last executing test programs: 2.218520991s ago: executing program 4 (id=3590): ioctl(0xffffffffffffffff, 0xb, &(0x7f0000000200)="88be5a600b9ff2055ac46002120ec1ac467afcc0821e60bc1638e092565277827f081b799aadadcecfaf924400462cf403d974b69138a323743b2bfba14dc413016e65637123a0f99fd0087aa7290c180e39dee0fc5f503a370053825a4d9cd8f8b1e253c5893b3d97f8910b04b40ab87ee4e0203b6d15cc18ff99d66533") (async) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_GETBMAP(r0, 0xc0205826, &(0x7f0000000640)={0x0, 0x5, 0x5, 0x1, 0x5}) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) (async) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0xd80}}, 0x2004c880) accept4$tipc(r5, 0x0, 0x0, 0x800) (async, rerun: 32) setsockopt(r3, 0x84, 0x80, &(0x7f00000002c0)="1400000009000000", 0x8) (rerun: 32) sendto$inet6(r3, &(0x7f00000004c0)="b0", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @loopback, 0x4}, 0x1c) (async) r6 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x43, 0x0, &(0x7f00000004c0)) (async) sendmsg$inet(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000040)="e5a19c", 0x3}], 0x1}, 0x24000000) (async) ioctl$EXT4_IOC_SETFSUUID(r3, 0x4008662c, &(0x7f0000000600)={0x0, 0x0, "cfe59b788603e2389741517bea4e49fd"}) (async) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000006a0005062cbd700500000000000000000000000008000500", @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) (async) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_PIM(r7, 0x0, 0xcf, &(0x7f0000000040)=0x4, 0x4) (async) r8 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="14000000040000000800000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r8, &(0x7f0000000140), 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x12, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000800000000002c00b1730000180100dd01214c20786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000010100"/84, @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000183700000100000000000000000000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x4, 0xa1, &(0x7f00000003c0)=""/161, 0x41100, 0x10, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000480)={0x0, 0x6, 0xb, 0x1ff}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f00000004c0)=[{0x4, 0x2, 0xf, 0x9}, {0x3, 0x1, 0x10, 0x7}, {0x2, 0x4, 0xa, 0x9}, {0x3, 0x2, 0x10, 0x7}, {0x5, 0x2, 0x0, 0x3}, {0x2, 0x1, 0xf, 0xa}], 0x10, 0x5}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.142754051s ago: executing program 4 (id=3591): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x20000010) socket$netlink(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x8) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x54, '\x00', 0x2, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000009c0), 0x0, 0x4004014, &(0x7f0000000a80)={0x11, 0x17, r2, 0x1, 0xf}, 0x14) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)={0x40, 0x4, 0x3}, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) socket$nl_route(0x10, 0x3, 0x0) socket(0x2000000015, 0x80005, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140011"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x1000}]}}}]}, 0x38}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 1.974339403s ago: executing program 2 (id=3594): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x2f, 0x7, 0xf, 0xa8, 0x20, @empty, @loopback, 0x80, 0x10, 0xfffffff7, 0x800}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000100)={'gre0\x00', 0x0, 0x40, 0x41, 0xa, 0x3, {{0x7, 0x4, 0x2, 0x1, 0x1c, 0x67, 0x0, 0x1, 0x87f1c203982c5604, 0x0, @remote, @local, {[@noop, @timestamp={0x44, 0x4, 0xbd, 0x0, 0x4}]}}}}}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="940000006d0020002bbd7002ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00800100000800000a0001009282e844779a00000500100005000000080004009147000008001f000600000005002700a200000008000500", @ANYRES32=r1, @ANYBLOB="08000500", @ANYRES32=r2, @ANYBLOB="24000e000300000000000000f90000000000000004000000000000000900d104120000001400350076657468305f746f5f66726964676500"], 0x94}, 0x1, 0x0, 0x0, 0x2}, 0x0) 1.838151349s ago: executing program 4 (id=3595): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)=':', 0x1}], 0x1) ppoll(&(0x7f00000000c0)=[{r1, 0x8080}], 0x1, &(0x7f0000000180), 0x0, 0x0) getsockopt$inet_int(r0, 0x0, 0xf, 0x0, &(0x7f0000000240)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x5, 0x6, 0x4, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3}, &(0x7f0000000300), &(0x7f0000000340), 0x1000000}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYRES32], 0x38}}], 0x2, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x7c, 0x32, 0x401, 0x70bd25, 0x25dfdbfd, {}, [@action_gd=@TCA_ACT_TAB={0x54, 0x1, [{0xc, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x14, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7f}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x7c}}, 0x0) 1.781148018s ago: executing program 2 (id=3596): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000040)=0x8, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYRESDEC=r1, @ANYBLOB="07be154ea23b1359564bcac5c08e", @ANYRESOCT=r1, @ANYBLOB="dd3082999d6cbf6de88800956560d7ca408f", @ANYRES16=r1, @ANYRES8=r1, @ANYBLOB="ffd081f21a5b6659f29ba950eeb89fc75017eb894b17b684aa0027bf1df4cf99b665ab818aa5e2a36f92e52c8a6fc9d8ef61690627b7e2e96af29b3e52e34bbdfd3561b046302daf0850da6756629778702958eada69663d9ee23ae087870b35ada9966a4e21fb6b2bfb7bef113e50f54947a02aa163ae3fcee21fcb11a3dc250d4dafbb723c83fdc2a99e1b72acabcc2fc1d3a930e367a3704029426b7347a8bd25ea45915e83944faae42feb7d72b24cd9bdc1cea083bf59fab7fe9791f83580cef01c1f2107866de51e124f0f5c1cac2fba33f35b77989cf5811bc146010fb9", @ANYRESDEC=r1, @ANYRESDEC=r1], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = accept4(r1, &(0x7f0000000040)=@rc={0x1f, @none}, &(0x7f00000000c0)=0x80, 0x800) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) write$nbd(r2, &(0x7f0000000340)={0x67446698, 0x0, 0x2, 0x1, 0x4, "3af0f7608b1ee7e443ee0a1865ab75f64cea1c4a44d8939712258a9952e6e51a46265d7e004e9375af60985ab7792265a6a18ab633de3ed3d2a1cd121dc67756cfd43d7776ac9b319d69aa34d9cf17252737e9220eab09dbd6eb27997976fe00946a348d5ad4c4bc3ac2cd01ff43ddf7bef66cb547da612e1fb63b629ca093fc4d6ebb69481129fd1303ccfbe989ad2ae53f1cb69e77ce1729c0eeee3d3440ac03758f6e5a9c1c90576d62c53997a276863883"}, 0xc3) connect$can_bcm(r2, &(0x7f0000000140)={0x1d, r3}, 0x10) 1.734148426s ago: executing program 1 (id=3598): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40000000}, 0x4000000) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x4, 0x4, 0x5, {r1, r2/1000+10000}, {0x0, 0xea60}, {0x3, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x1, 0x0, 0x0, 0x1}, 0x2, 0x1, 0x0, 0x0, "e4fd3ac5015291db5786565a7af7352dc65010a8cd40cceb50a638305858f9bef28c8d98e52d29ab12b58e39bbc48c2d9fc6986cc68935c815c5a64aaccb0f92"}}, 0x80}}, 0x81) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x64}}, 0x0) 1.678873697s ago: executing program 1 (id=3599): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0900000001000000420000004000000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000026ecc0fc46a55edfc6c9bf12fa063170ecb7e636d3065531b33776934ce0a2be261c084e91dbb816a426dacc7d2d7667156025e04ed7a23c98606b5d49a72e4c6a1637015ea5ba4e216341591c791b9c4bfb61998da64a901adbcf73a818a5ad78b8d79e36b8adcd935f212246be51ace76a020e604b9b9f3794e752f6d7cb42ae49a0573cdcdc3ccefefe756535f1c8d0eafa9da3698e8866ed4b350b476d56f56"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000001c0), 0x107d, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001dc0)={r0, &(0x7f0000000d00), &(0x7f0000000dc0)=""/4096}, 0x20) 1.659953309s ago: executing program 2 (id=3600): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) (async, rerun: 64) sendmsg$nl_route(r0, 0x0, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000026c0), r2) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000000040)={0x38, r3, 0x79964d8cba2f455d, 0xa070bd24, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8000000000}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040045}, 0x20000000) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="28000000130005000100"/20, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES16=r1], 0x28}, 0x1, 0x0, 0x0, 0x4000005}, 0x20004001) (rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=ANY=[@ANYRESHEX=r3, @ANYRES32=r1, @ANYRESHEX=r4], 0x2c}, 0x1, 0x0, 0x0, 0x40d0}, 0x0) 1.558088697s ago: executing program 4 (id=3601): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket(0x400000000010, 0x3, 0x0) (async) r2 = socket(0x400000000010, 0x3, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r4, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) (async) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x24, 0x2c, 0x1, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0xf000, 0x10}, {}, {0x7, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) r7 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r7, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x4000000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[], 0x18}}], 0x2, 0x0) 1.554149556s ago: executing program 1 (id=3602): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x59}, @exit], &(0x7f0000000200)='GPL\x00'}, 0x90) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r2 = accept4(r1, 0x0, 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000100)=0x9) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r2) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r2) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x14, 0x4, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x10) (async) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x14, 0x4, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x10) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0], 0x138) 1.462871092s ago: executing program 0 (id=3603): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff}) ioctl$FIOCLEX(r2, 0x5451) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x28, r1, 0x0, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) socket(0x10, 0x80000, 0xfcc) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) bind$alg(0xffffffffffffffff, 0x0, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000800), r0) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f00000009c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40008110}, 0xc, &(0x7f0000000980)={&(0x7f0000000840)={0x10c, r4, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4723}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xa9a}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x200}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xd}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x12, 0x3c}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private0}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4}, 0x40) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r5, &(0x7f0000000140)={&(0x7f0000000000)={0xa, 0x4e22, 0xfffffff8, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYRESDEC=r0], 0x28}, 0x4004004) 1.237916829s ago: executing program 3 (id=3604): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000500000000000000b64f7110b3000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.23728269s ago: executing program 1 (id=3605): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x2c, 0x1d, 0xa, 0x805, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x74}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x5a}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0xe2cf}]}}]}, 0x3c}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000100)}, 0x20) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb01006ede0000000000003c0000003c00000008000000060000000000000b010000000e0000000300000604000000040000006500000005000000080000001000000005000000010000000000000902000000002e616130305f00"], &(0x7f0000000440)=""/35, 0x5c, 0x23, 0x0, 0x8, 0x10000}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x4, '\x00', r4, r6, 0x1, 0x0, 0x3}, 0x50) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.01763676s ago: executing program 3 (id=3606): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, 0x42024, 0x8d85}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x1}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x4c}}, 0x0) 870.373975ms ago: executing program 3 (id=3607): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000026040a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000a40ff"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f00000009c0)={r2, 0x9}, 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf, 0x9}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000ac0)=0xb3, 0x4) getsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f00000000c0), &(0x7f0000000080)=0x1) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 813.646955ms ago: executing program 0 (id=3608): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) syz_genetlink_get_family_id$team(&(0x7f0000000100), r1) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x2f, 0x7, 0x7, 0x5, 0x20, @private2, @rand_addr=' \x01\x00', 0x8000, 0x700, 0x401, 0x5}}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xbc, 0x0, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_DEBUG_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4000000}, 0x20044000) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)=@o_path={&(0x7f0000000400)='./file0\x00', 0x0, 0x10, r0}, 0x18) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000480)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000700)={{}, r6, 0x16, @inherit={0x80, &(0x7f0000000680)={0x1, 0x7, 0xfffffffffffffffc, 0x8, {0x2, 0x2, 0x0, 0x800, 0x8}, [0x4, 0x4, 0x7a0, 0xffffffff, 0xba3, 0xd8, 0x101]}}, @subvolid=0xffffffffffffffff}) ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000001700)) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f0000001840)={r0, &(0x7f0000001740)='\\[\x00', 0xc1802, &(0x7f0000001780)={@_ha_fsid={[0x3, 0x9]}, {0xfffd, 0x73, 0x9, 0x6}}, 0xffffffff, &(0x7f00000017c0)={@_ha_fsid}, &(0x7f0000001800)=0x3}) ioctl$SIOCX25GCAUSEDIAG(r7, 0x89e6, &(0x7f0000001880)={0x1, 0xe0}) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f00000020c0)={{r4, &(0x7f00000018c0)='team_slave_0\x00', 0x200000, &(0x7f0000001900)={@_ha_fsid={[0xb5, 0x8000]}, {0x5, 0x3, 0x101, 0x1ff}}, 0xb, &(0x7f0000001940)={@_ha_fsid}, &(0x7f0000001980)=0x100}, 0x6, &(0x7f0000002000)=[{0x2, 0xed3, &(0x7f00000019c0)='\'\x00', &(0x7f0000001a00)="5db2a1a93dec2789e0c1c1d186ba409f5b76002070854aef75aec84444f463739b2d0b1616543fcd6b8fdd86c7792bb65555b79ce0b9fe2755a149a3118a2aa0774a1c2303cc521ce0ed84e0f1af3e79eacfc4f193131eb207ebc89149b1ed26869c45d1436924b2f96ba9ad2524825ed123d3c2ee68b305bf39b3a5833fba446ae2570c001a3989fb5814ec0e4d12064ec5f83d6a4c7c0c", 0x98}, {0x2, 0x5, &(0x7f0000001ac0)='\\[#{(^(\x00', &(0x7f0000001b00)="323ba847cd0804be03123b6968ec9e1a31e301344d760d9bc3c033bbfa27150cf6ec2da25bd0f2aef5dd14da76bd7f81e087c558165a939696dd97db5cd615e44d52c61d7170b6a2549f6c21e47f83f5908e167987c4d6cf2a1fb80473187f14f1e698e7e6e363c737766a715ef38a95b4cf2da652cd0ef3ccd179494d23604cc293229239d78db813f2044ba41e453bc3bfb88fc2eaf19c", 0x98}, {0x1, 0x2, &(0x7f0000001bc0)='..*]}%):,+}\n\x00', &(0x7f0000001c00)="992ff81afc78e899029096c88405d62731330ba462c5c1d43dc3b20a02373c46297e0e45da26128b4789c2e6bc25dbfb5473d42178a4251dc8f2bc42f8f5d96fee6fbe959ae85779e574e1a44eccdae7fb2adca8fedde8bd3014e0f656781eada472c13adb6bb9a07fd945cf6ff7f69ed4cd283def74f406b042c96aa44cb1828169a3e6eace7699ae220684c447421c52b98781fd31921e3bf7475d4ad9d14bdd57017ea152f1889e0e7f30005e8e404f13f121a48136c7d1a5a6d7da", 0xbd, 0x20}, {0x2, 0x4, &(0x7f0000001cc0)='veth1_to_bond\x00', &(0x7f0000001d00)="40d25994dd98756162cdae127b7df40bea8ac615751e0955972bd14efec658ed65519c5386793892db4015b95e17ccf8034937b340ae76c98f9d3b9a3a5ff4c3f0ce235a999146950b9dcfe2b2a8718ab718e071858f3289b36751e16412edffcd8fda6c35cc766ce4ceb0ad74df28ce882179f633f39b77e70c30a6c20232a87ff32e2903ff7c40637900ad6a9fa7e0c7f6483de3f7c4d625277c91ec295b7879139ff06718c209392fbd62303ec07eef4c8d52ed38730228fd22a8246bb89451d9ba02d522921643a1b3e10a96ffb0ab08f1d4b864ff65e09548920b", 0xdd, 0x2}, {0x1, 0x8, &(0x7f0000001e00)='\x00', &(0x7f0000001e40)="e9bdaba1f61a2f7a735df516abf5dcb20ac2bf564e246cafefe827a37d3c9b36f87e030ada065cb7f03b7b8f98867531c94c59dc320855a6dee4a84e09862f90164526aa8476d4d00903662af3ae2c6440670e135f1d584ad657f68f6b15fcc175968cefa304d906edd6b777a28b8933fb", 0x71, 0x6}, {0x2, 0x5, &(0x7f0000001ec0)=':(\x00', &(0x7f0000001f00)="3c4eef42aeec49257ce71543f310c9317076ce12fa02eda0a9b99813e9d987932466a1a1f822e4ca8e2b4d50c3f2a31f5519bcd26320afca915d91ca1bba64a01a452783c0984f9cbe7a0cfcb882572fd670e6abd5e599d3964dbc95f5753fe9833c2b393e342d3f63246e74279e602c6c04b30dd1260c83459d708a90ead0df8966f46a274f87e1e8a5132180fb9a6f3c1ece5d7c47d74b55fece2ae06f01c8156c81d6d504897c584e3f8f49fac099e40471185f4afdd6898c6eb0894f25e3939065a157f38638cbbf56690c07673a970aa413c1a2f1f893b9ada306080ae80907ab005da165c20e2f9e19a7067669e476994c44112731af", 0xf9}]}) bind$netlink(r8, &(0x7f0000002140)={0x10, 0x0, 0x25dfdbff, 0x2000}, 0xc) getsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000002180), &(0x7f00000021c0)=0x4) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000022c0)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002280)={&(0x7f0000002240)={0x34, 0x0, 0x310, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x4, 0x7, @l2={'eth', 0x3a, 'vlan0\x00'}}}}, ["", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x40050}, 0x4000880) sendmsg$NFT_MSG_GETTABLE(r7, &(0x7f00000023c0)={&(0x7f0000002300), 0xc, &(0x7f0000002380)={&(0x7f0000002340)={0x14, 0x1, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4c890}, 0x5) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000002440), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000002500)={&(0x7f0000002400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000024c0)={&(0x7f0000002480)={0x34, r9, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0xd, 0x10001, @l2={'eth', 0x3a, 'vcan0\x00'}}}}, ["", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x50) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$alg(0x26, 0x5, 0x0) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r0, 0x40086e81, &(0x7f0000002540)=0x9) r10 = socket$inet_icmp(0x2, 0x2, 0x1) r11 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r10, 0x50009418, &(0x7f0000002580)={{r11}, r5, 0x8, @unused=[0x2, 0x7, 0xeb, 0x9], @subvolid=0x3c2}) pipe(&(0x7f0000003580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_BATCH(r12, &(0x7f0000003740)={&(0x7f00000035c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000003700)={&(0x7f0000003600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSETELEM={0x2c, 0xc, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x9c, 0x3, 0xa, 0x201, 0x0, 0x0, {0xf, 0x0, 0x2}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3a582741}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x5}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x22, 0xc, "22dab12aee713a3e66c91003fa668b61adc26c853ad3127d40e67575759e"}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x5}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'team_slave_0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x252e67e}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xf0}, 0x1, 0x0, 0x0, 0x4044000}, 0x4000000) sendmsg$TIPC_CMD_SET_LINK_TOL(r7, &(0x7f0000003880)={&(0x7f0000003780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x68, r9, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0xfffffffe, @link='syz0\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x8800}, 0x20000081) 730.54843ms ago: executing program 3 (id=3609): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000040}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1e8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xd}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1000}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x70}}, 0x4000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r2, 0xffffffffffffffff}, 0x4) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, &(0x7f00000002c0)={r1, &(0x7f00000001c0)=',{$%\x00', 0x802, &(0x7f0000000200)={@align=0xffff, {0x1, 0x7ff, 0x44, 0x1}}, 0x1, &(0x7f0000000240)={@_ha_fsid}, &(0x7f0000000280)}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000480)=0x14) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000580)=@o_path={&(0x7f0000000540)='./file0\x00', 0x0, 0x4000, r2}, 0x18) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1b, 0x16, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffff3b}, [@map_idx={0x18, 0x2, 0x5, 0x0, 0x8}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3abd5a56}}]}, &(0x7f00000003c0)='syzkaller\x00', 0x5, 0x11, &(0x7f0000000400)=""/17, 0x41000, 0x60, '\x00', r6, @fallback=0x32, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0xb, 0x40, 0x7}, 0x10, 0x0, r7, 0x3, 0x0, &(0x7f00000005c0)=[{0x2, 0x3, 0xd, 0xc}, {0x1, 0x1, 0xe, 0x4}, {0x2, 0x5, 0x8, 0xa}], 0x10, 0x2}, 0x94) sendmsg$inet6(r5, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f00000006c0)="425168104557b4fd9b9db5b014975f369d9fe7d88543f0c3866df406e926f673babea004b6e259fd5a57a1de1e098471ef506d6e3f7b1f26b8524e6a085a2f20f95ec82b346916b2d4f0e1219f71255001a5f36dedfb4d59e0d6e3d6650c96181b", 0x61}, {&(0x7f0000000740)="4d749c857a5c07f174269fea86fe23274ef565b8fb4de1565150d79274236a41ac3003036560df3a2a90b1bf03a803bf63ac18844a3abfa5089ea7897e95233072b1cc2148", 0x45}, {&(0x7f00000007c0)="c3c9bf594f250b890d43b8d6b172a0582f9abc6ed46cd866d644a99b55eefc9a3c73006012d486fbf3e637bc9398fe20", 0x30}, {&(0x7f0000000800)="44093fca9f5131da59a3d9ae7af1080e9c0c0b6b76dc9b897f5f9fa7a6e85d0457856a6378917cee07bb0b9cfbe75f0007efeb98f65bfa9d370a679b61ee222dffc8e649355ca1f4451bc5b8cfdc9050602e0650c20b1af778439a82076b4d4f2d5a6bcdcb731184c558a92623667dc8b262720fce744b66fdd993fe8827545a945f4024ea214c7a31823eb53288180abf08686036e32b27ba939f6df64e66cd0323d8ce459c830553b4688b446a2108979af3b6299b65dfa11f59f79cf8", 0xbe}, {&(0x7f00000008c0)="1ddacfac37a931755098ca0ac0af0d69e2b699b8e8a1efcf17179a5002e7f63f8a8cea92c64dafe3c82744c6dc61c4794cff440e8f5907338318bbb12c67fefbe00acfafe6ee0581835fffdacab31990a9062b76e54d8c4cd476d0a4e2cc4ec60ca68806ed0c2732453665309bab758bbbec0f4682d9e8df9f400aaf99b3a9ba4f3fadadad04cb108bbc8f78c877e9badf04d66275e67fb00d20cfa690a47e175da1ea6ed1289035fda196440f23d46bf1e35c", 0xb3}, {&(0x7f0000000980)="91af367ab08e6229df0a03cb8355252949019b8f441220878af8334618aa2e1110009f77449e587f8cc57da86c16193c298212357e8b00d3d8bd5390460ec0bca9bda502d2939e994102f6621eea93b118b392017a970d1d0f1e581048bda88502114c346f2f1757c728918afbe72d85266a2b1f090e76a2d17c3eaeb438872c05ab31a97d9616b4f4389cb741f03e935d6d946352e541dd2602a4e3ca", 0x9d}, {&(0x7f0000000a40)="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", 0xff}, {&(0x7f0000000b40)="c68bff4aa45f9143dd739001dd8d75c2e7864dc5b786da1f4ec086203f178186ec64f4a97b64e1b02bd6aaf7e2f989ab01e9ac6bf78fd166493ca2e240925ff956884d07ad2295f3c75e85218f986644bda864a7b3e91865f925208876209c14995b617d8dfd654d31aacf04d4318ded263bd5e32917a03646e59bdd", 0x7c}], 0x8, &(0x7f0000000c40)=[@dstopts_2292={{0x30, 0x29, 0x4, {0x87, 0x2, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @pad1]}}}], 0x30}, 0x0) getsockopt$PNPIPE_IFINDEX(r5, 0x113, 0x2, &(0x7f0000000cc0), &(0x7f0000000d00)=0x4) r9 = socket$inet6(0xa, 0xa, 0x10001) getsockopt$inet6_int(r9, 0x29, 0x3c, &(0x7f0000000d40), &(0x7f0000000d80)=0x4) r10 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000dc0)={'wlan0\x00'}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e40), r0) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x20, r11, 0x10, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x42, 0x7f}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000001}, 0x884) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r7, 0xf505, 0x0) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000f80), r0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, r12, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x5, 0xffff, 0x3, 0x2}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4048895}, 0x4000014) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000001080)=0x40000000) socket$kcm(0x29, 0x5, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r9, 0x29, 0x2a, &(0x7f00000010c0)={0x7, {{0xa, 0x4e23, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}}}, 0x88) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000016c0)={r8, 0xe0, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001400)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000001440)=[0x0], &(0x7f0000001480)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x4b, &(0x7f00000014c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000001500), &(0x7f0000001540), 0x8, 0x40, 0x8, 0x8, &(0x7f0000001580)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1f, 0x16, &(0x7f0000001180)=@raw=[@alu={0x4, 0x1, 0x6, 0x2, 0x3, 0xfffffffffffffffc, 0xfffffffffffffffc}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}, @ldst={0x2, 0x2, 0x0, 0x0, 0x7, 0xfffffffffffffffc, 0x10}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}], &(0x7f0000001240)='syzkaller\x00', 0xbe5, 0xd9, &(0x7f0000001280)=""/217, 0x41000, 0x12, '\x00', r6, @fallback=0x38, r5, 0x8, &(0x7f0000001380)={0x1, 0x2}, 0x8, 0x10, &(0x7f00000013c0)={0x0, 0x4, 0xfffffffa, 0x1}, 0x10, r13, r8, 0x5, &(0x7f0000001700)=[r8, r3, r3, r5, r2], &(0x7f0000001740)=[{0x1, 0x3, 0xd, 0x8}, {0x9, 0x1, 0x9, 0x2}, {0x0, 0x2, 0x4, 0x6}, {0x5, 0x3, 0xd, 0x5}, {0x4, 0x1, 0xe, 0x9}], 0x10, 0x3}, 0x94) setsockopt$PNPIPE_ENCAP(r5, 0x113, 0x1, &(0x7f0000001880), 0x4) setsockopt$inet_mreq(r10, 0x0, 0x24, &(0x7f00000018c0)={@loopback, @multicast2}, 0x8) ioctl$NILFS_IOCTL_RESIZE(r4, 0x40086e8b, &(0x7f0000001900)=0x4) ioctl$BTRFS_IOC_INO_PATHS(r3, 0xc0389423, &(0x7f0000001980)={0x5, 0x8, [0xe9a, 0xe, 0x3, 0xd1e], &(0x7f0000001940)=[0x0]}) 728.36118ms ago: executing program 0 (id=3610): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a010601000000000000000200000a0900010073797a30000000004c000000030a010602000000000000000200000a0900010073797a30000000000900030073797a30000000000b00070066696c7465720000140004800800014000000003080002400000000098000000060a010603000000000000000200000a0900010073797a30000000000900020073797a30000000006c0004802c0001800e000100696d6d6564696174650000001800028008000140000000010c00028008000100313233343c0001800a00010072616e67650000002c000280080001400000000108000240000000000c00038008000100313233340c0004800800010035363738140000001100010004000000000000000200000a"], 0x12c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, &(0x7f0000000140)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x5b}}, &(0x7f0000000480)='GPL\x00'}, 0x90) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000080)="12345678d618dcb70d9f8486c40ead173a754c0f735e5d04866c2830259fbcb68b5bf4f20aaac2b17a21a95fc9d951d0a538bb52fb5b027bf1b41e812c42812b2e20441cb2775a514153e487e4a277868f91ad105a0d7c111358daf09f7a3c2847e554f76e07028920eab4c72f123d349122305f9a3a3a3f7138c9cbc352fcf74e67abe391e385baf3212d6596bfa02f518c63c066c4d4ae52", 