last executing test programs: 33.999321092s ago: executing program 3 (id=3027): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = socket(0x2, 0x80805, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000180), &(0x7f0000000200)=0x40) (async, rerun: 64) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) (rerun: 64) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000000)={r2, @in={{0x2, 0x0, @empty}}}, 0x90) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000040)={r2, @in6={{0xa, 0x4e24, 0x7, @mcast2, 0x10000}}, [0x8, 0xecc, 0x4, 0x3, 0xfffffffffffffff8, 0xb, 0xb59, 0x1, 0x9, 0x4, 0x1, 0x15, 0x7ff, 0x3, 0x4]}, &(0x7f0000000140)=0x100) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYRESHEX=0x0], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x80}, 0x10}, 0x94) 33.803647291s ago: executing program 3 (id=3028): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x2, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r7, @ANYBLOB="80a102000004000024001280110001006272696467655f736c617665000000000c00058008002200", @ANYRESHEX=r5], 0x44}}, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) connect$unix(r2, &(0x7f0000000800)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0x80}}, 0x0) 32.869997602s ago: executing program 3 (id=3038): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x4, 0x6, 0x301, 0x0, 0x0, {0xa, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0xc080}, 0x20000000) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000003a40)=@newtaction={0x1008, 0x30, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [{0xff4, 0x1, [@m_ipt={0xff0, 0x16, 0x0, 0x0, {{0x8}, {0xf30, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}, @TCA_IPT_TARG={0xf21, 0x6, {0x4, 'mangle\x00', 0x7, 0x400, "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"}}]}, {0x99, 0x6, "5a2d0e869135a294681ef6728f70a65a4ea0d645f71a0d1a9a99c024664f4e73dede9d72b43ee6f5534424a60fccbf0cff8dc2529390cafe31ae5e8e55770458f47742a28dc9de14a5353494a516788dde5f40b2d2c8250994240fd3480d4fa9b3074e615a9102ede5ec3696a39921db8b2af38d59d8dd9bc64c7ed82b6ea0101d87fa1a8a6b4ff8b4b9d8499e145429c162d8abca"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x1008}}, 0x4000000) recvmmsg$unix(r4, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002a00)=""/4100, 0x1004}], 0x1}}], 0x1, 0x10000, 0x0) close(0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x20, r6, 0xb03, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000e40)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x24}}, 0x0) 10.184099235s ago: executing program 3 (id=3041): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x400000000000003, 0x0, 0x9, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}, @sadb_x_sa2={0x2, 0x13, 0x3}]}, 0x80}}, 0x0) syz_emit_ethernet(0x26, &(0x7f0000000040)={@local, @link_local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x89, 0x0, @dev, @local}, "5613e798"}}}}, 0x0) 10.101666001s ago: executing program 3 (id=3042): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x5}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}}, 0x24000041) unshare(0x20020400) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x6, 0x8, 0x8}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x80, r3, 0x0, 0x7}, 0x38) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r2, 0x847b0dac5bec178f, &(0x7f00000000c0)}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket(0x2a, 0x2, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x5}}}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}}, 0x24000041) (async) unshare(0x20020400) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x6, 0x8, 0x8}, 0x48) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x80, r3, 0x0, 0x7}, 0x38) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r2, 0x847b0dac5bec178f, &(0x7f00000000c0)}, 0x10) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) 10.09987516s ago: executing program 3 (id=3046): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, 0x0, 0x700) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$rfkill(r1, &(0x7f0000000080)={0x100, 0x3, 0x2, 0x0, 0x1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710437000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x10, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) 4.343669311s ago: executing program 0 (id=3092): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r1, 0x2) (async) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000002640)=""/4096, 0x1000}], 0x1}, 0x40000001) (async) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000054000147880000000000000007008209", @ANYRES32, @ANYRES8=r0, @ANYRES32=r0], 0x38}}, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r2, r3, 0x4, 0x0, @val=@tracing={0x0, 0x1}}, 0x20) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x40004) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.159745887s ago: executing program 0 (id=3095): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014006000000035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a1a83d5f59e3d", 0xd8}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xd1, &(0x7f0000000080)=""/209, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) 3.946813845s ago: executing program 0 (id=3098): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001800dd8d00000000000000000200000000000005000000000600150001000000280016802400010000000000000000000004010020000020000000000000000000000000000001"], 0x4c}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000300)={0x1, 0x1000}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r1, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x0, 0x0) 3.440852293s ago: executing program 0 (id=3103): r0 = socket(0x2d, 0x2, 0x0) recvmmsg(r0, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x41, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x9, 0x2, 0x1, 0xd, 0x5}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100)) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x7ff, @private2, 0xeb2}, @in6={0xa, 0x4e21, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}]}, &(0x7f0000000180)=0x10) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000340)="480000001400190d09034beafd0d36020a841a000000230f00000000a2bc5603ca00000f7f89004e00200000000101ff00c00e03000200000000000000000300005839c900910000", 0x48}], 0x1) syz_emit_ethernet(0xa2, &(0x7f0000000880)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd60ee527e006c3c0000000000000000000000000000000000ff020000000000000000000000000001000300000000000005020000c9"], 0x0) 2.431423169s ago: executing program 1 (id=3112): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xffe0}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x12000000}]}}]}, 0x3c}}, 0x20004055) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x101}, 0x18) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x3, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd28, 0x6000000, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x5c, 0x2, [@TCA_FW_ACT={0x58, 0x4, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xfffffc00, 0x8, 0x10000000, 0x200000b, 0xff}, @broadcast, @local, 0xff, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x11, 0x8}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r7, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newtaction={0x1c30, 0x30, 0x800, 0x70bd2a, 0x25dfdbff, {}, [{0x1204, 0x1, [@m_ipt={0x1080, 0x19, 0x0, 0x0, {{0x8}, {0x58, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x10000}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_INDEX={0x8, 0x3, 0x6}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_INDEX={0x8, 0x3, 0x6}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}]}, {0x1004, 0x6, "f86f539bbd049aa76aea44e9752f26a779f50eb00527de36b6b1f83cdef5b79d6b073d51da279ad3d958adec62c93c29df1431162084a83fec58bfca386e3dc5f3b81179f74bf6c40d4fba23e1f2422c1e1c8cc13ccf49680da834367c1ededc8f3fde01a5159815d5fe0cedf118ce104bacf1f16c2d5dfcfe4d770c71b503d1874efd998c1f1ec2be2d09d8a897d053d9f1bfab3f21f614d2fc29164540aa476ad8e756f49ce14a70be6a8beb9f8151ef77548d4f5b6bcd28d7fb5291937b5db570630c662c4395f814468e8363b3254f919beef71eb2bae3aeee5f81383bd6203c1894a789f5d6be0af9459e47182c922e0632d7ef32add220f0c400d7ddfb00c4fc3835b3626dacda778856f4a305458dd752605fa3506ca016248b641c13f9db941d1c9c8435224a8c9d852ec05f29d21af67cf279ff56678b50168500ce1bdad944c372e577f21bb04483ff3d361344f8903af171de996713a95885ec3d046834baedea002e4f81260011b08d83b6a962d37266c83d37147089af0136d7700aebae14d1fd467cdd91ebb21a0739a7cb099857240f4e0bd2bfb9808d7632010552de70ef35f4863d58773e43d64069d058da79cf9a4da46e49dd4ef6885bca77847bc20d0a11fa23ab73f473333f5e1f0cee4b0d20bc94f96944b445f2b01a0651a1af335e41e2f6db57f509426848a444185819cc3a6fc5d502d62f93027faceb15f1da5e94f8288a4b9de100a08ae39fda12d869caab621f7c16e8b1f8bfa3e7a267cf36e5ea4563964359adfc8975d449af06c50b4adc6fa2c786efc4f3d76ea5129ef138e558199d36fcc60fec1b518a22087906589794cab1818436a567dfb694d598dcc9dd5189d97f2c6532121839e1cc20b6df47bd04f5c84ef98bf3fb3dfb0c39a195e501d353ec2a15eca1210b32bc11e99f3ba7ca59efdffbf1b84401e44ee91c9dc6f5a1abc2b9944e8ec68faeba58439cba73d5951c20657f47d1fef012e56f4cb05b3bf51c06d407bb69f1a92009085e712f1d28f744ba8d5bb8990e69cfdee99dd211db8499cba2dab290c2a548313e0c0c2098a050ac4130fa38b43a633cf8da51c1a15781827ad4393b705ca7866cf47a1cde183eb611edf00507556e62dff1f0a2e0c90d01895b91dfc11a891993d8a5e5cf7e2fce39a2097bd2a5dd841643220de9e0b382f3f90a4594444bc359d61d1a7514f7c6d3e954863d857625e1d020ebbe5587c9c47cba40153826057cdf01ddedf5922640c72f35d6650242006be54332b62877cca6e97730740c90092135175854bb46f0c6e6e57e183303044f802ac99726f33fe9497ff2562d8284b1704e269800bdfd8348b479aee9a7c5c2ba858523a0d60fe21b4364b84f1c84bc3a0a3c2bf377dff3697dc2a66685e5f05de1372f30ec8597f410bd1db8dbb1a957529e51b69bd0f5b8237ff89acf6e96834b646ee0b97c9a0a73084f8807aa41b79fb72ab34bfafe50fb487a6ea2a918676f8f12579cd51ddb3b122712025c4835a5e8d27a2808dbfd41121f5c6c106e2f9aee11e678737dba62949edf4d4aeb45f83d7ce2332edf0efc20f3d844ece321bafb76b581aa73c4665ea74f2187004c36d3704e466dab1e210f4b1d104adf7645369bf11b9b1510df3c9b714c1f700eacc9227b1b4f3a4bfb1621acf1e922be6c131e63a761415008edf71f8c9b991931ac4ececb5b1e9fdd558b32f660d53a49ce52fd33cf16bc29809a65c8ef83c6b04ed41d2cc90a2016509e5ae401858f8df76741e01900ff9c3ad38f05c18cbab6d1172b22a4ca99d85fa73a55a2a74a031557e60529978467ded73c368ae26c196885d460014e98fa85edbfd4b8057dadbbbeffba0763effa1b5282cc13d8359067d4cce5f78db6eaa5e205fca02e591129819e1c02bb6cc0e65b509b781c8fc73a3fbd28a96db66f9df8dad8279bace750beff5c07671a7f59c77a4538670000d2392cc76f9b79cbbccd0a2e1278a32d00e172d8a2fe8ae03c9965b1e9efc445c4666a2abda590e28519208790417ef88c7da46e155980e04062e405c8073d34810be53790b6c78e8d631d005cbb84d88733179248155eb5167c90aed662b2273f61793efaff4b928f82dd6634d4c6f966764bead2b382508a5c2e6405369de7e1b2ad32a6ffe57db56dd7945541b7844ef70b6a0bed4a8c2f8c2abe0712f6709b1514e488714bfd15c77f01f94468f13c085be3431c92fcb3d5094390f310b9d9af36dead71e1b2a082d868bc70ba6cbf98c0527deb9e74085dbeb7a6f781f763e01c6f11badeecb8812abf31fc68f4361bf839c2b4e1bebe2600841ade3a6412030af95b586363f9c76a235da0d690122ad601e54bd68cf2cecf6676481d8b007a097ab39f409dff98067520198ab356abdfdda87808258164666a73d639bb756fb0d34d2456a0d318a6d1e9e9c138aa368d90ab551c2635dd85a500a9f25849d579853d67376e01348cda8e4da7e9c3307d15530adf872e01cffcd64381901ce1929a251eaf9871364e1887c4a3b006455a0f73f708d374d4f9732d6f7363d21dc26688abcb9f1761828a93415cc4c39949e4fa459bcc987a906e85c0f5b6c55a3525ed6332e29a0eb90ac91f8107211b904fdfad0e1b86308799f577278b83ebba651d17c4fd1c42b3605ef0fb964f49e546069621bcc4f4b7b4a19e15d0790a7cfa885aaf67ab7dfab88a978cf62311bd125d4b527fb57c947dfc92303d64de10ce8f9b357b6ff7ca6f95d059470d9e970b351f5f27f84f337f92afe0c5f214d3884b5ee7a61e5b3d8e051fbd8a7974ccb83b68a3af684e5ddf38e9ea9472d6fdfc2b2420d8f3400c981da4d6f339bbae1c84c847730866e576ca53926b502d5b3abae4ed64a04e885f3e543b0e0dc150a7f4a5feeffa563c161fc4f824bcec7cebc53a85963791d4562fb248fb97eaaf0b7ce760e21ca70f59ec46699b263dd743e445d72b4f75e0c5434bba5b2d114408d86fb4bc3fc973bf41660763bacf4d364fc42ac3895ec4dddbadfb76838e55c65367a3f3894601ba73546197ac632d6eb85293378443f6b1f9098f51d8d5edc0161a56623cb5c08bac9a5165a659f06b833efdf2018ee450eeb7fef0d525318dba2d103ed92eaf706716c8bd282a0da9c6140c18a8230e657bfaa417e0eb4e953d2c1ca5cc1ee0576d4084d08d846e28109ecb9d76d272ba7f0e79fcbf48d7e24802b112a7c2a783e13b2fd66e423661bbc465460c0edc058f5406e9162f0a04b3c30a6ec907b8fb367710b07dbd949dcb4a46d207a1272500e0fca25a4a7c2840e261bb74bc36d5ff210a91d1116fed72b3566216a9819ea6942f2ccca3522b4ec3cd062c1e72b608c5dcd63dbfab6926870725f38de1fa83e4170da814dec02d58979e9783d1f24c4f11ce9346f5de711f07ba550cd195fcd0192530f54828b3541e2cb214b27b71eec055ab0efada2448fcf171f6c08aaa2da2728036a9d018925984238927dac8164382db908a4ea47e2b2d818c8f0d6162ad17060d70143fe8d1d00d5fd8b00390cb1e215de5d6f0ec94c822c6d76aeef936a8e24a96cb73631d811a0a506e4db04cdedbcf17667e7d7e200a71323c533b823d75054e6c811beb5d96408e6eb57019f8fdeab855629a6928ca0696be1bf30189254a75cf056ff9ae2065805f0fea756f785847a74c60ba54fb81545479d515434d7f2df3b5ba275fc8fb1f4cf139007f5a28de0d103c286e55b57eb00b44d3e9978d67a00f2576027b2fa300be7c09d4fa25ffa4fbb3efcf306cd900a4944aa8b9435172c6d20123626566bddb666b3f6308392c6d8b7f6da192d9f5c72b4aee67ef16d24ad8053cbae4b501f0b2905c41cd6cf9944356e3e2e8660387c48cc6113056deb64872b57382460262c3f9597b347c2866d32055130311d1ba93e1a4f30f1dfbf0464fd17ee35183043f5fdd01d3b61a0a71561e0fff5b3e264ca022030d5dd1948fbb574fb9e29a521cf8ab6783ae14808d349381a5a609695a87fae34b7ff5827f3f3647aa5e03fe9fc48f0e9372866dd10c70819220006e89e734b84f3b8faafe726117a204358fa9ac838583e0e9b71a00346ea401aea0f72317af642c91d01aaaf2750eb0b4281bf550a72c2b33ea55f77ea4a355a3e1bb1e641e764d3f865c6f648b6742d822ae261bb92930c3261c3417cce4030d520b9337e2b53487f03a91ac8c1449e2baa40288ad13593c5a52fef9c99cde39e607c03970208d9a522ce1ee66b3dab2529892200c070ec7fdbd02c7c2441743d37be92a4fc45c2f7c85ffd26ac57f82c07be98db2edea4144ed38c0c73e6dfcb1a6b2df13aba3cfac64f579a837d9245569ce7cb28e5b0150bfbc3de3dec744fdff34ffb9d797edfd515d41f35956aa993478a957c8226fe2174862fc1e144cfd3548a6daa45fe6e98b52277bd1016db1ba68c304cfb6ba0d281e7cd34adf587012e62289d3ef6205a3789774fc13b71fbaf0200168ba8e2b3a4375f90ccccba82aa51a9b1dfb30a2e40418e42502658e572a97bc661e9a9f41b16ae5e0bcbbae37f1739ae61ce57d4d7bfd13ec30f446528aed5fc0c244c318a8e6610ac454268d8d9a1615b36861d0547a296c9d9db5efdbba5e6fc4894e42fc125a3fb47f479c404c635d79d49afee1652c2802f2a93ebb4c3288f0cabbfcf3a16443bb46ae0b69507dc8bf341a4929f3a57d405eaf4103f4ac80a538120247d8610e3a60e8e12fdfad086d114ac27530bf2ae12907f659af333500fec11da67144042a103d7bd86bb975c413b631e8c6464ea2198c5c134a7990be695740aa6226d71027b951dc6cd061a04b4ac9806d36b5e4317469bd4ea537e870f03936f93d1a057d11a6b4d36c805e3d0e6b708a1f5710cb6b6cb9b3ae0ea46902af5485ab052570ef768ce2e6f8f5c89812a3c80de9164c655abb77f77bd0d4007e81e9a2149ad0ec69693a528b52935f6e0a1ef412bfec701bde35c641489dbe594ff81d7f107e58d353fa31acae4be5bda6877a9c17d62d6db8fa7593219ff1cf15ae49303554fd3c769e01660fe0054ca97fb5ae2676eab1931663d70419871843f39084b62665707b73143a1bf765f4f0ad8c3cc18df87b023ce7bbd06acf4d8a3774d66db4a5f021a87490657d84c0ef1137c486eb8b27098b58a3b70800eff2b005b44b53c03e3b26f51d606bce4db95299fffb669188ce8ffa2b63f00a0606634cfdf9e131a86877253d25e5c14d7a295393c49fb28a500c9c8ff0405456ce6da834a30d01b31393580ef48ef554d6cf57ad72d62b573990b19db303f1b78e7613ed41875f4b7d444ae7ddd5777816f6e6b6ccba8adc8a6ba20c1a7ecda2e3032bc1dd671715367a53c272ea82c272341e1fe49fd6826a10604f474e8c96288b683658c50e1fe152e192799fed6dcc299a7a247ca7882ad65fc4abd3f9ae330a8a79034c04784ba92b163f66eadb926c5f2d216c15412adae2d9c3693961074bed40bb082939c7659960906a68b1b2b75f77c916f2603d5431645b207977615454f20b35f6f578865318d8d1522ae2972d4512fb95c332e8a79a55726e15261b60d45fe347c0687b97673dadb37f37c58e2d2601d88b589bac263ce60368bfbf2d7ea4021a8bf5098160a2a6713d1d14bc4b4d2f6a14fd8c2416774bce9fb6fca768d42c2807c309f252e8fdcc7125c42cf71fb6f01d99227c3357cd0eae725311eb33de603fb0f7eb004928e93e2d025a3b8d49d3d0c9e588f72c74"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ipt={0x180, 0xe, 0x0, 0x0, {{0x8}, {0x6c, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}]}, {0xed, 0x6, "951d721ce46b776b10374723c292ba665fc3b2572261585e4afc4f3768d20dfa3db6ab9cfbe1cbf2f934cc2c11a3c0a7f279f683b469302924164ead3868a29663ed22c8089e0d6ea63bf3a98482459988f250fca2ce66b5f797be355642f304d3d571c126d8505f5894bf60a218181b89d7c5e6d58be668b14b4c86dc409e7eb8abd537fe498efde76421f37c8521c871a6a0caab1abb2b4ef317efbc590996efa77223b705e2099d0ee1c0ab87dff134653d240aefd5ed707c65887c2f25ad2507f8e9fab07e899f5d01d45d5f36c0326ef2cfd01081fcaa799cabcde0b2404f6b51b841cb260858"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}, {0x440, 0x1, [@m_ipt={0x43c, 0x1a, 0x0, 0x0, {{0x8}, {0x380, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x5}, @TCA_IPT_TARG={0xb8, 0x6, {0x401, 'filter\x00', 0x9a, 0x1, "e95f25a2ab69668609bacd78fb1b67da0334d1a08fe28efff6f05bbfa353255c8516271d722e267204f6733b98639ee828b1dcb7f440e69c891c81db4804448ad8a6715ebbcdac2883b2db9ccc6721842eb4a2fb7488386bc853c17f6e4d099fd843c2ef58e569d7ba267bbcb4d36a426df5ffa3c08b141779958d6487762958e850159d686866d2a51963da2862"}}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TARG={0xf0, 0x6, {0x0, 'nat\x00', 0x80, 0x9, "36eb785c4774e631c11df78413f9a10f5b705642dcc84acbf77930501d441eaca79b7e56102bedee4bb790eaf4f171ab469153ab04ef93b50bfca26dc663a951b04a0cba1fa9ddabef2d663d2b6f09a677e89f402f1f48495284d0e9317e09c198e6f350eaeb17ffd3526f4408e8b2a520b95d4f1e72fb7586b5e460236ca996f880fe342ae7355f80b41aab108420528a5d300efad1cbb9adba02ca87ad690615cb1915c9be956fbf929d5adeee1e0cbab162dbb4d06aefd7058d3a59ad8d3baccbbef9502d"}}, @TCA_IPT_TARG={0x118, 0x6, {0x88, 'mangle\x00', 0x7f, 0xd0, "44a77123d10fb05f607d05416cb27378627d229b6bb4a81a53511acf74d779ec3f4bcd44308913a997d51e0889fe80f2ad4d15ddadc18499f021970b680079821d3f811d7c49d4b2457c7502cfae1e187c0bde5bb1c503fabdfecdb43b64909d3f8bf9d2a31755a8d4813104faa1da321bac9d3a12621a1feabd627de37c89726fbbb5f73f6eb0b04e11bff3021d6970a680b5226f51688b544f550b052f22099ad1ecd5cbfacf660ea112470b10ba1d7169333fab29400a9b7254e04af975b6a885a7953955c9bb59a20ddfa475f114ef0fd0999110e4267073f3633eeac07d1d03ab0d227f07f5c675ee2cabad"}}]}, {0x96, 0x6, "b4cc5e23f46f8442d449beb749b17067696ef9245bafb0bd2e9617c75a4cc09d76d1e48f32a73ce03babe42bd1e31ad901b2ba2b95ddbfcdbce2c4f9724900e45d7dec05cb1dab4a89940927e3a2413438aef1d971aca8d068e055c258e5f8a5ab09288900c455549417194e05ec64016c3a5a6124b21638e78361edccdb7229f825e4d36d21a32ca3a0680725f98187484b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}, {0x5d8, 0x1, [@m_ipt={0x50, 0x7, 0x0, 0x0, {{0x8}, {0x14, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}]}, {0x16, 0x6, "0ede73f711227eb3add60320847d28e3fac2"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ipt={0x25c, 0x1b, 0x0, 0x0, {{0x8}, {0x214, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x401}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TARG={0xd2, 0x6, {0x0, 'security\x00', 0xc, 0x9, "040c872dca6c77c8cdf7953ce970a00d1bbf8c743199898f2427cf2e32fc6585d290fa02dbf620231e51ee7de4d2bb0620386c78131de709603bd950fe8e41a9bafef81dca11be2f60b821f79db0d13695fc55a5c01ba49194e15a49fdc8af2f636206a30f3e21e8a0d5b86af7884f7974f2aa5c45bc0e952c71d7e38864577508ec23ced176147a93253362f87272ec097d324fcee8688e3037378aac2cf5fbfb891e8ec365600b"}}, @TCA_IPT_TARG={0xb6, 0x6, {0xffff, 'security\x00', 0x8, 0x1cf6, "c52993ca9b287216447c7c7280f9a5a35a84da6a7646a81b4a11a2af2d9fe00b6778ec647dbf405a3831cdb2fd4efbb97bb5ef565b85572a6e0ceb2c6970da9ba9bedfdb313b29d674e112a6c86b79e89bb9d5074cb274b1226720044aa1bfd6eb2151f0664672e821417832e1c203be95c51f8741aab82878d11f2606f3b41112de24bced50e9b5fe3236f6"}}]}, {0x23, 0x6, "665346790726e302b13d71f05d7a57d6538c14f5cf262570f1a855473573c5"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ipt={0x1f0, 0x1f, 0x0, 0x0, {{0x8}, {0x164, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TARG={0x105, 0x6, {0x2, 'filter\x00', 0x7, 0x8, "1fed479d00efa9dd9f653cbd469013ab46f2ab0cce44a81c5c87c2c83d7cd4df0dda77083694c56147cbb9556f5fbdac2a455664986f9d92f64fcfe316395870d6b954512825fb520a5fc8465b334afada47b014b8ef8f934996a4f1885dc13f0178daac11613b1bc43e67ded095ad617a6234d32792a97817413d53324facfd717be45c2b9e38f9391052655ae8334adcb6f197830fcdfdfd648e14e06677b4e42401238af6c4384f4a116ae5d589167786c0b01f7f30d031cd0e7c2bdffa67084c50781d06260ee9ce7e769d101d09b1a305e34062a3ad99854a"}}]}, {0x65, 0x6, "24d2b64be58710a39f2eb974f0d06c7c883d96b4f94042701a41946f0ce8cf2534bbe98238abd93cae351f80400f82e6ba10edf82610ef342525d5c14be2d19ed701ca40323beb4b282848b29d680d996208df8028e7e9bf42ee641ec858a6f577"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_ipt={0x138, 0x1, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x4}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x7ff}]}, {0xd9, 0x6, "2019846e798271538e8b2497172195f3e659b20d5de56c43d6f5e225cea3e81eb67f7b27d860d5259c34044df983ce156998ac8f8db18f48a6e6b7123342e310f2cb697cc9af653a8346ac0ab90995e2b19eddf0579711d88607957ed3930b14dd2081bf7569bbdeefd2167b0b931bfad6560af3427dccafd0f598d55b0af49f8546b46cc46b5ed2ab82a1cbdb33ec11b81d6b86b02ca742f112c7c131d9af227e0304303242af3ff425c0854aadc79df81cfc4360b42268fab7a210756653461cbe8489750a65290a6af15d96789590418887991a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x1c30}, 0x1, 0x0, 0x0, 0x1}, 0x4840) 2.431034372s ago: executing program 0 (id=3113): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x28b1b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e1f}]}}}]}, 0x3c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8}]}, {0x4a}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) pread64(r2, &(0x7f0000002840)=""/4096, 0x1000, 0x100000001) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x8000) 2.345910516s ago: executing program 4 (id=3114): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet(r0, &(0x7f0000000940)=[{{&(0x7f0000000000)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000040)="93", 0x1}], 0x1}}], 0x1, 0x4040040) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x200}, 0x8) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000240)={'geneve0\x00', &(0x7f0000000200)=@ethtool_rxfh={0x46, 0x4, 0x400, 0x1, 0x6, "f7b6fe"}}) 2.089957067s ago: executing program 4 (id=3117): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000000900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f18e55afb9fdd672bad09dd4a7ccd2dfa8237720ff520100000000000000699c74e891a0c708000100544545000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x17, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x8000050) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x4c}}, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x20) r3 = socket(0x1e, 0x4, 0x0) connect$llc(r3, &(0x7f0000000440)={0x1a, 0x304, 0x9, 0x3, 0x7, 0x7, @local}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8b04, &(0x7f0000000000)={'virt_wifi0\x00', @random="020000000100"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000000240), &(0x7f0000000280)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x3e, 0x0, 0x60}, 0x90) 2.031317412s ago: executing program 1 (id=3118): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r1, &(0x7f0000000140)={&(0x7f0000000080)={0xa, 0x4e22, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000029000000360000000000000000000000e8"], 0x100}, 0x20004094) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@ipv4_newaddr={0x40, 0x14, 0x400, 0x70bd26, 0x25dfdc02, {0x2, 0x3f, 0x40, 0xc9, r2}, [@IFA_LOCAL={0xfffffffffffffe41, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFA_TARGET_NETNSID={0x8}, @IFA_LOCAL={0x8, 0x2, @loopback}, @IFA_ADDRESS={0x8, 0x1, @broadcast}, @IFA_RT_PRIORITY={0x8, 0x9, 0x9}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.939631806s ago: executing program 2 (id=3119): unshare(0x2000400) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1a, 0x0, 0x0, 0x0, 0x3866, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 1.916904225s ago: executing program 1 (id=3120): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=@newsa={0x16c, 0x10, 0x713, 0x70bd26, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e22, 0x1, 0x2, 0x3, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in6=@local, {0x0, 