70 [ 531.235876][T26945] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 531.235906][T26945] ? apparmor_capable+0x126/0x170 [ 531.235929][T26945] ? bpf_lsm_capable+0x9/0x20 [ 531.235952][T26945] ? security_capable+0x7e/0x2c0 [ 531.235984][T26945] genl_rcv_msg+0x61c/0x7a0 [ 531.236012][T26945] ? __pfx_genl_rcv_msg+0x10/0x10 [ 531.236033][T26945] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 531.236051][T26945] ? __pfx_nl802154_wpan_phy_netns+0x10/0x10 [ 531.236071][T26945] ? __pfx_nl802154_post_doit+0x10/0x10 [ 531.236091][T26945] ? __lock_acquire+0x6b5/0x2cf0 [ 531.236125][T26945] netlink_rcv_skb+0x232/0x4b0 [ 531.236144][T26945] ? __pfx_genl_rcv_msg+0x10/0x10 [ 531.236169][T26945] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 531.236205][T26945] ? down_read+0x272/0x2e0 [ 531.236227][T26945] ? genl_rcv+0xd/0x40 [ 531.236250][T26945] genl_rcv+0x28/0x40 [ 531.236270][T26945] netlink_unicast+0x80f/0x9b0 [ 531.236304][T26945] ? __pfx_netlink_unicast+0x10/0x10 [ 531.236331][T26945] ? netlink_sendmsg+0x650/0xb40 [ 531.236347][T26945] ? skb_put+0x11b/0x210 [ 531.236372][T26945] netlink_sendmsg+0x813/0xb40 [ 531.236400][T26945] ? __pfx_netlink_sendmsg+0x10/0x10 [ 531.236421][T26945] ? aa_sock_msg_perm+0xf1/0x1b0 [ 531.236449][T26945] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 531.236473][T26945] ____sys_sendmsg+0x972/0x9f0 [ 531.236504][T26945] ? __pfx_____sys_sendmsg+0x10/0x10 [ 531.236536][T26945] ? import_iovec+0x73/0xa0 [ 531.236560][T26945] ___sys_sendmsg+0x2a5/0x360 [ 531.236588][T26945] ? __pfx____sys_sendmsg+0x10/0x10 [ 531.236647][T26945] ? __fget_files+0x2a/0x420 [ 531.236669][T26945] ? __fget_files+0x3a0/0x420 [ 531.236696][T26945] __x64_sys_sendmsg+0x1bd/0x2a0 [ 531.236721][T26945] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 531.236753][T26945] ? __pfx_ksys_write+0x10/0x10 [ 531.236785][T26945] do_syscall_64+0x14d/0xf80 [ 531.236805][T26945] ? trace_irq_disable+0x3b/0x150 [ 531.236819][T26945] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.236835][T26945] ? clear_bhb_loop+0x40/0x90 [ 531.236856][T26945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.236872][T26945] RIP: 0033:0x7f10a359c819 [ 531.236886][T26945] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 531.236900][T26945] RSP: 002b:00007f10a4428028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 531.236916][T26945] RAX: ffffffffffffffda RBX: 00007f10a3815fa0 RCX: 00007f10a359c819 [ 531.236927][T26945] RDX: 0000000000000050 RSI: 0000200000000940 RDI: 0000000000000004 [ 531.236937][T26945] RBP: 00007f10a4428090 R08: 0000000000000000 R09: 0000000000000000 [ 531.236947][T26945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 531.236956][T26945] R13: 00007f10a3816038 R14: 00007f10a3815fa0 R15: 00007ffde1cbcc08 [ 531.236982][T26945] [ 531.399773][T26952] x_tables: duplicate underflow at hook 2 [ 532.042051][T26998] FAULT_INJECTION: forcing a failure. [ 532.042051][T26998] name failslab, interval 1, probability 0, space 0, times 0 [ 532.137634][T26998] CPU: 1 UID: 0 PID: 26998 Comm: syz.2.5780 Not tainted syzkaller #0 PREEMPT(full) [ 532.137659][T26998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 532.137669][T26998] Call Trace: [ 532.137676][T26998] [ 532.137683][T26998] dump_stack_lvl+0xe8/0x150 [ 532.137712][T26998] should_fail_ex+0x412/0x560 [ 532.137741][T26998] should_failslab+0xa8/0x100 [ 532.137764][T26998] __kmalloc_noprof+0xe8/0x760 [ 532.137783][T26998] ? rcu_is_watching+0x15/0xb0 [ 532.137804][T26998] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 532.137835][T26998] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 532.137864][T26998] genl_family_rcv_msg_doit+0xd9/0x330 [ 532.137886][T26998] ? __asan_memcpy+0x40/0x70 [ 532.137907][T26998] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 532.137935][T26998] ? apparmor_capable+0x126/0x170 [ 532.137958][T26998] ? bpf_lsm_capable+0x9/0x20 [ 532.137980][T26998] ? security_capable+0x7e/0x2c0 [ 532.138010][T26998] genl_rcv_msg+0x61c/0x7a0 [ 532.138036][T26998] ? __pfx_genl_rcv_msg+0x10/0x10 [ 532.138056][T26998] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 532.138074][T26998] ? __pfx_nl802154_wpan_phy_netns+0x10/0x10 [ 532.138093][T26998] ? __pfx_nl802154_post_doit+0x10/0x10 [ 532.138111][T26998] ? __lock_acquire+0x6b5/0x2cf0 [ 532.138144][T26998] netlink_rcv_skb+0x232/0x4b0 [ 532.138161][T26998] ? __pfx_genl_rcv_msg+0x10/0x10 [ 532.138182][T26998] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 532.138214][T26998] ? down_read+0x272/0x2e0 [ 532.138236][T26998] ? genl_rcv+0xd/0x40 [ 532.138259][T26998] genl_rcv+0x28/0x40 [ 532.138278][T26998] netlink_unicast+0x80f/0x9b0 [ 532.138311][T26998] ? __pfx_netlink_unicast+0x10/0x10 [ 532.138338][T26998] ? netlink_sendmsg+0x650/0xb40 [ 532.138354][T26998] ? skb_put+0x11b/0x210 [ 532.138378][T26998] netlink_sendmsg+0x813/0xb40 [ 532.138402][T26998] ? __pfx_netlink_sendmsg+0x10/0x10 [ 532.138424][T26998] ? aa_sock_msg_perm+0xf1/0x1b0 [ 532.138451][T26998] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 532.138473][T26998] ____sys_sendmsg+0x972/0x9f0 [ 532.138504][T26998] ? __pfx_____sys_sendmsg+0x10/0x10 [ 532.138535][T26998] ? import_iovec+0x73/0xa0 [ 532.138559][T26998] ___sys_sendmsg+0x2a5/0x360 [ 532.138594][T26998] ? __pfx____sys_sendmsg+0x10/0x10 [ 532.138651][T26998] ? __fget_files+0x2a/0x420 [ 532.138666][T26998] ? __fget_files+0x3a0/0x420 [ 532.138693][T26998] __x64_sys_sendmsg+0x1bd/0x2a0 [ 532.138718][T26998] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 532.138749][T26998] ? __pfx_ksys_write+0x10/0x10 [ 532.138767][T26998] ? __task_pid_nr_ns+0x28/0x470 [ 532.138795][T26998] do_syscall_64+0x14d/0xf80 [ 532.138816][T26998] ? trace_irq_disable+0x3b/0x150 [ 532.138830][T26998] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.138848][T26998] ? clear_bhb_loop+0x40/0x90 [ 532.138870][T26998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.138887][T26998] RIP: 0033:0x7f275b39c819 [ 532.138903][T26998] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 532.138918][T26998] RSP: 002b:00007f275c1f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 532.138936][T26998] RAX: ffffffffffffffda RBX: 00007f275b615fa0 RCX: 00007f275b39c819 [ 532.138949][T26998] RDX: 0000000000000050 RSI: 0000200000000940 RDI: 0000000000000004 [ 532.138960][T26998] RBP: 00007f275c1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 532.138971][T26998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 532.138981][T26998] R13: 00007f275b616038 R14: 00007f275b615fa0 R15: 00007ffced5eb6f8 [ 532.139012][T26998] [ 532.530535][T27011] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 532.548733][T27011] netlink: 'syz.4.5784': attribute type 21 has an invalid length. [ 532.556579][T27011] IPv6: NLM_F_CREATE should be specified when creating new route [ 532.733436][T27029] netlink: 'syz.1.5791': attribute type 1 has an invalid length. [ 532.857802][T27032] netlink: 'syz.4.5793': attribute type 1 has an invalid length. [ 532.878838][T27041] --map-set only usable from mangle table [ 532.912958][T27041] --map-set only usable from mangle table [ 532.923895][T27032] bond6: entered promiscuous mode [ 532.935197][T27032] 8021q: adding VLAN 0 to HW filter on device bond6 [ 532.956683][T27044] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 532.980232][T27037] ipvlan4: entered allmulticast mode [ 532.988647][T27037] bond6: entered allmulticast mode [ 533.008957][T27032] bond6: (slave bridge9): making interface the new active one [ 533.017442][T27032] bridge9: entered promiscuous mode [ 533.023294][T27032] bridge9: entered allmulticast mode [ 533.030855][T27032] bond6: (slave bridge9): Enslaving as an active interface with an up link [ 533.112800][T27053] FAULT_INJECTION: forcing a failure. [ 533.112800][T27053] name failslab, interval 1, probability 0, space 0, times 0 [ 533.135667][T27053] CPU: 0 UID: 0 PID: 27053 Comm: syz.1.5798 Not tainted syzkaller #0 PREEMPT(full) [ 533.135687][T27053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 533.135695][T27053] Call Trace: [ 533.135701][T27053] [ 533.135707][T27053] dump_stack_lvl+0xe8/0x150 [ 533.135741][T27053] should_fail_ex+0x412/0x560 [ 533.135765][T27053] should_failslab+0xa8/0x100 [ 533.135783][T27053] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 533.135800][T27053] ? __alloc_skb+0x1d0/0x7d0 [ 533.135814][T27053] ? __local_bh_enable_ip+0xd0/0x130 [ 533.135834][T27053] __alloc_skb+0x1d0/0x7d0 [ 533.135847][T27053] ? netlink_ack_tlv_len+0x6c/0x210 [ 533.135862][T27053] netlink_ack+0x146/0xa50 [ 533.135873][T27053] ? __pfx_genl_rcv_msg+0x10/0x10 [ 533.135889][T27053] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 533.135903][T27053] ? __pfx_nl802154_post_doit+0x10/0x10 [ 533.135917][T27053] ? __lock_acquire+0x6b5/0x2cf0 [ 533.135950][T27053] netlink_rcv_skb+0x2b6/0x4b0 [ 533.135965][T27053] ? __pfx_genl_rcv_msg+0x10/0x10 [ 533.135985][T27053] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 533.136013][T27053] ? down_read+0x272/0x2e0 [ 533.136031][T27053] ? genl_rcv+0xd/0x40 [ 533.136048][T27053] genl_rcv+0x28/0x40 [ 533.136062][T27053] netlink_unicast+0x80f/0x9b0 [ 533.136089][T27053] ? __pfx_netlink_unicast+0x10/0x10 [ 533.136111][T27053] ? netlink_sendmsg+0x650/0xb40 [ 533.136124][T27053] ? skb_put+0x11b/0x210 [ 533.136145][T27053] netlink_sendmsg+0x813/0xb40 [ 533.136167][T27053] ? __pfx_netlink_sendmsg+0x10/0x10 [ 533.136186][T27053] ? aa_sock_msg_perm+0xf1/0x1b0 [ 