last executing test programs: 9.131228437s ago: executing program 3 (id=12550): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) (async) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) (async) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) (async, rerun: 32) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r1) (async) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0x4, 0x4) (async, rerun: 64) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)='\x00', 0x1}], 0x1}, 0x0) (rerun: 64) 8.978285551s ago: executing program 3 (id=12552): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="800037bbfa9ba1ce", 0x8, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c) r5 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r4}, 0x8) close(r5) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000004850000000c000000b70700000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x34000811) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000009c0)=ANY=[@ANYBLOB="12e01b3989dd", @ANYRES32=r8], 0x1000f) ioctl$XFS_IOC_PATH_TO_HANDLE(r5, 0xc0385869, &(0x7f0000000980)={r5, &(0x7f0000000880)=']#-)\x00', 0x103400, &(0x7f00000008c0)={@_ha_fsid={[0x8, 0x2]}, {0x4, 0x6, 0x5}}, 0x6, &(0x7f0000000900)={@_ha_fsid}, &(0x7f0000000940)=0x101}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/420], &(0x7f0000000100)='GPL\x00'}, 0x48) 7.940738245s ago: executing program 3 (id=12564): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6040}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gre={{0x8}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40c0000}, 0x4000014) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x114, 0x25, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x2}, @typed={0x14, 0x3, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="180000000010"], 0x18}, 0x1, 0x0, 0x0, 0x4048811}, 0x4004006) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6040}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gre={{0x8}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40c0000}, 0x4000014) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x114, 0x25, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x2}, @typed={0x14, 0x3, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') (async) unshare(0x6a040000) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="180000000010"], 0x18}, 0x1, 0x0, 0x0, 0x4048811}, 0x4004006) (async) 6.736352226s ago: executing program 2 (id=12578): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)="10", 0x1}], 0x1, 0x2, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000015c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_AP(r1, &(0x7f0000001680)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x28, r2, 0x800, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x80000000, 0x26}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x400c010}, 0x4000090) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9", 0x4}], 0x1}], 0x1, 0x40800) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001000010029bd7000fadbdf2500000000", @ANYRES32=r5, @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x404c8e0}, 0xc094) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) r7 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) sendfile(r0, r7, 0x0, 0x20000f2) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000001480)={{0xffffffffffffffff, &(0x7f0000000000)='cgroup.controllers\x00', 0x200, &(0x7f0000000040)={@_ha_fsid={[0xd, 0x6ae]}, {0x2, 0xe, 0x8, 0x8}}, 0x3, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x723}, 0x4, &(0x7f0000001400)=[{0x2, 0xffffff97, &(0x7f0000000140)='cgroup.controllers\x00', &(0x7f0000000200)="d54b43f844fc10b7dfab0db65d1552a2902b8a12738df6ffbd30f8cfd08d61be637db29683a16cc39bc6ed330dfdc59c5516d46b74a9801fa2f2664fa1c1cdfdad134f4aca6aed3847d91b34e47c52e83c0456ec2c6295e44003cbbac39ff441b3b09991a9a2ce7f778ca149", 0x6c}, {0x1, 0x3, &(0x7f0000000180)='cgroup.controllers\x00', &(0x7f0000000280)="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", 0x1000}, {0x3, 0x9, &(0x7f0000001280)='cgroup.controllers\x00', &(0x7f00000012c0)="fe1165f84a65ee5400db1520f50cb9970a623c5105ec57aeff6045433c0802cbcee4e52cb5f4d82aad65913c12350037012042ed2f7f873b86a0592ad10082331f9b72614674b29ca90a7684cf7175382759d96d44bc8168f95215d0a1ad125c04005c1d3f3eed996165c26df3ebab8ccafb39270bb60f58b340af93d1d9cdcb4d61ba972e6694d5f8518691ea79f44887feb76a1243bad37330276bd73578459a246d49c068f795c7234befee0c9467eaf2a481be450e1da05fdd4f346b3b", 0xbf, 0x20}, {0x2, 0x6, &(0x7f0000001380)='cgroup.controllers\x00', &(0x7f00000013c0)="d563c0d31d4bd460cddbc3d43558d5a19015d9bdb600ef14a276bfe2ad45619c2a0b030a7482cc07", 0x28, 0xcf68cdc58e0bc3ae}]}) r9 = socket$l2tp6(0xa, 0x2, 0x73) connect$pppl2tp(r8, &(0x7f0000001540)=@pppol2tp={0x18, 0x1, {0x0, r9, {0x2, 0x4e21, @local}, 0x3, 0x4, 0x2001, 0x3}}, 0x62) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r11 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r11, &(0x7f0000000d40)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e068000000110000000000000000dbc790ad000000fc000000000000001400000000000000000000003400000004000000000000001c000000000000000000000008"], 0x68}, 0x0) mmap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000004, 0x12, r10, 0xe6905000) 6.492952477s ago: executing program 2 (id=12580): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000080)='X', 0x1, 0x20008001, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0, 0x40000000}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x5, 0xa8, 0x20, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, 0x8, 0x9}, 0xe) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000005000)=[{{0x0, 0x2a, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000005c0)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000001380)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000740)="17f2b2de5c6b0db5d25446463f74d3740a70f6e0249ca79ea3579bc57df5837189a49908837dae500632174cac1efc0e61b9cbcde67b0070040000003d478881c92de1d95dcc82811ba3e4d049aa7057", 0x50}], 0x1, 0x0, 0x0, 0x11}], 0x1, 0xc48d4) readv(r2, &(0x7f00000000c0)=[{&(0x7f0000001780)=""/4096, 0x1000}], 0x1) r3 = socket$inet6(0xa, 0x1, 0x84) setsockopt$MRT6_DEL_MFC(r3, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x4e20, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1762fe5f}, {0xa, 0x0, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x400}, 0x1, {[0x3, 0x6, 0x1, 0xffffffff, 0x2, 0x5, 0x9, 0x8]}}, 0x5c) setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) sendto$inet6(r3, &(0x7f00000000c0)="9a", 0x1, 0x804, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0x4}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x6d, &(0x7f0000002280)=""/4090, &(0x7f0000000040)=0xffa) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, 0x0, 0x0) 5.435186921s ago: executing program 4 (id=12586): ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000640)={{0xffffffffffffffff, &(0x7f0000000000)='&\x00', 0xa040, &(0x7f0000000040)={@align=0x643, {0x4, 0x9, 0xd1e, 0xe2}}, 0xc, &(0x7f0000000080), &(0x7f00000000c0)=0x4}, 0x5, &(0x7f0000000580)=[{0x2, 0x0, &(0x7f0000000100)='\x00', &(0x7f0000000140)="9fc2606d5861e92d9b725c5951f8b54a063a380278743546624ad7647317928d35bbd93ac0f88a88fec6683dc9379d76ecaccb7577b905ed5b40a2b50bff53a13965a00856c8b4ddbb6c2899971f7ade6848d5f4fbfa2670ee4382d72051ce", 0x5f, 0x18}, {0x2, 0xe8, &(0x7f00000001c0)='(%\x00', &(0x7f0000000200)="56d0a98f50cd394b756a355aa59718cad8a142b7f89722ef1cb02663ef76d881c48020af4e3f14fb1735a23075a74c88023031eedb5228528eb2b1353360fe0d8937280cfdfdfc4294", 0x49, 0x8}, {0x1, 0x3, &(0x7f0000000280)=',$%\x00', &(0x7f00000002c0)="272234bf04201ecda1c7c59d6af69ec86b36bc5db7c8a3f82335b339c6a47e6e297284a82d6977a0716e0ad5d35c7db866dcf5288fad3e9e79abb4b610551b6ab053e4c6df5e69ad5638c91533a195db1ff51c8627e273a723692d85c55ed5dff5a6c34b2ea001bd41c926e2a448f3b51db585b55a72677289e22f778c0b350c0741d46f5b85ffbb3eec10df16fc", 0x8e}, {0x2, 0x7, &(0x7f0000000380)='%+}})\x00', &(0x7f00000003c0)="c6291f2cc9392c76f56c284b9d4f1a14aa84deab8235fa8d1729826cc31550c82207d0fa8c06ad3913499ed7c665484c9fd7215781343665f65eaae7b63320b134b73f5bcc523cd08cc158581e3f1e2f3a5189b7ef6c317b3d0aafd6a965b1afa17e90a0ea8ef793cbe4a7e056c23282d2bf88c0ab854c55185cc44c35beba234379304a17a5b575f4defac733749de26e8445d1332a8e4036fd8c6e280e27b609c8fee0af541d95d24a3c9849ff1c67a1bbd8a29bc32e9176a82c9c36ad42c65593ecfe1ed8d622eaf1016f16a2b2547e17a44d07166bcfbc94aa69eafd1775d9d6e39a801fd461a4165f397c367699dddc", 0xf2, 0x2}, {0x1, 0x1, &(0x7f00000004c0)='#-(*\'.]#-{{\'\x00', &(0x7f0000000500)="832d16681002f7960d979ab641e8a5288156183eec97e87803a6f76bad51dec6b5c497f55d21687a57cbd00a336e95f3c823e44874cf65811fb02a0b7b6f8de0ca7d1faaeedf08e22549ca19a31abfe56f1e0dfa6e087468b532bd9649e3ae5953155906e184a78f15944ed1e568b9911f46243f86391b17be2e50f3426f4d", 0x7f, 0x30}]}) r1 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x0, @void}, 0x10) ioctl$XFS_IOC_COMMIT_RANGE(r0, 0x40585883, &(0x7f0000000700)={r1, 0x0, 0x7, 0x3, 0x6, 0x2, [0xea58, 0xfffffffffffff7c4, 0x9, 0x2, 0x5, 0xb]}) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000780)={0xffffffffffffffff, r0}, 0xc) r2 = socket(0x22, 0xa, 0x0) write$nci(r0, &(0x7f00000007c0)=@NCI_GID_PROPRIETARY_RSP={0xf, 0x0, 0x2, 0x0, 0xc3, "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"}, 0x101) ioctl$BTRFS_IOC_QUOTA_CTL(r1, 0xc0109428, &(0x7f0000000900)={0x1, 0x9}) bpf$LINK_DETACH(0x22, &(0x7f0000000940)=r0, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x20ad18e7add7a143, 0x1, 0x6) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f00000009c0)={0x3, &(0x7f0000000980)=[{0x4, 0xbe, 0x10, 0x6}, {0xa1, 0x6, 0x8, 0x9}, {0x4, 0x9, 0xc, 0x2}]}) write$tcp_mem(0xffffffffffffffff, &(0x7f0000000a00)={0x9, 0x20, 0x80, 0x20, 0x3}, 0x48) ioctl$PPPIOCGIDLE(r0, 0x8010743f, &(0x7f0000000a80)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000ac0), r0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000b00)=0x1088) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000e00)={r0, 0xe0, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000b40)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, &(0x7f0000000b80)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000bc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x33, &(0x7f0000000c00)=[{}], 0x8, 0x10, &(0x7f0000000c40), &(0x7f0000000c80), 0x8, 0xdc, 0x8, 0x8, &(0x7f0000000cc0)}}, 0x10) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000e40)={r4}, 0x4) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000e80)={0x0}, &(0x7f0000000ec0)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000f00)={r6, 0x4}, &(0x7f0000000f40)=0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000f80), 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001280)={r5, 0xe0, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000fc0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000001000)=[0x0], &(0x7f0000001040)=[0x0], 0x0, 0x8f, &(0x7f0000001080)=[{}], 0x8, 0x10, &(0x7f00000010c0), &(0x7f0000001100), 0x8, 0xa5, 0x8, 0x8, &(0x7f0000001140)}}, 0x10) connect$can_bcm(r2, &(0x7f00000012c0)={0x1d, r7}, 0x10) pwritev(r2, &(0x7f00000023c0)=[{&(0x7f0000001300)="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", 0x1000}, {&(0x7f0000002300)="9ca071d34e4078383dbbf0dc8c91f7b6c18f9dc49ac4473bc9e46413baaf9a0d5a80795eefe72be4941bbe597344dda07d72c6e1c7e884f905d1be787f896e06d1d87502728004a5d717a918b9ae992cd673c01044c8152bbfc20ef23500bb88875a45d6064e3103eca3b17952c0b887bae09cd434bcdfc94d8854cdb5e6132a49dcbc4ff4e782207002aad7", 0x8c}], 0x2, 0x80, 0x530a) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r1, 0xf505, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000002500)={r1, &(0x7f0000002400)='/sys/kernel/debug/bluetooth/6lowpan_control\x00', 0x0, &(0x7f0000002440)={@align=0x6, {0x7ff, 0x7f, 0xab8, 0x1}}, 0x9, &(0x7f0000002480)={@_ha_fsid}, &(0x7f00000024c0)=0x2}) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r9, 0x84, 0x5, &(0x7f0000002540)={0x0, @in={{0x2, 0x4e23, @multicast2}}}, 0x84) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000002600)=r9, 0x4) r10 = openat$cgroup(r9, &(0x7f0000002640)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000002680)={r5, r10, 0x26, 0x0, @val=@tracing={r8, 0x7}}, 0x20) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000002700)={'batadv0\x00', 0xffff}) 5.199910659s ago: executing program 0 (id=12587): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x100000c, 0x8010, r0, 0x952de000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r1 = socket(0x2b, 0x80801, 0x1) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x3ff, @empty, 0xfffffffe}, 0x1c) socket$inet6_udplite(0xa, 0x2, 0x88) 5.100044026s ago: executing program 4 (id=12588): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @my=0x1}, 0x10, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) read(r2, &(0x7f0000000040)=""/101, 0x65) shutdown(r2, 0x0) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000340)="07000000010000", 0x7) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000580)={@dev={0xfe, 0x80, '\x00', 0x36}, @dev={0xfe, 0x80, '\x00', 0x13}, @local, 0x2000000, 0x0, 0x7d, 0x180, 0xfffffffffffffffe, 0x9b0318}) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, @mcast1, 0x10000006, 0x0, 0x1, 0x0, 0x9, 0x10280}) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000000)={0x10003, 0x0, 0xd7c4, 0xfffffff9}, 0x10) write(r5, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000001d00000000000000050009000d000000", 0x24) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x37c13, 0x1e23}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @private0}, @IFLA_GRE_REMOTE={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x20, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x18, 0x0, 0x0, @binary}, @typed={0x8, 0x17, 0x0, 0x0, @u32=0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 5.025288744s ago: executing program 0 (id=12589): r0 = socket(0x10, 0x80002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x2000000}, 0x1c) shutdown(r1, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x4, r4}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x2000a804) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r4], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f00000003c0)=@gcm_256={{0x303}, "5467ab00", "df7b57d67e69283c56bd41adb4d53f4ad34ad31139acfb5bd7ec4175c068f087", '\x00', "0200"}, 0x38) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001800010000000000000000000200000000000006000000000c00090008000000", @ANYRES32, @ANYBLOB="08000400", @ANYRES32, @ANYBLOB="080005"], 0x38}}, 0x0) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x0, &(0x7f0000000480), &(0x7f0000000140)='GPL\x00', 0x7, 0xf1, &(0x7f0000000540)=""/241, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x1, 0x4}, 0x8, 0x10, &(0x7f00000002c0)={0x0, 0xc, 0x2c, 0x715}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000640)=[0x1, 0x1, 0x1, 0x1, 0x1, 0x1, r3, 0x1, 0x1, 0xffffffffffffffff], 0x0, 0x10, 0x7}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000740)=r8, 0x4) setsockopt$SO_J1939_SEND_PRIO(r6, 0x6b, 0x3, &(0x7f0000000340)=0x4, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtaction={0x68, 0x32, 0x53b, 0x0, 0x0, {0x9}, [{0x54, 0x1, [@m_sample={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x526}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x300}}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x68}}, 0x0) 4.811057325s ago: executing program 1 (id=12590): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'vcan0\x00', 0x100}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000080)=0x7, 0x4) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000540)={{r0, &(0x7f00000000c0)=',,\x00', 0x20000, &(0x7f0000000100)={@align=0xb, {0x0, 0xfffe, 0x9}}, 0x1, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0x6}, 0x5, &(0x7f0000000480)=[{0x3, 0x800, &(0x7f00000001c0)='!%%$#)\x00', &(0x7f0000000200)="2ea7d79c", 0x4, 0x2}, {0x1, 0x5, &(0x7f0000000240)='\x00', &(0x7f0000000280)="0d9f65e4523cad7b8395fa2ebe5cc2dad50dff011677faf99d9e57a06e0a664029f688eb5d65fe99f789b3f47304891d4747a9e9bc6474efbb312b", 0x3b, 0x10}, {0x3, 0xfffff27a, &(0x7f00000002c0)='vcan0\x00', &(0x7f0000000300)="5eab4dddd4709cfd2a4da149e82f05f69cf93e9d1319afcae449e9cbf82550766e75", 0x22, 0x8}, {0x3, 0x3, &(0x7f0000000340)='\'\x00', &(0x7f0000000380)="af6136f69507108fbcbacadcc1054a7203aabda91a3e70bbee7044d551b5bf2592ad0ba326f432e54a5460750fabb5cf3abb4dbdd13424d2e629fc71b0067494e6fef4c6d9db67469c584d35b5e4a57f42aa6bb17d1b5010ca8e477b4b5513e76fac7f332b66bd3da132fd82a709", 0x6e, 0x2}, {0x1, 0xf, &(0x7f0000000400)='vcan0\x00', &(0x7f0000000440)="add5a030b8", 0x5, 0x18}]}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f00000005c0)={'virt_wifi0\x00', @multicast}) connect$can_j1939(r1, &(0x7f0000000600)={0x1d, 0x0, 0x3, {0x2, 0x0, 0x4}, 0xff}, 0x18) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000680)=@generic={&(0x7f0000000640)='./file0\x00', 0x0, 0x8}, 0x18) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000006c0)={0x0, 0xc0, 0x10}, 0xc) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000700)={0x3, 0x1000, 0x0, 0x40, 0x1, 0x0, [{0x80, 0x3, 0xa, '\x00', 0x3}]}) pipe(&(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000007c0)={0x0, 0x1e, "b4adac6cd1f36149b6de7e734aa746201e35e0bcfd0c0775b9b1ea513d5e"}, &(0x7f0000000800)=0x26) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000840)={r5, 0xa73}, 0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000880)=@assoc_value={r5, 0xc}, 0x8) sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x3c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4800}, 0x4000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000a00), r3) sendmsg$L2TP_CMD_SESSION_MODIFY(r6, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x44, r7, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000c00)={'syztnl0\x00', &(0x7f0000000b80)={'ip6_vti0\x00', 0x0, 0x29, 0x5, 0xb, 0x3, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10, 0x10, 0x4, 0x7}}) sendmsg$nl_route_sched(r0, &(0x7f0000005a40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000005a00)={&(0x7f0000000c40)=@newtfilter={0x4db4, 0x2c, 0x8, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xe, 0xc}, {0x4, 0x5}, {0x0, 0x6}}, [@TCA_RATE={0x6, 0x5, {0x7, 0xff}}, @TCA_CHAIN={0x8, 0xb, 0xd0}, @TCA_RATE={0x6, 0x5, {0xfb, 0x8}}, @TCA_RATE={0x6, 0x5, {0x4, 0xc6}}, @filter_kind_options=@f_bpf={{0x8}, {0x1aa8, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x6}, {0x34, 0x5, [{0x7ff, 0x24, 0x4}, {0x7f, 0x2, 0x0, 0x6}, {0x3f10, 0x2b, 0xfe, 0x5}, {0x1000, 0x1, 0x9, 0x4}, {0xfe00, 0x4, 0x2, 0xffffffff}, {0x8, 0x4, 0xce}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_CLASSID={0x8, 0x3, {0xfff3, 0x3}}, @TCA_BPF_POLICE={0x818, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1354d44c, 0x9, 0x9749, 0x6db6bafb, 0x4, 0x200, 0x60, 0x9, 0x0, 0x6, 0x5, 0x20000000, 0x2e3, 0x5a890344, 0x1, 0x3, 0xc, 0x3, 0xe60, 0xb63, 0x1, 0x5, 0x0, 0x8000, 0x1, 0x8, 0x0, 0x9, 0x9, 0x4d10473b, 0x2, 0x55e664ec, 0x511e2463, 0xaa, 0x9415, 0x78b, 0x40, 0x3, 0x4fe6, 0x4, 0x3, 0xffffffff, 0x0, 0x401, 0x32, 0x8000000, 0x4, 0x1, 0x3a79, 0x6af27918, 0xfffffffd, 0x1, 0x4, 0x9, 0x10000, 0x6, 0x800, 0x243, 0xfffff3ac, 0x0, 0x1, 0x592168d9, 0xea9, 0x4, 0x5c, 0xbe0, 0x800, 0x80, 0x3, 0x7, 0x1, 0x105f, 0x1, 0xb, 0x7ff, 0x4c, 0xc19, 0xdce, 0x2, 0x5, 0x3, 0x4, 0x5, 0xf23, 0x4, 0x4, 0x7ff, 0x2, 0xc, 0x9, 0x2f, 0xe, 0xb52d, 0x8001, 0x7f, 0x7fff, 0x100, 0x9, 0x7, 0x4a, 0x100, 0x8, 0x6, 0x0, 0x4, 0x6, 0x3, 0x7, 0xe, 0x20, 0xdab, 0x101, 0x2, 0x2, 0x4, 0x71, 0xf1, 0xf, 0x3, 0x1, 0xfff, 0x9, 0x3, 0xffff7fff, 0x401, 0x2f36, 0x200, 0x3, 0x3ff, 0xc, 0x9, 0xfffffffc, 0x7, 0x1, 0x2, 0x7ff, 0x80000001, 0x1ff, 0xffff8000, 0x7ff, 0x40, 0x10001, 0x2, 0x5, 0x1000, 0xa, 0x86, 0x4, 0x6, 0xfffffffe, 0x5, 0x2, 0x1, 0x6, 0x8, 0x6, 0x8, 0x3, 0x3a99890c, 0x8, 0x100, 0x80000000, 0x5, 0xc3, 0xfff, 0x2bb, 0x6556cafb, 0x2, 0xa, 0x8, 0x3, 0x10001, 0x7, 0xa, 0xfffff01b, 0x1, 0x7, 0x180000, 0xfff, 0xd84, 0x7f1, 0x9, 0x401, 0x6, 0x4, 0xb3e, 0x10000, 0x8, 0x927, 0xe3, 0x5, 0x9, 0x2, 0x2, 0x5, 0x3, 0x40, 0x9c45, 0x7, 0x8, 0xff, 0x3, 0x7, 0x5, 0x1, 0x9e64, 0x2, 0x4, 0x4, 0x9, 0x7, 0x0, 0x8, 0x3ff, 0xffff0001, 0xa, 0x2, 0xffffffff, 0x9, 0x1, 0x0, 0x4, 0x0, 0x8, 0x7, 0x4, 0x3ff, 0x9, 0x3cf1, 0x9, 0x6, 0x9, 0xc328b90a, 0x6d, 0x3, 0x6, 0x8, 0x5f, 0x9, 0x3, 0x2, 0x800, 0xdb, 0x4, 0x80000000, 0x70, 0x58, 0x3, 0x3, 0x1053776f, 0xfff, 0x3, 0x500, 0x8988, 0x1000, 0x1ff]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xa, 0xb8, 0x1, 0x6, 0x200, 0xb, 0x8, 0xffffffff, 0x2, 0x2, 0x45, 0x3, 0x6, 0x159, 0x7, 0x5, 0x4, 0xf, 0x6, 0x100, 0x5, 0xcb, 0x1, 0x300, 0x40, 0x3, 0x8, 0x8001, 0x6, 0x2, 0x4, 0x5fa6, 0x1, 0x1, 0xc000000, 0x0, 0x4, 0x4, 0x8, 0x1, 0x7, 0x0, 0x2, 0x7, 0x8, 0x9, 0x2, 0x1, 0x8001, 0x4, 0x9, 0x8, 0x1, 0x1, 0x9, 0x2, 0x1e2, 0x6, 0x5, 0xfffffff7, 0x4, 0x8, 0x3, 0x6, 0x0, 0xff, 0x0, 0x50, 0x1ff, 0x2, 0x7, 0x4, 0x1000, 0x9, 0x3, 0x5, 0x5, 0x82, 0x3, 0x3, 0x2, 0x6, 0x5, 0xae6, 0x7, 0xffffffff, 0x80000000, 0x8, 0x7, 0x5, 0x9b478f1c, 0x2, 0x9, 0x1, 0x4, 0x9, 0xe, 0x4, 0x4, 0x5bc1, 0x7, 0x7, 0x200, 0x2, 0x0, 0x1ff, 0x4, 0x9, 0x2, 0x4, 0x6a, 0x80000000, 0x7fa5, 0x1, 0x4, 0xfffffff7, 0xd, 0x2, 0xc, 0x4, 0x5, 0x9, 0x7933, 0x4000000, 0xffffffff, 0x80, 0x2, 0x8, 0x5, 0x2, 0x2, 0x0, 0x2, 0x3, 0x8, 0x1, 0x2, 0x120c, 0x6, 0x80000000, 0x8, 0x5, 0x7, 0xd, 0xd21, 0x8, 0x7, 0x800, 0x8, 0x3ff, 0x4, 0x7, 0x80000001, 0x0, 0x10, 0x5, 0x9, 0xe, 0x0, 0x7, 0x4, 0x7, 0x2, 0xc, 0xad90, 0x5, 0x1, 0x919f, 0x7, 0xe, 0x7, 0x10000, 0x9ca, 0x1, 0x1, 0x80000001, 0x4, 0x16c, 0x7f, 0xff, 0xa, 0x7, 0xfff, 0x80000000, 0x1, 0x36e, 0x7, 0x8, 0x6, 0x8, 0x6007, 0xfffffffd, 0x7, 0x1, 0x7, 0x3, 0x467c, 0x200, 0x5, 0x7, 0x1, 0x39f0d50d, 0x4, 0x6, 0x9, 0x80000001, 0x1, 0x6, 0x8, 0x0, 0x1, 0x9, 0x91, 0x1, 0x0, 0xb05, 0x8c, 0x6, 0x6, 0xc, 0x2, 0xa, 0x5, 0x3, 0x5, 0x41, 0x9, 0x2, 0x3, 0x7, 0x7, 0x7, 0xcf70, 0x5, 0x1, 0xf, 0x569, 0x3, 0x2, 0xe, 0xa, 0xec56, 0x10, 0x10000, 0xe75e, 0x9, 0x2, 0x1000, 0x9, 0xa000000, 0x3, 0xc2c3, 0x2f, 0x5, 0x8, 0x7fff]}]}, @TCA_BPF_ACT={0x1230, 0x1, [@m_ife={0x198, 0xd, 0x0, 0x0, {{0x8}, {0x80, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x7f}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xfffffff9, 0x1, 0x5, 0x7f}}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x2, 0x6, 0x6, 0x2, 0x5}, 0x1}}, @TCA_IFE_TYPE={0x6, 0x5, 0x9}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}]}, @TCA_IFE_DMAC={0xa, 0x3, @broadcast}, @TCA_IFE_TYPE={0x6, 0x5, 0x4}, @TCA_IFE_TYPE={0x6, 0x5, 0x6}, @TCA_IFE_SMAC={0xa, 0x4, @local}]}, {0xf4, 0x6, "924b01a2c475eaefe69761483d07d7830202fbd53bfd2dcc3e47d2634e922ab38dd9f3d3bffba33f1838fe71b6e5ad5f215bd3f499e4bfeffe595e568db0a0362dad2206f548bc3a8bf8268798788d8638fca219e97e029fa19ff165a1aa92269d75cc95e6f878b8dbc9778d8fac5b3c35fdd8286ee9e52ba32182c6dae19b8865e4ddc242cbcd278b57fab7465719b92c7b1bb6eb160cf2103fce6ba1667a6c137d30f2b2b03dbaf77e4dbcd180d64772d99df13d935372bfca7e70b55be1f39150cefbb25a617130fe22f68a7da4e902ce35771e6c63b23f18d750bdbeb4cdd89b0a98e6cd1c63d5b0ba82489080cf"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_xt={0x1094, 0x7, 0x0, 0x0, {{0x7}, {0x106c, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_TARG={0x102a, 0x6, {0x200, 'filter\x00', 0x40, 0x6, "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"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_INDEX={0x8, 0x3, 0x63}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_BPF_CLASSID={0x8, 0x3, {0xffff, 0xf}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xb, 0xc}}]}}, @filter_kind_options=@f_u32={{0x8}, {0x32b8, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x65}, @TCA_U32_MARK={0x10, 0xa, {0x7f, 0x11}}, @TCA_U32_MARK={0x10, 0xa, {0x80, 0xff}}, @TCA_U32_FLAGS={0x8, 0xb, 0x7}, @TCA_U32_POLICE={0x434, 0x6, [@TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_RESULT={0x8, 0x5, 0x40}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_RATE64={0xc, 0x8, 0xe3b}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xffffa9c3, 0x8, 0x7, 0x44c21e88, 0x9, 0x2, 0x9, 0x3, 0x92, 0x7, 0x1, 0x882, 0x68c, 0x0, 0x3, 0x1, 0x6, 0xb41, 0xfffff1df, 0x91a4, 0x1, 0x8000, 0x7, 0xfffffff2, 0xd961, 0x9, 0x10001, 0x1, 0xc, 0xdb9, 0x0, 0x9, 0x3, 0x7ff, 0x3, 0x7, 0x81, 0x5, 0x40, 0x4, 0x6, 0x0, 0x6a, 0x3ff, 0x12a, 0x0, 0x7, 0x400, 0xfffffff2, 0x9, 0x3, 0x2, 0x1, 0x0, 0x10001, 0x7, 0x5, 0x3, 0x1, 0xdbef, 0xfffff319, 0x9, 0x2, 0x4, 0x6d, 0x6, 0x714, 0xffffb5d5, 0x6, 0x81, 0xfd, 0xd, 0x6, 0xffff7fff, 0xe, 0x2, 0x1ff, 0x7, 0x9, 0xfffffffd, 0x81, 0x7fffffff, 0x8, 0x2, 0xde6e, 0x40, 0xc80, 0x5, 0x8, 0x4, 0x9, 0x4, 0x0, 0xbb, 0x23, 0x4, 0xd, 0xffffffff, 0x543, 0x3ff, 0x4, 0xffff8001, 0x7f, 0x8, 0x4, 0x6, 0x2, 0x40, 0x4, 0x9, 0x7, 0xffff, 0x4, 0x7, 0x1, 0xc, 0x9, 0xec, 0x7, 0x100, 0x1, 0x8, 0x6, 0x65d8, 0x1, 0x800, 0x1, 0xc, 0xfff, 0x3, 0x8, 0x4, 0xffff, 0xfffff801, 0x3, 0x4, 0x8, 0x7, 0x400, 0xfff, 0x6, 0x1e, 0x0, 0x7ff, 0xd94, 0x400, 0x8001, 0x3, 0x1ff, 0x0, 0x4, 0x0, 0x1000, 0x0, 0x4, 0x10001, 0x7, 0x7, 0x8, 0x6c40, 0x100, 0x6, 0xfffffffe, 0x7, 0x2, 0x2, 0x352e, 0x5, 0xa882, 0xff, 