0x0, 0x8, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffff8}, {0xc, 0x0, 0x2}, 0x70bd29, 0x0, 0x2, 0x1, 0x0, 0x28}, [@algo_aead={0x68, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0xe0, 0x80, "316f74eeac053deb73fc018493cc121927a9bca207141b9a451c00aa"}}, @tfcpad={0x8, 0x16, 0x4}, @offload={0xc, 0x1c, {0x0, 0x1}}]}, 0x16c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$unix(0x1, 0x1, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x5}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {0xb, 0xb}, {0x7, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7f, 0x0, 0x5, 0x1, 0x8}, 0xb, 0x2, 0x80008, 0x5, 0x5, 0x2, 0x9, 0x12, 0x8, 0x1, {0xffff1c72, 0x3, 0x1000, 0x102, 0x2, 0x2}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2000c860}, 0x4008000) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r12, 0x0) r13 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) ioctl$sock_bt_hci(r13, 0x400448c9, 0x0) r14 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r14, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r14, &(0x7f0000000380)={0xa, 0x4f23, 0x6, @empty, 0xb}, 0x1c) 1.836659351s ago: executing program 4 (id=3121): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x5, 0x2}, {0x0, 0xe}}}, 0x24}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010002000020000000002500000008000300", @ANYRES32=r4, @ANYBLOB="080026008a0900000a000600ffffffffffff000008003500000000de7ceabfc55a48b7da4edce04bb5000a003400010101010101ebfce99cdffa62c12fd125c2ac5a611285e25568408fb604e7143fefe930d5ec43f5e82c4d6646737f9e82c6881e3d3479596093e02d886b2286f5ae63e2b62270dd1737bc13d6727bc63528e3634b8fb8eba8eb745bcec8302cb21d595e06d6466baa068df9bdc203c3848910926adb20c8832da0ec68539a1951af1a14af3ae9682f9859e55cde826c07381a0581cc27da241531946c2417ff8add969dcdeeeac1041a324dc33499984f493791"], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.713918159s ago: executing program 2 (id=3122): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000023c0)=@delchain={0x50b4, 0x65, 0x1, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xffe4}, {0x9, 0x2}, {0x2, 0xc}}, [@filter_kind_options=@f_route={{0xa}, {0x264, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x47}, @TCA_ROUTE4_ACT={0x1a8, 0x6, [@m_mirred={0x138, 0x16, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x3, 0x3, 0x6, 0x10}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0xda71, 0x6, 0x3, 0x7}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0xffff0000, 0x3, 0x7, 0x101}, 0x1}}]}, {0xac, 0x6, "9a8f7abf985a7b8d1e315673800fb1156bd2bb16e6ed368f37bfa6f516a91ad535f52cee8519b48f178d9619348a01ea2cd9be870641cfa58b7d27d3b5965d045cbeea8d5f4fa16e27a41ff7d77d4fc0b9d8dc26a697a8eb2df8a300d12793de34e982e6db40a038f1e49a8c5efdfc2a9713e03a88091fd962f3b507ec31fe0ac25bd4d593c93bd3379863ba7843f8345c40bb3e643cb4d18b57cb97b0335fd83022fdf66502663f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_skbedit={0x6c, 0x3, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}]}, {0x38, 0x6, "30a60eb669b40f2022f2e39a23c5ea173594f5bde6fa64da60fe518c167fa4fa3f09f9632e1403859e0fcc998e927987f6b81c0e"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_ROUTE4_ACT={0xa8, 0x6, [@m_simple={0xa4, 0x8, 0x0, 0x0, {{0xb}, {0x78, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xc, 0x3, 'geneve0\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x8001, 0xce4, 0x7, 0x10, 0xfffffb1a}}, @TCA_DEF_DATA={0xc, 0x3, 'geneve0\x00'}, @TCA_DEF_DATA={0x9, 0x3, '\xaa\xaa\xaa\xaa\xaa'}, @TCA_DEF_PARMS={0x18, 0x2, {0x20004, 0x1, 0x8, 0xa9, 0xffffff80}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x30000000, 0x2, 0x4, 0x7}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x7, 0x2}}}}]}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x3f}]}}, @filter_kind_options=@f_flow={{0x9}, {0x4e04, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x1bd12}, @TCA_FLOW_ACT={0x4df8, 0x9, 0x0, 0x1, [@m_pedit={0x1c4, 0xf, 0x0, 0x0, {{0xa}, {0x110, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x10c, 0x5, 0x0, 0x1, [{0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}]}]}, {0x89, 0x6, "9ae35637174a08d593f506f7ebde2d87ee219e3db8bec64beb954fc5ef7cce287576301dcb61766c113c86acfdfbe415ac6bd2c2e98abd7c680df609533dc22ba33f4b584b4c025bfec8cbdb92b08b850d5b33209af9c499b3000ded3982d79e54d0815e768299f39d3a6d94616043e7ba24bfee48bebbb09a4892139f007347ba84dbe22a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_gact={0x10a8, 0xa, 0x0, 0x0, {{0x9}, {0x7c, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0xb01, 0x8}}, @TCA_GACT_PARMS={0x18, 0x2, {0x1, 0x5, 0x0, 0x5, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0xffffffff, 0x3, 0x4, 0x82}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x151b, 0x8}}, @TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x4, 0x8, 0xe92, 0x3}}, @TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x2, 0x3, 0xeb2}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_pedit={0x3b88, 0x10, 0x0, 0x0, {{0xa}, {0x3af0, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xee0, 0x4, {{{0x0, 0x8, 0x6, 0xbdc, 0x8}, 0x2a, 0xbc, [{0x3, 0x4, 0x6, 0xffffffea, 0x8, 0x3}, {0xfa, 0x9, 0x5, 0x2, 0x0, 0xffff}, {0x1, 0x5, 0xffff, 0x2905, 0x7, 0xf7b8fdc9}, {0x0, 0x8000, 0x7, 0x30, 0x10001, 0xc8}, {0xe, 0x83, 0x2, 0x1, 0xcdb, 0x4}, {0x40, 0x2, 0x2, 0x53c6, 0x5, 0x2}, {0x6, 0x0, 0x5ef, 0x2, 0x302}, {0xcb, 0x1, 0xb, 0x5, 0xe29, 0x3}]}, [{0x6, 0x80000000, 0x8, 0x2, 0x1000, 0x1}, {0x5f9c, 0x2, 0x6, 0x0, 0x4, 0x1}, {0x6, 0x4, 0x3, 0x8, 0x1, 0x10001}, {0x434db7ab, 0x5, 0x4, 0x1827, 0x5}, {0x5, 0x2, 0x821, 0x2, 0x1, 0x4}, {0x6, 0x10000, 0xcf, 0x1, 0x6, 0x1}, {0x84, 0x6, 0xffff, 0x0, 0x0, 0x4}, {0x1, 0x3, 0x8, 0x3ff, 0xf82, 0x10000}, {0x48000000, 0x2, 0x95, 0x10, 0x7f, 0x1}, {0x7, 0xffff, 0x2, 0x4, 0x400, 0x1}, {0x5, 0x7, 0x5, 0x7, 0xe, 0x7}, {0x0, 0x2, 0x5399, 0x7fff, 0x2, 0xf2c7}, {0x8, 0xa00, 0x4, 0x81, 0x0, 0x5}, {0x80, 0xd823, 0x80000000, 0x1, 0x9, 0x7f}, {0x8000, 0x0, 0x87e, 0x6, 0x8, 0x2}, {0x6, 0x8, 0x1f, 0x7, 0xfffffffd, 0xfff}, {0x2, 0x1, 0x6, 0xae63, 0x9, 0xd35}, {0x0, 0x800, 0xffff18b4, 0x67e, 0x4, 0x5}, {0x27, 0x3, 0x0, 0x7, 0x5, 0x1ff}, {0x9, 0x4c0, 0x1, 0x7, 0xb, 0x7}, {0x1ff, 0x3, 0x10, 0xb9e, 0x6}, {0x3330, 0xa, 0xe, 0xe, 0x0, 0x8}, {0x4, 0x504, 0x3, 0x80000001, 0x0, 0x9}, {0x2, 0x1ef, 0x7fff, 0xf, 0x40, 0xe}, {0x0, 0x0, 0xfffffffc, 0x8, 0x7, 0xc0e}, {0xa, 0x6, 0x9, 0x3, 0x101, 0x10001}, {0x9, 0x6, 0x5, 0x2, 0x42, 0xfffffff7}, {0x617, 0xa, 0x8, 0x8, 0x10000, 0xffff953b}, {0x1, 0x3, 0x9, 0x9, 0x84, 0x83}, {0x5, 0x40, 0xfff, 0x4, 0x5, 0x3ff}, {0x3, 0x1, 0x4, 0x0, 0x7, 0xd7d5}, {0x1, 0x3, 0x80000000, 0x4, 0x0, 0x4}, {0x1, 0x3d, 0x800, 0x0, 0x7, 0x6}, {0x5, 0xb, 0xf3, 0x4, 0x972e, 0x80}, {0x1, 0x359e, 0x1, 0x6, 0x0, 0x8}, {0x4, 0x4, 0x4, 0x81, 0x4, 0x7ff}, {0x9, 0x7, 0x8, 0x3, 0xe, 0xa}, {0xfffffffa, 0x8, 0x40, 0x0, 0x6, 0x6}, {0x0, 0x3, 0x1, 0xc, 0xfffffff0, 0xfffffffa}, {0x2, 0x7, 0x1, 0x7fff, 0x2}, {0x2, 0x2, 0xfffffffd, 0x0, 0x2, 0xffffff81}, {0x80000000, 0xfffffff1, 0x7fff, 0x9, 0x6, 0x1ff}, {0x800, 0xaa, 0x25, 0x8, 0x8, 0x7}, {0x53, 0xffff, 0x5, 0x1, 0x0, 0xfffffffb}, {0x68d0, 0x0, 0x8, 0x0, 0x789df97f, 0x7}, {0xfffffffd, 0x9348, 0x7, 0x7f3b, 0x5}, {0x7, 0x4af1, 0x1, 0x2, 0xfffffff4, 0x264}, {0x7, 0x8000, 0x6, 0x7, 0x9, 0x100}, {0x7, 0x80000000, 0x7, 0x1000, 0x4, 0x8}, {0x6, 0x5, 0x7fffffff, 0x8, 0x4, 0x1000}, {0x8, 0x308, 0xb12, 0x7, 0x7, 0x3}, {0x1ff, 0x0, 0x10000, 0x1, 0x1, 0xfffffffe}, {0x5, 0x1e49, 0x55, 0xffffffff, 0xa, 0x6}, {0x4, 0xc, 0x7fffffff, 0x7f, 0x3}, {0x1, 0x6, 0x3, 0xff, 0x401, 0x9}, {0x7f, 0xff, 0xedd, 0xfffffff8, 0xff, 0x1000}, {0x3, 0x5c, 0xbd, 0x4, 0x6, 0x6}, {0x2, 0x4, 0x3f, 0x6, 0x7, 0x2}, {0x3, 0xffffff8e, 0xfffffff0, 0x1000, 0xffffae65, 0xfffffffe}, {0x0, 0x4, 0x3, 0xffffff00, 0x0, 0xcc8}, {0xffffff77, 0x1, 0x450c, 0xdff, 0x7}, {0x9, 0x5, 0x5, 0x5, 0xe2, 0xdd}, {0x100, 0x401, 0x1, 0x3, 0x7, 0x101}, {0x7, 0xb, 0x1, 0xfffffffc, 0x40, 0xd6ca}, {0x2, 0x0, 0x1, 0x7fffffff, 0x1, 0x30}, {0xff, 0x1000, 0x9, 0x6, 0x6, 0xfffffff9}, {0x2, 0xfffffffa, 0x20000, 0x5, 0x7, 0x7}, {0xe8, 0x7, 0x5, 0x5, 0x5, 0x23}, {0x40, 0x3, 0x8, 0x7, 0x9, 0x3}, {0x5, 0x2, 0x10000000, 0xc4, 0xfff, 0x9}, {0x9, 0x1ff, 0x9, 0x672a, 0x1, 0x9}, {0xfff, 0x8, 0x8, 0xfffffffe, 0xfffffffe, 0x800}, {0x7, 0x6, 0x2, 0x9, 0x8, 0xff}, {0x8, 0x7, 0x81, 0x4, 0x6, 0x81}, {0x2, 0x6, 0xa2c0, 0x1, 0xe, 0x9}, {0x80000001, 0x4, 0x5, 0x8, 0x7, 0x3}, {0x100, 0x1, 0x720, 0xbe2, 0xf1b, 0x8001}, {0x1ff, 0xcc19, 0x9, 0x0, 0x9}, {0x4, 0x2, 0x0, 0x4}, {0x0, 0x80, 0x8, 0x1, 0x1ff, 0x53d1}, {0xffffff5a, 0x6, 0xf, 0x2, 0x7, 0x9c8}, {0xb5, 0x40, 0x9, 0x8, 0x9, 0x1}, {0xfffffff6, 0xfffffffa, 0x0, 0x5, 0xf6, 0x560}, {0x2132, 0x92, 0x7, 0x400, 0xfff, 0x9}, {0x12a, 0x4, 0x3, 0xc, 0x9, 0x7}, {0x5, 0x5, 0x7, 0x80000001, 0x0, 0x2}, {0x2, 0x5, 0x3, 0x5, 0x8, 0x5}, {0xb, 0xffffffeb, 0x6, 0x9d8e, 0x8, 0x2}, {0x5, 0x401, 0x1, 0xc, 0x0, 0x7}, {0x40, 0x8, 0x2, 0x6ff, 0x7, 0x81}, {0x7, 0x6, 0x1, 0x10001, 0x100, 0xd8cf}, {0x56a, 0x9, 0x6, 0x87, 0x8}, {0x9, 0x2, 0x101, 0x697, 0x0, 0x7a6}, {0x13, 0x3, 0x78, 0x39a4, 0x4, 0xff}, {0x80, 0x666, 0xc5d, 0x9, 0x81, 0xa2}, {0x1ff, 0xfffffff9, 0xc14, 0x7, 0x4, 0xa3c2}, {0xe0, 0xffffffff, 0x5, 0x4, 0x1, 0x6}, {0x80, 0x1, 0x944, 0xa, 0x85f0, 0x8}, {0x80, 0x1, 0x4, 0x4, 0x7, 0x1}, {0x4, 0x74c, 0x3, 0x20000000, 0xffffffff, 0x3}, {0x1, 0x4, 0x87, 0xfff, 0x10001, 0x212}, {0x6, 0x7, 0x80, 0x7f, 0x9, 0x9}, {0x800, 0xb, 0x5, 0x61, 0x1, 0xff}, {0xffff, 0x3, 0x4, 0xc, 0x1, 0x6}, {0x9, 0x200, 0x1, 0x7, 0xc, 0xffff}, {0x0, 0x4, 0x4, 0x8, 0x0, 0x3}, {0x8, 0x9, 0x81, 0x2, 0x3, 0x7fff}, {0x8, 0x7, 0x4, 0x1, 0xff, 0xd}, {0x7, 0xd, 0x7ff, 0x3, 0x6, 0x8000}, {0x8001, 0x80000000, 0x4c, 0x5, 0x10, 0x7fff}, {0x401, 0xb, 0xf, 0x0, 0x200, 0x1}, {0x100, 0x7, 0xd, 0x8391, 0x3, 0x1}, {0x80, 0x6, 0xf, 0x9, 0x9, 0x3}, {0x8, 0xfffffff8, 0xffffffff, 0x3, 0x8, 0x6}, {0x0, 0x2, 0x1000, 0x1ff, 0x2b6, 0x5}, {0x9, 0x8, 0x9b95, 0xc, 0x2, 0x3a761346}, {0x9, 0x80000000, 0x8, 0xf019, 0x7, 0x5}, {0x81, 0x64a, 0xe8b, 0x1, 0x7ff}, {0x6, 0x6, 0x9, 0x3, 0x7, 0xf}, {0x1000, 0x6541139e, 0x8, 0x3, 0x5}, {0x2, 0x6, 0x10000, 0xa, 0x0, 0xfffffff8}, {0x4, 0xc, 0x39, 0x80, 0x1, 0x3}, {0x400, 0x1, 0x8, 0x1, 0xa3b, 0x972}, {0x4, 0x2, 0x2, 0x3, 0xf5, 0x2}, {0x9, 0x3, 0x0, 0x7fff, 0xfffffff7, 0x5}, {0x1, 0x7ff, 0x99c, 0xff, 0x8, 0x4}, {0x8, 0xfffffea9, 0xfffffff9, 0x9, 0x1, 0xff}, {0x4f9ce745, 0xffff8000, 0x54a, 0x2, 0x6, 0xb7}], [{0x1, 0x1}, {0x2, 0x1}, {0x1}, {0x5, 0x1}, {0x3}, {0x5}, {0x5, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x3}, {0x2, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {}, {0x4}, {0x1, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x2}, {0x1}, {0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0xad5e6d64ac792080}, {0x2, 0x1}, {0x3, 0x1}, {0x6}, {0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x3, 0x2}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {}, {0x3}, {0x3}, {0x0, 0x1}, {0x1}, {0x4}, {0x2}, {0x3, 0x1}, {0x2}, {0x7}, {0x1}, {0x5}, {0x1}, {0x5}, {0x0, 0x1}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x1}, {0x4}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {0x3}, {0x1}, {0x3, 0x1}, {0x4}, {0x2}, {0x1, 0x1}, {0x1}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x5, 0x65ca39864e93ec8f}, {0x3, 0x1}, {0x1}, {0x3}, {0x3}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x7}, {0x2}, {0x5, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x4, 0x1}, {0x2}, {}, {}, {0x4}, {0x2}, {0x1, 0x1}, {0x2}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {0x1}, {0x1}], 0x1}}, @TCA_PEDIT_PARMS={0xe38, 0x2, {{{0x6, 0x1, 0x1, 0x4, 0x7}, 0x6, 0x0, [{0x2, 0x4, 0x1, 0x6, 0x8}]}, [{0xf938, 0xfffffffe, 0x3, 0xb5ec, 0xad, 0x4}, {0x6, 0x0, 0x8, 0x0, 0xffff0000, 0xb0ff}, {0x2, 0x5, 0xc, 0x9, 0x0, 0x4}, {0x1000, 0x8, 0x25c, 0x3ff, 0x5, 0x6}, {0x6, 0x8, 0x7c5, 0x7, 0x10, 0x9}, {0x9, 0x3, 0x3, 0x5, 0x101, 0x3}, {0x8, 0x0, 0x7fffffff, 0x6a, 0x4, 0x5}, {0xcd23, 0x36cd, 0x101, 0x1ff, 0xa4d}, {0x10, 0xc, 0x40, 0x8, 0x6, 0xffffffff}, {0x41, 0xd, 0x0, 0x6, 0x4, 0xfffff598}, {0x0, 0x5, 0xf0b, 0x0, 0x6, 0x7f}, {0x6, 0x7b59, 0x8, 0x5e, 0x5, 0x2}, {0x2, 0x9, 0x7, 0x5, 0x5, 0xc4}, {0xe86, 0x4, 0x0, 0x4, 0x81, 0xa8}, {0x2, 0x7, 0xd, 0x9, 0x2, 0x9}, {0xc, 0x5, 0x4, 0x8, 0x2, 0xe0f9}, {0x9, 0x8, 0x353a, 0x5, 0x0, 0x7}, {0x5, 0x1, 0x8001, 0x4, 0x4, 0x2}, {0xffffffff, 0x3, 0x5b, 0x1, 0x2, 0xab}, {0x5, 0x23ed, 0xfffff801, 0x7, 0x8, 0x7a7}, {0xfff, 0x5, 0x8d7, 0x400004, 0x1, 0x8000}, {0x2, 0x2, 0x3ff, 0x10001, 0x4, 0x9}, {0x80000000, 0x4, 0x1, 0x9dd6, 0x3f58, 0x2}, {0x9, 0x9, 0x0, 0xc, 0x1, 0x4b94}, {0x5, 0x1, 0x723a, 0x4, 0x4, 0x1}, {0x6c985f10, 0x4, 0x10000, 0xa, 0x3ff, 0x8001}, {0xf, 0x5, 0x9, 0x400, 0x3, 0x6}, {0x7, 0x9, 0x6848deab, 0xfffffff6, 0x2, 0x92f}, {0x3, 0x5, 0x2, 0x1, 0x3}, {0x4, 0xc3e, 0x8, 0xa, 0x3ff, 0x9}, {0xffff, 0x3, 0x4, 0x3ff, 0x8000}, {0x6, 0x40, 0x7, 0x3, 0x3, 0x6}, {0x4, 0x4, 0x1, 0x7, 0x9, 0x101}, {0x7b, 0x3, 0x800, 0x28, 0x1ff, 0x3}, {0x8, 0x6, 0x2, 0x9, 0xb1, 0x9}, {0x6, 0x5, 0x8, 0x6, 0x81, 0x2}, {0x6, 0xff, 0xd, 0x9, 0x8, 0xfffffff7}, {0x7ff, 0x1, 0x80000000, 0x8, 0x22c, 0x1}, {0x7c, 0x2, 0x8, 0x3ff, 0x1, 0x4}, {0x3a000000, 0x2, 0x3, 0x9, 0x80000000, 0x9}, {0x4, 0x0, 0x0, 0x7ff, 0xa16a, 0x5}, {0x7, 0x80000001, 0x0, 0x2, 0x1, 0x8001}, {0x1000, 0x80, 0x7, 0xfffffffc, 0x2, 0xffffffff}, {0x3, 0x5d8, 0xd00, 0x0, 0x100, 0x6}, {0x91, 0x8000, 0x400, 0x80000000, 0xff, 0xfff}, {0x101, 0xc, 0x3ff, 0xffff8001, 0x61, 0x9}, {0x2, 0xffff, 0x4, 0x3, 0x5}, {0x6, 0xb, 0x3, 0x6, 0xfffff7f3, 0x2}, {0x7, 0x4, 0xab1, 0x6, 0x0, 0x7fffffff}, {0x7fffffff, 0x8, 0x3ff, 0x9, 0x1, 0x4}, {0xfffffffe, 0xa, 0x1, 0xf, 0x0, 0xfcd}, {0xe98, 0x400, 0x2, 0x3, 0x80000001}, {0x65ef, 0xc, 0x4, 0x7, 0x1804, 0x4}, {0x0, 0x7fffffff, 0xaed, 0xc, 0x7d7937e6, 0xfffffff9}, {0x9e8, 0xffff7fff, 0x4, 0xb99, 0xf7c, 0xfffffffa}, {0x3, 0x6, 0x1000, 0x2, 0x8, 0x2}, {0x6, 0x4, 0x9, 0x4, 0x8, 0xffff}, {0x38, 0x4, 0x8, 0xffffff7a, 0x25, 0xa90e}, {0x6, 0x1, 0x0, 0x6, 0x28e7b301, 0x3}, {0x4, 0x80000000, 0x10000, 0x5, 0x1, 0x3}, {0x3, 0xf, 0x7, 0x3, 0x3, 0x4}, {0x2, 0x0, 0x10, 0x4, 0x4, 0x8}, {0x8001, 0x7fff, 0x1, 0x4, 0x6, 0x6}, {0x8, 0x6edc830f, 0x6, 0x1, 0x6, 0x6140}, {0x2, 0x7ff, 0x4, 0x40, 0x3ff, 0x7}, {0x80, 0xf8, 0x7, 0x3, 0xd706, 0x401}, {0x3, 0xd, 0xfff, 0x1, 0x5, 0x1}, {0x2, 0x8000, 0x1c6e, 0x40, 0x7}, {0x6, 0x770, 0x499b, 0xd, 0x5, 0x1}, {0x4, 0x3, 0x8000, 0x0, 0x8, 0xfffffffb}, {0xa8f, 0x200, 0x9, 0x81, 0x2, 0x4}, {0x5, 0x8001, 0x0, 0xa, 0x8, 0x4}, {0x4, 0xce, 0xfffff5e5, 0x1e1, 0x8, 0x1}, {0x8, 0x100, 0x7fffffff, 0xffffff87, 0x5, 0x1}, {0x0, 0xf, 0xb496, 0x2, 0xfffffffb, 0x8}, {0xbebb, 0x9, 0x8, 0xffffffff, 0x6, 0x5}, {0x2, 0x10, 0xc6bc, 0xa088, 0x1, 0x2000000}, {0x52b, 0x4, 0x3, 0x9, 0x4, 0xe28}, {0x3, 0xb, 0x9, 0x2, 0x7fffffff, 0x1}, {0x200, 0x9, 0x4, 0x1, 0x80000000, 0x6}, {0x2, 0x5, 0x80000000, 0xb, 0xfffffffc, 0x8}, {0xe6, 0x9, 0x5, 0x1ff, 0x6, 0x40}, {0x1ff, 0x4bf, 0xfffffff9, 0x2, 0x7, 0x6}, {0x0, 0x9d45, 0x1, 0x5, 0x5, 0x7ff}, {0x401, 0x0, 0xfff, 0x1, 0x4, 0x4}, {0xfffff402, 0x101, 0x1, 0x6, 0x5, 0x2}, {0xf, 0x4, 0x7, 0x7, 0x621, 0x401}, {0xffffffff, 0x7ff, 0x101, 0x6, 0x2, 0x1}, {0x223263d5, 0x8af, 0x4, 0x79, 0x7, 0xc9bb}, {0x200, 0x8, 0x7, 0x4, 0x1, 0x1}, {0x1, 0xa, 0x7f, 0x1, 0x6, 0x3}, {0x548f37ef, 0xda98, 0x40, 0xb, 0x4, 0x9}, {0x1, 0x7, 0x9, 0x100, 0x8, 0x7}, {0xd, 0x1e9, 0xb, 0xbc, 0x80000000, 0x4}, {0x1, 0xfffffffd, 0x3, 0xafee, 0x0, 0x9c1}, {0xd, 0x0, 0x1d, 0x1, 0x4, 0x3}, {0x5, 0x4, 0x6eb4, 0x2, 0x8, 0x2}, {0xb4, 0x0, 0x30015463, 0x7, 0xfffffffa, 0x6}, {0x3, 0xc2, 0x3, 0x5, 0x5, 0x9}, {0x401, 0x5, 0xffff, 0x4af, 0x4fa, 0x800000}, {0x101, 0x8, 0x5, 0x0, 0x8f12, 0x6fa}, {0x6, 0xffffffff, 0xc6c5, 0xd, 0x2, 0xa3f0}, {0x7, 0x2, 0x26b, 0x7, 0x9, 0x6}, {0x5, 0x200, 0x2, 0x679, 0xfffffff7, 0xffffffff}, {0x91, 0xf11, 0x8000, 0x9, 0x3, 0xdc}, {0x6, 0x5, 0x8, 0x6689a475, 0xa84, 0xaab}, {0x1, 0x4, 0xd7a7, 0x4, 0xff, 0x5}, {0x472c, 0xfd, 0xf4, 0x3, 0x6, 0x376}, {0x5, 0x3, 0x8, 0x5, 0x3, 0x9}, {0x6, 0x8, 0x8, 0x2, 0x7, 0x401}, {0x6, 0x6, 0x4, 0x9, 0x6}, {0x3, 0x5, 0xb3b, 0x800, 0x5, 0x3}, {0x3, 0x3, 0xfffffff0, 0x7fffffff, 0x7f, 0x8}, {0x9, 0x3ff, 0x9, 0x5, 0x3, 0x4}, {0xddf8, 0x9, 0x3, 0xeb8, 0x6, 0x4}, {0x9, 0xbfb, 0x9, 0xd51, 0x7fff, 0x9}, {0x7b1b, 0xfffffff8, 0x7, 0x4, 0x200, 0x5}, {0xfffffffa, 0x570, 0x4ba, 0x65, 0xac0f, 0x4}, {0xa7, 0x5, 0x5, 0x80000000, 0x0, 0x5}, {0x6, 0x0, 0x0, 0x41, 0x7, 0x6}, {0x1482, 0x8, 0x3e51, 0x8ba, 0x7, 0xff}, {0x46b9d7e8, 0x1, 0xc, 0x7, 0x20, 0xfffffffd}, {0x8, 0x8af, 0x9, 0x8, 0x8001, 0x800}, {0x7, 0x2, 0x7, 0x1be7, 0xffffffff}, {0x3ff, 0x5, 0x29, 0x5, 0x0, 0x81}, {0x4, 0xf4, 0x2, 0x0, 0x127, 0x8}, {0x80, 0x9, 0x3, 0x7, 0x7, 0x5}, {0x2, 0x6, 0x10001, 0x1, 0x1b, 0x7}], [{0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x3}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x1}, {0x5, 0x1}, {}, {0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x4}, {}, {0x5}, {0x2, 0x1}, {0x4}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x4}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x5}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x3, 0x1}, {0x1}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x5}, {}, {0x5, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0xe8f817aa91083365, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x6}, {0x4, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x5}, {}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x2}, {0x2}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3}, {0x1, 0x1}, {0x5}, {0x2}, {0x5}, {0x0, 0x1}, {0x3, 0x1}, {}, {}, {0x2}, {0x2}, {0x1}, {0x3}, {0x5}, {0x2, 0x1}, {0x5, 0x1}, {0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0xd4, 0x5, 0x0, 0x1, [{0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}]}, @TCA_PEDIT_PARMS={0xe98, 0x2, {{{0x80000001, 0x9, 0x10000000, 0xfffffff0, 0x6}, 0x4, 0x40, [{0x10000, 0x1, 0x1, 0x6, 0x7fff, 0x4}, {0xb, 0x10000, 0x1, 0x2, 0x3, 0x4}, {0xffffff81, 0x9, 0xfffffffb, 0x4, 0x1, 0xf69}, {0xde0, 0x2, 0x2c9, 0x7, 0x800, 0x1}, {0x100000, 0x7, 0x2, 0x0, 0x9, 0x80}]}, [{0x5, 0xf5f, 0x7f, 0xb2, 0x502, 0x8a}, {0x2ab, 0x488, 0x7, 0xfffffeff, 0x400, 0x6d}, {0xfffff3f3, 0x1, 0x8001, 0x9, 0x3, 0x1}, {0x2, 0xb, 0xffffffff, 0x3, 0x2, 0x6}, {0x646, 0x2, 0xfff, 0x8, 0x80000001, 0xfc99}, {0x0, 0xdfa, 0x40, 0x4, 0x80000001, 0x1}, {0x8, 0x9, 0x5, 0x7f, 0x839d, 0x7}, {0x4, 0x10001, 0x4, 0x9, 0x3, 0xfc7}, {0x0, 0x7, 0x8000, 0x9, 0x9, 0x2}, {0x4, 0x2, 0x5, 0x7f, 0x2, 0x101}, {0x4, 0x0, 0x5, 0x1ff, 0x101, 0x7}, {0x1, 0x1, 0x2, 0x0, 0x6, 0x9}, {0x7, 0xdd, 0x7, 0x9, 0x4, 0x8}, {0x4, 0x26f, 0x10001, 0x6, 0x906b, 0xf6}, {0x9, 0xa3a, 0x5a56ce92, 0x7, 0x468a, 0x9}, {0x6, 0x80, 0x7, 0x7, 0x1, 0xfff}, {0x2, 0x2, 0x0, 0x9, 0x8, 0x9}, {0x6, 0x9e, 0xc4, 0x3, 0x80, 0x7fff}, {0x4, 0x0, 0x30c, 0x0, 0x5, 0xb}, {0x200, 0x4, 0x7, 0x4, 0x3, 0x1}, {0x6, 0x6, 0x1, 0x0, 0x7}, {0x7, 0x2, 0x7, 0x48dc, 0x1, 0x4}, {0x1, 0x8, 0x10000, 0x0, 0x1, 0x80000001}, {0x5, 0x8, 0x6, 0x8, 0x7, 0x3}, {0x7, 0x3aff, 0x3, 0x3, 0x9, 0x4cc4}, {0x1, 0x7, 0x5, 0x0, 0x323, 0x7}, {0x80, 0x95, 0x10, 0x5, 0x3, 0x1}, {0x3250, 0x80000001, 0x1, 0x5, 0x3, 0xf27d}, {0xfffffffc, 0x1eec, 0x4, 0x800, 0x3, 0x1}, {0x8, 0x4, 0x3, 0x1, 0x100, 0x3}, {0x7f, 0x3, 0x7fffffff, 0x4c3, 0x2f, 0x2}, {0x2, 0x1000, 0x7, 0xfffffff9, 0x81, 0x3}, {0x8e18, 0xa, 0x1, 0xa727, 0xfffffff9, 0x1}, {0xb730, 0xc969, 0x1, 0x5, 0xf, 0xffffff80}, {0xfffffff7, 0x6, 0x6, 0x0, 0x8, 0x5}, {0x3, 0x7, 0x0, 0x6, 0x10, 0x7}, {0x8, 0xbcd, 0x6, 0x2, 0x0, 0x7}, {0x4, 0x200, 0x9, 0x200, 0xf}, {0x4, 0x1121, 0x7, 0x6, 0x2a11e19e, 0x4}, {0x2, 0x6, 0xc41f, 0x1, 0x5, 0x11f29e38}, {0x9, 0xffffff6d, 0x0, 0x1, 0x9, 0x3}, {0xfffffffe, 0x9, 0x4, 0x4, 0x9, 0x2}, {0x2, 0x20000000, 0x1800000, 0x1, 0x4, 0x2}, {0x15, 0x8000, 0x401, 0x6, 0xb31, 0x4}, {0x6, 0x2541302b, 0x3ed, 0xf5, 0x8, 0x7}, {0x4d, 0x75, 0x9, 0xa, 0x7323, 0x1}, {0xf5c0, 0x2, 0x1ff, 0x8, 0x9, 0x3}, {0x5, 0x4, 0x7fff, 0xf77d, 0x3, 0x7fffffff}, {0x4, 0x7, 0x6, 0xc752, 0x5, 0x6}, {0x200000, 0xe10, 0xc8, 0xe, 0xffff, 0x64}, {0x0, 0xd7, 0x1ff, 0x4, 0x5, 0xa}, {0x0, 0x5, 0x2, 0x4, 0x7, 0x2}, {0xffff, 0x38d, 0x6, 0xde1, 0x5, 0x3}, {0x4, 0x2, 0x80000001, 0x80000000, 0x3ff, 0x7a45}, {0x4, 0x150b, 0x3, 0x7, 0xf, 0x4}, {0x6, 0x4, 0xb, 0x2, 0xfffffffb, 0xee4}, {0x7, 0x4, 0x7, 0x1, 0x1, 0x3}, {0x8, 0x9, 0xfffffff9, 0xa82, 0x1, 0xd}, {0x6, 0xfffffffc, 0x9, 0x7, 0xffffffff, 0x800}, {0xa, 0x1f7, 0x10000, 0x5, 0xb9}, {0x6, 0x43d2, 0x0, 0x82ec, 0x5, 0x1}, {0x200, 0x4, 0x8001, 0x1, 0x0, 0x80}, {0xd4, 0x3, 0xd, 0x8001, 0x8, 0x5}, {0x6, 0x80, 0x3, 0x10001, 0x2, 0x101}, {0x77e1, 0x10001, 0x3, 0xf857, 0x2, 0x4}, {0x8, 0xf8, 0x5, 0x4, 0x2, 0x1000}, {0x5, 0xa, 0x0, 0x7, 0x8, 0x4c8}, {0xb, 0x2, 0x3, 0x1c, 0x6, 0x9d}, {0x1, 0x2, 0x4, 0x5, 0x8, 0xfc}, {0x6, 0x3, 0x8, 0x9, 0x6, 0x5}, {0x5, 0x0, 0x6, 0x2, 0x8, 0x7}, {0x6, 0xf5, 0x8, 0x8001, 0x243248eb, 0x5}, {0xff, 0x843, 0x7, 0x386, 0x9, 0x8f4}, {0xdd, 0x7ff, 0xfff, 0x6, 0x7, 0x6}, {0x81, 0x392a, 0x2, 0x3, 0x2, 0x4}, {0x10001, 0x7e, 0xc3bb, 0x20, 0x1, 0xa2b}, {0x2, 0x1, 0xbc, 0xfffffffa, 0x7ff, 0x7f}, {0x5, 0x2, 0xb, 0x4, 0x101, 0x7}, {0x1000, 0x2, 0x0, 0x0, 0x8, 0x8}, {0x80000001, 0x8, 0x1000, 0xc3e7, 0x1ff, 0xc0}, {0x382, 0x7, 0x800, 0x5, 0xe, 0x4}, {0x9, 0x8, 0x6, 0xc, 0x4, 0x80000000}, {0x7fff, 0x8, 0x7, 0x9, 0x6, 0x5}, {0x4, 0x1, 0x0, 0x5, 0x6, 0x6}, {0x53, 0x7fff, 0x24781028, 0x8, 0x8, 0x4}, {0x40, 0x4, 0xaf99, 0xc, 0x9, 0x9}, {0x5, 0x1000, 0x4, 0x5, 0x40, 0xbc9f}, {0x1, 0xff, 0x7, 0x8bd, 0x9, 0xe220}, {0x5, 0x5915, 0x6, 0x941, 0x8, 0xb13f}, {0x3, 0x9, 0x100, 0x7fffffff, 0x8, 0x5}, {0xee, 0x80000001, 0x9, 0x6, 0x6, 0x7f}, {0xbb, 0xfffffffa, 0x7, 0x183f9a89, 0x5, 0x80}, {0x3, 0x10000, 0x6, 0x91b, 0x0, 0x1}, {0xfffffffe, 0x9, 0x5, 0x1, 0x6, 0x101}, {0xc6, 0xfffffffe, 0xffffffdc, 0x3ac63b09, 0x3, 0x3}, {0xc832, 0x3, 0x3, 0x898d}, {0x9cb4, 0xe, 0x2000000, 0x8, 0x5}, {0x6, 0xffff, 0x200, 0xffffffff, 0x2, 0x7f}, {0x1, 0xfffffbff, 0x4, 0xd594, 0x5, 0x5}, {0x3, 0xe8, 0x6, 0x9, 0x4, 0x7}, {0x5, 0x7, 0x10000, 0x0, 0xf, 0x1}, {0xeb, 0x0, 0x5, 0x10, 0x9, 0x7f}, {0xe8, 0xfffffffb, 0x5, 0x3ac, 0x5, 0xfff}, {0x2, 0xbed, 0x3ae, 0x5, 0x1ff, 0x2}, {0x8000, 0x6, 0xfffffffb, 0x3, 0x7, 0x1}, {0x3, 0x5, 0x22, 0xe, 0x8}, {0x4, 0xe, 0xa19, 0x7fc, 0x1, 0x2}, {0x9, 0x1200000, 0xa, 0xff, 0x6, 0x9}, {0x385, 0x10000, 0x9, 0x6, 0x7, 0x6}, {0x6, 0x81, 0xd, 0x80, 0x0, 0x156}, {0x4, 0x33, 0x81, 0xc, 0x3, 0x9}, {0x8bdd, 0x4, 0x4, 0x7, 0x40, 0x6}, {0x4f, 0x4, 0x1000, 0x3ff, 0x3, 0x5d6}, {0x59a, 0x44, 0x1, 0x7f, 0xec0, 0x101}, {0x7, 0x4d46cbe4, 0x8374, 0xd, 0x100, 0x4}, {0x5, 0x1, 0x3, 0x9, 0x80, 0x10000}, {0x80000001, 0x3, 0xb3, 0x4, 0x7, 0x8}, {0xbd, 0x1, 0x401, 0x595, 0x3ff, 0x9}, {0x4, 0x5, 0x4, 0x3f24, 0x5cb9, 0xffff}, {0x4, 0x1, 0x8, 0xb6f6, 0x80000000, 0x10}, {0x5a4f, 0x7, 0x7, 0x7, 0x3, 0x3}, {0x3, 0x0, 0x9, 0x800, 0x5, 0xff800}, {0x3, 0xfffffeff, 0x5, 0xc4d, 0x9, 0x80000001}, {0x1000, 0x4f0b, 0x401, 0x5, 0xf, 0x4}, {0x3, 0x43dc, 0x7, 0x1, 0x8, 0x6}, {0x3c4c, 0x6, 0x4, 0x0, 0x6, 0x3}, {0xf4a, 0xb, 0x0, 0x9, 0x27, 0xfff}, {0x8000, 0x7, 0x29258325, 0x80000001, 0x9, 0x3}], [{}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x2}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x4}, {0x2}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x3}, {0x5}, {0x1}, {0x3, 0x1}, {0x3}, {}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x2}, {0x0, 0x1}, {0x3}, {0x3}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x1}, {0x4}, {0x1, 0x1}, {0x4}, {0x5}, {0x5}, {}, {0x2, 0x1}, {0x4}, {0x2}, {0x5, 0x1}, {0x6}, {0x2}, {0x1, 0x1}, {0x4}, {0x3}, {0x1}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x1}, {0x1}, {0x2}, {0x3}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x1}, {0x4}, {}, {0x3}, {0x6}, {0x2, 0x1}, {0x1}, {}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2}, {0x2}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x4}, {}, {}, {0x3}, {0x2}, {0x1}, {0x3, 0xe34a9a796fc69084}, {0x2}, {0x3, 0x1}, {0x5}, {0x4, 0x1}, {0x4}, {0x4, 0x1}, {0x3, 0x1}, {}, {0x2, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x3}, {0x3}, {0x4}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x4}, {0x4}]}}, @TCA_PEDIT_PARMS_EX={0xe68, 0x4, {{{0x4, 0xfff0, 0x10000000, 0x7, 0x9}, 0x4, 0xfe, [{0x3, 0x8, 0xa, 0x6d0, 0x8}, {0x5, 0x8, 0x1, 0x3, 0x7fff, 0x1}, {0x4, 0xe1, 0x9, 0x200, 0x0, 0x9}]}, [{0x0, 0x349, 0x2, 0xfa90, 0x7fffffff, 0xfffff978}, {0x2, 0x9, 0x8, 