0x99, 0x0, &(0x7f0000000180)={0x2, 0x4e22, @remote}, 0x10) 576.559454ms ago: executing program 0 (id=3611): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0x68000000}, 0x0) r0 = socket$kcm(0x21, 0x2, 0xa) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) r3 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r3, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0xffe0}], 0x1, 0x0, 0x0, 0x804c040}, 0xc851) close(r3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffb}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x0, @dev={0xfe, 0x80, '\x00', 0x36}}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x5, 0x5, 0x5}, 0x14) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0x0, @private1}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x0) r5 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000240)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e21, 0x0, @private2}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x0) 574.171832ms ago: executing program 2 (id=3612): bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd61"], 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2, 0x1000}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r1, &(0x7f00000001c0)="7e9c41dd3d", &(0x7f0000000240)}, 0x20) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@getchain={0x6c, 0x66, 0x2, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x5, 0x4}, {0x1, 0x4}, {0xc4fed68ab1b7f5f6, 0x9}}, [{0x8, 0xb, 0x2}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0xffff6450}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0xffffffe1}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x2, 0x4}, {0x0, 0x9}, {0xb, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x5, 0x4, 0x5}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0702000004000000080000000100000000000000697e100a6536615e2246a5281ef3a7956627e2bb89636dfe9377430851aaf844ee9b098fa4424629f4c059254f649ad28859e4fce93e56af59f099dfb476c8f29477f411990f43b151466ead114ebfca096eebed3abec2f51b2aac93f6367cb04e2f77b3eee2e5f09a45850626f32098473996b2e734b01f2e6938b45b6d1e6d19df75f46b3dd62d0fa176361ace1b5c19c24614100a99581dfb079cb6e855ac7f77ce8433055f75461b9a587cf2eed3adba0cd19bcb74d41bdd33ec8089cc975c0332d2f398fb", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x56, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x20, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x2, 0x0, 0x0, {[@exp_fastopen={0xfe, 0xb, 0xf989, "941502b0001edb"}]}}}}}}}}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r6}, 0xc) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000400)={r5, &(0x7f0000000100), &(0x7f00000001c0)=""/5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r4, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x0, 0x353a, 0x1}}, 0x20) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000100)='blkio.reset_stats\x00', 0x2, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f0000000080)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_subtree(r10, &(0x7f0000000900)=ANY=[@ANYRESDEC=r8, @ANYRESDEC], 0x44) write$cgroup_int(r10, &(0x7f0000000340)=0x5, 0x12) r11 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r11, 0x40047438, 0x0) r12 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r12, 0x10e, 0xc, &(0x7f0000000180)={0x4000}, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001340)={0x1c, 0x1a, 0xa01, 0x0, 0x0, {0x0, 0x0, 0x300}, [@typed={0x8, 0x0, 0x0, 0x0, @pid}]}, 0x1c}}, 0x0) r13 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r13, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) 573.507121ms ago: executing program 3 (id=3613): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) (async) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) sendmmsg$inet(r1, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000017c0)="91f8a9849519def28691bbc4173c3d6f357d0272b7e95a136b3ffec75b73e6937b7b22a1319130feaab952ac4703cad07fc26e4c91ea4feb931647fc5393de25000000000d0000f2ffff032e3591ceb1757de97fb25500620d0d30506e7429fa5337b74945da657f794d5b5bf89588e07b14a17f069912dc0c3f201bff8b9a687b85baa11244632642a9be7b42b6b5882b738f05eba73221490e2d5c17cf406be2796eec488a5b5268f507ee8d6f3dd1d64abc785708eb9bd24e352a984b2b1596d35ebe1d", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000002300)}], 0x1}}], 0x2, 0x2090) sendto$inet(r1, &(0x7f0000000a80)="005bd507a6e8b3e0e917b21f7ed0cd7b84ced4929f916ac3dc05a5f738f237fe", 0x20, 0x10008895, 0x0, 0x0) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r0) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r2, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x30}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000844}, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) (async) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) (async) r4 = socket$pppl2tp(0x18, 0x1, 0x1) (async) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000018c0)=@nat={'nat\x00', 0x1b, 0x5, 0x13e0, 0x1180, 0x1270, 0xffffffff, 0xa8, 0x1180, 0x1348, 0x1348, 0xffffffff, 0x1348, 0x1348, 0x5, &(0x7f0000000140), {[{{@ip={@multicast1, @multicast2, 0xffffff00, 0xffffffff, 'veth1\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x2e, 0x3, 0x8}, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0xc, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @gre_key=0x6, @port=0x4e20}}}}, {{@uncond, 0x0, 0x10a0, 0x10d8, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x0, 0x0, './cgroup.cpu/syz0\x00', 0x7, {0x10}}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @local, @private=0xa010101, @gre_key, @port=0x4e22}}}}, {{@uncond, 0x0, 0xb8, 0xf0, 0x0, {}, [@common=@socket0={{0x20}}, @common=@icmp={{0x28}, {0x12, "59a0", 0x1}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x1, @dev={0xac, 0x14, 0x14, 0x13}, @multicast1, @gre_key=0xfff7, @port=0x4e20}}}}, {{@ip={@loopback, @broadcast, 0xffffff00, 0xff0000ff, 'erspan0\x00', 'ip6_vti0\x00', {0xff}, {}, 0x29, 0x0, 0x14}, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@addrtype={{0x30}, {0x840, 0x189, 0x1}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x8, @loopback, @local, @icmp_id=0x66, @port=0x4e22}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x1440) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) (async) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010026bd7000fedbdf25050000000800090002000000060001000500000008000c00aa0a000008000b00040000000500050040"], 0x3c}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) (async) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c) (async) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) (async) syz_emit_ethernet(0x5a, &(0x7f0000000200)={@local, @local, @val={@void, {0x8100, 0x2, 0x1}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\b\x00', 0x20, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x32}, @rand_addr=' \x01\x00', {[], {{0x4e22, 0x4e21, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20, 0x1000, 0x0, 0x0, {[@nop, @timestamp={0x8, 0xa, 0xf35e, 0x8}]}}}}}}}}, 0x0) 573.0021ms ago: executing program 4 (id=3614): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000005700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18, 0x10}}], 0x1, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x82}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x82}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000680), r4) sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x14, r5, 0x101, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x8010) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x30, r2, 0x1, 0x3, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x81}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x2400c000}, 0x0) (async) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x30, r2, 0x1, 0x3, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x81}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x2400c000}, 0x0) 453.77037ms ago: executing program 1 (id=3615): mmap(0x0, 0x400000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000004900010000000000000000000a006000", @ANYRES32=0x0, @ANYBLOB="000000000800020000000000140001"], 0x38}}, 0x0) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000040)={0x248, 0x0, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0xec, 0x22, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xffffffc0}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x200}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7ea}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xffffff3f}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xffff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x81}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xfffffff9}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xfffffffd}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x557}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}, @NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xfffff38c}]}]}, @NL80211_ATTR_REG_RULES={0x58, 0x22, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x9e3}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xea}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1ff}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1ff}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_REG_RULES={0xc8, 0x22, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x400}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x80000001}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xffffff11}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x43a}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x10001}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xc}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1ff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x4}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1a800000}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xeea}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x3}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x5}]}]}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1e}]}, 0x248}, 0x1, 0x0, 0x0, 0x40}, 0x8010) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000001240)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000001280)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000001300)={0x0, {0x2, 0x4e20, @empty}, {0x2, 0x4e22, @remote}, {0x2, 0x4e24, @broadcast}, 0x20, 0x0, 0x0, 0x0, 0x6, &(0x7f00000012c0)='veth1_to_bridge\x00', 0x6, 0x5, 0x4}) 443.001469ms ago: executing program 4 (id=3616): syz_init_net_socket$llc(0x1a, 0x801, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) close(0x3) r1 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$inet_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e21, @dev}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="6eaa000000000000791098000000000018090000", @ANYRES32, @ANYBLOB="000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) 420.056317ms ago: executing program 0 (id=3617): r0 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x3, 0x2, 0xfdf00002}, {0x16, 0x0, 0x6}]}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000280)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f328db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052", 0x33}, {&(0x7f0000000680)="2a637c1b8b3894ec89aaef510a473f", 0xf}], 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@bridge_getneigh={0x28, 0x1e, 0x3c964e403b131b43, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x7048, 0x77219}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) sendto$inet6(r0, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, &(0x7f0000000180)=ANY=[@ANYRES64=r0, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000003808500000008000000bc0900000000000055090100000000007204800000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0xa, 0x1003, &(0x7f0000001e40)=""/4099}, 0x94) 296.102525ms ago: executing program 3 (id=3618): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000280)={'vxcan1\x00', 0x0}) bind$can_raw(r3, &(0x7f0000000000)={0x1d, r4}, 0x10) (async) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xfff2, 0xffff}, {0xa}}}, 0x24}}, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r5) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x437, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r6, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c805}, 0x0) (async) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x24, r1, 0x1, 0x70bd2d, 0xe, {}, [@GTPA_LINK={0x8, 0x1, r6}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x1f371693c3ceafd2}, 0x20000000) (async) r7 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r8, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0000000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000001007d60b7030000010000006a0a00fe00000000850000000d000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000000000639100000000000000000000ff7f0000292f17cee19d0001000000000000000000cb04fcbb0ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e84cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fb484510bef2e4852f5c2fe6faaf75e5cc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5d053bdec75dca3772be2c9d2d29db3d36dd015c7bd3f15aa6aadbeab2a01685108e61aa000000000000000000000000008b798b4f7458d1863cc67d4c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f1c6edc76609073909826151e2b42bf0ed0c8cef3ba2a730a00c87c493db845b10e9468bda6f82881eb8c9cfa72b08eecc972a3fd2c46f3c1cde71a19d1a2982492abaa96665372831210e00d2bfea3bf97ff8836d000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0x1f00, 0xf, 0x2f, &(0x7f00000007c0)="9f44948721919580684010a49e66", 0x0, 0x7ff, 0x0, 0xb1, 0xfffffd85, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) (async) r10 = socket$pppl2tp(0x18, 0x1, 0x1) r11 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r10, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r11, {0x2, 0x0, @multicast2}, 0x2}}, 0x26) r12 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r12, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x8, 0x1, 0x400, 0x0, {0xa, 0x0, 0xe38, @private0}}}, 0x32) (async) r13 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newqdisc={0x134, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x108, 0x2, [@TCA_RED_STAB={0x104, 0x2, "55f4b32d215d09ad34a54ecd392b645312028acf803a4be046ac0250a6ab00acdbbcc0a681ef62574eb95c3668168a2237f2cc488cf760d067868e8021f61308c6db4e4ac2ec40342736d4b782ed114b6e548109d0d25d975663c05ceaa64032471a805702a7a92bca01e7f16cfd7858b64cf7168d9220b64044c8dab5221c7a97fe9b875c33dfe30b850d7b07be151a84a139feeb514347d3e58683a3a7a624b0c79700622bbb5c8f573b27d294ff211faa3ef5d05472c85cd1ed4d7bdfbbe8aea77753e983bf2350c11b80e2e0c058bc01ebfe9e4faec45b78bb3d2551f3fec86fca5bea0668c9c98e75db02191cc525ec2d3f9a4db0895a3ff2b1931fa0da"}]}}]}, 0x134}}, 0x0) (async) r14 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r14, 0x89a3, &(0x7f0000000100)) (async) r15 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="14000000", @ANYRES16=r15, @ANYBLOB="250300000000000000000800"], 0x14}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00'}, 0x80) 276.816105ms ago: executing program 1 (id=3619): r0 = socket(0x2000000015, 0x80005, 0x0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x114, 0x71, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000)="bdd90156b8", 0x5, 0x24000800, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xc8000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@newqdisc={0x8c, 0x28, 0x4, 0x4001, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x2, 0x10}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xb, [0x9, 0x1, 0x9, 0x10, 0x11, 0x6, 0x0, 0xe, 0xc, 0x6, 0x3, 0x26, 0x8, 0x4, 0x0, 0x4], 0x1, [0x40b, 0x3, 0x7, 0x2002, 0x1, 0x4, 0x8002, 0xd09, 0xff05, 0x4, 0xb, 0x3, 0x5, 0x2, 0xb, 0x100], [0xfff1, 0x3, 0xffff, 0x7, 0x4, 0x5, 0x1, 0x9, 0x3fc, 0x2, 0xc, 0x43, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0xc}, {0xffff}, {0x8, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x2, 0x8, 0x2, 0x0, 0x1, 0x8, 0xff, 0x10, 0x4], 0x3, [0xc, 0x101, 0x140, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x27, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) syz_init_net_socket$llc(0x1a, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r11 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r12, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r11, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r12, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(r11, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ff07", @ANYRES16=0x0, @ANYBLOB="010002000000fedbdf2500000000080001", @ANYRES32=0x0, @ANYRES32=r12], 0x2c}, 0x1, 0x0, 0x0, 0x4004054}, 0x4000044) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) socket(0x10, 0x3, 0x0) 221.888096ms ago: executing program 2 (id=3620): r0 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000040)={@dev={0xac, 0x14, 0x14, 0x3c}, @broadcast}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="200000006a0083130000000000000000000000000000000008000500d768d9f8"], 0x20}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="200000006a0083130000000000000000000000000000000008000500d768d9f8"], 0x20}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newtaction={0x4174, 0x30, 0xb, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x3, 0x1}, @TCA_SKBEDIT_PTYPE={0x6, 0x4}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x400}}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0xf5}}}}]}, {0x190, 0x1, [@m_ife={0x18c, 0x7, 0x0, 0x0, {{0x8}, {0x118, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0x7ff, 0x3, 0x0, 0x1}}}, @TCA_IFE_METALST={0x38, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x2}, @IFE_META_SKBMARK={0x8}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0xa}, @IFE_META_PRIO={0x8, 0x3, @val=0x10}, @IFE_META_PRIO={0x8, 0x3, @val=0xfffffff7}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}, @TCA_IFE_METALST={0x24, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x1}, @IFE_META_SKBMARK={0x8}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x54d}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_METALST={0x18, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x1}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x3ff}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x6, 0x20000000, 0x7, 0xd2}, 0x1}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x7, 0x8, 0x5, 0xff}, 0x1}}, @TCA_IFE_DMAC={0xa, 0x3, @broadcast}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x9, 0x8, 0x3, 0x0, 0x75}, 0x1}}, @TCA_IFE_METALST={0x24, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0xffffffff}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x1}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x2}, @IFE_META_TCINDEX={0x4, 0x5, @void}]}]}, {0x4e, 0x6, "75a4eb8d3277c72f5afd6a0bb377d555eb4166790f92c0a164fdec55c520b038b3d6f703d095b148879f1a31e604d7c5ba685e42e6a18983a0d3f7b2da57c13961343d3cd7ea955aa927"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}, {0x3f74, 0x1, [@m_vlan={0x11c, 0xa, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x1, 0x5, 0xf, 0x7}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x3}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0xc1, 0x6, "364c910b6299ed4b83ccff6f573d0a9468592bbb8a501f903c5aff0f9b9601c9cdb81389a107635efab5ad704501f59099ca21c2fc83779ee27205b7fcbb0f6440629555ed3a817d0d8f0dc3b10a280b9540bdcdb74e2a0bbc461ea4e181862eba64fe367248a5d42d935076a47bae247e7a89f14fb0f919b8eb72e265d97530f2f6b92d9511b7820b6037262284b597ca857bdf33c336bb11d32f5aa26e08f11580e220f7cae585dba724c062e5bbf79e37feb3960c2776f23f90e3c7"}, {0xc}, {0xc, 0x8, {0x57adbfeb68cd3891, 0x2}}}}, @m_pedit={0x3e54, 0x54, 0x0, 0x0, {{0xa}, {0x3d90, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe68, 0x2, {{{0x0, 0x0, 0x20000000, 0x7f, 0xfffffffc}, 0x4, 0x9, [{0x3ff, 0x6, 0xf1f, 0xe, 0xffffffff, 0x8000}, {0x163, 0x9, 0xe, 0x0, 0x6, 0x6}, {0x6, 0xff, 0x9, 0xfffffffa, 0x4, 0x81}]}, [{0xf, 0x8, 0x0, 0x1, 0x8, 0x8}, {0x100, 0x22, 0x4, 0x2, 0x9, 0x79}, {0x3ff, 0x0, 0x7e0f, 0x9, 0xb3e, 0x5}, {0x4, 0x7f, 0xb, 0x7, 0x81, 0x3}, {0x4, 0xb7, 0x7fffffff, 0x8, 0xffffffff, 0x54757217}, {0xff, 0x0, 0x6, 0x9, 0xd2a, 0x9}, {0x1, 0x5, 0x42, 0x1, 0x2, 0x9}, {0x800, 0x1ff, 0x6a4fbe7f, 0x80000001, 0x101, 0x9}, {0x10, 0x6, 0x6, 0xb3f, 0x4}, {0x4, 0x3, 0x0, 0x4, 0x78, 0x80}, {0x5, 0x5, 0x5, 0x8, 0x7f, 0x3d}, {0x7, 0x0, 0x4, 0x8ef, 0x8, 0xfffeffff}, {0x0, 0x0, 0x8, 0x7, 0xe6d, 0x9}, {0xe, 0x10, 0x9, 0x81, 0x6c8c, 0x8}, {0xc3b, 0x2, 0x7, 0x400000, 0x5, 0x8000}, {0x6d3f, 0x9, 0x49b9, 0x4, 0x1, 0x6}, {0x81, 0xf, 0x1, 0x7264, 0x0, 0x68ab}, {0x6, 0xe, 0x8, 0xfff, 0x7, 0x8c0}, {0x8, 0x7, 0x10000, 0xe7, 0x8, 0x6}, {0x8, 0x6, 0x200, 0x200, 0x9, 0x3}, {0x9, 0xfff, 0xa, 0x200, 0x7, 0x1000}, {0x0, 0x1000, 0x6, 0xfffffff6, 0x18a0, 0x47}, {0xca, 0xfffffbff, 0x0, 0x7, 0xfffffffa, 0x9}, {0x1, 0x1, 0x2, 0x4, 0x1, 0x412c}, {0x4, 0x400, 0x7, 0x1, 0x9cc, 0xfffffff7}, {0x3bf6, 0x200, 0x516efeb6, 0x7, 0xfff, 0x9}, {0xffffffff, 0x6, 0x5, 0x6, 0x40d00f3c, 0x800}, {0x9, 0x4c4b, 0x977, 0x6, 0xf54, 0x5e6}, {0x7, 0x8, 0x4, 0xc6, 0x1, 0xff}, {0x1, 0x400, 0x0, 0x6, 0x93, 0x2}, {0x7, 0x7fffffff, 0x8, 0x28d, 0x24, 0x5}, {0x401, 0x9, 0x9, 0x6, 0x2, 0xc}, {0x4, 0x6, 0xffff, 0xc, 0x3, 0x4}, {0x3, 0x6, 0x6, 0x6, 0x7, 0xfffffffc}, {0xe513, 0x9, 0x8, 0x4, 0x440, 0x7}, {0xb, 0x0, 0x6, 0x3207463c, 0x29e, 0x5}, {0xffffffa3, 0x3, 0x4, 0x3, 0x1000, 0x8}, {0x3, 0x7fff, 0xffffc0aa, 0x0, 0x1000, 0x1}, {0x4, 0x6, 0x5, 0xc, 0x6, 0xfb}, {0x80000000, 0x8, 0x7, 0xffff, 0x9c00, 0xfffffffd}, {0x9, 0xcbd, 0x8, 0x1000, 0x7}, {0x5084, 0xfffffa4d, 0x6, 0x800, 0x5, 0xb}, {0x4, 0xd6eb, 0x1, 0x4, 0x101, 0xffffffff}, {0x617, 0xffff0000, 0x109, 0x49, 0x8, 0x4}, {0xcf9d, 0x7a, 0x70000, 0x3, 0x1, 0x1}, {0x2, 0x4, 0x9, 0x4, 0x5, 0xfffffff7}, {0xc, 0xe53d, 0xb, 0x80, 0xb3a4, 0x7}, {0x6, 0x80000000, 0x55, 0xffff, 0x8, 0xfffffff8}, {0x7, 0x8, 0xfffffff2, 0xae3c, 0xed5, 0x9}, {0xc3e, 0x7fff, 0x1, 0x5, 0x9, 0x6}, {0x2, 0x7, 0xfff, 0x2, 0xfffff000, 0x87}, {0x4, 0x3ff, 0x7, 0x8, 0xa, 0x8}, {0x4, 0xfff, 0x8000, 0x81, 0x6}, {0x2, 0x8, 0xffffffff, 0x6, 0x0, 0x7}, {0xfff, 0xb9, 0x3, 0x4, 0x1ff, 0x1}, {0x6, 0xd6b, 0x7, 0x5, 0x10, 0x8}, {0xf6, 0xe, 0x5, 0xfffffffb, 0x6, 0x6}, {0x80, 0x6, 0xfff, 0x6, 0x2, 0xfffffc01}, {0x9, 0x7, 0x10, 0x4, 0x7, 0x80000001}, {0xb, 0x6, 0x3ff, 0x800, 0xc4, 0x59}, {0x4, 0x1, 0x3, 0x2a, 0x0, 0x400}, {0xffffffff, 0x7, 0xd317, 0x6, 0x0, 0xd}, {0xfff, 0x1b, 0x2, 0xc23e, 0x8, 0x7}, {0x1, 0x200, 0x10, 0x6, 0x17afe8ef, 0x1}, {0x0, 0x7ff, 0x1, 0x1c, 0x1000, 0xfffffffa}, {0xd, 0x2, 0x0, 0x8, 0x9, 0x8}, {0x1, 0x7, 0x1, 0x1, 0x401, 0x7}, {0x1, 0x10000, 0x5, 0x1, 0x1, 0x2}, {0x0, 0x9, 0x3, 0xfff, 0xe, 0xedd}, {0xa98b, 0x10, 0x2, 0x80000, 0x0, 0x6}, {0xffffff8b, 0x3, 0x3, 0xa2, 0x2, 0x2}, {0xff, 0x9, 0x5, 0xff, 0x8}, {0x6, 0x101, 0x9, 0x4, 0x3aab, 0x6a3}, {0x8, 0x2, 0x0, 0x620e, 0x2, 0x5}, {0x1, 0x6, 0x81, 0x6, 0x4, 0xc}, {0x12205826, 0x9, 0x6, 0x3, 0x3}, {0x0, 0x4, 0x4c, 0x7fffffff, 0x200, 0x6}, {0x80000000, 0xc, 0x2, 0xb2, 0x3ff, 0xc}, {0x819, 0x89, 0x6, 0x4, 0x3, 0x7}, {0x0, 0x7, 0x425, 0x9}, {0x5, 0xb30a, 0x0, 0xfb, 0x10, 0x200}, {0x4, 0x6, 0x99fc, 0x4, 0x7, 0x24000000}, {0x5, 0xfffffff7, 0x4, 0x6, 0xffff0000, 0xffffff4b}, {0xfffffffa, 0x7, 0x7, 0xd3, 0x7fff, 0x9}, {0x81, 0x62, 0xdc6, 0x2, 0x2, 0x7}, {0xb3d, 0x4, 0x6, 0xf, 0x6, 0x1}, {0xc75a, 0x7, 0x4, 0x3, 0x8, 0x4}, {0x5, 0x4, 0x1ff, 0x8, 0x0, 0x10}, {0x0, 0x1, 0x4, 0x200, 0x9, 0x2}, {0x3ff, 0x4, 0x0, 0x5, 0xffffffff, 0x8001}, {0xffff, 0x3ff, 0x3622, 0x2c, 0xf4, 0x706d}, {0x87, 0xffffffba, 0x3, 0x2, 0xd9c, 0x3}, {0x10000, 0x5e5, 0x4, 0x80, 0x0, 0xe4}, {0xff, 0x7, 0xff, 0x3, 0x7, 0x9}, {0x81, 0xa, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x1000, 0xf, 0xff, 0x4, 0x1}, {0x9, 0x0, 0x1000, 0x7701d010, 0x400, 0x682}, {0xfcdf, 0x94, 0xf3e5, 0x1, 0x0, 0x8}, {0x9, 0x1b3, 0x7, 0x2, 0x4, 0x5}, {0x6, 0x5703, 0x7, 0xf0000000, 0x8517, 0x9}, {0x101, 0xffffffff, 0x5913, 0x4, 0x3, 0x7}, {0x7f, 0x3, 0x7, 0x7, 0x7, 0xc}, {0x8, 0x1, 0xff, 0x4, 0x3ff, 0x5f726207}, {0x5, 0x8, 0x2, 0x8fb0, 0x9, 0x51f}, {0x400, 0x80000000, 0x4, 0x7fff, 0xff, 0x80}, {0xfffffffb, 0x2, 0x4, 0x8, 0x5, 0x6}, {0x81, 0x8000, 0x6761, 0x1, 0x3, 0x7}, {0x2, 0x8, 0x4, 0x7, 0xfffffd91, 0x5}, {0x0, 0x81, 0x7, 0x2, 0x487, 0x100}, {0x33e, 0x40, 0x6, 0x9, 0x800, 0x1f}, {0x3, 0x5, 0x4, 0x6, 0x4, 0xcc1}, {0x8001, 0x9, 0x38, 0x2, 0x1aa2, 0x9}, {0x4, 0x9, 0x1, 0x3, 0x101, 0x4}, {0x5, 0x8001, 0x5, 0x8, 0x101, 0x1}, {0x1, 0x4, 0x5, 0x23, 0x1000, 0x5}, {0x3, 0x7fff, 0x9, 0xf2, 0x1, 0x80}, {0x6, 0x4, 0x1, 0x5, 0x8000}, {0x30a, 0x10000, 0xe23, 0xffffffc2, 0x8, 0x9}, {0x9, 0x7, 0xe, 0xfffffffd, 0x34d, 0x8}, {0x6, 0x3, 0x8, 0x20000003, 0x2, 0x10001}, {0x6, 0x81, 0x800000, 0x3, 0x12, 0xf2}, {0x0, 0x2, 0x3, 0xfffffffe, 0x120, 0x6}, {0x1, 0x4, 0x1, 0xf3, 0x40, 0xb}, {0x1, 0x8, 0x3, 0x90000000, 0xe, 0x7}, {0xa91, 0x0, 0x6, 0x3, 0x6, 0x8}, {0x1000, 0x533b, 0x4, 0x3, 0x5, 0x3}, {0x6, 0x7, 0x9, 0xfffffffb, 0x81, 0x89a}, {0x1, 0x2, 0xb51, 0x5, 0x4, 0x90}], [{0x3, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x2, 0x1}, {0x1}, {0x4}, {0x5, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3a386236be8b6eb4}, {0x1, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x1}, {0x2}, {0x4}, {}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x3}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1}, {0x6, 0x1}, {}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x2}, {0x5, 0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x4}, {0x3}, {0x2}, {0x4}, {0x4}, {0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x2}, {0x4, 0x1}, {0x2}, {0x5, 0x1}, {0x2}, {0x4}, {0x2}, {0x2}, {}, {0x5}, {0x4, 0x1}, {0x0, 0x1}, {0x7, 0x1}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x2, 0xfd581ca879ed1c34}, {0x1}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {}, {0x5}, {0x5, 0x1}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x1}, {0x5}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4}, {0x5, 0x1}, {0x1}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x7, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3}, {0x5}, {}, {0x1, 0x1}, {0x4}, {0x3, 0x1}, {0x3}, {0x1, 0x1}, {0x2}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {0x3}, {0x4}, {}, {0x1, 0x3}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x3}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x128, 0x5, 0x0, 0x1, [{0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x4c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_KEYS_EX={0xa0, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x6}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}]}]}, @TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x53, 0x800, 0x7, 0xc694, 0x3}, 0x3, 0x4}, [{0x80000000, 0x4, 0x6, 0x8, 0xa6, 0xc099}, {0x3b, 0x8, 0x7fffffff, 0xfffffffd, 0x7fffffff}, {0x0, 0x38d, 0x1, 0xc, 0xfffffff2, 0x9}, {0x10000, 0x9, 0x7, 0x0, 0x7, 0x4}, {0x3ff, 0x10000, 0x6, 0x10000, 0xde28, 0x4e9}, {0xc270, 0xffffffdc, 0x5f1bc92e, 0x6, 0x8, 0x7}, {0x29, 0x6, 0x9acd, 0x4, 0x80000000, 0x4}, {0xb7, 0x5, 0x0, 0x6, 0x0, 0xad7}, {0x924, 0x7fffffff, 0x71, 0x64, 0x8c, 