0xe0, 0xd3e2, 0x4, 0x3, 0x1, 0x3, 0x5, 0xa, 0xf, 0x158000, 0xf6, 0x4, 0x730, 0xf6, 0x3, 0x7, 0x0, 0x8000, 0x5, 0x3ff, 0x0, 0x3, 0x401, 0x7, 0x81, 0x6, 0x7, 0x3, 0x8, 0xb9, 0x7f, 0xf, 0x4, 0x2, 0x4, 0x8, 0x80, 0xff, 0x0, 0x3, 0xfff, 0x6, 0x800, 0x3, 0xffff8001, 0xcf, 0x80000001, 0x7, 0x1, 0x4, 0x100, 0x36, 0x7f, 0x2, 0x7, 0x8, 0x5, 0x2, 0xf, 0xfffffffe, 0x47, 0x1, 0x6, 0x2, 0xe, 0x8000, 0x1, 0x750d, 0xfffff424, 0x0, 0x0, 0x9, 0x8, 0x2, 0x7, 0x7, 0x7, 0x401, 0x88c, 0x4, 0x7, 0x200, 0x800, 0x4, 0x80, 0xff]}]}, @TCA_U32_ACT={0x2e24, 0x7, [@m_pedit={0x2e20, 0x11, 0x0, 0x0, {{0xa}, {0x2d28, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe80, 0x2, {{{0x1, 0xcc8, 0x4, 0x5, 0x1000}, 0xc, 0x40, [{0x7, 0x4f9d, 0xd72, 0x2, 0x5, 0x14}, {0x1000, 0x4, 0x5, 0x6, 0x22e68b4d, 0xff}, {0x4, 0xfffffbff, 0x1, 0x410, 0x9, 0xb1f1}, {0x3, 0xffffff22, 0xd, 0xf5, 0x2ed, 0x8}]}, [{0xfffffff3, 0xb336, 0x80000001, 0x21, 0x8, 0x8}, {0xf, 0x5, 0x4, 0x7, 0xfffff801, 0x7fffffff}, {0x5, 0xe, 0x3, 0x4, 0x3, 0x3ff}, {0x2, 0xb, 0x67, 0xc9, 0x6, 0x6}, {0x9609, 0xde, 0x0, 0x8001, 0x0, 0x1}, {0xc9c, 0x0, 0x100, 0x10, 0x401, 0x2}, {0x8, 0x1c, 0x6, 0x6, 0x1000, 0x2}, {0x7ff, 0x9, 0xfffffff9, 0x7, 0x9, 0x56b3}, {0xcd, 0x8, 0x6, 0x75, 0x6, 0xe}, {0xe, 0x34d, 0x1, 0x1, 0x4, 0x5}, {0xfffffffd, 0x4c0, 0x5, 0x100, 0xa0, 0x2}, {0x80000000, 0x1, 0xff, 0x8, 0x7, 0xfffffffb}, {0xffff8001, 0x8, 0x1, 0x7, 0xd3, 0x123e}, {0x5, 0x2, 0xfffffff8, 0x98be, 0x3, 0x8000}, {0x2, 0x5, 0x8, 0x4, 0x3000, 0x3}, {0xbf47daaf, 0xfff, 0x2, 0x0, 0xb, 0x10}, {0x7fffffff, 0x5, 0x7, 0x0, 0x6, 0x1}, {0xffff, 0x3, 0x6396, 0x7fffffff, 0x7, 0x5}, {0x1ff, 0x5, 0x0, 0x3, 0x40, 0x80000000}, {0x6906, 0x8, 0xb, 0x5, 0x69e1, 0x5}, {0x401, 0x8, 0x6, 0x3, 0x8000, 0xd}, {0xb, 0x0, 0x3, 0x9, 0x2, 0x293a}, {0x9, 0x2, 0x6, 0x80000000, 0x6, 0x1}, {0x1, 0x0, 0x7, 0x8001, 0x80000000, 0x3}, {0x7, 0x1, 0xd98, 0x1, 0x6, 0xdc}, {0x8001, 0x30, 0x0, 0xc0aa, 0x3, 0x2}, {0x3, 0xa186, 0xb30, 0x43f8, 0x5, 0x5}, {0x800, 0x2, 0x4, 0x9, 0xff, 0x7}, {0x4, 0x5, 0x9, 0xc5f3c000, 0x9, 0x1ff}, {0x7f, 0x7, 0x1, 0x5, 0x0, 0x1000}, {0x5, 0x3bd5000, 0x9, 0x401, 0x4, 0x7}, {0x80, 0x2, 0x0, 0x896, 0xad3, 0xf439}, {0x7, 0xb8ce, 0x6, 0x2, 0x1, 0x5}, {0x1b8d, 0x78f3, 0xd6a, 0x9, 0x1, 0x101}, {0x7, 0xb, 0x2, 0x4, 0x7, 0x1}, {0x7, 0x8, 0x8000, 0x7, 0x7fff, 0x8}, {0x7, 0x9, 0x5d, 0x7, 0xfffffff9, 0x6}, {0x0, 0xb6ca, 0x7, 0xce, 0xfff, 0xad}, {0x7, 0x7, 0x8, 0xffff0001, 0x7, 0x80}, {0x2, 0x8, 0x1, 0x10000, 0xa, 0x6e}, {0x0, 0xd, 0xd4f5, 0x6, 0x9d, 0xffff2bc6}, {0xfffffff8, 0x3f0, 0x3, 0xfffffe00, 0x9, 0x7}, {0x2, 0x5, 0xe, 0x4, 0xa, 0xfffffff7}, {0x20, 0xc, 0x3, 0x4, 0x40, 0x9}, {0x5, 0x1, 0x0, 0x9, 0xa239, 0x5}, {0x9, 0x3, 0xff, 0x3, 0x3ff, 0x9}, {0x6, 0x9, 0x2, 0x7, 0x2, 0xffffd3a8}, {0x6, 0xffff, 0xf, 0x1, 0x4, 0x8a51}, {0xa, 0x9c, 0x9, 0x2, 0x2, 0x7fff}, {0x1, 0x100, 0x2, 0x3, 0x2}, {0xa, 0x8, 0x5, 0xe57, 0xbed5, 0x6000000}, {0xffff, 0x0, 0x8e, 0xdbb, 0x0, 0x6}, {0x2, 0x7, 0x9, 0x2, 0x6178}, {0xbe3, 0x8, 0x1, 0x5, 0x1, 0x8}, {0x8, 0x1, 0x0, 0x9, 0x713, 0xc}, {0x6, 0x75, 0x3, 0x3, 0x5, 0x8}, {0x4, 0x80000000, 0x6, 0xdb, 0x3fff80, 0x4}, {0x4, 0x6de, 0x3, 0x0, 0x6, 0x6}, {0x200, 0x8, 0x1000, 0x10000, 0x3, 0xe40}, {0x4, 0x8, 0x0, 0xefe, 0x9e, 0x800}, {0x6, 0xfffffff7, 0x46200000, 0x4e, 0x2, 0x7}, {0xa, 0xc, 0x8, 0x400, 0x40000000, 0x400}, {0xe0, 0x400, 0x4, 0xdd96, 0x1, 0x8}, {0x6, 0xbc, 0x5, 0x2, 0xfffffff8, 0x3}, {0xfffff353, 0xd4, 0x7, 0xf, 0xb4, 0x8}, {0x6, 0x7, 0x9, 0x4a59, 0x5, 0x7fff}, {0x7, 0x2, 0xfff, 0x6, 0xff, 0xfffffffe}, {0x3, 0x7a, 0x0, 0xfffffff4, 0x0, 0x80000000}, {0x7, 0x439, 0x0, 0x1, 0x80000001, 0xf}, {0xd, 0x4, 0x3, 0x9, 0x401, 0x1}, {0x9, 0x0, 0x1010000, 0x800, 0x4, 0x2}, {0x400, 0xee, 0x0, 0x6, 0x1571326d, 0x3}, {0x4, 0x1, 0x974, 0xc6c7, 0x100, 0x178e}, {0x9, 0x10001, 0x873, 0x400, 0x2, 0x1}, {0xfffffffc, 0x0, 0x10000, 0x4a30, 0x1, 0x8e32}, {0x16, 0x6, 0x7, 0x6, 0x10, 0xfffffffb}, {0x4, 0x400, 0xfffffeff, 0x8, 0x2, 0xe0b}, {0x9, 0x1, 0x9, 0x2, 0xe0000000, 0x10000}, {0xff, 0x4, 0x20, 0x1c9, 0x15ad, 0x7fffffff}, {0xd6, 0xf4, 0x100, 0x5, 0x9, 0x8001}, {0x101, 0x9, 0x4, 0xfff, 0x9, 0x5}, {0xf, 0x7, 0x9d1b, 0x6, 0x8, 0x9}, {0x10001, 0x2, 0x4, 0x7fff, 0x1, 0x7ff}, {0x6a, 0x8, 0xb4, 0x7, 0x0, 0xda}, {0x6, 0x8, 0x0, 0x9, 0x9, 0xb}, {0xf50, 0x90, 0x4, 0xc, 0x2, 0x3}, {0x3, 0x3, 0x8, 0x4b3f853a, 0xac, 0x4}, {0x4, 0x1, 0xffffffff, 0x9, 0x0, 0xd5a1}, {0x4, 0x4, 0x4, 0x7ff, 0x9, 0xffffffff}, {0xfff, 0x1, 0x4, 0x7, 0x5, 0x8}, {0x8, 0xdd73, 0x3, 0x6b, 0x7, 0x6d4b}, {0x80000000, 0xdf26, 0x4, 0xa2, 0x7, 0x3}, {0x4, 0x6, 0x1c9, 0x31b, 0x2, 0x8}, {0x0, 0xc, 0x80000000, 0x2079829d, 0x3, 0x7}, {0x9, 0x0, 0xfffffff9, 0x4, 0x8, 0x105}, {0x0, 0x8, 0x128, 0x0, 0x4, 0xc}, {0x1, 0x3, 0x6, 0x3ff, 0x5, 0x8}, {0x2, 0x2, 0x200, 0x21ce, 0x0, 0x3ff}, {0xf72, 0x5, 0x6, 0x0, 0x69d, 0x3c}, {0x6, 0xd, 0xb, 0x4, 0xb1, 0x7}, {0x7, 0x7c42, 0x1, 0x5, 0x7dc, 0xe09}, {0x1, 0xf, 0x80, 0x1, 0x3, 0x4e03}, {0x10001, 0x5, 0x7, 0x401, 0x4, 0x3ff}, {0x6, 0x4, 0x0, 0x8, 0x3, 0x2}, {0x5, 0x7, 0xe0, 0x2, 0x4, 0xc0000000}, {0x6, 0x6, 0xffff, 0xc, 0x5, 0xa}, {0x1, 0x3, 0x3115, 0x400, 0x8, 0x88b}, {0x0, 0xcc40, 0x8, 0x5, 0x0, 0x4}, {0x8, 0x2, 0x100, 0x6, 0x40, 0x2}, {0x0, 0x1000, 0x0, 0x20, 0x3, 0x8}, {0xd4, 0x7f, 0x401, 0xfffffff8, 0x9, 0xffffffff}, {0x9, 0x3, 0x5, 0x4, 0xea2, 0x7fffffff}, {0x8, 0x8, 0x5, 0x0, 0x1, 0x7}, {0x4, 0x10002, 0x5, 0x7, 0xba, 0x6}, {0x1, 0x7ff, 0x4, 0x3, 0x8000, 0x8}, {0xfffffd28, 0x7, 0x80, 0x4, 0xf, 0x7}, {0xa41e, 0x6, 0x3, 0x800, 0xe, 0x5}, {0x6435, 0x2, 0x8, 0xc66, 0x9, 0x6}, {0x2, 0x10000, 0x9, 0x665, 0x1, 0x1}, {0x1ff, 0x5, 0x6, 0x8, 0x9, 0x9}, {0x0, 0x6, 0x2, 0xae86, 0x7, 0x2}, {0x9, 0x6, 0x1, 0x2d8, 0x2, 0xffff}, {0x9, 0xffff, 0x8, 0x8, 0x200, 0xa}, {0x1, 0x9, 0xffffffe0, 0x0, 0x7b, 0x7fff}, {0x6, 0xdd32, 0xfe39, 0x80000000, 0x5, 0x4}, {0x80000000, 0xbf, 0x0, 0x7, 0x538a6980, 0x2}, {0x81, 0x0, 0x8df, 0x60, 0x5, 0x2}, {0x5, 0xa, 0x6, 0x5, 0x3, 0x9}], [{0x5}, {}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {0x1}, {0x4}, {0x3}, {0x5, 0x1}, {0x5}, {0x1, 0x1}, {0x2}, {0x2}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x5}, {0x3}, {0xd, 0x1}, {0x5}, {0x1, 0x1}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x5}, {0x5}, {0x0, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {0x5}, {0x2}, {}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x8}, {0x3, 0x1}, {0x3}, {0x4}, {0x5}, {0x5}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {0x1, 0x1}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x4}, {}, {0x2}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x2}, {0x4, 0x1}, {}, {0x5}, {0x1}, {0x4}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x2, 0x1}, {}, {0x1}, {0x1}, {0x3}, {0x2}, {0x1}, {0x1}, {0x4}, {}, {}, {}, {0x4}, {0x1}, {0x3}, {0x2, 0x1}, {0x3}, {0x5}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x4}, {0x3}, {0x4}, {0x1}, {0x3, 0x1}, {0xd, 0x1}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {0x4}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x4}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {}, {0x5, 0x1}, {0x4, 0x1}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}]}}, @TCA_PEDIT_PARMS_EX={0xef8, 0x4, {{{0x9, 0x6, 0x3, 0x6, 0x10}, 0xff, 0x80, [{0x3ff, 0xc5c, 0x3322, 0x7, 0x9, 0x4}, {0x8, 0x444cee36, 0xfffffffa, 0x40, 0x7, 0x5}, {0xe75d, 0x58f3f67, 0x6, 0x10000, 0x3, 0x5}, {0x6, 0x7, 0xfffffffd, 0xfffffff3, 0x9, 0xc66a}, {0xbfd, 0x6, 0x40, 0x8, 0x80, 0x100}, {0x8, 0xe, 0x491c, 0x0, 0x8}, {0xc88c, 0x2, 0x4, 0x6, 0x0, 0xf881}, {0x3, 0x6, 0x8, 0x3, 0xfff, 0x200}, {0x4, 0x543, 0x5, 0x3, 0x5, 0x7}]}, [{0x3, 0x0, 0xd, 0x7f, 0x80000001, 0xbd}, {0x6, 0x8, 0x101, 0xff, 0x9, 0xce8}, {0x4, 0x2, 0x7f, 0x8, 0x1ff}, {0xfffffff9, 0x4, 0x2, 0x5, 0x8, 0x2}, {0x5, 0x8, 0x4, 0x5be2, 0x6, 0x4}, {0x565837f, 0x6, 0x1, 0x7b39, 0x8, 0x200}, {0x9, 0xffffd73f, 0xc8cb, 0x9, 0x8, 0x7}, {0xaa14, 0x80000001, 0x9, 0x10000, 0x100, 0x1}, {0x4, 0xcbc3, 0x2, 0x3, 0x8, 0x6}, {0x1a2, 0xa07, 0x6, 0x7fffffff, 0x5, 0x4}, {0xfffffffe, 0x3, 0x7, 0x400a, 0x9595, 0x100}, {0x7fff, 0x6, 0x3, 0x64e5291, 0x81, 0x1}, {0xb771, 0x400, 0xa9, 0x5, 0x0, 0x20000000}, {0xf, 0xe, 0x5, 0x5, 0x2, 0x4}, {0x400, 0x3, 0x7, 0x5, 0x9}, {0x1, 0xe, 0x4, 0xfff, 0x6, 0x40}, {0x424, 0xc, 0x3, 0xe9, 0x8000, 0x6}, {0x3, 0x100000, 0xfffffff7, 0x2, 0xff, 0x3}, {0xffffff20, 0x200, 0x8, 0x1, 0x756e84d4, 0x1}, {0xd, 0x9, 0x7, 0x6, 0x9}, {0x9, 0x1, 0x80, 0x9, 0x5, 0xb}, {0x7, 0x3, 0x5, 0xfffffff1, 0x2, 0x2}, {0xc9, 0x4, 0x0, 0x7fff, 0x1, 0x80000000}, {0x10000, 0x401, 0x462, 0xfffffffd, 0x7fff, 0x100}, {0x7, 0x0, 0x5, 0x4, 0x4, 0x985b}, {0x8001, 0x7, 0x7, 0x8, 0x53, 0x6a2b}, {0x6, 0x2, 0x7f, 0x2, 0x2, 0x400}, {0x5, 0x48a, 0xffffffff, 0x5, 0x5, 0x2}, {0x1, 0x3, 0x6, 0x830, 0x400, 0x1ff}, {0x7fff, 0x400, 0x7, 0x7d, 0x3, 0x9}, {0x3, 0x9, 0x8, 0x5, 0x8, 0x7fffffff}, {0x2, 0x2, 0x5, 0x0, 0xfffffffd, 0x8}, {0x0, 0x3, 0x0, 0x1, 0x9, 0x2}, {0x7f, 0x8000, 0x2, 0x9, 0x10, 0x1ff}, {0x2, 0x12e6aca2, 0x80000001, 0x8, 0x4, 0xfffffffc}, {0x2, 0x7, 0x1d15, 0xe1, 0x2, 0x76}, {0x6, 0x8, 0x3, 0x7, 0x3, 0x106}, {0x8, 0x0, 0x6330, 0x2, 0xe1, 0x3}, {0x4, 0xfff, 0x2, 0x9, 0x7, 0x9}, {0x8, 0x8d4, 0x0, 0xad, 0x8, 0x9}, {0x9, 0x101, 0x7, 0x101, 0x3c, 0x1}, {0x5, 0x88, 0x3, 0x8020, 0x0, 0xfffffe00}, {0x52eca2de, 0x1, 0x6d, 0xd, 0x2, 0x1}, {0x1, 0x7, 0x7, 0x3, 0xd}, {0x5, 0x6, 0x3, 0x9, 0x9}, {0xa1, 0x0, 0x3, 0x1, 0x7f, 0xff2a}, {0x5, 0x7, 0xfffffff7, 0x3, 0x2, 0x1}, {0x2, 0x5, 0x61c4, 0x7fffffff, 0x1000, 0x401}, {0x3, 0x5, 0x0, 0xa, 0x1000, 0x8}, {0x8, 0x80, 0xfffffff9, 0x4, 0x401, 0x9}, {0x0, 0xf6c, 0x40, 0x1, 0xb48, 0x1c}, {0x7, 0x401, 0x40000000, 0x0, 0x800, 0x6}, {0x8, 0x7ff, 0xc333, 0x8542, 0x428, 0x2}, {0xfff, 0x7, 0x7, 0x4, 0xffffffff, 0x3}, {0x7fffffff, 0x8, 0x2, 0x8, 0x10, 0x2}, {0xda9, 0x2, 0x3ff, 0x5d, 0x101, 0xba5f}, {0x9, 0x4, 0x5, 0x6000, 0xffffffff, 0xb}, {0xc9a, 0x7f, 0xc3, 0x1, 0x3, 0x1}, {0xfffffffc, 0x7, 0x36, 0x2, 0x67ec}, {0x0, 0x100, 0x3aaa, 0x8000, 0x0, 0x4}, {0x7, 0xc, 0x1, 0x0, 0xfffffffa, 0x4}, {0xaf4, 0x5, 0x156, 0x8, 0x4, 0x3}, {0x9, 0x7ff, 0x401, 0x800000, 0x6, 0x3}, {0x25c, 0x7, 0x3, 0xa0, 0xffff, 0x7}, {0x6, 0xebcf, 0x2, 0x3, 0x0, 0xf}, {0x3, 0xe, 0x4, 0x7, 0x3, 0x9}, {0x7, 0x7f, 0x6, 0x0, 0x70}, {0x5, 0x8, 0x8000, 0x3, 0x4, 0x5}, {0x4, 0x7fffffff, 0x56, 0x3, 0x1, 0xb}, {0x65e, 0x3, 0x6, 0x6, 0x10000, 0x4e}, {0x5, 0xa, 0x6, 0xa, 0x6c, 0x5}, {0x1, 0x4, 0x9, 0x8a82, 0x7, 0xc7}, {0x3, 0x5, 0x7fff, 0xe0e, 0x7, 0xc}, {0x9, 0x9, 0xffff0001, 0x239d, 0xe1, 0x4}, {0x9, 0xfffffffb, 0x400, 0x4, 0xaf5fa14, 0xc}, {0x7, 0xfffffffb, 0x7, 0x8, 0x3, 0x2}, {0x4, 0x7, 0x672, 0x6, 0xd06, 0x4}, {0xc5aa, 0x9, 0x8e, 0x6, 0x80000000, 0x8}, {0x284, 0x8000, 0x4, 0x73a, 0x3, 0x10}, {0x10000, 0x81, 0x9, 0x5f, 0x81, 0x8}, {0x879d, 0x2, 0x2, 0xfaec, 0x8}, {0x8000, 0x4, 0x1, 0x899, 0x758d, 0xff}, {0xdf09, 0x0, 0x1, 0x825d, 0xb9, 0x2c}, {0x80, 0x1, 0x3, 0x38d, 0xc, 0x5}, {0x8, 0x60000000, 0x0, 0x2, 0x2, 0x4}, {0x83, 0xc, 0x5, 0x80000000, 0x4, 0x9}, {0x40, 0x7, 0x7, 0xf26d, 0x89, 0x62}, {0x4, 0x8, 0x9, 0x1000, 0x1, 0x8}, {0x5, 0x8, 0xc7, 0xfff, 0x6, 0xa00}, {0x2, 0x4, 0x0, 0x8, 0x7, 0x1000}, {0x4, 0x9, 0x1, 0xd, 0x5, 0xcce}, {0x4, 0x8, 0xf, 0x4, 0x0, 0x7fffffff}, {0x8001, 0x4, 0xffffff01, 0x20, 0x4, 0xfffffffa}, {0x4, 0x4, 0x8000, 0x3, 0x5, 0x8000}, {0x1, 0xb0, 0x5, 0x1, 0x4e, 0x5}, {0x1, 0x1, 0xfffffff2, 0x2ad9, 0x5, 0x8}, {0x8, 0xfff, 0x200, 0x5, 0xa69, 0x81}, {0xa35, 0x36d7, 0x6, 0x9, 0x7, 0x6}, {0x9cb, 0xa4b, 0x800, 0x4, 0x3}, {0x3, 0x9, 0x9, 0x3, 0x7, 0x8}, {0x5, 0x9, 0xfffffffc, 0x40, 0xf, 0x5}, {0x9, 0xcbd, 0x257, 0x2, 0x8, 0xff800000}, {0x1, 0x2, 0x922, 0x24, 0x9}, {0xfff, 0x5, 0x4, 0x2, 0x40, 0x10001}, {0x5, 0x5, 0x80, 0x1, 0x0, 0x7}, {0x1, 0x8, 0xf7, 0x10000, 0x29c3, 0x6}, {0x0, 0x1000, 0x7, 0x8000, 0xe44, 0x8001}, {0xee, 0x7, 0x6, 0x9, 0x0, 0x1}, {0x40, 0x0, 0x6, 0xcd1, 0xf, 0xd4b6}, {0x5, 0x2, 0x6, 0x1, 0x1, 0x1}, {0x4, 0xc, 0xb, 0x1, 0x7, 0x1ff}, {0x4, 0x8, 0x10001, 0x1a9, 0x7, 0xc}, {0x9, 0x4, 0x7f, 0x5, 0x6}, {0x99c, 0x1, 0xfffffffc, 0x7, 0xfdd, 0x40}, {0x0, 0x9, 0x0, 0x417, 0x5, 0x6}, {0x4e79, 0x80000000, 0x8, 0x1, 0xe, 0x1}, {0x3, 0x7ff, 0xa1, 0x6, 0x0, 0x3}, {0x4, 0x8, 0x8, 0x7fff, 0xe35, 0x4}, {0x4, 0x9, 0x8, 0x1, 0xff, 0x9}, {0x6, 0x1e000, 0xd547bec2, 0x3ff, 0x10, 0xd39e}, {0x7fffffff, 0x89, 0x1, 0x0, 0xff, 0xd}, {0x9, 0x3, 0x3, 0x3, 0xe, 0x5}, {0x6, 0x1, 0x2, 0x8, 0x2, 0x1b}, {0x0, 0xffffffff, 0x7f, 0x7, 0x4, 0xdc}, {0x6, 0x2, 0x3, 0x9, 0x285, 0x6}, {0x5, 0x200, 0x1f, 0x10000, 0x0, 0x9}, {0x0, 0xdd, 0xfffffffa, 0xa0000000, 0xfffffffd, 0x400}, {0x81, 0x5, 0xe3, 0x7, 0x100, 0x2}], [{}, {0x4, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x3}, {0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x7, 0x1}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x3}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x1, 0x1}, {}, {0x1, 0x1}, {0x5}, {0x4}, {}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x3}, {0x1}, {0x3, 0x1}, {0x3}, {0x4}, {0x2, 0x17639bd1295d7180}, {0x1, 0x1}, {0x1}, {0x2}, {0x4, 0x1}, {0x5}, {0x3}, {0x1, 0x1}, {0x4}, {}, {0x3}, {0x2}, {0x3}, {0x1, 0x1}, {0x2}, {0x7}, {0x1}, {0x5}, {0x2, 0x1}, {0x5, 0x1}, {0x1}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x1}, {0x2}, {0x4, 0x1}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2}, {0x2}, {0x3, 0x1}, {0x1}, {0x3}, {0x3, 0x389f2efc0f667d2d}, {0x5, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x4, 0x1}, {0x1}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3}, {0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x2}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x2}, {0x7b16142e2125e5cf}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {}, {0x3}, {0x1}, {0x3}, {0x3, 0x1}, {0x2}, {0x4}, {0x0, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x120, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x4c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0xcc2ceaf42db552b}]}]}, @TCA_PEDIT_PARMS={0xe50, 0x2, {{{0x65, 0xe3f, 0x0, 0x2, 0x4}, 0xba, 0x9, [{0x7, 0x9, 0x99, 0x9, 0x1e, 0xcc}, {0x3ff, 0x1, 0x80000001, 0x200, 0x1, 0xfffffffa}]}, [{0x8cc6, 0x9, 0x1ea, 0x4, 0x7, 0xed18}, {0x3ff, 0x4, 0x6, 0xd, 0x1, 0x168f}, {0x5, 0x400, 0xafa, 0x269, 0x1}, {0xf29, 0x3, 0x1, 0x4, 0x2, 0x3}, {0x3, 0x5, 0x0, 0x3, 0x2, 0x8f87}, {0x8, 0x3, 0x1eae, 0x2, 0xc, 0x6}, {0x6, 0xfffffffb, 0xa9e, 0xd, 0x8, 0xaa3b}, {0x8a5, 0xf31, 0xfffffff2, 0x401, 0x5, 0x4}, {0x4, 0x5, 0x91a, 0x40, 0xa35}, {0x5, 0xc58, 0xffffffff, 0xffffad88, 0x7f, 0x8}, {0x74c, 0x6, 0x8, 0x10, 0x7, 0x9}, {0x7, 0xffff7fff, 0x7b, 0xfffffff7, 0x8, 0x6}, {0x93, 0x10000, 0x1, 0x200, 0x6, 0x3}, {0x4, 0xcfe, 0x4, 0x8, 0xde2d, 0xd7b}, {0x100, 0xffff, 0xd, 0xe, 0xa1, 0x5}, {0x4, 0x1, 0x8, 0x3, 0x9, 0x4}, {0xed, 0x1, 0x6, 0x8001, 0x7, 0xb}, {0x7, 0x9, 0x2, 0x8, 0x1, 0x5}, {0x1, 0x4, 0x81, 0x6, 0x74, 0x3b}, {0x0, 0xe49f, 0xffffffc2, 0x5, 0x5, 0x7}, {0x7, 0x2, 0xffffffff, 0xe, 0xbb49, 0x2}, {0x4, 0x6, 0xcc, 0x3, 0x0, 0x5}, {0xe20, 0x4, 0x9, 0x468, 0x9, 0xff}, {0x684f, 0x6, 0xf16, 0x8001, 0x1, 0xff000000}, {0xffffffff, 0x8, 0xca, 0x4, 0x3, 0x401}, {0xa, 0x5, 0x5, 0x14, 0x10001, 0x8000}, {0x5, 0x1, 0x3, 0x0, 0x8, 0x6}, {0xe, 0x4880, 0x6, 0x9, 0x9, 0x8}, {0x10000, 0x3, 0x4, 0xd438, 0x10001, 0x3}, {0x37f6cdbc, 0x8, 0x2, 0x5, 0x2}, {0x4, 0x9, 0x6, 0xfffffffb, 0xfffff8fe, 0x3}, {0xc74c, 0x4, 0x1271, 0xe8, 0x7, 0x5}, {0x2, 0x2, 0x60, 0x4, 0x1, 0x8}, {0xffff8cb1, 0xe3d, 0x8000, 0xa16, 0x52, 0x80000001}, {0xffffffff, 0x6, 0xf97f, 0xe, 0x3, 0x2000000}, {0xb0a6, 0x63, 0x120, 0x8, 0xb6, 0x7}, {0x68, 0x6, 0x9, 0x7, 0x2, 0x2}, {0x7fff, 0x9, 0x4, 0x9, 0x7, 0x7fff}, {0x101, 0x5993, 0x0, 0x0, 0x7c, 0x6}, {0x6, 0x7, 0x800, 0x9, 0xfffffffc}, {0x3c000000, 0x5, 0x651, 0x8a40, 0x5b, 0xa}, {0xe, 0x89e, 0x81, 0x10001, 0x7f, 0x5}, {0xc1, 0x1000, 0x8, 0x0, 0xf8a2, 0x1}, {0x278e9648, 0x8913, 0x7f, 0x3, 0xffffffff, 0x7}, {0x6, 0xfff, 0x5, 0x1, 0x8, 0x10000}, {0x5, 0x9, 0xa1, 0x6, 0x9, 0x8}, {0x1000, 0x8881, 0x2, 0x9, 0x5, 0x7}, {0x9, 0x34cf, 0x6, 0x3, 0x3, 0x2}, {0x0, 0x4, 0x8, 0x800, 0x9, 0x8001}, {0xffffffff, 0x43b, 0x8, 0xf79, 0x4, 0x8001}, {0x5, 0x2a, 0x100, 0x3, 0x6c, 0x9}, {0x8, 0x200, 0x4b, 0x0, 0x4c4c604a, 0x7}, {0x81, 0x3, 0x8000, 0x0, 0x2, 0x9}, {0x3, 0x6, 0x4, 0x9, 0x3, 0x12c0}, {0x3, 0x58bc, 0x2820, 0x3, 0x2}, {0x5, 0x8, 0x2, 0x7c93, 0x4, 0xfffffc00}, {0x3, 0x6, 0x3ff, 0x6, 0x47, 0x10001}, {0x6, 0x5, 0x5, 0x80, 0x1ddf, 0x80000001}, {0xfffffffd, 0x6, 0x2, 0x8000, 0x0, 0x4}, {0x1, 0x8, 0xf, 0x9, 0x3, 0x3b9c}, {0x8, 0x2, 0xa76f, 0xa, 0x40000000, 0xfffffffc}, {0x1, 0x7, 0x3, 0x2, 0x9, 0x7}, {0x7f, 0x3ff, 0x2, 0x3, 0x100, 0x3}, {0x8, 0x1b, 0xa303, 0x6, 0x9, 0xad}, {0x8a3, 0x401, 0x3, 0x81, 0x401}, {0x3, 0xd22, 0xe, 0x4, 0x5, 0x5}, {0xfffffffa, 0x1, 0x9, 0x200, 0x8, 0x9}, {0x91c, 0x2, 0x4, 0x3, 0x3}, {0xfffffff8, 0x3, 0x2, 0xffff, 0xff, 0x3}, {0x841, 0x6, 0x2, 0xfffffffc, 0x8, 0x7fff}, {0x400, 0xc, 0x76a, 0x9, 0xfffffff2, 0x3}, {0x5, 0x4, 0x2, 0x9640, 0x2, 0x9}, {0xda5, 0x800, 0x2, 0xe73, 0xcf07, 0x102}, {0x1, 0x6, 0xffffffff, 0x9, 0x3ff}, {0x3, 0x7fffffff, 0xff, 0x4, 0xfffffa7f, 0x6}, {0x101, 0x9, 0x6, 0x9, 0x2, 0x1}, {0x3, 0x8, 0x40, 0x3, 0x5, 0x8}, {0x3, 0x4, 0xa, 0x200, 0xd567, 0x3}, {0x7, 0x9, 0x2, 0x8, 0x2, 0xe}, {0x5bbd, 0x400, 0x80000001, 0x1ff, 0x3}, {0x9, 0x3, 0x4e, 0x5, 0x400, 0x9}, {0x0, 0x5, 0x6, 0x4, 0x4, 0x3}, {0x1, 0x2, 0xba9, 0x94, 0x9}, {0x81, 0x0, 0x40, 0x8, 0x1000, 0x7}, {0x6, 0x3, 0x6, 0x9, 0x7, 0x8}, {0x28000, 0x6, 0x3, 0xfff, 0x7, 0xfffffff1}, {0x8, 0x64, 0x5, 0x9, 0x9, 0x10000}, {0x2, 0x0, 0xde, 0x565, 0x1, 0x1}, {0x75c1, 0xb9, 0x8, 0xbd, 0x5, 0x8}, {0x2, 0x100, 0x25, 0x4, 0xffffff67, 0x2}, {0x7d1, 0xfdd, 0x9, 0x3, 0x4, 0x6}, {0x0, 0x7fff, 0x7, 0x7, 0x4ce, 0x1000}, {0x6, 0x2, 0x48, 0x6, 0x57, 0x4}, {0x0, 0xfffffff8, 0x3, 0xb, 0x6, 0x6}, {0x7, 0x1ff, 0x80000001, 0x9, 0x7b, 0x9}, {0x10f69a01, 0x7, 0x15c761ad, 0x3, 0x9, 0x4}, {0x1, 0x61, 0xd1, 0xe, 0x4, 0x7fffffff}, {0x5, 0x6, 0x5, 0x9, 0x60e2, 0x10}, {0x6, 0x7ff, 0x29cc, 0xf, 0x0, 0x3}, {0xfffffffb, 0x7, 0x800, 0x4, 0x66, 0x1}, {0x0, 0x0, 0x3, 0xffff8e6d, 0xfffffff7, 0x4}, {0x5, 0x3, 0x982b, 0x5, 0x9, 0x8001}, {0xd941, 0x10000, 0x6, 0x4, 0x7, 0x4}, {0xfffff000, 0x9, 0x7fff, 0x5, 0x5806, 0x606b}, {0x8, 0x100, 0x3, 0x0, 0x5, 0x3f8}, {0x8, 0x3, 0x5, 0x8, 0xfffffbff, 0xfffffffb}, {0x6, 0x2000000, 0x81, 0x7d, 0xffffff6b, 0x6}, {0x4, 0x8, 0x2, 0xd16, 0xbb42, 0x10001}, {0x5, 0x3, 0x1, 0x6756, 0x0, 0x500}, {0xc, 0x6, 0x5, 0x3, 0x1, 0x2000}, {0x2, 0x6, 0x1d8, 0x9398, 0x10, 0xfffeffff}, {0x2, 0x9, 0x9, 0x0, 0x0, 0x200}, {0x101, 0xf, 0x6, 0x0, 0x76cf1ca0, 0x3}, {0xc, 0x154, 0xec6a, 0x1, 0x0, 0x4}, {0xb0, 0x2, 0xb, 0x8f1b, 0x6, 0x101}, {0x9, 0x2, 0x5, 0xdf82, 0x5, 0x8}, {0x9, 0x3964, 0x3, 0x7, 0x1d4, 0x40}, {0x2, 0x40, 0x9, 0x5, 0x6, 0x401}, {0x9, 0x6, 0x3, 0x2, 0x1}, {0x6, 0x5, 0x80000001, 0x7fff, 0x208, 0x8001}, {0x3, 0x4, 0x7, 0x3, 0xf73, 0x800}, {0x9, 0x3, 0xcd5, 0x9, 0x9, 0x4}, {0xffffbee1, 0xffff0001, 0x80000001, 0x6, 0xc, 0x3}, {0xc9d2, 0x75a, 0xa6d, 0x7, 0x1, 0x9}, {0x8000, 0x0, 0x6, 0xfffff9ac, 0x8, 0x1}, {0x8, 0xfffffffd, 0x5cb, 0x8, 0x2, 0x81}, {0x9df9, 0x5, 0x2, 0x10000, 0x7c81}, {0x5, 0x5, 0x3, 0x14e3, 0x8, 0x6}], [{0x2}, {0x3}, {0x0, 0x1}, {0x1, 0x1}, {0x3}, {0x1, 0x1}, {0x2, 0x1}, {0x5}, {0x2}, {0x2}, {0x0, 0x1}, {0x2, 0x1}, {0x3}, {0x5, 0x1}, {0x2}, {0x4, 0x1}, {0x3, 0x1}, {0x2}, {0x2}, {0x5, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {}, {0x2, 0x1}, {0x7}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x3}, {0x2}, {0x7, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x2}, {0x3}, {0x431ade4962fb485a}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3}, {0x1}, {0x3}, {0x1, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x2}, {0x4}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x3}, {}, {0x3}, {0x5}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x2}, {0x4, 0x1}, {}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4}, {0x3}, {0x5, 0x1}, {0x4}, {0x2, 0x1}, {0x4, 0x1}, {0x2}, {0x4}, {}, {}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5}, {0x3}, {}, {0x3}, {0x5, 0x1}, {0x3}, {0x0, 0x2d6aba667ce7053e}, {0x3, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x1}, {0x1, 0x1}, {0x1}, {0x4}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x1}, {0x2}, {0x5}]}}, @TCA_PEDIT_KEYS_EX={0x3c, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}]}, {0xd0, 0x6, "e4742d9867a5d08e63366eba57a51a593f110b5a8747992cb66b16666fa0700d140d66f3d117f08c3f3b4dc2818a54d8fb3b3ff3ac86265f41d90e7618b8b77681cda5ca8af91ba47539ba3c71c2956dc5e9420d46d3ac37de85501b66193bb1875eedbc86c6c44dda2c7f276628e98e0c04349a84e4788da01e4feb9e969ee7a33fc0d7fb1d70efbb42adcdda610c2c2e6015a399c8a492191b87d04540777db9bf074ee850e01ebd4619b35f6008e3e73cad69f86b7602728296b60df2806b786bef6fe2c8d6f36f399ba2"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_U32_LINK={0x8, 0x3, 0x10001}, @TCA_U32_INDEV={0x14, 0x8, 'nicvf0\x00'}, @TCA_U32_MARK={0x10, 0xa, {0xc0000, 0x9}}]}}]}, 0x4db4}, 0x1, 0x0, 0x0, 0x10000080}, 0x841) socket$packet(0x11, 0x3, 0x300) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000005ac0)={0x2, &(0x7f0000005a80)=[{0x2, 0xb, 0x81, 0x2}, {0x7ebb, 0x3, 0x0, 0x6}]}) socket(0x18, 0x80000, 0x5) bind(r1, &(0x7f0000005b00)=@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000005b80)={r5, 0x80}, &(0x7f0000005bc0)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000005c00)=@assoc_value={r9, 0xc000}, &(0x7f0000005c40)=0x8) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005cc0), r6) sendmsg$NL80211_CMD_DISASSOCIATE(r10, &(0x7f0000005e80)={&(0x7f0000005c80)={0x10, 0x0, 0x0, 0x10800000}, 0xc, &(0x7f0000005e40)={&(0x7f0000005d00)={0x140, r11, 0x305, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x68}}}}, [@NL80211_ATTR_IE={0xac, 0x2a, [@measure_req={0x26, 0x9b, {0x6, 0x4, 0x1, "5e02bd91da43db644ee86f612d511f6ca036a83e3eb7a04c5852dbd17d32ccdfcd7d7310cb6125e55ac432bb5b2a4ee48cfb4f48832f68672c25a8580e930363a1a0e28fce4bc6300396a3bf5ed9ec22273cbf965df02039e6b87565723f6b996c0cbdc083e457b5aa34815bc2eacd568c333da9e67d0775378298147d690e82ffc7b66d2592eda92ea10ce4e55697e5bd34b6832f1f4153"}}, @dsss={0x3, 0x1, 0x78}, @cf={0x4, 0x6, {0x2, 0x7, 0xfff8, 0x1}}]}, @NL80211_ATTR_SSID={0xe, 0x34, @random="0733a48cdd1efd2acf92"}, @NL80211_ATTR_SSID={0x1e, 0x34, @random="190de74cf80e55931d8dc5a83b3a0490f5b201037dca80bc636e"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x401}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_IE={0x12, 0x2a, [@dsss={0x3, 0x1, 0x3}, @gcr_ga={0xbd, 0x6}, @challenge={0x10, 0x1, 0xaa}]}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x140}, 0x1, 0x0, 0x0, 0x800}, 0x80) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) epoll_wait(r4, &(0x7f0000005ec0)=[{}, {}, {}, {}], 0x4, 0x2) 4.451519986s ago: executing program 4 (id=12591): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56441, 0x70b928, 0x80000, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0x2, 0xb}, {0xfff1, 0x3}}, [@TCA_RATE={0x0, 0x5, {0x7, 0xc}}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000c061}, 0x8000) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r3) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="31032abd7000fbdbdf250b00000008000300", @ANYRES8=r2], 0x1c}, 0x1, 0x0, 0x0, 0x404c8d1}, 0x0) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r14 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r14, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r16 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r14) sendmsg$NL80211_CMD_FRAME(r14, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)={0x38, r16, 0x1, 0x70bd2c, 0x0, {{0x2}, {@val={0x8, 0x3, r15}, @val={0xc, 0x99, {0x2, 0x25}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x143c}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]]}, 0x38}, 0x1, 0x0, 0x0, 0x9d26f8fcf5795660}, 0x4040000) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r13, 0x20, 0x70bd2d, 0x2ddfdbff, {{}, {@val={0x8, 0x3, r15}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x41) getsockname$packet(r9, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r17, @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) 4.449937402s ago: executing program 1 (id=12592): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000001200010003050000000000000a0900000000000000000000000000000100ffffee9e000000000000000000000000ffff"], 0x4c}}, 0x0) (async) r1 = socket$tipc(0x1e, 0x5, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000040)=0xfffffffffffffffa) listen(r1, 0x0) (async) accept4$tipc(r1, 0x0, 0x0, 0x0) 4.440533525s ago: executing program 0 (id=12593): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e25, @rand_addr=0x64010102}]}, &(0x7f00000002c0)=0x10) syz_emit_ethernet(0x7e, &(0x7f0000000240)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010103, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x41df, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0x0, 0x86, 0x545}, @timestamp={0x8, 0xa, 0x6, 0x4}, @nop, @timestamp={0x8, 0xa, 0x8, 0x3}, @exp_fastopen={0xfe, 0xe, 0xf989, "dbf57334f9b969d503ec"}, @mptcp=@synack={0x1e, 0x10, 0x4, 0x2, 0x7, 0x80000000, 0x3}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x6, @broadcast, 0x3}]}}}}}}}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f00000002c0)={r3}, &(0x7f0000000440)=0x8) getsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000000), &(0x7f0000000080)=0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000100)=0xa8a, 