533.136211][T27053] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 533.136234][T27053] ____sys_sendmsg+0x972/0x9f0 [ 533.136261][T27053] ? __pfx_____sys_sendmsg+0x10/0x10 [ 533.136288][T27053] ? import_iovec+0x73/0xa0 [ 533.136311][T27053] ___sys_sendmsg+0x2a5/0x360 [ 533.136334][T27053] ? __pfx____sys_sendmsg+0x10/0x10 [ 533.136388][T27053] ? __fget_files+0x2a/0x420 [ 533.136402][T27053] ? __fget_files+0x3a0/0x420 [ 533.136427][T27053] __x64_sys_sendmsg+0x1bd/0x2a0 [ 533.136450][T27053] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 533.136478][T27053] ? __pfx_ksys_write+0x10/0x10 [ 533.136509][T27053] do_syscall_64+0x14d/0xf80 [ 533.136530][T27053] ? trace_irq_disable+0x3b/0x150 [ 533.136545][T27053] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.136562][T27053] ? clear_bhb_loop+0x40/0x90 [ 533.136583][T27053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.136600][T27053] RIP: 0033:0x7fefd379c819 [ 533.136616][T27053] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 533.136631][T27053] RSP: 002b:00007fefd4612028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 533.136649][T27053] RAX: ffffffffffffffda RBX: 00007fefd3a15fa0 RCX: 00007fefd379c819 [ 533.136661][T27053] RDX: 0000000000000050 RSI: 0000200000000940 RDI: 0000000000000004 [ 533.136670][T27053] RBP: 00007fefd4612090 R08: 0000000000000000 R09: 0000000000000000 [ 533.136680][T27053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 533.136690][T27053] R13: 00007fefd3a16038 R14: 00007fefd3a15fa0 R15: 00007ffef6b837f8 [ 533.136725][T27053] [ 533.486924][T27061] IPVS: sh: FWM 3 0x00000003 - no destination available [ 533.496972][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 533.520900][T27061] tipc: Started in network mode [ 533.527333][T27061] tipc: Node identity ac14140f, cluster identity 4711 [ 533.538873][T27061] tipc: New replicast peer: 172.20.20.187 [ 533.546508][T27061] tipc: Enabled bearer , priority 10 [ 533.622505][T27069] sysfs: cannot create duplicate filename '/class/ieee80211/KŠŸu ™crµ±K:‘£ÿˆÌ¥ÝBßÝ£| “¼ÚÞlS·œ-!' [ 533.638198][T27069] CPU: 1 UID: 0 PID: 27069 Comm: syz.3.5803 Not tainted syzkaller #0 PREEMPT(full) [ 533.638221][T27069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 533.638231][T27069] Call Trace: [ 533.638238][T27069] [ 533.638245][T27069] dump_stack_lvl+0xe8/0x150 [ 533.638275][T27069] sysfs_warn_dup+0x8e/0xa0 [ 533.638300][T27069] sysfs_do_create_link_sd+0xc0/0x110 [ 533.638327][T27069] device_add_class_symlinks+0x1cf/0x240 [ 533.638354][T27069] device_add+0x475/0xb70 [ 533.638380][T27069] wiphy_register+0x1d73/0x2d50 [ 533.638426][T27069] ? __pfx_wiphy_register+0x10/0x10 [ 533.638445][T27069] ? __pfx_netdev_run_todo+0x10/0x10 [ 533.638469][T27069] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 533.638500][T27069] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 533.638527][T27069] ieee80211_register_hw+0x3562/0x4200 [ 533.638565][T27069] ? ieee80211_register_hw+0x14d1/0x4200 [ 533.638599][T27069] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 533.638638][T27069] ? __hrtimer_setup+0x181/0x200 [ 533.638660][T27069] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 533.638687][T27069] mac80211_hwsim_new_radio+0x2f97/0x5330 [ 533.638736][T27069] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 533.638762][T27069] ? kstrndup+0xbf/0x160 [ 533.638795][T27069] hwsim_new_radio_nl+0xf35/0x1bd0 [ 533.638842][T27069] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 533.638876][T27069] ? rcu_is_watching+0x15/0xb0 [ 533.638901][T27069] ? trace_kmalloc+0x2a/0x110 [ 533.638927][T27069] ? __nla_parse+0x40/0x60 [ 533.638950][T27069] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 533.638983][T27069] genl_family_rcv_msg_doit+0x22a/0x330 [ 533.639012][T27069] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 533.639047][T27069] ? bpf_lsm_capable+0x9/0x20 [ 533.639070][T27069] ? security_capable+0x7e/0x2c0 [ 533.639102][T27069] genl_rcv_msg+0x61c/0x7a0 [ 533.639129][T27069] ? __pfx_genl_rcv_msg+0x10/0x10 [ 533.639151][T27069] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 533.639174][T27069] ? __lock_acquire+0x6b5/0x2cf0 [ 533.639208][T27069] netlink_rcv_skb+0x232/0x4b0 [ 533.639227][T27069] ? __pfx_genl_rcv_msg+0x10/0x10 [ 533.639250][T27069] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 533.639284][T27069] ? down_read+0x272/0x2e0 [ 533.639307][T27069] ? genl_rcv+0xd/0x40 [ 533.639329][T27069] genl_rcv+0x28/0x40 [ 533.639349][T27069] netlink_unicast+0x80f/0x9b0 [ 533.639383][T27069] ? __pfx_netlink_unicast+0x10/0x10 [ 533.639405][T27069] ? __kvmalloc_node_noprof+0x393/0x8a0 [ 533.639437][T27069] ? netlink_sendmsg+0x650/0xb40 [ 533.639453][T27069] ? skb_put+0x11b/0x210 [ 533.639478][T27069] netlink_sendmsg+0x813/0xb40 [ 533.639506][T27069] ? __pfx_netlink_sendmsg+0x10/0x10 [ 533.639527][T27069] ? aa_sock_msg_perm+0xf1/0x1b0 [ 533.639555][T27069] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 533.639579][T27069] ____sys_sendmsg+0x972/0x9f0 [ 533.639610][T27069] ? __pfx_____sys_sendmsg+0x10/0x10 [ 533.639642][T27069] ? import_iovec+0x73/0xa0 [ 533.639665][T27069] ___sys_sendmsg+0x2a5/0x360 [ 533.639693][T27069] ? __pfx____sys_sendmsg+0x10/0x10 [ 533.639752][T27069] ? __fget_files+0x2a/0x420 [ 533.639767][T27069] ? __fget_files+0x3a0/0x420 [ 533.639793][T27069] __x64_sys_sendmsg+0x1bd/0x2a0 [ 533.639818][T27069] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 533.639836][T27069] ? __se_sys_rt_sigprocmask+0x22f/0x2a0 [ 533.639869][T27069] ? do_user_addr_fault+0xc6f/0x1340 [ 533.639902][T27069] do_syscall_64+0x14d/0xf80 [ 533.639924][T27069] ? trace_irq_disable+0x3b/0x150 [ 533.639939][T27069] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.639957][T27069] ? clear_bhb_loop+0x40/0x90 [ 533.639978][T27069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.639994][T27069] RIP: 0033:0x7f3e9179c819 [ 533.640011][T27069] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 533.640026][T27069] RSP: 002b:00007f3e925e0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 533.640044][T27069] RAX: ffffffffffffffda RBX: 00007f3e91a16180 RCX: 00007f3e9179c819 [ 533.640056][T27069] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000004 [ 533.640067][T27069] RBP: 00007f3e91832c91 R08: 0000000000000000 R09: 0000000000000000 [ 533.640077][T27069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 533.640086][T27069] R13: 00007f3e91a16218 R14: 00007f3e91a16180 R15: 00007ffe7ec509e8 [ 533.640116][T27069] [ 534.201693][T27086] netlink: 'syz.1.5809': attribute type 2 has an invalid length. [ 534.210023][T27086] __nla_validate_parse: 8 callbacks suppressed [ 534.210037][T27086] netlink: 119 bytes leftover after parsing attributes in process `syz.1.5809'. [ 534.369058][T27095] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5814'. [ 534.407019][T27099] x_tables: unsorted entry at hook 2 [ 534.415111][T27099] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5815'. [ 534.550741][T27108] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5818'. [ 534.575575][T27112] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5819'. [ 534.611333][T27112] macvtap0: entered promiscuous mode [ 534.617347][T27112] macvtap0: entered allmulticast mode [ 534.635669][T27112] gretap0: entered allmulticast mode [ 534.656030][ T796] tipc: Node number set to 2886997007 [ 534.721456][T27122] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5822'. [ 534.749803][T27123] syzkaller0: entered promiscuous mode [ 534.756477][T27123] syzkaller0: entered allmulticast mode [ 534.770341][T27122] erspan0: entered allmulticast mode [ 534.796227][T27115] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5819'. [ 534.813867][T27115] macvtap1: entered promiscuous mode [ 534.838237][T27115] macvtap1: entered allmulticast mode [ 534.941056][T27135] netlink: 'syz.4.5824': attribute type 1 has an invalid length. [ 534.978182][T27135] netlink: 'syz.4.5824': attribute type 7 has an invalid length. [ 534.986028][T27135] netlink: 'syz.4.5824': attribute type 8 has an invalid length. [ 535.002083][T27135] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5824'. [ 535.137222][T27151] netlink: 228 bytes leftover after parsing attributes in process `syz.3.5829'. [ 535.151953][T27151] netlink: 232 bytes leftover after parsing attributes in process `syz.3.5829'. [ 535.179194][T27149] veth0: entered promiscuous mode [ 535.197082][T27147] veth0: left promiscuous mode [ 535.519585][T27176] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 535.575223][T27176] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 535.831217][T27201] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 535.842116][T27201] team0: Device macvlan4 is already an upper device of the team interface [ 535.901728][T27212] 8021q: VLANs not supported on gre0 [ 538.709435][T27191] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 538.858931][T27228] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 539.276208][T27259] netdevsim netdevsim3 netdevsim0: IPsec offload requires 128 bit authentication [ 539.330984][T27260] ip6erspan0: entered allmulticast mode [ 539.342229][T27262] validate_nla: 2 callbacks suppressed [ 539.342244][T27262] netlink: 'syz.2.5861': attribute type 5 has an invalid length. [ 539.375940][T27262] netlink: 'syz.2.5861': attribute type 11 has an invalid length. [ 539.493122][T27270] __nla_validate_parse: 5 callbacks suppressed [ 539.493138][T27270] netlink: 112 bytes leftover after parsing attributes in process `syz.0.5865'. [ 539.508081][T27273] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5863'. [ 539.517751][T27275] netlink: 112 bytes leftover after parsing attributes in process `syz.0.5865'. [ 540.010892][ T29] audit: type=1107 audit(1775213357.385:6): pid=27303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='8h_'\B0G' [ 540.053379][T27306] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5876'. [ 540.071528][T27306] ip6tnl0: Caught tx_queue_len zero misconfig [ 540.320977][T27323] lo speed is unknown, defaulting to 1000 [ 540.499181][T27338] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5885'. [ 540.762301][T27349] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5886'. [ 540.798002][T27347] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 540.979475][T27356] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5888'. [ 541.044359][T27356] openvswitch: netlink: Flow key attr not present in new flow. [ 541.392086][T27377] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5892'. [ 541.455960][ T5830] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 541.467357][ T5830] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 541.475296][ T5830] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 541.483801][ T5830] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 541.551843][ T5830] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 541.680432][T27379] lo speed is unknown, defaulting to 1000 [ 541.724489][T27389] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5896'. [ 541.938454][T27393] TC_ACT_REPEAT abuse ? [ 542.116035][ T5830] block nbd1: Receive control failed (result -32) [ 542.252812][T14424] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 542.277874][T14424] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 542.298238][T14424] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 2] type 1 family 0 port 2816 - 0 [ 542.318907][T14424] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.459289][T14424] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 542.478511][T14424] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 542.490420][T14424] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 2] type 1 family 0 port 2816 - 0 [ 542.502401][T14424] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.679526][T14424] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 542.690812][T14424] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 542.702077][T14424] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 2] type 1 family 0 port 2816 - 0 [ 542.713191][T14424] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.745401][T27379] chnl_net:caif_netlink_parms(): no params data found [ 542.777378][T27420] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5906'. [ 542.826554][T27420] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 542.879513][T27420] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 542.972358][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88801bb6fc00: rx timeout, send abort [ 542.981365][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88801bb6fc00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 543.055040][T27379] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.107719][T27379] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.116487][T27379] bridge_slave_0: entered allmulticast mode [ 543.135987][T27379] bridge_slave_0: entered promiscuous mode [ 543.160092][T27433] bridge_slave_0: Caught tx_queue_len zero misconfig [ 543.178387][T27379] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.206832][T27379] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.215523][T27379] bridge_slave_1: entered allmulticast mode [ 543.223593][T27379] bridge_slave_1: entered promiscuous mode [ 543.325542][T27379] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 543.346636][T27446] netlink: 'syz.4.5914': attribute type 9 has an invalid length. [ 543.424313][T27379] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 543.476986][T27379] team0: Port device team_slave_0 added [ 543.489604][T27379] team0: Port device team_slave_1 added [ 543.563769][T27379] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 543.588684][T27379] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 543.617683][T27379] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 543.625771][ T5830] Bluetooth: hci1: command tx timeout [ 543.666750][T27379] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 543.701006][T27379] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 543.781043][T27379] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 543.806277][T27469] netlink: 'syz.4.5919': attribute type 1 has an invalid length. [ 543.850993][T27469] 8021q: adding VLAN 0 to HW filter on device bond7 [ 543.859250][T14424] bridge_slave_0: left allmulticast mode [ 543.865093][T14424] bridge_slave_0: left promiscuous mode [ 543.873488][T14424] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.902809][T14424] tipc: Resetting bearer [ 544.262992][T14424] tipc: Disabling bearer [ 544.315778][T14424] erspan0 (unregistering): left promiscuous mode [ 544.334661][T14424] gretap0 (unregistering): left promiscuous mode [ 544.732830][T14424] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 544.743898][T14424] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 544.754757][T14424] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 544.765905][T14424] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 544.779144][T14424] bond0 (unregistering): Released all slaves [ 544.790765][T14424] bond1 (unregistering): (slave veth7): Releasing active interface [ 544.800953][T14424] bond1 (unregistering): Released all slaves [ 544.814368][T14424] bond2 (unregistering): Released all slaves [ 544.827034][T14424] bond3 (unregistering): Released all slaves [ 544.847119][T14424] bond4 (unregistering): Released all slaves [ 544.859501][T14424] bond5 (unregistering): Released all slaves [ 544.872224][T14424] bond6 (unregistering): Released all slaves [ 544.884718][T14424] bond7 (unregistering): Released all slaves [ 544.899935][T14424] bond8 (unregistering): Released all slaves [ 545.056618][T27379] hsr_slave_0: entered promiscuous mode [ 545.064374][T27379] hsr_slave_1: entered promiscuous mode [ 545.072789][T27379] debugfs: 'hsr0' already exists in 'hsr' [ 545.085102][T27379] Cannot create hsr debugfs directory [ 545.120608][T14424] tipc: Disabling bearer [ 545.126116][T14424] tipc: Left network mode [ 545.202981][T27513] __nla_validate_parse: 5 callbacks suppressed [ 545.202999][T27513] netlink: 256 bytes leftover after parsing attributes in process `syz.4.5926'. [ 545.370398][T27523] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 545.390691][T27523] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 545.494258][T27519] syzkaller0: entered promiscuous mode [ 545.508886][T27519] syzkaller0: entered allmulticast mode [ 545.547204][T27519] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5927'. [ 545.693259][ T5830] Bluetooth: hci1: command tx timeout [ 545.833959][T27543] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.5932'. [ 545.889880][T27547] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5933'. [ 546.082072][T14424] dummy0: left promiscuous mode [ 546.106673][T14424] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 546.128032][T14424] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 546.141080][T14424] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 546.150318][T14424] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 546.171667][T14424] hsr0: left allmulticast mode [ 546.176531][T14424] veth1_macvtap: left promiscuous mode [ 546.184705][T14424] veth0_macvtap: left promiscuous mode [ 546.298243][T14424] team0 (unregistering): Port device batadv3 removed [ 546.363011][T14424] team0 (unregistering): Port device batadv2 removed [ 546.545317][T14424] team0 (unregistering): Port device team_slave_1 removed [ 546.567025][T14424] team0 (unregistering): Port device team_slave_0 removed [ 546.695764][T14424] smc: removing net device team0 with user defined pnetid SYZ2 [ 546.763787][T27586] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5939'. [ 546.784610][ T5880] lo speed is unknown, defaulting to 1000 [ 546.799332][ T5880] infiniband syz0: ib_query_port failed (-19) [ 546.816294][T27583] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5938'. [ 546.825433][T27583] ip6gre0: Caught tx_queue_len zero misconfig [ 547.111825][T27598] veth1_to_team: Caught tx_queue_len zero misconfig [ 547.171556][T27599] syzkaller0: entered promiscuous mode [ 547.230301][T27612] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5945'. [ 547.353861][T14424] IPVS: stop unused estimator thread 0... [ 547.536801][T27623] C: Caught tx_queue_len zero misconfig [ 547.590327][T27627] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5948'. [ 547.630039][T27628] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5949'. [ 547.738237][T27632] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5951'. [ 547.768757][ T5830] Bluetooth: hci1: command tx timeout [ 547.803599][T27379] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 547.834206][T27642] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 547.852929][T27632] hsr_slave_0: left promiscuous mode [ 547.859901][T27632] hsr_slave_1: left promiscuous mode [ 547.890733][T27379] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 547.935048][T27379] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 