last executing test programs: 4m4.629469298s ago: executing program 4 (id=1371): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x87) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x17d4}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000007c0)={0x114, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x2, 0x25}}}}, [@NL80211_ATTR_REKEY_DATA={0x58, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="579bcf398bbbd75d32aa6077a886a74df3d0fcf02f399c3a"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="24cf4713299967bd15bf44cad1f4d266b29e2a4135a412b2"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="e38ad85e88fe5e3a056b1a153a8bb3c847468ddf8efa0093"}]}, @NL80211_ATTR_REKEY_DATA={0x68, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="5f3b5d542091777612684837dbc0ec47ea67acb692453dd2"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "5bd58c80a1143827"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="0ca43818af12ec0080d15c29fc42b0fe"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="204183f74d05c885801d03a2488d3fd4"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="32c5877eef25cfd5a4dd14ad07749005"}]}, @NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "b27375be03440892"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="5668be1df948388dcafda7e3803cedae4eb116e65d446f79651e323a70428f9f"}]}]}, 0x114}}, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="4801000042000100fffffffffddbdf250200000004003880100001800c00c8000200000000000000200104801c01"], 0x148}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x4, 0x1, 0x0, 0x0, 0xb}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x80001, 0x1, 0x0, 0x1, 0x1}, {{@in=@broadcast, 0x4d1, 0x32}, 0x2, @in=@private=0xa010101, 0x3502, 0x1, 0x0, 0x0, 0xa, 0xfffffffd}}, 0xe8) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9db}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000004000070127bd7000f6dbdf25037c00000400c2800c00018008000300", @ANYRES32, @ANYBLOB="040008"], 0x28}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x10, &(0x7f0000000080)=0x10001, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x28, r11, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}}, 0x0) write$cgroup_subtree(r8, &(0x7f00000005c0)={[{0x2d, 'hugetlb'}, {0x2b, 'freezer'}, {0x2b, 'hugetlb'}, {0x2d, 'devices'}]}, 0x24) ioctl$EXT4_IOC_GROUP_ADD(r10, 0x40286608, &(0x7f0000000580)={0x60d, 0xffffffffffffffca, 0x4, 0x5f9, 0x0, 0x401}) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000640)={'macsec0\x00', 0x5126672136e214b9}) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="050027bd7000000000000600000008000300", @ANYRES32=r7, @ANYBLOB="08004d01"], 0x24}, 0x1, 0x0, 0x0, 0x20040091}, 0x4) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="c000b50057889f0f368d2589f49b5b2653894482a755fc72e0fb6e3b6d962dc294e02fb2de00c8dc5e4cdf792cb6dd15c52206f6fb775da79fd4567e743819ca763237f38ac6bb00bbe149df9f3b499d9eb1723a58e95f6ffae95ee8bde9c9a8f0207ae67c581c6da86d9b3e3f754a89cb3ed742ca4bc88e75476603d99f7faf6e7c8e98930b0408d9f1", @ANYRES16=r4, @ANYBLOB="02002abd7000ffdbdf2507000000080001005500000008000300", @ANYRES32=r7, @ANYBLOB="0c00990080240000070000000400cc000a00180003030303030300000400cc001c00e700530461575aa47c8b2737e9eae5a76f3e65f79e010c3484d80a00e800ffffffffffff00000a00e80008021100000000000a00e80008021100000100000a00180003030303030300001400040076657468315f746f5f6261746164760014000400776c616e3100000000000000000000000800050005000000"], 0xc0}}, 0x0) r13 = socket$inet6(0xa, 0x1, 0x8010800000000084) sendmmsg$inet6(r13, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000000c0)='/', 0x1}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000d00)='[', 0x4d0}], 0x21}}], 0x2, 0x4008040) r14 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r14, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="18008000000001000000000000000072a9d550000800f500b5b8e12d80ef804b2dcc812a3f0ab8bd11bf30c89d89106d"], 