0x4) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000001500)=ANY=[@ANYRES64=r5], &(0x7f0000000180)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000001000500050007000000000008000900030000001400200040000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000000c0)={'wg2\x00'}) 4.292873676s ago: executing program 1 (id=12594): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000000)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48, 0x0, 0x0, 0xb928}, {0x6, 0x37, 0x0, 0x9}]}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) (async) bind$rds(0xffffffffffffffff, 0x0, 0x0) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) r4 = socket$kcm(0x2, 0xa, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40000) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="016f08000100270000002700000045"], 0x3a) (async) write$tun(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="016f08000100270000002700000045"], 0x3a) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x9, 0x0, 0x0) (async) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x9, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="00000000dfdf7aaca651a2200f522e0d078c9eafd70345686aba70f6f60243389407907b2f514315aab5", @ANYRES16=r1, @ANYBLOB="010028bd7040010000000f00000008000600", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r5, @ANYBLOB="0500330002000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20004081}, 0x0) 3.462710026s ago: executing program 0 (id=12595): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4a, &(0x7f0000000100)=0x9, 0x4) mmap(&(0x7f0000001000/0xb000)=nil, 0xb000, 0x2, 0x12, r3, 0x852ac000) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000000)=0x86, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e1f, 0xffffffff, @loopback, 0xbf}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0xb, &(0x7f0000000080)=0x9, 0x4) recvmmsg(r3, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)=""/4110, 0x100e}, 0x7ffffffe}], 0x1, 0x40002000, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "00000000000000ecff0000000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x22008000}, 0x0) 3.272737903s ago: executing program 0 (id=12596): syz_emit_ethernet(0x32, &(0x7f0000000000)={@random="e90c610faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x8, 0x24, 0x0, 0xe000, 0x2, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x1, 0x7}}}}}}}, 0x0) (async, rerun: 64) syz_emit_ethernet(0x32, &(0x7f0000000e40)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x8e}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x7, 0x10, 0x0, @gue={{0x2, 0x1, 0x2, 0x9}}}}}}}, 0x0) (async, rerun: 64) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_XFRM_DIR={0x5, 0x3, 0x2}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x84}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0x6, 0x9}, {0x7}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4c, 0x2, [@TCA_PIE_ECN={0x8, 0x6, 0x1}, @TCA_PIE_BYTEMODE={0x8}, @TCA_PIE_ALPHA={0x8, 0x4, 0x9}, @TCA_PIE_TUPDATE={0x8, 0x3, 0x331d}, @TCA_PIE_TUPDATE={0x8, 0x3, 0x6}, @TCA_PIE_TARGET={0x8, 0x1, 0x9}, @TCA_PIE_ALPHA={0x8, 0x4, 0x13}, @TCA_PIE_BYTEMODE={0x8}, @TCA_PIE_TUPDATE={0x8, 0x3, 0x6}]}}]}, 0x78}}, 0x24040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xa}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) (async) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000001d00)={'tunl0\x00', &(0x7f0000001c80)={'erspan0\x00', 0x0, 0x7, 0x7, 0xfcb6, 0x1f09, {{0x6, 0x4, 0x1, 0xf, 0x18, 0x65, 0x0, 0xa0, 0x4, 0x0, @rand_addr=0x64010100, @broadcast, {[@ra={0x94, 0x4, 0x1}]}}}}}) r7 = socket$netlink(0x10, 0x3, 0x0) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r8, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4) (async) bind$inet6(r8, &(0x7f0000000140)={0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0x6}, 0x1c) listen(r8, 0x1) (async, rerun: 32) close(0x3) (async, rerun: 32) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0xfff2}, {0xffff, 0x10011}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x101, 0xa6a, 0x9, 0xff, 0x21b9, 0x0, 0x6, 0x400, 0x50}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) (async) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4005, 0xfffffdfc, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}, {0x2, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x408d8}, 0x0) (async) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000000)=@newtaction={0x94, 0x30, 0x1, 0x0, 0x0, {}, [{0x80, 0x1, [@m_bpf={0x2c, 0x2, 0x0, 0x0, {{0x8}, {0xfffffffffffffec6}, {0x4}, {0xc}, {0xc}}}, @m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xba82}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}}, 0x0) 2.925288904s ago: executing program 2 (id=12597): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x34ccbc88900fbce7, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="b4050000200080066110000000000000c6000000000000009500d800000000009f33ef60916e55893f1eeb0b2ae13d922e6235592ce847e2566c43d72918a897323fd0723043c47c896ce0bce66a245ad9d6817fd98cd824498949714ffaac8a6f77ef0000ca5d82054d54d53cd2b6db714e75d9bdae214fa68a0557eb2c5ca683a4b6fcfcff0bffffffffffd47042eaebfa6fa26fa7a347c7faa8e700458c60897d4a6148a1c11428427c40de60beacf871ab5c2ff88a02084e5b5271e45f00003826fb8579c1fb01d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0c20cdbe7009a6fe7cc78762f1d4dcdbca64920db9a50f86c21632f7a4bd344e0bd74ff05d37ef68e3b9db863c758ffffffffabe90ac5d08dd9d4e0359c41cf3626e1230bc1cd4c02c460ceb44276e9bd94d1c2e6d17dc5c2edf332a62f5fe68fbbbbfcfd00000000000fbf940e6652d357474ed5f816f66ac3027460ae66317f83cdd7a7eb2a7003d1a6cf5478533584961c329fcf5a43e05c92bfef0dcd28000000003f2915a3039c9a78f63b8ec7e60a0000fed7d67c440e23d130e51eea1e085bebabe7059de9cbfc5117c024185a062acb6b8eec31c21b3af8b9eedb4660ed2deb7acf2a33a376a5cb7d4266d5b0be14488d14b473502486ad8dd600000000000000000000c7766ea7c581782c0d90f42a85303835fc291c25d29e6bead5d7360f2e1929d7736ebc8558c4506407d3046022bdf25485bd5442169e9b4c1278343581b7a06f65e8ea6b042c4fd08381e5000000000000006398d6480000001a723b91030000006480304c66b217aea0156ce9eef911fe5b7370f79987303ecb3aabc53c60014a0101ab766754f596b41da9534d12b8306a1b36cf3b03f0d790879f523eabfbee83d8bd472ef69660cf6ec897106c51e54a17497f384c4956b41f3843e7c878b1e11316d8ddae1c6c3b85aaf7a9fcaf8f5d6186c42542d68ba72682c938d3c0a2e6e10eed71b1d31c9f300b41745329bf34495c63e43fb896e4903fb0fae54a8f0fe3b48a5b29d279070647e65097c8ecf32a15080000000000000001007ba4a70a084bd994ac5e00000000000000000000000000351a30cd97f83d72631d0fe92efa974a53f4dc1eb9a86df632a6d463688123f64d42a919bcfc44a90ffd680200000091f842a91c977f6075d07e39e669b0713af0498a99bf5261cb3269d499a5202d7a08b33ade7b38829b9bd39619688d5e9af22170ef83e5b92cbb32b655c45de1c154aad81bf64351668a3f76d5afa958aff76249e0ffdf8e45155536a1a44bfcbfbfd232af000052f9002a"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @fallback=0x35, r0, 0x8, &(0x7f0000000000)={0xfffffffd}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) (async) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async, rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2}, &(0x7f00000000c0), &(0x7f0000000100)=r1}, 0x20) (rerun: 32) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xf, 0x4, 0x4, 0x7}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000001100)={r3, &(0x7f0000000100), &(0x7f0000000000)=""/95, 0x2}, 0x20) 2.856025682s ago: executing program 2 (id=12598): unshare(0x600) (async) socket$igmp6(0xa, 0x3, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, r1, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x10014}, 0x4000054) 642.418114ms ago: executing program 2 (id=12599): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f0000001d40)={0x1, &(0x7f0000001d00)=[{0x0, 0x0, 0x0, @link_local}]}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYRES32=r1], 0xfc}, 0x1, 0x0, 0x0, 0x400c040}, 0x8000) 637.928446ms ago: executing program 4 (id=12600): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000700000000000000000000000d0100000000002e"], 0x0, 0x34}, 0x20) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x501, 0x0, 0x0, {{@in6=@private0, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0xfffffffffffffffc}}, [@offload={0xc, 0x1c, {0x0, 0x4}}]}, 0xc4}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1851020000000000f731ae853ca62df3"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 576.281811ms ago: executing program 1 (id=12601): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x3) (async) r1 = socket(0x24, 0x1, 0x1f9806be) syz_genetlink_get_family_id$devlink(0x0, r1) (async) sendmsg$DEVLINK_CMD_GET(r1, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000700)={0x0}, 0x1, 0x0, 0x0, 0x60040014}, 0x800) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f0000001ff0)={0x1d, r3}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44040}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$GTP_CMD_ECHOREQ(r1, 0x0, 0x24000000) (async) r4 = socket(0x10, 0x803, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$igmp6(0xa, 0x3, 0x2) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) getsockopt$inet6_udp_int(r4, 0x11, 0x67, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r5, 0x0, 0x0) (async) r8 = socket$can_raw(0x1d, 0x3, 0x1) (async) pipe(&(0x7f0000000000)) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000040)=0x6, 0x4) (async) ioctl$sock_SIOCETHTOOL(r8, 0x8946, 0x0) (async) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="48000095b069359e88afbb3c9efbbc661c560f1b0270324885c7ffed2f7ecb00"/42, @ANYRES16=r6, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r7, @ANYBLOB="0a00340002020202020200001e001f0000031d4000000000000000f10006000d000000010000000100050000"], 0x48}}, 0x0) 573.031385ms ago: executing program 0 (id=12602): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0xf3a, 0x0) close(r2) write(r0, 0x0, 0x0) r4 = openat$cgroup_ro(r2, &(0x7f00000002c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1100000004000000040000000200000000000000", @ANYBLOB="399d499b1317c40a09d52f573b95e3fd408dceba956fdfbe4f8b7a286f974875627c1d4ef0298f272ee3b2f6c888274140e526e5bfbed234ab1e9381ad64c66877fd8ec4a834d02ef350286e7602fe829c05062248", @ANYBLOB="000000000000000000000000000000000000000099deebf0474113b5587fc97e95e7e8565ce65ab4516577bf0e6e11234fe3272d2c336e49d5e681abd3a30e47fb65da1929ea08bbdbae154b6c7a02e0e683d17084ab9b2d2f88cfdfcca1384c06b66b2298c11293c78dc98749d147116c0389950271736ceab968150c11efb96861aa6d4aac623555028329f51399aca24a0c87aa142bb9a3a5048591910af7bab4b2c20da68f19e33cba5ad3f196c7edc24ed89a5470f1887c78f988dccf3d02edc455bcb5e97820264ca37cabe2000000000000", @ANYRES16=r1, @ANYRES32, @ANYBLOB="00000000000000000000000000000000005f54000000000000000000fa00d0103991"], 0x50) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x11, r2, 0x2d1c6000) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bond0\x00'}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xb, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000002, 0x3032, 0xffffffffffffffff, 0x2a1cf000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x60d1}, 0x94) r8 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r9, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 565.098811ms ago: executing program 4 (id=12603): r0 = socket$packet(0x11, 0x3, 0x300) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) (async, rerun: 32) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) (rerun: 32) sendmmsg$unix(r2, &(0x7f00000bd000), 0x400000000000247, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) close(r1) (async) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x10a0, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) writev(r4, &(0x7f00000005c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0xe}, {&(0x7f0000000040)="458047cfadf7018505d0a7447878d0ce09000000dbb92c7054aabc876992de840a2edf727f0203b0d214870789534afb35", 0x31}], 0x2) (async, rerun: 64) r8 = socket$unix(0x1, 0x2, 0x0) (rerun: 64) connect$unix(r8, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e21}, 0x6e) (async) ioctl$TUNGETIFF(r4, 0x800454d2, &(0x7f0000000100)={'batadv0\x00'}) 487.667945ms ago: executing program 3 (id=12604): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x128}, 0x24000804) (async) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r6, 0x29, 0x3b, &(0x7f0000000040)=@hopopts={0x2b}, 0x8) (async) sendto$inet6(r6, 0x0, 0x0, 0x8000, &(0x7f0000000080)={0xa, 0x5e20, 0x800009, @mcast2, 0x3}, 0x1c) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYRES64=r5, @ANYRESOCT=r3, @ANYRES64=r3, @ANYRES16=r5], 0x128}, 0x0) (async) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x40) (async) close(r7) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) 429.434899ms ago: executing program 1 (id=12605): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_batadv\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r1) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r2, 0x10c, 0x6, &(0x7f0000000200), &(0x7f0000000480)=0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r3) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, r4, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) unshare(0x20040600) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0xe, 0x7, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r6, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r6, 0x0, &(0x7f0000001700)=""/53}, 0x20) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$sock_buf(r7, 0x1, 0x19, 0x0, &(0x7f0000003080)) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup, 0xffffffffffffffff, 0x2c, 0x0, 0x4}, 0x20) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000500)={{0x2, 0x4e22, @empty}, {0x6}, 0x0, {0x2, 0x4e23, @broadcast}, 'syzkaller0\x00'}) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@fallback=r1, 0x2, 0x0, 0x2, &(0x7f0000000080)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000000406010200010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x28000080) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0xffff, 0x5}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0x8, 0x20000000, 0xa, 0x3}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x404c000}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e23, @multicast1}}, [0x1, 0x4c, 0x8, 0x7fffffffffffffff, 0x6, 0x7, 0x9, 0x8001, 0x3, 0x3, 0x7, 0x9, 0x7, 0xfb, 0x6]}, &(0x7f00000000c0)=0x100) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r9, 0x84, 0x6, &(0x7f0000000680)={r11, @in={{0x2, 0x4e23, @rand_addr=0x64010100}}}, &(0x7f00000002c0)=0x84) openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) 355.991043ms ago: executing program 2 (id=12606): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000100)={0x28, 0x0, 0xffffffff}, 0x10) listen(r0, 0x0) socket(0x2b, 0x1, 0x1) socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000440)="ea", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0xc800) setsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000000), 0x4) recvmmsg(r2, &(0x7f0000001140), 0x74e, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000fc0)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)={0x38, r4, 0x1, 0x70bd27, 0x0, {}, [@NL802154_ATTR_SEC_DEVKEY={0x1c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0x4}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x3}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000000) 252.761539ms ago: executing program 3 (id=12607): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff}) r1 = socket$nl_rdma(0x10, 0x3, 0x14) getsockopt$netlink(r1, 0x10e, 0xa, 0x0, &(0x7f0000001140)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000000a0601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x7ff, 0x30}, &(0x7f00000000c0)=0xc) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) ioctl$int_in(r4, 0x5421, &(0x7f0000000040)=0xfffffffffffffffa) r5 = socket$kcm(0x2, 0x5, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000340)="a0a741373a", 0x7fffff}, 0x38) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="130000000700000002"], 0x48) socket$alg(0x26, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x890b, &(0x7f0000000100)) listen(r4, 0x0) r6 = socket$tipc(0x1e, 0x1, 0x0) sendmsg$tipc(r6, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000040000000000000faf30000000018110004", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r8, 0x2000300, 0xe, 0x0, &(0x7f0000000400)="63eced8e460100000001acf12a04", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) accept4$tipc(r4, 0x0, 0x0, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r9, &(0x7f00000009c0)=[{{&(0x7f0000000240)={0xa, 0x4f21, 0x400, @private0, 0x3}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}, {{&(0x7f0000000300)={0xa, 0x4e21, 0xa6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x20000009}, 0x1c, &(0x7f0000000940)=[{&(0x7f00000006c0)="8e4151a067", 0x5}], 0x1, &(0x7f0000001a80)=ANY=[@ANYBLOB="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"], 0x378}}], 0x2, 0x931766f6319eed44) shutdown(r9, 0x1) getsockopt$bt_hci(r9, 0x84, 0x80, &(0x7f0000002100)=""/4127, &(0x7f0000000000)=0x101f) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000080)={0x0, 0x89}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000140)={r10, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x4e22, @loopback}, @in6={0xa, 0x4e23, 0x3, @remote, 0x3ff}]}, &(0x7f0000000200)=0x25) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000280)={'wg1\x00'}) 183.16265ms ago: executing program 4 (id=12608): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) r1 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x0, 0x9, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb6b, 0x800c1, 0x4, 0x1, 0x1, 0x9, 0x4, 0x1000, 0xc, 0x3, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x1, 0x63c, 0xe, 0x6, 0x100, 0x6, 0x1bfe, 0xb, 0x40, 0x40, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x7db, 0x5, 0x1, 0x7f, 0x1, 0xa, 0x7, 0xf, 0x101, 0xe07d, 0x1fa0860a, 0x1, 0xa9, 0x81, 0x2, 0x180000, 0x4003, 0x28b, 0x5, 0x2af, 0x3, 0x5, 0x3, 0x1, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10000, 0x0, 0xffffffff, 0x800, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0xfffffffe, 0x84, 0x100, 0x5, 0x252, 0x3, 0xb, 0x2, 0x20006, 0xc50, 0xc8, 0xb, 0x2, 0xd9a, 0xc8, 0x2a2, 0x1, 0x3, 0x2, 0x1, 0x8, 0x0, 0x4, 0x6, 0x0, 0x0, 0x1, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x5, 0x1fc, 0x1ff, 0xffffffff]}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c010000", @ANYRES16=r3, @ANYBLOB="21042abd7000fedbdf251a00000007002100626200000500920001000000f80022"], 0x11c}, 0x1, 0x0, 0x0, 0x4088}, 0x44840) sendto$phonet(r1, 0x0, 0x0, 0x24000020, &(0x7f00000001c0)={0x23, 0x95, 0x81, 0x2}, 0xffffffffffffff9e) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000540)=@getchain={0x44, 0x66, 0x300, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xffff}, {0x10, 0xe}, {0xfff2, 0xffff}}, [{0x8, 0xb, 0x3}, {0x8}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x801}, 0x1) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000000440)={0x6, {{0xa, 0x4e23, 0x7, @local, 0x90}}}, 0x88) unshare(0x2a020400) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r7, &(0x7f00000005c0)={0x1f, 0x0, @none, 0xa, 0x2}, 0xe) r8 = accept(r5, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYRES16=r0], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x10) pipe(&(0x7f0000000180)) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, 0x8032, 0xffffffffffffffff, 0x8884d000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_lsm={0x10, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="7910480000000000004f00000000009500"], &(0x7f0000000080)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0xa}, 0x94) 64.520641ms ago: executing program 1 (id=12609): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000002c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000ffdbdf252000000008000300", @ANYRES32=r3, @ANYBLOB="1c002d801b1001000100000008000200060000000500040001000000"], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) 0s ago: executing program 3 (id=12610): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x3c}}, 0x0) kernel console output (not intermixed with test programs): promiscuous mode [ 1428.977725][T19555] syzkaller0: entered allmulticast mode [ 1429.402479][T19583] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11553'. [ 1429.807329][T19600] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11563'. [ 1429.926504][T19600] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address [ 1429.942247][T19600] bond3: (slave wireguard0): Error -95 calling set_mac_address [ 1430.077789][T10110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1430.420394][T19632] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11570'. [ 1430.610329][T19647] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11572'. [ 1430.674145][T19652] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 1431.211468][T19666] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 1431.409922][T19676] sch_tbf: burst 240 is lower than device lo mtu (65550) ! [ 1431.505862][T19683] netlink: 'syz.2.11586': attribute type 61 has an invalid length. [ 1431.548988][T19684] netlink: 'syz.4.11587': attribute type 1 has an invalid length. [ 1431.897944][ T1632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1431.915111][T19712] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11590'. [ 1432.382938][T19727] team_slave_1: Caught tx_queue_len zero misconfig [ 1432.544451][T19729] netlink: 'syz.2.11597': attribute type 29 has an invalid length. [ 1432.611576][T19726] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11596'. [ 1432.622730][ T11] block nbd0: Possible stuck request ffff888036ec8000: control (read@0,1024B). Runtime 180 seconds [ 1432.633881][ T11] block nbd0: Possible stuck request ffff888036ec8200: control (read@1024,1024B). Runtime 180 seconds [ 1432.645361][ T11] block nbd0: Possible stuck request ffff888036ec8400: control (read@2048,1024B). Runtime 180 seconds [ 1432.656540][ T11] block nbd0: Possible stuck request ffff888036ec8600: control (read@3072,1024B). Runtime 180 seconds [ 1432.748239][T19741] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11600'. [ 1433.072009][T19766] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 1433.351330][T19781] lo speed is unknown, defaulting to 1000 [ 1433.387838][T19781] lo speed is unknown, defaulting to 1000 [ 1433.488298][T19779] lo speed is unknown, defaulting to 1000 [ 1433.884366][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1433.892467][ C0] lec:lec_tx_timeout: lec0 [ 1434.145344][T19779] lo speed is unknown, defaulting to 1000 [ 1434.231593][T19793] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11614'. [ 1434.255106][T19793] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11614'. [ 1434.274027][T19793] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11614'. [ 1434.336293][T19793] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11614'. [ 1434.424067][T19811] netlink: 41 bytes leftover after parsing attributes in process `syz.3.11618'. [ 1434.442722][T19811] netlink: 140 bytes leftover after parsing attributes in process `syz.3.11618'. [ 1434.728810][T19829] sctp: [Deprecated]: syz.4.11621 (pid 19829) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1434.728810][T19829] Use struct sctp_sack_info instead [ 1434.748105][T19829] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11621'. [ 1435.191725][T19842] lo speed is unknown, defaulting to 1000 [ 1435.278557][T19842] lo speed is unknown, defaulting to 1000 [ 1435.818992][T10113] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1436.550943][T19887] bond0: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 1436.961166][T25224] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1436.973361][T25224] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1436.984566][T25224] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1437.003530][T25224] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1437.013343][T25224] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1437.069011][ T5826] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1437.076894][ T5826] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1437.084398][ T5826] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1437.093509][ T5826] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1437.102211][ T5826] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1437.220392][T19887] bond0 (unregistering): Released all slaves [ 1437.398557][T19901] ipvlan0: entered promiscuous mode [ 1437.405339][T19901] ipvlan0: left promiscuous mode [ 1437.443393][T19902] ipvlan0: entered promiscuous mode [ 1437.450901][T19902] ipvlan0: left promiscuous mode [ 1437.518248][T19913] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1437.630668][T19903] lo speed is unknown, defaulting to 1000 [ 1437.678987][T19903] lo speed is unknown, defaulting to 1000 [ 1437.735022][T19919] netlink: 'syz.0.11649': attribute type 3 has an invalid length. [ 1437.747632][T19919] __nla_validate_parse: 6 callbacks suppressed [ 