0x7f}, {0x71d0, 0x69, 0xfffffff8, 0x4, 0xfc}, {0x7, 0x7, 0xfff, 0x5, 0x8ee, 0x4}, {0xb, 0xf7d5, 0x81, 0x42, 0x4, 0x5}, {0x7fff, 0x4, 0x8001, 0x2, 0x3, 0x40}, {0xaf, 0x81, 0x4, 0x2, 0x1000}, {0x9, 0x2, 0x47ac, 0x1, 0xf, 0x6}, {0x4, 0xb, 0xfff, 0x1, 0x9, 0x3}, {0x80000000, 0x77, 0xb0f, 0x10000, 0x7, 0x4}, {0x3, 0xfff, 0x59, 0xffffffe6, 0x101, 0x9}, {0x4, 0x7fff, 0x5, 0x8, 0x2eee5c04, 0x3}, {0x6e7a, 0x5d2, 0x8, 0x10001, 0x0, 0x2}, {0x2, 0x7, 0x5, 0xfff, 0x982, 0x200}, {0xe2af, 0x746, 0xfffffffa, 0x80, 0x3, 0x3}, {0xb5d, 0x5, 0x7ff, 0x7, 0x1, 0x2}, {0x7, 0xfffffffd, 0xa, 0x4, 0x7631, 0x3}, {0x10000, 0x7, 0x10001, 0x3, 0xae, 0x3}, {0x1, 0x2, 0x8, 0x6, 0xe, 0x8001}, {0x9, 0x5, 0x1ff, 0x3000, 0x7fff, 0x4}, {0x0, 0x8, 0x80, 0x3, 0x4, 0x7f}, {0x80000000, 0x1, 0x3, 0x10000, 0x25, 0x7}, {0x1, 0x3, 0x9, 0xfffffff7, 0xbbc}, {0xcf, 0x8, 0x5, 0xfba, 0x7fff, 0x4}, {0x6, 0x9, 0x10001, 0x200, 0x6, 0xfc000000}, {0xfffff801, 0x2b, 0x40, 0xba60, 0x7, 0x3}, {0x1, 0x800, 0x10, 0x8, 0xfffffffe, 0x1}, {0x1, 0x6, 0xbe7, 0x66, 0x0, 0xdc3}, {0x13, 0x7fff, 0x7, 0x5, 0x6000000, 0x7fff}, {0x0, 0x2, 0x2, 0x7fff, 0x6, 0x6}, {0x81, 0xff, 0x9, 0x27, 0xf64, 0x23621a0e}, {0x6a351d53, 0x9, 0x1, 0x0, 0x854b, 0x8}, {0x4, 0x5, 0x7c, 0x3, 0xcea, 0x8}, {0x798, 0x3, 0x1ff, 0x4, 0x3, 0x1}, {0xe, 0x8000, 0x26b, 0x9, 0x273, 0xfff}, {0x5, 0x3, 0x8, 0xd, 0x520, 0x7fff}, {0x31db, 0x5, 0x1, 0xd, 0x101, 0x5}, {0xc2e6, 0x4, 0x5, 0xc60, 0x3, 0x2}, {0x6, 0x1, 0x1, 0x1ff, 0xbd4, 0x3f5}, {0x0, 0x9fbd, 0x7fffffff, 0x401, 0x5, 0x80000000}, {0xe4, 0x10001, 0x0, 0x2, 0x2, 0x9}, {0x7, 0x2, 0x7fff, 0x1, 0x1, 0x5}, {0xffffff81, 0x6, 0xbb, 0x2dd, 0x9, 0x96}, {0x6, 0xb, 0xffffffff, 0xe5, 0x6, 0x5}, {0xfffff9fa, 0x5, 0xc, 0x5, 0x1ff, 0x10}, {0x1, 0x5, 0x3, 0x306096dd, 0x9}, {0x4000000, 0x9, 0x8, 0x2fc3, 0xfffffffc, 0x7f}, {0x3, 0x1, 0x81, 0x0, 0xffffffff, 0x10001}, {0x30000, 0x6, 0x8, 0x3, 0xfffffff8, 0x3}, {0x7, 0x6, 0x40, 0x0, 0x3, 0x3}, {0x9, 0x7, 0x8, 0x7, 0x2, 0x6}, {0x0, 0x3, 0x47b7, 0x0, 0x5, 0x1000}, {0x1ff, 0x4e3f, 0xff, 0xfffffff8, 0x4, 0xcd35}, {0x10000, 0x101, 0x7, 0x5d07, 0x2, 0x9b8}, {0x3, 0x7, 0xdc8, 0x430ee7ef, 0x4, 0x7f}, {0x0, 0xffffff01, 0x1ff, 0x9, 0x6, 0x3}, {0x4, 0x2, 0x7, 0x4, 0x6, 0x1}, {0x2, 0x8, 0x5, 0xfffffff9, 0x0, 0x7fff}, {0x8, 0xb425, 0x7, 0x9, 0x6, 0x8}, {0x2, 0x3, 0x7f, 0x9, 0xe2, 0x5}, {0x6, 0xff, 0x8, 0x0, 0x5, 0x5}, {0x9, 0xe5, 0x9, 0xa52c, 0x3, 0x10000}, {0x4, 0x0, 0x0, 0x6, 0x80, 0x7}, {0xffff, 0x8, 0x5, 0x800, 0x9, 0x5}, {0x6, 0x8, 0x1, 0xffffffff, 0x40, 0xd14}, {0x8000, 0x0, 0x6, 0x8, 0x3ce, 0x6}, {0x5, 0xfb, 0x81, 0x0, 0x4, 0x2}, {0x0, 0x5, 0x400, 0x7, 0xc6, 0x26}, {0x372, 0xffffffff, 0x7ff, 0x66, 0x81, 0x3}, {0x4, 0x4, 0x1, 0x4e, 0x32, 0xffffff01}, {0x6, 0xd0d6, 0xf, 0x4, 0xd9c, 0x1}, {0x1, 0x1, 0x0, 0x0, 0x5, 0x4}, {0x1000, 0x8, 0x81, 0x0, 0xd04b, 0x9}, {0x2, 0xfffffffc, 0x9, 0xffff, 0xcd19, 0x2}, {0x5, 0x4, 0x0, 0x9, 0x8001, 0x530}, {0xc46, 0x6, 0x2b0, 0x1, 0x1, 0x1}, {0xffff, 0xa025, 0x7, 0xfffffffe, 0x9fea, 0x5}, {0xa8f, 0xffffff12, 0x3, 0x3, 0xe2b5, 0x329}, {0x7, 0x4eef173a, 0x40, 0x5, 0x7, 0x7}, {0x10000, 0x95b9, 0x3, 0x5, 0x9, 0x400}, {0x7ff, 0x6, 0x1, 0x9, 0x1, 0xfffffffc}, {0xf7, 0x80000b3, 0x6, 0x8e000000, 0x2, 0x2}, {0xd6, 0x5, 0x9, 0x7d0, 0xb412, 0x441}, {0x400, 0x6, 0x5, 0x2376, 0x6, 0x7}, {0x9, 0x4, 0x2, 0x7, 0xfffffffc, 0x1}, {0x8, 0x3, 0x7, 0x7f, 0x401, 0x4}, {0x8, 0x9, 0x1, 0xa, 0x4, 0x3}, {0x8, 0x7fff, 0x6, 0x9, 0x401, 0x200}, {0x4, 0x3, 0x4, 0x6d6, 0x0, 0x5}, {0x6, 0x7, 0xff, 0x9, 0x10000, 0x200}, {0x5, 0x2, 0x5, 0x40, 0x4, 0x31f}, {0x400, 0x6, 0xe, 0x10000, 0xb8, 0x4}, {0xfffffffa, 0x5, 0x4, 0x2, 0x2, 0x3848}, {0x9, 0x5, 0x7fff, 0xfffffffe, 0x0, 0x6}, {0x8, 0x8, 0x54e, 0x3, 0x1}, {0x40, 0x3, 0x8, 0x80000001, 0x7f, 0x1}, {0x5dd, 0x65, 0x8, 0x9, 0x1, 0x5}, {0x10001, 0xe1, 0xb4bdaac1, 0x9, 0x7, 0x6}, {0x80000000, 0x7f, 0x401, 0x6, 0x0, 0x6}, {0x400, 0x36, 0x5, 0x3ff, 0xf0, 0x6}, {0x3, 0x7ff, 0x3, 0x2, 0x10001, 0x1ad7}, {0x1, 0x401, 0xfffffffd, 0x484b, 0x0, 0x1}, {0x0, 0x9, 0x3, 0x7, 0x0, 0x2}, {0x7f, 0x5, 0x0, 0x0, 0x80, 0x4}, {0x5, 0x8, 0x0, 0x2, 0x3, 0x3}, {0x2, 0xe, 0x62f, 0x1, 0x4, 0x9}, {0xcb, 0x6, 0x8, 0x2, 0x3, 0x1}, {0xff, 0x7, 0x2, 0x5, 0x5, 0x3}, {0x3, 0x5, 0x7, 0xffffffff, 0x3, 0x3}, {0xfff, 0x10, 0xfff, 0xd, 0x10, 0x2}, {0x7, 0x80000000, 0x1, 0x20000000, 0x40100, 0x9}, {0xffffffff, 0x5, 0x3, 0xd, 0xeb, 0x4c4a162}, {0x9c1, 0x4, 0xffffffff, 0x1, 0xffffffd5, 0x5}, {0x4, 0x7ff, 0x9, 0x1a, 0x82f, 0x8ca3}, {0xa, 0x65d1, 0x401, 0x3, 0x0, 0x3}, {0x8, 0x979, 0x9, 0x0, 0x8, 0x9}, {0xfffffffc, 0x4, 0x7, 0x6, 0x6, 0x18}, {0x3ff, 0x5, 0x6, 0x5ed}, {0x2, 0x0, 0x1000, 0x200, 0xfffffffb, 0x7f}, {0x3, 0x8000, 0x5, 0x5, 0x7, 0xa69}, {0x5, 0x3ff, 0x2f9b, 0x6, 0x5, 0x5777}], [{0x3, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x2}, {0x2, 0x1}, {0x5}, {0x4}, {0x5}, {0x2}, {0x2}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2}, {0x4}, {0x1, 0x1}, {0x1}, {0x5}, {}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x5, 0x1}, {0x5}, {0x2, 0x1}, {}, {0x4fc10dc082942939, 0x1}, {0x2, 0x1}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5}, {0x4, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x4}, {0x3, 0x1}, {0x3}, {0x1}, {0x2, 0x1}, {0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {}, {0x3}, {0xa44efea095e755d7}, {0x3, 0x1}, {0x5, 0x1}, {0x4}, {0x2, 0x1}, {0x2}, {0x2}, {0x5}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x1}, {0x5}, {0x2, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1}, {0x3, 0x1}, {0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x1}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x2}, {0x4}, {0x1}, {0x5, 0x1}, {}, {0x5, 0x1}]}}, @TCA_PEDIT_PARMS={0xeb0, 0x2, {{{0x8, 0x8, 0x7, 0x4}, 0x8, 0x2, [{0x8, 0x400, 0x0, 0xffff, 0x7a, 0x4}, {0x9, 0x3ff, 0x7fffffff, 0xffffff9c, 0x6, 0x3a5}, {0x10000, 0xe3e, 0xec5, 0xcd, 0x10, 0x10}, {0xfffffffc, 0x1019, 0x4, 0x85d7, 0xd, 0x401}, {0x5, 0x2, 0x9e6e, 0x5, 0x6, 0x5}, {0x3, 0x3, 0xca, 0x8, 0x80000001, 0x6}]}, [{0x4, 0x2, 0x7ff, 0x1000, 0x4, 0x2b}, {0x6, 0x4, 0x2, 0x0, 0x3, 0x33}, {0x8, 0x9, 0x2, 0x6, 0x45, 0x4}, {0x0, 0x3, 0x40, 0x5, 0x2d, 0x7f}, {0x1, 0x3, 0x7fff, 0x1000, 0xfffffe01, 0x6}, {0xfffffffb, 0x4, 0xa, 0x80000000, 0x9, 0xdf8}, {0x2, 0x0, 0x6, 0x9, 0x1, 0xe82}, {0xfc46, 0x0, 0x86fd, 0xfffffffc, 0x1, 0x4}, {0x7, 0x401, 0x5, 0xe9b, 0x5, 0xfffffffa}, {0x27bb, 0x0, 0x6, 0x9, 0x99d5, 0x2}, {0x5, 0x1e3d, 0x5543e5cd, 0x5, 0x32, 0x1}, {0x2, 0x800, 0x98, 0x2, 0x9, 0x4}, {0x0, 0xffff0001, 0x1, 0x3, 0x0, 0x7}, {0x4, 0x6, 0x5, 0x2, 0x5, 0x2}, {0x3ff, 0x1, 0xb, 0x3000, 0x7}, {0x400, 0x10001, 0x6, 0x5bdc21d8, 0x2, 0xffff}, {0x1000, 0x6, 0x2, 0x3, 0x4}, {0x8, 0xa, 0x7, 0x6, 0x8, 0x6}, {0x3, 0x737, 0xa0ae, 0x0, 0xe, 0x10001}, {0x100, 0x0, 0x8000, 0x2, 0xffffffff, 0x7}, {0x8, 0x806, 0x80000001, 0x1, 0x400, 0x370}, {0x5, 0x7, 0x0, 0x6, 0x1, 0x10000}, {0x6, 0x7fffffff, 0x5, 0x4, 0xa, 0x8001}, {0xa2, 0x7, 0x1, 0x800, 0x3, 0x1}, {0x1000, 0x2, 0x7, 0x9, 0x0, 0x41}, {0x7, 0x2, 0x0, 0x9, 0x6, 0x3}, {0x6, 0x7, 0x5, 0x23e5ce3a, 0x7ff, 0xffff2e51}, {0x1, 0x1d0, 0xf4f, 0x8, 0x89c, 0xa}, {0x7, 0x8001, 0x3e99f103, 0x0, 0x4, 0x6}, {0x8e1b, 0xfffffff9, 0x7, 0x4, 0x3ff, 0x101}, {0x6d9, 0x9, 0x3f, 0x7, 0xaf, 0x4}, {0x6, 0x4, 0x856, 0x2, 0x100, 0xf39}, {0x2, 0x2, 0x4, 0x200, 0x80, 0x2}, {0x7, 0x2, 0x6, 0x1, 0x2, 0x4}, {0x7fff, 0x8, 0x9, 0x46, 0x1, 0xfffffffb}, {0x7, 0x1, 0xc, 0x9, 0x2145, 0x9}, {0x0, 0x6c197f16, 0xffffff2a, 0x5, 0x0, 0x2}, {0x41, 0x0, 0x5, 0x800, 0x9, 0x5}, {0xf940, 0x1, 0x6, 0xffffffff, 0x6, 0x5}, {0x4, 0x7fff, 0x7, 0x8, 0x7, 0x10000}, {0x9, 0x3ff, 0x4, 0x1, 0x7, 0x1}, {0x8, 0x836, 0xffff, 0x9, 0xfffffff7, 0xa1}, {0x8, 0x0, 0x8, 0x9, 0x1, 0x800}, {0x5, 0x0, 0x2, 0x4, 0x7, 0x3}, {0x5, 0x6, 0x1, 0x3, 0x3, 0xc9}, {0x4526, 0x2, 0x4eb34812, 0xcf, 0xd, 0xe2}, {0x5, 0x2bc000, 0x8, 0x4, 0x2e2a0, 0x2754}, {0x1, 0x8, 0x2, 0x6b, 0x4, 0x6}, {0x7f, 0x6f5, 0xffffff5b, 0x80000001, 0x4}, {0x3, 0xc60, 0x2, 0x0, 0x1000, 0xc43}, {0x3, 0x1, 0x7fffffff, 0x0, 0x2, 0x74f}, {0x5, 0x3, 0x7, 0x1000, 0x8, 0xd}, {0x600, 0xffff7ff6, 0x3, 0x3ff, 0x2, 0x6}, {0x40, 0x2, 0x5, 0x8, 0x1, 0x7}, {0x1, 0x7, 0x800, 0x3, 0x1, 0x1}, {0x9, 0xfffffffb, 0x4, 0x9, 0x9}, {0x4, 0x4, 0x0, 0x5, 0x7, 0x1}, {0x5, 0x204000, 0x9, 0x7, 0xfffffff8, 0x2}, {0x9, 0x5d8, 0x2, 0x3, 0xd9, 0xdde8}, {0x6, 0x0, 0x5, 0xfff, 0x65, 0xdafc}, {0x9, 0x6, 0xb, 0x6, 0x1, 0x101}, {0x0, 0x7, 0x7, 0x0, 0x3, 0x7}, {0x9, 0xfff, 0xf8cd, 0x2, 0xe9f3, 0xa}, {0x7, 0x5, 0x0, 0x3d2, 0x7ff, 0x9}, {0x1c, 0x9, 0x2, 0xcf09, 0x9, 0x9}, {0x6, 0x359, 0xfff, 0x0, 0x3, 0xff}, {0xc05f, 0x0, 0x8, 0x6, 0xa2, 0x8000}, {0x8, 0x1, 0x7, 0x7, 0x2, 0xf4d}, {0x3, 0x4, 0x1, 0xad32, 0x1, 0x1}, {0xf, 0x3ff, 0x7, 0x9, 0x35, 0x401}, {0x7ff, 0xfffffffa, 0x27, 0x200, 0xe, 0x80}, {0x4, 0xdce, 0x5, 0xfffff0bf, 0x492bc466, 0x3}, {0x3, 0x7, 0x6, 0xf6b5, 0x9, 0x9}, {0x6, 0x1, 0x2, 0x7, 0x326, 0x6f}, {0xf, 0x8, 0x7, 0x1, 0x5, 0x3}, {0xfffffffb, 0x7, 0x80, 0x6, 0x4}, {0x4, 0x401, 0xa8a, 0x10000, 0x5, 0x7fffffff}, {0x2, 0x2ac, 0x10000, 0x5, 0x2, 0x9}, {0x3, 0x81, 0x7ff, 0x5, 0x378, 0x4}, {0x4, 0x5, 0x800, 0x8, 0x4, 0xfff}, {0x3ff, 0x4, 0x2, 0x9, 0x0, 0x4}, {0x7fff, 0xfffffff9, 0x7, 0x4, 0x6, 0xffffff3c}, {0x1, 0x5, 0x7, 0xf, 0x6, 0x100}, {0xf6c, 0x83d7, 0x80000001, 0x9, 0xfffffffe, 0xb}, {0x1000, 0x1, 0x6, 0x10, 0x3, 0x208}, {0x9, 0x3ff, 0x6, 0xffff, 0x10, 0xd}, {0x9, 0x8001, 0xfffffffd, 0x7, 0x8001, 0x1}, {0x1ff, 0xc, 0x3, 0x1ff, 0xde99, 0x5}, {0x0, 0xffffffff, 0x7, 0x5, 0x8, 0x5}, {0x6, 0xff, 0x81, 0x5, 0x7, 0x1}, {0xf8, 0x7, 0x8, 0xc, 0x400, 0x7f}, {0x8, 0x200, 0x9, 0x5, 0x0, 0x6}, {0x6, 0x92d3, 0x6, 0x8, 0x4, 0x4409}, {0x1, 0x4, 0x81, 0x80000001, 0x8, 0x7}, {0x2, 0xffff, 0x5, 0x4, 0x6, 0x8}, {0xf8, 0x2, 0xfc5, 0xfffffffe, 0xfff, 0x101}, {0x3, 0x5, 0x10000, 0x8, 0xf77, 0x4}, {0x81, 0x4, 0x40, 0x2, 0xc, 0x80000001}, {0x9, 0x80000001, 0x8, 0x401, 0x9, 0x8}, {0x8, 0x7, 0x7, 0x1, 0x8, 0xb4e}, {0x1fe4, 0x80, 0x9, 0x1, 0x6, 0x4b}, {0x7fff, 0x8, 0x2, 0x400, 0x0, 0xf0}, {0x5, 0x6, 0x7fffffff, 0x1000, 0x4, 0x4}, {0x5, 0xe8, 0x3, 0x7fffffff, 0x401, 0x3}, {0x1a, 0x2, 0x65, 0x2, 0x6, 0xf79}, {0x80, 0x9, 0xe, 0x0, 0x1, 0x90}, {0x9, 0x5, 0x200, 0x401, 0x5, 0xc}, {0x3, 0x7f, 0x5, 0x8, 0x1, 0x5}, {0x4, 0x4, 0x8, 0x2, 0x0, 0xf}, {0x80000001, 0x8000, 0x6, 0x3, 0x6, 0x56c}, {0x1, 0x0, 0x6, 0xfffffe01, 0x1000}, {0x4, 0xff, 0x5, 0x8, 0x5, 0x4e6}, {0x2, 0x1ff, 0x0, 0x4e84, 0x9, 0x4}, {0xd9, 0x39, 0x6, 0x9e99, 0x2}, {0x6, 0xea43, 0x7ff, 0x7, 0x67, 0x5}, {0x3, 0x9, 0x8, 0x3, 0x9, 0xfff}, {0x0, 0x0, 0x9, 0x101, 0x1, 0x37c7}, {0x5, 0xfff, 0x1, 0x4, 0x5, 0xffffff5f}, {0x1, 0x5, 0xffffffff, 0x99, 0x3913, 0x3}, {0x1000, 0x4, 0xad0, 0x81, 0x9, 0x93}, {0x4, 0x62, 0x1, 0x5, 0x81, 0x9}, {0x2, 0xcc10, 0x138, 0x3, 0x0, 0x3}, {0x8001, 0x3, 0x1000, 0xe07, 0x2, 0xb}, {0x1, 0x1, 0x436, 0x5, 0x7f, 0x1826}, {0x7fff, 0x3, 0x1, 0x2, 0x6, 0x2090}, {0xd, 0x5, 0x7, 0x7, 0x9, 0x1ff}, {0x2, 0x7f, 0xff, 0x80000001, 0x1, 0x7}, {0x2, 0x9, 0x7, 0x8, 0x8, 0x1}], [{0x0, 0x1}, {0x1}, {}, {0x4}, {0x3}, {0x3}, {0x5}, {}, {0x2}, {0x4}, {0x1, 0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x5, 0x1}, {}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x3, 0xbb0515f618ee68cb}, {0x1, 0x1}, {0x884ae39993108118, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x3}, {0x4}, {0x7, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x3}, {0x1, 0x9011f6a15e0de8e6}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x4, 0x1}, {0x5}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x4}, {0x1}, {0x5}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x4}, {0x5}, {0x0, 0x1}, {0x4}, {0x3}, {0x2, 0x1}, {0x4}, {0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {0x1, 0x1}, {0x4}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {}, {0x0, 0x1}, {0x8f6659d6892b4eee, 0x1}, {0x1, 0x1}, {0x2}, {0x6}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {0x5}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0xf75b2c7d8a49fd6a}], 0x1}}, @TCA_PEDIT_KEYS_EX={0xf8, 0x5, 0x0, 0x1, [{0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0x4c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}, @TCA_PEDIT_KEYS_EX={0x114, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}]}, @TCA_PEDIT_PARMS_EX={0xe80, 0x4, {{{0xa7cf, 0x0, 0x10000000, 0x8, 0x5}, 0x7, 0x5, [{0x0, 0x1, 0x1, 0x7, 0x203a61f9, 0xffffff00}, {0x8, 0x80000001, 0xf, 0x6, 0x8, 0xd}, {0x9, 0x8, 0x25, 0xa8, 0x7fff, 0x9}, {0x6, 0xfffffffc, 0x5, 0x5, 0x5, 0x2}]}, [{0x23f, 0xfffff187, 0x6d4a5ec8, 0x9a, 0x8000, 0x5}, {0x401, 0x4, 0x58ec, 0x2, 0x3, 0xe3bc}, {0x1, 0x3, 0x64e, 0xc0b5, 0xde, 0x7fffffff}, {0x8, 0x5, 0x3, 0x4, 0x1, 0x401}, {0x6, 0x401, 0x3, 0x7, 0x4, 0x5}, {0x7b, 0x7, 0x818, 0x7, 0x4, 0xc}, {0x77, 0x58b, 0x7, 0x80000000, 0x3, 0xa}, {0x8, 0x8, 0x1, 0x5, 0x23, 0x89c5}, {0x8233, 0x1, 0x32a0cb74, 0xb1, 0x5, 0xffffffff}, {0x2, 0x7, 0x4, 0x8, 0x81, 0x5}, {0x10001, 0x0, 0x3, 0x3, 0x7, 0x8}, {0xf92, 0x0, 0x2, 0x1000, 0x73e, 0x15}, {0x4, 0x8, 0x6, 0x9, 0xea51, 0x9}, {0x9, 0x1, 0x4c36a7f5, 0x80000001, 0x0, 0x1000}, {0x9f, 0x6, 0x96, 0xffff, 0x3ff, 0x8}, {0x7, 0x4, 0x91, 0x1, 0xbc57, 0x4}, {0x6, 0x2, 0x2, 0xd, 0x5f, 0xf0000000}, {0xffffffff, 0x7, 0x5, 0x35, 0x8, 0x9}, {0x7, 0x200, 0x2, 0x1, 0xd, 0x5}, {0x8e, 0x0, 0x57800000, 0x3, 0x9, 0xbf32}, {0xffffffff, 0x7, 0x6, 0x6, 0x101, 0x4}, {0x8, 0x3ff, 0x800, 0x7, 0x4, 0x1}, {0x80000001, 0xfffff000, 0x7, 0x5, 0x3, 0x9}, {0x4, 0xf, 0x39f, 0x80000000, 0x0, 0x800}, {0x1, 0x9, 0x5, 0x8, 0x1, 0x8}, {0x2, 0x4, 0xd, 0xc7, 0x0, 0x4}, {0xfd, 0x45, 0x1ff, 0xfff, 0x4, 0x1}, {0x1, 0x1, 0x3, 0x1, 0x5, 0x591}, {0x80000000, 0x56c, 0x800, 0x9, 0x100, 0x1}, {0xffff, 0xa1, 0x9, 0x3, 0x6387fc1c, 0x8}, {0x800, 0x9, 0x7ff, 0x8001, 0x4, 0x2}, {0x1, 0xe05, 0xe, 0xf, 0x10001, 0x2}, {0xc, 0x2, 0x9, 0x7, 0x2, 0x10}, {0x7, 0x311f, 0x0, 0x4, 0x0, 0x3}, {0x6, 0x6, 0x80, 0x8, 0x67a, 0xffff7fff}, {0x4, 0x9, 0x7fff, 0x5, 0x9, 0x8}, {0xa, 0xe26, 0x5, 0xfffffff7, 0xffff8eaf, 0x7}, {0x6, 0x401, 0x10001, 0x4, 0x8, 0x2}, {0x2, 0xd, 0x0, 0x3, 0x2, 0x200}, {0x2, 0x5, 0x3, 0x1, 0x9, 0x3}, {0x5b, 0x4, 0x6, 0x0, 0x6, 0x5}, {0x6, 0x41dc, 0x269, 0x2, 0xfffff801, 0x8}, {0xbe, 0x6c, 0x7, 0x9, 0x2, 0x7ff}, {0xff, 0x6, 0x5, 0x24, 0x9, 0x200}, {0x7, 0x9, 0xc4, 0x7fff, 0x0, 0x4}, {0x6, 0x21b1, 0x10001, 0x2, 0xfffffffb, 0x1000}, {0x4, 0x1, 0x1, 0x1, 0x4}, {0x5, 0x7, 0x7, 0x10, 0x1, 0x7f}, {0x2, 0x5, 0x2, 0x4, 0x3, 0x9}, {0x400, 0x40, 0x4, 0x800, 0x3, 0xa19}, {0x20200, 0x6, 0x1, 0xf, 0x8, 0x8}, {0x85, 0x4, 0x100, 0x2, 0x7, 0x4}, {0x7, 0xa, 0x6, 0xff, 0x0, 0x4}, {0x80000001, 0x800, 0xfffffffa, 0x0, 0x4965, 0xc}, {0x9, 0x7, 0xe6, 0xa764, 0x1, 0x400}, {0x2, 0x2, 0x1, 0x5, 0x8, 0x10}, {0x2, 0x0, 0x3ff, 0x5f3, 0x5, 0x880}, {0x3e0e, 0x1, 0x4, 0x7, 0xc3e, 0x7}, {0x5, 0x4, 0x3, 0x2, 0x4, 0x7}, {0x1, 0xffffffff, 0x9, 0x6, 0x8, 0x74e}, {0x4f5, 0x4, 0x5, 0x1000, 0x7ff, 0xe7d}, {0x0, 0x85, 0x4, 0x9a, 0xfffff51e, 0x7}, {0x7, 0xb, 0x10, 0x3, 0x7002, 0x1}, {0x3, 0x5, 0x5, 0x7, 0xf, 0x8}, {0x0, 0x1, 0xc, 0x0, 0xfffffffa, 0x7}, {0x1, 0x3, 0x5, 0xfffffff8, 0x5, 0x2}, {0x80000000, 0xc924c26, 0x0, 0x8000, 0x5245, 0x8}, {0x1, 0x2, 0x7, 0xd, 0x8, 0xf}, {0x7ff, 0x8, 0x3, 0x5, 0x401, 0x4}, {0x3, 0xfffffff2, 0x8000, 0x1ff, 0x6, 0xfffff6ce}, {0x1, 0x8, 0x1, 0x9, 0xfff, 0x504}, {0x4, 0x6, 0x5, 0x5, 0x9, 0x8}, {0x1000, 0x2, 0xc, 0x8, 0x2, 0x9}, {0x317, 0x7, 0x15ea8000, 0x40, 0x4, 0x7}, {0xb972, 0xfffffffe, 0x8, 0x3, 0xfffffffa, 0xfffffff9}, {0x7fff, 0x3, 0x5, 0xfffffffb, 0x8, 0x6}, {0xdd4e, 0x1, 0x3, 0x0, 0xf, 0x3}, {0x3, 0x7, 0x8, 0xfffffffd, 0x7fffffff, 0x3}, {0x50200000, 0x7, 0x4, 0x8, 0x7, 0x4}, {0x3ff, 0x5, 0x6, 0xb4c, 0x80000001, 0x2}, {0x2, 0x6, 0x9, 0x3ff, 0x3, 0x7}, {0x0, 0x80000000, 0x8000, 0x9, 0x6, 0x7}, {0xffff, 0xfff, 0x8, 0x1, 0x4, 0x4}, {0x10, 0x6, 0x6, 0xffffffff, 0x7ff, 0x88d}, {0x10, 0xf, 0x5, 0x2, 0x6, 0x6}, {0x8, 0xcdb, 0xa74c, 0x4, 0xfffffffe, 0x45a72b4d}, {0x40, 0x4, 0xfffffffe, 0x9, 0x4, 0x6}, {0x5, 0x100, 0xfffffff7, 0x536, 0x3, 0x5}, {0x101, 0x5, 0x7, 0x8000, 0x2, 0x10}, {0x80000000, 0x3ff, 0x8, 0x4, 0x4, 0xa7b3}, {0x7, 0x7, 0x0, 0xe85, 0x30a2950a, 0x10}, {0x6, 0x41b8, 0xf3, 0x8, 0x10, 0xb30}, {0x21, 0x5, 0x6, 0x8, 0x3, 0x4}, {0x3, 0x401, 0x1, 0x2, 0x6, 0xfffffff8}, {0x8, 0x4, 0x1, 0x8000, 0x9, 0xf35}, {0x2, 0xffffff01, 0xad, 0x5, 0x1000, 0x4}, {0xaad, 0x9abd, 0x6, 0x28000, 0x7, 0x2}, {0x2, 0x8, 0x7, 0xfffffff9, 0xace9}, {0x5, 0xfff, 0x6, 0x6, 0x401, 0x80000000}, {0x2, 0x7, 0x7f, 0x2, 0x4, 0x7fff}, {0x7, 0x3ff, 0x9, 0x1000, 0xffff, 0x8}, {0x162133db, 0x3, 0x0, 0x8, 0xd6, 0x8}, {0x7f, 0x10, 0x2, 0x1, 0x4, 0x9}, {0x9, 0x4, 0x7fff, 0x4, 0x6, 0x4}, {0x7f, 0x9, 0x1, 0x24000, 0x7ff, 0x3}, {0xb13, 0x2, 0x1, 0x80000000, 0x6, 0xfffffffa}, {0x1, 0x81, 0xf, 0x8000, 0x8, 0x5}, {0xfffffff7, 0x9, 0x69, 0x9, 0x9, 0xc73cec5}, {0x7, 0xfffffff7, 0x2, 0x1, 0x0, 0xfffffffa}, {0x3, 0x80, 0x3d29, 0x3, 0x49d, 0x7}, {0x800, 0x884, 0xfff, 0x6, 0x0, 0x3ff}, {0x8, 0x3ff, 0x30, 0xf, 0x4}, {0x8, 0x5, 0x1, 0x9, 0x147c, 0x7}, {0x5, 0x0, 0x100, 0x1000, 0x8, 0x2}, {0x6, 0x7fff, 0x7f, 0x2, 0x7759, 0x9}, {0x200, 0x5, 0x3, 0x7fffffff, 0x2, 0x2}, {0x90f, 0x1, 0x3, 0x0, 0x1, 0x5}, {0x1, 0x2, 0x9, 0x882, 0x7, 0xffffff08}, {0x839, 0x3, 0x7, 0x4, 0x905, 0x7}, {0x5, 0xc14, 0x7, 0x1b, 0x1, 0xd5}, {0x1, 0x81, 0x5, 0x0, 0xf, 0x6}, {0x5e641a3d, 0x1, 0xffffff80, 0x0, 0xe3, 0x4}, {0x7ff, 0xc, 0x6, 0x10000, 0x4, 0xdfa}, {0x5, 0x5, 0x81, 0xb93c, 0x7, 0x1bd}, {0x6, 0xc07, 0x9, 0x3, 0x5, 0xdb}, {0x3, 0x7f, 0x7ff, 0x3ff, 0x7f, 0x80}, {0x4, 0x7fff, 0x7, 0x1ae3, 0x7}, {0x4, 0x4, 0x9, 0x5, 0x1ff, 0x6}], [{0x3, 0x1}, {0x1}, {0x2ee1a8ddce74a71c, 0x1}, {0x2, 0x1}, {0x3}, {0x2, 0xacc6e4923308b686}, {}, {0x0, 0x1}, {0xea4b1da2fdff14d9}, {0x5, 0x1}, {0x3, 0x1}, {0x5}, {0x1, 0x1}, {0x4}, {0x1, 0x1}, {0x5, 0x1}, {0x7}, {0x2}, {0x2}, {0x5}, {0x0, 0x1}, {0x4}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x3}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x4}, {}, {0x5}, {0x3}, {0x1, 0x1}, {}, {0x4}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {0x3, 0x3bec25729348b47f}, {0x5}, {0x0, 0x1}, {0x4}, {0x3}, {0xf}, {0x1}, {0x2}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1}, {0x3}, {0x1, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x1}, {0x7, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x2}, {0x3, 0x1}, {0x1}, {}, {0x5}, {0x3}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {0x5}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x4}, {0x3}, {0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x2}, {0x0, 0x1}, {0x2}, {0x2, 0x1}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {0x1}, {0x1, 0x1}, {0xa, 0x1}, {0x4, 0x9bdfcf80d7593deb}, {0x3, 0x3}, {}, {0x2, 0x1}, {0x4}, {}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x6, 0x1}, {0x2}, {0x5}, {0x3}, {0x1, 0x1}, {0x3, 0x179f88d0f84de253}, {0x4}, {0x2}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x5}, {0x5, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x2, 0x1}]}}]}, {0x99, 0x6, "6474c4777a8d92a23ec0b5709c4bbaa51afa6efeb98d84e85e56874e867c011e0ddbbc538741cac4526c0f2c2c8ffaab4d4b5339f3476d1747fcea6838b34c80f433ed3b9daa688e4fc635c5c4fac317186c234cff1d01ec270f5444b42056dcf315eb179c10d429f4b00812d4921ce28fa5b3e6cd964ee6e1d73aea0765f7732be53d3c739abd6c321c969892e1b9548510db0fe2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x4174}}, 0x0) 94.236794ms ago: executing program 2 (id=3621): sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0xa00, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x40}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth1_to_batadv\x00'}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xfffe}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008040) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r1, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x8, 0xd}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x88, r1, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xd, 0x2f}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000}, 0x20044081) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400), 0x1e10c2, 0x0) ioctl$PPPIOCSMRRU(r4, 0x4004743b, &(0x7f0000000440)=0x7) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$inet6(r5, &(0x7f00000018c0)={&(0x7f0000000480)={0xa, 0x4e20, 0xc, @loopback, 0x2}, 0x1c, &(0x7f00000017c0)=[{&(0x7f00000004c0)="8de3e5e79ac3c0ea1ffbd46500169524a77e7b9e4840eca28288e7ed7966515ac46c964c342da18f34b215af8ab53d3c76bd838eaa803788a20414077c7ad77581a63ad8000d6a873440045f6818333198a12a40352d20623215cdf7c593b830fd0fb47db8391dc31947a00ea342fb733e4849981a7ccb18ddf47bbd7ef1ce712240353dfe27dad2cd5579b0293db604cd038ad8777a619d0fba77a48614a33d7708482ca9fb46a15cd81b8b6761d50901992ff4040ac93ed637b5343d299a9d6bf43483406112a09eec98", 0xcb}, {&(0x7f00000005c0)="01cb0fa0b819bd58541c7d42f6508c739a7e627221ff0dd1cfd3e4bfb87a8d716854bf029875aae6f5e928f6845ce3da24bdf9608f84389f9519d69cfcd28ae10a28a57a16167ce818208c68f895f8a063dcf463d6ac76b6122277e36eb0fc5e79938b68d2ad4a684971aaea2b74d81dec3a63a2bf4e946b39140e4b58a4456e4df6a69d0c12a975517badecf840b30ac63f10b90b283a8f9c247a115914fd2c75e9b5a6f75dded51266a30264d1c7339634a9b6d8d58b3ef7c91a3e7eefc2d533fabe8a48411da6d73b91ae407ca4f8f80711ca287186460a3302c8a602d52b87fcd3912b8f772c4c78a64c89f3638a81fc5dfeae6d30a83d78d3c927f56f628af3b89760f9398874d56c9faf01f96897d3f3eba194c42c2c54057f77b24e75d0ed79e0d1f41ae383aae7a2479f509b15fa3c9cc40414b3868362b17a82471fda6006e2a119b2bdfd2f6d7aa67d87ad9f3805aef041c1c9dcdfd96c5bebc11e13eb95457b48ce9c3c24f426aed89d5bce979ebe726088c1356977bb3aae39fd22ec461704580955fa289e8c69cd13013adada8b84a7d56a5f70778251f857482e6ebe8b58546927311eac62ffd27b4f863a564cf32b8a80644618b8b1ee87056f0cf22d458356c3c699cd2f45fb699a4ab5a0f962494f882d0c7c960da895d82991a93b0a5e9ea7a93d49d0c06b968d5b850b880ee4c894f065c0475a2d365ffdc044a697c9e9fcc11a6c4f87a5e73dd3ad33edd55f21135a422ae54fd93faf6d64d67ec3190f26c93b0f7d23fdc7f1b347f6c20c7af06185df83032daf0025a516946b91c90eddf15dbb17e5b8abe1bd45553b65e27ac45d9c1b054383e08978afd9bec7ad9a15e65a22cfbde75e5b9d765eb745881a9e6f20e4ada03c4905af8e9936341c477daa5e60fc181d885dba1c4dd59c3cf89e6fd0c59a5ef3af1e2adf55f0a2008fed8becd970184a99bb2422d19438cf0a7b4aa9011b12fc31f4e311a228fa3e94d4f10f31442c890b743fd3afb27bdaee90d8d4e526d38b6ab691f052ac0b0cbea004daf874d7c1b25c18394bb56445ed3acc234fa2e4be970c77112b02e5edb9dafb936824182260cc93a6771c7c2207e0c6dc59eb3f4a7a1b3792377c2ef305f84fecf06a62f4d138b77e2effef4a601a5acc04b57ff8284fed87d9215184a73cda2b2b0cf690398222021543d8c2724c55c526e20d551b36d576ddb5349e6aef99c93bcb073cec785c6c9a7b528cd9c66aecd999820b5d2f4917572fab606c9d4857c22b4cf0d85f00ec2b5e3a49cfcd000d0fdb7e5f3d62bdc1feeeee4ef9f6cedc4b6b18e6a14f572f8d453263ca6bcd6458345bd968aca7ba684ddd066b479f3ecfb0f3b057008c81d0148882ffca3d69ca6bf265872e6086eab30a8530e9b876604ef4e78da4916b7cd753e1771e117b5d4a6d2f09e1cad6c5a309cd6d1f5978854f74600d1e46cd5e1e2e706d1d21144c1a13a027cfd986d4bca0d3e5cd7a930b9ee7a8e4c5d0d88c9ac67e7b3205cb82fe13f7ccfac961ba395d8df10957a39cc421168584d4f80fe7051a1997a19a72863a2df0374267a9ac0cc2bf3366c215ae87f492efe30963b31555b2c431c4af8ba446ec59dc33ea5d9462b3a3027969fc9749fd11773fd963aa9bc1f17ccc5af0db4d167d759457bc284926c12abb25f4932a41fba812fc63d169125792e9e18feff96f1afe30ed55f2cc79b1c5ef34161cba3505230671aed6f8a4da6784ec70ec3db5078e25b80531d000a9289d65e2897bc2414aae5b86ef02249fba7e11bf42a306b784e65c1fd8e2ce030aeaeb759406eb2e049c6bfd721448b7c95b94984ba555f12fe9f6585cc2445f2d525878a41f1467a288384f978e63bea25fbadf2a515f75b6238497a6851e7f0dfd405abfc653e43414171f7f4bc8bd2ca7468183b922fc9500fbf4d5bff5142b0abf8ba99af983deb98426ce13a38510bfae54f80210ca811a8692a61a4e01b1222e117f767ea4d80b32d9a7f47c0d70062fe9f5bf98ea9851602be851d79b1ca8d9518114cf397f8ad8307f9a957c86519d3249af61177185c830023b59ac21cdb5e8cbdb71cc8799ab40e2cc92e39e9f89b6227aea7e1c7a361d0e4295ed312ab03961c59cb6f4b984f34e019d00b63778e442c7de8002499d4ad4e8f8f27c05ea29a5e4f35de7112c8e83a24e9b68631f474efdb393e96ce94903de5be8f6990b8848a3a5e172fffe7fdb5c8c81c9f8be4bde2b4d75ed8d3b42d5c7771b3403aeaec6b7f5f1e033fad7781ea330fb6a48ae8ac9a71dbbf9b820ecec6a2136b1f6bbe190d768caf31f296443dd17287724d22bd06ad20ab27624f9b4e01d191b5e95fcdcc8e0a20db44c10224c53cd342042094c7048059345906799fdd4b10ccb51ff7a436de3a738664601e979368f2f137e714b12a12937e4f23ecefc3f9cff2527dc9e4420d438dd86b4008b70d058592fb8354d0071f63fa2956f945d089b20ff1f8b62bdf5dee0b8cf3312ba8c1b8b877842124b4b76ac3c74c2c8bcdb2c0c0f83c28793ffac6eb3e7408bdc5d94d92215fef18ed5671e5afc54148b9c7a3b028402d7995b1abf41a8b8c36de209f8c5feab34062b052f4fdb05b41f2fda48c7a16c982349132b45f967329a45c2f152cd6f7ad73d52d2ba4721ae1ae7dfddb575f7abba27f62b3535a3337cca4a426036810752c04c7ceba8a20a6a81efc8f140380c5a42020db35c72827dd3fa88e75c527e0427a55bd12fa25a510d8ee0085c30a45d1cb2c4db2f57297bf78e4e0b2177d96dde9b0e263c151583f51bd8ae78f529cb254f05f795c4dfbbeef0f82837a7205fa767dff8d5b6b1ad9fe2d8cfad5c0d59334b9e331fa3df9b8df190e0980a23b31e21c632906b50ba93dd9ca056b1c29d237bf547d2f1491a5a0e76bc709b340c5c30afa90d946158914660b593e2858a391549ebede0f3b314529cb5ec031f51cf782801d696eaee1d1c6bbd62b49fee8a1e5330eddcbcec98141d0fa5226fe1c193e8133eece337846f68d5452b568b04cbd57508e38a11392e2eda6808e118a370fa09901e99cd885392e50618f407504028d8772a6c0229cccef33fb5269a9685d7d52b78a7862c82c140dd4d33b1feff1e7a755f9ec49abb18a9af7aec9e153d9fb146508edb72b26fdfe38a42cd8c07ff5103533e8ca8c847a9184affdc414a49bad8b3ddfa1a83edd4f1184a2e14f37802452983e5cde1eb2440f562a19ec3b23831f354ec67def10b2305edcaec8567c71c09a1e0e9a75c0dec6953ebd4076e3416ce31e51a8036535ab5bb08453ab663a9980432b1eb7518eae1e2f78179b8df5a813efb4f3452bc414ec1152fb031f835e8507609a8a3e3007400ea65375bc8f3b6989819a523a1d22cb66f8e2f47d054c9c841cc5e917ed436b92cf22225d2ca1d6e268b7530b3dc3fa23c3263b1a3c2538b7cd6801891913b1e1f0c808f04dd2c4a9bdd71936f60d7d96fadc1cad13d5d12ec481dd48fb057257004d1b9669c247a85a477718da05b3513944172d55579cd5925b413a661eadc031a08f3a7f40dbebf7c70b987e125a541de4ffda52d5b30b1f5a36a49266f1c71d470c5a7a59f7b9173adea4855e5527f53639ee2905b6f4b7ab5ea1383fd72cc66faaba3dd318d97fbc255d4031634783bdaff03f8f58a1fd512a86dfa7a15637025328c1a5b45a4148aba2375f83b154320add8823a1dcbece014eac66401e036f6e2c16386a3e354a549f995c21123665a7e2db93cd0f2a68f61943c0639129f3dd95464b52259882d13256059c1f3413c0d13b3bdd08379282b1db6fc9172b55b658839ac41a998423e7b45302aa93e5fb17de09a18e2affa813991d0b99b0296d509bd2095975cb1f319ba06e2293bda46c2492635b3b4d351d9968273d8838f4a03f3ef4755acb89a1abe56f22d4342e06ad26010e78b4a64f93d07bf3cc6b625281dd4e15d33b7e348975a211a71f2ea3b074364154c8c579ac2418368bdf215e4331e36e2feea95cd9dc5caffd4654caef71bbd365f426b6d1f02f276c38494d8b7d5efa5a2c2e7998645a92956e82777b59d401386ffaefb19d799dad8f659deccd62784aadeec38f0b42fed659dbdffcb05668d8ab0b33562e8aee62bd58f95fcea21ea72dce2bc4af80f7f4d56a183ec69e7d444fe46fe074251436dfa1b6894f1b820b8cbe46c6b7811c122e6549b7189224b523b253eef461b8fe19928a43379323288d39c5466483f47cb4a6729d3866261f5ed2fc7507432d54c61ac11e0b84cc129e5872e1938bea63c35320c567f6b1dd6c5492b55dd76ffadd246be971cfcee591fbac5d017776dfe9187628530c12a7b0746949fbcca25ec2b58865f81c9098cbd1af7f5f75518a930c76a5e00785c971290f6b87ac9e507c70d40bcb5da39a719c94d92c544d0c6c02ac234e887e5480d0c0e09a2b77d9a1c8fcc17302eb4c1704703e06c57ed3d77d8e9393b22a13994f17036638195e811419a30599c614fe085b74b9761eac02bd9878a8709f7fd1b4add375f5b80a480e2bbde320dfb5eff21bbf6425894631ad29da3b2bda500cdb6abd16d5847b705a8b821146d77f09b35bb01016982e960c6e1e0046bd9c1ea68d85b9f5ade85a59ecbdff5dfea8f08139021126874125a7460ceb03cc6ea54023d2aabab7302a1bd6cb99828045f15408f5c7f87b45e5e4f2759b0fface9da584c968ab27a04d39b45831bc81ddb6e21019a82e606ff32eea2ad95357ddcde97b07969d0d8a7f433bb59a6552415322c4f4caaa80c27e832dfa1cd9c66840c12075452010b86ebe948961545ba9c2c56a4682abd286f845897107b467b40180b0a4563d414e0535c0b08701e218bcf618f36006255fb34c038b5ee8ffca3ba4da4b93d0e246f5503905d7a2cacbae4b5d023e089b268ccf898591f4593fb0cfa3b93901c308abcf99e74ca366883ec05a660015bbde5750473bd87a1f827a4d098a3b0e7955779f5c3cc02eedeb6a4a6b2d16b1ea83527288b35c6ca24e9d5061ad37255d56f2dc3095187d0f491cfc16eb53c6dcd5a563c2ef6dbe37b3f855430d5780f684d870383a08ce28780852fbf94d5d27dc46bfd6ecbe57cbd0b0b357275cd583267ac44ce5afa575f63630cb1e9380f0d0eda008a3bc5c32cea5f5e822dc2a956df6ea6cafb9dbbf5853ed1e31eccbf009d0e4d6f785840c0c2e2c0f5603250a954c80bb819d984d2395a1000029a7c7e44a8bdbb0b80cdb5331cc51a0affe6691d08757ded902836156d07e069fe0ed4e599173778e45f74bac6f2bf73da5d23cff8990fc987d307044310dba7eb7d5aa862a632da976c70fc755c3c09e19743cf261035cd5ae8f1d8ac5b1b30059aa8c131007f4ad6f9ecfa0182dd112cebc32817e207bd43c228240b91fd5d2b07b9f042cb66bb0f2dd1c1487a93dc0e8425d2020e5e426352d416754055323ffaf9c91469e4870c65a471e85e8a5eefb457236337dc64abd00cc61f9c5785de426a8cdc0c137f96c041b466a1375d94ac11afcb47b92364c923412aeeba02b57708b52e95ff7afb4aa4d0de8b676dd146c3d33853d18a40761c2fe4e35b77473850dc426ab84d4e5761b0d10b8a69d27324727864176161a5e2e75f6c11c4b20b0d514fe8164a8af6ac4228745c326b0a94c0cee1ae4dbe9efba1106a5aea3003cda7278fa98b0f03131f0f4d553e7bff5eae046eaea3f9b8f83f5e04923d6c3792788f5ec6235c568cab265115583e2a", 