0x10, 0x8, 0x800}, {0x2, 0x8001, 0x9, 0x100, 0x10001, 0x80000000}, {0x3, 0x1, 0x3, 0x2, 0x2be, 0xd}, {0x2, 0xa4d, 0x3, 0x2, 0x5, 0x3}, {0x3ff, 0x4, 0x6, 0x6, 0x9, 0x9}, {0xfffffffa, 0x3, 0x81, 0x800, 0x9, 0x400}, {0x6, 0x0, 0x6, 0x3, 0x8, 0xa}, {0x7ff, 0xfffffff8, 0x6, 0x4c, 0x49e1, 0x80}, {0x5, 0x9, 0x8, 0xbf04, 0xe, 0x9}, {0xf, 0xeef, 0x80, 0x0, 0x9, 0x2}, {0x10001, 0x10, 0x8, 0x9, 0x8, 0x6}, {0xfffffe01, 0x9000000, 0xfdc, 0x1, 0x6, 0x1}, {0x2, 0x0, 0x3, 0x8, 0x8527}, {0xffffffff, 0x5, 0x2, 0x1, 0x2, 0x2}, {0x1, 0x2, 0x51, 0x9, 0x8}, {0x5, 0xe354, 0xef, 0x8, 0xffff, 0x2}, {0x401, 0x7f, 0x7, 0x5, 0x0, 0x3ff}, {0x4, 0x5, 0x5, 0x6, 0x4, 0x8}, {0x4, 0x8, 0x1, 0xfffffffa, 0x3, 0xffff7278}, {0xf, 0x0, 0x9, 0x8, 0x7, 0x98}, {0xe08, 0x401, 0x6, 0x8, 0x4, 0xff}, {0x1, 0x8, 0x4, 0xee, 0x80, 0x5}, {0x4, 0x7, 0x4, 0x3, 0x29c00, 0xfffffff7}, {0x6, 0xc8f, 0x6, 0x6, 0x4, 0x1}, {0x1, 0x15c00000, 0x0, 0x2, 0x4, 0x8}, {0x9, 0x8, 0x0, 0x3, 0x6, 0x9}, {0x2, 0xc0, 0x33, 0x9, 0x4d, 0x1}, {0x7, 0x10, 0x9, 0x2, 0x3, 0x7}, {0x0, 0x0, 0x8, 0x7f, 0x4, 0x2}, {0xc5d, 0xffffffff, 0x1, 0x5, 0xa8, 0x2}, {0x80000000, 0x80, 0x4, 0x2, 0x4, 0x2e5a}, {0x0, 0x3, 0x40, 0x6c4, 0x9, 0x1}, {0x89e, 0x0, 0x6, 0x5, 0xc, 0x2cb6beb8}, {0xce9, 0xfffffffa, 0xf, 0x6, 0x7, 0x8}, {0x8, 0x6, 0x1, 0xd, 0x3, 0x8}, {0x80000000, 0x8, 0xb, 0x93c9, 0xff, 0xc7d}, {0x8f, 0x1, 0x3, 0x8, 0x0, 0x5}, {0x200, 0x7fff, 0x6, 0x8, 0x3, 0x4}, {0xace5, 0x5, 0x408, 0x7, 0x7d4a, 0x2}, {0x7ff, 0xfff, 0xfffeffff, 0x2, 0x1, 0x5}, {0x7, 0x8, 0x6, 0xfffff22c, 0x400, 0xfffffffe}, {0x8, 0xd4, 0x40, 0x6, 0x3bd9d094, 0x9}, {0x6, 0x9, 0x1000, 0x7, 0xe74, 0x3}, {0x1, 0x2bf2, 0x0, 0x0, 0x8, 0x80000000}, {0x3, 0x8, 0x2, 0x9, 0x800000, 0x1}, {0x7, 0x4, 0x7, 0x0, 0x6, 0xf9}, {0xa5ee, 0x9, 0xfffffff8, 0x3a, 0x8, 0x8}, {0x8, 0x6, 0x0, 0x2, 0x202c, 0x74}, {0x6, 0x3, 0x8, 0x3ff, 0x1, 0x40}, {0x6, 0x6, 0x5, 0x8, 0x1, 0x1}, {0x5, 0xb2, 0x1, 0x7, 0x3e0, 0xa}, {0xfff, 0xc62, 0x401, 0x7, 0x54, 0x800}, {0x9, 0x334, 0x9, 0x7f, 0x7, 0x3}, {0x8, 0x3, 0x9, 0x171b, 0x2, 0x9}, {0x410b61f9, 0x8, 0x6, 0x9a, 0x6, 0x7890}, {0xff, 0x80, 0x5, 0x80000000, 0xf, 0x1}, {0x200, 0x0, 0x401, 0x3, 0x3, 0x4}, {0x8a, 0x0, 0xffff, 0x7, 0x2, 0x9}, {0x3, 0x87, 0x6, 0x9, 0x0, 0x80000000}, {0x8001, 0x2b1, 0x0, 0x3, 0x6, 0x2}, {0x80, 0x80000001, 0x9c, 0x400, 0xec, 0x4}, {0x0, 0x6, 0xd, 0xfffffe00, 0x3, 0x2}, {0x7, 0x583b, 0x9, 0x80000000, 0x6, 0x6}, {0x9, 0x617c, 0x280000, 0x3, 0x5, 0xcfb}, {0x80000000, 0x9, 0x9, 0xff, 0x6, 0x10}, {0x4d0, 0x400, 0x0, 0x9, 0x800, 0x6}, {0x7f, 0x5, 0x101, 0x5, 0x8, 0x80000001}, {0x9, 0x9, 0x9, 0x98000000, 0x8, 0x400}, {0x6, 0x7f, 0x81, 0x5, 0x40, 0x3}, {0xa, 0x1448, 0x61, 0x6, 0x9, 0x200}, {0x1, 0x9, 0xc33, 0x4, 0x2, 0x1}, {0x7fffffff, 0x7, 0xc, 0x1, 0xf, 0xffffff26}, {0x0, 0x7fffffff, 0x401, 0x9, 0x40, 0x9}, {0x800, 0x67, 0xfff, 0x6, 0x3, 0x6}, {0x4af, 0xfffffffc, 0x8, 0x1, 0x6}, {0x6, 0x8, 0x6, 0x2, 0x80000001, 0xea}, {0x8001, 0x3, 0x8000, 0x2425, 0x0, 0xfffffffd}, {0x0, 0x5, 0x0, 0x5, 0x5, 0x1a}, {0x2, 0x6, 0x401, 0x3, 0x5, 0x1}, {0x6, 0x4, 0x1, 0x80000001, 0x5}, {0x6, 0x8001, 0x6, 0x3, 0x1, 0x1}, {0x1, 0x84, 0xe, 0x7, 0x3, 0x4}, {0x4, 0x9, 0x0, 0x9, 0x1, 0x2}, {0x3, 0x9, 0xffffffff, 0x5, 0xf, 0xf}, {0x8, 0xc, 0x2, 0x1, 0x5a, 0xfffff0a1}, {0x8, 0x5, 0xfffffffe, 0xfffffff8, 0x4, 0x3}, {0x22448d09, 0x894, 0x6, 0x3, 0x8, 0x137}, {0xffffff01, 0x4, 0x0, 0x0, 0x477d, 0x8000}, {0x2, 0x5, 0x6, 0x7, 0x6, 0xc00}, {0xfffff895, 0x9, 0x4, 0x4, 0x0, 0xfffffe00}, {0x10, 0x7, 0x40, 0x2, 0x8, 0xfffffffa}, {0xc, 0xc, 0x9, 0xffff0001, 0x9, 0x2}, {0x101, 0x5, 0x8000, 0x8, 0x0, 0x26}, {0x6, 0xb, 0x10000, 0x1, 0xffffffff, 0x3}, {0x10, 0x8, 0x1, 0x8, 0x7, 0x2}, {0x6, 0xa, 0x3, 0x6, 0x800, 0xc}, {0x7fff, 0xfffffffb, 0x5, 0x8, 0x1ff, 0xfe7c0000}, {0x3, 0x80000001, 0xfffffff7, 0x5, 0x1791, 0x9}, {0x1, 0x2, 0x4, 0x3c99, 0xb5, 0xbc3}, {0x6, 0x4, 0x3, 0x10001, 0xc, 0x401}, {0x9, 0x3, 0x7, 0x4, 0x4, 0x2}, {0x5, 0x7, 0x7, 0x4, 0x0, 0x9a1}, {0x8000, 0x4, 0x8, 0x4, 0x800, 0x2}, {0xa9df, 0x6, 0x7ff, 0x1f92, 0x2000000, 0x3}, {0x1, 0x5e30, 0x2, 0x1, 0x7, 0x1}, {0x3, 0xfffffffd, 0x5, 0x6, 0x5, 0x3}, {0x196a, 0x9, 0x7, 0xfffff001, 0x6, 0x8000}, {0x6, 0x3ff, 0x3, 0xc, 0x10000, 0x7}, {0x4, 0x5, 0x800, 0xf, 0x8000, 0x8}, {0x10000, 0xff80, 0x7fffffff, 0x10000, 0xfffff800, 0x5}, {0x5, 0x5, 0x0, 0x3, 0x1, 0x2cec}, {0x0, 0x7f, 0x8, 0x7, 0x65f, 0x12}, {0xb59, 0x4, 0x894, 0x3, 0x7, 0xc96}, {0x8, 0x0, 0x2d, 0x3c, 0x2, 0x5}, {0x1, 0x400, 0x8, 0x2, 0x6, 0x2516bfb4}, {0xb, 0x0, 0x1, 0x9, 0x5, 0x7ce}, {0xfffffff0, 0x8, 0x7ff, 0x8, 0x9, 0x8}, {0x9, 0x0, 0xffff8001, 0x68cf, 0x6}, {0x2, 0x3, 0x8, 0x80, 0x0, 0x7}, {0x8, 0x4, 0x1, 0x1, 0x6, 0x80000001}, {0x29f9, 0x0, 0x10000, 0x8000, 0xa00, 0x81}, {0x80, 0x0, 0x9, 0x7, 0x0, 0x5a6}, {0x4, 0x1, 0xfa, 0x4, 0x9, 0xc}, {0x0, 0xb, 0x7, 0x179b8a6b, 0xff1}, {0x9, 0x6, 0xf29, 0x200, 0x9, 0x6}, {0x0, 0x4, 0x5, 0x2, 0xfb3c, 0x4}, {0x1, 0x8, 0x9, 0x5, 0x4, 0x6}], [{0x1}, {0x1}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {}, {0x2}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x3, 0x1}, {}, {0x4}, {}, {0x1, 0x1}, {0x4}, {0x1}, {0x5}, {0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x2, 0x1}, {0x3, 0x1}, {0xa6b9a81a1e75688a, 0x1}, {0x5, 0x1}, {0x3}, {0x5}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x3}, {0x4}, {0x5}, {}, {0x2, 0x1}, {0x4}, {0x1}, {0x2}, {}, {0x1, 0x1}, {0x2, 0x1}, {0x3}, {0x5, 0x1}, {0x5}, {0x1}, {0x3}, {0x5, 0x1}, {0x3}, {}, {0x5, 0xe8d91502211f0943}, {0x98b111e406f1a9bc, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x2}, {0x5}, {0x7, 0x1}, {0x2, 0x1}, {0x3}, {0x3}, {0x4}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {}, {0x2, 0x1}, {0x5}, {0x5}, {0x5}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {0x1}, {0x4}, {0x2, 0x1}, {0x1}, {0x2, 0x1}, {0x1}, {0x2}, {0x1, 0x1}, {0x3}, {0x1}, {0xb, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x3}, {0x5}, {0x3, 0x1}, {0x4, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x2}, {0x1, 0x1}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x1}]}}]}, {0x6d, 0x6, "10f3561b33866030af2366e5cc509924f65c69a3c4aca463782ecfbdb0faf20e6258ebb28bf40d1942a176f7f6d5a0f6e33569cf3dd5aeb488f0c0a990dfecaed803d62e37e4dba57acff5f4189635cad61f2e2d1d59dd3a86095eca95cfef68f988b66abf7231224a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0xa}}, @TCA_RATE={0x6, 0x5, {0x87, 0x5d}}]}, 0x50b4}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0xfffe, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'pim6reg1\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) socketpair$unix(0x1, 0x5, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x5, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = socket(0x840000000002, 0x3, 0xff) getsockopt$sock_cred(r3, 0x1, 0x3e, &(0x7f00000003c0), &(0x7f0000000140)=0x32) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040051}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={0xffffffffffffffff, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="54e80000", @ANYRES8=r0, @ANYBLOB="02a067a5ea266724a857179498c25fed04326d74741698987a9d74af51b58526d65aebd8ce98d8340b20e33c31ca64a54f3ffbef5d4f0d458dfe8ae8333ddf59b88d813317377d20b960a0abf5b31e7d44714d1c72c4f62cb489d854068ab1ac1b7446ece9b63e5427eb52960fc5ecc9c51e7ecf53218ecac1791e79418516c460b58a8f02a955069d875017f6b5361600f3dac809df1d31f11fd847616bbd70df8a72bccadc8f7815a68b2d92e4d9934b24270090348c27f9128645d667e943e20a28fccc303b67911b67b0c82ba078f56d5c827d52b1ef3c344cccd0beea5c3728fee7e174f67c4004fa0e6b46796206a8"], 0x54}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) socket$inet6(0xa, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nfc(0x0, r2) sendmsg$NFC_CMD_DEV_UP(r2, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) close(r0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8010}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=@newqdisc={0x180, 0x24, 0x4, 0x80000000, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x8}, {0xffff, 0xfff3}, {0xf, 0x1}}, [@TCA_STAB={0x15c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x9, 0x2607, 0x4, 0x0, 0x8, 0x9, 0x4}}, {0xc, 0x2, [0x8000, 0x330, 0xffff, 0x3]}}, {{0x1c, 0x1, {0x0, 0x5, 0x2, 0x2, 0x0, 0x4, 0x4, 0x5}}, {0xe, 0x2, [0x2, 0x7, 0x9, 0x3, 0x24]}}, {{0x1c, 0x1, {0x5b, 0x3, 0x0, 0x9, 0x1, 0x1, 0xd9f7, 0xa}}, {0x18, 0x2, [0x9, 0x0, 0x8, 0x0, 0xb, 0x1f7, 0x7, 0x8, 0x8, 0x1df5]}}, {{0x1c, 0x1, {0xb, 0x3, 0x6, 0x7b288cd9, 0x0, 0xc55b, 0x22, 0x9}}, {0x16, 0x2, [0x8, 0x2, 0x0, 0x1, 0x8, 0xf, 0x7, 0x8000, 0x0]}}, {{0x1c, 0x1, {0xc, 0x7, 0x7000, 0x303cace6, 0x0, 0x1, 0x1ff, 0x4}}, {0xc, 0x2, [0x0, 0x101, 0xfe00, 0x3]}}, {{0x1c, 0x1, {0x1, 0x7f, 0x5, 0x7, 0x1, 0x101}}, {0x4}}, {{0x1c, 0x1, {0x2, 0x5, 0x3, 0x0, 0x0, 0xb6, 0x4}}, {0x4}}, {{0x1c, 0x1, {0xc7, 0x33, 0x5, 0x7fffffff, 0x2, 0x1, 0xfff, 0xa}}, {0x18, 0x2, [0x81, 0xd2, 0x6, 0x5, 0x40, 0x65f, 0xf, 0x3, 0x9, 0xff7f]}}]}]}, 0x180}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x4008840) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1e000000700b00005a4800000400000020020100", @ANYRES32, @ANYBLOB='@\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200000001000000feffffff0900"/24, @ANYRES32, @ANYBLOB="d221b13bcbecb8a4057b8d8e05f1114bed085407bf1597f1f8cc062f6e35eb3ba1fc3f3dac6f22651501a6d8d3fe7d268cef4514cc58baee599c9e994da4c340872f8514e61fdc870f3314df4ab56738e8f4cb15"], 0x50) 1.631285749s ago: executing program 2 (id=3123): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x15c, 0x65, 0x8, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xe, 0xffe2}, {0xb, 0xe}, {0x6, 0xc5b377f61037765b}}, [@filter_kind_options=@f_flow={{0x9}, {0x11c, 0x2, [@TCA_FLOW_ADDEND={0x8}, @TCA_FLOW_XOR={0x8, 0x7, 0x1ff}, @TCA_FLOW_XOR={0x8, 0x7, 0xfffffff9}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x7fff}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_ACT={0xd8, 0x9, 0x0, 0x1, [@m_ct={0xa8, 0x1b, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_MARK={0x8, 0x5, 0x8}, @TCA_CT_ZONE={0x6, 0x4, 0xfffb}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @dev={0xac, 0x14, 0x14, 0x30}}]}, {0x65, 0x6, "effbbfbb9975b98b391b34602a99202c04f8aff0f475c3649e7f9024793790e685860edfb7d78570905ca6acc9165a1fb42c399f209c0f00a8f4866f081cd17e904ddc3210cc30ec49b70f2b1fb3ead1fe143d5356ac58b602d03fa75b270e66d3"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_nat={0x2c, 0x2, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_FLOW_MODE={0x8}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1b0ee}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}, @TCA_RATE={0x6, 0x5, {0xff, 0x2}}, @TCA_RATE={0x6, 0x5, {0x3, 0x3}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x80}, 0x60040854) (async) r0 = socket(0x10, 0x803, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r2, r3, 0x26, 0x0, @void}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000480)={r4, r2, 0x4, r2}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async) recvmmsg(r1, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001740)=""/4098, 0xe9c}, {&(0x7f0000000280)=""/78, 0x4e}, {&(0x7f00000013c0)=""/96, 0x60}, {&(0x7f00000001c0)=""/149, 0x95}], 0x4}, 0x5}], 0x1, 0x100, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 1.469449939s ago: executing program 4 (id=3124): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x2b, 0x801, 0x1) mmap(&(0x7f000087d000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f000087cf79)={@in6={{0xa, 0x0, 0x0, @ipv4}}, 0x0, 0x0, 0x3a, 0x0, "0000000000000099010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000be4f28860000000000000000ffe300"}, 0xd8) sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x3fa, 0x2, 0x70bd29, 0x25dfdbff, {0x1, 0x0, 0x1, 0x1}, ["", "", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r5, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@sndinfo={0x20, 0x84, 0x2, {0xd, 0x10000}}, @authinfo={0x18, 0x84, 0x6, {0x8}}], 0x38, 0x40040}, 0x4004000) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newtaction={0x84, 0x30, 0xffff, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0xffffffffffffffff}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000140)={0x30, r1, 0x1, 0x0, 0x25dfdc00, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x6, 0xbd, [0x5]}]}, 0x30}, 0x1, 0x0, 0x0, 0x14}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket(0x2b, 0x801, 0x1) (async) mmap(&(0x7f000087d000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) (async) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f000087cf79)={@in6={{0xa, 0x0, 0x0, @ipv4}}, 0x0, 0x0, 0x3a, 0x0, "0000000000000099010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000be4f28860000000000000000ffe300"}, 0xd8) (async) sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x3fa, 0x2, 0x70bd29, 0x25dfdbff, {0x1, 0x0, 0x1, 0x1}, ["", "", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b40)={'wlan1\x00'}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) sendmsg$inet_sctp(r5, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@sndinfo={0x20, 0x84, 0x2, {0xd, 0x10000}}, @authinfo={0x18, 0x84, 0x6, {0x8}}], 0x38, 0x40040}, 0x4004000) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newtaction={0x84, 0x30, 0xffff, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0xffffffffffffffff}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) (async) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000140)={0x30, r1, 0x1, 0x0, 0x25dfdc00, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x6, 0xbd, [0x5]}]}, 0x30}, 0x1, 0x0, 0x0, 0x14}, 0x0) (async) 1.347475633s ago: executing program 2 (id=3125): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0xe, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000071106f000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x6, 0x0, 0x0, 0x0, 0x71, 0x11, 0x4f}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe}, 0x70) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x3, 0x6, 0x4920e7af812c3f03}, 0x14}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18030000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000260300000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=0xffffffffffffffff, 0x4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000e40)={'syztnl1\x00', &(0x7f0000000e00)={'sit0\x00', 0x0, 0x20, 0x7800, 0x401, 0x7, {{0x6, 0x4, 0x1, 0x2b, 0x18, 0x66, 0x0, 0x3, 0x4, 0x0, @local, @private=0xa010100, {[@noop, @end, @end]}}}}}) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d80)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', r6, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r7, 0xffffffffffffffff}, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r9, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76389e6a65585578f830e9000000", 0x0, 0x7fffffff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000280)={0x14, r4, 0x711, 0x70bd2b}, 0x14}, 0x1, 0x0, 0x0, 0x4044094}, 0x8894) r10 = socket$qrtr(0x2a, 0x2, 0x0) getpeername$qrtr(r10, &(0x7f0000000600), &(0x7f0000000c80)=0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r2, 0xe0, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, &(0x7f0000000380)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe, &(0x7f0000000d40)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x9, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) recvmsg$qrtr(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/108, 0x6c}, {&(0x7f0000000080)=""/188, 0xbc}, {&(0x7f00000002c0)=""/146, 0x92}], 0x3, &(0x7f0000000680)=[{0x28, 0x0, 0x0, ""/17}, {0x58, 0x0, 0x0, ""/72}, {0x18, 0x0, 0x0, ""/7}, {0xf0, 0x0, 0x0, ""/219}, {0xb8, 0x0, 0x0, ""/164}, {0xa8, 0x0, 0x0, ""/149}, {0x28, 0x0, 0x0, ""/20}, {0xb0, 0x0, 0x0, ""/157}, {0x110, 0x0, 0x0, ""/255}], 0x4d0, 0x1}, 0x38, 0x2000) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000d00)={0x3, 0x40, '\x00', 0x1, &(0x7f0000000cc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 1.145627099s ago: executing program 4 (id=3126): mmap(&(0x7f0000abb000/0x1000)=nil, 0x1000, 0x0, 0x102000200032, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$sock_timeval(r0, 0x1, 0xd, &(0x7f0000abaff9)={0x0, 0xea60}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x16c}}, 0x24) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x11, 0x4, 0x4, 0x5}, 0x50) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000e27f000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000134c2651638af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000e80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000157b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r3, 0xffffffffffffffff, 0x500}, 0x57) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@ipv4_delroute={0x44, 0x19, 0x901, 0x70bd29, 0x80, {0x2, 0x18, 0x10, 0x0, 0x0, 0x0, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @private=0xa010101}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_SRC={0x14, 0x3, @private0}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async, rerun: 64) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x98}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) (rerun: 64) 443.610836ms ago: executing program 2 (id=3127): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func_proto={0x2, 0x0, 0x0, 0x13, 0x2}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x28, 0x0, 0x0, 0x400}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x200000, 0x10, &(0x7f00000003c0), 0x10}, 0x90) 343.803507ms ago: executing program 1 (id=3128): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x94}}, 0x2e58d4b13e6fccb4) 231.010681ms ago: executing program 1 (id=3129): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x89f6, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x11, 0x0, 0x2, 0x0, 0x8, 0x1, 0x1ff, 0x0, 0x5}}) (async) r1 = socket(0x10, 0x803, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x18, r3, 0x1, 0x70bd2b, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x20000800) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x34, r3, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c445}, 0x4040140) (async) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r4, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r4], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) (async) r6 = socket(0x1a, 0x3, 0x3) (async, rerun: 64) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (async, rerun: 64) r8 = socket(0x10, 0x3, 0x0) (async, rerun: 32) r9 = socket(0x10, 0x803, 0x2) (rerun: 32) ioctl$F2FS_IOC_SET_PIN_FILE(r5, 0x4004f50d, &(0x7f0000000280)) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9) (async) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000b00)=@newtfilter={0x38, 0x28, 0xd27, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r7, {0xfff3, 0x9}, {}, {0x9, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x8, 0x2, [@TCA_BASIC_EMATCHES={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x810}, 0x40c4) r11 = socket$inet(0x2, 0x2, 0x3) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 190.305333ms ago: executing program 0 (id=3130): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$sock(r0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=[@mark={{0x14, 0x1, 0x24, 0x200}}, @mark={{0x14, 0x1, 0x24, 0x8}}], 0x30}, 0x440a0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000080095"], &(0x7f0000000040)='GPL\x00'}, 0x80) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@cgroup, r2, 0x11}, 0x14) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@cgroup, r2, 0x11}, 0x14) sendmsg$NFT_BATCH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={{0x14}, [], {0x14}}, 0x28}}, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$inet6(0xa, 0x3, 0x5) (async) r4 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r4, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x4000004, @remote, 0x0, 0x5}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @loopback, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[], 0x18}}], 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@ipv4_delroute={0x24, 0x19, 0x1, 0x70bd25, 0x25dfdbff, {0x2, 0x20, 0x80, 0xcc, 0xfd, 0x2, 0xc8, 0x6, 0x400}, [@RTA_NH_ID={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) (async) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@ipv4_delroute={0x24, 0x19, 0x1, 0x70bd25, 0x25dfdbff, {0x2, 0x20, 0x80, 0xcc, 0xfd, 0x2, 0xc8, 0x6, 0x400}, [@RTA_NH_ID={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) bind$ax25(0xffffffffffffffff, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) (async) bind$ax25(0xffffffffffffffff, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018010000000000003400000034000000040000000000000000000003000000000300000002000000d1bee5f303aafc871cef10608f2000000000000000000000010500000020000000020000000000000c0000009541aeaf81"], 0x0, 0x50}, 0x20) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018010000000000003400000034000000040000000000000000000003000000000300000002000000d1bee5f303aafc871cef10608f2000000000000000000000010500000020000000020000000000000c0000009541aeaf81"], 0x0, 0x50}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001ec0)={0x6, 0x4, &(0x7f0000001c00)=ANY=[@ANYBLOB="1800000000000000000000000000000089a000fe0000000095"], &(0x7f0000001c40)='syzkaller\x00', 0xf}, 0x94) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) (async) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20305, 0x7e15}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MTU={0x8, 0x4, 0x44}]}, 0x44}, 0x1, 0x0, 0x0, 0x8840}, 0x48094) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="a000000000012bbd7000fedbdf25", @ANYRES32=r7, @ANYRES32=r10], 0xa0}, 0x1, 0x0, 0x0, 0x41}, 0x0) 135.496181ms ago: executing program 4 (id=3131): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x8411}) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f00000003c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000640)={0x1f4, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_LINK={0x18c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4000003}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfef7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xad8d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x240000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf01f}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xbc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}]}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x4c010}, 0x800) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) ioctl$TUNSETVNETLE(r0, 0x400454dc, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'syztnl1\x00', &(0x7f0000000080)={'tunl0\x00', 0x0, 0xcf4898dad95460fa, 0x1, 0x3, 0x7fff, {{0x1f, 0x4, 0x2, 0x8, 0x7c, 0x66, 0x0, 0x70, 0x4, 0x0, @broadcast, @multicast2, {[@timestamp_prespec={0x44, 0xc, 0xca, 0x3, 0x4, [{@loopback, 0xdfb5}]}, @cipso={0x86, 0x15, 0x1, [{0x7, 0xf, "6d89cd07fb013ceee42f0dcc87"}]}, @generic={0x7, 0x7, "72beeed331"}, @ssrr={0x89, 0x1b, 0x9e, [@dev={0xac, 0x14, 0x14, 0x43}, @broadcast, @local, @rand_addr=0x64010101, @private=0xa010100, @rand_addr=0x64010101]}, @rr={0x7, 0x7, 0x8, [@local]}, @timestamp={0x44, 0x10, 0x50, 0x0, 0xf, [0x7fffffff, 0x2, 0x9]}, @ssrr={0x89, 0x7, 0xe3, [@dev={0xac, 0x14, 0x14, 0x11}]}, @noop, @ra={0x94, 0x4}]}}}}}) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f00000001c0)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, r4}, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@deltclass={0x64, 0x29, 0x100, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0x9, 0x3}, {0x2, 0x2}}, [@TCA_RATE={0x6, 0x5, {0x14, 0x9}}, @tclass_kind_options=@c_tbf={0x8}, @TCA_RATE={0x6, 0x5, {0x4, 0x1}}, @TCA_RATE={0x6, 0x5, {0x45, 0x93}}, @TCA_RATE={0x6, 0x5, {0x53}}, @TCA_RATE={0x6, 0x5, {0x2}}, @tclass_kind_options=@c_tbf={0x8}, @TCA_RATE={0x6, 0x5, {0xd8}}]}, 0x64}}, 0x0) r5 = socket$inet6(0xa, 0x1, 0x8010800000000084) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000003000), r6) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002bbd7000fbdbdf25020000000a000900aaaaaaaaaa44000008000300", @ANYRES32=r9, @ANYBLOB='\b\x00\v'], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) sendmmsg$inet6(r5, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000000c0)='/', 0x1}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000d00)='[', 