1437.747649][T19919] netlink: 666 bytes leftover after parsing attributes in process `syz.0.11649'. [ 1437.761580][ T1587] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1438.121333][T19938] FAULT_INJECTION: forcing a failure. [ 1438.121333][T19938] name failslab, interval 1, probability 0, space 0, times 0 [ 1438.155046][T19938] CPU: 0 UID: 0 PID: 19938 Comm: syz.2.11652 Not tainted syzkaller #0 PREEMPT(full) [ 1438.155072][T19938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1438.155082][T19938] Call Trace: [ 1438.155088][T19938] [ 1438.155096][T19938] dump_stack_lvl+0xe8/0x150 [ 1438.155128][T19938] should_fail_ex+0x412/0x560 [ 1438.155156][T19938] should_failslab+0xa8/0x100 [ 1438.155180][T19938] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1438.155209][T19938] ? __alloc_skb+0x1d0/0x7d0 [ 1438.155231][T19938] ? __local_bh_enable_ip+0xd0/0x130 [ 1438.155291][T19938] __alloc_skb+0x1d0/0x7d0 [ 1438.155317][T19938] xfrm_alloc_compat+0x1a6/0x16f0 [ 1438.155417][T19938] ? xfrm_get_translator+0x1b/0x240 [ 1438.155467][T19938] ? __pfx_xfrm_alloc_compat+0x10/0x10 [ 1438.155489][T19938] xfrm_nlmsg_multicast+0xda/0x1f0 [ 1438.155520][T19938] xfrm_send_acquire+0x9c9/0xf20 [ 1438.155563][T19938] ? __pfx_xfrm_send_acquire+0x10/0x10 [ 1438.155593][T19938] ? xfrm_init_tempstate+0xab6/0x1290 [ 1438.155644][T19938] ? km_query+0x2e/0x210 [ 1438.155670][T19938] km_query+0x11c/0x210 [ 1438.155691][T19938] ? km_query+0x2e/0x210 [ 1438.155718][T19938] xfrm_state_find+0x419b/0x5c60 [ 1438.155753][T19938] ? unwind_next_frame+0xa5/0x23c0 [ 1438.155796][T19938] ? xfrm_state_find+0x1fd/0x5c60 [ 1438.155825][T19938] ? __pfx_xfrm_state_find+0x10/0x10 [ 1438.155847][T19938] ? is_bpf_text_address+0x26/0x2b0 [ 1438.155872][T19938] ? __lock_acquire+0x6b5/0x2cf0 [ 1438.155907][T19938] xfrm_resolve_and_create_bundle+0x81c/0x30a0 [ 1438.155927][T19938] ? arch_stack_walk+0xfb/0x150 [ 1438.155988][T19938] ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10 [ 1438.156006][T19938] ? ref_tracker_alloc+0x2f1/0x4c0 [ 1438.156031][T19938] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1438.156056][T19938] ? dst_init+0xd9/0x480 [ 1438.156103][T19938] ? dst_alloc+0x12a/0x170 [ 1438.156118][T19938] ? ip_route_output_key_hash_rcu+0x14d0/0x25d0 [ 1438.156182][T19938] ? ip_route_output_key_hash+0x18d/0x2a0 [ 1438.156203][T19938] ? ip_route_output_flow+0x2a/0x150 [ 1438.156222][T19938] ? udp_sendmsg+0x154a/0x22f0 [ 1438.156296][T19938] ? ____sys_sendmsg+0x894/0xad0 [ 1438.156320][T19938] ? ___sys_sendmsg+0x2a5/0x360 [ 1438.156366][T19938] ? xfrm_sk_policy_lookup+0x6dc/0x720 [ 1438.156399][T19938] ? xfrm_expand_policies+0x489/0x740 [ 1438.156424][T19938] xfrm_lookup_with_ifid+0x28b/0x1b90 [ 1438.156489][T19938] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 1438.156532][T19938] xfrm_lookup_route+0x3c/0x1c0 [ 1438.156560][T19938] udp_sendmsg+0x154a/0x22f0 [ 1438.156584][T19938] ? count_memcg_event_mm+0x21/0x260 [ 1438.156625][T19938] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 1438.156678][T19938] ? __pfx_udp_sendmsg+0x10/0x10 [ 1438.156736][T19938] ? __pfx_aa_sk_perm+0x10/0x10 [ 1438.156756][T19938] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1438.156877][T19938] ? sock_rps_record_flow+0x19/0x400 [ 1438.156952][T19938] ? inet_sendmsg+0x29c/0x370 [ 1438.156973][T19938] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1438.156993][T19938] ____sys_sendmsg+0x894/0xad0 [ 1438.157011][T19938] ? irqentry_exit+0x59e/0x620 [ 1438.157030][T19938] ? trace_irq_disable+0x3b/0x150 [ 1438.157057][T19938] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1438.157084][T19938] ? import_iovec+0x73/0xa0 [ 1438.157107][T19938] ___sys_sendmsg+0x2a5/0x360 [ 1438.157132][T19938] ? __pfx____sys_sendmsg+0x10/0x10 [ 1438.157155][T19938] ? kstrtouint+0x6e/0xe0 [ 1438.157192][T19938] ? __fget_files+0x2a/0x420 [ 1438.157211][T19938] ? __fget_files+0x3a0/0x420 [ 1438.157237][T19938] __sys_sendmmsg+0x27c/0x4e0 [ 1438.157261][T19938] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1438.157279][T19938] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1438.157318][T19938] ? ksys_write+0x242/0x270 [ 1438.157335][T19938] ? __pfx_ksys_write+0x10/0x10 [ 1438.157359][T19938] __x64_sys_sendmmsg+0xa0/0xc0 [ 1438.157380][T19938] do_syscall_64+0x14d/0xf80 [ 1438.157398][T19938] ? trace_irq_disable+0x3b/0x150 [ 1438.157416][T19938] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1438.157431][T19938] ? clear_bhb_loop+0x40/0x90 [ 1438.157448][T19938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1438.157462][T19938] RIP: 0033:0x7ff696d9c799 [ 1438.157476][T19938] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1438.157489][T19938] RSP: 002b:00007ff697bb0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1438.157504][T19938] RAX: ffffffffffffffda RBX: 00007ff697016090 RCX: 00007ff696d9c799 [ 1438.157515][T19938] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000006 [ 1438.157524][T19938] RBP: 00007ff697bb0090 R08: 0000000000000000 R09: 0000000000000000 [ 1438.157533][T19938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1438.157549][T19938] R13: 00007ff697016128 R14: 00007ff697016090 R15: 00007fff53ac1338 [ 1438.157573][T19938] [ 1438.637175][T19938] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1438.642234][T19940] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.11653'. [ 1438.787338][T19890] infiniband syz1: set down [ 1438.795184][T19890] infiniband syz1: added ipvlan0 [ 1438.809173][T19890] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 1438.813704][T19890] infiniband syz1: Couldn't open port 1 [ 1439.073470][T19890] RDS/IB: syz1: added [ 1439.088495][T19890] smc: adding ib device syz1 with port count 1 [ 1439.095084][T19890] smc: ib device syz1 port 1 has pnetid SYZ0 (user defined) [ 1439.184180][ T5826] Bluetooth: hci2: command tx timeout [ 1439.485490][T19903] chnl_net:caif_netlink_parms(): no params data found [ 1439.719193][T19903] bridge0: port 1(bridge_slave_0) entered blocking state [ 1439.726407][T19903] bridge0: port 1(bridge_slave_0) entered disabled state [ 1439.734029][T19903] bridge_slave_0: entered allmulticast mode [ 1439.742692][T19903] bridge_slave_0: entered promiscuous mode [ 1439.775166][T19903] bridge0: port 2(bridge_slave_1) entered blocking state [ 1439.844082][T19903] bridge0: port 2(bridge_slave_1) entered disabled state [ 1439.890105][T19903] bridge_slave_1: entered allmulticast mode [ 1439.944236][T19903] bridge_slave_1: entered promiscuous mode [ 1440.101042][T19903] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1440.186705][T19903] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1440.383779][T19903] team0: Port device team_slave_0 added [ 1440.423610][T19903] team0: Port device team_slave_1 added [ 1440.546039][T19903] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1440.580500][T19903] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1440.620528][T19903] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1440.633852][T20015] batadv_slave_0: Caught tx_queue_len zero misconfig [ 1440.663512][T19903] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1440.680438][T19903] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1440.738004][T19903] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1440.909193][T19903] hsr_slave_0: entered promiscuous mode [ 1440.916138][T19903] hsr_slave_1: entered promiscuous mode [ 1440.924815][T19903] debugfs: 'hsr0' already exists in 'hsr' [ 1440.932376][T19903] Cannot create hsr debugfs directory [ 1440.948356][T10110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1441.252158][T20041] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11674'. [ 1441.261880][ T5826] Bluetooth: hci2: command tx timeout [ 1441.307250][T20042] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11674'. [ 1441.324624][T19903] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1441.414413][T19903] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1441.466134][T20053] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11678'. [ 1441.545087][T19903] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1441.605459][T20057] bond0: Caught tx_queue_len zero misconfig [ 1441.614791][T20057] netlink: 'syz.2.11679': attribute type 1 has an invalid length. [ 1441.648346][T19903] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1441.820534][T20064] bond4: (slave .`): Releasing active interface [ 1441.837268][T20064] bond4: (slave .`): the permanent HWaddr of slave - aa:aa:aa:aa:aa:17 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1441.876212][T20066] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11682'. [ 1441.879992][T20067] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1441.923024][T20064] dummy0: left allmulticast mode [ 1441.958169][T20064] team0: Port device dummy0 removed [ 1441.994206][T20064] .`: (slave batadv0): Releasing backup interface [ 1442.019421][T20064] bridge_slave_1: left allmulticast mode [ 1442.025212][T20064] bridge_slave_1: left promiscuous mode [ 1442.031863][T20064] bridge0: port 2(bridge_slave_1) entered disabled state [ 1442.047467][T20064] .`: (slave bond_slave_0): Releasing backup interface [ 1442.058963][T20064] .`: (slave bond_slave_1): Releasing backup interface [ 1442.082384][T20064] team_slave_0: left allmulticast mode [ 1442.108619][T20064] team0: Port device team_slave_0 removed [ 1442.114904][T20064] team_slave_1: left allmulticast mode [ 1442.148069][T20064] team0: Port device team_slave_1 removed [ 1442.154484][T20064] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1442.163635][T20064] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1442.172094][T20064] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1442.292743][T19903] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1442.341259][T19903] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1442.360435][T19903] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1442.384121][T19903] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1442.548985][T20088] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11685'. [ 1442.576331][T20088] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11685'. [ 1442.604568][T20088] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11685'. [ 1442.639946][T19903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1442.694939][T19903] 8021q: adding VLAN 0 to HW filter on device team0 [ 1442.725652][ T1587] bridge0: port 1(bridge_slave_0) entered blocking state [ 1442.732883][ T1587] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1442.765090][ T1568] bridge0: port 2(bridge_slave_1) entered blocking state [ 1442.772292][ T1568] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1442.837612][T20093] netlink: 'syz.0.11686': attribute type 1 has an invalid length. [ 1443.043686][T20104] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11690'. [ 1443.058882][T20101] gtp1: entered allmulticast mode [ 1443.095374][T20101] team0: Port device gtp1 added [ 1443.100102][T20107] xt_hashlimit: size too large, truncated to 1048576 [ 1443.320060][T20113] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11690'. [ 1443.336237][T19903] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1443.344313][ T5826] Bluetooth: hci2: command tx timeout [ 1443.375694][T20114] netlink: 168 bytes leftover after parsing attributes in process `syz.2.11691'. [ 1443.418623][T19903] veth0_vlan: entered promiscuous mode [ 1443.448013][T19903] veth1_vlan: entered promiscuous mode [ 1443.473568][T20116] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11690'. [ 1443.497053][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1443.505078][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1443.550431][T19903] veth0_macvtap: entered promiscuous mode [ 1443.615743][T19903] veth1_macvtap: entered promiscuous mode [ 1443.781586][T19903] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1443.826615][T19903] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1443.867919][T10113] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1443.892590][T10113] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1443.924132][T10113] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1443.944223][T10113] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1444.023442][T20126] nbd: must specify a device to reconfigure [ 1444.193478][T10113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1444.214282][T10113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1444.342383][ T1568] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1444.369059][ T1568] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1444.403769][T20132] lo speed is unknown, defaulting to 1000 [ 1444.412222][T20132] lo speed is unknown, defaulting to 1000 [ 1444.723068][T20137] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11645'. [ 1444.766320][T20137] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11645'. [ 1445.085894][T20145] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11698'. [ 1445.114126][T20147] FAULT_INJECTION: forcing a failure. [ 1445.114126][T20147] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1445.118348][T20144] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11698'. [ 1445.147876][T20147] CPU: 0 UID: 0 PID: 20147 Comm: syz.2.11699 Not tainted syzkaller #0 PREEMPT(full) [ 1445.147903][T20147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1445.147915][T20147] Call Trace: [ 1445.147924][T20147] [ 1445.147933][T20147] dump_stack_lvl+0xe8/0x150 [ 1445.147964][T20147] should_fail_ex+0x412/0x560 [ 1445.147992][T20147] _copy_from_user+0x2d/0xb0 [ 1445.148020][T20147] ___sys_sendmsg+0x1c6/0x360 [ 1445.148054][T20147] ? __pfx____sys_sendmsg+0x10/0x10 [ 1445.148115][T20147] ? __fget_files+0x2a/0x420 [ 1445.148140][T20147] ? __fget_files+0x3a0/0x420 [ 1445.148175][T20147] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1445.148208][T20147] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1445.148244][T20147] ? __pfx_ksys_write+0x10/0x10 [ 1445.148276][T20147] do_syscall_64+0x14d/0xf80 [ 1445.148300][T20147] ? trace_irq_disable+0x3b/0x150 [ 1445.148326][T20147] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1445.148345][T20147] ? clear_bhb_loop+0x40/0x90 [ 1445.148368][T20147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1445.148386][T20147] RIP: 0033:0x7ff696d9c799 [ 1445.148405][T20147] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1445.148421][T20147] RSP: 002b:00007ff697bd1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1445.148441][T20147] RAX: ffffffffffffffda RBX: 00007ff697015fa0 RCX: 00007ff696d9c799 [ 1445.148455][T20147] RDX: 000000002400c000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 1445.148467][T20147] RBP: 00007ff697bd1090 R08: 0000000000000000 R09: 0000000000000000 [ 1445.148478][T20147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1445.148490][T20147] R13: 00007ff697016038 R14: 00007ff697015fa0 R15: 00007fff53ac1338 [ 1445.148521][T20147] [ 1445.424783][ T5826] Bluetooth: hci2: command tx timeout [ 1445.813275][T20171] netlink: 'syz.1.11704': attribute type 1 has an invalid length. [ 1446.059435][ T2287] block nbd8: Possible stuck request ffff888026e38000: control (read@0,1024B). Runtime 180 seconds [ 1446.070730][ T2287] block nbd8: Possible stuck request ffff888026e38200: control (read@1024,1024B). Runtime 180 seconds [ 1446.082653][ T2287] block nbd8: Possible stuck request ffff888026e38400: control (read@2048,1024B). Runtime 180 seconds [ 1446.094495][ T2287] block nbd8: Possible stuck request ffff888026e38600: control (read@3072,1024B). Runtime 180 seconds [ 1446.455671][T20191] netlink: 36 bytes leftover after parsing attributes in process `syz.2.11708'. [ 1446.530041][T20191] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11708'. [ 1446.697646][ T1568] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1446.920159][T20215] FAULT_INJECTION: forcing a failure. [ 1446.920159][T20215] name failslab, interval 1, probability 0, space 0, times 0 [ 1446.948299][T20216] : renamed from veth0_to_bond [ 1446.983078][T20215] CPU: 0 UID: 0 PID: 20215 Comm: syz.3.11712 Not tainted syzkaller #0 PREEMPT(full) [ 1446.983104][T20215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1446.983116][T20215] Call Trace: [ 1446.983124][T20215] [ 1446.983132][T20215] dump_stack_lvl+0xe8/0x150 [ 1446.983163][T20215] should_fail_ex+0x412/0x560 [ 1446.983191][T20215] should_failslab+0xa8/0x100 [ 1446.983216][T20215] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1446.983245][T20215] ? __alloc_skb+0x186/0x7d0 [ 1446.983268][T20215] ? __alloc_skb+0x1d0/0x7d0 [ 1446.983288][T20215] ? __local_bh_enable_ip+0xd0/0x130 [ 1446.983317][T20215] __alloc_skb+0x1d0/0x7d0 [ 1446.983345][T20215] netlink_sendmsg+0x5d4/0xb40 [ 1446.983377][T20215] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1446.983403][T20215] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1446.983427][T20215] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1446.983448][T20215] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1446.983469][T20215] ____sys_sendmsg+0xa68/0xad0 [ 1446.983505][T20215] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1446.983540][T20215] ? import_iovec+0x73/0xa0 [ 1446.983569][T20215] ___sys_sendmsg+0x2a5/0x360 [ 1446.983601][T20215] ? __pfx____sys_sendmsg+0x10/0x10 [ 1446.983662][T20215] ? __fget_files+0x2a/0x420 [ 1446.983686][T20215] ? __fget_files+0x3a0/0x420 [ 1446.983721][T20215] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1446.983750][T20215] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1446.983786][T20215] ? __pfx_ksys_write+0x10/0x10 [ 1446.983816][T20215] do_syscall_64+0x14d/0xf80 [ 1446.983840][T20215] ? trace_irq_disable+0x3b/0x150 [ 1446.983864][T20215] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1446.983883][T20215] ? clear_bhb_loop+0x40/0x90 [ 1446.983905][T20215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1446.983923][T20215] RIP: 0033:0x7f269f59c799 [ 1446.983941][T20215] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1446.983964][T20215] RSP: 002b:00007f26a043f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1446.983983][T20215] RAX: ffffffffffffffda RBX: 00007f269f815fa0 RCX: 00007f269f59c799 [ 1446.983997][T20215] RDX: 000000002400c000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 1446.984008][T20215] RBP: 00007f26a043f090 R08: 0000000000000000 R09: 0000000000000000 [ 1446.984020][T20215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1446.984031][T20215] R13: 00007f269f816038 R14: 00007f269f815fa0 R15: 00007ffc74a9bda8 [ 1446.984062][T20215] [ 1448.455252][T20282] FAULT_INJECTION: forcing a failure. [ 1448.455252][T20282] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1448.487440][T20283] erspan0: entered promiscuous mode [ 1448.492945][T20283] vlan2: entered promiscuous mode [ 1448.499710][T20282] CPU: 1 UID: 0 PID: 20282 Comm: syz.2.11727 Not tainted syzkaller #0 PREEMPT(full) [ 1448.499733][T20282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1448.499744][T20282] Call Trace: [ 1448.499752][T20282] [ 1448.499759][T20282] dump_stack_lvl+0xe8/0x150 [ 1448.499798][T20282] should_fail_ex+0x412/0x560 [ 1448.499824][T20282] _copy_from_iter+0x1d3/0x1670 [ 1448.499851][T20282] ? rcu_is_watching+0x15/0xb0 [ 1448.499879][T20282] ? __pfx__copy_from_iter+0x10/0x10 [ 1448.499907][T20282] ? netlink_sendmsg+0x650/0xb40 [ 1448.499927][T20282] ? skb_put+0x11b/0x210 [ 1448.499954][T20282] netlink_sendmsg+0x6c0/0xb40 [ 1448.499985][T20282] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1448.500009][T20282] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1448.500032][T20282] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1448.500055][T20282] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1448.500075][T20282] ____sys_sendmsg+0xa68/0xad0 [ 1448.500108][T20282] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1448.500142][T20282] ? import_iovec+0x73/0xa0 [ 1448.500167][T20282] ___sys_sendmsg+0x2a5/0x360 [ 1448.500197][T20282] ? __pfx____sys_sendmsg+0x10/0x10 [ 1448.500250][T20282] ? __fget_files+0x2a/0x420 [ 1448.500272][T20282] ? __fget_files+0x3a0/0x420 [ 1448.500300][T20282] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1448.500327][T20282] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1448.500360][T20282] ? __pfx_ksys_write+0x10/0x10 [ 1448.500389][T20282] do_syscall_64+0x14d/0xf80 [ 1448.500413][T20282] ? trace_irq_disable+0x3b/0x150 [ 1448.500437][T20282] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1448.500456][T20282] ? clear_bhb_loop+0x40/0x90 [ 1448.500477][T20282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1448.500495][T20282] RIP: 0033:0x7ff696d9c799 [ 1448.500513][T20282] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1448.500528][T20282] RSP: 002b:00007ff697bd1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1448.500546][T20282] RAX: ffffffffffffffda RBX: 00007ff697015fa0 RCX: 00007ff696d9c799 [ 1448.500560][T20282] RDX: 000000002400c000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 1448.500572][T20282] RBP: 00007ff697bd1090 R08: 0000000000000000 R09: 0000000000000000 [ 1448.500583][T20282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1448.500594][T20282] R13: 00007ff697016038 R14: 00007ff697015fa0 R15: 00007fff53ac1338 [ 1448.500624][T20282] [ 1448.796225][T20295] __nla_validate_parse: 3 callbacks suppressed [ 1448.796245][T20295] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11729'. [ 1449.166965][T20336] netlink: 'syz.1.11734': attribute type 21 has an invalid length. [ 1449.243147][T20337] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11734'. [ 1449.257267][ T1612] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1449.376613][T20336] netlink: 164 bytes leftover after parsing attributes in process `syz.1.11734'. [ 1449.508190][T20345] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11737'. [ 1449.531594][T20345] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11737'. [ 1449.560535][T20345] geneve4: entered promiscuous mode [ 1449.570474][T20345] geneve4: entered allmulticast mode [ 1449.639826][T20354] FAULT_INJECTION: forcing a failure. [ 1449.639826][T20354] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1449.662560][T20354] CPU: 0 UID: 0 PID: 20354 Comm: syz.0.11741 Not tainted syzkaller #0 PREEMPT(full) [ 1449.662586][T20354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1449.662598][T20354] Call Trace: [ 1449.662606][T20354] [ 1449.662614][T20354] dump_stack_lvl+0xe8/0x150 [ 1449.662644][T20354] should_fail_ex+0x412/0x560 [ 1449.662671][T20354] _copy_from_iter+0x1d3/0x1670 [ 1449.662698][T20354] ? rcu_is_watching+0x15/0xb0 [ 1449.662729][T20354] ? __pfx__copy_from_iter+0x10/0x10 [ 1449.662759][T20354] ? netlink_sendmsg+0x650/0xb40 [ 1449.662782][T20354] ? skb_put+0x11b/0x210 [ 1449.662819][T20354] netlink_sendmsg+0x6c0/0xb40 [ 1449.662850][T20354] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1449.662876][T20354] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1449.662899][T20354] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1449.662920][T20354] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1449.662942][T20354] ____sys_sendmsg+0xa68/0xad0 [ 1449.662975][T20354] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1449.663010][T20354] ? import_iovec+0x73/0xa0 [ 1449.663036][T20354] ___sys_sendmsg+0x2a5/0x360 [ 1449.663064][T20354] ? __pfx____sys_sendmsg+0x10/0x10 [ 1449.663120][T20354] ? __fget_files+0x2a/0x420 [ 1449.663142][T20354] ? __fget_files+0x3a0/0x420 [ 1449.663171][T20354] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1449.663196][T20354] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1449.663228][T20354] ? __pfx_ksys_write+0x10/0x10 [ 1449.663254][T20354] do_syscall_64+0x14d/0xf80 [ 1449.663277][T20354] ? trace_irq_disable+0x3b/0x150 [ 1449.663300][T20354] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1449.663317][T20354] ? clear_bhb_loop+0x40/0x90 [ 1449.663337][T20354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1449.663355][T20354] RIP: 0033:0x7f621a59c799 [ 1449.663377][T20354] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1449.663391][T20354] RSP: 002b:00007f62187f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1449.663410][T20354] RAX: ffffffffffffffda RBX: 00007f621a815fa0 RCX: 00007f621a59c799 [ 1449.663423][T20354] RDX: 000000002400c000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 1449.663435][T20354] RBP: 00007f62187f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1449.663446][T20354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1449.663457][T20354] R13: 00007f621a816038 R14: 00007f621a815fa0 R15: 00007fffb6ad6ff8 [ 1449.663485][T20354] [ 1450.141726][T20361] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11742'. [ 1450.220233][T20280] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1450.230991][T20280] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1450.241983][T20280] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1450.592449][T20280] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1450.822938][T20395] netlink: 