547.968505][T27379] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 548.165700][T27670] batadv_slave_0: entered promiscuous mode [ 548.238792][T27656] nbd2: detected capacity change from 0 to 63 [ 548.273485][T27663] batadv_slave_0: left promiscuous mode [ 548.320438][ T5821] block nbd2: Receive control failed (result -104) [ 548.327686][ T5830] block nbd2: Receive control failed (result -32) [ 548.344057][T27379] 8021q: adding VLAN 0 to HW filter on device bond0 [ 548.444317][T27379] 8021q: adding VLAN 0 to HW filter on device team0 [ 548.519394][ T1157] bridge0: port 1(bridge_slave_0) entered blocking state [ 548.526579][ T1157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 548.553487][T27677] netlink: 'syz.3.5958': attribute type 1 has an invalid length. [ 548.568630][ T1157] bridge0: port 2(bridge_slave_1) entered blocking state [ 548.575841][ T1157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 548.755609][T27681] bond4: (slave veth17): Enslaving as an active interface with a down link [ 548.791189][T27696] 8021q: adding VLAN 0 to HW filter on device bond4 [ 548.935400][T27379] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 549.023439][T27710] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 549.086761][T27710] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 549.120487][T27710] batman_adv: batadv0: Removing interface: ipvlan2 [ 549.344659][T27710] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 549.400798][T27738] macvtap2: entered allmulticast mode [ 549.549438][T27744] wg1 speed is unknown, defaulting to 1000 [ 549.555362][T27744] wg1 speed is unknown, defaulting to 1000 [ 549.575816][T27379] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 549.584624][T27744] wg1 speed is unknown, defaulting to 1000 [ 549.613873][T27749] xt_l2tp: invalid flags combination: 8 [ 549.649150][T27744] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 549.663556][T27379] veth0_vlan: entered promiscuous mode [ 549.682190][T27379] veth1_vlan: entered promiscuous mode [ 549.726341][T27744] wg1 speed is unknown, defaulting to 1000 [ 549.751107][T27744] wg1 speed is unknown, defaulting to 1000 [ 549.758720][T27379] veth0_macvtap: entered promiscuous mode [ 549.778705][T27744] wg1 speed is unknown, defaulting to 1000 [ 549.785902][T27379] veth1_macvtap: entered promiscuous mode [ 549.795453][T27744] wg1 speed is unknown, defaulting to 1000 [ 549.817425][T27379] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 549.829091][T27744] wg1 speed is unknown, defaulting to 1000 [ 549.839549][T27379] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 549.848254][ T5830] Bluetooth: hci1: command tx timeout [ 549.862334][ T132] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.874017][T27744] wg1 speed is unknown, defaulting to 1000 [ 549.885229][ T132] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.938522][ T132] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.958545][ T132] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.110471][T27772] x_tables: unsorted underflow at hook 2 [ 550.135598][T27772] macvlan0: entered promiscuous mode [ 550.162833][ T132] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 550.197866][ T132] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 550.258344][T14424] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 550.267314][T14424] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 551.271790][T27784] __nla_validate_parse: 5 callbacks suppressed [ 551.271809][T27784] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5980'. [ 551.388167][T27795] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5985'. [ 551.427618][T27795] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5985'. [ 551.442826][T27795] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5985'. [ 551.469829][T27798] netlink: 'syz.0.5989': attribute type 5 has an invalid length. [ 551.473404][T27795] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5985'. [ 551.618179][T27807] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 551.684024][T27813] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5992'. [ 551.952906][T27824] netlink: 'syz.3.5997': attribute type 5 has an invalid length. [ 552.122134][T27835] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6002'. [ 552.149813][T27835] netlink: 'syz.3.6002': attribute type 1 has an invalid length. [ 552.177768][T27843] netlink: 'syz.0.6005': attribute type 64 has an invalid length. [ 552.222802][T27846] netlink: 'syz.4.6007': attribute type 2 has an invalid length. [ 552.230762][T27846] netlink: 'syz.4.6007': attribute type 2 has an invalid length. [ 552.244493][T27843] netlink: 5 bytes leftover after parsing attributes in process `syz.0.6005'. [ 552.264016][T27835] 8021q: adding VLAN 0 to HW filter on device bond5 [ 552.269114][T27850] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6008'. [ 552.295135][T27835] bond5: (slave veth0_to_bond): making interface the new active one [ 552.304803][T27835] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 552.354079][T27847] bond5: (slave veth19): Enslaving as an active interface with a down link [ 552.373556][T27850] vcan0 (unregistering): left allmulticast mode [ 552.415273][T27851] netlink: 'syz.2.6009': attribute type 2 has an invalid length. [ 552.438836][T27835] bond5: (slave veth21): Enslaving as an active interface with a down link [ 552.456650][T27835] netlink: 'syz.3.6002': attribute type 1 has an invalid length. [ 552.473568][T27835] netlink: 'syz.3.6002': attribute type 2 has an invalid length. [ 552.624737][T27872] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6015'. [ 552.735248][T27877] 8021q: adding VLAN 0 to HW filter on device bond6 [ 552.841917][T27877] 8021q: adding VLAN 0 to HW filter on device bond6 [ 552.863055][T27877] bond6: (slave vcan1): The slave device specified does not support setting the MAC address [ 552.878182][T27877] bond6: (slave vcan1): Error -95 calling set_mac_address [ 553.203432][T27915] syzkaller0: entered promiscuous mode [ 553.220964][T27915] syzkaller0: entered allmulticast mode [ 553.523850][T27931] x_tables: unsorted entry at hook 2 [ 553.700969][T14424] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 553.738184][T27943] validate_nla: 1 callbacks suppressed [ 553.738198][T27943] netlink: 'syz.1.6037': attribute type 1 has an invalid length. [ 553.744766][T27945] FAULT_INJECTION: forcing a failure. [ 553.744766][T27945] name failslab, interval 1, probability 0, space 0, times 0 [ 553.786975][T27945] CPU: 1 UID: 0 PID: 27945 Comm: syz.4.6038 Not tainted syzkaller #0 PREEMPT(full) [ 553.786999][T27945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 553.787008][T27945] Call Trace: [ 553.787016][T27945] [ 553.787023][T27945] dump_stack_lvl+0xe8/0x150 [ 553.787052][T27945] should_fail_ex+0x412/0x560 [ 553.787084][T27945] should_failslab+0xa8/0x100 [ 553.787109][T27945] __kmalloc_noprof+0xe8/0x760 [ 553.787145][T27945] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 553.787170][T27945] tomoyo_realpath_from_path+0xe3/0x5d0 [ 553.787198][T27945] ? tomoyo_path_number_perm+0x219/0x630 [ 553.787222][T27945] tomoyo_path_number_perm+0x246/0x630 [ 553.787249][T27945] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 553.787275][T27945] ? __lock_acquire+0x6b5/0x2cf0 [ 553.787309][T27945] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 553.787362][T27945] ? __fget_files+0x2a/0x420 [ 553.787382][T27945] ? __fget_files+0x2a/0x420 [ 553.787395][T27945] ? __fget_files+0x3a0/0x420 [ 553.787410][T27945] ? __fget_files+0x2a/0x420 [ 553.787429][T27945] security_file_ioctl+0xc3/0x2a0 [ 553.787454][T27945] __se_sys_ioctl+0x47/0x170 [ 553.787478][T27945] do_syscall_64+0x14d/0xf80 [ 553.787499][T27945] ? trace_irq_disable+0x3b/0x150 [ 553.787514][T27945] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.787532][T27945] ? clear_bhb_loop+0x40/0x90 [ 553.787554][T27945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.787570][T27945] RIP: 0033:0x7f10a359c819 [ 553.787587][T27945] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 553.787600][T27945] RSP: 002b:00007f10a4428028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 553.787618][T27945] RAX: ffffffffffffffda RBX: 00007f10a3815fa0 RCX: 00007f10a359c819 [ 553.787635][T27945] RDX: 0000200000000340 RSI: 00000000400448c8 RDI: 0000000000000004 [ 553.787647][T27945] RBP: 00007f10a4428090 R08: 0000000000000000 R09: 0000000000000000 [ 553.787657][T27945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 553.787668][T27945] R13: 00007f10a3816038 R14: 00007f10a3815fa0 R15: 00007ffde1cbcc08 [ 553.787698][T27945] [ 553.787705][T27945] ERROR: Out of memory at tomoyo_realpath_from_path. [ 554.025359][T27945] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input6 [ 554.337764][T27943] 8021q: adding VLAN 0 to HW filter on device bond10 [ 554.473866][ T5821] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 554.490681][ T5821] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 554.499323][ T5821] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 554.507474][ T5821] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 554.515600][ T5821] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 554.770898][T17008] bridge0: port 3(syz_tun) entered disabled state [ 554.817275][T17008] syz_tun (unregistering): left allmulticast mode [ 554.835799][T17008] syz_tun (unregistering): left promiscuous mode [ 554.845482][T17008] bridge0: port 