0x1000}, {&(0x7f00000015c0)="c15dfa7683b3d0b0d2a5bd9adf538f20b03c2603d7be351e46258e7a5c9176e9e14031f277b1bec7eedb9437cb699ad776cce5e45c7a79e60ee40619d55272bed835e676eb1c48189a2ff57d97e97e4cee6ca22ecfb9e2cd396fc9dbb3b2984fe65e9a508b521075d55773ca620767ebf93d9506df09a9955bc432111ec48fb8b1358b5d82ca29ff9d1f3d3f4f0a2ed0a61eb607fe822765565929cf79a0fd2010c5b3a4adbac4bd82f5c379df81ff72029fdd258e8f4145e29ad46e08ea7cf819e3b30580", 0xc5}, {&(0x7f00000016c0)="0c9328f26ba7a20e3e5a068d7e61de6206cb8d3a", 0x14}, {&(0x7f0000001700)="b3dfa8830fe23c6e30104ff0bbfa44066cc07a2e70aeeb1504780e9123d5549bed0c4c564b936cf9b307bb1466130fa314fc394259eb3e7ac26f457f1bbdae4c29307ac3fa0adb0145f9ed100bd504f41c1cbbd79e6373261a03f8bc2c7b9a90aa0c4326ced63526d5023eeaa1c19683723e220ce062e51dcbf5ab5be141c0016153acaf6556f3c473cb979bd094a3f464b6a26dc8", 0x95}], 0x5, &(0x7f0000001840)=[@rthdrdstopts={{0x48, 0x29, 0x37, {0xff, 0x5, '\x00', [@pad1, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @ra={0x5, 0x2, 0x100}, @pad1, @padn={0x1, 0x2, [0x0, 0x0]}, @pad1, @jumbo={0xc2, 0x4, 0x8000}]}}}], 0x48}, 0x20044024) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001940), r0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001a00)={'syztnl1\x00', &(0x7f0000001980)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x5, 0x9, 0x40, @private0, @empty, 0x8000, 0x7, 0x101, 0x396}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000001b40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a40)={0x88, r6, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4008004}, 0x8800) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000001c40)={&(0x7f0000001b80), 0xc, &(0x7f0000001c00)={&(0x7f0000001bc0)={0x30, r1, 0x20, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7, 0x12}}}}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f0000001d40)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x14, r1, 0x203, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20040819}, 0x90) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000001d80)={'wpan1\x00'}) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000001e80)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001e40)={&(0x7f0000001e00)={0x2c, r1, 0x8, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x10}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4010}, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000001fc0)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f80)={&(0x7f0000001f00)={0x60, r1, 0x4, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x3, 0x11}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x5f}, @NL80211_ATTR_SSID={0x11, 0x34, @random="cf10db73ebb8ce84fac72dbe88"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x14}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x1a}]}, 0x60}, 0x1, 0x0, 0x0, 0x20008000}, 0x40010) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r5, 0x4048587b, &(0x7f0000004780)={{r0, &(0x7f0000002000)='{}&\x00', 0x8000, &(0x7f0000002040)={@align=0x5, {0x400, 0x0, 0xfffffffd, 0x8000000000000000}}, 0x1, &(0x7f0000002080), &(0x7f00000020c0)=0x7}, 0x8, &(0x7f0000004680)=[{0x0, 0x7ee, &(0x7f0000002100)=']\x00', &(0x7f0000002140)="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", 0x1000, 0x20}, {0x3, 0x9, &(0x7f0000003140)='\x00', &(0x7f0000003180)="fbc49d8f9a1902ade70d2e37c3fd6433de15567a88d2674ecfb51d8a19f8b6fd249d34df804b258fff8e11c81fa48183fcd8a3d7d7aded43dc05718c97d9068d8789969a525f3d4fffced59dc8f123f0dcd48b08b5a151c57ee66389c4a1d2d9dc3dbfd2293a6d1f2f16c131194f541d4e546e0ff95060dac7a98b0b0d1c74b207c0", 0x82, 0x10}, {0x1, 0x0, &(0x7f0000003240)='ethtool\x00', &(0x7f0000003280)="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", 0x1000, 0x2}, {0x3, 0x63, &(0x7f0000004280)='\xff\xff\xff\xff\xff\xff', &(0x7f00000042c0)="e0232b26537907343fbf50ea38536da9f1e64583cd9d3edd7f98eeccca2acf129d7ba76d", 0x24, 0x2}, {0x1, 0x80000000, &(0x7f0000004300)='\x00', &(0x7f0000004340)="e1a79a3298ca9f55f33b9406e8390ba91d04c35aa1c78402ed2cd79333cb3474ab25aa7228b07c4290de00697f2c5fce393d42cb06b473be200dbdc6b51d4bd7fbdc8a450ba91763ad600be300b5eadc2ace5fed3eff914d7237e05e4d5612fef3d1a1883a77689e0b9c442e61dc2b31bb27c85958c53b32a68cf15957966826aead1549f07c04dd3b640e7d8520fa934f773bad1e94cc56ebed1862b98a356d85a19d2b07bf6d95b4760660517c233742498543551e640b63", 0xb9, 0x2}, {0x3, 0x1, &(0x7f0000004400)='!\x00', &(0x7f0000004440)="b08668408ef8c5bc5a2896838763c16ec3bb3cf0d24a736bc43d3c0e54adf4403d6f5b9f4c0d5d111bf1eaf7d8fc3178dd85a999fc8dfc4051d2cd09dec682aafe7d85e3634e0a407990b93592410ef1c520f5d2f4df7479b18d8054950b4a672b5e29b776b7b4fdcd6f59420ad51352b06745d5e9de8c19f185f82fc510ea40da7c27d20cf8100b5f9ff59a6855c94001050e79eab3582c00", 0x99, 0x20}, {0x2, 0x40, &(0x7f0000004500)='nr0\x00', &(0x7f0000004540)="dab0a588b8163927e46b5902", 0xc}, {0x2, 0x2a59, &(0x7f0000004580)='+[\x00', &(0x7f00000045c0)="da01d11ff6246e563b28d28a6dd235774545d23c66bbdb26f8ea827cd3fa03cf17b510f9977029987e38acb1abd8391e7ecbbbdb43c8ac595ea40242617988d041da4016ef10fb4fd0ddba0fc1d4a660ad225485ac93514193197a6fdef2efdeea954cefd1f88427713a1a44b1ced4744de00564eb1b4ff6ae2c0aecd62306b2c4a2b3384294e73aaa1bd8c4dc8f03fe756ae3ac3fa480a01dcf3d78", 0x9c, 0x32}]}) ioctl$XFS_IOC_FD_TO_HANDLE(r5, 0xc038586a, &(0x7f0000004900)={r3, &(0x7f0000004800)='*\x1a\x00', 0x208002, &(0x7f0000004840)={@align=0x100000000, {0x1, 0x4, 0x81, 0x9}}, 0x5, &(0x7f0000004880)={@_ha_fsid}, &(0x7f00000048c0)=0xf4}) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000004940)=@base={0xc, 0x40, 0x8, 0xbbe9, 0x2400, r9, 0x9, '\x00', r7, r10, 0x1, 0x4, 0x3}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000004c80)=@bpf_tracing={0x1a, 0x15, &(0x7f00000049c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x80000001}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [@call={0x85, 0x0, 0x0, 0x3a}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r9}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3aa91a98dc5335ee}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000004a80)='GPL\x00', 0x8, 0x8b, &(0x7f0000004ac0)=""/139, 0x41100, 0x68, '\x00', r7, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000004b80)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000004bc0)={0x4, 0xe, 0xeb84, 0x3}, 0x10, 0x6790, r9, 0x3, &(0x7f0000004c00)=[r10], &(0x7f0000004c40)=[{0x2, 0x2, 0x7}, {0x2, 0x5, 0x7}, {0x3, 0x3, 0x8, 0x9}], 0x10, 0x4}, 0x94) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000004e40)={&(0x7f0000004d40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000004e00)={&(0x7f0000004d80)={0x70, r1, 0x0, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x2, 0x72}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x80000001}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xc}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_emit_ethernet(0xfc, &(0x7f0000004e80)={@empty, @empty, @val={@val={0x88a8, 0x1}, {0x8100, 0x1, 0x0, 0x4}}, {@x25={0x805, {0x3, 0xfd, 0xb, "ab400b9d0c06097d52ac92848fa29e88425256cfc790420634977c04c29116bc814917424a26426823c447e8e2b98ac0e9393431776d3c57bd00a6070c4ba6770d76cc7ff2d922e36b949c5f174e4ff8a0809c3c8eb26bf78f6a82fe0f8e95780a6bd125340159d4870027d19660250560adabc86911291fc849632c43a3bbafe8394fb29dd85af06131030eeaa71088f81e55d6840ae2e94a9ee96080560f20ecbc99e409d33f983be9b862b554ed8fcba448cbe7786968312be750100f4ee35fbfa4dec0d04b785d236c742f6a839b9da57bfa3f4c81d6fed45a78bb4828297a6677"}}}}, 0x0) sendmsg$NL80211_CMD_SET_BSS(r10, &(0x7f0000005040)={&(0x7f0000004f80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000005000)={&(0x7f0000004fc0)={0x34, r1, 0x100, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x312b}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x6}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x5}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008810}, 0x40) sendmsg$L2TP_CMD_NOOP(r11, &(0x7f0000005140)={&(0x7f0000005080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000005100)={&(0x7f00000050c0)={0x30, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1ff}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth1_to_team\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x800) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000005300)={&(0x7f0000005180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000052c0)={&(0x7f0000005200)={0xc0, 0x0, 0x811, 0x70bd27, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x61}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x8f, 0xa9, @random="1c457c10ef5d861622be1ccbe3c1351984c83c7368664d4cc1e51ca1ebd7718c7ad8966e134001e810bcc3cc2f971c7f5dabe06b990b9346d623e3843b9bf57431934f13e4af538d252c415dd67c29e1fff96ff8e3ad36000bb10151deace02857ee113a729883fd59e6aa703889311b29f31999531eff328212f9e8beddd0086d5548e3d95c2adfda981b"}]}, 0xc0}, 0x1, 0x0, 0x0, 0x80}, 0x20000044) 0s ago: executing program 0 (id=3622): r0 = socket$inet6_udp(0xa, 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) write$rfkill(r1, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b80)=@mangle={'mangle\x00', 0x2, 0x6, 0x6a8, 0x478, 0x1b0, 0x0, 0x1b0, 0x478, 0x5d8, 0x5d8, 0x5d8, 0x5d8, 0x5d8, 0x6, 0x0, {[{{@uncond, 0x0, 0x188, 0x1b0, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, @private1, [], [0xc5a2f505a334aa82, 0xffffffff]}}, @common=@inet=@multiport={{0x50}, {0x0, 0xc, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd]}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev, [], [], 'bridge0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x42}}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x23, 0xff, 0x6}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0xff, 0x0, 0x0, 0xffffff00], '\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xe8, 0x48000000}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x800, 0xdd2, 0x401, 0x0, 0xb, 0x3a5f2568, 0xcc, 0x2]}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@remote, 0x0, 0x37}}}, {{@uncond, 0x0, 0x138, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xa}}, @common=@unspec=@rateest={{0x68}, {'team_slave_1\x00', 'virt_wifi0\x00', 0x30, 0x3, 0x5, 0x1ff, 0x400, 0x2, {0xf666}, {0x4000000000000}}}]}, @HL={0x28, 'HL\x00', 0x0, {0xfe}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x708) kernel console output (not intermixed with test programs): p_rxtimer: 0xffff888032e3dc00: rx timeout, send abort [ 266.014996][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807b7b3400: abort rx timeout. Force session deactivation [ 266.158748][T13082] ip6gre2: entered allmulticast mode [ 266.188398][T13082] tipc: Cannot configure node identity twice [ 266.224290][T13082] netlink: 'syz.4.2018': attribute type 83 has an invalid length. [ 266.513738][ C1] vcan0: j1939_tp_rxtimer: 0xffff888032e3dc00: abort rx timeout. Force session deactivation [ 266.650747][T13107] __nla_validate_parse: 6 callbacks suppressed [ 266.650767][T13107] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2028'. [ 266.717710][T13107] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2028'. [ 266.807195][T13113] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2029'. [ 267.232585][T13123] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2033'. [ 267.592218][T13138] netlink: 'syz.0.2040': attribute type 3 has an invalid length. [ 267.666381][T13142] lo: entered promiscuous mode [ 267.694905][T13142] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 267.960267][T13152] netlink: 'syz.0.2042': attribute type 2 has an invalid length. [ 267.996664][T13152] netlink: 'syz.0.2042': attribute type 11 has an invalid length. [ 268.070342][T13165] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2042'. [ 268.104241][T13152] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2042'. [ 268.130312][ T50] Bluetooth: hci4: command 0x0405 tx timeout [ 268.149060][T13152] bridge0: port 3(veth0) entered blocking state [ 268.174435][T13152] bridge0: port 3(veth0) entered disabled state [ 268.181362][T13152] veth0: entered allmulticast mode [ 268.188741][T13152] veth0: entered promiscuous mode [ 268.195042][T13152] bridge0: port 3(veth0) entered blocking state [ 268.201512][T13152] bridge0: port 3(veth0) entered forwarding state [ 268.243164][T13171] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2046'. [ 268.426093][T13177] netlink: 'syz.3.2047': attribute type 1 has an invalid length. [ 268.455365][T13181] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 268.536897][T13177] bond6: entered promiscuous mode [ 268.542640][T13177] 8021q: adding VLAN 0 to HW filter on device bond6 [ 268.595446][T13177] macvtap1: entered allmulticast mode [ 268.680585][T13177] macvtap2: entered allmulticast mode [ 268.704593][T13194] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2053'. [ 268.787494][T13189] ipvlan0: Caught tx_queue_len zero misconfig [ 268.883814][T13183] bond6: (slave bridge4): making interface the new active one [ 268.921502][T13183] bridge4: entered promiscuous mode [ 268.952281][T13183] bond6: (slave bridge4): Enslaving as an active interface with an up link [ 268.993138][T13200] tipc: Enabled bearer , priority 0 [ 269.147270][T13205] sctp: [Deprecated]: syz.4.2056 (pid 13205) Use of int in max_burst socket option. [ 269.147270][T13205] Use struct sctp_assoc_value instead [ 269.361547][T13213] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2059'. [ 269.452974][T13215] syzkaller1: entered promiscuous mode [ 269.467310][T13215] syzkaller1: entered allmulticast mode [ 269.918768][T13228] x_tables: unsorted underflow at hook 3 [ 269.951591][T13228] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2065'. [ 270.119776][ T987] tipc: Node number set to 2035774871 [ 270.162606][T13240] openvswitch: netlink: IP tunnel attribute has 5385 unknown bytes. [ 272.859759][T13273] "syz.1.2079" (13273) uses obsolete ecb(arc4) skcipher [ 272.990774][T13275] netlink: 'syz.4.2080': attribute type 6 has an invalid length. [ 272.995840][T13277] __nla_validate_parse: 1 callbacks suppressed [ 272.995901][T13277] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2081'. [ 273.045535][T13277] netlink: 61 bytes leftover after parsing attributes in process `syz.3.2081'. [ 273.104914][T13277] netlink: 61 bytes leftover after parsing attributes in process `syz.3.2081'. [ 273.466785][T13305] netlink: 'syz.3.2090': attribute type 1 has an invalid length. [ 273.513835][T13305] netlink: 'syz.3.2090': attribute type 1 has an invalid length. [ 274.145700][T13332] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2098'. [ 274.162809][T13333] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2098'. [ 274.252486][T13337] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2096'. [ 274.591063][T13347] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2100'. [ 274.629547][T13347] openvswitch: netlink: Flow key attr not present in new flow. [ 274.674245][T13348] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2100'. [ 274.726245][T13355] netlink: 'syz.0.2101': attribute type 2 has an invalid length. [ 274.862764][T13360] netlink: 'syz.3.2103': attribute type 4 has an invalid length. [ 274.904030][T13360] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2103'. [ 274.993011][T13360] .`: renamed from bond0 (while UP) [ 275.372075][T13380] syzkaller0: entered promiscuous mode [ 275.385668][T13380] syzkaller0: entered allmulticast mode [ 275.552290][T13384] wg0 speed is unknown, defaulting to 1000 [ 275.720526][T13394] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2111'. [ 275.914351][T13384] syzkaller0 speed is unknown, defaulting to 1000 [ 275.926000][T13397] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 276.686827][T13433] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 277.682384][T13462] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 277.794424][T13462] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 278.207209][T13486] __nla_validate_parse: 6 callbacks suppressed [ 278.207228][T13486] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2132'. [ 278.695866][T13505] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 279.166753][T13528] netlink: 'syz.2.2140': attribute type 23 has an invalid length. [ 279.557658][T13541] netlink: 'syz.1.2142': attribute type 9 has an invalid length. [ 279.794132][T13546] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2143'. [ 280.006850][T13555] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2149'. [ 280.146227][T13561] ip6gre2: entered allmulticast mode [ 280.167532][ T9958] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 280.204853][T13560] syz.2.2148 (13560) used greatest stack depth: 16160 bytes left [ 280.421939][T13573] netlink: 'syz.2.2153': attribute type 3 has an invalid length. [ 280.777736][T13588] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2158'. [ 280.809976][T13588] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2158'. [ 280.813631][T13592] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2161'. [ 280.831104][T13594] netlink: 'syz.2.2159': attribute type 1 has an invalid length. [ 280.958736][T13596] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2159'. [ 281.008870][T13594] 8021q: adding VLAN 0 to HW filter on device bond10 [ 281.051119][T13607] netlink: 'syz.3.2164': attribute type 1 has an invalid length. [ 281.266620][T13611] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2166'. [ 281.299023][T13611] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2166'. [ 281.344571][T13618] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2166'. [ 281.377496][T13615] netlink: 'syz.2.2168': attribute type 83 has an invalid length. [ 281.963279][T13632] ip_tables: iptables: counters copy to user failed while replacing table [ 283.099319][T13664] macvlan0: entered promiscuous mode [ 283.443549][T13680] __nla_validate_parse: 9 callbacks suppressed [ 283.443567][T13680] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2188'. [ 283.485508][T13684] netlink: 'syz.1.2189': attribute type 5 has an invalid length. [ 283.546358][T13684] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2189'. [ 283.674813][T13693] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2192'. [ 283.869272][T13696] syzkaller1: entered promiscuous mode [ 283.906861][T13696] syzkaller1: entered allmulticast mode [ 284.130952][T13714] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2198'. [ 284.143715][T13714] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2198'. [ 284.155537][T13714] netlink: 'syz.0.2198': attribute type 5 has an invalid length. [ 284.165533][T13714] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2198'. [ 284.220670][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 284.877623][T13726] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2203'. [ 285.037448][T13737] netlink: 'syz.3.2205': attribute type 6 has an invalid length. [ 285.153811][T13738] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2202'. [ 285.428668][T13744] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2206'. [ 287.371155][T13751] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2209'. [ 287.747445][T13762] xt_hashlimit: size too large, truncated to 1048576 [ 287.785551][T13760] openvswitch: netlink: IPv6 tunnel dst address is zero [ 288.028444][T13785] netlink: 'syz.3.2219': attribute type 1 has an invalid length. [ 288.487005][T13810] netlink: 'syz.3.2223': attribute type 1 has an invalid length. [ 288.503287][T13811] __nla_validate_parse: 9 callbacks suppressed [ 288.503322][T13811] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2223'. [ 288.527627][T13810] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 288.644214][T13818] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2225'. [ 288.676660][T13818] netlink: 277 bytes leftover after parsing attributes in process `syz.3.2225'. [ 288.702806][T13819] netlink: 277 bytes leftover after parsing attributes in process `syz.3.2225'. [ 288.811576][T13823] xfrm0: Caught tx_queue_len zero misconfig [ 288.835536][T13823] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2227'. [ 288.858335][T13828] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2228'. [ 288.919061][T13830] openvswitch: netlink: Duplicate key (type 0). [ 290.753528][T13767] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 291.338588][T13857] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2235'. [ 291.583267][T13865] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2237'. [ 292.013351][T13879] team0: Device gtp0 is of different type [ 292.294543][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 292.962074][T13916] netlink: 'syz.1.2251': attribute type 15 has an invalid length. [ 292.984163][T13916] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2251'. [ 293.245779][T13922] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2253'. [ 294.035058][T13958] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 294.042404][T13958] IPv6: NLM_F_CREATE should be set when creating new route [ 294.049731][T13958] IPv6: NLM_F_CREATE should be set when creating new route [ 294.074383][T13968] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2262'. [ 294.104753][T13968] netlink: 'syz.0.2262': attribute type 11 has an invalid length. [ 294.127725][T13971] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2261'. [ 294.184053][T13968] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2262'. [ 294.357846][T13968] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2262'. [ 294.398570][T13968] netlink: 'syz.0.2262': attribute type 11 has an invalid length. [ 294.442070][T13968] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2262'. [ 294.779128][T13996] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2269'. [ 294.829177][T13996] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2269'. [ 294.865852][T13996] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2269'. [ 294.904241][T14002] xt_hashlimit: size too large, truncated to 1048576 [ 295.027912][T14006] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.2273'. [ 295.693629][T14035] netlink: 'syz.2.2279': attribute type 7 has an invalid length. [ 295.743996][T14035] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2279'. [ 295.951897][T14047] netlink: Conntrack attr has 12 unknown bytes [ 295.997914][T14047] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 296.173978][T14056] GUP no longer grows the stack in syz.0.2284 (14056): 200000003000-20000000a000 (200000001000) [ 296.212633][T14056] CPU: 0 UID: 0 PID: 14056 Comm: syz.0.2284 Not tainted syzkaller #0 PREEMPT(full) [ 296.212663][T14056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 296.212685][T14056] Call Trace: [ 296.212694][T14056] [ 296.212703][T14056] dump_stack_lvl+0xe8/0x150 [ 296.212740][T14056] __get_user_pages+0x238c/0x2720 [ 296.212777][T14056] ? __gup_longterm_locked+0xc3b/0x15c0 [ 296.212828][T14056] __gup_longterm_locked+0xd52/0x15c0 [ 296.212849][T14056] ? trace_irq_disable+0x3b/0x140 [ 296.212888][T14056] ? gup_fast_fallback+0x1c48/0x20e0 [ 296.212913][T14056] gup_fast_fallback+0x1d8c/0x20e0 [ 296.212965][T14056] ? __pfx_gup_fast_fallback+0x10/0x10 [ 296.212991][T14056] ? is_valid_gup_args+0x11f/0x200 [ 296.213014][T14056] ? get_user_pages_fast+0x4d/0xb0 [ 296.213037][T14056] __iov_iter_get_pages_alloc+0x378/0xa40 [ 296.213075][T14056] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 296.213121][T14056] iov_iter_get_pages2+0x5e/0xa0 [ 296.213155][T14056] __se_sys_vmsplice+0x7b5/0x1660 [ 296.213204][T14056] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 296.213239][T14056] ? __pfx_futex_wake+0x10/0x10 [ 296.213259][T14056] ? irqentry_exit+0x218/0x8f0 [ 296.213286][T14056] ? irqentry_exit+0x218/0x8f0 [ 296.213371][T14056] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.213394][T14056] do_syscall_64+0x174/0x580 [ 296.213420][T14056] ? clear_bhb_loop+0x70/0xc0 [ 296.213445][T14056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.213465][T14056] RIP: 0033:0x7f777319e0d9 [ 296.213495][T14056] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 296.213512][T14056] RSP: 002b:00007f7774012028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 296.213535][T14056] RAX: ffffffffffffffda RBX: 00007f7773425fa0 RCX: 00007f777319e0d9 [ 296.213550][T14056] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000005 [ 296.213563][T14056] RBP: 00007f7773235024 R08: 0000000000000000 R09: 0000000000000000 [ 296.213576][T14056] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 296.213611][T14056] R13: 00007f7773426038 R14: 00007f7773425fa0 R15: 00007fffedc20718 [ 296.213645][T14056] [ 297.502009][T14126] netlink: 'syz.4.2305': attribute type 32 has an invalid length. [ 298.017709][T14152] sctp: [Deprecated]: syz.3.2312 (pid 14152) Use of struct sctp_assoc_value in delayed_ack socket option. [ 298.017709][T14152] Use struct sctp_sack_info instead [ 298.036931][T14152] netlink: 'syz.3.2312': attribute type 7 has an invalid length. [ 298.046794][T14152] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 298.204745][T14158] bond7: entered promiscuous mode [ 299.440982][T14219] __nla_validate_parse: 11 callbacks suppressed [ 299.441004][T14219] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2335'. [ 299.456350][T14219] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 299.463579][T14219] IPv6: NLM_F_CREATE should be set when creating new route [ 299.754973][T14243] netlink: 'syz.0.2339': attribute type 4 has an invalid length. [ 299.864930][T14243] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2339'. [ 