0x4d0}], 0x21}}], 0x2, 0x4008040) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x2020}]}}}, @IFLA_IFNAME={0x14, 0x3, 'nicvf0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0xc845}, 0x0) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) 47.191457ms ago: executing program 2 (id=3132): sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x80, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x4}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_TAGLST={0x4c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x80}, 0x1, 0x0, 0x0, 0x100000d4}, 0x4040810) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000001000000000000000000018010000", @ANYRES64, @ANYBLOB="0000000000000000b702000014000000b7030000000003808500000008000000bc0900000000000055090100000000007204800000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0xa, 0x1003, &(0x7f0000001e40)=""/4099, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 0s ago: executing program 1 (id=3133): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r3 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1f, 0x8, 0xb, 0xae, 0x1280, 0x1, 0x9ee9, '\x00', r2, r3, 0x3, 0x4, 0x3}, 0x50) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x20, 0x2, 0x6, 0x201, 0x0, 0x0, {0x1}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4020) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000003800010700000000000000000800000096b2ba891bd219155d6cc72f1e239ab1beede994748e84deee1114b20569bb7c8e137a1219f2025ea8c26066c78c477dfaffb0a74c5fb2225158"], 0x14}, 0x1, 0x0, 0x0, 0x48010}, 0x4000000) ioctl$SIOCSIFHWADDR(r0, 0x8b2b, &(0x7f0000000080)={'wlan1\x00', @random="02001c00004a"}) kernel console output (not intermixed with test programs): g attributes in process `syz.1.1493'. [ 252.855995][T11235] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1495'. [ 252.916414][T11236] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1495'. [ 253.068902][T11238] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1496'. [ 253.346166][T11247] syzkaller1: entered promiscuous mode [ 253.358689][T11247] syzkaller1: entered allmulticast mode [ 253.544760][T11254] wg1: entered promiscuous mode [ 253.646703][T11260] netlink: 'syz.2.1503': attribute type 1 has an invalid length. [ 254.290223][T11279] syz.1.1508: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 254.354096][T11279] CPU: 1 UID: 0 PID: 11279 Comm: syz.1.1508 Not tainted syzkaller #0 PREEMPT(full) [ 254.354134][T11279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 254.354147][T11279] Call Trace: [ 254.354156][T11279] [ 254.354167][T11279] dump_stack_lvl+0x189/0x250 [ 254.354206][T11279] ? __pfx_dump_stack_lvl+0x10/0x10 [ 254.354233][T11279] ? __pfx__printk+0x10/0x10 [ 254.354266][T11279] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 254.354292][T11279] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 254.354319][T11279] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 254.354346][T11279] warn_alloc+0x214/0x310 [ 254.354379][T11279] ? stack_depot_save_flags+0x40/0x860 [ 254.354411][T11279] ? __pfx_warn_alloc+0x10/0x10 [ 254.354444][T11279] ? kasan_save_track+0x4f/0x80 [ 254.354471][T11279] ? xskq_create+0x56/0x170 [ 254.354495][T11279] ? xsk_init_queue+0xb0/0x110 [ 254.354518][T11279] ? xsk_setsockopt+0x4dc/0x8d0 [ 254.354540][T11279] ? do_sock_setsockopt+0x17c/0x1b0 [ 254.354570][T11279] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 254.354587][T11279] ? do_syscall_64+0xfa/0x3b0 [ 254.354613][T11279] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.354644][T11279] __vmalloc_node_range_noprof+0x125/0x12f0 [ 254.354722][T11279] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 254.354753][T11279] ? xskq_create+0x56/0x170 [ 254.354783][T11279] ? __kasan_kmalloc+0x93/0xb0 [ 254.354817][T11279] vmalloc_user_noprof+0xad/0xf0 [ 254.354847][T11279] ? xskq_create+0xbf/0x170 [ 254.354876][T11279] xskq_create+0xbf/0x170 [ 254.354908][T11279] xsk_init_queue+0xb0/0x110 [ 254.354937][T11279] xsk_setsockopt+0x4dc/0x8d0 [ 254.354965][T11279] ? __pfx_xsk_setsockopt+0x10/0x10 [ 254.354990][T11279] ? __pfx_aa_sk_perm+0x10/0x10 [ 254.355031][T11279] ? aa_sock_opt_perm+0xff/0x1b0 [ 254.355055][T11279] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 254.355078][T11279] ? __pfx_xsk_setsockopt+0x10/0x10 [ 254.355105][T11279] do_sock_setsockopt+0x17c/0x1b0 [ 254.355144][T11279] __x64_sys_setsockopt+0x13f/0x1b0 [ 254.355171][T11279] do_syscall_64+0xfa/0x3b0 [ 254.355198][T11279] ? lockdep_hardirqs_on+0x9c/0x150 [ 254.355225][T11279] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.355245][T11279] ? clear_bhb_loop+0x60/0xb0 [ 254.355272][T11279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.355291][T11279] RIP: 0033:0x7f600bf8ebe9 [ 254.355311][T11279] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.355329][T11279] RSP: 002b:00007f600ce32038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 254.355352][T11279] RAX: ffffffffffffffda RBX: 00007f600c1b5fa0 RCX: 00007f600bf8ebe9 [ 254.355367][T11279] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 254.355379][T11279] RBP: 00007f600c011e19 R08: 0000000000000004 R09: 0000000000000000 [ 254.355391][T11279] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 254.355404][T11279] R13: 00007f600c1b6038 R14: 00007f600c1b5fa0 R15: 00007ffe578becd8 [ 254.355439][T11279] [ 254.909630][T11279] Mem-Info: [ 254.954828][T11279] active_anon:4694 inactive_anon:0 isolated_anon:0 [ 254.954828][T11279] active_file:2756 inactive_file:39886 isolated_file:0 [ 254.954828][T11279] unevictable:768 dirty:34 writeback:0 [ 254.954828][T11279] slab_reclaimable:10644 slab_unreclaimable:102552 [ 254.954828][T11279] mapped:29013 shmem:1356 pagetables:1303 [ 254.954828][T11279] sec_pagetables:0 bounce:0 [ 254.954828][T11279] kernel_misc_reclaimable:0 [ 254.954828][T11279] free:1194682 free_pcp:16041 free_cma:0 [ 254.958521][T11280] __nla_validate_parse: 2 callbacks suppressed [ 254.958545][T11280] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1508'. [ 255.007163][T11279] Node 0 active_anon:18784kB inactive_anon:0kB active_file:11024kB inactive_file:159348kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116080kB dirty:156kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12208kB pagetables:5060kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 255.048397][T11279] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:80kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 255.111133][T11280] bridge_slave_1: left allmulticast mode [ 255.193161][T11280] bridge_slave_1: left promiscuous mode [ 255.209460][T11279] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 255.296170][T11280] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.335274][T11279] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 255.366270][T11279] Node 0 DMA32 free:865352kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18720kB inactive_anon:0kB active_file:11024kB inactive_file:157776kB unevictable:1536kB writepending:280kB present:3129332kB managed:2557476kB mlocked:0kB bounce:0kB free_pcp:47212kB local_pcp:23676kB free_cma:0kB [ 255.432688][T11280] bridge_slave_0: left allmulticast mode [ 255.448070][T11280] bridge_slave_0: left promiscuous mode [ 255.460827][T11280] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.474871][T11279] lowmem_reserve[]: 0 0 1 1 1 [ 255.480870][T11279] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1572kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:4kB free_cma:0kB [ 255.512959][T11279] lowmem_reserve[]: 0 0 0 0 0 [ 255.529011][T11279] Node 1 Normal free:3897728kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17248kB local_pcp:8256kB free_cma:0kB [ 255.564699][T11279] lowmem_reserve[]: 0 0 0 0 0 [ 255.597472][T11279] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 255.628315][T11279] Node 0 DMA32: 1*4kB (M) 1*8kB (M) 2*16kB (UE) 3*32kB (UE) 59*64kB (UM) 22*128kB (UME) 8*256kB (UME) 8*512kB (M) 6*1024kB (UM) 3*2048kB (UM) 205*4096kB (M) = 864844kB [ 255.655713][T11279] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 255.684743][T11279] Node 1 Normal: 198*4kB (UME) 55*8kB (UME) 37*16kB (UME) 121*32kB (UME) 33*64kB (UME) 14*128kB (UME) 4*256kB (UM) 4*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 947*4096kB (M) = 3897728kB [ 255.719718][T11279] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 255.749212][T11279] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 255.772004][T11279] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 255.803940][T11279] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 255.841569][T11279] 43997 total pagecache pages [ 255.856512][T11279] 0 pages in swap cache [ 255.869990][T11279] Free swap = 124996kB [ 255.879788][T11279] Total swap = 124996kB [ 255.889561][T11279] 2097051 pages RAM [ 255.902580][T11279] 0 pages HighMem/MovableOnly [ 255.914110][T11279] 425656 pages reserved [ 255.925221][T11279] 0 pages cma reserved [ 255.986693][T11302] tipc: Enabled bearer , priority 0 [ 256.079637][T11303] syzkaller0: entered promiscuous mode [ 256.087492][T11303] syzkaller0: entered allmulticast mode [ 256.241836][T11319] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1516'. [ 256.376075][T11327] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1518'. [ 256.397760][T11327] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1518'. [ 256.453638][T11311] tipc: Resetting bearer [ 256.535252][T11311] tipc: Disabling bearer [ 256.622519][T11333] tipc: Enabled bearer , priority 0 [ 256.650308][T11333] syzkaller0: entered promiscuous mode [ 256.683355][T11333] syzkaller0: entered allmulticast mode [ 256.735612][T11333] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 256.792058][T11333] tipc: Resetting bearer [ 256.864274][T11340] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1520'. [ 257.064912][T11356] openvswitch: netlink: IPv4 tunnel dst address is zero [ 257.365091][T11331] tipc: Resetting bearer [ 257.396024][T11331] tipc: Disabling bearer [ 257.744069][T11375] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1531'. [ 257.817824][T11373] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1530'. [ 257.966426][T11388] netlink: 160 bytes leftover after parsing attributes in process `syz.4.1533'. [ 258.001106][T11389] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1532'. [ 258.778641][T11408] netlink: 'syz.1.1538': attribute type 21 has an invalid length. [ 258.813078][T11408] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1538'. [ 259.020840][T11416] tipc: Enabling of bearer rejected, failed to enable media [ 259.060511][T11416] tipc: Enabling of bearer rejected, failed to enable media [ 259.244656][T11424] geneve3: entered promiscuous mode [ 259.269007][T11424] geneve3: entered allmulticast mode [ 259.306449][ T49] netdevsim netdevsim1 netdevsim1: set [1, 2] type 2 family 0 port 19999 - 0 [ 259.340360][ T49] netdevsim netdevsim1 netdevsim2: set [1, 2] type 2 family 0 port 19999 - 0 [ 259.384579][ T49] netdevsim netdevsim1 netdevsim3: set [1, 2] type 2 family 0 port 19999 - 0 [ 259.746919][T11444] veth0: entered promiscuous mode [ 259.810163][T11444] netlink: 'syz.0.1553': attribute type 14 has an invalid length. [ 259.857058][T11444] netlink: 'syz.0.1553': attribute type 13 has an invalid length. [ 259.913111][T11441] veth0: left promiscuous mode [ 260.222834][T11457] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 260.252990][T11458] __nla_validate_parse: 4 callbacks suppressed [ 260.253008][T11458] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1556'. [ 260.310877][T11458] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1556'. [ 260.384162][T11461] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 260.770106][T11476] policy can only be matched on NF_INET_PRE_ROUTING [ 260.770130][T11476] unable to load match [ 260.979870][T11482] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1567'. [ 261.000211][T11482] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1567'. [ 261.030698][T11482] 8021q: VLANs not supported on wg1 [ 261.085460][T11482] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1567'. [ 261.255624][T11490] netlink: 'syz.3.1569': attribute type 1 has an invalid length. [ 261.278000][T11490] netlink: 184 bytes leftover after parsing attributes in process `syz.3.1569'. [ 261.459686][T11500] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1572'. [ 261.653431][T11502] netlink: 'syz.0.1574': attribute type 2 has an invalid length. [ 261.693518][T11502] netlink: 119 bytes leftover after parsing attributes in process `syz.0.1574'. [ 261.773606][T11505] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1575'. [ 261.935103][T11509] bond0: entered promiscuous mode [ 261.968973][T11509] bond_slave_0: entered promiscuous mode [ 261.990671][T11509] bond_slave_1: entered promiscuous mode [ 262.014841][T11509] bridge_slave_1: entered promiscuous mode [ 262.050176][T11509] batadv0: entered promiscuous mode [ 262.072084][T11515] sctp: [Deprecated]: syz.3.1580 (pid 11515) Use of struct sctp_assoc_value in delayed_ack socket option. [ 262.072084][T11515] Use struct sctp_sack_info instead [ 262.398741][T11527] bond0: (slave dummy0): Releasing backup interface [ 262.447165][T11527] bond0: (slave dummy0): the permanent HWaddr of slave - aa:aa:aa:aa:aa:24 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 262.589516][T11527] bond0: (slave bridge_slave_1): Releasing backup interface [ 262.661839][T11542] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1585'. [ 262.696000][T11527] batadv1: left allmulticast mode [ 262.738059][T11527] batadv1: left promiscuous mode [ 262.743505][T11527] bridge0: port 1(batadv1) entered disabled state [ 262.784618][T11527] bond2: (slave gretap0): Releasing active interface [ 262.857294][T11541] team0: Mode changed to "broadcast" [ 263.245900][T11568] netdevsim netdevsim0: Firmware load for '..' refused, path contains '..' component [ 263.259378][T11566] sock: sock_timestamping_bind_phc: sock not bind to device [ 263.268336][T11566] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 263.683568][T11580] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 265.021368][T11631] netlink: 'syz.0.1614': attribute type 26 has an invalid length. [ 265.395501][T11631] __nla_validate_parse: 7 callbacks suppressed [ 265.395531][T11631] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1614'. [ 265.437027][T11631] netlink: 'syz.0.1614': attribute type 26 has an invalid length. [ 265.476621][T11631] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1614'. [ 265.665232][T11642] tipc: Can't bind to reserved service type 0 [ 265.700188][T11646] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 265.835131][T11651] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1622'. [ 266.078895][T11662] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1625'. [ 266.348358][T11671] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1628'. [ 266.924890][T11685] IPVS: persistence engine module ip_vs_pe_ not found [ 267.102304][T11704] netlink: 'syz.4.1638': attribute type 1 has an invalid length. [ 267.256563][T11708] syzkaller0: mtu less than device minimum [ 267.433367][T11713] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1641'. [ 267.476149][T11713] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 267.795397][T11724] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1645'. [ 268.399300][T11742] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1653'. [ 268.689541][T11762] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1659'. [ 268.707019][T11757] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1656'. [ 269.077325][T11781] netlink: 'syz.2.1664': attribute type 4 has an invalid length. [ 270.159010][T11835] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 270.798695][T11862] __nla_validate_parse: 5 callbacks suppressed [ 270.798716][T11862] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1684'. [ 270.883051][T11871] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 271.065438][T11874] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1687'. [ 271.086431][T11877] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1688'. [ 271.103590][T11874] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1687'. [ 271.113756][T11878] netlink: 'syz.3.1689': attribute type 1 has an invalid length. [ 271.125643][T11878] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 271.755528][T11899] netlink: 'syz.2.1695': attribute type 1 has an invalid length. [ 271.789706][T11899] netlink: 'syz.2.1695': attribute type 3 has an invalid length. [ 271.809656][T11899] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1695'. [ 271.926225][T11904] netlink: 'syz.1.1698': attribute type 21 has an invalid length. [ 271.967009][T11905] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1696'. [ 272.149847][T11910] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1700'. [ 272.181875][T11910] netlink: 'syz.1.1700': attribute type 3 has an invalid length. [ 272.427673][T11919] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1703'. [ 272.487406][T11919] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1703'. [ 272.502391][T11919] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1703'. [ 273.057040][T11943] netlink: 'syz.3.1709': attribute type 10 has an invalid length. [ 273.134473][T11948] openvswitch: netlink: Flow actions attr not present in new flow. [ 273.160159][T11943] team0: Device veth1_macvtap failed to register rx_handler [ 273.663032][T11968] pim6reg: entered allmulticast mode [ 274.007474][T11980] macvlan4: entered promiscuous mode [ 274.057458][T11980] macvlan4: entered allmulticast mode [ 274.081736][T11980] veth1_to_bond: entered promiscuous mode [ 274.113098][T11980] veth1_to_bond: entered allmulticast mode [ 274.129983][T11980] team0: Port device macvlan4 added [ 274.340854][T12003] netlink: 'syz.4.1725': attribute type 9 has an invalid length. [ 274.518947][T12004] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 274.841986][T12029] netlink: 'syz.3.1733': attribute type 1 has an invalid length. [ 274.897819][T12021] tipc: Enabled bearer , priority 0 [ 275.092566][T12021] syzkaller0: entered promiscuous mode [ 275.109359][T12021] syzkaller0: entered allmulticast mode [ 275.116484][T12021] tipc: Resetting bearer [ 275.124667][T12040] netlink: 'syz.2.1734': attribute type 1 has an invalid length. [ 275.259916][ T49] tipc: Resetting bearer [ 275.297672][T12020] tipc: Resetting bearer [ 275.997044][ T5927] tipc: Node number set to 3828484925 [ 276.823449][T12020] tipc: Disabling bearer [ 277.082982][T12059] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 277.173449][T12061] __nla_validate_parse: 13 callbacks suppressed [ 277.173477][T12061] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1741'. [ 277.249693][T12061] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1741'. [ 277.579130][T12076] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 277.629787][T12074] erspan0: entered promiscuous mode [ 277.640260][T12074] vlan2: entered promiscuous mode [ 278.082398][T12095] netlink: 'syz.2.1750': attribute type 142 has an invalid length. [ 278.105844][T12098] netlink: 'syz.2.1750': attribute type 142 has an invalid length. [ 278.115508][T12097] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1751'. [ 278.169689][T12095] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1750'. [ 278.325977][T12102] netlink: 348 bytes leftover after parsing attributes in process `syz.2.1752'. [ 278.850450][T12123] IPVS: set_ctl: invalid protocol: 43 172.20.20.170:20128 [ 278.882176][T12121] lo speed is unknown, defaulting to 1000 [ 279.003398][T12123] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1756'. [ 279.034941][T12127] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1758'. [ 279.054492][T12123] sit0: entered promiscuous mode [ 279.076244][T12123] sit0: entered allmulticast mode [ 279.141576][T12129] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1759'. [ 279.489555][T12138] macvlan5: entered allmulticast mode [ 279.512394][T12138] bond0: (slave macvlan5): Error -98 calling set_mac_address [ 279.913148][T12149] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 280.096705][T12154] 8021q: VLANs not supported on lo [ 280.566178][T12173] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1772'. [ 281.092958][T12196] netlink: 'syz.0.1779': attribute type 21 has an invalid length. [ 281.112899][T12196] netlink: 'syz.0.1779': attribute type 6 has an invalid length. [ 281.123593][T12196] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1779'. [ 281.157594][T12199] 8021q: VLANs not supported on sit0 [ 282.318275][T12241] netlink: 'syz.1.1794': attribute type 3 has an invalid length. [ 282.328031][T12241] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 282.391497][T12241] __nla_validate_parse: 4 callbacks suppressed [ 282.391520][T12241] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1794'. [ 282.431209][T12242] pim6reg: entered allmulticast mode [ 282.444241][T12244] pim6reg: left allmulticast mode [ 282.624970][T12251] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 282.771540][T12253] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20000 [ 282.796657][T12253] IPVS: set_ctl: invalid protocol: 59 255.255.255.255:20000 [ 283.320322][T12281] nbd: must specify a device to reconfigure [ 283.350604][T12280] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1806'. [ 283.383463][T12280] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1806'. [ 283.454200][T12280] netlink: 'syz.3.1806': attribute type 3 has an invalid length. [ 283.669850][T12296] netlink: 'syz.4.1810': attribute type 7 has an invalid length. [ 284.039014][T12311] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1814'. [ 284.371042][T12319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1817'. [ 284.448425][T12322] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1815'. [ 284.497257][T12322] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1815'. [ 284.641227][T12331] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 285.073619][T12341] tipc: Enabled bearer , priority 0 [ 285.095700][T12341] syzkaller0: entered promiscuous mode [ 285.126508][T12341] syzkaller0: entered allmulticast mode [ 285.222175][T12340] tipc: Resetting bearer [ 285.298064][T12340] tipc: Disabling bearer [ 285.304401][T12358] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 285.707715][T12381] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1834'. [ 285.854241][T12385] veth0_to_bond: entered allmulticast mode [ 285.917778][T12386] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 286.018175][T12395] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1839'. [ 286.170887][T12397] syz.3.1840: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 286.228787][T12397] CPU: 0 UID: 0 PID: 12397 Comm: syz.3.1840 Not tainted syzkaller #0 PREEMPT(full) [ 286.228816][T12397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 286.228830][T12397] Call Trace: [ 286.228838][T12397] [ 286.228847][T12397] dump_stack_lvl+0x189/0x250 [ 286.228883][T12397] ? __pfx_dump_stack_lvl+0x10/0x10 [ 286.228909][T12397] ? __pfx__printk+0x10/0x10 [ 286.228940][T12397] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 286.228966][T12397] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 286.228993][T12397] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 286.229022][T12397] warn_alloc+0x214/0x310 [ 286.229056][T12397] ? stack_depot_save_flags+0x40/0x860 [ 286.229087][T12397] ? __pfx_warn_alloc+0x10/0x10 [ 286.229122][T12397] ? kasan_save_track+0x4f/0x80 [ 286.229149][T12397] ? xskq_create+0x56/0x170 [ 286.229173][T12397] ? xsk_init_queue+0xb0/0x110 [ 286.229196][T12397] ? xsk_setsockopt+0x4dc/0x8d0 [ 286.229217][T12397] ? do_sock_setsockopt+0x17c/0x1b0 [ 286.229247][T12397] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 286.229263][T12397] ? do_syscall_64+0xfa/0x3b0 [ 286.229291][T12397] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.229322][T12397] __vmalloc_node_range_noprof+0x125/0x12f0 [ 