3(syz_tun) entered disabled state [ 555.017404][T27967] wg1 speed is unknown, defaulting to 1000 [ 555.340212][T28013] syzkaller0: entered promiscuous mode [ 555.352918][T28013] syzkaller0: entered allmulticast mode [ 555.571928][T27967] chnl_net:caif_netlink_parms(): no params data found [ 555.626438][T28032] 8021q: adding VLAN 0 to HW filter on device bond7 [ 555.690961][T28032] vxcan3: entered promiscuous mode [ 555.709351][T28032] 8021q: adding VLAN 0 to HW filter on device bond7 [ 555.716675][T28032] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 555.730060][T28032] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 555.823336][T28045] syzkaller0: entered promiscuous mode [ 555.829447][T28045] syzkaller0: entered allmulticast mode [ 556.568662][ T5830] Bluetooth: hci5: command tx timeout [ 557.222090][T27967] bridge0: port 1(bridge_slave_0) entered blocking state [ 557.229845][T27967] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.237052][T27967] bridge_slave_0: entered allmulticast mode [ 557.244808][T27967] bridge_slave_0: entered promiscuous mode [ 557.264693][T27967] bridge0: port 2(bridge_slave_1) entered blocking state [ 557.288186][T27967] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.295542][T27967] bridge_slave_1: entered allmulticast mode [ 557.314954][T27967] bridge_slave_1: entered promiscuous mode [ 557.431383][T27967] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 557.461305][T27967] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 557.512612][T28069] sit0: entered promiscuous mode [ 557.516663][T28075] __nla_validate_parse: 12 callbacks suppressed [ 557.516679][T28075] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6073'. [ 557.533186][T28069] netlink: 'syz.1.6073': attribute type 1 has an invalid length. [ 557.545230][T28069] netlink: 1 bytes leftover after parsing attributes in process `syz.1.6073'. [ 557.561004][T28069] block nbd3: Unsupported socket: should be TCP or UNIX. [ 557.584685][T28080] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6075'. [ 557.600241][T28080] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6075'. [ 557.624806][T27967] team0: Port device team_slave_0 added [ 557.633846][T27967] team0: Port device team_slave_1 added [ 557.725217][T28087] netlink: 'syz.0.6077': attribute type 11 has an invalid length. [ 557.748265][T27967] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 557.749627][T28087] netlink: 'syz.0.6077': attribute type 11 has an invalid length. [ 557.763534][T27967] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 557.792994][T28087] netlink: 204 bytes leftover after parsing attributes in process `syz.0.6077'. [ 557.804459][T27967] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 557.816860][T28089] netlink: 'syz.0.6077': attribute type 12 has an invalid length. [ 557.830112][T27967] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 557.837430][T27967] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 557.871427][T27967] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 558.051801][T27967] hsr_slave_0: entered promiscuous mode [ 558.068974][T27967] hsr_slave_1: entered promiscuous mode [ 558.077430][T27967] debugfs: 'hsr0' already exists in 'hsr' [ 558.085772][T27967] Cannot create hsr debugfs directory [ 558.373458][T28115] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6082'. [ 558.460775][T27967] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.478793][T27967] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 56720 - 0 [ 558.549876][T28126] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6084'. [ 558.561047][T28128] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6084'. [ 558.571315][T28126] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6084'. [ 558.607865][T27967] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.619835][T27967] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 56720 - 0 [ 558.645633][T28131] A link change request failed with some changes committed already. Interface vlan4 may have been left with an inconsistent configuration, please check. [ 558.663656][ T5830] Bluetooth: hci5: command tx timeout [ 558.751829][T27967] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.774992][T27967] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 56720 - 0 [ 558.909184][T28146] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6091'. [ 558.928779][T27967] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.940798][T27967] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 56720 - 0 [ 558.982195][T14424] bond0: (slave bond_slave_0): link status definitely up, 10000 Mbps full duplex [ 558.994504][T14424] bond0: (slave bond_slave_1): link status definitely up, 10000 Mbps full duplex [ 559.010386][T14424] bond0: (slave wlan1): link status definitely up, 0 Mbps full duplex [ 559.023842][T14424] bond0: active interface up! [ 559.034260][T28145] netlink: 'syz.1.6090': attribute type 1 has an invalid length. [ 559.044195][T28145] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.349386][T27967] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 559.374341][T27967] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 559.413707][T27967] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 559.452196][T27967] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 559.786935][T28208] syzkaller0: entered promiscuous mode [ 559.795073][T28208] syzkaller0: entered allmulticast mode [ 559.912760][T28217] syzkaller1: entered promiscuous mode [ 559.918885][T28217] syzkaller1: entered allmulticast mode [ 560.045180][T27967] 8021q: adding VLAN 0 to HW filter on device bond0 [ 560.071633][T27967] 8021q: adding VLAN 0 to HW filter on device team0 [ 560.086378][T14426] bridge0: port 1(bridge_slave_0) entered blocking state [ 560.093593][T14426] bridge0: port 1(bridge_slave_0) entered forwarding state [ 560.129759][T14426] bridge0: port 2(bridge_slave_1) entered blocking state [ 560.136887][T14426] bridge0: port 2(bridge_slave_1) entered forwarding state [ 560.505355][T28252] syzkaller0: entered promiscuous mode [ 560.512975][T28252] syzkaller0: entered allmulticast mode [ 560.703478][T27967] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 560.738218][ T5830] Bluetooth: hci5: command tx timeout [ 560.796214][T28278] netlink: 'syz.3.6124': attribute type 64 has an invalid length. [ 560.948710][T28288] ip6tnl4: entered allmulticast mode [ 561.227189][T27967] veth0_vlan: entered promiscuous mode [ 561.253652][T27967] veth1_vlan: entered promiscuous mode [ 561.290627][T27967] veth0_macvtap: entered promiscuous mode [ 561.302587][T27967] veth1_macvtap: entered promiscuous mode [ 561.333597][T27967] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 561.352184][T27967] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 561.372002][T14426] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.382810][T14426] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.396948][T14426] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.407144][T14426] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.506497][T14424] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 561.519858][T14424] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 561.576807][T14431] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 561.594244][T14431] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 561.767470][T28318] syzkaller0: entered promiscuous mode [ 561.774542][T28318] syzkaller0: entered allmulticast mode [ 561.976695][ T5821] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 561.987461][ T5821] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 561.996879][ T5821] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 562.005901][ T5821] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 562.014481][ T5821] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 562.819000][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 562.823533][ T5821] Bluetooth: hci5: command tx timeout [ 563.600515][T28325] wg1 speed is unknown, defaulting to 1000 [ 563.695876][T28346] __nla_validate_parse: 19 callbacks suppressed [ 563.695895][T28346] netlink: 190972 bytes leftover after parsing attributes in process `syz.2.6142'. [ 563.712701][T28347] syzkaller0: entered promiscuous mode [ 563.728122][T28347] syzkaller0: entered allmulticast mode [ 563.851179][T14424] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 563.863225][T14424] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.895212][T28359] netlink: 'syz.2.6146': attribute type 1 has an invalid length. [ 563.964888][T28363] netlink: 'syz.1.6149': attribute type 25 has an invalid length. [ 563.975551][T28363] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6149'. [ 564.015119][T14424] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 564.026054][T14424] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.091232][ T5821] Bluetooth: hci2: command tx timeout [ 564.119169][T28367] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6150'. [ 564.120844][T28363] netlink: 'syz.1.6149': attribute type 25 has an invalid length. [ 564.156708][T28363] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6149'. [ 564.170040][T14424] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 564.182333][T14424] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.327181][T28376] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6154'. [ 564.385272][T14424] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 