300.122671][T14261] netlink: 'syz.0.2342': attribute type 1 has an invalid length. [ 300.222261][T14261] bond9: entered promiscuous mode [ 300.231923][T14261] 8021q: adding VLAN 0 to HW filter on device bond9 [ 300.325955][T14261] bond9: (slave bridge2): making interface the new active one [ 300.340462][T14261] bridge2: entered promiscuous mode [ 300.347328][T14261] bond9: (slave bridge2): Enslaving as an active interface with an up link [ 300.357391][T14268] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2345'. [ 300.438226][T14273] veth7: entered allmulticast mode [ 300.477255][T14281] netlink: 180 bytes leftover after parsing attributes in process `syz.1.2349'. [ 300.591870][T14283] netlink: 3080 bytes leftover after parsing attributes in process `syz.4.2350'. [ 300.660286][T14283] netlink: 199828 bytes leftover after parsing attributes in process `syz.4.2350'. [ 300.935990][T14302] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2358'. [ 301.827678][T14333] netlink: 'syz.0.2371': attribute type 1 has an invalid length. [ 302.006408][T14333] bond10: (slave gretap1): making interface the new active one [ 302.015232][T14333] bond10: (slave gretap1): Enslaving as an active interface with an up link [ 302.100263][T14346] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2375'. [ 302.143597][T14348] netlink: 'syz.4.2376': attribute type 29 has an invalid length. [ 302.151492][T14348] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2376'. [ 302.191411][T14348] netlink: 'syz.4.2376': attribute type 29 has an invalid length. [ 302.199362][T14348] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2376'. [ 302.472520][T14362] tunl0: Caught tx_queue_len zero misconfig [ 302.843335][T14380] netlink: 'syz.4.2389': attribute type 13 has an invalid length. [ 302.941538][T14390] netlink: 'syz.0.2393': attribute type 8 has an invalid length. [ 303.443178][T14432] xt_CT: You must specify a L4 protocol and not use inversions on it [ 303.463142][T14419] syzkaller1: entered promiscuous mode [ 303.487958][T14419] syzkaller1: entered allmulticast mode [ 303.508772][T14433] syzkaller0: entered promiscuous mode [ 303.514409][T14433] syzkaller0: entered allmulticast mode [ 303.806738][T14453] syzkaller0: left promiscuous mode [ 303.812167][T14453] syzkaller0: left allmulticast mode [ 304.445976][T14438] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 304.694616][T14484] __nla_validate_parse: 5 callbacks suppressed [ 304.694634][T14484] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2413'. [ 304.713725][T14488] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2413'. [ 304.769061][T14493] netlink: 'syz.4.2414': attribute type 15 has an invalid length. [ 304.787959][T14493] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2414'. [ 304.817196][T14493] tipc: Enabling of bearer rejected, failed to enable media [ 305.007124][T14504] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2419'. [ 305.356702][T14518] netlink: 'syz.2.2423': attribute type 1 has an invalid length. [ 305.366948][T14518] netlink: 'syz.2.2423': attribute type 1 has an invalid length. [ 305.374762][T14518] netlink: 'syz.2.2423': attribute type 2 has an invalid length. [ 305.382528][T14518] netlink: 'syz.2.2423': attribute type 2 has an invalid length. [ 305.390294][T14518] netlink: 'syz.2.2423': attribute type 2 has an invalid length. [ 305.398048][T14518] netlink: 'syz.2.2423': attribute type 2 has an invalid length. [ 305.401029][T14523] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2425'. [ 305.446391][T14518] netlink: 'syz.2.2423': attribute type 1 has an invalid length. [ 305.807220][T14545] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2433'. [ 305.841025][T14546] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2433'. [ 305.929097][T14547] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2432'. [ 305.991097][T14550] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2434'. [ 306.002878][T14550] sctp: [Deprecated]: syz.1.2434 (pid 14550) Use of int in maxseg socket option. [ 306.002878][T14550] Use struct sctp_assoc_value instead [ 306.093165][T14558] netlink: 'syz.2.2436': attribute type 1 has an invalid length. [ 306.128454][T14558] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2436'. [ 306.176741][T14557] netlink: 'syz.2.2436': attribute type 1 has an invalid length. [ 306.244306][T14567] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 306.512031][T14579] bridge5: entered promiscuous mode [ 306.523254][T14579] bond9: (slave bridge5): Enslaving as an active interface with an up link [ 306.713395][T14592] veth15: entered allmulticast mode [ 306.772672][T14597] dvmrp1: entered allmulticast mode [ 307.162738][T14609] lo: Caught tx_queue_len zero misconfig [ 307.195223][T14620] wg2: Caught tx_queue_len zero misconfig [ 307.660824][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 308.296426][T14664] lo: entered allmulticast mode [ 308.314774][T14664] tunl0: entered allmulticast mode [ 308.334808][T14664] gre0: entered allmulticast mode [ 308.367342][T14664] gretap0: entered allmulticast mode [ 308.390591][T14664] erspan0: left promiscuous mode [ 308.400155][T14664] ip_vti0: entered allmulticast mode [ 308.408520][T14664] ip6_vti0: entered allmulticast mode [ 308.417839][T14664] sit0: entered allmulticast mode [ 308.451292][T14664] ip6tnl0: entered allmulticast mode [ 308.461525][T14672] x_tables: duplicate underflow at hook 2 [ 308.471336][T14664] ip6gre0: entered allmulticast mode [ 308.481229][T14664] syz_tun: entered allmulticast mode [ 308.653194][T14681] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 308.724776][T14676] syzkaller0: entered promiscuous mode [ 308.730418][T14676] syzkaller0: entered allmulticast mode [ 310.907342][T14715] __nla_validate_parse: 4 callbacks suppressed [ 310.907362][T14715] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2478'. [ 311.044560][T14726] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2480'. [ 311.065485][ T30] audit: type=1804 audit(1786918096.282:8): pid=14723 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2482" name="/newroot/505/cgroup.controllers" dev="tmpfs" ino=2582 res=1 errno=0 [ 311.104292][T14729] validate_nla: 1 callbacks suppressed [ 311.104310][T14729] netlink: 'syz.4.2483': attribute type 13 has an invalid length. [ 311.110914][ T30] audit: type=1800 audit(1786918096.282:9): pid=14723 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2482" name="cgroup.controllers" dev="tmpfs" ino=2582 res=0 errno=0 [ 311.235993][T14729] macsec0: entered allmulticast mode [ 311.341534][T14748] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2487'. [ 311.363476][T14731] siw: device registration error -23 [ 311.375752][T14748] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2487'. [ 311.626055][T14758] netlink: 'syz.3.2491': attribute type 1 has an invalid length. [ 311.667429][T14758] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2491'. [ 311.732371][T14762] sctp: [Deprecated]: syz.4.2493 (pid 14762) Use of struct sctp_assoc_value in delayed_ack socket option. [ 311.732371][T14762] Use struct sctp_sack_info instead [ 312.314539][T14789] netlink: 'syz.1.2500': attribute type 1 has an invalid length. [ 312.509700][T14789] 8021q: adding VLAN 0 to HW filter on device bond5 [ 312.579036][T14796] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2501'. [ 312.644410][T14814] bond8: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 312.660669][T14817] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2505'. [ 312.692682][T14814] bond8 (unregistering): Released all slaves [ 312.730816][T14821] openvswitch: netlink: Message has 8 unknown bytes. [ 312.737605][T14821] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 312.777040][T14820] syzkaller0: entered promiscuous mode [ 312.782845][T14820] syzkaller0: entered allmulticast mode [ 313.002678][T14830] netlink: 180 bytes leftover after parsing attributes in process `syz.1.2508'. [ 313.244228][T14839] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2509'. [ 314.004807][T14885] netlink: 'syz.3.2519': attribute type 1 has an invalid length. [ 314.029949][T14885] netlink: 'syz.3.2519': attribute type 3 has an invalid length. [ 314.064687][T14885] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2519'. [ 314.241775][T14887] sit0: Caught tx_queue_len zero misconfig [ 314.288744][T14897] netlink: 'syz.1.2522': attribute type 9 has an invalid length. [ 314.516788][T14899] bond11 (unregistering): Released all slaves [ 314.533936][T14908] openvswitch: netlink: Duplicate or invalid key (type 0). [ 314.546960][T14897] netlink: 'syz.1.2522': attribute type 9 has an invalid length. [ 314.646701][T14911] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 315.268522][T14943] netlink: 'syz.3.2534': attribute type 14 has an invalid length. [ 315.326200][T14939] vlan2: left allmulticast mode [ 315.335132][T14939] geneve0: left allmulticast mode [ 315.375646][T14945] openvswitch: netlink: Missing key (keys=40, expected=100) [ 315.380400][T14939] vlan2: left promiscuous mode [ 315.399735][T14939] geneve0: left promiscuous mode [ 315.405375][T14939] bridge0: port 3(vlan2) entered disabled state [ 315.516804][T14939] bridge_slave_1: left allmulticast mode [ 315.536220][T14939] bridge_slave_1: left promiscuous mode [ 315.563120][T14939] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.602359][T14939] bridge_slave_0: left allmulticast mode [ 315.615038][T14939] bridge_slave_0: left promiscuous mode [ 315.624202][T14939] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.911878][T14974] __nla_validate_parse: 10 callbacks suppressed [ 315.911897][T14974] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2540'. [ 315.992420][T14974] Bluetooth: MGMT ver 1.23 [ 316.042808][T14978] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2543'. [ 316.727296][T15022] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 317.038816][T15041] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2559'. [ 317.405771][T15051] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2562'. [ 317.441340][T15056] netlink: 'syz.4.2563': attribute type 1 has an invalid length. [ 317.443722][T15051] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2562'. [ 317.657689][T15076] netlink: 'syz.4.2567': attribute type 10 has an invalid length. [ 317.692849][T15063] 8021q: adding VLAN 0 to HW filter on device bond8 [ 317.703008][T15063] bond0: (slave bond8): Enslaving as a backup interface with a down link [ 317.712314][T15074] gre0: Caught tx_queue_len zero misconfig [ 317.736253][ T5273] veth1_vlan: left promiscuous mode [ 317.744835][T15076] netlink: 'syz.4.2567': attribute type 10 has an invalid length. [ 317.823777][T15076] netlink: 'syz.4.2567': attribute type 10 has an invalid length. [ 317.846711][T15078] netdevsim netdevsim1: Direct firmware load for ÿ failed with error -2 [ 317.857184][T15076] netlink: 'syz.4.2567': attribute type 10 has an invalid length. [ 317.865965][T15078] netdevsim netdevsim1: Falling back to sysfs fallback for: ÿ [ 317.873905][T15076] netlink: 'syz.4.2567': attribute type 10 has an invalid length. [ 317.910084][T15076] netlink: 'syz.4.2567': attribute type 10 has an invalid length. [ 317.925432][T15076] netlink: 'syz.4.2567': attribute type 10 has an invalid length. [ 317.943032][T15076] netlink: 'syz.4.2567': attribute type 10 has an invalid length. [ 317.959664][T15076] netlink: 'syz.4.2567': attribute type 10 has an invalid length. [ 318.596033][T15115] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2574'. [ 318.623011][T15115] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2574'. [ 318.911825][T15118] bond0: Caught tx_queue_len zero misconfig [ 319.313568][T15145] bond8: (slave veth0_to_bond): Releasing active interface [ 319.322657][T15145] veth0_to_bond: left promiscuous mode [ 319.328525][T15145] veth0_to_bond: left allmulticast mode [ 319.381170][T15145] veth0_to_bond: entered promiscuous mode [ 319.439104][T15145] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 319.621688][T15159] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 319.629055][T15159] IPv6: NLM_F_CREATE should be set when creating new route [ 319.817305][T15168] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2593'. [ 319.839189][T15169] netlink: 666 bytes leftover after parsing attributes in process `syz.1.2591'. [ 320.275029][T15193] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2598'. [ 320.511741][T15205] lo: entered allmulticast mode [ 320.517400][T15205] lo: left allmulticast mode [ 321.161198][T15228] __nla_validate_parse: 2 callbacks suppressed [ 321.161218][T15228] netlink: 332 bytes leftover after parsing attributes in process `syz.1.2610'. [ 321.292054][T15234] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 321.550024][T15245] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2615'. [ 321.593957][T15245] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2615'. [ 321.888662][T15267] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 322.679145][T15258] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 323.149468][T15333] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2639'. [ 323.208888][T15333] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2639'. [ 323.241308][T15333] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2639'. [ 323.282120][T15338] validate_nla: 58 callbacks suppressed [ 323.282291][T15338] netlink: 'syz.3.2641': attribute type 2 has an invalid length. [ 323.394794][T15340] netlink: 'syz.2.2644': attribute type 1 has an invalid length. [ 323.402917][T15345] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 323.424337][T15348] SET target dimension over the limit! [ 323.430933][T15345] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 323.518346][T15340] 8021q: adding VLAN 0 to HW filter on device bond11 [ 324.010504][T15380] netlink: 'syz.2.2656': attribute type 1 has an invalid length. [ 324.083284][T15380] 8021q: adding VLAN 0 to HW filter on device bond12 [ 324.088569][T15388] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2657'. [ 324.234985][T15394] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2658'. [ 324.301601][T15396] syzkaller1: entered promiscuous mode [ 324.313670][T15396] syzkaller1: entered allmulticast mode [ 324.380742][T15400] x_tables: unsorted entry at hook 4 [ 324.564958][T15409] vlan0: entered promiscuous mode [ 324.570559][T15409] geneve1: entered promiscuous mode [ 324.583374][T15409] vlan0: entered allmulticast mode [ 324.589276][T15409] geneve1: entered allmulticast mode [ 324.640467][T15414] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2665'. [ 324.686462][T15415] sch_tbf: burst 32855 is lower than device lo mtu (65499) ! [ 324.764414][T15425] 8021q: VLANs not supported on sit0 [ 324.775834][T15423] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2667'. [ 324.870439][T15411] xt_CT: You must specify a L4 protocol and not use inversions on it [ 325.102423][T15437] lo: entered promiscuous mode [ 325.107729][T15439] netlink: 'syz.2.2673': attribute type 25 has an invalid length. [ 325.118357][T15437] tunl0: entered promiscuous mode [ 325.215393][T15437] gre0: entered promiscuous mode [ 325.252164][T15437] gretap0: entered promiscuous mode [ 325.463224][T15437] ip_vti0: entered promiscuous mode [ 325.518581][T15435] syz_tun: entered promiscuous mode [ 325.790837][T15461] netlink: 'syz.4.2679': attribute type 9 has an invalid length. [ 325.845487][T15463] xt_CONNSECMARK: invalid mode: 0 [ 325.858989][T15464] netlink: 'syz.0.2680': attribute type 1 has an invalid length. [ 325.896137][T15462] syzkaller0: entered promiscuous mode [ 325.906671][T15462] syzkaller0: entered allmulticast mode [ 326.164530][T15477] __nla_validate_parse: 7 callbacks suppressed [ 326.164551][T15477] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2683'. [ 326.235178][T15479] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2685'. [ 326.400728][T15483] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 326.407764][T15483] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 327.530981][T15506] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2692'. [ 327.540357][T15506] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2692'. [ 327.607049][T15510] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2692'. [ 328.311099][T15483] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 328.347269][T15493] syzkaller0: entered promiscuous mode [ 328.362265][T15493] syzkaller0: entered allmulticast mode [ 328.405455][T15514] netlink: 'syz.1.2693': attribute type 5 has an invalid length. [ 328.414511][T15514] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2693'. [ 328.521767][T15519] tipc: Enabling of bearer rejected, already enabled [ 328.706526][T15533] 8021q: VLANs not supported on lo [ 328.744359][T15537] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2701'. [ 329.238927][T15563] xt_hashlimit: size too large, truncated to 1048576 [ 329.306259][T15565] team0: Device gtp0 is of different type [ 329.484476][T15574] netlink: 'syz.0.2710': attribute type 2 has an invalid length. [ 329.499087][T15574] sctp: [Deprecated]: syz.0.2710 (pid 15574) Use of int in maxseg socket option. [ 329.499087][T15574] Use struct sctp_assoc_value instead [ 329.522838][T15574] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2710'. [ 329.807794][T15590] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2712'. [ 329.925972][T15593] macvtap1: entered promiscuous mode [ 329.931648][T15593] macvtap1: entered allmulticast mode [ 329.937060][T15593] veth1_vlan: entered allmulticast mode [ 330.053455][T15599] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2716'. [ 330.138605][T15603] syzkaller1: entered promiscuous mode [ 330.144162][T15603] syzkaller1: entered allmulticast mode [ 331.135895][T15648] C: renamed from lo [ 333.708889][T15648] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 334.048989][T15675] __nla_validate_parse: 3 callbacks suppressed [ 334.049010][T15675] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2728'. [ 334.064676][T15672] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 334.161936][T15681] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2732'. [ 334.252753][T15691] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2735'. [ 334.360528][ T9955] nci: nci_ntf_packet: unknown ntf opcode 0x12e [ 334.800670][ T30] audit: type=1804 audit(1786918120.072:10): pid=15710 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2738" name="/newroot/561/cgroup.controllers" dev="tmpfs" ino=2867 res=1 errno=0 [ 334.823914][ T30] audit: type=1800 audit(1786918120.072:11): pid=15710 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2738" name="cgroup.controllers" dev="tmpfs" ino=2867 res=0 errno=0 [ 335.081991][T15690] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 335.323418][T15725] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2742'. [ 335.338327][T15719] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 335.407158][T15730] bond6: entered promiscuous mode [ 335.434633][T15730] bond6: entered allmulticast mode [ 335.473451][T15730] 8021q: adding VLAN 0 to HW filter on device bond6 [ 335.552190][T15727] vlan5: entered promiscuous mode [ 335.557496][T15727] geneve1: entered promiscuous mode [ 335.563217][T15727] vlan5: entered allmulticast mode [ 335.568771][T15727] geneve1: entered allmulticast mode [ 335.583538][T15730] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2744'. [ 335.668420][T15730] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2744'. [ 335.732487][T15745] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2749'. [ 335.826721][T15753] tipc: Failed to remove unknown binding: 66,1,1/2035774871:2830114592/2830114594 [ 335.885991][T15758] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 335.903774][T15758] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 335.913548][T15758] gretap2: entered promiscuous mode [ 335.918868][T15758] gretap2: entered allmulticast mode [ 336.117798][T15769] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2755'. [ 336.127431][T15770] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2755'. [ 336.297052][T15781] xt_l2tp: missing protocol rule (udp|l2tpip) [ 336.335502][T15781] 8021q: VLANs not supported on gre0 [ 336.482278][T15790] netlink: 'syz.0.2761': attribute type 17 has an invalid length. [ 336.490140][T15790] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2761'. [ 337.151269][T15826] netlink: 'syz.2.2773': attribute type 23 has an invalid length. [ 337.463783][T15841] sctp: [Deprecated]: syz.0.2776 (pid 15841) Use of int in maxseg socket option. [ 337.463783][T15841] Use struct sctp_assoc_value instead [ 337.830970][T15855] bridge6: entered promiscuous mode [ 337.847859][T15855] bridge6: entered allmulticast mode [ 337.951628][T15856] bridge7: entered promiscuous mode [ 337.961835][T15856] bridge7: entered allmulticast mode [ 338.484046][T15889] veth0_to_bond: default FDB implementation only supports local addresses [ 338.698889][T15894] bond11: (slave C): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 338.728834][T15894] bond11: (slave C): Enslaving as an active interface with an up link [ 338.751459][T15894] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 339.278427][T15919] syzkaller0: left promiscuous mode [ 339.284987][T15919] syzkaller0: left allmulticast mode [ 339.391733][T15929] __nla_validate_parse: 11 callbacks suppressed [ 339.391750][T15929] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2793'. [ 339.425690][T15897] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 339.699838][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 340.004956][T15947] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2803'. [ 340.029403][T15967] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2803'. [ 340.076722][T15973] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2808'. [ 340.120471][T15969] bond9: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 340.142169][T15973] netlink: 'syz.2.2808': attribute type 3 has an invalid length. [ 340.150294][T15973] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2808'. [ 340.160817][T15973] netlink: 'syz.2.2808': attribute type 3 has an invalid length. [ 340.168387][T15969] bond9 (unregistering): Released all slaves [ 340.177748][T15973] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2808'. [ 340.193473][T15973] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2808'. [ 340.275422][T15981] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2808'. [ 340.352152][T15983] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2810'. [ 340.368309][T15984] netlink: 'syz.1.2811': attribute type 1 has an invalid length. [ 340.497021][T15988] netlink: 124 bytes leftover after parsing attributes in process `syz.4.2812'. [ 340.527889][T15984] 8021q: adding VLAN 0 to HW filter on device bond8 [ 340.537105][T15984] bond7: (slave bond8): making interface the new active one [ 340.568109][T15984] bond7: (slave bond8): Enslaving as an active interface with an up link [ 340.616660][T15991] bond7: (slave gretap2): Enslaving as a backup interface with an up link [ 340.640008][T15994] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 340.718906][T16001] netlink: 'syz.0.2815': attribute type 11 has an invalid length. [ 340.757989][T16001] 0: reclassify loop, rule prio 0, protocol 03 [ 340.919782][T16008] sctp: [Deprecated]: syz.1.2817 (pid 16008) Use of struct sctp_assoc_value in delayed_ack socket option. [ 340.919782][T16008] Use struct sctp_sack_info instead [ 341.189571][T16027] netlink: 'syz.0.2821': attribute type 4 has an invalid length. [ 341.293035][T16037] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 341.982602][T16052] bond0: entered promiscuous mode [ 341.998008][T16052] bond8: entered promiscuous mode [ 342.024581][T16052] batadv0: entered promiscuous mode [ 342.039464][T16052] hsr2: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 342.051722][T16052] 8021q: adding VLAN 0 to HW filter on device hsr2 [ 342.082500][T16052] bond0: left promiscuous mode [ 342.087319][T16052] bond8: left promiscuous mode [ 342.094011][T16052] batadv0: left promiscuous mode [ 342.258963][T16081] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 342.514194][T16089] Cannot find set identified by id 65534 to match [ 342.966500][T16122] openvswitch: netlink: Missing key (keys=40, expected=100) [ 343.459318][T16151] bond0: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 343.856349][T16172] netlink: 'syz.0.2862': attribute type 1 has an invalid length. [ 343.884243][T16178] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 343.918820][T16179] IPVS: set_ctl: invalid protocol: 19 10.1.1.0:20002 [ 343.964996][T16181] netlink: 'syz.2.2866': attribute type 1 has an invalid length. [ 344.054469][T16181] bond13: entered promiscuous mode [ 344.061210][T16181] 8021q: adding VLAN 0 to HW filter on device bond13 [ 344.074487][T16184] sctp: [Deprecated]: syz.3.2867 (pid 16184) Use of int in maxseg socket option. [ 344.074487][T16184] Use struct sctp_assoc_value instead [ 344.214819][T16181] 8021q: adding VLAN 0 to HW filter on device bond13 [ 344.227444][T16193] xt_recent: Unsupported userspace flags (000000b1) [ 344.242529][T16181] bond13: (slave wireguard0): The slave device specified does not support setting the MAC address [ 344.253171][T16181] bond13: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 344.278851][T16181] bond13: (slave wireguard0): making interface the new active one [ 344.286733][T16181] wireguard0: entered promiscuous mode [ 344.293884][T16181] bond13: (slave wireguard0): Enslaving as an active interface with an up link [ 344.558160][T16204] netlink: 'syz.3.2874': attribute type 11 has an invalid length. [ 344.608777][T16204] __nla_validate_parse: 18 callbacks suppressed [ 344.608795][T16204] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2874'. [ 344.827119][T16223] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2877'. [ 344.839842][T16226] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2879'. [ 344.882991][T16228] sock: sock_timestamping_bind_phc: sock not bind to device [ 344.954662][T16228] netlink: 'syz.1.2880': attribute type 8 has an invalid length. [ 345.017486][T16232] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2881'. [ 345.062465][T16234] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 345.243021][T16248] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2885'. [ 345.289230][T16248] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2885'. [ 345.320641][T16248] netlink: 'syz.2.2885': attribute type 4 has an invalid length. [ 345.443582][T16256] netlink: 'syz.2.2887': attribute type 1 has an invalid length. [ 345.530718][T16256] bond14: entered promiscuous mode [ 345.536499][T16256] 8021q: adding VLAN 0 to HW filter on device bond14 [ 345.576767][T16263] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2886'. [ 