6032 bytes leftover after parsing attributes in process `syz.2.11749'. [ 1451.010337][T20404] netlink: 'syz.1.11754': attribute type 21 has an invalid length. [ 1451.037005][T20404] IPv6: NLM_F_CREATE should be specified when creating new route [ 1451.076583][T20404] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1451.083923][T20404] IPv6: NLM_F_CREATE should be set when creating new route [ 1451.091340][T20404] IPv6: NLM_F_CREATE should be set when creating new route [ 1451.098610][T20404] IPv6: NLM_F_CREATE should be set when creating new route [ 1451.181329][ T5826] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1451.195042][ T5826] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1451.205103][ T5826] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1451.217954][ T5826] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1451.225701][ T5826] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1451.293696][T20421] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1451.296102][T20413] lo speed is unknown, defaulting to 1000 [ 1451.322054][T20413] lo speed is unknown, defaulting to 1000 [ 1451.881479][T20441] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11761'. [ 1452.274296][T20441] netlink: 36 bytes leftover after parsing attributes in process `syz.1.11761'. [ 1452.449742][T20462] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1452.464112][ T1568] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1452.498457][T20462] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1452.567293][T20468] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11763'. [ 1453.264725][T25224] Bluetooth: hci5: command tx timeout [ 1453.486897][T20488] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1453.504093][T20413] chnl_net:caif_netlink_parms(): no params data found [ 1454.047248][T20413] bridge0: port 1(bridge_slave_0) entered blocking state [ 1454.054405][T20413] bridge0: port 1(bridge_slave_0) entered disabled state [ 1454.062396][T20413] bridge_slave_0: entered allmulticast mode [ 1454.070653][T20413] bridge_slave_0: entered promiscuous mode [ 1454.086085][T20413] bridge0: port 2(bridge_slave_1) entered blocking state [ 1454.102834][T20413] bridge0: port 2(bridge_slave_1) entered disabled state [ 1454.110286][T20413] bridge_slave_1: entered allmulticast mode [ 1454.118337][T20413] bridge_slave_1: entered promiscuous mode [ 1454.160998][T20413] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1454.175947][T20413] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1454.179884][T20514] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11777'. [ 1454.212312][T20519] netlink: 'syz.3.11775': attribute type 3 has an invalid length. [ 1454.222533][T20519] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.11775'. [ 1454.239689][T20413] team0: Port device team_slave_0 added [ 1454.323004][T20413] team0: Port device team_slave_1 added [ 1454.390854][T20413] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1454.413808][T20413] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1454.440572][T20413] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1454.453587][T20413] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1454.460901][T20413] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1454.487553][T20413] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1454.630178][T20413] hsr_slave_0: entered promiscuous mode [ 1454.644375][T20413] hsr_slave_1: entered promiscuous mode [ 1454.655864][T20413] debugfs: 'hsr0' already exists in 'hsr' [ 1454.662782][T20413] Cannot create hsr debugfs directory [ 1454.976338][T20535] netlink: 'syz.1.11781': attribute type 2 has an invalid length. [ 1455.009398][T20535] !: entered promiscuous mode [ 1455.018095][T20268] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1455.222769][T20413] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1455.224976][T20543] netlink: 44 bytes leftover after parsing attributes in process `syz.3.11784'. [ 1455.264863][T20413] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1455.338151][T25224] Bluetooth: hci5: command tx timeout [ 1455.565022][T20555] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1455.924966][T20555] bridge0: entered allmulticast mode [ 1455.967658][T20555] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 1456.113418][T20413] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1456.123939][T20413] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1456.178262][T20568] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11792'. [ 1456.245509][T20413] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1456.257644][T20413] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1456.312076][T20568] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 1456.326416][T20580] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11791'. [ 1456.368353][T20569] lo speed is unknown, defaulting to 1000 [ 1456.425463][T20580] netlink: 68 bytes leftover after parsing attributes in process `syz.3.11791'. [ 1456.459363][T20413] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1456.492523][T20413] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1456.514228][T20586] netlink: 'syz.4.11795': attribute type 4 has an invalid length. [ 1456.547807][T20569] lo speed is unknown, defaulting to 1000 [ 1456.568359][T20583] netlink: 'syz.4.11795': attribute type 4 has an invalid length. [ 1456.659952][T20592] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11796'. [ 1456.814592][T20591] lo speed is unknown, defaulting to 1000 [ 1456.889716][T20413] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1456.919711][T20413] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1456.959841][T20413] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1456.981243][T20413] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1457.083716][T20591] lo speed is unknown, defaulting to 1000 [ 1457.148504][T20413] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1457.195914][T20413] 8021q: adding VLAN 0 to HW filter on device team0 [ 1457.238612][T20275] bridge0: port 1(bridge_slave_0) entered blocking state [ 1457.245776][T20275] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1457.280664][T20268] bridge0: port 2(bridge_slave_1) entered blocking state [ 1457.287869][T20268] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1457.417868][T25224] Bluetooth: hci5: command tx timeout [ 1457.735203][T20413] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1457.938429][T20413] veth0_vlan: entered promiscuous mode [ 1457.965564][T20413] veth1_vlan: entered promiscuous mode [ 1457.978808][T20615] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11800'. [ 1458.149759][T20413] veth0_macvtap: entered promiscuous mode [ 1458.219686][T20274] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1458.243178][T20621] openvswitch: netlink: Message has 234 unknown bytes. [ 1458.284011][T20620] syzkaller1: entered promiscuous mode [ 1458.289938][T20620] syzkaller1: entered allmulticast mode [ 1458.534510][T20413] veth1_macvtap: entered promiscuous mode [ 1458.703869][T20413] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1458.814161][T20413] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1458.899951][ T1568] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1458.924052][ T1568] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1458.975966][ T1568] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1459.009134][ T1568] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1459.455714][T20274] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1459.478674][T20274] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1459.499331][T25224] Bluetooth: hci5: command tx timeout [ 1459.797277][T20268] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1459.805128][T20268] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1459.966918][T20663] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11810'. [ 1459.978418][T20664] netlink: 'syz.3.11811': attribute type 10 has an invalid length. [ 1460.014705][T20664] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11811'. [ 1460.052405][T20664] team0: entered promiscuous mode [ 1460.062507][T20664] team_slave_0: entered promiscuous mode [ 1460.082015][T20664] team_slave_1: entered promiscuous mode [ 1460.094664][T20664] team0: entered allmulticast mode [ 1460.101865][T20664] team_slave_0: entered allmulticast mode [ 1460.108389][T20664] team_slave_1: entered allmulticast mode [ 1460.115186][T20664] bridge0: port 3(team0) entered blocking state [ 1460.122759][T20664] bridge0: port 3(team0) entered disabled state [ 1460.134541][T20664] bridge0: port 3(team0) entered blocking state [ 1460.141054][T20664] bridge0: port 3(team0) entered forwarding state [ 1460.181957][T20671] geneve3: entered promiscuous mode [ 1460.190328][ T1568] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1460.205446][ T1568] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1460.224545][ T1568] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1460.249930][ T1568] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1460.345838][T20674] lo speed is unknown, defaulting to 1000 [ 1460.355950][T20682] netlink: 944 bytes leftover after parsing attributes in process `syz.3.11813'. [ 1460.371177][T20674] lo speed is unknown, defaulting to 1000 [ 1460.403580][T20682] openvswitch: netlink: Flow key attr not present in new flow. [ 1460.561064][T20691] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11816'. [ 1460.759256][T20702] batadv_slave_0: Caught tx_queue_len zero misconfig [ 1460.780876][ T1568] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1461.251989][T20716] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11823'. [ 1462.697204][ T11] block nbd0: Possible stuck request ffff888036ec8000: control (read@0,1024B). Runtime 210 seconds [ 1462.708616][ T11] block nbd0: Possible stuck request ffff888036ec8200: control (read@1024,1024B). Runtime 210 seconds [ 1462.721155][ T11] block nbd0: Possible stuck request ffff888036ec8400: control (read@2048,1024B). Runtime 210 seconds [ 1462.732261][ T11] block nbd0: Possible stuck request ffff888036ec8600: control (read@3072,1024B). Runtime 210 seconds [ 1462.846174][T20658] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1463.168970][T20733] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11829'. [ 1463.183456][T20736] ip6tnl0: Caught tx_queue_len zero misconfig [ 1463.210002][T20736] IPv6: NLM_F_CREATE should be specified when creating new route [ 1463.311817][T20733] netlink: 'syz.2.11829': attribute type 1 has an invalid length. [ 1463.323853][T20733] netlink: 264 bytes leftover after parsing attributes in process `syz.2.11829'. [ 1463.336075][T20733] netlink: 'syz.2.11829': attribute type 1 has an invalid length. [ 1463.344427][ T1568] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1463.357423][T20733] netlink: 264 bytes leftover after parsing attributes in process `syz.2.11829'. [ 1463.435460][T20748] lo speed is unknown, defaulting to 1000 [ 1463.446137][T20747] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11833'. [ 1463.446466][T20748] lo speed is unknown, defaulting to 1000 [ 1463.594224][T20757] netlink: 'syz.2.11836': attribute type 2 has an invalid length. [ 1463.821492][T20766] netlink: 'syz.2.11838': attribute type 6 has an invalid length. [ 1463.847270][T20766] netlink: 'syz.2.11838': attribute type 7 has an invalid length. [ 1463.855131][T20766] netlink: 'syz.2.11838': attribute type 8 has an invalid length. [ 1463.897362][T20766] netlink: 'syz.2.11838': attribute type 15 has an invalid length. [ 1464.305411][T20274] bond7 (unregistering): (slave erspan2): Releasing active interface [ 1464.314040][T20274] erspan2 (unregistering): left promiscuous mode [ 1464.438995][T20793] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11844'. [ 1464.486111][T20274] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 1464.496588][T20274] bridge1 (unregistering): left promiscuous mode [ 1464.504554][T20274] bridge1 (unregistering): left allmulticast mode [ 1464.695721][T20274] bond0 (unregistering): Released all slaves [ 1464.710887][T20274] bond1 (unregistering): Released all slaves [ 1464.729836][T20274] bond2 (unregistering): Released all slaves [ 1464.760692][T20274] bond3 (unregistering): Released all slaves [ 1464.779387][T20274] bond4 (unregistering): Released all slaves [ 1464.804112][T20274] bond5 (unregistering): Released all slaves [ 1464.826101][T20274] bond6 (unregistering): Released all slaves [ 1464.843744][T20274] bond7 (unregistering): Released all slaves [ 1464.870937][T20274] bond8 (unregistering): Released all slaves [ 1464.893848][T20772] netlink: 'syz.2.11840': attribute type 15 has an invalid length. [ 1465.113564][T20274] tipc: Left network mode [ 1465.357277][T20745] Bluetooth: hci5: command 0x0405 tx timeout [ 1465.373352][T20820] netlink: 'syz.4.11847': attribute type 3 has an invalid length. [ 1465.769295][T20818] bond1: invalid ARP target 0.0.0.0 specified for addition [ 1465.804260][T20818] bond1: option arp_ip_target: invalid value (0) [ 1465.835238][T20818] bond1 (unregistering): Released all slaves [ 1466.224208][T20861] netlink: 'syz.4.11855': attribute type 1 has an invalid length. [ 1466.262541][T20861] __nla_validate_parse: 2 callbacks suppressed [ 1466.262592][T20861] netlink: 224 bytes leftover after parsing attributes in process `syz.4.11855'. [ 1466.537437][ T1568] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1466.972130][T20890] netlink: 'syz.1.11861': attribute type 1 has an invalid length. [ 1467.006589][T20890] netlink: 232 bytes leftover after parsing attributes in process `syz.1.11861'. [ 1467.081986][T20892] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11860'. [ 1467.210702][T20895] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11862'. [ 1467.393732][T20901] netlink: 'syz.2.11864': attribute type 13 has an invalid length. [ 1467.805042][T20274] hsr_slave_0: left promiscuous mode [ 1467.828684][T20274] hsr_slave_1: left promiscuous mode [ 1467.853094][T20274] pim6reg (unregistering): left allmulticast mode [ 1469.001365][T20940] vxcan1: Caught tx_queue_len zero misconfig [ 1469.071765][T20949] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1469.101597][ T1568] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1469.193477][T20948] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 1469.386634][T20949] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1469.605478][T20949] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1469.662622][T20274] IPVS: stop unused estimator thread 0... [ 1469.725010][T20949] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1469.810627][T20973] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11881'. [ 1469.909341][T20268] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1470.008330][T20268] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1470.021559][T20268] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1470.041279][T20984] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11884'. [ 1470.066065][T20264] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1470.108698][T20982] ip6tnl0: Caught tx_queue_len zero misconfig [ 1470.158177][T20982] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11883'. [ 1470.188878][T20982] netlink: 'syz.2.11883': attribute type 21 has an invalid length. [ 1470.202485][T20982] netlink: 156 bytes leftover after parsing attributes in process `syz.2.11883'. [ 1470.238344][T20982] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11883'. [ 1470.247383][T20990] FAULT_INJECTION: forcing a failure. [ 1470.247383][T20990] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1470.287520][T20990] CPU: 0 UID: 0 PID: 20990 Comm: syz.4.11886 Not tainted syzkaller #0 PREEMPT(full) [ 1470.287546][T20990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1470.287558][T20990] Call Trace: [ 1470.287566][T20990] [ 1470.287574][T20990] dump_stack_lvl+0xe8/0x150 [ 1470.287606][T20990] should_fail_ex+0x412/0x560 [ 1470.287632][T20990] _copy_from_user+0x2d/0xb0 [ 1470.287658][T20990] __sys_bpf+0x229/0x950 [ 1470.287685][T20990] ? __pfx___sys_bpf+0x10/0x10 [ 1470.287722][T20990] ? ksys_write+0x242/0x270 [ 1470.287742][T20990] ? __pfx_ksys_write+0x10/0x10 [ 1470.287765][T20990] __x64_sys_bpf+0x7c/0x90 [ 1470.287786][T20990] do_syscall_64+0x14d/0xf80 [ 1470.287808][T20990] ? trace_irq_disable+0x3b/0x150 [ 1470.287829][T20990] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1470.287847][T20990] ? clear_bhb_loop+0x40/0x90 [ 1470.287868][T20990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1470.287883][T20990] RIP: 0033:0x7ff55219c799 [ 1470.287900][T20990] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1470.287914][T20990] RSP: 002b:00007ff553083028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1470.287934][T20990] RAX: ffffffffffffffda RBX: 00007ff552415fa0 RCX: 00007ff55219c799 [ 1470.287948][T20990] RDX: 0000000000000038 RSI: 00002000000009c0 RDI: 000000000000001a [ 1470.287959][T20990] RBP: 00007ff553083090 R08: 0000000000000000 R09: 0000000000000000 [ 1470.287971][T20990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1470.287982][T20990] R13: 00007ff552416038 R14: 00007ff552415fa0 R15: 00007fffae470088 [ 1470.288010][T20990] [ 1470.731101][T20999] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11890'. [ 1471.234414][T21017] lo speed is unknown, defaulting to 1000 [ 1471.253608][T21017] lo speed is unknown, defaulting to 1000 [ 1471.323146][T21022] netlink: 'syz.3.11895': attribute type 4 has an invalid length. [ 1471.456023][T21033] netlink: 10 bytes leftover after parsing attributes in process `syz.4.11898'. [ 1471.555877][T21023] geneve2: entered promiscuous mode [ 1471.602955][T21023] geneve2: entered allmulticast mode [ 1471.662513][T20280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1471.771278][T21042] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1471.936646][T21046] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1471.958796][T21046] netlink: 'syz.4.11902': attribute type 13 has an invalid length. [ 1471.967335][T21046] netlink: 'syz.4.11902': attribute type 17 has an invalid length. [ 1472.054781][T21046] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1472.125370][T21046] netlink: 'syz.4.11902': attribute type 11 has an invalid length. [ 1472.134994][T21046] netlink: 190972 bytes leftover after parsing attributes in process `syz.4.11902'. [ 1472.888145][T21062] netlink: 4516 bytes leftover after parsing attributes in process `syz.4.11905'. [ 1472.912303][T21062] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11905'. [ 1472.969440][T21062] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11905'. [ 1473.142556][T21067] netlink: 32 bytes leftover after parsing attributes in process `syz.1.11908'. [ 1473.757931][T21087] geneve2: entered promiscuous mode [ 1473.765866][T21091] xt_bpf: check failed: parse error [ 1473.779365][T21091] netlink: 224 bytes leftover after parsing attributes in process `syz.2.11916'. [ 1473.789506][ T1568] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1473.799316][ T1568] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1473.810037][ T1568] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1473.858532][T21091] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11916'. [ 1473.878032][ T1568] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1473.903458][T21093] bond0: (slave gre0): Error: Device type is different from other slaves [ 1474.127750][ T882] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1474.175219][T21106] C: renamed from team_slave_0 (while UP) [ 1474.204217][T21106] netlink: 'syz.3.11919': attribute type 2 has an invalid length. [ 1474.223824][T21106] netlink: 116 bytes leftover after parsing attributes in process `syz.3.11919'. [ 1474.252128][T21106] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1474.316976][T20268] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1474.417368][T21117] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1474.479160][T21121] tipc: Enabling of bearer rejected, already enabled [ 1474.858453][ T1568] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1475.097748][ T873] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1475.606056][T20266] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1475.620514][T20266] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1475.644432][T21119] lo speed is unknown, defaulting to 1000 [ 1475.678098][T21119] lo speed is unknown, defaulting to 1000 [ 1475.757331][ T5892] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1475.997655][T21151] batman_adv: batadv0: Adding interface: ipvlan2 [ 1476.032675][T21151] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1476.093906][T21151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1476.105580][T21151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1476.126922][T21151] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 1476.149815][ T2287] block nbd8: Possible stuck request ffff888026e38000: control (read@0,1024B). Runtime 210 seconds [ 1476.160746][ T2287] block nbd8: Possible stuck request ffff888026e38200: control (read@1024,1024B). Runtime 210 seconds [ 1476.171985][ T2287] block nbd8: Possible stuck request ffff888026e38400: control (read@2048,1024B). Runtime 210 seconds [ 1476.183221][ T2287] block nbd8: Possible stuck request ffff888026e38600: control (read@3072,1024B). Runtime 210 seconds [ 1476.547168][T21167] netlink: 400 bytes leftover after parsing attributes in process `syz.3.11937'. [ 1476.603316][T21167] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11937'. [ 1476.752307][T21173] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11938'. [ 1476.940348][T21182] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11941'. [ 1477.158034][T21188] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11942'. [ 1477.432831][T20273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1477.750438][T21209] syzkaller1: entered promiscuous mode [ 1477.755957][T21209] syzkaller1: entered allmulticast mode [ 1478.102138][T21220] netlink: 64 bytes leftover after parsing attributes in process `syz.3.11953'. [ 1478.293680][T21224] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11955'. [ 1478.365843][T21228] syzkaller0: entered promiscuous mode [ 1478.372026][T21228] syzkaller0: entered allmulticast mode [ 1478.383087][T21230] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11957'. [ 1478.439601][T21230] netlink: 32 bytes leftover after parsing attributes in process `syz.0.11957'. [ 1478.611652][T21249] netlink: 144 bytes leftover after parsing attributes in process `syz.1.11961'. [ 1478.782991][T21263] tipc: Enabling of bearer rejected, failed to enable media [ 1478.868424][T21267] xt_hashlimit: max too large, truncated to 1048576 [ 1479.177468][T21281] netlink: 'syz.2.11973': attribute type 7 has an invalid length. [ 1479.185629][T21281] netlink: 'syz.2.11973': attribute type 8 has an invalid length. [ 1479.194742][T21281] netlink: 'syz.2.11973': attribute type 8 has an invalid length. [ 1479.203858][T21281] netlink: 'syz.2.11973': attribute type 4 has an invalid length. [ 1479.212774][T21281] netlink: 'syz.2.11973': attribute type 7 has an invalid length. [ 1479.513956][T21290] tap0: tun_chr_ioctl cmd 35111 [ 1479.529114][T21290] netlink: 'syz.4.11976': attribute type 29 has an invalid length. [ 1479.549287][T21290] netlink: 'syz.4.11976': attribute type 29 has an invalid length. [ 1479.977642][T20268] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1480.056980][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1480.211851][T21327] netlink: 'syz.2.11987': attribute type 1 has an invalid length. [ 1480.419084][T21339] rdma_rxe: rxe_newlink: failed to add lo [ 1480.454981][T21339] IPVS: stopping backup sync thread 18069 ... [ 1480.515836][T11297] IPVS: starting estimator thread 0... [ 1480.516005][T21341] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1480.618199][T21346] IPVS: using max 30 ests per chain, 72000 per kthread [ 1480.976699][T21375] netlink: 'syz.2.12002': attribute type 89 has an invalid length. [ 1481.369411][T21398] netlink: 'syz.4.12009': attribute type 1 has an invalid length. [ 1481.409589][T21398] bond9: entered promiscuous mode [ 1481.414851][T21398] bond9: entered allmulticast mode [ 1481.421419][T21398] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1481.490729][T21402] erspan1: entered allmulticast mode [ 1481.539324][T21402] bond9: (slave erspan1): making interface the new active one [ 1481.556035][T21402] erspan1: entered promiscuous mode [ 1481.619781][T21402] bond9: (slave erspan1): Enslaving as an active interface with an up link [ 1481.972173][T21431] batman_adv: batadv0: Adding interface: macvlan3 [ 1481.979480][T21431] batman_adv: batadv0: The MTU of interface macvlan3 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1482.006177][T21431] batman_adv: batadv0: Not using interface macvlan3 (retrying later): interface not active [ 1482.080027][T21435] __nla_validate_parse: 22 callbacks suppressed [ 1482.080046][T21435] netlink: 27 bytes leftover after parsing attributes in process `syz.4.12017'. [ 1482.417150][T21455] netlink: 84 bytes leftover after parsing attributes in process `syz.2.12021'. [ 1482.710489][T21471] Cannot find del_set index 29 as target [ 1482.795206][T21476] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12027'. [ 1482.817190][T21480] netlink: 240 bytes leftover after parsing attributes in process `syz.3.12026'. [ 1482.829748][T21470] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12026'. [ 1483.027629][T21488] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 1483.220574][T20266] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1483.451071][T21496] bond5: option arp_interval: invalid value (18446744073709551615) [ 1483.472558][T21496] bond5: option arp_interval: allowed values 0 - 2147483647 [ 1483.512128][T21496] bond5 (unregistering): Released all slaves [ 1483.870909][T21518] xt_ecn: cannot match TCP bits for non-tcp packets [ 1484.009524][T21527] netlink: 224 bytes leftover after parsing attributes in process `syz.3.12038'. [ 1484.053332][T21530] lo speed is unknown, defaulting to 1000 [ 1484.079620][T21530] lo speed is unknown, defaulting to 1000 [ 1484.085051][T21529] netlink: 224 bytes leftover after parsing attributes in process `syz.3.12038'. [ 1484.262825][T21542] netlink: 'syz.4.12042': attribute type 11 has an invalid length. [ 1484.345837][T21554] bridge0: port 3(team0) entered disabled state [ 1484.380308][T21554] bridge0: port 3(team0) entered disabled state [ 1484.423228][T21554] C: left promiscuous mode [ 1484.430156][T21554] C: left allmulticast mode [ 1484.475652][ T1302] lec:lec_start_xmit: lec0:No lecd attached [ 1484.488859][T21554] team0 (unregistering): Port device C removed [ 1484.510899][T21554] team_slave_1: left promiscuous mode [ 1484.532284][T21554] team_slave_1: left allmulticast mode [ 1484.554076][T21554] team0 (unregistering): Port device team_slave_1 removed [ 1484.581504][T21559] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12046'. [ 1484.594406][T21559] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12046'. [ 1484.799393][T21574] netlink: 36 bytes leftover after parsing attributes in process `syz.4.12051'. [ 1484.830424][T21574] validate_nla: 2 callbacks suppressed [ 1484.830444][T21574] netlink: 'syz.4.12051': attribute type 4 has an invalid length. [ 1484.854556][T21577] lo speed is unknown, defaulting to 1000 [ 1484.877625][T21577] lo speed is unknown, defaulting to 1000 [ 1485.099274][T20273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1485.229591][T21580] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1485.362754][T21580] syzkaller0: entered promiscuous mode [ 1485.369312][T21580] syzkaller0: entered allmulticast mode [ 1485.430449][T21580] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1485.439767][T21580] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 1485.616658][T21574] siw: device registration error -23 [ 1485.749249][T21595] xt_l2tp: v2 sid > 0xffff: 4294967294 [ 1486.223879][T21616] netlink: 'syz.0.12063': attribute type 1 has an invalid length. [ 1486.529894][T21619] lo speed is unknown, defaulting to 1000 [ 1486.611456][T21619] lo speed is unknown, defaulting to 1000 [ 1486.792692][T21630] netlink: 'syz.3.12068': attribute type 4 has an invalid length. [ 1486.834645][T21630] .