564.406031][T14424] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.444463][T28380] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6155'. [ 564.465820][T28382] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6156'. [ 564.504017][T28383] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input7 [ 564.634558][ T24] wg1 speed is unknown, defaulting to 1000 [ 564.640492][ T24] syz2: Port: 1 Link DOWN [ 564.717799][T28394] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6160'. [ 564.749458][T28394] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6160'. [ 564.764999][T14424] bridge_slave_1: left allmulticast mode [ 564.788034][T14424] bridge_slave_1: left promiscuous mode [ 564.793790][T14424] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.802564][T28399] netlink: 'syz.1.6161': attribute type 10 has an invalid length. [ 564.850365][T14424] bridge_slave_0: left allmulticast mode [ 564.867666][T14424] bridge_slave_0: left promiscuous mode [ 564.898343][T14424] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.935973][T28405] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6163'. [ 565.603519][T14424] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 565.616535][T14424] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 565.627211][T14424] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 565.641211][T14424] bond0 (unregistering): Released all slaves [ 565.652128][T14424] bond1 (unregistering): (slave veth11): Releasing active interface [ 565.661620][T14424] bond1 (unregistering): Released all slaves [ 565.675452][T14424] bond2 (unregistering): Released all slaves [ 565.691542][T14424] bond3 (unregistering): Released all slaves [ 565.704957][T14424] bond4 (unregistering): (slave veth17): Releasing active interface [ 565.723335][T14424] bond4 (unregistering): Released all slaves [ 565.737191][T14424] bond5 (unregistering): (slave veth0_to_bond): Releasing active interface [ 565.747796][T14424] bond5 (unregistering): (slave veth19): Releasing active interface [ 565.757766][T14424] bond5 (unregistering): (slave veth21): Releasing active interface [ 565.767325][T14424] bond5 (unregistering): Released all slaves [ 565.793415][T14424] bond6 (unregistering): Released all slaves [ 565.812448][T14424] bond7 (unregistering): Released all slaves [ 565.843266][T28325] chnl_net:caif_netlink_parms(): no params data found [ 565.915843][T28433] netlink: 'syz.0.6167': attribute type 3 has an invalid length. [ 566.036966][T14424] vþ: left promiscuous mode [ 566.122734][T14424] : left promiscuous mode [ 566.169704][ T5821] Bluetooth: hci2: command tx timeout [ 566.456480][T28325] bridge0: port 1(bridge_slave_0) entered blocking state [ 566.466187][T28325] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.474348][T28325] bridge_slave_0: entered allmulticast mode [ 566.482968][T28325] bridge_slave_0: entered promiscuous mode [ 566.522195][T28325] bridge0: port 2(bridge_slave_1) entered blocking state [ 566.529488][T28325] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.536727][T28325] bridge_slave_1: entered allmulticast mode [ 566.559617][T28325] bridge_slave_1: entered promiscuous mode [ 566.594308][T28469] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 566.642322][T28325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 566.654808][T28325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 566.710117][T28325] team0: Port device team_slave_0 added [ 566.727173][T28325] team0: Port device team_slave_1 added [ 566.793944][T28325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 566.811398][T28325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 566.865408][T28325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 566.895005][T28325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 566.911276][T28325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 566.949378][T28325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 567.336501][T28325] hsr_slave_0: entered promiscuous mode [ 567.377649][T28325] hsr_slave_1: entered promiscuous mode [ 567.394026][T28325] debugfs: 'hsr0' already exists in 'hsr' [ 567.407010][T28325] Cannot create hsr debugfs directory [ 567.659452][T28499] wg1 speed is unknown, defaulting to 1000 [ 567.828162][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 567.836204][ C1] lec:lec_tx_timeout: lec0 [ 567.998912][T14424] veth1_macvtap: left promiscuous mode [ 568.004527][T14424] veth1_vlan: left promiscuous mode [ 568.011679][T14424] veth1_macvtap: left promiscuous mode [ 568.248597][ T5821] Bluetooth: hci2: command tx timeout [ 568.274217][T14424] team0 (unregistering): Port device team_slave_1 removed [ 568.291259][T14424] team0 (unregistering): Port device team_slave_0 removed [ 568.302500][T14424] veth0_to_team (unregistering): left allmulticast mode [ 568.805069][T14424] IPVS: stop unused estimator thread 0... [ 569.392857][T28462] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 569.419984][T28325] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 569.504720][T28325] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 569.563096][T28325] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 569.605449][T28325] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 569.643649][T28539] IPv6: sit1: Disabled Multicast RS [ 569.785309][T28553] __nla_validate_parse: 5 callbacks suppressed [ 569.785328][T28553] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6189'. [ 569.820954][T28553] block nbd0: reconnected socket [ 569.912844][T28563] FAULT_INJECTION: forcing a failure. [ 569.912844][T28563] name failslab, interval 1, probability 0, space 0, times 0 [ 569.935272][T28563] CPU: 0 UID: 0 PID: 28563 Comm: syz.1.6191 Not tainted syzkaller #0 PREEMPT(full) [ 569.935297][T28563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 569.935309][T28563] Call Trace: [ 569.935316][T28563] [ 569.935323][T28563] dump_stack_lvl+0xe8/0x150 [ 569.935353][T28563] should_fail_ex+0x412/0x560 [ 569.935385][T28563] should_failslab+0xa8/0x100 [ 569.935407][T28563] ? skb_clone+0x212/0x3a0 [ 569.935430][T28563] kmem_cache_alloc_noprof+0x87/0x650 [ 569.935457][T28563] ? irqentry_exit+0x59e/0x620 [ 569.935484][T28563] skb_clone+0x212/0x3a0 [ 569.935509][T28563] __netlink_deliver_tap+0x404/0x850 [ 569.935540][T28563] ? netlink_deliver_tap+0x2e/0x1b0 [ 569.935559][T28563] netlink_deliver_tap+0x19c/0x1b0 [ 569.935578][T28563] netlink_unicast+0x7e3/0x9b0 [ 569.935612][T28563] ? __pfx_netlink_unicast+0x10/0x10 [ 569.935639][T28563] ? netlink_sendmsg+0x650/0xb40 [ 569.935656][T28563] ? skb_put+0x11b/0x210 [ 569.935679][T28563] netlink_sendmsg+0x813/0xb40 [ 569.935707][T28563] ? __pfx_netlink_sendmsg+0x10/0x10 [ 569.935729][T28563] ? aa_sock_msg_perm+0xf1/0x1b0 [ 569.935756][T28563] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 569.935779][T28563] ____sys_sendmsg+0x972/0x9f0 [ 569.935816][T28563] ? __pfx_____sys_sendmsg+0x10/0x10 [ 569.935847][T28563] ? import_iovec+0x73/0xa0 [ 569.935871][T28563] ___sys_sendmsg+0x2a5/0x360 [ 569.935899][T28563] ? __pfx____sys_sendmsg+0x10/0x10 [ 569.935955][T28563] ? __fget_files+0x2a/0x420 [ 569.935971][T28563] ? __fget_files+0x3a0/0x420 [ 569.935998][T28563] __x64_sys_sendmsg+0x1bd/0x2a0 [ 569.936028][T28563] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 569.936060][T28563] ? __pfx_ksys_write+0x10/0x10 [ 569.936092][T28563] do_syscall_64+0x14d/0xf80 [ 569.936113][T28563] ? trace_irq_disable+0x3b/0x150 [ 569.936128][T28563] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.936146][T28563] ? clear_bhb_loop+0x40/0x90 [ 569.936168][T28563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.936185][T28563] RIP: 0033:0x7fefd379c819 [ 569.936202][T28563] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 569.936216][T28563] RSP: 002b:00007fefd4612028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 569.936235][T28563] RAX: ffffffffffffffda RBX: 00007fefd3a15fa0 RCX: 00007fefd379c819 [ 569.936248][T28563] RDX: 0000000004000010 RSI: 0000200000000100 RDI: 0000000000000003 [ 569.936260][T28563] RBP: 00007fefd4612090 R08: 0000000000000000 R09: 0000000000000000 [ 569.936270][T28563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 569.936280][T28563] R13: 00007fefd3a16038 R14: 00007fefd3a15fa0 R15: 00007ffef6b837f8 [ 569.936309][T28563] [ 570.263802][T28563] netlink: 840 bytes leftover after parsing attributes in process `syz.1.6191'. [ 570.290624][ T5821] block nbd0: Receive control failed (result -32) [ 570.320028][T14424] bridge_slave_1: left promiscuous mode [ 570.331495][ T5821] Bluetooth: hci2: command tx timeout [ 570.346028][T14424] bridge0: port 2(bridge_slave_1) entered disabled state [ 570.369971][T14424] bridge_slave_0: left promiscuous mode [ 570.378864][T14424] bridge0: port 1(bridge_slave_0) entered disabled state [ 570.540254][T14424] bond7 (unregistering): (slave ip6gretap2): Releasing active interface [ 570.612418][T14424] bond5 (unregistering): (slave gretap2): Releasing active interface [ 570.703447][T14424] bond1 (unregistering): (slave bridge1): Releasing active interface [ 570.711628][T14424] bridge1 (unregistering): left promiscuous mode [ 570.718223][T14424] bridge1 (unregistering): left allmulticast mode [ 570.882645][T14424] bond6 (unregistering): (slave bridge5): Releasing backup interface [ 570.891457][T14424] bridge5 (unregistering): left promiscuous mode [ 570.897979][T14424] bridge5 (unregistering): left allmulticast mode [ 571.042085][T14424] bond10 (unregistering): (slave bridge8): Releasing