345.633616][T16256] bond14: (slave bridge7): making interface the new active one [ 345.641304][T16256] bridge7: entered promiscuous mode [ 345.648431][T16256] bond14: (slave bridge7): Enslaving as an active interface with an up link [ 345.954432][T16274] wg0: entered allmulticast mode [ 346.013630][T16278] netlink: 'syz.3.2893': attribute type 1 has an invalid length. [ 346.022605][T16278] netlink: 228 bytes leftover after parsing attributes in process `syz.3.2893'. [ 346.044089][T16279] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2892'. [ 346.296659][T16287] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2895'. [ 346.705115][ T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 346.715183][ T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 346.724450][ T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 346.734669][ T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 346.742633][ T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 347.084463][T16298] wg0 speed is unknown, defaulting to 1000 [ 347.091627][T16298] syzkaller0 speed is unknown, defaulting to 1000 [ 347.335433][T16298] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.342689][T16298] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.359511][T16298] bridge_slave_0: entered allmulticast mode [ 347.367509][T16298] bridge_slave_0: entered promiscuous mode [ 347.376737][T16298] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.383854][T16298] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.391049][T16298] bridge_slave_1: entered allmulticast mode [ 347.398428][T16298] bridge_slave_1: entered promiscuous mode [ 347.429320][T16298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 347.441461][T16298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 347.491708][T16298] team0: Port device team_slave_0 added [ 347.500096][T16298] team0: Port device team_slave_1 added [ 347.526241][T16298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 347.533236][T16298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 347.559111][T16298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 347.583170][T16298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 347.590204][T16298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 347.616109][T16298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 347.661689][T16298] hsr_slave_0: entered promiscuous mode [ 347.668268][T16298] hsr_slave_1: entered promiscuous mode [ 347.674754][T16298] debugfs: 'hsr0' already exists in 'hsr' [ 347.693715][T16298] Cannot create hsr debugfs directory [ 347.845704][T16298] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 347.856161][T16298] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.050165][T16298] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 348.060464][T16298] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.151260][T16298] bond0: (slave netdevsim1): Releasing backup interface [ 348.160770][T16298] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 348.171050][T16298] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.344071][T16251] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 348.474839][T16318] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 348.531981][T16318] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 348.751489][T16298] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 348.761917][T16298] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.780112][ T50] Bluetooth: hci5: command tx timeout [ 348.808879][T16335] netlink: 'syz.1.2905': attribute type 1 has an invalid length. [ 348.888603][T16335] 8021q: adding VLAN 0 to HW filter on device bond9 [ 348.917000][T16339] bond9: (slave geneve3): making interface the new active one [ 348.927151][T16339] bond9: (slave geneve3): Enslaving as an active interface with an up link [ 349.392631][T16298] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 349.425000][T16298] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 349.439406][T16298] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 349.449954][T16298] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 349.480151][T16298] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 349.491507][T16298] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 349.499724][T16298] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 349.510266][T16298] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 349.518444][T16365] sit0: Caught tx_queue_len zero misconfig [ 349.661282][T16298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 349.705042][T16298] 8021q: adding VLAN 0 to HW filter on device team0 [ 349.718099][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.725323][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 349.745780][ T9950] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.752973][ T9950] bridge0: port 2(bridge_slave_1) entered forwarding state [ 349.767794][T16381] __nla_validate_parse: 7 callbacks suppressed [ 349.767813][T16381] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2919'. [ 350.205221][T16401] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2926'. [ 350.257441][T16404] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2925'. [ 350.266810][T16404] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2925'. [ 350.400252][T16408] netlink: 'syz.4.2927': attribute type 1 has an invalid length. [ 350.420979][T16408] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2927'. [ 350.451430][T16413] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2928'. [ 350.488452][T16409] tipc: Enabling of bearer rejected, failed to enable media [ 350.592520][T16413] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2928'. [ 350.715148][T16419] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2929'. [ 350.766765][T16298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 350.843260][T16426] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2931'. [ 350.861443][ T50] Bluetooth: hci5: command tx timeout [ 350.968482][T16438] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 350.979196][T16298] veth0_vlan: entered promiscuous mode [ 350.992795][T16298] veth1_vlan: entered promiscuous mode [ 351.108164][T16298] veth0_macvtap: entered promiscuous mode [ 351.172945][T16298] veth1_macvtap: entered promiscuous mode [ 351.233079][T16448] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2936'. [ 351.296756][T16298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 351.328083][T16298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 351.534617][ T9958] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.564191][ T9958] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.641703][ T9958] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.685020][ T9955] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.707696][ T9955] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.789865][ T9958] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.817378][ T9958] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.921679][ T9950] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.837305][ T5621] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 352.857915][ T5621] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 352.866389][ T5621] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 352.896624][ T5621] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 352.909737][ T5621] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 352.940634][ T5621] Bluetooth: hci5: command tx timeout [ 353.201959][T16551] netlink: 'syz.1.2959': attribute type 29 has an invalid length. [ 353.226525][T16551] netlink: 'syz.1.2959': attribute type 29 has an invalid length. [ 353.367592][T16558] netlink: 'syz.3.2962': attribute type 27 has an invalid length. [ 353.461241][ T9950] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.473177][ T9950] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.582342][T16532] wg0 speed is unknown, defaulting to 1000 [ 353.589378][T16532] syzkaller0 speed is unknown, defaulting to 1000 [ 353.671700][T16568] sctp: [Deprecated]: syz.3.2964 (pid 16568) Use of int in maxseg socket option. [ 353.671700][T16568] Use struct sctp_assoc_value instead [ 353.756167][ T9950] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.767650][ T9950] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.771424][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 353.945296][T16545] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 353.955149][T16572] netlink: 'syz.3.2964': attribute type 1 has an invalid length. [ 353.980428][T16572] netlink: 'syz.3.2964': attribute type 2 has an invalid length. [ 354.058945][T16532] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.068338][T16532] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.075624][T16532] bridge_slave_0: entered allmulticast mode [ 354.101780][T16532] bridge_slave_0: entered promiscuous mode [ 354.111092][T16532] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.128561][T16532] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.145233][T16532] bridge_slave_1: entered allmulticast mode [ 354.189661][T16532] bridge_slave_1: entered promiscuous mode [ 354.265320][ T9950] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.330832][ T9950] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.417796][T16581] xt_l2tp: wrong L2TP version: 0 [ 354.477991][T16532] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 354.538079][T16532] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 354.673611][T16608] netlink: 'syz.0.2975': attribute type 2 has an invalid length. [ 354.681427][T16608] netlink: 'syz.0.2975': attribute type 1 has an invalid length. [ 354.703964][ T9950] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.714306][ T9950] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.778067][T16532] team0: Port device team_slave_0 added [ 354.787101][T16532] team0: Port device team_slave_1 added [ 354.828101][T16532] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 354.855965][T16532] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 354.881936][T16532] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 354.911569][T16532] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 354.918584][T16532] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 354.951622][ T50] Bluetooth: hci1: command tx timeout [ 354.985750][T16532] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 355.020163][ T50] Bluetooth: hci5: command tx timeout [ 355.031814][T16615] __nla_validate_parse: 8 callbacks suppressed [ 355.031834][T16615] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2977'. [ 355.227595][T16532] hsr_slave_0: entered promiscuous mode [ 355.234400][T16532] hsr_slave_1: entered promiscuous mode [ 355.242902][T16532] debugfs: 'hsr0' already exists in 'hsr' [ 355.248713][T16532] Cannot create hsr debugfs directory [ 355.431960][ T9950] pim6reg: left allmulticast mode [ 355.439031][ T9950] pim6reg527: left allmulticast mode [ 355.445636][T16634] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2978'. [ 355.455942][ T9950] dvmrp1: left allmulticast mode [ 355.652619][ T9950] bond2 (unregistering): (slave ip6gre1): Releasing backup interface [ 355.788192][ T9950] bond7 (unregistering): (slave gretap1): Releasing backup interface [ 355.907164][ T9950] bond9 (unregistering): (slave bridge5): Releasing backup interface [ 355.924972][ T9950] bond1 (unregistering): Released all slaves [ 355.940174][ T9950] bond2 (unregistering): Released all slaves [ 355.979128][ T9950] bond0 (unregistering): Released all slaves [ 355.995312][ T9950] bond3 (unregistering): Released all slaves [ 356.011072][ T9950] bond4 (unregistering): Released all slaves [ 356.029382][ T9950] bond5 (unregistering): Released all slaves [ 356.045757][ T9950] bond6 (unregistering): Released all slaves [ 356.078923][ T9950] bond7 (unregistering): (slave bond8): Releasing backup interface [ 356.088663][ T9950] bond7 (unregistering): Released all slaves [ 356.107261][ T9950] bond8 (unregistering): Released all slaves [ 356.125005][ T9950] bond9 (unregistering): Released all slaves [ 356.162494][T16634] 0·: renamed from hsr0 (while UP) [ 356.170794][T16634] 0·: entered allmulticast mode [ 356.193103][T16634] hsr_slave_0: entered allmulticast mode [ 356.201960][T16634] hsr_slave_1: entered allmulticast mode [ 356.208440][T16634] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 356.293048][T16643] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2981'. [ 356.307610][T16643] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2981'. [ 356.317752][T16643] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2981'. [ 356.414191][T16644] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2981'. [ 356.465666][ T9950] tipc: Left network mode [ 357.010019][ T50] Bluetooth: hci1: command tx timeout [ 357.738805][ T9950] hsr_slave_0: left promiscuous mode [ 357.744809][ T9950] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 357.752238][ T9950] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 357.770964][ T9950] veth0_macvtap: left promiscuous mode [ 357.945527][ T9950] team0 (unregistering): Port device team_slave_1 removed [ 357.962636][ T9950] team0 (unregistering): Port device team_slave_0 removed [ 358.015942][T16617] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 358.358408][T16654] sctp: [Deprecated]: syz.1.2983 (pid 16654) Use of struct sctp_assoc_value in delayed_ack socket option. [ 358.358408][T16654] Use struct sctp_sack_info instead [ 358.421306][ T9950] team0 (unregistering): Port device dummy0 removed [ 358.421932][T16664] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2983'. [ 358.509063][T16659] veth17: entered promiscuous mode [ 358.521793][T16664] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 358.616451][T16664] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 358.701887][T16664] batman_adv: batadv0: Removing interface: ipvlan2 [ 358.739161][T16664] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 358.998974][T16532] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 359.028322][T16532] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 359.038560][T16532] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 359.107684][T16532] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 359.117501][T16532] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 359.131057][T16687] netlink: 'syz.0.2990': attribute type 1 has an invalid length. [ 359.146055][T16532] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 359.195532][ T50] Bluetooth: hci1: command tx timeout [ 359.251623][T16532] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 359.301619][T16532] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 359.343122][T16695] macsec0: entered promiscuous mode [ 359.348408][T16695] batadv0: entered promiscuous mode [ 359.422486][T16695] 8021q: adding VLAN 0 to HW filter on device macsec0 [ 359.438169][T16695] batadv0: left promiscuous mode [ 359.462385][T16701] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2993'. [ 359.815406][T16725] netlink: 'syz.1.2996': attribute type 1 has an invalid length. [ 359.832227][T16723] netlink: 'syz.1.2996': attribute type 1 has an invalid length. [ 359.859654][T16532] 8021q: adding VLAN 0 to HW filter on device bond0 [ 359.878634][T16723] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 359.896702][T16725] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 359.975787][T16532] 8021q: adding VLAN 0 to HW filter on device team0 [ 360.007449][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.014641][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 360.042569][ T9958] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.049807][ T9958] bridge0: port 2(bridge_slave_1) entered forwarding state [ 360.150831][T16740] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3000'. [ 360.183415][T16740] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3000'. [ 360.240688][T16739] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3001'. [ 360.247792][T16532] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 360.259947][T16532] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 360.271940][T16739] tipc: Resetting bearer [ 360.308165][T16744] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 360.323529][T16739] tipc: Disabling bearer [ 360.599082][T16760] ovs-system: entered promiscuous mode [ 360.704129][T16761] openvswitch: ovs-system: Dropping previously announced user features [ 360.716339][ T9950] IPVS: stop unused estimator thread 0... [ 360.920807][T16768] netlink: 116 bytes leftover after parsing attributes in process `syz.2.3006'. [ 361.122939][T16775] geneve3: entered promiscuous mode [ 361.182824][ T9958] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 37540 - 0 [ 361.202139][ T50] Bluetooth: hci1: command tx timeout [ 361.213578][ T9958] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 37540 - 0 [ 361.233943][ T9958] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 37540 - 0 [ 361.254503][ T9958] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 37540 - 0 [ 361.327848][T16787] sctp: [Deprecated]: syz.0.3011 (pid 16787) Use of struct sctp_assoc_value in delayed_ack socket option. [ 361.327848][T16787] Use struct sctp_sack_info instead [ 361.513452][T16532] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 361.614617][T16799] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 361.962403][T16822] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3018'. [ 362.134708][T16532] veth0_vlan: entered promiscuous mode [ 362.145322][T16828] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3020'. [ 362.160456][T16532] veth1_vlan: entered promiscuous mode [ 362.167698][T16828] l2tp_ppp: sess 2/0: no socket in recv [ 362.245411][T16532] veth0_macvtap: entered promiscuous mode [ 362.259510][T16532] veth1_macvtap: entered promiscuous mode [ 362.350245][T16532] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 362.397075][T16532] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 362.463965][ T9958] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.487086][ T9958] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.531829][ T9958] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.560711][ T3022] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.590636][T16841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3023'. [ 362.748444][ T3022] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.779588][ T3022] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.821387][T16856] Cannot find del_set index 3 as target [ 362.904451][ T9952] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.919584][ T9952] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.811754][ T5621] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 363.821789][ T5621] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 363.837394][ T5621] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 363.853328][ T5621] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 363.862430][ T5621] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 364.189338][T16908] C: renamed from lo (while UP) [ 364.237741][T16908] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 364.261088][T16900] lo: entered allmulticast mode [ 364.275587][T16899] lo: left allmulticast mode [ 364.529178][ T5626] syz_tun (unregistering): left allmulticast mode [ 364.565481][T16919] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3045'. [ 364.573163][T16920] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3044'. [ 364.614503][T16920] syzkaller0: entered promiscuous mode [ 364.620142][T16920] syzkaller0: entered allmulticast mode [ 364.665964][T16890] wg0 speed is unknown, defaulting to 1000 [ 364.744468][T16890] syzkaller0 speed is unknown, defaulting to 1000 [ 364.796850][T16931] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3047'. [ 364.920185][T16934] syzkaller0: left promiscuous mode [ 364.925712][T16934] syzkaller0: left allmulticast mode [ 364.944886][T16934] tipc: Started in network mode [ 364.954125][T16934] tipc: Node identity 46116fd605aa, cluster identity 4711 [ 364.961839][T16934] tipc: Enabled bearer , priority 10 [ 365.042704][T16939] netlink: 'syz.2.3050': attribute type 2 has an invalid length. [ 365.053901][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 365.065800][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.076192][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 37540 - 0 [ 365.252987][T16934] wg0 speed is unknown, defaulting to 1000 [ 365.395511][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 365.414298][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.453941][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 37540 - 0 [ 365.502505][T16934] syzkaller0 speed is unknown, defaulting to 1000 [ 365.797001][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 365.807452][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.817775][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 37540 - 0 [ 366.010363][ T5621] Bluetooth: hci2: command tx timeout [ 366.063869][ T5726] tipc: Node number set to 1136357334 [ 366.160062][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 366.171032][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.183457][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 37540 - 0 [ 366.269751][T16890] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.277054][T16890] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.284384][T16890] bridge_slave_0: entered allmulticast mode [ 366.292262][T16890] bridge_slave_0: entered promiscuous mode [ 366.335221][T16890] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.342434][T16890] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.349721][T16890] bridge_slave_1: entered allmulticast mode [ 366.357724][T16890] bridge_slave_1: entered promiscuous mode [ 366.370923][T16988] xt_hl: Unknown TTL match mode: 255 [ 366.495018][T16890] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 366.520916][T16890] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 366.607079][T16890] team0: Port device team_slave_0 added [ 366.632906][T16890] team0: Port device team_slave_1 added [ 366.802331][T16890] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 366.809355][T16890] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 366.835968][T16890] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 366.941442][T16890] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 366.948453][T16890] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 366.974808][T17008] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3068'. [ 366.984699][T17008] openvswitch: netlink: VXLAN extension 317 out of range max 1 [ 367.008860][T16890] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 367.029257][T17009] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3066'. [ 367.163634][T16890] hsr_slave_0: entered promiscuous mode [ 367.173405][T16890] hsr_slave_1: entered promiscuous mode [ 367.488777][T17029] sctp: [Deprecated]: syz.3.3075 (pid 17029) Use of int in max_burst socket option. [ 367.488777][T17029] Use struct sctp_assoc_value instead [ 367.534969][ T36] veth0: left allmulticast mode [ 367.549345][ T36] veth0: left promiscuous mode [ 367.568225][ T36] bridge0: port 3(veth0) entered disabled state [ 367.601216][T17035] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3076'. [ 367.661227][ T36] bridge_slave_1: left allmulticast mode [ 367.669261][ T36] bridge_slave_1: left promiscuous mode [ 367.681592][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.721858][ T36] bridge_slave_0: left allmulticast mode [ 367.727645][ T36] bridge_slave_0: left promiscuous mode [ 367.733969][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.775374][ T36] wg0: left allmulticast mode [ 368.134140][ T5621] Bluetooth: hci2: command tx timeout [ 368.273471][ T36] gretap0 (unregistering): left promiscuous mode [ 368.293175][ T36] bond10 (unregistering): (slave gretap1): Releasing active interface [ 368.342536][ T36] bond7 (unregistering): (slave geneve2): Releasing active interface [ 368.409022][ T36] bond4 (unregistering): (slave bridge1): Releasing backup interface [ 368.423579][ T36] bond9 (unregistering): (slave bridge2): Releasing backup interface [ 368.431717][ T36] bridge2 (unregistering): left promiscuous mode [ 368.453451][ T36] bond0 (unregistering): left promiscuous mode [ 368.459676][ T36] bond_slave_0: left promiscuous mode [ 368.519870][ T36] bond_slave_1: left promiscuous mode [ 368.525464][ T36] veth0_to_bond: left promiscuous mode [ 368.538422][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 368.549564][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 368.560659][ T36] bond0 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 368.571201][ T36] bond0 (unregistering): Released all slaves [ 368.595438][ T36] bond1 (unregistering): Released all slaves [ 368.614571][ T36] bond2 (unregistering): Released all slaves [ 368.634995][ T36] bond3 (unregistering): Released all slaves [ 368.654493][ T36] bond4 (unregistering): Released all slaves [ 368.673123][ T36] bond5 (unregistering): Released all slaves [ 368.705370][ T36] bond6 (unregistering): Released all slaves [ 368.725413][ T36] bond7 (unregistering): Released all slaves [ 368.740979][ T36] bond8 (unregistering): Released all slaves [ 368.756976][ T36] bond9 (unregistering): Released all slaves [ 368.772487][ T36] bond10 (unregistering): Released all slaves [ 368.788465][ T36] bond11 (unregistering): (slave C): Releasing backup interface [ 368.820228][ T36] bond11 (unregistering): (slave C): last VLAN challenged slave left bond - VLAN blocking is removed [ 368.842061][ T36] bond11 (unregistering): Released all slaves [ 368.857626][ T36] bond12 (unregistering): Released all slaves [ 368.977229][T17035] hsr_slave_1 (unregistering): left promiscuous mode [ 369.024467][ T5273] 8021q: adding VLAN 0 to HW filter on device eth1 [ 369.102528][ T36] tipc: Left network mode [ 369.345889][T17071] netlink: 'syz.1.3082': attribute type 83 has an invalid length. [ 369.385433][T17073] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3083'. [ 369.853559][ T5273] 8021q: adding VLAN 0 to HW filter on device eth2 [ 370.163662][T17104] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 370.272423][ T5621] Bluetooth: hci2: command tx timeout [ 370.613605][T17129] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3094'. [ 370.617069][T17131] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3094'. [ 370.707263][T17129] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 370.714470][ T5741] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 370.744728][T17130] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3093'. [ 371.171030][T17154] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3098'. [ 371.551652][T17165] openvswitch: netlink: Unknown key attributes 1 [ 