`: renamed from bond0 [ 1487.051805][ C0] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 16 [ 1487.135570][T21645] netlink: 'syz.3.12073': attribute type 10 has an invalid length. [ 1487.363061][T21653] __nla_validate_parse: 11 callbacks suppressed [ 1487.363084][T21653] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12074'. [ 1487.448609][T21655] geneve2: entered promiscuous mode [ 1487.464093][T21648] lo speed is unknown, defaulting to 1000 [ 1487.551353][T21648] lo speed is unknown, defaulting to 1000 [ 1487.595555][T21658] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1487.726348][T21656] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1487.837088][T20319] tipc: Resetting bearer [ 1487.904792][T21668] netlink: 48 bytes leftover after parsing attributes in process `syz.3.12079'. [ 1487.962458][T21656] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1488.127088][T21656] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1488.278779][T21675] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12082'. [ 1488.322133][T21677] netlink: 'syz.1.12083': attribute type 1 has an invalid length. [ 1488.337715][T21656] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1488.396291][T21677] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 1488.469515][T21684] netlink: 'syz.3.12084': attribute type 30 has an invalid length. [ 1488.516717][T21684] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12084'. [ 1488.659521][T21684] bond0: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 1488.673540][T21684] bond0 (unregistering): Released all slaves [ 1488.854824][T20273] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1488.875886][T20273] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1488.936956][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1488.953566][T20266] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1488.994592][T20266] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1489.040940][T20264] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1489.148407][T21694] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1489.210962][T21696] netlink: 36 bytes leftover after parsing attributes in process `syz.0.12088'. [ 1489.311222][T21698] netlink: 60 bytes leftover after parsing attributes in process `syz.3.12090'. [ 1489.633122][T21709] netem: change failed [ 1489.653518][T21704] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12093'. [ 1489.683580][T21704] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12093'. [ 1489.713937][T21714] lo speed is unknown, defaulting to 1000 [ 1489.722158][T21706] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12094'. [ 1489.722193][T21714] lo speed is unknown, defaulting to 1000 [ 1489.816769][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5340 ms [ 1489.824845][ C0] lec:lec_tx_timeout: lec0 [ 1490.110327][T21740] netlink: 208240 bytes leftover after parsing attributes in process `syz.3.12102'. [ 1490.859445][T20264] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1490.962841][T11825] lec:lec_start_xmit: lec0:No lecd attached [ 1490.995766][T21760] netlink: 'syz.0.12107': attribute type 6 has an invalid length. [ 1491.402131][T21771] IPVS: Error connecting to the multicast addr [ 1491.475707][T21784] nbd: illegal input index -1113835520 [ 1491.636309][T21792] netlink: 'syz.2.12113': attribute type 13 has an invalid length. [ 1491.764240][T21795] xt_limit: Overflow, try lower: 31324/2147483648 [ 1491.823212][T21802] netlink: 'syz.1.12114': attribute type 10 has an invalid length. [ 1492.778158][ T11] block nbd0: Possible stuck request ffff888036ec8000: control (read@0,1024B). Runtime 240 seconds [ 1492.789402][ T11] block nbd0: Possible stuck request ffff888036ec8200: control (read@1024,1024B). Runtime 240 seconds [ 1492.801102][ T11] block nbd0: Possible stuck request ffff888036ec8400: control (read@2048,1024B). Runtime 240 seconds [ 1492.812192][ T11] block nbd0: Possible stuck request ffff888036ec8600: control (read@3072,1024B). Runtime 240 seconds [ 1494.657167][ T5194] udevd[5194]: worker [13853] /devices/virtual/block/nbd8 timeout; kill it [ 1494.666118][ T5194] udevd[5194]: seq 59697 '/devices/virtual/block/nbd8' killed [ 1494.674132][ T5194] udevd[5194]: worker [13447] /devices/virtual/block/nbd0 timeout; kill it [ 1494.682985][ T5194] udevd[5194]: seq 59079 '/devices/virtual/block/nbd0' killed [ 1494.707022][T20280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1495.091014][T21808] __nla_validate_parse: 3 callbacks suppressed [ 1495.091034][T21808] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12116'. [ 1495.113863][T21812] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12117'. [ 1495.155467][T21814] netlink: 'syz.0.12118': attribute type 1 has an invalid length. [ 1495.184663][T21814] netlink: 'syz.0.12118': attribute type 1 has an invalid length. [ 1495.408927][T21833] netlink: 36 bytes leftover after parsing attributes in process `syz.4.12124'. [ 1495.535066][T21837] vlan2: entered promiscuous mode [ 1495.541551][T21837] geneve1: entered promiscuous mode [ 1495.550227][T21837] vlan2: entered allmulticast mode [ 1495.556222][T21837] geneve1: entered allmulticast mode [ 1495.828202][T21864] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12134'. [ 1495.865619][T21865] netlink: 211856 bytes leftover after parsing attributes in process `syz.3.12132'. [ 1495.883009][T21866] netlink: 276 bytes leftover after parsing attributes in process `syz.0.12134'. [ 1495.977534][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1495.985622][ C0] lec:lec_tx_timeout: lec0 [ 1495.997369][T20280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1496.121313][T21883] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 1496.572757][T21894] netlink: 328 bytes leftover after parsing attributes in process `syz.3.12142'. [ 1496.795848][T21907] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12147'. [ 1496.834524][T21914] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.12147'. [ 1496.854328][T21907] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.12147'. [ 1497.039133][T21916] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1497.071996][T21920] syzkaller0: entered promiscuous mode [ 1497.080401][T21920] syzkaller0: entered allmulticast mode [ 1497.106645][T21926] bond1: (slave macsec1): Error -34 calling dev_set_mtu [ 1497.563308][T21951] sctp: [Deprecated]: syz.4.12165 (pid 21951) Use of int in max_burst socket option. [ 1497.563308][T21951] Use struct sctp_assoc_value instead [ 1497.624996][T21954] vlan0: entered promiscuous mode [ 1497.683406][T21958] netlink: 'syz.0.12167': attribute type 1 has an invalid length. [ 1498.239361][T21990] bridge0: port 2(bridge_slave_1) entered disabled state [ 1498.248347][T21990] bridge0: port 1(bridge_slave_0) entered disabled state [ 1498.538956][T22001] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check. [ 1498.629396][T21996] lo speed is unknown, defaulting to 1000 [ 1498.651097][T21996] lo speed is unknown, defaulting to 1000 [ 1498.807042][T22015] xfrm0: entered promiscuous mode [ 1498.828206][T22015] xfrm0: entered allmulticast mode [ 1499.262032][T22033] tipc: Started in network mode [ 1499.273477][T22033] tipc: Node identity ac1414bb, cluster identity 4711 [ 1499.290813][T22033] tipc: Enabling of bearer rejected, failed to enable media [ 1499.327822][T22032] tipc: Enabling of bearer rejected, failed to enable media [ 1499.493660][T22043] netlink: 'syz.1.12192': attribute type 1 has an invalid length. [ 1499.809816][T22047] syzkaller0: entered promiscuous mode [ 1499.815335][T22047] syzkaller0: entered allmulticast mode [ 1500.112694][T22053] netlink: 'syz.4.12196': attribute type 21 has an invalid length. [ 1500.121446][T22059] netlink: 'syz.4.12196': attribute type 21 has an invalid length. [ 1500.140945][T22053] netlink: 'syz.4.12196': attribute type 1 has an invalid length. [ 1500.162332][T22053] __nla_validate_parse: 18 callbacks suppressed [ 1500.162351][T22053] netlink: 132 bytes leftover after parsing attributes in process `syz.4.12196'. [ 1500.224678][T22059] netlink: 'syz.4.12196': attribute type 1 has an invalid length. [ 1500.247451][T22059] netlink: 132 bytes leftover after parsing attributes in process `syz.4.12196'. [ 1500.353430][T22063] lo speed is unknown, defaulting to 1000 [ 1500.411775][T22063] lo speed is unknown, defaulting to 1000 [ 1500.464335][T20268] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1500.799655][T22078] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12203'. [ 1500.813540][T22078] netlink: 64 bytes leftover after parsing attributes in process `syz.2.12203'. [ 1500.976407][T22085] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12206'. [ 1501.241276][T22094] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12210'. [ 1501.294147][T22098] macvtap0: entered promiscuous mode [ 1501.300657][T22098] macvtap0: entered allmulticast mode [ 1501.306080][T22098] veth1_vlan: entered allmulticast mode [ 1501.403762][T22100] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1501.411965][T22100] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1501.437800][T22100] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1501.447487][T22100] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1501.463484][T22105] netlink: 'syz.4.12213': attribute type 4 has an invalid length. [ 1501.516259][T22102] netlink: 'syz.4.12213': attribute type 4 has an invalid length. [ 1501.737802][T20273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1501.835578][T22114] bond8: option updelay: invalid value (18446744072924056005) [ 1501.875794][T22114] bond8: option updelay: allowed values 0 - 2147483647 [ 1501.905308][T22114] bond8 (unregistering): Released all slaves [ 1502.309812][T22128] netlink: 40 bytes leftover after parsing attributes in process `syz.4.12215'. [ 1502.348835][T22132] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.12220'. [ 1502.367905][T22132] ksmbd: Unknown IPC event: 1, ignore. [ 1502.373552][T22128] netlink: 40 bytes leftover after parsing attributes in process `syz.4.12215'. [ 1502.629815][T22139] netlink: 'syz.3.12221': attribute type 26 has an invalid length. [ 1502.863397][T22139] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12221'. [ 1503.461709][T22179] netlink: 'syz.4.12234': attribute type 1 has an invalid length. [ 1503.529088][T22182] IPVS: set_ctl: invalid protocol: 94 172.20.20.187:20000 [ 1503.708745][T22199] siw: device registration error -23 [ 1503.811387][T22203] lo speed is unknown, defaulting to 1000 [ 1503.853960][T22203] lo speed is unknown, defaulting to 1000 [ 1503.918472][T22207] lo speed is unknown, defaulting to 1000 [ 1504.313235][T22207] lo speed is unknown, defaulting to 1000 [ 1504.692965][T22229] netlink: 'syz.4.12247': attribute type 3 has an invalid length. [ 1505.323134][T22246] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1505.418447][T25224] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1505.437410][T25224] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1505.446497][T25224] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1505.468888][T25224] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1505.476560][T25224] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1505.793551][T22259] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1505.862370][T22250] lo speed is unknown, defaulting to 1000 [ 1505.982381][T22250] lo speed is unknown, defaulting to 1000 [ 1506.218262][T20268] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1506.226662][ T2287] block nbd8: Possible stuck request ffff888026e38000: control (read@0,1024B). Runtime 240 seconds [ 1506.240262][ T2287] block nbd8: Possible stuck request ffff888026e38200: control (read@1024,1024B). Runtime 240 seconds [ 1506.252064][ T2287] block nbd8: Possible stuck request ffff888026e38400: control (read@2048,1024B). Runtime 240 seconds [ 1506.263790][ T2287] block nbd8: Possible stuck request ffff888026e38600: control (read@3072,1024B). Runtime 240 seconds [ 1506.856956][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1507.249644][T22284] Cannot find set identified by id 3 to match [ 1507.499419][T20280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1507.581013][T25224] Bluetooth: hci3: command tx timeout [ 1507.672741][T22278] __nla_validate_parse: 3 callbacks suppressed [ 1507.672761][T22278] netlink: 128 bytes leftover after parsing attributes in process `syz.2.12259'. [ 1507.893990][T22296] syzkaller0: entered allmulticast mode [ 1507.979134][T22299] syzkaller0 (unregistering): left allmulticast mode [ 1508.200515][T22310] netlink: 220 bytes leftover after parsing attributes in process `syz.2.12268'. [ 1508.398475][T22304] tipc: Resetting bearer [ 1508.469663][T22317] lo speed is unknown, defaulting to 1000 [ 1508.478537][T22250] chnl_net:caif_netlink_parms(): no params data found [ 1508.504418][T22317] lo speed is unknown, defaulting to 1000 [ 1508.670858][T22331] x_tables: unsorted underflow at hook 3 [ 1508.705237][T22250] bridge0: port 1(bridge_slave_0) entered blocking state [ 1508.734524][T22250] bridge0: port 1(bridge_slave_0) entered disabled state [ 1508.742650][T22250] bridge_slave_0: entered allmulticast mode [ 1508.751078][T22250] bridge_slave_0: entered promiscuous mode [ 1508.761283][T22250] bridge0: port 2(bridge_slave_1) entered blocking state [ 1508.768806][T22250] bridge0: port 2(bridge_slave_1) entered disabled state [ 1508.776247][T22250] bridge_slave_1: entered allmulticast mode [ 1508.785065][T22250] bridge_slave_1: entered promiscuous mode [ 1508.842868][T22250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1508.845319][T22334] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12273'. [ 1508.886075][T22250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1508.978032][T22250] team0: Port device team_slave_0 added [ 1508.994035][T22250] team0: Port device team_slave_1 added [ 1509.138440][T22339] lo speed is unknown, defaulting to 1000 [ 1509.146600][T22339] lo speed is unknown, defaulting to 1000 [ 1509.161190][T22341] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.12275'. [ 1509.179591][T22250] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1509.186570][T22250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1509.223962][T22250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1509.247633][T22250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1509.254614][T22250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1509.315766][T22250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1509.514341][T22250] hsr_slave_0: entered promiscuous mode [ 1509.544224][T22250] hsr_slave_1: entered promiscuous mode [ 1509.572210][T22351] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12278'. [ 1509.583855][T22250] debugfs: 'hsr0' already exists in 'hsr' [ 1509.591206][T22250] Cannot create hsr debugfs directory [ 1509.659935][T25224] Bluetooth: hci3: command tx timeout [ 1509.803549][T22353] netlink: 'syz.3.12279': attribute type 8 has an invalid length. [ 1510.013145][T22250] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1510.052201][T22363] bridge0: entered allmulticast mode [ 1510.182751][T22250] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1510.388984][T22250] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1510.511743][T22250] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1510.945268][T22391] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12286'. [ 1510.979549][T22391] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12286'. [ 1511.023045][T22393] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12287'. [ 1511.075731][T22393] bond4: option mode: unable to set because the bond device has slaves [ 1511.076143][T22396] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12287'. [ 1511.095167][T22396] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12287'. [ 1511.128467][T22393] netlink: 'syz.2.12287': attribute type 4 has an invalid length. [ 1511.151382][T22250] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1511.169002][T22393] siw: device registration error -23 [ 1511.179680][T22250] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1511.203981][T22250] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1511.245606][T22250] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1511.264200][T20268] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1511.721126][T22250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1511.739677][T25224] Bluetooth: hci3: command tx timeout [ 1511.823965][T22419] bridge0: port 2(bridge_slave_1) entered disabled state [ 1511.831754][T22419] bridge0: port 1(bridge_slave_0) entered disabled state [ 1512.088585][T20264] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1512.111771][T20264] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1512.135018][T20264] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1512.169285][T22250] 8021q: adding VLAN 0 to HW filter on device team0 [ 1512.191692][T20264] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1512.341394][T20264] bridge0: port 1(bridge_slave_0) entered blocking state [ 1512.348650][T20264] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1512.389628][T20264] bridge0: port 2(bridge_slave_1) entered blocking state [ 1512.396840][T20264] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1512.567603][T22441] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1512.580491][T22446] lo speed is unknown, defaulting to 1000 [ 1512.621718][T22446] lo speed is unknown, defaulting to 1000 [ 1512.756312][T22455] ip6erspan0: left promiscuous mode [ 1512.776633][T22455] ip6erspan0: entered allmulticast mode [ 1512.981888][T22250] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1513.031389][T22466] __nla_validate_parse: 3 callbacks suppressed [ 1513.031407][T22466] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12307'. [ 1513.077617][T22466] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12307'. [ 1513.114122][T22466] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12307'. [ 1513.125717][T22466] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12307'. [ 1513.141308][T22466] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12307'. [ 1513.152071][T22466] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12307'. [ 1513.162446][T22466] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12307'. [ 1513.230066][T22466] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12307'. [ 1513.258003][T20273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1513.280572][T22466] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12307'. [ 1513.309566][T22466] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12307'. [ 1513.509865][T22483] syzkaller0: entered promiscuous mode [ 1513.515628][T22483] syzkaller0: entered allmulticast mode [ 1513.759605][T22484] lo speed is unknown, defaulting to 1000 [ 1513.818034][T25224] Bluetooth: hci3: command tx timeout [ 1513.830277][T22250] veth0_vlan: entered promiscuous mode [ 1513.853971][T22484] lo speed is unknown, defaulting to 1000 [ 1513.936599][T22250] veth1_vlan: entered promiscuous mode [ 1513.978783][T22502] syzkaller1: entered promiscuous mode [ 1513.984277][T22502] syzkaller1: entered allmulticast mode [ 1514.021077][T22250] veth0_macvtap: entered promiscuous mode [ 1514.043012][T22250] veth1_macvtap: entered promiscuous mode [ 1514.090784][T22250] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1514.116238][T22250] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1514.161922][T20268] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1514.178832][T20268] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1514.274655][T20268] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1514.284331][T20268] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1514.470623][T22509] ip6gretap0: Device is already in use. [ 1514.523691][T20273] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1514.549063][T20273] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1514.638650][T22514] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma? [ 1514.654231][T20268] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1514.662730][T20268] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1514.848801][T22517] bond1: option mode: unable to set because the bond device has slaves [ 1514.873846][T22517] netlink: 'syz.1.12321': attribute type 4 has an invalid length. [ 1514.925459][T22517] siw: device registration error -23 [ 1515.070425][T22521] xt_TCPMSS: Only works on TCP SYN packets [ 1515.502268][T22529] xt_hashlimit: invalid rate [ 1515.892040][T22538] netlink: 'syz.1.12328': attribute type 1 has an invalid length. [ 1516.071617][T20745] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1516.084441][T20745] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1516.093649][T20745] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1516.105333][T20745] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1516.119512][T20745] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1516.273914][T22538] bond6: (slave bridge4): making interface the new active one [ 1516.295854][T22547] Bluetooth: MGMT ver 1.23 [ 1516.312378][T22547] x_tables: duplicate underflow at hook 3 [ 1516.324239][T22538] bond6: (slave bridge4): Enslaving as an active interface with an up link [ 1516.445598][T22546] macvlan2: entered promiscuous mode [ 1516.480295][T22546] macvlan2: entered allmulticast mode [ 1516.489651][T22546] bond6: entered promiscuous mode [ 1516.494726][T22546] bridge4: entered promiscuous mode [ 1516.500858][T22546] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1516.512966][T22546] bond6: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1516.538324][T22546] bond6: left promiscuous mode [ 1516.543304][T22546] bridge4: left promiscuous mode [ 1516.645211][T22549] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1516.755036][T22542] lo speed is unknown, defaulting to 1000 [ 1516.770820][T22542] lo speed is unknown, defaulting to 1000 [ 1516.789166][T22555] bond1: option mode: unable to set because the bond device has slaves [ 1516.850906][T22549] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1516.868753][T22558] netlink: 'syz.1.12332': attribute type 4 has an invalid length. [ 1516.990471][T22549] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1517.108155][T20280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1517.232945][T22555] siw: device registration error -23 [ 1517.322672][T22549] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1517.378476][T22563] lo speed is unknown, defaulting to 1000 [ 1517.413280][T22563] lo speed is unknown, defaulting to 1000 [ 1517.644533][T20268] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1517.716103][T20268] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1517.736473][T20268] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1517.765904][T22578] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1517.905769][T20280] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1518.015195][T22582] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1518.227180][T20745] Bluetooth: hci4: command tx timeout [ 1518.382200][T20273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1518.511873][T22587] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1518.546673][T22542] chnl_net:caif_netlink_parms(): no params data found [ 1518.599980][T22602] pimreg3: entered allmulticast mode [ 1518.631509][T22609] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1518.677030][T22609] __nla_validate_parse: 36 callbacks suppressed [ 1518.677050][T22609] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12344'. [ 1518.704806][T22609] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1518.753767][T22605] lo speed is unknown, defaulting to 1000 [ 1518.793845][T22605] lo speed is unknown, defaulting to 1000 [ 1519.123378][T22542] bridge0: port 1(bridge_slave_0) entered blocking state [ 1519.131553][T22542] bridge0: port 1(bridge_slave_0) entered disabled state [ 1519.140463][T22542] bridge_slave_0: entered allmulticast mode [ 1519.149996][T22542] bridge_slave_0: entered promiscuous mode [ 1519.159837][T22542] bridge0: port 2(bridge_slave_1) entered blocking state [ 1519.167742][T22542] bridge0: port 2(bridge_slave_1) entered disabled state [ 1519.175456][T22542] bridge_slave_1: entered allmulticast mode [ 1519.184500][T22542] bridge_slave_1: entered promiscuous mode [ 1519.271327][T22542] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1519.400731][T22542] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1519.449996][T22542] team0: Port device team_slave_0 added [ 1519.460538][T22542] team0: Port device team_slave_1 added [ 1519.485736][T22633] netlink: 68 bytes leftover after parsing attributes in process `syz.1.12351'. [ 1519.579069][T22542] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1519.586075][T22542] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1519.666844][T22542] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1519.681376][T22542] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1519.698108][T22542] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1519.759251][T22542] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1519.910597][T22542] hsr_slave_0: entered promiscuous mode [ 1519.938064][T22542] hsr_slave_1: entered promiscuous mode [ 1519.945486][T22646] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12355'. [ 1519.973611][T22542] debugfs: 'hsr0' already exists in 'hsr' [ 1519.988696][T22542] Cannot create hsr debugfs directory [ 1520.300109][T20745] Bluetooth: hci4: command tx timeout [ 1520.491645][T22648] netlink: 96 bytes leftover after parsing attributes in process `syz.1.12355'. [ 1520.838146][T22656] batman_adv: batadv0: Adding interface: dummy0 [ 1520.844446][T22656] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1520.908284][T22656] batman_adv: batadv0: Interface activated: dummy0 [ 1521.042072][T22660] batadv2: entered promiscuous mode [ 1521.060803][T22660] batadv2: entered allmulticast mode [ 1521.194967][T22542] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1521.207320][T22663] netlink: 'syz.3.12360': attribute type 9 has an invalid length. [ 1521.215314][T22663] netlink: 'syz.3.12360': attribute type 6 has an invalid length. [ 1521.376568][T22542] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1521.413969][T22677] netlink: 220 bytes leftover after parsing attributes in process `syz.3.12362'. [ 1521.490619][T22542] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1521.564950][T22542] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1521.596258][T22686] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.12366'. [ 1521.721883][T22692] netlink: 'syz.0.12368': attribute type 1 has an invalid length. [ 1521.766939][T22692] netlink: 32 bytes leftover after parsing attributes in process `syz.0.12368'. [ 1521.826588][T22702] netlink: 'syz.0.12368': attribute type 1 has an invalid length. [ 1521.850954][T22702] netlink: 32 bytes leftover after parsing attributes in process `syz.0.12368'. [ 1521.870345][T22698] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 1521.895305][T22698] bond0 (unregistering): Released all slaves [ 1522.000736][T22542] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1522.012813][T22542] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1522.035341][T22542] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1522.036423][ T29] audit: type=1800 audit(1772644172.528:32): pid=22705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.12371" name="blkio.bfq.time_recursive" dev="tmpfs" ino=516 res=0 errno=0 [ 1522.090615][T22542] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1522.376965][T20745] Bluetooth: hci4: command tx timeout [ 1522.434902][T22542] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1522.483686][T22542] 8021q: adding VLAN 0 to HW filter on device team0 [ 1522.506015][T20268] bridge0: port 1(bridge_slave_0) entered blocking state [ 1522.513415][T20268] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1522.566776][T20280] bridge0: port 2(bridge_slave_1) entered blocking state [ 1522.573962][T20280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1522.704743][T22729] lo speed is unknown, defaulting to 1000 [ 1522.726290][T22740] netlink: 104 bytes leftover after parsing attributes in process `syz.1.12379'. [ 1522.730923][T22729] lo speed is unknown, defaulting to 1000 [ 1522.857904][ T1568] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1522.858216][ T11] block nbd0: Possible stuck request ffff888036ec8000: control (read@0,1024B). Runtime 270 seconds [ 1522.877754][ T11] block nbd0: Possible stuck request ffff888036ec8200: control (read@1024,1024B). Runtime 270 seconds [ 1522.889378][ T11] block nbd0: Possible stuck request ffff888036ec8400: control (read@2048,1024B). Runtime 270 seconds [ 1522.901125][ T11] block nbd0: Possible stuck request ffff888036ec8600: control (read@3072,1024B). Runtime 270 seconds [ 1523.249141][T22761] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12384'. [ 1523.288807][T22542] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1523.445508][T22542] veth0_vlan: entered promiscuous mode [ 1523.469673][T22770] vxcan0: tx drop: invalid sa for name 0x0000000000000001 [ 1523.486604][T22542] veth1_vlan: entered promiscuous mode [ 1523.491147][T22770] netlink: 'syz.3.12387': attribute type 7 has an invalid length. [ 1523.513725][T22770] netlink: 'syz.3.12387': attribute type 8 has an invalid length. [ 1523.563944][T22542] veth0_macvtap: entered promiscuous mode [ 1523.592080][T22542] veth1_macvtap: entered promiscuous mode [ 1523.630820][T22542] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1523.681493][T22542] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1523.713413][T20268] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1523.733513][T20268] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1523.762020][T20268] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1523.776538][T20268] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1523.905297][ T1568] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1523.922083][ T1568] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1523.993691][T20268] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1524.006113][T20268] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1524.143571][T20280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1524.459639][T20745] Bluetooth: hci4: command tx timeout [ 1524.507065][T22793] netlink: 'syz.2.12394': attribute type 11 has an invalid length. [ 1524.799264][T25224] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1524.811910][T25224] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1524.821367][T25224] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1524.831986][T25224] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1524.855502][T25224] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1524.974228][T22797] lo speed is unknown, defaulting to 1000 [ 1525.014164][T22797] lo speed is unknown, defaulting to 1000 [ 1525.255493][T22818] __nla_validate_parse: 2 callbacks suppressed [ 1525.255523][T22818] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12402'. [ 1525.508289][T22829] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12406'. [ 1525.518225][T22829] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12406'. [ 1525.539748][T22829] netlink: 'syz.3.12406': attribute type 4 has an invalid length. [ 1525.558558][T22829] netlink: 152 bytes leftover after parsing attributes in process `syz.3.12406'. [ 1525.798506][T22839] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12408'. [ 1526.346138][T22797] chnl_net:caif_netlink_parms(): no params data found [ 1526.426570][T22864] sctp: [Deprecated]: syz.4.12414 (pid 22864) Use of int in maxseg socket option. [ 1526.426570][T22864] Use struct sctp_assoc_value instead [ 1526.562283][T22877] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12415'. [ 1526.605101][T22797] bridge0: port 1(bridge_slave_0) entered blocking state [ 1526.605394][T22882] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12419'. [ 1526.620055][T22797] bridge0: port 1(bridge_slave_0) entered disabled state [ 1526.633732][T22797] bridge_slave_0: entered allmulticast mode [ 1526.643576][T22797] bridge_slave_0: entered promiscuous mode [ 1526.654808][T22880] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12418'. [ 1526.656416][T22797] bridge0: port 2(bridge_slave_1) entered blocking state [ 1526.672166][T22882] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12419'. [ 1526.672903][T22797] bridge0: port 2(bridge_slave_1) entered disabled state [ 1526.690096][T22797] bridge_slave_1: entered allmulticast mode [ 1526.693534][T22884] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12420'. [ 1526.699281][T22797] bridge_slave_1: entered promiscuous mode [ 1526.745198][T22797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1526.760153][T22797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1526.770540][T26822] IPVS: starting estimator thread 0... [ 1526.808376][T22797] team0: Port device team_slave_0 added [ 1526.821652][T22797] team0: Port device team_slave_1 added [ 1526.879441][T22886] IPVS: using max 37 ests per chain, 88800 per kthread [ 1526.910355][T22797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1526.927421][T22797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1526.946953][T25224] Bluetooth: hci1: command tx timeout [ 1526.961509][T22797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1527.078346][T22797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1527.085325][T22797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1527.123227][T22797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1527.123917][T22895] netlink: 'syz.4.12421': attribute type 9 has an invalid length. [ 1527.171407][T22895] netlink: 'syz.4.12421': attribute type 11 has an invalid length. [ 1527.196999][T22895] netlink: 'syz.4.12421': attribute type 12 has an invalid length. [ 1527.205903][T22797] hsr_slave_0: entered promiscuous mode [ 1527.216178][T22797] hsr_slave_1: entered promiscuous mode [ 1527.248631][T22797] debugfs: 'hsr0' already exists in 'hsr' [ 1527.254400][T22797] Cannot create hsr debugfs directory [ 1527.908062][T20268] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1528.121816][T22797] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1528.255624][T22910] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1528.266697][T22910] 8021q: adding VLAN 0 to HW filter on device team0 [ 1528.302031][T22910] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1528.367374][T22797] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1528.374639][T22913] netlink: 'syz.4.12428': attribute type 9 has an invalid length. [ 1528.454427][T22797] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1528.555521][T22797] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1529.009985][T22797] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1529.018908][T25224] Bluetooth: hci1: command tx timeout [ 1529.059035][T22797] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1529.084142][T22797] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1529.095699][T22797] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1529.435143][T22797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1529.530445][T22797] 8021q: adding VLAN 0 to HW filter on device team0 [ 1529.549753][T22955] netlink: 'syz.2.12435': attribute type 2 has an invalid length. [ 1529.569931][T20266] bridge0: port 1(bridge_slave_0) entered blocking state [ 1529.577135][T20266] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1529.577720][T22955] netlink: 'syz.2.12435': attribute type 8 has an invalid length. [ 1529.623057][T20266] bridge0: port 2(bridge_slave_1) entered blocking state [ 1529.630287][T20266] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1529.899639][ T1568] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1530.537526][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1530.586044][T22797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1530.663940][T22985] siw: device registration error -23 [ 1530.703561][T22797] veth0_vlan: entered promiscuous mode [ 1530.755007][T22797] veth1_vlan: entered promiscuous mode [ 1530.884454][T22797] veth0_macvtap: entered promiscuous mode [ 1530.905312][T22797] veth1_macvtap: entered promiscuous mode [ 1530.986179][T22797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1531.029611][T22997] __nla_validate_parse: 11 callbacks suppressed [ 1531.029633][T22997] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12442'. [ 1531.097873][T22997] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12442'. [ 1531.108114][T25224] Bluetooth: hci1: command tx timeout [ 1531.124115][T22995] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12445'. [ 1531.138550][T22997] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12442'. [ 1531.157731][T22997] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12442'. [ 1531.169734][T22997] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12442'. [ 1531.183463][T22997] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12442'. [ 1531.193839][T22997] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12442'. [ 1531.204522][T22997] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12442'. [ 1531.215070][T22997] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12442'. [ 1531.315699][T22797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1531.373971][ T1568] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1531.385756][ T1568] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1531.414415][ T1568] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1531.460579][T20266] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1531.879747][ T1568] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1531.897812][ T1568] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1532.009531][ T1568] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1532.027657][ T1568] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1533.177066][T25224] Bluetooth: hci1: command tx timeout [ 1533.312825][T23048] netlink: 'syz.1.12453': attribute type 1 has an invalid length. [ 1533.444499][T23051] macsec1: entered promiscuous mode [ 1533.452619][T23051] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 1533.739074][T20266] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1533.837437][T23054] bridge0: port 2(bridge_slave_1) entered disabled state [ 1533.844898][T23054] bridge0: port 1(bridge_slave_0) entered disabled state [ 1533.900364][T23054] batman_adv: batadv0: Interface deactivated: dummy0 [ 1534.205292][T23054] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1534.267888][T23054] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1534.308321][ T7566] page_pool_release_retry() stalled pool shutdown: id 450, 1 inflight 60 sec [ 1534.731157][T23069] team_slave_0: entered promiscuous mode [ 1534.736926][T23069] team_slave_1: entered promiscuous mode [ 1534.761828][T23069] team0: Device macsec1 is already an upper device of the team interface [ 1534.806359][T23069] team_slave_0: left promiscuous mode [ 1534.811851][T23069] team_slave_1: left promiscuous mode [ 1534.850314][T20259] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1534.876854][T20259] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1534.895238][T20259] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1534.918085][T20259] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1534.963732][T23073] bridge0: entered promiscuous mode [ 1534.977407][T23073] macsec1: entered promiscuous mode [ 1535.018239][T20280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1535.081853][T23084] bond0: Unable to set down delay as MII monitoring is disabled [ 1535.091681][T23078] netlink: 'syz.0.12464': attribute type 4 has an invalid length. [ 1535.143095][T23092] siw: device registration error -23 [ 1535.190355][T23078] .`: renamed from bond0 [ 1535.411995][T23097] lo speed is unknown, defaulting to 1000 [ 1535.436420][T23097] lo speed is unknown, defaulting to 1000 [ 1535.448027][T23102] syz_tun: entered allmulticast mode [ 1535.471351][T23100] syz_tun: left allmulticast mode [ 1536.038523][T23137] __nla_validate_parse: 72 callbacks suppressed [ 1536.038544][T23137] netlink: 56 bytes leftover after parsing attributes in process `syz.0.12480'. [ 1536.077710][T23137] netlink: 19 bytes leftover after parsing attributes in process `syz.0.12480'. [ 1536.100140][T23137] netlink: 19 bytes leftover after parsing attributes in process `syz.0.12480'. [ 1536.115556][T23137] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12480'. [ 1536.173137][T23142] netlink: 'syz.3.12481': attribute type 1 has an invalid length. [ 1536.301563][ T2287] block nbd8: Possible stuck request ffff888026e38000: control (read@0,1024B). Runtime 270 seconds [ 1536.313128][ T2287] block nbd8: Possible stuck request ffff888026e38200: control (read@1024,1024B). Runtime 270 seconds [ 1536.324293][ T2287] block nbd8: Possible stuck request ffff888026e38400: control (read@2048,1024B). Runtime 270 seconds [ 1536.336035][ T2287] block nbd8: Possible stuck request ffff888026e38600: control (read@3072,1024B). Runtime 270 seconds [ 1536.395754][T23153] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12484'. [ 1536.451986][T23155] netlink: 'syz.0.12485': attribute type 4 has an invalid length. [ 1537.081481][T23180] netlink: 64 bytes leftover after parsing attributes in process `syz.2.12492'. [ 1537.355054][T23192] lo speed is unknown, defaulting to 1000 [ 1537.368515][T23192] lo speed is unknown, defaulting to 1000 [ 1537.403460][T23199] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1537.503588][T23202] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12497'. [ 1537.525839][T23205] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12497'. [ 1537.551909][T23204] IPVS: set_ctl: invalid protocol: 136 100.1.1.0:20003 [ 1537.721024][T23211] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12501'. [ 1537.764632][T23215] netlink: 'syz.3.12503': attribute type 1 has an invalid length. [ 1537.773913][T23211] vlan2: entered promiscuous mode [ 1537.797447][T23211] gretap0: entered promiscuous mode [ 1537.944381][T23226] netlink: 'syz.3.12504': attribute type 1 has an invalid length. [ 1537.958355][T23226] netlink: 'syz.3.12504': attribute type 2 has an invalid length. [ 1537.977483][T23224] netlink: 'syz.4.12505': attribute type 11 has an invalid length. [ 1537.995734][T23224] netlink: 244 bytes leftover after parsing attributes in process `syz.4.12505'. [ 1538.344696][T23249] macsec0: entered promiscuous mode [ 1538.504142][T23254] bond0: Unable to set up delay as MII monitoring is disabled [ 1538.561320][T23254] bond0 (unregistering): Released all slaves [ 1538.615687][T23262] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1538.820956][T23270] netlink: 'syz.0.12515': attribute type 10 has an invalid length. [ 1538.857914][T20280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1538.930895][T23270] team0: Failed to send options change via netlink (err -105) [ 1538.943840][T23270] team0: Port device dummy0 added [ 1539.694346][T23310] batadv0: entered promiscuous mode [ 1539.708917][T23310] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1539.731724][T23310] batadv0: left promiscuous mode [ 1540.006407][T23320] vlan2: entered allmulticast mode [ 1540.014540][T23320] dummy0: entered allmulticast mode [ 1540.026882][T23320] bridge0: port 3(vlan2) entered blocking state [ 1540.035695][T23320] bridge0: port 3(vlan2) entered disabled state [ 1540.045274][T23320] vlan2: entered promiscuous mode [ 1540.051806][T23320] dummy0: entered promiscuous mode [ 1540.085904][T23323] netlink: 'syz.2.12527': attribute type 8 has an invalid length. [ 1540.146502][T20273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1540.225586][T23330] lo speed is unknown, defaulting to 1000 [ 1540.260267][T23330] lo speed is unknown, defaulting to 1000 [ 1540.348045][T23342] lo speed is unknown, defaulting to 1000 [ 1540.560776][T23356] tipc: Started in network mode [ 1540.565965][T23356] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 1540.573923][T23356] tipc: Enabled bearer , priority 0 [ 1540.665115][T23342] lo speed is unknown, defaulting to 1000 [ 1541.686876][T23062] tipc: Node number set to 10005162 [ 1542.058281][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1542.175264][T23417] __nla_validate_parse: 6 callbacks suppressed [ 1542.175285][T23417] netlink: 36 bytes leftover after parsing attributes in process `syz.4.12555'. [ 1542.202248][T23417] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12555'. [ 1542.246826][T23417] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12555'. [ 1542.282765][T23417] netlink: 'syz.4.12555': attribute type 4 has an invalid length. [ 1542.303152][T23417] netlink: 152 bytes leftover after parsing attributes in process `syz.4.12555'. [ 1542.334168][T23427] siw: device registration error -23 [ 1542.346014][T23417] .