backup interface [ 571.050426][T14424] bond10 (unregistering): (slave bridge8): the permanent HWaddr of slave - 7e:b3:9b:86:ea:26 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 571.131198][T14424] bond10 (unregistering): (slave bridge9): Releasing backup interface [ 571.325836][T14424] bond1 (unregistering): Released all slaves [ 571.342153][T14424] bond0 (unregistering): (slave veth3): Releasing active interface [ 571.351350][T14424] bond0 (unregistering): Released all slaves [ 571.371320][T14424] bond2 (unregistering): Released all slaves [ 571.383707][T14424] bond3 (unregistering): Released all slaves [ 571.395697][T14424] bond4 (unregistering): Released all slaves [ 571.408387][T14424] bond5 (unregistering): Released all slaves [ 571.427271][T14424] bond6 (unregistering): Released all slaves [ 571.441335][T14424] bond7 (unregistering): Released all slaves [ 571.454622][T14424] bond8 (unregistering): (slave lo): Releasing backup interface [ 571.462856][T14424] bond8 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 571.476118][T14424] bond8 (unregistering): Released all slaves [ 571.492812][T14424] bond9 (unregistering): Released all slaves [ 571.504553][T14424] bond10 (unregistering): Released all slaves [ 571.518037][T14424] bond11 (unregistering): Released all slaves [ 571.535992][T14424] bond12 (unregistering): (slave veth7): Releasing active interface [ 571.548390][T14424] bond12 (unregistering): Released all slaves [ 571.561957][T14424] bond13 (unregistering): Released all slaves [ 571.742584][T14424] : left promiscuous mode [ 571.764511][T28583] [ 571.766865][T28583] ====================================================== [ 571.773874][T28583] WARNING: possible circular locking dependency detected [ 571.780889][T28583] syzkaller #0 Not tainted [ 571.785654][T28583] ------------------------------------------------------ [ 571.792674][T28583] syz.4.6193/28583 is trying to acquire lock: [ 571.798740][T28583] ffffffff8e883780 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_cache_noprof+0x40/0x660 [ 571.808045][T28583] [ 571.808045][T28583] but task is already holding lock: [ 571.815518][T28583] ffffffff8f17cfc8 (gdp_mutex){+.+.}-{4:4}, at: get_device_parent+0x16f/0x3a0 [ 571.824404][T28583] [ 571.824404][T28583] which lock already depends on the new lock. [ 571.824404][T28583] [ 571.834796][T28583] [ 571.834796][T28583] the existing dependency chain (in reverse order) is: [ 571.843805][T28583] [ 571.843805][T28583] -> #8 (gdp_mutex){+.+.}-{4:4}: [ 571.850941][T28583] __mutex_lock+0x19f/0x1300 [ 571.856052][T28583] get_device_parent+0x16f/0x3a0 [ 571.861502][T28583] device_add+0x2e1/0xb70 [ 571.866344][T28583] device_create+0x269/0x300 [ 571.871456][T28583] msr_device_create+0x33/0x50 [ 571.876729][T28583] cpuhp_invoke_callback+0x445/0x860 [ 571.882528][T28583] cpuhp_thread_fun+0x36b/0x780 [ 571.887897][T28583] smpboot_thread_fn+0x541/0xa50 [ 571.893367][T28583] kthread+0x388/0x470 [ 571.897963][T28583] ret_from_fork+0x51e/0xb90 [ 571.903074][T28583] ret_from_fork_asm+0x1a/0x30 [ 571.908355][T28583] [ 571.908355][T28583] -> #7 (cpuhp_state-up){+.+.}-{0:0}: [ 571.915902][T28583] cpuhp_thread_fun+0x127/0x780 [ 571.921267][T28583] smpboot_thread_fn+0x541/0xa50 [ 571.926741][T28583] kthread+0x388/0x470 [ 571.931325][T28583] ret_from_fork+0x51e/0xb90 [ 571.936428][T28583] ret_from_fork_asm+0x1a/0x30 [ 571.941700][T28583] [ 571.941700][T28583] -> #6 (cpu_hotplug_lock){++++}-{0:0}: [ 571.949417][T28583] cpus_read_lock+0x42/0x160 [ 571.954516][T28583] static_key_slow_inc+0x12/0x30 [ 571.959971][T28583] nbd_genl_reconfigure+0x132f/0x1ea0 [ 571.965862][T28583] genl_family_rcv_msg_doit+0x22a/0x330 [ 571.971952][T28583] genl_rcv_msg+0x61c/0x7a0 [ 571.976963][T28583] netlink_rcv_skb+0x232/0x4b0 [ 571.982231][T28583] genl_rcv+0x28/0x40 [ 571.986725][T28583] netlink_unicast+0x80f/0x9b0 [ 571.991997][T28583] netlink_sendmsg+0x813/0xb40 [ 571.997271][T28583] ____sys_sendmsg+0x972/0x9f0 [ 572.002543][T28583] ___sys_sendmsg+0x2a5/0x360 [ 572.007730][T28583] __x64_sys_sendmsg+0x1bd/0x2a0 [ 572.013174][T28583] do_syscall_64+0x14d/0xf80 [ 572.018278][T28583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.024687][T28583] [ 572.024687][T28583] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 572.032320][T28583] __mutex_lock+0x19f/0x1300 [ 572.037430][T28583] nbd_queue_rq+0x37b/0x1100 [ 572.042541][T28583] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 572.048688][T28583] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 572.055553][T28583] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 572.062041][T28583] blk_mq_run_hw_queue+0x348/0x4f0 [ 572.067666][T28583] blk_mq_dispatch_list+0xd16/0xe10 [ 572.073371][T28583] blk_mq_flush_plug_list+0x48d/0x570 [ 572.079249][T28583] __blk_flush_plug+0x3ed/0x4d0 [ 572.084613][T28583] __submit_bio+0x28d/0x580 [ 572.089632][T28583] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 572.095862][T28583] block_read_full_folio+0x599/0x830 [ 572.101658][T28583] filemap_read_folio+0x137/0x3b0 [ 572.107192][T28583] do_read_cache_folio+0x358/0x590 [ 572.112812][T28583] read_part_sector+0xb6/0x2b0 [ 572.118081][T28583] adfspart_check_ICS+0xa5/0xa40 [ 572.123535][T28583] bdev_disk_changed+0x7ba/0x1550 [ 572.129066][T28583] blkdev_get_whole+0x380/0x510 [ 572.134425][T28583] bdev_open+0x31e/0xd30 [ 572.139180][T28583] blkdev_open+0x470/0x610 [ 572.144110][T28583] do_dentry_open+0x785/0x14e0 [ 572.149384][T28583] vfs_open+0x3b/0x340 [ 572.153973][T28583] path_openat+0x2e08/0x3860 [ 572.159070][T28583] do_file_open+0x23e/0x4a0 [ 572.164089][T28583] do_sys_openat2+0x113/0x200 [ 572.169276][T28583] __x64_sys_openat+0x138/0x170 [ 572.174646][T28583] do_syscall_64+0x14d/0xf80 [ 572.179748][T28583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.186145][T28583] [ 572.186145][T28583] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 572.193350][T28583] __mutex_lock+0x19f/0x1300 [ 572.198452][T28583] nbd_queue_rq+0xc6/0x1100 [ 572.203465][T28583] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 572.209532][T28583] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 572.216379][T28583] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 572.222869][T28583] blk_mq_run_hw_queue+0x348/0x4f0 [ 572.228502][T28583] blk_mq_dispatch_list+0xd16/0xe10 [ 572.234210][T28583] blk_mq_flush_plug_list+0x48d/0x570 [ 572.240093][T28583] __blk_flush_plug+0x3ed/0x4d0 [ 572.245454][T28583] __submit_bio+0x28d/0x580 [ 572.250466][T28583] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 572.256701][T28583] block_read_full_folio+0x599/0x830 [ 572.262496][T28583] filemap_read_folio+0x137/0x3b0 [ 572.268035][T28583] do_read_cache_folio+0x358/0x590 [ 572.273658][T28583] read_part_sector+0xb6/0x2b0 [ 572.278932][T28583] adfspart_check_ICS+0xa5/0xa40 [ 572.284383][T28583] bdev_disk_changed+0x7ba/0x1550 [ 572.289942][T28583] blkdev_get_whole+0x380/0x510 [ 572.295302][T28583] bdev_open+0x31e/0xd30 [ 572.300063][T28583] blkdev_open+0x470/0x610 [ 572.305002][T28583] do_dentry_open+0x785/0x14e0 [ 572.310291][T28583] vfs_open+0x3b/0x340 [ 572.314963][T28583] path_openat+0x2e08/0x3860 [ 572.320067][T28583] do_file_open+0x23e/0x4a0 [ 572.325079][T28583] do_sys_openat2+0x113/0x200 [ 572.330272][T28583] __x64_sys_openat+0x138/0x170 [ 572.335642][T28583] do_syscall_64+0x14d/0xf80 [ 572.340752][T28583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.347152][T28583] [ 572.347152][T28583] -> #3 (set->srcu){.+.+}-{0:0}: [ 572.354354][T28583] __synchronize_srcu+0xca/0x300 [ 572.359801][T28583] elevator_switch+0x1e8/0x7a0 [ 572.365076][T28583] elevator_change+0x2cc/0x450 [ 572.370350][T28583] elevator_set_default+0x36c/0x430 [ 572.376056][T28583] blk_register_queue+0x366/0x430 [ 572.381589][T28583] __add_disk+0x677/0xd50 [ 572.386433][T28583] add_disk_fwnode+0xfb/0x480 [ 572.391621][T28583] nbd_dev_add+0x72c/0xb50 [ 572.396548][T28583] nbd_init+0x168/0x1f0 [ 572.401209][T28583] do_one_initcall+0x250/0x8d0 [ 572.406486][T28583] do_initcall_level+0x104/0x190 [ 572.411940][T28583] do_initcalls+0x59/0xa0 [ 572.416785][T28583] kernel_init_freeable+0x2a6/0x3e0 [ 572.422497][T28583] kernel_init+0x1d/0x1d0 [ 572.427336][T28583] ret_from_fork+0x51e/0xb90 [ 572.432469][T28583] ret_from_fork_asm+0x1a/0x30 [ 572.437943][T28583] [ 572.437943][T28583] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 572.445757][T28583] __mutex_lock+0x19f/0x1300 [ 572.450859][T28583] elevator_change+0x1b3/0x450 [ 572.456131][T28583] elevator_set_none+0xb5/0x140 [ 572.461501][T28583] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 572.467835][T28583] nbd_start_device+0x17f/0xb10 [ 572.473195][T28583] nbd_genl_connect+0x165b/0x1cf0 [ 572.478724][T28583] genl_family_rcv_msg_doit+0x22a/0x330 [ 572.484783][T28583] genl_rcv_msg+0x61c/0x7a0 [ 572.489796][T28583] netlink_rcv_skb+0x232/0x4b0 [ 572.495063][T28583] genl_rcv+0x28/0x40 [ 572.499565][T28583] netlink_unicast+0x80f/0x9b0 [ 572.504840][T28583] netlink_sendmsg+0x813/0xb40 [ 572.510105][T28583] ____sys_sendmsg+0x972/0x9f0 [ 572.515375][T28583] ___sys_sendmsg+0x2a5/0x360 [ 572.520558][T28583] __x64_sys_sendmsg+0x1bd/0x2a0 [ 572.526004][T28583] do_syscall_64+0x14d/0xf80 [ 572.531383][T28583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.537780][T28583] [ 572.537780][T28583] -> #1 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 572.546377][T28583] blk_alloc_queue+0x546/0x680 [ 572.551718][T28583] __blk_mq_alloc_disk+0x197/0x390 [ 572.557341][T28583] nbd_dev_add+0x499/0xb50 [ 572.562268][T28583] nbd_init+0x168/0x1f0 [ 572.566937][T28583] do_one_initcall+0x250/0x8d0 [ 572.572213][T28583] do_initcall_level+0x104/0x190 [ 572.577665][T28583] do_initcalls+0x59/0xa0 [ 572.582505][T28583] kernel_init_freeable+0x2a6/0x3e0 [ 572.588221][T28583] kernel_init+0x1d/0x1d0 [ 572.593054][T28583] ret_from_fork+0x51e/0xb90 [ 572.598154][T28583] ret_from_fork_asm+0x1a/0x30 [ 572.603428][T28583] [ 572.603428][T28583] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 572.610635][T28583] __lock_acquire+0x15a5/0x2cf0 [ 572.616002][T28583] lock_acquire+0xf0/0x2e0 [ 572.620944][T28583] fs_reclaim_acquire+0x71/0x100 [ 572.626398][T28583] __kmalloc_cache_noprof+0x40/0x660 [ 572.632196][T28583] get_device_parent+0x255/0x3a0 [ 572.637659][T28583] device_add+0x2e1/0xb70 [ 572.642506][T28583] atm_register_sysfs+0xde/0x380 [ 572.647964][T28583] atm_dev_register+0x76a/0x940 [ 572.653341][T28583] atmtcp_ioctl+0x4aa/0xdf0 [ 572.658356][T28583] do_vcc_ioctl+0x36d/0x9d0 [ 572.663367][T28583] sock_do_ioctl+0x101/0x320 [ 572.668466][T28583] sock_ioctl+0x5c6/0x7f0 [ 572.673308][T28583] __se_sys_ioctl+0xfc/0x170 [ 572.678406][T28583] do_syscall_64+0x14d/0xf80 [ 572.683506][T28583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.690171][T28583] [ 572.690171][T28583] other info that might help us debug this: [ 572.690171][T28583] [ 572.700402][T28583] Chain exists of: [ 572.700402][T28583] fs_reclaim --> cpuhp_state-up --> gdp_mutex [ 572.700402][T28583] [ 572.712395][T28583] Possible unsafe locking scenario: [ 572.712395][T28583] [ 572.719827][T28583] CPU0 CPU1 [ 572.725184][T28583] ---- ---- [ 572.730561][T28583] lock(gdp_mutex); [ 572.734446][T28583] lock(cpuhp_state-up); [ 572.741301][T28583] lock(gdp_mutex); [ 572.747699][T28583] lock(fs_reclaim); [ 572.751674][T28583] [ 572.751674][T28583] *** DEADLOCK *** [ 572.751674][T28583] [ 572.759801][T28583] 3 locks held by syz.4.6193/28583: [ 572.764992][T28583] #0: ffffffff8fdfc188 (ioctl_mutex){+.+.}-{4:4}, at: do_vcc_ioctl+0x2fa/0x9d0 [ 572.774037][T28583] #1: ffffffff8fdfdb48 (atm_dev_mutex){+.+.}-{4:4}, at: atm_dev_register+0x185/0x940 [ 572.783609][T28583] #2: ffffffff8f17cfc8 (gdp_mutex){+.+.}-{4:4}, at: get_device_parent+0x16f/0x3a0 [ 572.792921][T28583] [ 572.792921][T28583] stack backtrace: [ 572.798798][T28583] CPU: 0 UID: 0 PID: 28583 Comm: syz.4.6193 Not tainted syzkaller #0 PREEMPT(full) [ 572.798816][T28583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 572.798827][T28583] Call Trace: [ 572.798836][T28583] [ 572.798844][T28583] dump_stack_lvl+0xe8/0x150 [ 572.798867][T28583] print_circular_bug+0x2e1/0x300 [ 572.798892][T28583] check_noncircular+0x12e/0x150 [ 572.798917][T28583] __lock_acquire+0x15a5/0x2cf0 [ 572.798939][T28583] ? lockdep_unlock+0x5d/0xd0 [ 572.798955][T28583] ? __lock_acquire+0x146e/0x2cf0 [ 572.798978][T28583] lock_acquire+0xf0/0x2e0 [ 572.798996][T28583] ? __kmalloc_cache_noprof+0x40/0x660 [ 572.799016][T28583] ? do_raw_spin_lock+0x12b/0x2f0 [ 572.799032][T28583] fs_reclaim_acquire+0x71/0x100 [ 572.799050][T28583] ? __kmalloc_cache_noprof+0x40/0x660 [ 572.799067][T28583] __kmalloc_cache_noprof+0x40/0x660 [ 572.799084][T28583] ? get_device_parent+0x255/0x3a0 [ 572.799103][T28583] ? do_raw_spin_unlock+0xf5/0x210 [ 572.799119][T28583] get_device_parent+0x255/0x3a0 [ 572.799140][T28583] device_add+0x2e1/0xb70 [ 572.799161][T28583] atm_register_sysfs+0xde/0x380 [ 572.799185][T28583] atm_dev_register+0x76a/0x940 [ 572.799208][T28583] atmtcp_ioctl+0x4aa/0xdf0 [ 572.799227][T28583] do_vcc_ioctl+0x36d/0x9d0 [ 572.799246][T28583] sock_do_ioctl+0x101/0x320 [ 572.799269][T28583] ? __pfx_sock_do_ioctl+0x10/0x10 [ 572.799290][T28583] ? do_futex+0x333/0x420 [ 572.799314][T28583] sock_ioctl+0x5c6/0x7f0 [ 572.799336][T28583] ? __pfx_sock_ioctl+0x10/0x10 [ 572.799356][T28583] ? __fget_files+0x2a/0x420 [ 572.799370][T28583] ? __fget_files+0x3a0/0x420 [ 572.799382][T28583] ? __fget_files+0x2a/0x420 [ 572.799397][T28583] ? bpf_lsm_file_ioctl+0x9/0x20 [ 572.799418][T28583] ? __pfx_sock_ioctl+0x10/0x10 [ 572.799438][T28583] __se_sys_ioctl+0xfc/0x170 [ 572.799457][T28583] do_syscall_64+0x14d/0xf80 [ 572.799484][T28583] ? trace_irq_disable+0x3b/0x150 [ 572.799497][T28583] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.799512][T28583] ? clear_bhb_loop+0x40/0x90 [ 572.799530][T28583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.799545][T28583] RIP: 0033:0x7f49af99c819 [ 572.799561][T28583] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 572.799574][T28583] RSP: 002b:00007f49b0782028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 572.799591][T28583] RAX: ffffffffffffffda RBX: 00007f49afc15fa0 RCX: 00007f49af99c819 [ 572.799603][T28583] RDX: 0000000000000000 RSI: 0000000000006180 RDI: 0000000000000004 [ 572.799612][T28583] RBP: 00007f49afa32c91 R08: 0000000000000000 R09: 0000000000000000 [ 572.799622][T28583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 572.799632][T28583] R13: 00007f49afc16038 R14: 00007f49afc15fa0 R15: 00007ffe469bbeb8 [ 572.799648][T28583] [ 573.227181][T14424] : left promiscuous mode [ 573.259903][T28325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 573.283117][T14424] tipc: Disabling bearer [ 573.301976][T14424] tipc: Left network mode [ 573.318494][T28325] 8021q: adding VLAN 0 to HW filter on device team0 [ 573.339471][T14426] bridge0: port 1(bridge_slave_0) entered blocking state [ 573.346568][T14426] bridge0: port 1(bridge_slave_0) entered forwarding state [ 573.362789][T14426] bridge0: port 2(bridge_slave_1) entered blocking state [ 573.369895][T14426] bridge0: port 2(bridge_slave_1) entered forwarding state [ 573.620232][T28325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 573.668399][T28325] veth0_vlan: entered promiscuous mode [ 573.678461][T28325] veth1_vlan: entered promiscuous mode [ 573.716475][T14424] hsr_slave_0: left promiscuous mode [ 573.863909][T14424] team0 (unregistering): Port device team_slave_1 removed [ 573.943478][T28325] veth0_macvtap: entered promiscuous mode [ 573.954475][T28325] veth1_macvtap: entered promiscuous mode [ 573.972754][T28325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 573.987205][T28325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 573.998987][T14426] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.015832][T14421] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.028124][T14421] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.067425][T14421] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.100752][T28325] ieee80211 phy77: Selected rate control algorithm 'minstrel_ht' [ 574.144390][T14426] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 574.152427][T28325] ieee80211 phy78: Selected rate control algorithm 'minstrel_ht' [ 574.161319][T14426] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 574.203473][T14421] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 574.211647][T14421] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 574.240849][T14424] IPVS: stop unused estimator thread 0... [ 578.820138][ T1669] block nbd2: Connection timed out, retrying (0/2 alive) [ 578.827211][ T1669] block nbd2: Connection timed out, retrying (0/2 alive) [ 578.834597][ T1669] block nbd2: Connection timed out, retrying (0/2 alive) [ 578.841841][ T1669] block nbd2: Connection timed out, retrying (0/2 alive) [ 578.848948][ T25] block nbd2: Dead connection, failed to find a fallback [ 578.855966][ T25] block nbd2: shutting down sockets [ 578.861592][ T25] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 578.871638][ T25] Buffer I/O error on dev nbd2, logical block 2, async page read [ 578.879464][ T25] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 578.889908][ T25] Buffer I/O error on dev nbd2, logical block 1, async page read [ 578.897650][ T25] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 578.907148][ T25] Buffer I/O error on dev nbd2, logical block 0, async page read [ 578.914940][ T25] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 578.924429][ T25] Buffer I/O error on dev nbd2, logical block 3, async page read [ 578.932305][T26626] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 578.941875][T26626] Buffer I/O error on dev nbd2, logical block 0, async page read [ 578.949767][T26626] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 578.959604][T26626] Buffer I/O error on dev nbd2, logical block 1, async page read [ 578.967348][T26626] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 578.977787][T26626] Buffer I/O error on dev nbd2, logical block 2, async page read [ 578.985766][T26626] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 578.996961][T26626] Buffer I/O error on dev nbd2, logical block 3, async page read [ 579.005008][T26626] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 579.014640][T26626] Buffer I/O error on dev nbd2, logical block 0, async page read [ 579.022551][T26626] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 579.032276][T26626] Buffer I/O error on dev nbd2, logical block 1, async page read [ 579.040408][T26626] ldm_validate_partition_table(): Disk read failed. [ 579.047174][T26626] Dev nbd2: unable to read RDB block 0 [ 579.053338][T26626] nbd2: unable to read partition table [ 579.065941][T26626] ldm_validate_partition_table(): Disk read failed. [ 579.072857][T26626] Dev nbd2: unable to read RDB block 0 [ 579.078826][T26626] nbd2: unable to read partition table [ 581.274054][T15556] lec:lec_start_xmit: lec0:No lecd attached