371.618674][T17170] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3101'. [ 371.637447][T17171] Unsupported ieee802154 address type: 0 [ 371.744187][T17177] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3104'. [ 371.963131][ T36] hsr_slave_0: left promiscuous mode [ 371.980523][ T36] hsr_slave_1: left promiscuous mode [ 371.986798][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 371.994230][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 372.002438][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 372.009854][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 372.064432][ T36] veth1_macvtap: left promiscuous mode [ 372.070010][ T36] veth0_macvtap: left promiscuous mode [ 372.075586][ T36] veth1_vlan: left promiscuous mode [ 372.118081][T17191] netlink: 'syz.2.3107': attribute type 10 has an invalid length. [ 372.365691][ T5621] Bluetooth: hci2: command tx timeout [ 372.376289][T17193] netlink: 'syz.2.3107': attribute type 10 has an invalid length. [ 372.750582][ T36] team0 (unregistering): Port device team_slave_1 removed [ 372.927765][T17191] team0: Port device dummy0 added [ 372.986221][T17193] team0: Port device dummy0 removed [ 373.231940][T16890] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 373.266020][T16890] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 373.274720][T16890] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 373.294870][T16890] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 373.303191][T16890] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 373.332305][T16890] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 373.350903][T16890] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 373.410640][T17221] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 373.420914][T16890] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 373.434236][T17223] netlink: 'syz.2.3113': attribute type 3 has an invalid length. [ 373.466875][T17221] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3112'. [ 373.584308][T16890] 8021q: adding VLAN 0 to HW filter on device bond0 [ 373.635750][T16890] 8021q: adding VLAN 0 to HW filter on device team0 [ 373.650264][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.657554][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 373.683282][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.690574][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 373.988928][T17242] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3118'. [ 374.227141][T17256] netlink: 6 bytes leftover after parsing attributes in process `syz.4.3119'. [ 374.290754][T17256] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 374.553440][ T29] IPVS: starting estimator thread 0... [ 374.585342][T17280] openvswitch: netlink: Missing key (keys=40, expected=100) [ 374.844452][T17277] IPVS: using max 41 ests per chain, 98400 per kthread [ 374.913814][T16890] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 374.958191][T16890] veth0_vlan: entered promiscuous mode [ 375.006534][T16890] veth1_vlan: entered promiscuous mode [ 375.072893][T16890] veth0_macvtap: entered promiscuous mode [ 375.138691][T16890] veth1_macvtap: entered promiscuous mode [ 375.240249][T16890] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 375.284663][T16890] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 375.738065][ T9955] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.786035][ T9955] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.803229][T17323] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3138'. [ 375.848452][ T9955] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.876957][T17320] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3138'. [ 375.898110][T17320] C: entered promiscuous mode [ 375.928583][T17320] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 375.963573][T17323] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 376.010024][ T9961] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.023101][ T9961] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.114876][ T9955] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.128865][ T9955] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.136524][ T9955] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.169520][T17346] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3145'. [ 376.256930][T17346] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3145'. [ 376.400816][ T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 376.425905][ T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 376.434605][ T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 376.442569][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 376.450258][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 376.932965][T17354] wg0 speed is unknown, defaulting to 1000 [ 376.939294][T17368] batman_adv: batadv0: Adding interface: veth0 [ 376.945548][T17368] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 376.971864][T17368] batman_adv: batadv0: Interface activated: veth0 [ 376.985380][T17354] syzkaller0 speed is unknown, defaulting to 1000 [ 376.997386][T17368] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 377.005933][T17368] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 377.028244][T17368] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 377.035664][T17368] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 377.043688][T17368] batman_adv: batadv0: Interface deactivated: veth0 [ 377.050333][T17368] batman_adv: batadv0: Removing interface: veth0 [ 377.154570][ T5621] block nbd1: Receive control failed (result -32) [ 377.164151][ T5621] block nbd1: Receive control failed (result -32) [ 377.326439][T17353] netlink: 'syz.0.3033': attribute type 2 has an invalid length. [ 377.349615][T17353] netlink: 'syz.0.3033': attribute type 2 has an invalid length. [ 377.710688][T17382] syzkaller0: entered promiscuous mode [ 377.716230][T17382] syzkaller0: entered allmulticast mode [ 377.789780][T17354] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.797165][T17354] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.806579][T17354] bridge_slave_0: entered allmulticast mode [ 377.815682][T17354] bridge_slave_0: entered promiscuous mode [ 377.825603][T17354] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.832974][T17354] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.840689][T17354] bridge_slave_1: entered allmulticast mode [ 377.848729][T17354] bridge_slave_1: entered promiscuous mode [ 377.892534][T17382] tipc: Enabling of bearer rejected, already enabled [ 378.203177][T17354] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 378.254094][T17354] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 378.467890][T17354] team0: Port device team_slave_0 added [ 378.496334][T17354] team0: Port device team_slave_1 added [ 378.553412][ T50] Bluetooth: hci4: command tx timeout [ 378.698359][T17354] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 378.705403][T17354] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 378.731334][T17354] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 378.743982][T17354] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 378.820701][T17418] IPv6: NLM_F_CREATE should be specified when creating new route [ 378.828628][T17418] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 378.835902][T17418] IPv6: NLM_F_CREATE should be set when creating new route [ 378.843159][T17418] IPv6: NLM_F_CREATE should be set when creating new route [ 378.852292][T17354] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 378.917132][T17354] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 379.029223][T17416] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3159'. [ 379.077675][T17422] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 379.118061][T17422] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3161'. [ 379.155638][T17354] hsr_slave_0: entered promiscuous mode [ 379.162477][T17354] hsr_slave_1: entered promiscuous mode [ 379.168976][T17354] debugfs: 'hsr0' already exists in 'hsr' [ 379.179326][T17354] Cannot create hsr debugfs directory [ 379.294638][T17428] netlink: 'syz.1.3164': attribute type 10 has an invalid length. [ 379.324452][T17431] netlink: 'syz.4.3165': attribute type 3 has an invalid length. [ 379.428229][T17428] 8021q: VLANs not supported on sit0 [ 379.849819][T17457] netlink: 'syz.0.3170': attribute type 13 has an invalid length. [ 379.999457][T17354] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 380.013890][T17354] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.064548][T17457] gretap0: refused to change device tx_queue_len [ 380.073074][T17457] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 380.139145][T17462] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3171'. [ 380.335276][T17469] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3174'. [ 380.454539][T17475] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3177'. [ 380.476779][T17475] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 380.493610][T17477] netlink: 'syz.1.3178': attribute type 1 has an invalid length. [ 380.511265][T17477] netlink: 'syz.1.3178': attribute type 2 has an invalid length. [ 380.526830][T17473] sctp: [Deprecated]: syz.0.3176 (pid 17473) Use of int in maxseg socket option. [ 380.526830][T17473] Use struct sctp_assoc_value instead [ 380.571845][T17482] netlink: 'syz.1.3178': attribute type 1 has an invalid length. [ 380.589557][T17354] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 380.589615][T17354] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.632062][T17482] netlink: 'syz.1.3178': attribute type 2 has an invalid length. [ 380.707226][ T50] Bluetooth: hci4: command tx timeout [ 380.760814][T17487] rdma_op ffff888053f9c1f0 conn xmit_rdma 0000000000000000 [ 380.970200][T17496] bond1: option packets_per_slave: invalid value (18446744073709551615) [ 380.978629][T17496] bond1: option packets_per_slave: allowed values 0 - 65535 [ 380.990358][T17496] bond1 (unregistering): Released all slaves [ 381.203873][T17354] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 381.241909][T17354] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.290898][T17511] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3188'. [ 381.302047][T17513] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3189'. [ 381.407595][T17520] Bluetooth: hci0: unsupported parameter 5134 [ 381.413781][T17520] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 381.436673][T17513] bridge0: port 1(bridge_slave_0) entered forwarding state [ 381.640711][T17532] team0: Device gtp0 is up. Set it down before adding it as a team port [ 381.852308][T17543] sctp: [Deprecated]: syz.0.3196 (pid 17543) Use of int in max_burst socket option deprecated. [ 381.852308][T17543] Use struct sctp_assoc_value instead [ 381.875874][T17542] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3197'. [ 381.901910][T17354] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 381.910368][T17542] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3197'. [ 381.924534][T17354] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.182795][T17542] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3197'. [ 382.302939][T17558] xt_hashlimit: size too large, truncated to 1048576 [ 382.347120][T17354] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 382.367966][T17354] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 382.401971][T17354] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 382.420840][T17354] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 382.437749][T17354] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 382.466736][T17354] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 382.484535][T17354] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 382.510412][T17354] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 382.635163][T17354] 8021q: adding VLAN 0 to HW filter on device bond0 [ 382.658792][T17354] 8021q: adding VLAN 0 to HW filter on device team0 [ 382.673552][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.680848][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 382.696310][ T9961] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.703557][ T9961] bridge0: port 2(bridge_slave_1) entered forwarding state [ 382.796000][T17354] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 382.806442][T17354] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 382.842303][ T50] Bluetooth: hci4: command tx timeout [ 383.175500][T17588] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 383.553834][T17354] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 383.636184][T17609] netlink: 'syz.0.3214': attribute type 1 has an invalid length. [ 383.713630][T17354] veth0_vlan: entered promiscuous mode [ 383.819977][T17354] veth1_vlan: entered promiscuous mode [ 383.941053][T17354] veth0_macvtap: entered promiscuous mode [ 383.987190][T17354] veth1_macvtap: entered promiscuous mode [ 384.009666][T17354] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 384.029402][T17354] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 384.251459][ T967] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.279686][ T967] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.353407][T17630] nbd: nbd1 already in use [ 384.367066][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.378503][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.413851][ T9961] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.472890][ T9961] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.502017][ T9961] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.550418][ T967] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.705611][T17645] __nla_validate_parse: 2 callbacks suppressed [ 384.705634][T17645] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3146'. [ 384.785379][T17647] xt_ecn: cannot match TCP bits for non-tcp packets [ 384.841142][T17652] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3227'. [ 384.860589][ T50] Bluetooth: hci4: command tx timeout [ 385.023783][T17657] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3229'. [ 385.265213][ T5621] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 385.278106][ T5621] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 385.286246][ T5621] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 385.311188][ T5621] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 385.320299][ T5621] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 385.654255][T17695] netlink: 'syz.2.3237': attribute type 83 has an invalid length. [ 385.955208][T17712] netlink: 'syz.4.3242': attribute type 32 has an invalid length. [ 385.983385][T17712] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3242'. [ 386.020532][T17712] bond1: Setting coupled_control to off (0) [ 386.172183][T17721] netlink: 'syz.3.3243': attribute type 2 has an invalid length. [ 386.210196][T17721] netlink: 'syz.3.3243': attribute type 2 has an invalid length. [ 386.236007][T17721] netlink: 67 bytes leftover after parsing attributes in process `syz.3.3243'. [ 386.381389][T17729] x_tables: duplicate underflow at hook 2 [ 386.591975][T17674] wg0 speed is unknown, defaulting to 1000 [ 386.699169][T17674] syzkaller0 speed is unknown, defaulting to 1000 [ 386.940420][T17764] sctp: [Deprecated]: syz.0.3257 (pid 17764) Use of int in max_burst socket option deprecated. [ 386.940420][T17764] Use struct sctp_assoc_value instead [ 386.977454][T17763] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3255'. [ 387.011484][T17762] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 387.068119][T17762] netlink: 'syz.2.3256': attribute type 4 has an invalid length. [ 387.120332][T17771] netlink: 'syz.2.3256': attribute type 2 has an invalid length. [ 387.146611][T17771] netlink: 'syz.2.3256': attribute type 2 has an invalid length. [ 387.217265][T17771] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3256'. [ 387.393347][T17783] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3263'. [ 387.440473][ T5621] Bluetooth: hci3: command tx timeout [ 387.476645][T17785] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3262'. [ 387.511782][T17789] netlink: 'syz.4.3264': attribute type 13 has an invalid length. [ 387.699071][T17674] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.730667][T17674] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.737994][T17674] bridge_slave_0: entered allmulticast mode [ 387.820452][T17674] bridge_slave_0: entered promiscuous mode [ 387.842244][T17674] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.849513][T17674] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.881523][T17674] bridge_slave_1: entered allmulticast mode [ 387.889586][T17674] bridge_slave_1: entered promiscuous mode [ 387.989037][T17809] bond1: Unable to set down delay as MII monitoring is disabled [ 387.998696][T17809] bond1 (unregistering): Released all slaves [ 388.031213][T17823] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3271'. [ 388.058462][T17674] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 388.071383][T17674] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 388.132076][T17674] team0: Port device team_slave_0 added [ 388.142493][T17674] team0: Port device team_slave_1 added [ 388.244645][T17674] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 388.254419][T17674] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 388.281663][T17674] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 388.294248][T17674] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 388.301240][T17674] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 388.361992][T17674] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 388.481591][T17835] netlink: 'syz.4.3275': attribute type 16 has an invalid length. [ 388.493682][T17674] hsr_slave_0: entered promiscuous mode [ 388.501222][T17674] hsr_slave_1: entered promiscuous mode [ 388.507749][T17674] debugfs: 'hsr0' already exists in 'hsr' [ 388.514749][T17674] Cannot create hsr debugfs directory [ 388.630859][T17837] 0·: renamed from hsr0 (while UP) [ 388.638402][T17837] 0·: entered allmulticast mode [ 388.643356][T17837] hsr_slave_0: entered allmulticast mode [ 388.649225][T17837] hsr_slave_1: entered allmulticast mode [ 388.658994][T17837] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 388.716955][T17837] validate_nla: 1 callbacks suppressed [ 388.717004][T17837] netlink: 'syz.4.3276': attribute type 2 has an invalid length. [ 389.343465][T17674] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 389.385997][T17674] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.548029][T17887] netlink: 'syz.2.3288': attribute type 49 has an invalid length. [ 389.588701][ T5621] Bluetooth: hci3: command tx timeout [ 389.883707][T17887] ip6gretap0: entered promiscuous mode [ 389.889256][T17887] ip6gretap0: entered allmulticast mode [ 390.134275][T17674] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 390.157766][T17674] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.231300][T17910] __nla_validate_parse: 4 callbacks suppressed [ 390.231321][T17910] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3292'. [ 390.290162][T17910] gretap0: entered promiscuous mode [ 390.347853][T17911] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3292'. [ 390.355440][T17910] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3292'. [ 390.466871][T17914] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3293'. [ 390.619478][T17930] netlink: 'syz.0.3295': attribute type 16 has an invalid length. [ 390.627366][T17930] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3295'. [ 390.669457][T17674] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 390.686741][T17674] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.737254][T17910] 0ªî{X¹¦: renamed from gretap0 [ 390.777055][T17910] 0ªî{X¹¦: left promiscuous mode [ 390.801491][T17910] 0ªî{X¹¦: entered allmulticast mode [ 390.820445][T17910] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 390.841811][T17911] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 390.873650][T17911] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 391.048196][T17948] netlink: 'syz.4.3298': attribute type 1 has an invalid length. [ 391.087101][T17948] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3298'. [ 391.123351][T17948] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.167415][T17948] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.233836][T17959] tc_dump_action: action bad kind [ 391.581886][T17967] netlink: 576 bytes leftover after parsing attributes in process `syz.4.3302'. [ 391.758498][ T5621] Bluetooth: hci3: command tx timeout [ 391.834482][T17674] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 391.868526][T17987] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3307'. [ 391.890519][T17674] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 391.948050][T17674] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 391.995031][T17674] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 392.006219][T17982] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3306'. [ 392.019313][T17674] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 392.054694][T17674] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 392.062638][T17989] netlink: 14544 bytes leftover after parsing attributes in process `syz.3.3307'. [ 392.136459][T17674] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 392.208870][T17674] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 392.225361][T17999] syz.2.3309: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 392.287675][T17999] CPU: 1 UID: 0 PID: 17999 Comm: syz.2.3309 Not tainted syzkaller #0 PREEMPT(full) [ 392.287706][T17999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 392.287729][T17999] Call Trace: [ 392.287737][T17999] [ 392.287746][T17999] dump_stack_lvl+0xe8/0x150 [ 392.287860][T17999] warn_alloc+0x24c/0x270 [ 392.287921][T17999] ? stack_depot_save_flags+0x33/0x800 [ 392.288038][T17999] ? __pfx_warn_alloc+0x10/0x10 [ 392.288067][T17999] ? kasan_save_track+0x3e/0x80 [ 392.288103][T17999] ? __kasan_kmalloc+0x93/0xb0 [ 392.288132][T17999] ? xsk_setsockopt+0x52a/0x960 [ 392.288267][T17999] ? do_sock_setsockopt+0x17c/0x1b0 [ 392.288350][T17999] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 392.288373][T17999] ? do_syscall_64+0x174/0x580 [ 392.288441][T17999] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.288523][T17999] __vmalloc_node_range_noprof+0x12c/0x1730 [ 392.288581][T17999] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 392.288612][T17999] ? __kasan_kmalloc+0x93/0xb0 [ 392.288641][T17999] ? __kmalloc_cache_noprof+0x32d/0x660 [ 392.288668][T17999] ? __kmalloc_cache_noprof+0x150/0x660 [ 392.288698][T17999] vmalloc_user_noprof+0xad/0xe0 [ 392.288723][T17999] ? xskq_create+0xbf/0x170 [ 392.288747][T17999] xskq_create+0xbf/0x170 [ 392.288772][T17999] xsk_init_queue+0x8a/0xe0 [ 392.288797][T17999] xsk_setsockopt+0x52a/0x960 [ 392.288817][T17999] ? __fget_files+0x2a/0x420 [ 392.288863][T17999] ? __pfx_xsk_setsockopt+0x10/0x10 [ 392.288883][T17999] ? __pfx_aa_sk_perm+0x10/0x10 [ 392.288967][T17999] ? aa_sock_opt_perm+0xff/0x1a0 [ 392.288997][T17999] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 392.289044][T17999] ? __pfx_xsk_setsockopt+0x10/0x10 [ 392.289067][T17999] do_sock_setsockopt+0x17c/0x1b0 [ 392.289095][T17999] __x64_sys_setsockopt+0x13d/0x1b0 [ 392.289122][T17999] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.289145][T17999] do_syscall_64+0x174/0x580 [ 392.289176][T17999] ? trace_irq_disable+0x3b/0x140 [ 392.289214][T17999] ? clear_bhb_loop+0x70/0xc0 [ 392.289240][T17999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.289262][T17999] RIP: 0033:0x7fe7f259e0d9 [ 392.289282][T17999] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 392.289301][T17999] RSP: 002b:00007fe7f352a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 392.289323][T17999] RAX: ffffffffffffffda RBX: 00007fe7f2826090 RCX: 00007fe7f259e0d9 [ 392.289350][T17999] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 392.289363][T17999] RBP: 00007fe7f2635024 R08: 0000000000000004 R09: 0000000000000000 [ 392.289376][T17999] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 392.289388][T17999] R13: 00007fe7f2826128 R14: 00007fe7f2826090 R15: 00007ffc7eacae18 [ 392.289421][T17999] [ 392.566751][T17999] Mem-Info: [ 392.569925][T17999] active_anon:6029 inactive_anon:0 isolated_anon:0 [ 392.569925][T17999] active_file:0 inactive_file:42835 isolated_file:0 [ 392.569925][T17999] unevictable:0 dirty:38 writeback:0 [ 392.569925][T17999] slab_reclaimable:11472 slab_unreclaimable:108809 [ 392.569925][T17999] mapped:29149 shmem:525 pagetables:1271 [ 392.569925][T17999] sec_pagetables:0 bounce:0 [ 392.569925][T17999] kernel_misc_reclaimable:0 [ 392.569925][T17999] free:1317306 free_pcp:7752 free_cma:0 [ 392.658032][T17999] Node 0 active_anon:24116kB inactive_anon:0kB active_file:0kB inactive_file:171144kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:116796kB dirty:152kB writeback:0kB shmem:2100kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15552kB pagetables:4960kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 392.743541][T17999] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 392.778822][T17999] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 392.810539][T17999] lowmem_reserve[]: 0 2488 2489 2489 2489 [ 392.816371][T17999] Node 0 DMA32 free:1313468kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23916kB inactive_anon:0kB active_file:0kB inactive_file:171144kB unevictable:0kB writepending:152kB zspages:0kB present:3129332kB managed:2548488kB mlocked:0kB bounce:0kB free_pcp:30788kB local_pcp:12228kB free_cma:0kB [ 392.850926][T17999] lowmem_reserve[]: 0 0 0 0 0 [ 392.855741][T17999] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:256kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 392.887750][T17999] lowmem_reserve[]: 0 0 0 0 0 [ 392.892625][T17999] Node 1 Normal free:3940396kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 392.924191][T17999] lowmem_reserve[]: 0 0 0 0 0 [ 392.929004][T17999] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 392.949558][T17999] Node 0 DMA32: 1293*4kB (UME) 459*8kB (UM) 271*16kB (UME) 138*32kB (UME) 70*64kB (UME) 25*128kB (UM) 18*256kB (UME) 7*512kB (UME) 12*1024kB (UME) 5*2048kB (UM) 307*4096kB (UM) = 1313468kB [ 392.988420][T17999] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 393.000024][T17999] Node 1 Normal: 1*4kB (M) 1*8kB (M) 6*16kB (UM) 8*32kB (UM) 7*64kB (UM) 4*128kB (UM) 3*256kB (UM) 2*512kB (M) 1*1024kB (M) 2*2048kB (U) 960*4096kB (M) = 3940396kB [ 393.016612][T17999] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 393.029625][T17999] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 393.038986][T17999] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 393.048566][T17999] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 393.057887][T17999] 43357 total pagecache pages [ 393.062611][T17999] 