286.229401][T12397] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 286.229439][T12397] ? __kasan_kmalloc+0x93/0xb0 [ 286.229470][T12397] vmalloc_user_noprof+0xad/0xf0 [ 286.229500][T12397] ? xskq_create+0xbf/0x170 [ 286.229528][T12397] xskq_create+0xbf/0x170 [ 286.229558][T12397] xsk_init_queue+0xb0/0x110 [ 286.229588][T12397] xsk_setsockopt+0x4dc/0x8d0 [ 286.229616][T12397] ? __pfx_xsk_setsockopt+0x10/0x10 [ 286.229640][T12397] ? __pfx_aa_sk_perm+0x10/0x10 [ 286.229675][T12397] ? aa_sock_opt_perm+0xff/0x1b0 [ 286.229699][T12397] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 286.229721][T12397] ? __pfx_xsk_setsockopt+0x10/0x10 [ 286.229748][T12397] do_sock_setsockopt+0x17c/0x1b0 [ 286.229786][T12397] __x64_sys_setsockopt+0x13f/0x1b0 [ 286.229813][T12397] do_syscall_64+0xfa/0x3b0 [ 286.229841][T12397] ? lockdep_hardirqs_on+0x9c/0x150 [ 286.229867][T12397] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.229888][T12397] ? clear_bhb_loop+0x60/0xb0 [ 286.229914][T12397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.229933][T12397] RIP: 0033:0x7f7feb58ebe9 [ 286.229953][T12397] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 286.229972][T12397] RSP: 002b:00007f7fec4a0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 286.229995][T12397] RAX: ffffffffffffffda RBX: 00007f7feb7b5fa0 RCX: 00007f7feb58ebe9 [ 286.230010][T12397] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 286.230023][T12397] RBP: 00007f7feb611e19 R08: 0000000000000004 R09: 0000000000000000 [ 286.230035][T12397] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 286.230048][T12397] R13: 00007f7feb7b6038 R14: 00007f7feb7b5fa0 R15: 00007fff84bc0e78 [ 286.230085][T12397] [ 286.230093][T12397] Mem-Info: [ 286.532715][T12397] active_anon:9772 inactive_anon:0 isolated_anon:0 [ 286.532715][T12397] active_file:2756 inactive_file:39900 isolated_file:0 [ 286.532715][T12397] unevictable:768 dirty:64 writeback:0 [ 286.532715][T12397] slab_reclaimable:10751 slab_unreclaimable:101501 [ 286.532715][T12397] mapped:32145 shmem:3471 pagetables:1329 [ 286.532715][T12397] sec_pagetables:0 bounce:0 [ 286.532715][T12397] kernel_misc_reclaimable:0 [ 286.532715][T12397] free:1325827 free_pcp:11587 free_cma:0 [ 286.603375][T12397] Node 0 active_anon:41188kB inactive_anon:0kB active_file:11024kB inactive_file:159396kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:130580kB dirty:252kB writeback:0kB shmem:14348kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12464kB pagetables:5188kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 286.635631][T12397] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:80kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 286.682669][T12397] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 286.815238][T12397] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 286.829008][T12419] netlink: 'syz.2.1846': attribute type 6 has an invalid length. [ 286.876852][T12397] Node 0 DMA32 free:1386608kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:42740kB inactive_anon:0kB active_file:11024kB inactive_file:157824kB unevictable:1536kB writepending:252kB present:3129332kB managed:2557476kB mlocked:0kB bounce:0kB free_pcp:29088kB local_pcp:11156kB free_cma:0kB [ 286.878444][T12419] netlink: 'syz.2.1846': attribute type 1 has an invalid length. [ 286.978722][T12397] lowmem_reserve[]: 0 0 1 1 1 [ 287.009221][T12397] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1572kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:8kB free_cma:0kB [ 287.017985][T12426] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 287.073506][T12397] lowmem_reserve[]: 0 0 0 0 0 [ 287.091763][T12419] netlink: 'syz.2.1846': attribute type 2 has an invalid length. [ 287.186542][T12397] Node 1 Normal free:3898240kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:16768kB local_pcp:8736kB free_cma:0kB [ 287.232810][T12397] lowmem_reserve[]: 0 0 0 0 0 [ 287.252799][T12397] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 287.281000][T12397] Node 0 DMA32: 2276*4kB (UM) 1619*8kB (UM) 1083*16kB (UM) 1318*32kB (UME) 784*64kB (UM) 594*128kB (UM) 436*256kB (UM) 237*512kB (UM) 107*1024kB (UM) 2*2048kB (M) 205*4096kB (UM) = 1394072kB [ 287.301114][T12397] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 287.314434][T12397] Node 1 Normal: 198*4kB (UME) 55*8kB (UME) 37*16kB (UME) 131*32kB (UME) 36*64kB (UME) 14*128kB (UME) 4*256kB (UM) 4*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 947*4096kB (M) = 3898240kB [ 287.385994][T12397] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 287.415080][T12397] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 287.441738][T12397] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 287.466496][T12397] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 287.486379][T12397] 44030 total pagecache pages [ 287.491409][T12397] 0 pages in swap cache [ 287.504377][T12397] Free swap = 124996kB [ 287.510317][T12397] Total swap = 124996kB [ 287.514651][T12397] 2097051 pages RAM [ 287.528873][T12397] 0 pages HighMem/MovableOnly [ 287.534222][T12397] 425656 pages reserved [ 287.553043][T12397] 0 pages cma reserved [ 287.558276][T12443] netlink: 'syz.0.1851': attribute type 1 has an invalid length. [ 287.622196][T12440] tipc: Enabled bearer , priority 0 [ 287.701541][T12433] tipc: Resetting bearer [ 287.762504][T12444] syzkaller0: entered promiscuous mode [ 287.777077][T12444] syzkaller0: entered allmulticast mode [ 287.816113][T12432] tipc: Resetting bearer [ 287.887873][T12432] tipc: Disabling bearer [ 288.115365][T12467] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1859'. [ 288.208246][T12469] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 288.663779][T12490] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 288.704693][T12491] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1867'. [ 288.829581][T12491] 8021q: adding VLAN 0 to HW filter on device bond0 [ 288.879214][T12491] bond0: (slave rose0): Enslaving as an active interface with an up link [ 288.985227][T12503] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 289.093311][T12511] netlink: 'syz.3.1871': attribute type 10 has an invalid length. [ 289.111933][T12511] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1871'. [ 289.172432][T12517] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1873'. [ 289.210657][T12511] team0: Port device geneve0 added [ 289.401764][T12529] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1876'. [ 289.561593][T12531] vlan2: entered allmulticast mode [ 289.566777][T12531] bridge0: entered allmulticast mode [ 289.637824][T12531] bridge8: port 1(vlan2) entered blocking state [ 289.667312][T12531] bridge8: port 1(vlan2) entered disabled state [ 289.696635][T12531] vlan2: entered promiscuous mode [ 289.716580][T12531] bridge0: entered promiscuous mode [ 289.853643][T12540] xt_socket: unknown flags 0x50 [ 290.007791][T12549] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1883'. [ 290.024077][T12548] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1880'. [ 290.040417][T12548] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1880'. [ 290.419360][T12565] netlink: 'syz.2.1889': attribute type 4 has an invalid length. [ 290.674175][T12578] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 290.732929][T12579] netlink: 'syz.0.1894': attribute type 21 has an invalid length. [ 290.775794][T12579] netlink: 'syz.0.1894': attribute type 22 has an invalid length. [ 290.845109][T12579] netlink: 'syz.0.1894': attribute type 23 has an invalid length. [ 290.870956][T12585] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1895'. [ 290.917434][T12579] netlink: 'syz.0.1894': attribute type 25 has an invalid length. [ 290.932255][T12579] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1894'. [ 291.227630][T12609] openvswitch: netlink: Missing key (keys=40, expected=100) [ 291.390986][T12617] tipc: Enabled bearer , priority 0 [ 291.464083][T12617] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 291.474481][T12617] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 291.501947][T12617] tipc: Resetting bearer [ 291.672070][T12617] tipc: Resetting bearer [ 292.093428][T12651] netlink: 'syz.3.1912': attribute type 10 has an invalid length. [ 292.268790][T12656] netlink: 'syz.4.1913': attribute type 1 has an invalid length. [ 292.396943][ T6077] tipc: Node number set to 292727816 [ 292.414052][T12661] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 292.468126][T12661] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 292.477660][ T9605] tipc: Resetting bearer [ 292.551831][T12664] gretap1: entered promiscuous mode [ 293.317424][T12704] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 293.703052][T12719] __nla_validate_parse: 5 callbacks suppressed [ 293.703075][T12719] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1936'. [ 293.798799][T12724] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1938'. [ 293.901777][T12719] lo: left promiscuous mode [ 293.906478][T12719] lo: left allmulticast mode [ 293.944350][T12719] tunl0: left promiscuous mode [ 293.981309][T12719] tunl0: left allmulticast mode [ 293.998977][T12719] gre0: left promiscuous mode [ 294.037195][T12719] gre0: left allmulticast mode [ 294.053973][T12719] gretap0: left promiscuous mode [ 294.072368][T12719] gretap0: left allmulticast mode [ 294.100940][T12719] ip_vti0: left promiscuous mode [ 294.106604][T12737] ip_tunnel: non-ECT from 2.0.0.0 with TOS=0x3 [ 294.138698][T12719] ip6gre0: left promiscuous mode [ 294.147227][T12719] ip6gre0: left allmulticast mode [ 294.197238][T12719] bond0: left allmulticast mode [ 294.237914][T12719] veth0_to_bond: left allmulticast mode [ 294.286601][T12719] veth1_vlan: left allmulticast mode [ 294.300563][T12745] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1944'. [ 294.330460][T12719] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 294.353817][T12719] hsr1: Slave A (dummy0) is not up; please bring it up to get a fully working HSR network [ 294.364998][T12719] hsr1: Slave B (batadv_slave_1) is not up; please bring it up to get a fully working HSR network [ 294.391262][T12719] 8021q: adding VLAN 0 to HW filter on device bond1 [ 294.414100][T12719] 8021q: adding VLAN 0 to HW filter on device bond2 [ 294.429768][T12719] ip6gre2: left allmulticast mode [ 294.438639][T12719] macvtap1: left promiscuous mode [ 294.445965][T12719] vlan0: left promiscuous mode [ 294.454025][T12719] macvtap1: left allmulticast mode [ 294.465828][T12719] vlan0: left allmulticast mode [ 294.473638][T12719] veth0_vlan: left allmulticast mode [ 294.485168][T12719] veth1: left promiscuous mode [ 294.502053][T12719] 8021q: adding VLAN 0 to HW filter on device bond4 [ 294.618445][ T2139] bond3: (slave veth1): link status definitely up, 10000 Mbps full duplex [ 294.678541][ T2139] bond3: (slave veth1): making interface the new active one [ 294.718959][ T2139] bond3: active interface up! [ 294.759456][T12754] netlink: 'syz.4.1947': attribute type 40 has an invalid length. [ 294.796950][T12754] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1947'. [ 294.834616][T12754] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 294.930906][T12757] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 294.940398][T12757] team0: Port device batadv1 added [ 294.977441][T12766] netlink: 'syz.1.1951': attribute type 5 has an invalid length. [ 295.150788][T12776] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1954'. [ 295.565645][T12791] FAULT_INJECTION: forcing a failure. [ 295.565645][T12791] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 295.585964][T12791] CPU: 0 UID: 0 PID: 12791 Comm: syz.3.1960 Not tainted syzkaller #0 PREEMPT(full) [ 295.585996][T12791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 295.586008][T12791] Call Trace: [ 295.586015][T12791] [ 295.586025][T12791] dump_stack_lvl+0x189/0x250 [ 295.586057][T12791] ? __pfx____ratelimit+0x10/0x10 [ 295.586084][T12791] ? __pfx_dump_stack_lvl+0x10/0x10 [ 295.586107][T12791] ? __pfx__printk+0x10/0x10 [ 295.586136][T12791] ? __might_fault+0xb0/0x130 [ 295.586176][T12791] should_fail_ex+0x414/0x560 [ 295.586208][T12791] set_fd_set+0x3a/0xa0 [ 295.586234][T12791] core_sys_select+0x8d5/0xa20 [ 295.586303][T12791] ? __pfx_core_sys_select+0x10/0x10 [ 295.586357][T12791] ? __pfx_set_user_sigmask+0x10/0x10 [ 295.586399][T12791] __se_sys_pselect6+0x27a/0x300 [ 295.586431][T12791] ? __pfx___se_sys_pselect6+0x10/0x10 [ 295.586459][T12791] ? rcu_is_watching+0x15/0xb0 [ 295.586486][T12791] ? __x64_sys_pselect6+0x21/0xf0 [ 295.586516][T12791] do_syscall_64+0xfa/0x3b0 [ 295.586542][T12791] ? lockdep_hardirqs_on+0x9c/0x150 [ 295.586566][T12791] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.586586][T12791] ? clear_bhb_loop+0x60/0xb0 [ 295.586609][T12791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.586628][T12791] RIP: 0033:0x7f7feb58ebe9 [ 295.586648][T12791] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 295.586666][T12791] RSP: 002b:00007f7fec4a0038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 295.586691][T12791] RAX: ffffffffffffffda RBX: 00007f7feb7b5fa0 RCX: 00007f7feb58ebe9 [ 295.586705][T12791] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000040 [ 295.586718][T12791] RBP: 00007f7fec4a0090 R08: 0000200000000280 R09: 0000000000000000 [ 295.586732][T12791] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 295.586744][T12791] R13: 00007f7feb7b6038 R14: 00007f7feb7b5fa0 R15: 00007fff84bc0e78 [ 295.586779][T12791] [ 296.201424][T12814] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 296.356747][T12823] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1965'. [ 296.387629][T12823] netlink: zone id is out of range [ 296.400883][T12823] netlink: get zone limit has 8 unknown bytes [ 297.247603][T12854] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1974'. [ 297.271118][T12854] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1974'. [ 297.292807][T12853] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 297.464482][T12857] netlink: 'syz.1.1975': attribute type 10 has an invalid length. [ 297.543217][T12857] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 298.183528][T12890] IPVS: length: 156 != 24 [ 298.357410][T12898] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1988'. [ 298.694409][T12885] infiniband syz!: set down [ 298.699133][T12885] infiniband syz!: added team_slave_0 [ 298.799416][T12885] RDS/IB: syz!: added [ 298.803529][T12885] smc: adding ib device syz! with port count 1 [ 298.849114][T12885] smc: ib device syz! port 1 has pnetid [ 298.922311][T12918] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1991'. [ 300.262371][T12960] netlink: 280 bytes leftover after parsing attributes in process `syz.3.2006'. [ 300.379651][T12964] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2007'. [ 300.691020][T12976] netlink: 'syz.3.2010': attribute type 1 has an invalid length. [ 300.942300][T12976] 8021q: adding VLAN 0 to HW filter on device bond2 [ 300.963006][T12988] netlink: 'syz.2.2013': attribute type 1 has an invalid length. [ 300.985458][T12988] netlink: 'syz.2.2013': attribute type 2 has an invalid length. [ 301.018150][T12988] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2013'. [ 301.073684][T12989] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2015'. [ 301.093477][T12980] 8021q: adding VLAN 0 to HW filter on device bond2 [ 301.121922][T12980] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 301.183448][T12980] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 301.708384][T13005] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2018'. [ 301.774006][T13008] tipc: Enabled bearer , priority 0 [ 301.955865][T13008] tipc: Disabling bearer [ 302.130824][T13020] syz.4.2025 (13020) used obsolete PPPIOCDETACH ioctl [ 302.158448][T13022] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2026'. [ 302.191887][T13020] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2025'. [ 302.203220][T13019] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2024'. [ 302.224679][T13027] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2026'. [ 302.227628][T13019] veth1_macvtap: left promiscuous mode [ 302.400073][T13030] bond0: (slave batadv0): Releasing backup interface [ 302.467546][T13030] batadv0: left promiscuous mode [ 302.527184][T13030] bridge_slave_0: left allmulticast mode [ 302.543161][T13030] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.613703][T13030] bond0: (slave bridge_slave_1): Releasing backup interface [ 302.643988][T13030] bridge_slave_1: left promiscuous mode [ 302.685842][T13030] bond0: (slave bond_slave_0): Releasing backup interface [ 302.714715][T13030] bond_slave_0: left promiscuous mode [ 302.731202][T13030] bond0: (slave bond_slave_1): Releasing backup interface [ 302.764763][T13030] bond_slave_1: left promiscuous mode [ 302.833582][T13030] team0: Port device team_slave_0 removed [ 302.897638][T13030] team0: Port device team_slave_1 removed [ 302.914635][T13030] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 302.930768][T13030] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 302.941971][T13030] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 302.950343][T13030] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 303.132028][ T5947] IPVS: starting estimator thread 0... [ 303.143471][T13052] IPVS: dh: SCTP 172.20.20.187:0 - no destination available [ 303.259152][T13053] IPVS: using max 25 ests per chain, 60000 per kthread [ 303.567510][T13064] netlink: 'syz.4.2036': attribute type 3 has an invalid length. [ 303.590457][T13064] sctp: [Deprecated]: syz.4.2036 (pid 13064) Use of struct sctp_assoc_value in delayed_ack socket option. [ 303.590457][T13064] Use struct sctp_sack_info instead [ 304.252311][T13098] __nla_validate_parse: 7 callbacks suppressed [ 304.252334][T13098] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2048'. [ 304.292372][T13098] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2048'. [ 304.531721][T13108] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 304.942890][T13125] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 305.174614][T13136] netlink: 'syz.4.2061': attribute type 1 has an invalid length. [ 305.325604][T13136] 8021q: adding VLAN 0 to HW filter on device bond5 [ 306.270013][T13187] netlink: 165 bytes leftover after parsing attributes in process `syz.4.2072'. [ 307.101164][T13209] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2080'. [ 307.146645][T13209] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2080'. [ 307.679434][T13231] lo: left promiscuous mode [ 307.753656][T13233] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 307.827783][T13231] sit0: left promiscuous mode [ 307.847403][T13231] sit0: left allmulticast mode [ 308.069111][T13231] wg1: left promiscuous mode [ 308.133706][T13231] veth0_to_team: left promiscuous mode [ 308.147430][T13231] veth0_to_team: left allmulticast mode [ 308.184367][T13231] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 308.237966][T13231] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 308.442227][T13231] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 308.576556][T13231] geneve2: left promiscuous mode [ 308.586141][T13231] geneve2: left allmulticast mode [ 308.664039][T13231] gretap1: left promiscuous mode [ 308.874614][ T2139] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 2816 - 0 [ 308.924812][ T2139] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.997236][ T2139] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 2816 - 0 [ 309.019961][ T2139] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.135961][ T2139] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 2816 - 0 [ 309.161425][ T2139] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.190032][T13275] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2098'. [ 309.196837][ T2139] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 2816 - 0 [ 309.223500][T13275] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2098'. [ 309.259032][ T2139] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.259242][T13275] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2098'. [ 309.298254][T13276] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 309.483092][T13283] netlink: 'syz.1.2101': attribute type 22 has an invalid length. [ 309.522769][T13283] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2101'. [ 309.593055][T13288] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2103'. [ 309.609028][T13283] netlink: 'syz.1.2101': attribute type 22 has an invalid length. [ 309.642029][T13288] netlink: 'syz.2.2103': attribute type 1 has an invalid length. [ 309.644497][T13283] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2101'. [ 309.878167][T13296] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2106'. [ 310.590672][T13326] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2116'. [ 310.896750][T13333] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.931044][T13345] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2120'. [ 311.154215][T13333] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.202148][T13354] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2123'. [ 311.220768][T13352] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 311.333476][T13333] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.548410][T13333] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.723208][T13336] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 311.899793][ T36] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.970985][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.146160][ T9605] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.187016][ T9605] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.431960][T13388] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 312.534610][T13392] netlink: 'syz.3.2135': attribute type 12 has an invalid length. [ 312.572792][T13392] netlink: 'syz.3.2135': attribute type 29 has an invalid length. [ 312.597387][T13392] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2135'. [ 312.640983][T13393] netlink: 'syz.3.2135': attribute type 12 has an invalid length. [ 312.687166][T13393] netlink: 'syz.3.2135': attribute type 29 has an invalid length. [ 312.716067][T13392] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2135'. [ 312.764950][T13395] syzkaller1: entered promiscuous mode [ 312.785367][T13395] syzkaller1: entered allmulticast mode [ 313.148977][T13406] netlink: 'syz.4.2139': attribute type 10 has an invalid length. [ 313.171504][T13405] netlink: 'syz.4.2139': attribute type 10 has an invalid length. [ 313.251249][T13406] team0: Device dummy0 failed to register rx_handler [ 313.686063][T13429] netlink: 'syz.0.2148': attribute type 21 has an invalid length. [ 314.175279][T13448] net veth1_virt_wifi .: renamed from virt_wifi0 [ 314.436570][T13448] syzkaller1: entered promiscuous mode [ 314.467654][T13448] syzkaller1: entered allmulticast mode [ 314.702556][T13478] __nla_validate_parse: 9 callbacks suppressed [ 314.702581][T13478] netlink: 576 bytes leftover after parsing attributes in process `syz.3.2159'. [ 314.805874][T13483] pimreg3: entered allmulticast mode [ 314.989685][T13491] netlink: 171704 bytes leftover after parsing attributes in process `syz.3.2163'. [ 315.010406][T13496] netlink: 'syz.0.2164': attribute type 10 has an invalid length. [ 315.096246][T13496] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 315.297924][T13508] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2168'. [ 315.376632][T13511] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2171'. [ 315.654203][T13527] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 315.699505][T13527] netlink: 'syz.1.2174': attribute type 10 has an invalid length. [ 315.707645][T13527] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 315.761729][T13527] bond0: (slave bond_slave_0): Releasing backup interface [ 315.816027][T13527] bond0: (slave bond_slave_1): Releasing backup interface [ 315.864416][T13536] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 315.885295][T13527] team_slave_0: left promiscuous mode [ 315.909104][T13527] team0: Port device team_slave_0 removed [ 315.938497][T13538] netlink: 'syz.3.2178': attribute type 7 has an invalid length. [ 315.947361][T13527] team_slave_1: left promiscuous mode [ 315.968687][T13527] team0: Port device team_slave_1 removed [ 315.975657][T13527] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 315.984153][T13527] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 315.994208][T13527] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 316.002755][T13527] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 316.024617][T13527] bond0: (slave wlan1): Releasing backup interface [ 316.039169][T13527] tipc: Resetting bearer [ 316.050927][T13527] veth1_to_bond: left allmulticast mode [ 316.056685][T13527] veth1_to_bond: left promiscuous mode [ 316.071344][T13527] team0: Port device macvlan4 removed [ 316.120134][T13538] : entered promiscuous mode [ 316.607908][T13569] sctp: [Deprecated]: syz.2.2188 (pid 13569) Use of struct sctp_assoc_value in delayed_ack socket option. [ 316.607908][T13569] Use struct sctp_sack_info instead [ 316.668990][T13569] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2188'. [ 316.725522][T13572] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2189'. [ 316.751252][T13572] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2189'. [ 316.773771][T13569] vlan2: entered allmulticast mode [ 316.803706][T13569] erspan0: entered allmulticast mode [ 317.025675][T13574] syzkaller0: entered promiscuous mode [ 317.037629][T13574] syzkaller0: entered allmulticast mode [ 317.052688][T13576] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ULvyآDUDw}z [ 318.002293][ T5232] udevd[5232]: worker [9932] terminated by signal 33 (Unknown signal 33) [ 318.023341][ T5232] udevd[5232]: worker [9932] failed while handling '/devices/virtual/block/loop2' [ 318.116511][T13625] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2206'. [ 318.540395][T13648] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2213'. [ 318.552788][T13648] netlink: 'syz.2.2213': attribute type 5 has an invalid length. [ 318.569580][T13648] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2213'. [ 318.660596][T13650] gretap0: entered promiscuous mode [ 318.680245][T13650] gretap0: left promiscuous mode [ 318.761269][T13652] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 318.916451][T13662] netlink: 'syz.1.2219': attribute type 1 has an invalid length. [ 319.002931][T13667] netlink: 'syz.4.2220': attribute type 21 has an invalid length. [ 319.013332][T13667] netlink: 'syz.4.2220': attribute type 1 has an invalid length. [ 319.283772][T13679] netlink: 'syz.4.2223': attribute type 1 has an invalid length. [ 319.444164][T13685] 8021q: adding VLAN 0 to HW filter on device bond7 [ 319.454995][T13685] bond6: (slave bond7): making interface the new active one [ 319.463939][T13685] bond6: (slave bond7): Enslaving as an active interface with an up link [ 319.508826][T13679] bond6: entered promiscuous mode [ 319.513986][T13679] bond7: entered promiscuous mode [ 319.526497][T13679] bond6: entered allmulticast mode [ 319.532593][T13679] bond7: entered allmulticast mode [ 319.541683][T13679] 8021q: adding VLAN 0 to HW filter on device bond6 [ 319.695289][T13707] netlink: 'syz.0.2227': attribute type 11 has an invalid length. [ 319.915345][T13722] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 319.935474][T13719] tipc: Enabled bearer , priority 0 [ 319.972283][T13719] syzkaller0: entered promiscuous mode [ 319.994685][T13719] syzkaller0: entered allmulticast mode [ 320.022322][T13719] netlink: 'syz.4.2233': attribute type 2 has an invalid length. [ 320.056185][T13719] netlink: 'syz.4.2233': attribute type 8 has an invalid length. [ 320.083637][T13719] __nla_validate_parse: 3 callbacks suppressed [ 320.083658][T13719] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2233'. [ 320.097677][T13730] tipc: Resetting bearer [ 320.142555][T13731] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2237'. [ 320.164629][T13716] tipc: Resetting bearer [ 320.236413][T13716] tipc: Disabling bearer [ 320.548156][T13767] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2246'. [ 320.580890][T13769] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 320.581363][T13754] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 323.147197][T13792] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2252'. [ 323.267854][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.275758][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.375735][T13808] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2258'. [ 323.403136][T13808] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 323.436338][T13811] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2259'. [ 323.665309][T13823] netlink: 'syz.2.2263': attribute type 4 has an invalid length. [ 325.904793][T13817] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 325.913578][T13817] team0: Device macvtap1 is already an upper device of the team interface [ 326.095455][T13843] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 326.335143][T13858] netlink: 'syz.4.2275': attribute type 10 has an invalid length. [ 326.378133][T13858] veth1_macvtap: left promiscuous mode [ 326.886193][T13897] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2287'. [ 326.888125][T13896] netlink: 'syz.3.2286': attribute type 11 has an invalid length. [ 326.987561][T13901] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2288'. [ 327.192503][T13910] netdevsim netdevsim3 : renamed from netdevsim0 [ 327.623525][T13930] netlink: 'syz.4.2298': attribute type 16 has an invalid length. [ 327.670751][T13930] netlink: 'syz.4.2298': attribute type 17 has an invalid length. [ 327.916527][T13930] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 328.176104][T13930] bond6: left promiscuous mode [ 328.205456][T13930] bond7: left promiscuous mode [ 328.221615][T13930] bond6: left allmulticast mode [ 328.234694][T13930] bond7: left allmulticast mode [ 328.342512][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 328.367509][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 328.375863][ T5927] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 328.647664][ T5927] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 328.773402][T13974] IPv6: Can't replace route, no match found [ 328.942700][T13978] delete_channel: no stack [ 328.961538][T13980] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 328.975704][T13978] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2307'. [ 329.128771][ T5927] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 331.054560][ T12] ip6_tunnel: ? xmit: Local address not yet configured! [ 331.062923][ T12] ip6_tunnel: ? xmit: Local address not yet configured! [ 331.073137][T13969] netlink: 240 bytes leftover after parsing attributes in process `syz.1.2305'. [ 331.082774][ T5927] ip6_tunnel: ? xmit: Local address not yet configured! [ 331.250643][T13989] tipc: Enabled bearer , priority 10 [ 331.419489][T13999] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2311'. [ 331.440210][T13999] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2311'. [ 331.467788][T14003] netlink: 124 bytes leftover after parsing attributes in process `syz.0.2315'. [ 331.467868][ T5927] ip6_tunnel: ? xmit: Local address not yet configured! [ 331.483119][T14005] netlink: 'syz.3.2314': attribute type 1 has an invalid length. [ 331.611560][T14008] geneve2: entered promiscuous mode [ 331.616531][T14005] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2314'. [ 331.617449][T14008] geneve2: entered allmulticast mode [ 331.633918][ T9600] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 331.643308][ T9600] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 331.663589][ T9605] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 331.677128][ T5927] ip6_tunnel: ? xmit: Local address not yet configured! [ 331.685650][ T9605] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 331.710140][T14005] macvlan2: entered promiscuous mode [ 331.715612][T14005] macvlan2: entered allmulticast mode [ 331.796150][T14004] syzkaller0: entered promiscuous mode [ 331.805946][T14004] syzkaller0: entered allmulticast mode [ 331.827645][T14010] tipc: Enabled bearer , priority 0 [ 331.937200][T14025] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.2320'. [ 331.973063][T14016] bond4: entered allmulticast mode [ 331.992172][T14016] 8021q: adding VLAN 0 to HW filter on device bond4 [ 333.923069][T14045] netlink: 'syz.4.2326': attribute type 7 has an invalid length. [ 334.051974][T14059] netlink: 'syz.2.2328': attribute type 1 has an invalid length. [ 334.806164][T14100] 8021q: adding VLAN 0 to HW filter on device bond6 [ 335.127017][ C0] ip6_tnl_xmit_ctl: 1 callbacks suppressed [ 335.127042][ C0] ip6_tunnel: ? xmit: Local address not yet configured! [ 335.221566][T14124] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2351'. [ 335.566144][T14142] bridge_slave_0: default FDB implementation only supports local addresses [ 335.619091][T14150] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 335.770417][T14154] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2361'. [ 336.276413][T14172] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 336.431084][T14189] tipc: Resetting bearer [ 336.556432][T14196] tipc: Resetting bearer [ 336.644834][T14198] netem: change failed [ 336.698261][T14191] tipc: Resetting bearer [ 336.875150][ T9604] tipc: Resetting bearer [ 337.043802][T14225] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2383'. [ 337.314605][T14242] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2387'. [ 337.499394][T14247] netem: change failed [ 337.661931][T14255] netlink: 'syz.0.2390': attribute type 3 has an invalid length. [ 337.695170][T14255] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 338.153201][T14279] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2400'. [ 338.464222][T14294] netlink: 'syz.4.2407': attribute type 24 has an invalid length. [ 338.481715][T14298] sctp: [Deprecated]: syz.2.2406 (pid 14298) Use of int in max_burst socket option deprecated. [ 338.481715][T14298] Use struct sctp_assoc_value instead [ 338.679143][T14305] pim6reg527: entered allmulticast mode [ 338.737033][T14307] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2409'. [ 339.090983][T14324] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 339.154387][T14332] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2418'. [ 339.249563][T14332] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2418'. [ 339.666027][T14356] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2426'. [ 339.671066][ T30] audit: type=1107 audit(1755775570.956:5): pid=14355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 339.706673][T14356] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2426'. [ 339.756214][T14362] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 339.921598][T14374] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2430'. [ 340.095710][T14377] tipc: Enabled bearer , priority 0 [ 340.105402][T14377] syzkaller0: entered promiscuous mode [ 340.114021][T14377] syzkaller0: entered allmulticast mode [ 340.142263][T14377] tipc: Resetting bearer [ 340.200366][T14376] tipc: Resetting bearer [ 340.270409][T14382] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2432'. [ 340.296182][T14389] netlink: 'syz.2.2435': attribute type 21 has an invalid length. [ 340.304550][T14389] IPv6: NLM_F_CREATE should be specified when creating new route [ 340.313053][T14389] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 340.320383][T14389] IPv6: NLM_F_CREATE should be set when creating new route [ 340.326962][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 340.327753][T14389] IPv6: NLM_F_CREATE should be set when creating new route [ 340.342625][T14389] IPv6: NLM_F_CREATE should be set when creating new route [ 340.355206][T14376] tipc: Disabling bearer [ 340.984950][T14418] 0{X: entered promiscuous mode [ 340.995842][T14418] 1{X: renamed from 30{X [ 341.016124][T14418] 1{X: left promiscuous mode [ 341.034086][T14418] 1{X: entered allmulticast mode [ 341.051608][T14418] A link change request failed with some changes committed already. Interface 31{X may have been left with an inconsistent configuration, please check. [ 342.115626][T14486] __nla_validate_parse: 4 callbacks suppressed [ 342.115646][T14486] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2465'. [ 342.173418][T14486] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2465'. [ 342.362579][T14492] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2467'. [ 342.569318][ T9605] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 342.760506][T14513] tc_dump_action: action bad kind [ 342.772157][T14515] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 342.865047][T14515] lo speed is unknown, defaulting to 1000 [ 342.885921][T14520] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2475'. [ 342.965754][T14525] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2476'. [ 343.156102][T14529] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 343.272563][T14538] nbd: socks must be embedded in a SOCK_ITEM attr [ 343.492169][T14542] syz.4.2480 uses old SIOCAX25GETINFO [ 343.527103][ C0] ip6_tunnel: ? xmit: Local address not yet configured! [ 343.948478][T14561] gre0: entered promiscuous mode [ 344.229055][T14570] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 344.273183][T14572] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 344.352196][T14576] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2490'. [ 344.552338][T14594] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2492'. [ 344.765292][T14603] wlan1: mtu less than device minimum [ 344.866196][T14613] netlink: 'syz.4.2498': attribute type 1 has an invalid length. [ 344.919571][T14622] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2498'. [ 344.941125][T14613] 8021q: adding VLAN 0 to HW filter on device bond8 [ 345.174576][T14621] netlink: 'syz.0.2500': attribute type 10 has an invalid length. [ 345.344595][T14622] bond8 (unregistering): Released all slaves [ 345.811957][T14648] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2505'. [ 346.394687][T14676] netlink: 19 bytes leftover after parsing attributes in process `syz.3.2513'. [ 346.588401][T14684] netlink: 'syz.3.2517': attribute type 10 has an invalid length. [ 346.598439][T14684] batman_adv: batadv0: Adding interface: team0 [ 346.605103][T14684] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.631827][T14684] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 347.047584][ T12] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 347.057018][ T12] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 347.263399][T14702] netlink: 'syz.0.2523': attribute type 11 has an invalid length. [ 347.274747][T14702] netlink: 'syz.0.2523': attribute type 11 has an invalid length. [ 347.283812][T14702] __nla_validate_parse: 2 callbacks suppressed [ 347.283828][T14702] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2523'. [ 347.414533][T14710] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2525'. [ 347.423911][T14710] tc_dump_action: action bad kind [ 347.611950][T14718] veth0: entered promiscuous mode [ 347.643223][T14718] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2528'. [ 347.816252][T14729] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2532'. [ 347.904922][T14734] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2532'. [ 347.929396][T14723] batadv_slave_0: entered promiscuous mode [ 347.978562][T14733] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap0 [ 347.996139][T14733] gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 348.004528][T14733] gretap0: entered promiscuous mode [ 348.013024][T14733] gretap0: entered allmulticast mode [ 348.060308][T14717] batadv_slave_0: left promiscuous mode [ 348.303659][T14746] bridge2: entered allmulticast mode [ 348.387860][T14756] netlink: 'syz.3.2538': attribute type 1 has an invalid length. [ 348.393831][T14754] nbd: socks must be embedded in a SOCK_ITEM attr [ 348.499715][T14760] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2538'. [ 348.570587][T14763] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2542'. [ 350.131152][T14751] bond0: entered promiscuous mode [ 350.136565][T14751] bond0: entered allmulticast mode [ 350.224319][T14757] bond0: (slave gretap2): Enslaving as an active interface with an up link [ 350.253109][T14760] 8021q: adding VLAN 0 to HW filter on device bond4 [ 350.296018][T14767] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2542'. [ 350.309682][T14767] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2542'. [ 350.318985][T14767] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2542'. [ 350.384545][T14782] macvlan5: entered promiscuous mode [ 350.405346][T14782] macvlan5: entered allmulticast mode [ 350.415026][T14782] veth1_to_bond: entered promiscuous mode [ 350.435206][T14782] veth1_to_bond: entered allmulticast mode [ 350.449941][T14782] team0: Port device macvlan5 added [ 350.473881][T14786] syz_tun: entered allmulticast mode [ 350.492291][T14782] IPVS: dh: SCTP 172.20.20.187:0 - no destination available [ 350.518009][T14781] syz_tun: left allmulticast mode [ 351.472087][T14845] netlink: 'syz.2.2564': attribute type 29 has an invalid length. [ 351.490502][T14845] netlink: 'syz.2.2564': attribute type 29 has an invalid length. [ 352.596150][ T5927] IPVS: starting estimator thread 0... [ 352.687588][T14900] IPVS: using max 26 ests per chain, 62400 per kthread [ 352.780678][T14908] __nla_validate_parse: 3 callbacks suppressed [ 352.780700][T14908] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2581'. [ 352.803646][T14908] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2581'. [ 353.141601][ T30] audit: type=1107 audit(1755775584.436:6): pid=14924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='&_/ޕҖiø?cx6ڭ~ux _EEa($~^8b%E%GYA=16ʹ=@J)0@m!`&)'U(R7jB=-kl/V|w-mj|G?fϾ, priority 10 [ 353.681209][T14958] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2597'. [ 353.744451][T14962] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2596'. [ 353.980534][T14973] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 354.017685][T14973] netlink: 'syz.0.2600': attribute type 10 has an invalid length. [ 354.044554][T14973] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 354.099047][T14973] netlink: 'syz.0.2600': attribute type 6 has an invalid length. [ 354.129529][T14973] netlink: 'syz.0.2600': attribute type 1 has an invalid length. [ 354.145927][T14973] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.2600'. [ 354.448214][T14995] netlink: 'syz.4.2607': attribute type 142 has an invalid length. [ 355.210785][T15040] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2620'. [ 355.687069][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 355.810595][T15063] netlink: 120 bytes leftover after parsing attributes in process `syz.3.2628'. [ 355.960601][T15067] tipc: Enabled bearer , priority 0 [ 356.010064][T15074] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 356.026940][T15070] netlink: 'syz.3.2631': attribute type 1 has an invalid length. [ 356.091545][T15079] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2630'. [ 356.125162][T15079] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2630'. [ 356.166299][T15079] delete_channel: no stack [ 356.168952][T15067] syzkaller0: entered promiscuous mode [ 356.213334][T15067] syzkaller0: entered allmulticast mode [ 356.261650][T15067] tipc: Resetting bearer [ 356.359275][T15070] 8021q: adding VLAN 0 to HW filter on device bond5 [ 356.554659][T15101] netlink: 'syz.1.2639': attribute type 1 has an invalid length. [ 356.720692][T15066] tipc: Resetting bearer [ 357.343797][T15144] openvswitch: netlink: Geneve opt len 62 is not a multiple of 4. [ 358.680277][T15066] tipc: Disabling bearer [ 358.702700][T15136] lo: entered allmulticast mode [ 358.734615][T15140] lo: left allmulticast mode [ 359.080598][T15169] __nla_validate_parse: 3 callbacks suppressed [ 359.080619][T15169] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2657'. [ 359.215422][T15179] netlink: 'syz.2.2659': attribute type 5 has an invalid length. [ 359.365156][T15183] netlink: 'syz.2.2663': attribute type 1 has an invalid length. [ 359.390151][T15183] netlink: 'syz.2.2663': attribute type 4 has an invalid length. [ 359.411218][T15183] netlink: 192 bytes leftover after parsing attributes in process `syz.2.2663'. [ 359.489699][T15189] netlink: 'syz.0.2661': attribute type 1 has an invalid length. [ 359.515971][T15195] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2665'. [ 360.167017][ C0] ip6_tunnel: ? xmit: Local address not yet configured! [ 360.229408][T15233] netlink: 'syz.3.2675': attribute type 1 has an invalid length. [ 360.325243][T15241] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2677'. [ 360.340382][T15233] 8021q: adding VLAN 0 to HW filter on device bond6 [ 360.409812][T15249] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 360.425249][T15249] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 360.437957][T15249] batman_adv: batadv0: Removing interface: team0 [ 360.481489][T15249] batadv0 (unregistering): left allmulticast mode [ 360.500844][T15249] batadv0 (unregistering): left promiscuous mode [ 360.517249][T15249] bridge0: port 2(batadv0) entered disabled state [ 360.694792][T15267] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 360.785671][T15272] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 361.069938][T15292] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2693'. [ 361.607147][T15310] syzkaller1: entered promiscuous mode [ 361.612843][T15310] syzkaller1: entered allmulticast mode [ 361.692292][T15314] tipc: Enabling of bearer rejected, already enabled [ 361.730657][T15314] netlink: 39 bytes leftover after parsing attributes in process `syz.0.2702'. [ 361.753135][T15314] tipc: Resetting bearer [ 361.979434][T15325] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2707'. [ 361.991916][T15325] nbd: illegal input index -8454144 [ 362.000645][T15325] sock: sock_timestamping_bind_phc: sock not bind to device [ 362.152754][T15335] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 362.223820][T15343] netlink: 'syz.0.2711': attribute type 1 has an invalid length. [ 362.264829][T15346] netlink: 'syz.0.2711': attribute type 1 has an invalid length. [ 362.348801][T15350] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2713'. [ 362.367572][T15353] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2714'. [ 362.395127][T15352] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2713'. [ 362.417238][T15353] netlink: 'syz.4.2714': attribute type 21 has an invalid length. [ 362.624522][T15367] netlink: 'syz.2.2717': attribute type 1 has an invalid length. [ 362.970254][T15393] veth0_to_bridge: entered promiscuous mode [ 362.975413][T15390] netlink: 'syz.3.2725': attribute type 2 has an invalid length. [ 362.991562][T15390] nbd: must specify a device to reconfigure [ 363.084197][T15393] veth0_to_bridge: left promiscuous mode [ 363.137879][T15402] netlink: 'syz.3.2725': attribute type 7 has an invalid length. [ 363.585398][T15426] bond0: (slave bridge_slave_1): Releasing backup interface [ 363.604546][T15426] bond0: (slave bridge_slave_1): the permanent HWaddr of slave - 66:fd:be:8e:39:91 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 363.664221][T15426] bond0: (slave wlan1): Releasing backup interface [ 363.695298][T15426] tipc: Resetting bearer [ 363.803773][T15439] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 363.850920][T15437] netlink: 'syz.4.2739': attribute type 4 has an invalid length. [ 363.869979][T15437] netlink: 'syz.4.2739': attribute type 1 has an invalid length. [ 364.142878][T15450] bond6: entered promiscuous mode [ 364.159801][T15450] bond6: entered allmulticast mode [ 364.166141][T15450] 8021q: adding VLAN 0 to HW filter on device bond6 [ 364.204915][T15450] bond7: entered promiscuous mode [ 364.212007][T15450] bond7: entered allmulticast mode [ 364.217937][T15450] 8021q: adding VLAN 0 to HW filter on device bond7 [ 364.311589][T15450] bond8: entered promiscuous mode [ 364.323208][T15450] bond8: entered allmulticast mode [ 364.332566][T15450] 8021q: adding VLAN 0 to HW filter on device bond8 [ 364.450454][T15450] bond9: entered promiscuous mode [ 364.456119][T15450] bond9: entered allmulticast mode [ 364.475409][T15450] 8021q: adding VLAN 0 to HW filter on device bond9 [ 364.510421][T15473] __nla_validate_parse: 14 callbacks suppressed [ 364.510440][T15473] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2748'. [ 364.600369][T15450] bond10: entered promiscuous mode [ 364.605853][T15450] bond10: entered allmulticast mode [ 364.613144][T15450] 8021q: adding VLAN 0 to HW filter on device bond10 [ 364.649724][T15479] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2750'. [ 364.721465][T15473] hsr_slave_1 (unregistering): left promiscuous mode [ 364.761657][T15450] bond11: entered promiscuous mode [ 364.767211][T15450] bond11: entered allmulticast mode [ 364.773469][T15450] 8021q: adding VLAN 0 to HW filter on device bond11 [ 364.795459][T15450] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 364.881893][T15488] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2752'. [ 364.920071][T15481] netlink: 'syz.4.2751': attribute type 16 has an invalid length. [ 364.928131][T15481] netlink: 'syz.4.2751': attribute type 17 has an invalid length. [ 365.172901][T15481] geneve2: left promiscuous mode [ 365.182029][T15481] geneve2: left allmulticast mode [ 365.189898][ T892] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 365.203491][ T892] ip6_tunnel: ? xmit: Local address not yet configured! [ 365.204917][T15501] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2756'. [ 365.228725][T15501] openvswitch: netlink: Flow key attr not present in new flow. [ 365.309072][T15506] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2758'. [ 365.430210][ T892] ip6_tunnel: ? xmit: Local address not yet configured! [ 365.455342][T15510] syzkaller0: entered promiscuous mode [ 365.466876][T15510] syzkaller0: entered allmulticast mode [ 365.794851][T15528] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2766'. [ 365.798291][T15524] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2765'. [ 365.830535][T15530] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2768'. [ 365.976246][T15535] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2770'. [ 366.009842][ T892] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 366.145841][T15544] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2773'. [ 366.211450][T15550] net veth1_virt_wifi .: renamed from virt_wifi0 [ 366.333656][T15552] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 367.053721][ T5870] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 367.066093][ T5870] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 367.077537][ T5870] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 367.086720][ T5870] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 367.098247][ T5870] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 367.172414][T15587] lo speed is unknown, defaulting to 1000 [ 367.338724][ T9604] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 367.354501][ T9604] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.365149][ T9604] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 367.504804][ T9604] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 367.516412][ T9604] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.528759][ T9604] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 367.685331][ T9604] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 367.714004][ T9604] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.741409][ T9604] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 368.039335][ T9604] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 368.051498][ T9604] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.065320][ T9604] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 368.521282][T15647] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 369.129448][ T5870] Bluetooth: hci5: command tx timeout [ 369.777878][ T9604] bond0 (unregistering): Released all slaves [ 369.914262][ T9604] bond1 (unregistering): Released all slaves [ 370.113628][ T9604] bond2 (unregistering): Released all slaves [ 370.273455][ T9604] bond3 (unregistering): (slave veth1): Releasing active interface [ 370.285625][ T9604] bond3 (unregistering): Released all slaves [ 370.441495][ T9604] bond4 (unregistering): Released all slaves [ 370.594382][ T9604] bond5 (unregistering): Released all slaves [ 370.748644][ T9604] bond6 (unregistering): (slave bond7): Releasing backup interface [ 370.757714][ T9604] bond6 (unregistering): Released all slaves [ 370.910247][ T9604] bond7 (unregistering): Released all slaves [ 370.929186][T15654] __nla_validate_parse: 5 callbacks suppressed [ 370.929210][T15654] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2806'. [ 371.038746][T15668] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2810'. [ 371.071857][ T9604] : left promiscuous mode [ 371.174639][T15683] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2814'. [ 371.218276][ T5870] Bluetooth: hci5: command tx timeout [ 371.253090][T15683] veth4: entered promiscuous mode [ 371.278120][ T9604] tipc: Left network mode [ 371.444536][T15694] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2817'. [ 371.554563][T15694] vlan3: entered allmulticast mode [ 371.684709][T15587] chnl_net:caif_netlink_parms(): no params data found [ 371.751562][T15700] IPv6: sit1: Disabled Multicast RS [ 371.796401][T15702] validate_nla: 3 callbacks suppressed [ 371.796424][T15702] netlink: 'syz.0.2820': attribute type 13 has an invalid length. [ 372.035652][T15702] veth0_macvtap: left promiscuous mode [ 372.050957][T15702] macvtap0: entered allmulticast mode [ 372.064325][T15702] macvtap0: refused to change device tx_queue_len [ 372.193551][T15715] tipc: Enabling of bearer rejected, already enabled [ 372.205448][T15717] tipc: Resetting bearer [ 372.257843][T15726] veth0_to_team: entered promiscuous mode [ 372.290800][T15726] veth0_to_team: entered allmulticast mode [ 372.624534][T15587] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.663844][T15587] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.697161][T15587] bridge_slave_0: entered allmulticast mode [ 372.743382][T15587] bridge_slave_0: entered promiscuous mode [ 372.765158][T15587] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.784320][T15587] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.805655][T15587] bridge_slave_1: entered allmulticast mode [ 372.836390][T15587] bridge_slave_1: entered promiscuous mode [ 372.898244][T15743] macvlan0: entered promiscuous mode [ 372.903756][T15743] macvlan0: entered allmulticast mode [ 373.146585][T15756] netlink: 'syz.0.2836': attribute type 13 has an invalid length. [ 373.199920][ T9604] dummy0: left promiscuous mode [ 373.218264][ T9604] batadv_slave_1: left promiscuous mode [ 373.261307][ T9604] hsr_slave_0: left promiscuous mode [ 373.269665][ T9604] hsr_slave_1: left promiscuous mode [ 373.290522][ T5870] Bluetooth: hci5: command tx timeout [ 373.322558][ T9604] veth0_macvtap: left promiscuous mode [ 373.328899][ T9604] veth1_vlan: left promiscuous mode [ 373.334520][ T9604] veth0_vlan: left promiscuous mode [ 373.503479][ T9604] pim6reg527 (unregistering): left allmulticast mode [ 373.524510][T15785] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2842'. [ 374.486711][T15756] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 374.514199][T15587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 374.601764][T15587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 374.655511][T15791] sctp: [Deprecated]: syz.1.2843 (pid 15791) Use of int in max_burst socket option. [ 374.655511][T15791] Use struct sctp_assoc_value instead [ 374.755248][T15795] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 374.762574][T15795] IPv6: NLM_F_CREATE should be set when creating new route [ 374.769878][T15795] IPv6: NLM_F_CREATE should be set when creating new route [ 374.777142][T15795] IPv6: NLM_F_CREATE should be set when creating new route [ 374.785047][T15796] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 374.834287][T15587] team0: Port device team_slave_0 added [ 374.842389][T15795] tipc: Trying to set illegal importance in message [ 374.848738][T15587] team0: Port device team_slave_1 added [ 374.866686][T15800] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2847'. [ 374.972305][T15587] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 374.991595][T15587] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 375.042612][T15587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 375.058720][T15811] netlink: 'syz.2.2849': attribute type 3 has an invalid length. [ 375.069757][T15587] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 375.079248][T15587] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 375.111655][T15587] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 375.137583][T15812] tipc: Resetting bearer [ 375.230853][T15806] tipc: Resetting bearer [ 375.359306][ T9604] IPVS: stop unused estimator thread 0... [ 375.364011][T15587] hsr_slave_0: entered promiscuous mode [ 375.378979][ T5870] Bluetooth: hci5: command tx timeout [ 375.384123][T15587] hsr_slave_1: entered promiscuous mode [ 375.426740][T15587] debugfs: 'hsr0' already exists in 'hsr' [ 375.443322][T15587] Cannot create hsr debugfs directory [ 375.658413][ T9605] tipc: Resetting bearer [ 375.995153][T15850] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2857'. [ 376.353165][T15869] lo: entered allmulticast mode [ 376.578704][T15587] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 376.657939][T15879] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2865'. [ 376.689923][T15587] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 376.722040][T15885] openvswitch: netlink: Missing key (keys=40, expected=100) [ 376.825344][T15587] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 376.883974][T15587] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 377.073524][ T9600] netdevsim netdevsim3 : set [0, 0] type 1 family 0 port 8472 - 0 [ 377.093040][ T9600] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 377.103483][T15903] netlink: 'syz.0.2868': attribute type 1 has an invalid length. [ 377.112073][ T9600] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 377.170002][T15905] netlink: 'syz.2.2871': attribute type 83 has an invalid length. [ 377.200032][ T9600] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 377.209278][T15911] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2872'. [ 377.274153][T15909] 8021q: adding VLAN 0 to HW filter on device bond8 [ 377.294151][T15909] bond7: (slave bond8): making interface the new active one [ 377.313832][T15909] bond7: (slave bond8): Enslaving as an active interface with an up link [ 377.354396][T15587] 8021q: adding VLAN 0 to HW filter on device bond0 [ 377.391410][T15903] bond7: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 377.405906][T15903] bond7: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 377.470646][T15921] netlink: 'syz.1.2875': attribute type 10 has an invalid length. [ 377.500048][T15921] bridge_slave_1: entered promiscuous mode [ 377.516521][T15921] bridge_slave_1: entered allmulticast mode [ 377.539212][T15921] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 377.662279][T15933] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 377.665509][T15587] 8021q: adding VLAN 0 to HW filter on device team0 [ 377.754473][ T9599] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.761776][ T9599] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.836674][ T9599] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.845032][ T9599] bridge0: port 2(bridge_slave_1) entered forwarding state [ 377.935069][T15944] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2883'. [ 377.951466][T15944] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2883'. [ 378.055454][T15950] macvtap1: entered allmulticast mode [ 378.060933][T15950] veth0_macvtap: entered allmulticast mode [ 378.203708][T15956] netlink: 'syz.1.2886': attribute type 1 has an invalid length. [ 378.262092][T15962] netlink: 'syz.3.2888': attribute type 24 has an invalid length. [ 378.270539][T15963] netlink: 'syz.3.2888': attribute type 24 has an invalid length. [ 378.284483][T15956] bond12: entered promiscuous mode [ 378.291153][T15956] 8021q: adding VLAN 0 to HW filter on device bond12 [ 378.358315][T15961] 8021q: adding VLAN 0 to HW filter on device bond12 [ 378.365743][T15961] bond12: (slave wireguard0): The slave device specified does not support setting the MAC address [ 378.377357][T15961] bond12: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 378.400161][T15961] bond12: (slave wireguard0): making interface the new active one [ 378.415132][T15961] wireguard0: entered promiscuous mode [ 378.423328][T15961] bond12: (slave wireguard0): Enslaving as an active interface with an up link [ 378.539652][T15587] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 378.771122][T15983] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2892'. [ 378.792596][T15980] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2894'. [ 378.810537][T15983] macvlan0: left promiscuous mode [ 378.816410][T15983] macvlan0: left allmulticast mode [ 378.826302][T15983] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2892'. [ 378.850516][T15986] netlink: 'syz.0.2895': attribute type 2 has an invalid length. [ 378.850529][T15985] netlink: 'syz.0.2895': attribute type 2 has an invalid length. [ 378.850547][T15985] netlink: 'syz.0.2895': attribute type 8 has an invalid length. [ 378.881062][T15985] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2895'. [ 378.915243][T15986] netlink: 'syz.0.2895': attribute type 8 has an invalid length. [ 378.939294][T15986] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2895'. [ 379.293471][T16002] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 379.881928][T15587] veth0_vlan: entered promiscuous mode [ 379.930090][T15587] veth1_vlan: entered promiscuous mode [ 379.966145][T16024] sit0: entered promiscuous mode [ 380.066672][T15587] veth0_macvtap: entered promiscuous mode [ 380.093316][T15587] veth1_macvtap: entered promiscuous mode [ 380.154668][T15587] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 380.209630][T15587] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 380.242436][ T9600] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.267738][ T9600] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.299227][ T9600] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.325242][ T9600] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.700769][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.715910][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.799231][ T9605] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.819424][ T9605] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.470157][T16089] tipc: Resetting bearer [ 381.531675][T16087] tipc: Resetting bearer [ 381.763744][T16100] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 381.799913][T16100] IPVS: set_ctl: invalid protocol: 4 10.1.1.1:20000 [ 381.910692][ T1326] tipc: Resetting bearer [ 382.178247][T16116] __nla_validate_parse: 5 callbacks suppressed [ 382.178269][T16116] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2928'. [ 382.410041][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 382.418628][T16120] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 382.428364][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 382.431557][T16127] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2930'. [ 382.486077][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 382.504326][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 382.515119][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 382.573488][T16125] lo speed is unknown, defaulting to 1000 [ 382.755912][T16137] pim6reg1: entered promiscuous mode [ 382.761550][T16137] pim6reg1: entered allmulticast mode [ 382.871300][T16142] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2933'. [ 383.227018][T16156] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2938'. [ 383.370879][T16162] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2940'. [ 383.416222][ T1326] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 383.446580][ T6077] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 383.456219][ T1326] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 383.532218][T16169] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 383.797072][ T892] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 383.822571][T16185] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2948'. [ 383.856345][T16185] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2948'. [ 383.966889][T16192] macvlan0: entered allmulticast mode [ 383.973199][T16194] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2951'. [ 384.000213][T16194] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2951'. [ 384.037331][ T892] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 384.051991][T16192] syzkaller1: entered promiscuous mode [ 384.069794][T16192] syzkaller1: entered allmulticast mode [ 384.343144][T16125] chnl_net:caif_netlink_parms(): no params data found [ 384.488022][ T51] Bluetooth: hci1: command tx timeout [ 384.577606][ T51] Bluetooth: hci3: command tx timeout [ 384.758339][T16125] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.774433][T16125] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.782912][T16125] bridge_slave_0: entered allmulticast mode [ 384.797809][T16125] bridge_slave_0: entered promiscuous mode [ 384.871501][T16229] validate_nla: 3 callbacks suppressed [ 384.871520][T16229] netlink: 'syz.2.2957': attribute type 9 has an invalid length. [ 384.995004][T16125] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.006324][T16125] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.014489][T16125] bridge_slave_1: entered allmulticast mode [ 385.023637][T16125] bridge_slave_1: entered promiscuous mode [ 385.041353][T16232] tipc: Resetting bearer [ 385.232087][T16239] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.2960'. [ 385.357067][T16241] netlink: 'syz.4.2961': attribute type 10 has an invalid length. [ 385.376307][T16231] tipc: Resetting bearer [ 385.390531][T16125] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 385.434616][T16125] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 385.481463][T16241] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.491052][T16241] bridge_slave_1: left allmulticast mode [ 385.496731][T16241] bridge_slave_1: left promiscuous mode [ 385.510786][T16241] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.527947][T16241] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 385.596451][T16125] team0: Port device team_slave_0 added [ 385.625050][T16125] team0: Port device team_slave_1 added [ 385.719091][T16257] netlink: 'syz.4.2966': attribute type 1 has an invalid length. [ 385.834535][T16260] openvswitch: netlink: Missing key (keys=40, expected=100) [ 385.838892][T16125] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 385.861941][T16125] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 385.911875][T16125] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 385.950610][T16257] gretap1: entered promiscuous mode [ 385.967885][T16125] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 385.975012][T16125] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 386.022376][T16125] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 386.053397][T16263] tipc: Enabling of bearer rejected, failed to enable media [ 386.234926][T16125] hsr_slave_0: entered promiscuous mode [ 386.253318][T16125] hsr_slave_1: entered promiscuous mode [ 386.271148][T16125] debugfs: 'hsr0' already exists in 'hsr' [ 386.288506][T16125] Cannot create hsr debugfs directory [ 386.373414][T16277] nbd: must specify at least one socket [ 386.535045][T16281] sctp: [Deprecated]: syz.3.2975 (pid 16281) Use of int in maxseg socket option. [ 386.535045][T16281] Use struct sctp_assoc_value instead [ 386.584369][ T36] tipc: Resetting bearer [ 386.647397][ T51] Bluetooth: hci3: command tx timeout [ 386.806686][T16288] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.915031][T16288] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 386.931335][T16288] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 386.986601][T16288] macvlan0: left allmulticast mode [ 387.064214][T16288] gretap1: left promiscuous mode [ 387.103838][ T36] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.149821][ T36] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.190737][ T36] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.230481][ T36] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.293596][T16300] __nla_validate_parse: 2 callbacks suppressed [ 387.293626][T16300] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2980'. [ 387.298287][T16303] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 387.508353][T16313] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 387.611320][T16303] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 387.686030][T16125] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 387.701969][T16125] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.714560][T16125] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 387.725439][T16125] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 387.753097][T16321] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2984'. [ 387.762915][T16321] netlink: 6 bytes leftover after parsing attributes in process `syz.3.2984'. [ 387.936382][T16125] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 387.952831][T16125] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.963664][T16125] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 387.974830][T16125] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 388.026413][T16331] tipc: Enabled bearer , priority 0 [ 388.034255][T16331] syzkaller0: entered promiscuous mode [ 388.042253][T16331] syzkaller0: entered allmulticast mode [ 388.122750][T16125] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 388.134609][T16125] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.145190][T16125] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 388.156420][T16125] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 388.216998][T16331] tipc: Resetting bearer [ 388.226008][T16328] tipc: Resetting bearer [ 388.257388][T16328] tipc: Disabling bearer [ 388.301211][T16341] netlink: 18 bytes leftover after parsing attributes in process `syz.3.2990'. [ 388.388666][T16322] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2985'. [ 388.390987][T16344] openvswitch: netlink: IPv6 tunnel dst address is zero [ 388.596187][T16125] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 388.619561][T16125] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 388.656082][T16125] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 388.693637][T16125] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 388.727397][ T51] Bluetooth: hci3: command tx timeout [ 388.825811][T16364] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2996'. [ 388.859625][T16363] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2996'. [ 388.869514][T16362] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2996'. [ 388.920982][T16125] 8021q: adding VLAN 0 to HW filter on device bond0 [ 388.963659][T16366] tipc: Resetting bearer [ 388.994686][T16125] 8021q: adding VLAN 0 to HW filter on device team0 [ 389.015321][ T1326] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.022609][ T1326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 389.033832][T16366] sch_tbf: burst 4 is lower than device ip6tnl0 mtu (1536) ! [ 389.069956][T16365] tipc: Resetting bearer [ 389.096804][ T9604] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.104024][ T9604] bridge0: port 2(bridge_slave_1) entered forwarding state [ 389.685772][T16392] lo: entered promiscuous mode [ 389.695870][T16392] tunl0: entered promiscuous mode [ 389.713782][T16392] gre0: entered promiscuous mode [ 389.723537][T16392] gretap0: entered promiscuous mode [ 389.736045][T16392] erspan0: entered promiscuous mode [ 389.748974][T16392] ip_vti0: entered promiscuous mode [ 389.762358][T16125] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 389.772452][T16395] batadv_slave_1: entered promiscuous mode [ 389.783004][T16396] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3006'. [ 389.797790][T16396] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3006'. [ 389.828060][ T9599] tipc: Resetting bearer [ 389.845697][T16400] netlink: 'syz.3.3007': attribute type 1 has an invalid length. [ 389.866416][T16393] batadv_slave_1: left promiscuous mode [ 389.992194][T16400] macvlan3: entered promiscuous mode [ 390.026977][T16400] macvlan3: entered allmulticast mode [ 390.046463][T16400] bond7: entered promiscuous mode [ 390.073051][T16400] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 390.095965][T16400] bond7: left promiscuous mode [ 390.135432][T16414] netlink: 'syz.4.3012': attribute type 10 has an invalid length. [ 390.247726][T16125] veth0_vlan: entered promiscuous mode [ 390.274618][T16125] veth1_vlan: entered promiscuous mode [ 390.375779][T16125] veth0_macvtap: entered promiscuous mode [ 390.402539][T16125] veth1_macvtap: entered promiscuous mode [ 390.514122][T16125] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 390.521941][ T30] audit: type=1800 audit(1755775621.806:7): pid=16430 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3018" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=3180 res=0 errno=0 [ 390.569619][T16428] netlink: 'syz.4.3017': attribute type 39 has an invalid length. [ 390.600585][T16436] netlink: 'syz.2.3019': attribute type 11 has an invalid length. [ 390.630199][T16125] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 390.646270][ T9600] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.683654][ T9600] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.714904][ T9600] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.749843][ T9600] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.808100][ T51] Bluetooth: hci3: command tx timeout [ 390.834451][ T1326] nci: nci_rx_work: unknown MT 0x6 [ 391.626437][ T9604] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 391.654947][ T9604] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 391.743485][ T9599] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 391.761898][ T9599] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.603769][T16518] __nla_validate_parse: 3 callbacks suppressed [ 392.603789][T16518] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3040'. [ 392.629225][T16511] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 392.638887][ T1326] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 392.677354][T16518] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3040'. [ 392.962843][T16524] netlink: 'syz.0.3043': attribute type 21 has an invalid length. [ 392.972522][T16524] IPv6: NLM_F_CREATE should be specified when creating new route [ 393.126160][ T5870] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 393.141278][ T5870] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 393.149684][ T5870] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 393.161786][ T5870] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 393.169620][ T5870] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 393.211289][T16537] lo speed is unknown, defaulting to 1000 [ 393.665846][T16537] chnl_net:caif_netlink_parms(): no params data found [ 393.758201][T16537] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.765387][T16537] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.772700][T16537] bridge_slave_0: entered allmulticast mode [ 393.779923][T16537] bridge_slave_0: entered promiscuous mode [ 393.789266][T16537] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.796452][T16537] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.803779][T16537] bridge_slave_1: entered allmulticast mode [ 393.812411][T16537] bridge_slave_1: entered promiscuous mode [ 393.863765][T16537] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 393.884746][T16537] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 393.927068][T16537] team0: Port device team_slave_0 added [ 393.935452][T16537] team0: Port device team_slave_1 added [ 393.970087][T16537] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 393.977887][T16537] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 394.004181][T16537] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 394.016423][T16537] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 394.023750][T16537] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 394.050716][T16537] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 394.128588][T16537] hsr_slave_0: entered promiscuous mode [ 394.135524][T16537] hsr_slave_1: entered promiscuous mode [ 394.147743][T16537] debugfs: 'hsr0' already exists in 'hsr' [ 394.153506][T16537] Cannot create hsr debugfs directory [ 394.441427][T16537] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 394.456879][T16537] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.534472][T16537] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 394.544597][T16537] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.612365][T16537] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 394.622600][T16537] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.665161][T16537] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 394.675138][T16537] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.800284][T16537] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 394.813196][T16537] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 394.823069][T16537] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 394.835013][T16537] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 394.923241][T16537] 8021q: adding VLAN 0 to HW filter on device bond0 [ 394.943950][T16537] 8021q: adding VLAN 0 to HW filter on device team0 [ 394.960826][ T2139] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.968023][ T2139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 394.982553][ T2139] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.989840][ T2139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 395.207854][ T51] Bluetooth: hci2: command tx timeout [ 395.213972][T16537] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 395.268252][T16537] veth0_vlan: entered promiscuous mode [ 395.283693][T16537] veth1_vlan: entered promiscuous mode [ 395.322777][T16537] veth0_macvtap: entered promiscuous mode [ 395.332210][T16537] veth1_macvtap: entered promiscuous mode [ 395.355045][T16537] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 395.371817][T16537] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 395.385802][ T2139] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.395875][ T2139] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.407413][ T2139] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.419861][ T2139] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.489050][ T9604] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.504014][ T9604] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.535335][ T9599] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.543795][ T9599] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.288012][ T51] Bluetooth: hci2: command tx timeout [ 399.367056][ T51] Bluetooth: hci2: command tx timeout [ 401.447027][ T51] Bluetooth: hci2: command tx timeout [ 415.063832][T16567] openvswitch: netlink: Message has 4 unknown bytes. [ 415.248627][T16577] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3051'. [ 415.272215][T16578] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3053'. [ 415.374481][T16574] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 415.422686][T16577] 8021q: adding VLAN 0 to HW filter on device bond1 [ 415.556964][T16582] vlan2: entered allmulticast mode [ 415.581509][T16582] bond1: entered allmulticast mode [ 415.856338][ T5870] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 415.868355][ T5870] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 415.877010][ T5870] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 415.892617][ T5870] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 415.904631][ T5870] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 415.961481][T16601] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3059'. [ 416.031888][T16601] tipc: Started in network mode [ 416.038290][T16601] tipc: Node identity ac14140f, cluster identity 4711 [ 416.076652][T16601] tipc: New replicast peer: 255.255.255.255 [ 416.098309][T16601] tipc: Enabled bearer , priority 10 [ 416.116667][T16608] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.3060'. [ 416.177875][T16596] lo speed is unknown, defaulting to 1000 [ 416.328949][T16622] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3065'. [ 416.412289][T16627] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3067'. [ 416.754379][T16634] syzkaller0: entered promiscuous mode [ 416.772666][T16634] syzkaller0: entered allmulticast mode [ 417.217162][ T5866] tipc: Node number set to 2886997007 [ 418.017220][ T5870] Bluetooth: hci4: command tx timeout [ 418.620196][T16655] syzkaller0: left promiscuous mode [ 418.625820][T16655] tipc: Resetting bearer [ 418.763752][T16664] IPVS: set_ctl: invalid protocol: 0 172.20.20.50:20001 [ 418.804007][T16664] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20003 [ 418.889190][T16667] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3075'. [ 419.714085][T16596] chnl_net:caif_netlink_parms(): no params data found [ 419.807058][T16697] tipc: Enabling of bearer rejected, already enabled [ 419.833724][T16697] syzkaller0: entered promiscuous mode [ 419.885982][T16697] tipc: Resetting bearer [ 420.087053][ T5870] Bluetooth: hci4: command tx timeout [ 420.115104][T16702] netlink: 'syz.2.3083': attribute type 10 has an invalid length. [ 420.148341][T16713] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3086'. [ 420.258038][T16702] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 420.505616][T16596] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.525730][T16596] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.578437][T16596] bridge_slave_0: entered allmulticast mode [ 420.604475][T16596] bridge_slave_0: entered promiscuous mode [ 420.638323][T16596] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.668565][T16596] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.689922][T16596] bridge_slave_1: entered allmulticast mode [ 420.730454][T16596] bridge_slave_1: entered promiscuous mode [ 420.903352][T16733] Bluetooth: MGMT ver 1.23 [ 420.917787][T16740] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3092'. [ 420.959236][T16596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 421.040118][T16596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 421.082269][T16746] netlink: 'syz.0.3095': attribute type 21 has an invalid length. [ 421.150199][T16746] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3095'. [ 421.167789][T16596] team0: Port device team_slave_0 added [ 421.177462][T16596] team0: Port device team_slave_1 added [ 421.296247][T16596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 421.325855][T16596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 421.373162][T16596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 421.603915][T16774] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.3100'. [ 421.673724][T16596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 421.703766][T16596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 421.757404][T16596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 421.819039][T16770] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 421.830048][T16770] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 422.167084][ T5870] Bluetooth: hci4: command tx timeout [ 422.204360][T16596] hsr_slave_0: entered promiscuous mode [ 422.212215][T16596] hsr_slave_1: entered promiscuous mode [ 422.219018][T16596] debugfs: 'hsr0' already exists in 'hsr' [ 422.224789][T16596] Cannot create hsr debugfs directory [ 422.230828][T16793] tipc: Enabling of bearer rejected, failed to enable media [ 422.785887][T16596] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 422.844558][T16814] geneve3: entered promiscuous mode [ 422.875465][T16814] geneve3: entered allmulticast mode [ 422.921954][ T9604] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 19999 - 0 [ 422.930866][T16818] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3113'. [ 422.940294][T16818] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3113'. [ 422.975572][T16596] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 423.015291][ T9604] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 19999 - 0 [ 423.034927][ T9604] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 19999 - 0 [ 423.044743][T16814] tipc: Resetting bearer [ 423.087314][ T9604] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 19999 - 0 [ 423.160025][T16596] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 423.210616][T16829] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.227086][T16829] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 423.280558][T16596] netdevsim netdevsim3  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 423.325499][T16834] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 423.348553][T16829] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.358888][T16829] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 423.395542][T16836] tipc: Enabled bearer , priority 0 [ 423.430415][T16829] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.441032][T16829] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 423.473373][T16836] syzkaller0: entered promiscuous mode [ 423.482709][T16836] syzkaller0: entered allmulticast mode [ 423.543968][T16829] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.556507][T16829] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 423.583478][T16842] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3121'. [ 423.664650][T16811] tipc: Resetting bearer [ 423.693497][T16850] tipc: Resetting bearer [ 423.854395][ T2139] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 423.869856][ T2139] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 423.944856][ T9599] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 423.961691][ T9599] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 424.003384][T16835] tipc: Resetting bearer [ 424.257353][ T5870] Bluetooth: hci4: command tx timeout [ 424.298293][T16835] tipc: Disabling bearer [ 424.741190][ T9599] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 424.750262][ T9599] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 424.783137][ T36] tipc: Resetting bearer [ 424.799913][T16596] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 424.841393][T16596] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 424.855188][T16869] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3128'. [ 424.885811][ T9599] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 424.907366][ T9599] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 424.920407][T16596] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 425.005135][T16596] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 425.184967][T16879] [ 425.187375][T16879] ====================================================== [ 425.194484][T16879] WARNING: possible circular locking dependency detected [ 425.201586][T16879] syzkaller #0 Not tainted [ 425.205994][T16879] ------------------------------------------------------ [ 425.213005][T16879] syz.0.3130/16879 is trying to acquire lock: [ 425.219065][T16879] ffffffff8f68d2b8 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xa9/0x720 [ 425.228573][T16879] [ 425.228573][T16879] but task is already holding lock: [ 425.236072][T16879] ffffffff8f68d258 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720 [ 425.245648][T16879] [ 425.245648][T16879] which lock already depends on the new lock. [ 425.245648][T16879] [ 425.256065][T16879] [ 425.256065][T16879] the existing dependency chain (in reverse order) is: [ 425.265075][T16879] [ 425.265075][T16879] -> #2 (nr_neigh_list_lock){+...}-{3:3}: [ 425.272982][T16879] lock_acquire+0x120/0x360 [ 425.278189][T16879] _raw_spin_lock_bh+0x36/0x50 [ 425.283478][T16879] nr_rt_ioctl+0x390/0xd50 [ 425.288416][T16879] sock_do_ioctl+0xd9/0x300 [ 425.293443][T16879] sock_ioctl+0x576/0x790 [ 425.298298][T16879] __se_sys_ioctl+0xfc/0x170 [ 425.303414][T16879] do_syscall_64+0xfa/0x3b0 [ 425.308441][T16879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.314855][T16879] [ 425.314855][T16879] -> #1 (&nr_node->node_lock){+...}-{3:3}: [ 425.322846][T16879] lock_acquire+0x120/0x360 [ 425.327872][T16879] _raw_spin_lock_bh+0x36/0x50 [ 425.333160][T16879] nr_rt_ioctl+0x193/0xd50 [ 425.338100][T16879] sock_do_ioctl+0xd9/0x300 [ 425.343125][T16879] sock_ioctl+0x576/0x790 [ 425.347976][T16879] __se_sys_ioctl+0xfc/0x170 [ 425.353092][T16879] do_syscall_64+0xfa/0x3b0 [ 425.358129][T16879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.364661][T16879] [ 425.364661][T16879] -> #0 (nr_node_list_lock){+...}-{3:3}: [ 425.372483][T16879] validate_chain+0xb9b/0x2140 [ 425.377767][T16879] __lock_acquire+0xab9/0xd20 [ 425.383231][T16879] lock_acquire+0x120/0x360 [ 425.388262][T16879] _raw_spin_lock_bh+0x36/0x50 [ 425.393549][T16879] nr_rt_device_down+0xa9/0x720 [ 425.399012][T16879] nr_device_event+0x137/0x150 [ 425.404294][T16879] notifier_call_chain+0x1b3/0x3e0 [ 425.409940][T16879] __dev_notify_flags+0x18d/0x2e0 [ 425.415490][T16879] netif_change_flags+0xe8/0x1a0 [ 425.421031][T16879] dev_change_flags+0x130/0x260 [ 425.426407][T16879] dev_ioctl+0x7b4/0x1150 [ 425.431262][T16879] sock_do_ioctl+0x22c/0x300 [ 425.436636][T16879] sock_ioctl+0x576/0x790 [ 425.441490][T16879] __se_sys_ioctl+0xfc/0x170 [ 425.446787][T16879] do_syscall_64+0xfa/0x3b0 [ 425.451914][T16879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.458418][T16879] [ 425.458418][T16879] other info that might help us debug this: [ 425.458418][T16879] [ 425.468656][T16879] Chain exists of: [ 425.468656][T16879] nr_node_list_lock --> &nr_node->node_lock --> nr_neigh_list_lock [ 425.468656][T16879] [ 425.482500][T16879] Possible unsafe locking scenario: [ 425.482500][T16879] [ 425.489966][T16879] CPU0 CPU1 [ 425.495405][T16879] ---- ---- [ 425.500766][T16879] lock(nr_neigh_list_lock); [ 425.505449][T16879] lock(&nr_node->node_lock); [ 425.512730][T16879] lock(nr_neigh_list_lock); [ 425.519925][T16879] lock(nr_node_list_lock); [ 425.524535][T16879] [ 425.524535][T16879] *** DEADLOCK *** [ 425.524535][T16879] [ 425.532728][T16879] 2 locks held by syz.0.3130/16879: [ 425.537944][T16879] #0: ffffffff8f537c08 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150 [ 425.546765][T16879] #1: ffffffff8f68d258 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720 [ 425.556805][T16879] [ 425.556805][T16879] stack backtrace: [ 425.562723][T16879] CPU: 0 UID: 0 PID: 16879 Comm: syz.0.3130 Not tainted syzkaller #0 PREEMPT(full) [ 425.562744][T16879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 425.562754][T16879] Call Trace: [ 425.562764][T16879] [ 425.562773][T16879] dump_stack_lvl+0x189/0x250 [ 425.562795][T16879] ? __pfx_dump_stack_lvl+0x10/0x10 [ 425.562813][T16879] ? __pfx__printk+0x10/0x10 [ 425.562842][T16879] ? print_lock_name+0xde/0x100 [ 425.562864][T16879] print_circular_bug+0x2ee/0x310 [ 425.562883][T16879] check_noncircular+0x134/0x160 [ 425.562902][T16879] validate_chain+0xb9b/0x2140 [ 425.562920][T16879] ? rt6_disable_ip+0x6b3/0x720 [ 425.562942][T16879] ? __lock_acquire+0xab9/0xd20 [ 425.562965][T16879] __lock_acquire+0xab9/0xd20 [ 425.562989][T16879] ? nr_rt_device_down+0xa9/0x720 [ 425.563006][T16879] lock_acquire+0x120/0x360 [ 425.563026][T16879] ? nr_rt_device_down+0xa9/0x720 [ 425.563048][T16879] ? nr_rt_device_down+0xa9/0x720 [ 425.563064][T16879] _raw_spin_lock_bh+0x36/0x50 [ 425.563083][T16879] ? nr_rt_device_down+0xa9/0x720 [ 425.563099][T16879] nr_rt_device_down+0xa9/0x720 [ 425.563117][T16879] ? do_raw_spin_unlock+0x122/0x240 [ 425.563137][T16879] nr_device_event+0x137/0x150 [ 425.563153][T16879] notifier_call_chain+0x1b3/0x3e0 [ 425.563172][T16879] __dev_notify_flags+0x18d/0x2e0 [ 425.563197][T16879] ? __pfx___dev_notify_flags+0x10/0x10 [ 425.563220][T16879] ? __dev_change_flags+0x4cc/0x6d0 [ 425.563235][T16879] ? __pfx___dev_change_flags+0x10/0x10 [ 425.563250][T16879] ? full_name_hash+0x92/0xe0 [ 425.563268][T16879] netif_change_flags+0xe8/0x1a0 [ 425.563283][T16879] dev_change_flags+0x130/0x260 [ 425.563316][T16879] dev_ioctl+0x7b4/0x1150 [ 425.563338][T16879] sock_do_ioctl+0x22c/0x300 [ 425.563358][T16879] ? __pfx_sock_do_ioctl+0x10/0x10 [ 425.563375][T16879] ? __lock_acquire+0xab9/0xd20 [ 425.563402][T16879] sock_ioctl+0x576/0x790 [ 425.563420][T16879] ? __pfx_sock_ioctl+0x10/0x10 [ 425.563437][T16879] ? __fget_files+0x2a/0x420 [ 425.563459][T16879] ? __fget_files+0x3a0/0x420 [ 425.563481][T16879] ? __fget_files+0x2a/0x420 [ 425.563504][T16879] ? bpf_lsm_file_ioctl+0x9/0x20 [ 425.563523][T16879] ? __pfx_sock_ioctl+0x10/0x10 [ 425.563540][T16879] __se_sys_ioctl+0xfc/0x170 [ 425.563560][T16879] do_syscall_64+0xfa/0x3b0 [ 425.563582][T16879] ? lockdep_hardirqs_on+0x9c/0x150 [ 425.563601][T16879] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.563616][T16879] ? clear_bhb_loop+0x60/0xb0 [ 425.563633][T16879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.563648][T16879] RIP: 0033:0x7f497e78ebe9 [ 425.563663][T16879] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 425.563677][T16879] RSP: 002b:00007f497f62c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 425.563694][T16879] RAX: ffffffffffffffda RBX: 00007f497e9b5fa0 RCX: 00007f497e78ebe9 [ 425.563705][T16879] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000007 [ 425.563716][T16879] RBP: 00007f497e811e19 R08: 0000000000000000 R09: 0000000000000000 [ 425.563725][T16879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 425.563735][T16879] R13: 00007f497e9b6038 R14: 00007f497e9b5fa0 R15: 00007ffe915ac298 [ 425.563752][T16879] [ 425.951359][T16596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 425.974815][T16596] 8021q: adding VLAN 0 to HW filter on device team0 [ 425.986176][ T1326] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.993281][ T1326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 426.004396][ T9600] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.011723][ T9600] bridge0: port 2(bridge_slave_1) entered forwarding state [ 426.140963][T16596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 426.171661][T16596] veth0_vlan: entered promiscuous mode [ 426.181383][T16596] veth1_vlan: entered promiscuous mode [ 426.201998][T16596] veth0_macvtap: entered promiscuous mode [ 426.210319][T16596] veth1_macvtap: entered promiscuous mode [ 426.224023][T16596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 426.236697][T16596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 426.249745][ T9600] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.261189][ T9600] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.270495][ T9600] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.280137][ T9600] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.304891][T16596] ieee80211 phy27: Selected rate control algorithm 'minstrel_ht' [ 426.323553][ T2139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.324840][T16596] ieee80211 phy28: Selected rate control algorithm 'minstrel_ht' [ 426.333667][ T2139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.358817][ T9600] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.366689][ T9600] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50