`: renamed from bond0 [ 1542.366055][T23426] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12557'. [ 1542.446201][T23431] IPVS: set_ctl: invalid protocol: 58 172.20.20.14:20004 [ 1542.451959][T23426] vlan3: entered promiscuous mode [ 1542.477430][T23426] veth0_to_team: entered promiscuous mode [ 1542.490414][T23426] vlan3: entered allmulticast mode [ 1542.505777][T23426] veth0_to_team: entered allmulticast mode [ 1542.558930][T23435] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12560'. [ 1542.593887][T23435] netlink: 'syz.4.12560': attribute type 2 has an invalid length. [ 1542.639831][T23435] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12560'. [ 1542.892237][T23446] netlink: 'syz.3.12564': attribute type 1 has an invalid length. [ 1542.906840][T23446] netlink: 'syz.3.12564': attribute type 3 has an invalid length. [ 1542.915453][T23446] netlink: 224 bytes leftover after parsing attributes in process `syz.3.12564'. [ 1543.123651][T23445] tipc: Enabling of bearer rejected, failed to enable media [ 1543.137768][T23449] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12566'. [ 1543.254690][T23463] lo speed is unknown, defaulting to 1000 [ 1543.282522][T23463] lo speed is unknown, defaulting to 1000 [ 1543.390348][T23468] netlink: 56 bytes leftover after parsing attributes in process `syz.1.12569'. [ 1543.430127][T23471] netlink: 'syz.4.12570': attribute type 10 has an invalid length. [ 1543.447570][T23471] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1543.683213][T23486] netlink: 'syz.2.12573': attribute type 2 has an invalid length. [ 1543.746392][T23484] bond0: entered promiscuous mode [ 1543.752114][T23484] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1543.761306][T23494] syzkaller1: entered promiscuous mode [ 1543.776495][T23494] syzkaller1: entered allmulticast mode [ 1544.622982][ T1568] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1545.271467][T23527] netem: invalid attributes len -1 [ 1545.278903][T23527] netem: change failed [ 1545.500367][ T29] audit: type=1800 audit(1772644195.988:33): pid=23533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.12587" name="memory.events" dev="tmpfs" ino=784 res=0 errno=0 [ 1545.536613][ T29] audit: type=1804 audit(1772644196.028:34): pid=23533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.12587" name="/newroot/150/memory.events" dev="tmpfs" ino=784 res=1 errno=0 [ 1545.709260][ T7566] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1545.862843][T23542] team0 (unregistering): Port device team_slave_0 removed [ 1545.896008][T23542] team0 (unregistering): Port device team_slave_1 removed [ 1545.911000][ T1568] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1545.922087][ T1302] lec:lec_start_xmit: lec0:No lecd attached [ 1545.995477][T23542] team0 (unregistering): Port device dummy0 removed [ 1546.090031][ T7566] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1546.582743][T23553] syzkaller0: entered promiscuous mode [ 1546.601160][T23553] syzkaller0: entered allmulticast mode [ 1546.621825][T23574] netlink: 'syz.4.12591': attribute type 1 has an invalid length. [ 1549.660037][ T1568] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1549.778745][T20280] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1549.850178][T23590] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1549.859906][T23590] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1549.877423][T23590] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1550.109771][T23606] tipc: Started in network mode [ 1550.115083][T23606] tipc: Node identity 1ea89b7291fa, cluster identity 4711 [ 1550.143297][T23606] tipc: Enabled bearer , priority 0 [ 1550.302172][T23608] tipc: Disabling bearer [ 1550.362894][T23613] __nla_validate_parse: 7 callbacks suppressed [ 1550.362914][T23613] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12605'. [ 1550.576796][T23639] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12609'. [ 1550.663304][T23637] lo speed is unknown, defaulting to 1000 [ 1550.722598][T23637] lo speed is unknown, defaulting to 1000 [ 1550.890267][T20266] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1550.929525][T20266] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1550.947971][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 1550.956067][ C0] lec:lec_tx_timeout: lec0 [ 1551.188946][T23665] lo speed is unknown, defaulting to 1000 [ 1551.327905][T23665] lo speed is unknown, defaulting to 1000 [ 1551.447044][T20672] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1551.462957][T23674] netlink: 36 bytes leftover after parsing attributes in process `syz.1.12616'. [ 1551.482813][T23674] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12616'. [ 1551.540781][T23674] vlan2 (unregistering): left promiscuous mode [ 1551.566426][T23674] dummy0 (unregistering): left promiscuous mode [ 1551.591985][T23674] bridge0: port 3(vlan2) entered disabled state [ 1551.659319][T20273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1552.937861][ T11] block nbd0: Possible stuck request ffff888036ec8000: control (read@0,1024B). Runtime 300 seconds [ 1552.949410][ T11] block nbd0: Possible stuck request ffff888036ec8200: control (read@1024,1024B). Runtime 300 seconds [ 1552.961034][ T11] block nbd0: Possible stuck request ffff888036ec8400: control (read@2048,1024B). Runtime 300 seconds [ 1552.972555][ T11] block nbd0: Possible stuck request ffff888036ec8600: control (read@3072,1024B). Runtime 300 seconds [ 1554.858889][T20280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1555.177193][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1555.460788][T11825] lec:lec_start_xmit: lec0:No lecd attached [ 1556.778296][T20264] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1559.978111][ T1568] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1560.856825][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5390 ms [ 1560.864901][ C0] lec:lec_tx_timeout: lec0 [ 1561.818278][T20266] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1563.337052][T20745] Bluetooth: hci2: command 0x0406 tx timeout [ 1563.817000][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1565.017779][T20264] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1566.378747][ T2287] block nbd8: Possible stuck request ffff888026e38000: control (read@0,1024B). Runtime 300 seconds [ 1566.390567][ T2287] block nbd8: Possible stuck request ffff888026e38200: control (read@1024,1024B). Runtime 300 seconds [ 1566.401859][ T2287] block nbd8: Possible stuck request ffff888026e38400: control (read@2048,1024B). Runtime 300 seconds [ 1566.413140][ T2287] block nbd8: Possible stuck request ffff888026e38600: control (read@3072,1024B). Runtime 300 seconds [ 1567.018350][T20264] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1570.858169][ T1568] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1572.137876][ T1568] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1573.577660][T25224] Bluetooth: hci5: command 0x0405 tx timeout [ 1576.620098][T20280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1577.262296][T20268] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1580.457062][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1581.658666][T20268] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1583.027378][T20259] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1583.043613][ T11] block nbd0: Possible stuck request ffff888036ec8000: control (read@0,1024B). Runtime 330 seconds [ 1583.055201][ T11] block nbd0: Possible stuck request ffff888036ec8200: control (read@1024,1024B). Runtime 330 seconds [ 1583.067006][ T11] block nbd0: Possible stuck request ffff888036ec8400: control (read@2048,1024B). Runtime 330 seconds [ 1583.078581][ T11] block nbd0: Possible stuck request ffff888036ec8600: control (read@3072,1024B). Runtime 330 seconds [ 1587.497844][T20259] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1588.779477][T20264] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1593.258401][T20280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1593.902185][T20280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1596.457672][ T2287] block nbd8: Possible stuck request ffff888026e38000: control (read@0,1024B). Runtime 330 seconds [ 1596.468614][ T2287] block nbd8: Possible stuck request ffff888026e38200: control (read@1024,1024B). Runtime 330 seconds [ 1596.479704][ T2287] block nbd8: Possible stuck request ffff888026e38400: control (read@2048,1024B). Runtime 330 seconds [ 1596.490885][ T2287] block nbd8: Possible stuck request ffff888026e38600: control (read@3072,1024B). Runtime 330 seconds [ 1599.018535][ T1568] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1599.657234][ T1568] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1604.697423][T20264] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1604.787905][ T1568] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1607.351531][ T1302] lec:lec_start_xmit: lec0:No lecd attached [ 1609.897795][T20264] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1610.540961][T20280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1612.856818][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5500 ms [ 1612.864915][ C0] lec:lec_tx_timeout: lec0 [ 1613.098082][ T11] block nbd0: Possible stuck request ffff888036ec8000: control (read@0,1024B). Runtime 360 seconds [ 1613.109411][ T11] block nbd0: Possible stuck request ffff888036ec8200: control (read@1024,1024B). Runtime 360 seconds [ 1613.122584][ T11] block nbd0: Possible stuck request ffff888036ec8400: control (read@2048,1024B). Runtime 360 seconds [ 1613.134355][ T11] block nbd0: Possible stuck request ffff888036ec8600: control (read@3072,1024B). Runtime 360 seconds [ 1613.737383][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1614.937621][ T1568] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1615.578344][T20264] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1617.577277][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1619.977391][ T1568] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1619.991879][T11825] lec:lec_start_xmit: lec0:No lecd attached [ 1620.777786][T20280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1622.942219][T20280] batman_adv: batadv0: Removing interface: gretap1 [ 1622.971748][T20280] bond0 (unregistering): (slave gretap2): Releasing active interface [ 1622.980136][T20280] gretap2 (unregistering): left promiscuous mode [ 1623.006055][T20280] gtp1 (unregistering): left allmulticast mode [ 1623.013103][T20280] team0: Port device gtp1 removed [ 1623.047363][T20280] bond1 (unregistering): (slave geneve2): Releasing active interface [ 1623.344325][T20280] .` (unregistering): Released all slaves [ 1623.354019][T20280] bond1 (unregistering): Released all slaves [ 1623.368833][T20280] bond2 (unregistering): Released all slaves [ 1623.384243][T20280] bond3 (unregistering): Released all slaves [ 1623.401266][T20280] bond4 (unregistering): (slave bond0): Releasing active interface [ 1623.409550][T20280] bond0 (unregistering): left promiscuous mode [ 1623.416603][T20280] bond4 (unregistering): Released all slaves [ 1623.435182][T20280] bond0 (unregistering): Released all slaves [ 1623.452395][T20280] bond5 (unregistering): (slave vcan0): Releasing backup interface [ 1623.460489][T20280] vcan0: left promiscuous mode [ 1623.468634][T20280] bond5 (unregistering): Released all slaves [ 1623.483159][T20280] bond6 (unregistering): Released all slaves [ 1623.497600][T20280] bond7 (unregistering): Released all slaves [ 1623.655345][T20280] !: left promiscuous mode [ 1623.730136][T20280] tipc: Left network mode [ 1624.568694][T20280] hsr_slave_0: left promiscuous mode [ 1624.574633][T20280] hsr_slave_1: left promiscuous mode [ 1624.582458][T20280] veth1_vlan: left allmulticast mode [ 1625.006871][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1625.014902][ C0] lec:lec_tx_timeout: lec0 [ 1625.224966][T20280] IPVS: stop unused estimator thread 0... [ 1625.258096][T20259] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1626.539908][T20268] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1626.548298][ T2287] block nbd8: Possible stuck request ffff888026e38000: control (read@0,1024B). Runtime 360 seconds [ 1626.559572][ T2287] block nbd8: Possible stuck request ffff888026e38200: control (read@1024,1024B). Runtime 360 seconds [ 1626.570655][ T2287] block nbd8: Possible stuck request ffff888026e38400: control (read@2048,1024B). Runtime 360 seconds [ 1626.581717][ T2287] block nbd8: Possible stuck request ffff888026e38600: control (read@3072,1024B). Runtime 360 seconds [ 1629.898343][T25224] Bluetooth: hci3: command 0x0406 tx timeout [ 1631.017573][T20266] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1631.657722][T20268] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1636.137424][T20266] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1636.777618][T20280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1639.347775][ T30] INFO: task udevd:13447 blocked for more than 143 seconds. [ 1639.355102][ T30] Not tainted syzkaller #0 [ 1639.360281][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1639.369077][ T30] task:udevd state:D stack:22528 pid:13447 tgid:13447 ppid:5194 task_flags:0x400140 flags:0x00080002 [ 1639.381311][ T30] Call Trace: [ 1639.384655][ T30] [ 1639.388900][ T30] __schedule+0x1585/0x5340 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 1639.393428][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 1639.398489][ T30] ? __pfx___schedule+0x10/0x10 [ 1639.403863][ T30] ? schedule+0x90/0x360 [ 1639.409082][ T30] schedule+0x164/0x360 [ 1639.413279][ T30] io_schedule+0x7f/0xd0 [ 1639.419097][ T30] folio_wait_bit_common+0x6d8/0xbc0 [ 1639.424472][ T30] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 1639.430463][ T30] ? __pfx_wake_page_function+0x10/0x10 [ 1639.436049][ T30] ? __filemap_get_folio_mpol+0x7a9/0xb00 [ 1639.442302][ T30] do_read_cache_folio+0x1ad/0x590 [ 1639.448325][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 1639.453905][ T30] read_part_sector+0xb6/0x2b0 [ 1639.459692][ T30] adfspart_check_POWERTEC+0x92/0xef0 [ 1639.465099][ T30] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 1639.471744][ T30] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 1639.478116][ T30] bdev_disk_changed+0x7ba/0x1550 [ 1639.483193][ T30] ? bdev_open+0xe0/0xd30 [ 1639.497635][ T30] ? __pfx_bdev_disk_changed+0x10/0x10 [ 1639.503156][ T30] blkdev_get_whole+0x380/0x510 [ 1639.514556][ T30] bdev_open+0x31e/0xd30 [ 1639.606877][ T30] blkdev_open+0x470/0x610 [ 1639.611359][ T30] ? __pfx_blkdev_open+0x10/0x10 [ 1639.616310][ T30] do_dentry_open+0x785/0x14e0 [ 1639.668497][ T30] vfs_open+0x3b/0x340 [ 1639.672626][ T30] ? path_openat+0x2df0/0x3860 [ 1639.681260][ T30] path_openat+0x2e08/0x3860 [ 1639.685923][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 1639.717640][ T30] ? stack_depot_save_flags+0x33/0x810 [ 1639.723171][ T30] ? __pfx_path_openat+0x10/0x10 [ 1639.737467][ T30] ? __x64_sys_openat+0x138/0x170 [ 1639.742559][ T30] ? do_syscall_64+0x14d/0xf80 [ 1639.767817][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1639.773949][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 1639.817241][ T30] do_file_open+0x23e/0x4a0 [ 1639.821815][ T30] ? __pfx_do_file_open+0x10/0x10 [ 1639.846898][ T30] ? _raw_spin_unlock+0x28/0x50 [ 1639.852922][ T30] ? alloc_fd+0x64b/0x6c0 [ 1639.876805][ T30] do_sys_openat2+0x113/0x200 [ 1639.881549][ T30] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 1639.907277][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 1639.912541][ T30] ? rcu_is_watching+0x15/0xb0 [ 1639.936852][ T30] __x64_sys_openat+0x138/0x170 [ 1639.941772][ T30] do_syscall_64+0x14d/0xf80 [ 1639.968117][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1639.974247][ T30] ? clear_bhb_loop+0x40/0x90 [ 1639.987334][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1639.993301][ T30] RIP: 0033:0x7f2ef26a7407 [ 1640.026893][ T30] RSP: 002b:00007ffc432e6fa0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1640.035376][ T30] RAX: ffffffffffffffda RBX: 00007f2ef2d92880 RCX: 00007f2ef26a7407 [ 1640.086824][ T30] RDX: 00000000000a0800 RSI: 00005597e1e6fa40 RDI: ffffffffffffff9c [ 1640.108345][ T30] RBP: 00005597e1e5c910 R08: 0000000000000000 R09: 0000000000000000 [ 1640.116373][ T30] R10: 0000000000000000 R11: 0000000000000202 R12: 00005597e1e76320 [ 1640.146722][T20745] Bluetooth: hci4: command 0x0406 tx timeout [ 1640.146899][ T30] R13: 00005597e1e6a190 R14: 0000000000000000 R15: 00005597e1e76320 [ 1640.197407][ T30] [ 1640.204128][ T30] INFO: task udevd:13853 blocked for more than 144 seconds. [ 1640.213775][ T30] Not tainted syzkaller #0 [ 1640.219666][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1640.228749][ T30] task:udevd state:D stack:22528 pid:13853 tgid:13853 ppid:5194 task_flags:0x400140 flags:0x00080002 [ 1640.241451][ T30] Call Trace: [ 1640.244748][ T30] [ 1640.248103][ T30] __schedule+0x1585/0x5340 [ 1640.252648][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 1640.258068][ T30] ? __pfx___schedule+0x10/0x10 [ 1640.262955][ T30] ? schedule+0x90/0x360 [ 1640.267714][ T30] schedule+0x164/0x360 [ 1640.271892][ T30] io_schedule+0x7f/0xd0 [ 1640.276133][ T30] folio_wait_bit_common+0x6d8/0xbc0 [ 1640.281581][ T30] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 1640.287520][ T30] ? __pfx_wake_page_function+0x10/0x10 [ 1640.293087][ T30] ? __filemap_get_folio_mpol+0x7a9/0xb00 [ 1640.299161][ T30] do_read_cache_folio+0x1ad/0x590 [ 1640.304296][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 1640.309923][ T30] read_part_sector+0xb6/0x2b0 [ 1640.314815][ T30] adfspart_check_POWERTEC+0x92/0xef0 [ 1640.320310][ T30] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 1640.325875][ T30] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 1640.331987][ T30] bdev_disk_changed+0x7ba/0x1550 [ 1640.337129][ T30] ? bdev_open+0xe0/0xd30 [ 1640.341462][ T30] ? __pfx_bdev_disk_changed+0x10/0x10 [ 1640.347191][ T30] blkdev_get_whole+0x380/0x510 [ 1640.352066][ T30] bdev_open+0x31e/0xd30 [ 1640.356308][ T30] blkdev_open+0x470/0x610 [ 1640.360824][ T30] ? __pfx_blkdev_open+0x10/0x10 [ 1640.365788][ T30] do_dentry_open+0x785/0x14e0 [ 1640.370666][ T30] vfs_open+0x3b/0x340 [ 1640.374773][ T30] ? path_openat+0x2df0/0x3860 [ 1640.380082][ T30] path_openat+0x2e08/0x3860 [ 1640.384704][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 1640.390266][ T30] ? stack_depot_save_flags+0x33/0x810 [ 1640.395752][ T30] ? __pfx_path_openat+0x10/0x10 [ 1640.400778][ T30] ? __x64_sys_openat+0x138/0x170 [ 1640.405898][ T30] ? do_syscall_64+0x14d/0xf80 [ 1640.410753][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1640.416897][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 1640.421858][ T30] do_file_open+0x23e/0x4a0 [ 1640.426373][ T30] ? __pfx_do_file_open+0x10/0x10 [ 1640.431776][ T30] ? _raw_spin_unlock+0x28/0x50 [ 1640.436816][ T30] ? alloc_fd+0x64b/0x6c0 [ 1640.441179][ T30] do_sys_openat2+0x113/0x200 [ 1640.445841][ T30] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 1640.451551][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 1640.457377][ T30] ? rcu_is_watching+0x15/0xb0 [ 1640.462198][ T30] __x64_sys_openat+0x138/0x170 [ 1640.467254][ T30] do_syscall_64+0x14d/0xf80 [ 1640.471870][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1640.478021][ T30] ? clear_bhb_loop+0x40/0x90 [ 1640.482704][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1640.488703][ T30] RIP: 0033:0x7f2ef26a7407 [ 1640.493126][ T30] RSP: 002b:00007ffc432e6fa0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1640.501582][ T30] RAX: ffffffffffffffda RBX: 00007f2ef2d92880 RCX: 00007f2ef26a7407 [ 1640.509712][ T30] RDX: 00000000000a0800 RSI: 00005597e1e84920 RDI: ffffffffffffff9c [ 1640.517735][ T30] RBP: 00005597e1e5c910 R08: 0000000000000000 R09: 0000000000000000 [ 1640.525709][ T30] R10: 0000000000000000 R11: 0000000000000202 R12: 00005597e1e74e00 [ 1640.533796][ T30] R13: 00005597e1e6a190 R14: 0000000000000000 R15: 00005597e1e74e00 [ 1640.541928][ T30] [ 1640.574332][ T30] [ 1640.574332][ T30] Showing all locks held in the system: [ 1640.594568][ T30] 2 locks held by ksoftirqd/1/23: [ 1640.600246][ T30] 1 lock held by khungtaskd/30: [ 1640.605105][ T30] #0: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1640.615781][ T30] 2 locks held by getty/5581: [ 1640.626904][ T30] #0: ffff8880366d90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1640.640392][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 1640.651413][ T30] 1 lock held by udevd/13447: [ 1640.656106][ T30] #0: ffff8880347ed358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 1640.665605][ T30] 1 lock held by udevd/13853: [ 1640.672435][ T30] #0: ffff888026d94358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 1640.684380][ T30] 3 locks held by syz-executor/19903: [ 1640.691130][ T30] #0: ffff888052690ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0 [ 1640.720282][ T30] #1: ffff8880526900c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x10e0 [ 1640.731051][ T30] #2: ffffffff8fd51fe8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260 [ 1640.742181][ T30] 3 locks held by syz-executor/20413: [ 1640.753909][ T30] #0: ffff888079c1cec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0 [ 1640.764057][ T30] #1: ffff888079c1c0c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x10e0 [ 1640.776364][ T30] #2: ffffffff8fd51fe8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260 [ 1640.787254][ T30] 5 locks held by syz-executor/22542: [ 1640.792649][ T30] #0: ffff888061de4ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0 [ 1640.803071][ T30] #1: ffff888061de40c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x10e0 [ 1640.812881][ T30] #2: ffffffff8fd51fe8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260 [ 1640.823306][ T30] #3: ffff88802e072af8 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x7b/0x5c0 [ 1640.833078][ T30] #4: ffffffff8e766578 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 1640.844102][ T30] 3 locks held by syz-executor/22797: [ 1640.849589][ T30] #0: ffff8880a8de8ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0 [ 1640.860630][ T30] #1: ffff8880a8de80c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x10e0 [ 1640.870581][ T30] #2: ffffffff8fd51fe8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260 [ 1640.881836][ T30] [ 1640.884311][ T30] ============================================= [ 1640.884311][ T30] [ 1640.893133][ T30] NMI backtrace for cpu 0 [ 1640.893151][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1640.893170][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1640.893180][ T30] Call Trace: [ 1640.893188][ T30] [ 1640.893196][ T30] dump_stack_lvl+0xe8/0x150 [ 1640.893225][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 1640.893245][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1640.893270][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1640.893290][ T30] sys_info+0x135/0x170 [ 1640.893306][ T30] watchdog+0xfd9/0x1030 [ 1640.893359][ T30] ? watchdog+0x21a/0x1030 [ 1640.893388][ T30] kthread+0x388/0x470 [ 1640.893415][ T30] ? __pfx_watchdog+0x10/0x10 [ 1640.893435][ T30] ? __pfx_kthread+0x10/0x10 [ 1640.893452][ T30] ret_from_fork+0x51e/0xb90 [ 1640.893478][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1640.893498][ T30] ? __switch_to+0xc7d/0x1450 [ 1640.893532][ T30] ? __pfx_kthread+0x10/0x10 [ 1640.893551][ T30] ret_from_fork_asm+0x1a/0x30 [ 1640.893592][ T30] [ 1640.893604][ T30] Sending NMI from CPU 0 to CPUs 1: [ 1641.005714][ C1] NMI backtrace for cpu 1 [ 1641.005731][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 1641.005748][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1641.005758][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1641.005784][ C1] Code: be 6d 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 3d 1c 00 fb f4 7c ea 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 1641.005798][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000246 [ 1641.005812][ C1] RAX: 00000000004da4af RBX: ffffffff819a80dd RCX: 0000000080000001 [ 1641.005823][ C1] RDX: 0000000000000001 RSI: ffffffff8def494c RDI: ffffffff8c27aa00 [ 1641.005834][ C1] RBP: ffffc90000197f10 R08: ffff8880b873395b R09: 1ffff110170e672b [ 1641.005846][ C1] R10: dffffc0000000000 R11: ffffed10170e672c R12: ffffffff901117b0 [ 1641.005857][ C1] R13: 1ffff11003ad8000 R14: 0000000000000001 R15: 0000000000000001 [ 1641.005867][ C1] FS: 0000000000000000(0000) GS:ffff88812556d000(0000) knlGS:0000000000000000 [ 1641.005880][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1641.005890][ C1] CR2: 0000559264519ee8 CR3: 000000000e54c000 CR4: 00000000003526f0 [ 1641.005904][ C1] Call Trace: [ 1641.005913][ C1] [ 1641.005919][ C1] default_idle+0x9/0x20 [ 1641.005933][ C1] default_idle_call+0x72/0xb0 [ 1641.005949][ C1] do_idle+0x1bd/0x500 [ 1641.005969][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 1641.005992][ C1] ? __pfx_do_idle+0x10/0x10 [ 1641.006016][ C1] cpu_startup_entry+0x43/0x60 [ 1641.006036][ C1] start_secondary+0x101/0x110 [ 1641.006054][ C1] common_startup_64+0x13e/0x147 [ 1641.006079][ C1] [ 1641.006874][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1641.006900][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1641.006921][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1641.006932][ T30] Call Trace: [ 1641.006941][ T30] [ 1641.006949][ T30] vpanic+0x56c/0xa60 [ 1641.006977][ T30] ? __pfx___schedule+0x10/0x10 [ 1641.007001][ T30] ? __pfx_vpanic+0x10/0x10 [ 1641.007035][ T30] panic+0xc5/0xd0 [ 1641.007057][ T30] ? __pfx_panic+0x10/0x10 [ 1641.007082][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 1641.007108][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1641.007133][ T30] watchdog+0x1023/0x1030 [ 1641.007166][ T30] ? watchdog+0x21a/0x1030 [ 1641.007198][ T30] kthread+0x388/0x470 [ 1641.007217][ T30] ? __pfx_watchdog+0x10/0x10 [ 1641.007242][ T30] ? __pfx_kthread+0x10/0x10 [ 1641.007261][ T30] ret_from_fork+0x51e/0xb90 [ 1641.007287][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1641.007308][ T30] ? __switch_to+0xc7d/0x1450 [ 1641.007333][ T30] ? __pfx_kthread+0x10/0x10 [ 1641.007352][ T30] ret_from_fork_asm+0x1a/0x30 [ 1641.007392][ T30] [ 1641.284304][ T30] Kernel Offset: disabled [ 1641.288613][ T30] Rebooting in 86400 seconds..