0 pages in swap cache [ 393.066792][T17999] Free swap = 124996kB [ 393.076445][T17998] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 393.114752][T17674] 8021q: adding VLAN 0 to HW filter on device bond0 [ 393.139657][T17999] Total swap = 124996kB [ 393.155173][T17999] 2097051 pages RAM [ 393.190673][T17999] 0 pages HighMem/MovableOnly [ 393.216416][T17999] 428250 pages reserved [ 393.220656][T17999] 0 pages cma reserved [ 393.236703][T17674] 8021q: adding VLAN 0 to HW filter on device team0 [ 393.284433][ T9958] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.291621][ T9958] bridge0: port 1(bridge_slave_0) entered forwarding state [ 393.336433][ T9958] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.343701][ T9958] bridge0: port 2(bridge_slave_1) entered forwarding state [ 393.379149][T18013] wg0 speed is unknown, defaulting to 1000 [ 393.396244][T18013] syzkaller0 speed is unknown, defaulting to 1000 [ 393.819956][ T5621] Bluetooth: hci3: command tx timeout [ 393.967235][T18049] nbd: couldn't find a device at index 0 [ 394.609124][T17674] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 394.711932][T17674] veth0_vlan: entered promiscuous mode [ 394.785219][T17674] veth1_vlan: entered promiscuous mode [ 394.893738][T17674] veth0_macvtap: entered promiscuous mode [ 394.904063][T17674] veth1_macvtap: entered promiscuous mode [ 394.923923][T17674] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 394.972905][T17674] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 395.160237][ T9958] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.172205][ T9958] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.289610][ T3022] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.297498][ T3022] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.358709][ T3022] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.382247][ T3022] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.448782][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.466716][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.842417][T18136] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 395.849705][T18136] IPv6: NLM_F_CREATE should be set when creating new route [ 396.040374][T18146] netlink: 'syz.4.3345': attribute type 23 has an invalid length. [ 396.274748][T18156] __nla_validate_parse: 3 callbacks suppressed [ 396.274763][T18156] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3349'. [ 396.290812][T18156] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 396.302396][T18156] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 396.574340][T18165] ip6gre1: entered allmulticast mode [ 396.661249][T18169] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3354'. [ 396.753988][T18169] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 396.834988][T18177] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3358'. [ 397.186052][T18199] xt_nat: multiple ranges no longer supported [ 397.200138][T18199] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3366'. [ 397.242493][T18201] syzkaller0: entered promiscuous mode [ 397.252213][T18201] syzkaller0: entered allmulticast mode [ 397.503781][T18215] syzkaller1: entered allmulticast mode [ 397.643892][T18220] ip_tunnel: non-ECT from 2.0.0.0 with TOS=0x3 [ 397.740689][T18225] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3375'. [ 397.749864][T18225] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3375'. [ 398.035215][T18240] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3380'. [ 398.175657][T18231] netlink: 'syz.2.3377': attribute type 1 has an invalid length. [ 398.241764][T18231] bond1: entered promiscuous mode [ 398.247387][T18231] 8021q: adding VLAN 0 to HW filter on device bond1 [ 398.595757][T18256] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3383'. [ 398.604778][T18256] 0·: renamed from hsr0 (while UP) [ 398.623129][T18256] 0·: failed to rename [ 398.627407][T18256] 0·: entered allmulticast mode [ 398.632291][T18256] hsr_slave_0: entered allmulticast mode [ 398.637936][T18256] hsr_slave_1: entered allmulticast mode [ 398.660893][T18256] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 398.681192][T18255] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 398.790332][T18268] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3386'. [ 399.024580][T18281] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3391'. [ 399.826027][T18327] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.603497][T18350] x_tables: duplicate underflow at hook 2 [ 400.710119][T18357] macvtap1: entered promiscuous mode [ 400.715877][T18357] macvtap1: entered allmulticast mode [ 400.721693][T18357] veth1_vlan: entered allmulticast mode [ 401.829169][T18410] __nla_validate_parse: 5 callbacks suppressed [ 401.829188][T18410] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3421'. [ 401.869752][T18410] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3421'. [ 401.904328][T18416] netlink: 'syz.4.3422': attribute type 23 has an invalid length. [ 401.944636][T18416] macvlan1: mtu less than device minimum [ 401.950794][T18416] netlink: 'syz.4.3422': attribute type 1 has an invalid length. [ 402.272066][T18432] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 402.366240][T18436] xt_CT: You must specify a L4 protocol and not use inversions on it [ 402.366820][T18437] xt_CT: You must specify a L4 protocol and not use inversions on it [ 402.451726][T18437] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3429'. [ 402.451726][T18436] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3429'. [ 402.749108][T18452] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3434'. [ 403.242420][T18481] netlink: 'syz.4.3442': attribute type 7 has an invalid length. [ 403.261564][T18481] netlink: 'syz.4.3442': attribute type 7 has an invalid length. [ 403.446874][T18495] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3445'. [ 403.457925][T18496] netlink: 'syz.2.3445': attribute type 21 has an invalid length. [ 403.466650][T18496] IPv6: NLM_F_CREATE should be specified when creating new route [ 403.474823][T18496] netlink: 'syz.2.3445': attribute type 1 has an invalid length. [ 403.874631][T18503] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3447'. [ 404.258956][T18520] netlink: 'syz.0.3449': attribute type 1 has an invalid length. [ 404.266763][T18520] nbd: error processing sock list [ 404.299740][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 404.662557][T18532] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3452'. [ 404.976792][T18546] ip6tnl0: Caught tx_queue_len zero misconfig [ 405.081265][T18560] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3459'. [ 405.126515][T18560] netlink: 'syz.0.3459': attribute type 2 has an invalid length. [ 405.285124][T18568] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3462'. [ 405.296598][T18569] netlink: 'syz.4.3462': attribute type 1 has an invalid length. [ 405.735718][T18590] netlink: 'syz.3.3468': attribute type 58 has an invalid length. [ 407.862764][T18603] __nla_validate_parse: 1 callbacks suppressed [ 407.862779][T18603] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3469'. [ 407.890727][T18603] netlink: 'syz.4.3469': attribute type 10 has an invalid length. [ 407.907200][T18603] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3469'. [ 407.926794][T18603] geneve2: entered promiscuous mode [ 407.932167][T18603] geneve2: entered allmulticast mode [ 408.286427][T18626] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3476'. [ 408.298369][T18626] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 408.337167][T18633] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3477'. [ 408.471165][T18630] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3477'. [ 408.580451][T18636] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3479'. [ 408.678673][T18647] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3481'. [ 408.701396][T18647] openvswitch: netlink: Flow actions attr not present in new flow. [ 408.809909][T18651] ip_tables: iptables: counters copy to user failed while replacing table [ 408.837840][T18652] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3482'. [ 408.866998][T18643] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3480'. [ 408.897414][T18643] netlink: 'syz.0.3480': attribute type 21 has an invalid length. [ 408.905721][T18643] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3480'. [ 409.164109][T18669] ipvlan0: Caught tx_queue_len zero misconfig [ 409.301266][T18665] team0: Port device team_slave_0 removed [ 412.410156][T18675] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 412.792136][T18729] veth0: entered promiscuous mode [ 412.817883][T18728] veth0: left promiscuous mode [ 412.861597][T18736] bridge0: port 3(vlan2) entered blocking state [ 412.868013][T18736] bridge0: port 3(vlan2) entered disabled state [ 412.874618][T18736] vlan2: entered allmulticast mode [ 412.879866][T18736] dummy0: entered allmulticast mode [ 412.888574][T18736] vlan2: entered promiscuous mode [ 412.933736][T18736] dummy0: entered promiscuous mode [ 412.955623][T18738] netlink: 'syz.4.3507': attribute type 2 has an invalid length. [ 412.966655][T18738] bond0: Caught tx_queue_len zero misconfig [ 413.356476][T18769] netlink: 'syz.1.3518': attribute type 1 has an invalid length. [ 413.370233][ T48] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 413.386865][ T48] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 413.414180][ T48] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 413.440358][ T48] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 413.544855][T18779] netlink: 'syz.0.3519': attribute type 1 has an invalid length. [ 413.731808][T18791] __nla_validate_parse: 7 callbacks suppressed [ 413.731828][T18791] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3523'. [ 414.055602][T18801] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3526'. [ 414.086441][T18802] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3526'. [ 414.405401][T18823] netlink: 284 bytes leftover after parsing attributes in process `syz.1.3531'. [ 414.635173][T18842] netlink: 'syz.1.3537': attribute type 11 has an invalid length. [ 414.896444][T18853] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3543'. [ 415.016646][T18863] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3544'. [ 415.069992][T18867] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3545'. [ 415.093455][T18868] netlink: 'syz.2.3546': attribute type 2 has an invalid length. [ 415.115739][T18869] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3547'. [ 415.605732][ T50] Bluetooth: hci3: command 0x0405 tx timeout [ 415.670468][T18915] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3557'. [ 415.684139][T18915] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3557'. [ 415.948691][T18926] netlink: 'syz.2.3561': attribute type 11 has an invalid length. [ 416.190612][T18956] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 416.207656][T18959] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 416.214192][T18959] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 416.416166][T18967] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 416.743223][T18979] ipvlan2: entered allmulticast mode [ 416.748881][T18979] batadv_slave_1: entered allmulticast mode [ 416.758563][T18979] batman_adv: batadv0: Adding interface: ipvlan2 [ 416.765581][T18979] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 416.793254][T18979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 416.804370][T18979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.814930][T18979] batman_adv: batadv0: Interface activated: ipvlan2 [ 417.663948][T19016] netlink: 'syz.0.3588': attribute type 2 has an invalid length. [ 417.872441][ T3022] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 417.881283][ T3022] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 417.890033][ T3022] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 417.898793][ T3022] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.259735][T19049] nbd: must specify at least one socket [ 418.272181][T19049] nbd: must specify at least one socket [ 418.283504][T19049] nbd: must specify at least one socket [ 418.333976][T19049] nbd: must specify at least one socket [ 418.351218][T19049] nbd: must specify at least one socket [ 418.365630][T19049] nbd: must specify at least one socket [ 418.416266][T19049] nbd: must specify at least one socket [ 418.422090][T19049] nbd: must specify at least one socket [ 418.427918][T19049] nbd: must specify at least one socket [ 418.433666][T19049] nbd: must specify at least one socket [ 418.439384][T19049] nbd: must specify at least one socket [ 418.445163][T19049] nbd: must specify at least one socket [ 418.450882][T19049] nbd: must specify at least one socket [ 418.456601][T19049] nbd: must specify at least one socket [ 418.462333][T19049] nbd: must specify at least one socket [ 418.559983][T19064] xt_hashlimit: size too large, truncated to 1048576 [ 418.570723][T19049] nbd: must specify at least one socket [ 418.581899][T19049] nbd: must specify at least one socket [ 418.593880][T19049] nbd: must specify at least one socket [ 418.604062][T19049] nbd: must specify at least one socket [ 418.613491][T19049] nbd: must specify at least one socket [ 418.643146][T19049] nbd: must specify at least one socket [ 418.658605][T19049] nbd: must specify at least one socket [ 418.673997][T19049] nbd: must specify at least one socket [ 418.680208][T19049] nbd: must specify at least one socket [ 418.686049][T19049] nbd: must specify at least one socket [ 418.708475][T19049] nbd: must specify at least one socket [ 418.726503][T19049] nbd: must specify at least one socket [ 418.735031][T19049] nbd: must specify at least one socket [ 418.740956][T19049] nbd: must specify at least one socket [ 418.746903][T19049] nbd: must specify at least one socket [ 418.753433][T19049] nbd: must specify at least one socket [ 418.759566][T19049] nbd: must specify at least one socket [ 418.766850][T19049] nbd: must specify at least one socket [ 418.779574][T19049] nbd: must specify at least one socket [ 418.785562][T19049] nbd: must specify at least one socket [ 418.791842][T19049] nbd: must specify at least one socket [ 418.812336][T19049] nbd: must specify at least one socket [ 418.825086][T19049] nbd: must specify at least one socket [ 418.832750][T19049] nbd: must specify at least one socket [ 418.838599][T19049] nbd: must specify at least one socket [ 418.844648][T19049] nbd: must specify at least one socket [ 418.851577][T19049] nbd: must specify at least one socket [ 418.857589][T19049] nbd: must specify at least one socket [ 418.863770][T19049] nbd: must specify at least one socket [ 418.871571][T19049] nbd: must specify at least one socket [ 418.877448][T19049] nbd: must specify at least one socket [ 418.884809][T19049] nbd: must specify at least one socket [ 418.897083][T19049] nbd: must specify at least one socket [ 418.913035][T19049] nbd: must specify at least one socket [ 418.929282][T19049] nbd: must specify at least one socket [ 418.940269][T19049] nbd: must specify at least one socket [ 418.948262][T19049] nbd: must specify at least one socket [ 418.954033][T19049] nbd: must specify at least one socket [ 418.960161][T19049] nbd: must specify at least one socket [ 418.965904][T19049] nbd: must specify at least one socket [ 418.971665][T19049] nbd: must specify at least one socket [ 418.977384][T19049] nbd: must specify at least one socket [ 418.983110][T19049] nbd: must specify at least one socket [ 419.003984][T19049] nbd: must specify at least one socket [ 419.010484][T19049] nbd: must specify at least one socket [ 419.016222][T19049] nbd: must specify at least one socket [ 419.024971][T19049] nbd: must specify at least one socket [ 419.030725][T19049] nbd: must specify at least one socket [ 419.036459][T19049] nbd: must specify at least one socket [ 419.042220][T19049] nbd: must specify at least one socket [ 419.339394][T19090] x_tables: duplicate underflow at hook 1 [ 419.504362][T19103] __nla_validate_parse: 15 callbacks suppressed [ 419.504385][T19103] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3618'. [ 419.975941][T19119] ------------[ cut here ]------------ [ 419.981768][T19119] !chanctx_conf [ 419.981803][T19119] WARNING: net/mac80211/tx.c:6482 at ieee80211_tx_skb_tid+0x3b8/0x480, CPU#0: syz.0.3622/19119 [ 420.007723][T19119] Modules linked in: [ 420.011949][T19119] CPU: 0 UID: 0 PID: 19119 Comm: syz.0.3622 Not tainted syzkaller #0 PREEMPT(full) [ 420.021386][T19119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 420.031645][T19119] RIP: 0010:ieee80211_tx_skb_tid+0x3b8/0x480 [ 420.037687][T19119] Code: 4b 55 f6 e9 b1 fe ff ff e8 d5 4c 79 f6 90 0f 0b 90 e9 e2 fe ff ff e8 c7 4c 79 f6 90 0f 0b 90 e9 2a fe ff ff e8 b9 4c 79 f6 90 <0f> 0b 90 e8 60 b4 fd ff 31 ff 48 8b 34 24 ba 02 00 00 00 48 83 c4 [ 420.057348][T19119] RSP: 0018:ffffc90005367338 EFLAGS: 00010287 [ 420.063487][T19119] RAX: ffffffff8b4db4a7 RBX: ffffffff8b4db11f RCX: 0000000000080000 [ 420.071506][T19119] RDX: ffffc9000617a000 RSI: 0000000000023e1a RDI: 0000000000023e1b [ 420.079521][T19119] RBP: 00000000ffffffff R08: ffffffff8b4db11f R09: 0000000000000000 [ 420.087536][T19119] R10: 0000000000000000 R11: ffffffff8eb59c60 R12: ffff8880690b4ec0 [ 420.095560][T19119] R13: 0000000000000000 R14: 0000000000000001 R15: dffffc0000000000 [ 420.103579][T19119] FS: 00007f1317d196c0(0000) GS:ffff888124f49000(0000) knlGS:0000000000000000 [ 420.123713][T19119] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 420.130380][T19119] CR2: 00007f1317cd6ff8 CR3: 0000000070b74000 CR4: 00000000003526f0 [ 420.138454][T19119] Call Trace: [ 420.141784][T19119] [ 420.144770][T19119] mesh_plink_frame_tx+0x73d/0xc30 [ 420.150057][T19119] ? __pfx_mesh_plink_frame_tx+0x10/0x10 [ 420.155739][T19119] ? mesh_nexthop_resolve+0xe0/0x330 [ 420.161094][T19119] mesh_plink_deactivate+0x18b/0x2f0 [ 420.166439][T19119] mesh_sta_cleanup+0x42/0x150 [ 420.171353][T19119] cleanup_single_sta+0x3ff/0x660 [ 420.176503][T19119] __sta_info_flush+0x5bb/0x700 [ 420.181492][T19119] ? __pfx___sta_info_flush+0x10/0x10 [ 420.186939][T19119] ieee80211_do_stop+0x3cd/0x2410 [ 420.192197][T19119] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 420.197756][T19119] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 420.203709][T19119] ieee80211_stop+0x1ab/0x200 [ 420.208456][T19119] ? __pfx_ieee80211_stop+0x10/0x10 [ 420.213717][T19119] __dev_close_many+0x366/0x6e0 [ 420.218751][T19119] ? __pfx___dev_close_many+0x10/0x10 [ 420.238466][T19119] ? __mutex_trylock_common+0x15f/0x270 [ 420.244237][T19119] ? __pfx___mutex_trylock_common+0x10/0x10 [ 420.250204][T19119] netif_close_many+0x222/0x410 [ 420.255119][T19119] ? __pfx_netif_close_many+0x10/0x10 [ 420.260551][T19119] ? __mutex_lock+0x30d/0x1550 [ 420.265463][T19119] ? rfkill_fill_event+0x29c/0x3f0 [ 420.270754][T19119] netif_close+0x160/0x220 [ 420.275235][T19119] ? __pfx_netif_close+0x10/0x10 [ 420.280233][T19119] ? __pfx___mutex_lock+0x10/0x10 [ 420.285314][T19119] ? do_raw_spin_lock+0x12b/0x2f0 [ 420.290409][T19119] dev_close+0xf7/0x210 [ 420.294715][T19119] cfg80211_shutdown_all_interfaces+0xb0/0x220 [ 420.301023][T19119] ? __pfx_cfg80211_rfkill_set_block+0x10/0x10 [ 420.307226][T19119] cfg80211_rfkill_set_block+0x2d/0x50 [ 420.312738][T19119] rfkill_set_block+0x19f/0x4d0 [ 420.317645][T19119] rfkill_fop_write+0x43b/0x560 [ 420.322541][T19119] ? apparmor_file_permission+0x1f4/0x300 [ 420.328437][T19119] ? __pfx_rfkill_fop_write+0x10/0x10 [ 420.333886][T19119] ? security_kernfs_init_security+0x200/0x270 [ 420.350306][T19119] ? rw_verify_area+0x203/0x4c0 [ 420.355253][T19119] ? __pfx_rfkill_fop_write+0x10/0x10 [ 420.360676][T19119] vfs_write+0x296/0xba0 [ 420.365000][T19119] ? __pfx_vfs_write+0x10/0x10 [ 420.369825][T19119] ? __fget_files+0x2a/0x420 [ 420.374466][T19119] ? __fget_files+0x2a/0x420 [ 420.379106][T19119] ? __fget_files+0x3a2/0x420 [ 420.383829][T19119] ? __fget_files+0x2a/0x420 [ 420.388495][T19119] ksys_write+0x150/0x270 [ 420.392889][T19119] ? __pfx_ksys_write+0x10/0x10 [ 420.397802][T19119] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.403913][T19119] do_syscall_64+0x174/0x580 [ 420.408562][T19119] ? trace_irq_disable+0x3b/0x140 [ 420.413643][T19119] ? clear_bhb_loop+0x70/0xc0 [ 420.418367][T19119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.424314][T19119] RIP: 0033:0x7f1316d9e0d9 [ 420.428770][T19119] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 420.448428][T19119] RSP: 002b:00007f1317d19028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 420.473267][T19119] RAX: ffffffffffffffda RBX: 00007f1317025fa0 RCX: 00007f1316d9e0d9 [ 420.481409][T19119] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000005 [ 420.489436][T19119] RBP: 00007f1316e35024 R08: 0000000000000000 R09: 0000000000000000 [ 420.497452][T19119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 420.505474][T19119] R13: 00007f1317026038 R14: 00007f1317025fa0 R15: 00007fffa43569a8 [ 420.513522][T19119] [ 420.516596][T19119] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 420.523913][T19119] CPU: 0 UID: 0 PID: 19119 Comm: syz.0.3622 Not tainted syzkaller #0 PREEMPT(full) [ 420.533361][T19119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 420.543499][T19119] Call Trace: [ 420.546812][T19119] [ 420.549772][T19119] vpanic+0x56c/0xa60 [ 420.553830][T19119] ? __pfx__printk+0x10/0x10 [ 420.558442][T19119] ? __pfx_vpanic+0x10/0x10 [ 420.562978][T19119] ? is_bpf_text_address+0x292/0x2b0 [ 420.568308][T19119] ? is_bpf_text_address+0x26/0x2b0 [ 420.573539][T19119] panic+0xc5/0xd0 [ 420.577286][T19119] ? __pfx_panic+0x10/0x10 [ 420.581753][T19119] __warn+0x315/0x4c0 [ 420.585778][T19119] ? ieee80211_tx_skb_tid+0x3b8/0x480 [ 420.591187][T19119] ? ieee80211_tx_skb_tid+0x3b8/0x480 [ 420.596588][T19119] __report_bug+0x276/0x570 [ 420.601200][T19119] ? ieee80211_tx_skb_tid+0x3b8/0x480 [ 420.606607][T19119] ? __pfx___report_bug+0x10/0x10 [ 420.611666][T19119] ? __lock_acquire+0x683/0x2cf0 [ 420.616736][T19119] ? kmem_cache_alloc_node_noprof+0x1f1/0x610 [ 420.622835][T19119] ? ieee80211_tx_skb_tid+0x3b8/0x480 [ 420.628233][T19119] report_bug+0x16a/0x220 [ 420.632593][T19119] ? ieee80211_tx_skb_tid+0x3b8/0x480 [ 420.637987][T19119] ? ieee80211_tx_skb_tid+0x3ba/0x480 [ 420.643382][T19119] handle_bug+0x9c/0x200 [ 420.647731][T19119] exc_invalid_op+0x1a/0x50 [ 420.652261][T19119] asm_exc_invalid_op+0x1a/0x20 [ 420.657126][T19119] RIP: 0010:ieee80211_tx_skb_tid+0x3b8/0x480 [ 420.663127][T19119] Code: 4b 55 f6 e9 b1 fe ff ff e8 d5 4c 79 f6 90 0f 0b 90 e9 e2 fe ff ff e8 c7 4c 79 f6 90 0f 0b 90 e9 2a fe ff ff e8 b9 4c 79 f6 90 <0f> 0b 90 e8 60 b4 fd ff 31 ff 48 8b 34 24 ba 02 00 00 00 48 83 c4 [ 420.682751][T19119] RSP: 0018:ffffc90005367338 EFLAGS: 00010287 [ 420.688843][T19119] RAX: ffffffff8b4db4a7 RBX: ffffffff8b4db11f RCX: 0000000000080000 [ 420.696835][T19119] RDX: ffffc9000617a000 RSI: 0000000000023e1a RDI: 0000000000023e1b [ 420.704912][T19119] RBP: 00000000ffffffff R08: ffffffff8b4db11f R09: 0000000000000000 [ 420.712902][T19119] R10: 0000000000000000 R11: ffffffff8eb59c60 R12: ffff8880690b4ec0 [ 420.720898][T19119] R13: 0000000000000000 R14: 0000000000000001 R15: dffffc0000000000 [ 420.728898][T19119] ? ieee80211_tx_skb_tid+0x2f/0x480 [ 420.734222][T19119] ? ieee80211_tx_skb_tid+0x2f/0x480 [ 420.739539][T19119] ? ieee80211_tx_skb_tid+0x3b7/0x480 [ 420.744946][T19119] ? ieee80211_tx_skb_tid+0x3b7/0x480 [ 420.750341][T19119] mesh_plink_frame_tx+0x73d/0xc30 [ 420.755491][T19119] ? __pfx_mesh_plink_frame_tx+0x10/0x10 [ 420.761144][T19119] ? mesh_nexthop_resolve+0xe0/0x330 [ 420.766460][T19119] mesh_plink_deactivate+0x18b/0x2f0 [ 420.771772][T19119] mesh_sta_cleanup+0x42/0x150 [ 420.776563][T19119] cleanup_single_sta+0x3ff/0x660 [ 420.781616][T19119] __sta_info_flush+0x5bb/0x700 [ 420.786520][T19119] ? __pfx___sta_info_flush+0x10/0x10 [ 420.791938][T19119] ieee80211_do_stop+0x3cd/0x2410 [ 420.797010][T19119] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 420.802509][T19119] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 420.808347][T19119] ieee80211_stop+0x1ab/0x200 [ 420.813054][T19119] ? __pfx_ieee80211_stop+0x10/0x10 [ 420.818294][T19119] __dev_close_many+0x366/0x6e0 [ 420.823187][T19119] ? __pfx___dev_close_many+0x10/0x10 [ 420.828592][T19119] ? __mutex_trylock_common+0x15f/0x270 [ 420.834175][T19119] ? __pfx___mutex_trylock_common+0x10/0x10 [ 420.840106][T19119] netif_close_many+0x222/0x410 [ 420.844985][T19119] ? __pfx_netif_close_many+0x10/0x10 [ 420.850379][T19119] ? __mutex_lock+0x30d/0x1550 [ 420.855166][T19119] ? rfkill_fill_event+0x29c/0x3f0 [ 420.860303][T19119] netif_close+0x160/0x220 [ 420.864747][T19119] ? __pfx_netif_close+0x10/0x10 [ 420.869721][T19119] ? __pfx___mutex_lock+0x10/0x10 [ 420.874769][T19119] ? do_raw_spin_lock+0x12b/0x2f0 [ 420.879815][T19119] dev_close+0xf7/0x210 [ 420.883999][T19119] cfg80211_shutdown_all_interfaces+0xb0/0x220 [ 420.890178][T19119] ? __pfx_cfg80211_rfkill_set_block+0x10/0x10 [ 420.896348][T19119] cfg80211_rfkill_set_block+0x2d/0x50 [ 420.901842][T19119] rfkill_set_block+0x19f/0x4d0 [ 420.906735][T19119] rfkill_fop_write+0x43b/0x560 [ 420.911607][T19119] ? apparmor_file_permission+0x1f4/0x300 [ 420.917358][T19119] ? __pfx_rfkill_fop_write+0x10/0x10 [ 420.922763][T19119] ? security_kernfs_init_security+0x200/0x270 [ 420.928994][T19119] ? rw_verify_area+0x203/0x4c0 [ 420.933889][T19119] ? __pfx_rfkill_fop_write+0x10/0x10 [ 420.939290][T19119] vfs_write+0x296/0xba0 [ 420.943568][T19119] ? __pfx_vfs_write+0x10/0x10 [ 420.948356][T19119] ? __fget_files+0x2a/0x420 [ 420.953004][T19119] ? __fget_files+0x2a/0x420 [ 420.957640][T19119] ? __fget_files+0x3a2/0x420 [ 420.962343][T19119] ? __fget_files+0x2a/0x420 [ 420.966976][T19119] ksys_write+0x150/0x270 [ 420.971340][T19119] ? __pfx_ksys_write+0x10/0x10 [ 420.976223][T19119] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.982311][T19119] do_syscall_64+0x174/0x580 [ 420.986922][T19119] ? trace_irq_disable+0x3b/0x140 [ 420.991967][T19119] ? clear_bhb_loop+0x70/0xc0 [ 420.996667][T19119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.002578][T19119] RIP: 0033:0x7f1316d9e0d9 [ 421.007018][T19119] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 421.026642][T19119] RSP: 002b:00007f1317d19028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 421.035088][T19119] RAX: ffffffffffffffda RBX: 00007f1317025fa0 RCX: 00007f1316d9e0d9 [ 421.043085][T19119] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000005 [ 421.051089][T19119] RBP: 00007f1316e35024 R08: 0000000000000000 R09: 0000000000000000 [ 421.059092][T19119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 421.067081][T19119] R13: 00007f1317026038 R14: 00007f1317025fa0 R15: 00007fffa43569a8 [ 421.075093][T19119] [ 421.078330][T19119] Kernel Offset: disabled [ 421.082669][T19119] Rebooting in 86400 seconds..