0x18}], 0x1, 0x0, 0x0, 0x800}, 0x0) 4m4.403580315s ago: executing program 4 (id=1375): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400c884}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000580)={'bond0\x00', 0x0}) bind$packet(r4, &(0x7f0000000d00)={0x11, 0x1a, r5, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}}, 0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r3) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)={0xcc, r7, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0xf}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0x3}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xa}, {0x6, 0x16, 0x3}, {0x5, 0x12, 0x1}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4005}, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002980)=@newchain={0x172c, 0x64, 0x400, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xfff2, 0xa}, {0x0, 0xc}, {0xe, 0xd}}, [@TCA_CHAIN={0x8, 0xb, 0x944}, @TCA_CHAIN={0x8, 0xb, 0x3948}, @filter_kind_options=@f_basic={{0xa}, {0x16b4, 0x2, [@TCA_BASIC_ACT={0x1a0, 0x3, [@m_bpf={0x19c, 0x17, 0x0, 0x0, {{0x8}, {0x98, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r3}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0xacb, 0x6, 0x10000000, 0x5, 0xf3}}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x4, 0x8000, 0x1, 0x5, 0x6}}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x7fffffff, 0x67, 0x20000000, 0x6, 0x7}}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x5}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x6, 0x37, 0x8, 0x9, 0x2}}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x2, 0x30000, 0x5, 0x4, 0x1}}]}, {0xdd, 0x6, "29c0dee95590a555a327af79b362c9b245a83c8aabeceb700e5743367a2ef8f14280d7484000eba9708ae4f097bf96a5bc24aba2e330cdac2b05de108d374ec577f87102236165c4c7aebf97ab0d91385cd4faf97ba26a2404ee8cbf1ecfeba016490bfb14834a0e7281c37cd2f9bd8544a8c95980e0d000412bb0aa5f726abaae177f74669b5781f748dfd0e70ecb0eb1e95c3a2865e7d75d11496e37534d551f48c13185c83ee8096ec05719229d8562733729f351e8d831dada985c8b054edf143213db1a1fd2bfbfbd71a1fd146d4eeb7e01892b5cc92b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_BASIC_EMATCHES={0x12b8, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x118, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{0x7, 0x4, 0x7}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x1ff, 0x7f, 0x2}, {0x401, 0x2, 0x1}}}]}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x3, 0x8, 0x6f}, {0x3, 0x1, 0x6}}}, @TCF_EM_CONTAINER={0xc0, 0x2, 0x0, 0x0, {{0x0, 0x0, 0xd}, "6e49d2a7621c1ca9c6dd6e8b9b115faba528a4b8ea4dfa4e3749de55c67b497cf857cc45258ee89a2c0060dee7bcce8e87288773b705ca60960d0b12a47906107d195530ba269c8ecb07d720d23f81473b70c62db9afcbc0e8a1349ee896804257124066279ccfff8afaef2c819851d65350b7c878999f31fe9b2394a281691503a2b940e25b156ebebc14fba52787ad9375d3e633ab610f4340f6341ecd4fcc75b8ae33b9ae8b9526ce7d787c948b49f9685043"}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x0, 0x7, 0x1}, {{0x2, 0x0, 0x0, 0x1}, {0x0, 0x1}}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x1, 0x1, 0x40}, {0x8, 0x69, 0x6, 0x7, 0x4, 0x2, 0x1}}}]}, @TCA_EMATCH_TREE_LIST={0x104, 0x2, 0x0, 0x1, [@TCF_EM_META={0xb8, 0xa, 0x0, 0x0, {{0x5, 0x4, 0x9}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xa4, 0x2}, {0x1, 0xd, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x6, 0x2}, {0x100, 0x5, 0x2}}}, @TCA_EM_META_RVALUE={0x21, 0x3, [@TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="b066e47e5861", @TCF_META_TYPE_VAR="eb828a754256", @TCF_META_TYPE_VAR="8c", @TCF_META_TYPE_VAR="ab4826fd", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x4]}, @TCA_EM_META_LVALUE={0x20, 0x2, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="afea10", @TCF_META_TYPE_VAR="faec7757cc3dbd15", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="f3", @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x98, 0xc0, 0x2}, {0x2, 0x4}}}, @TCA_EM_META_LVALUE={0xf, 0x2, [@TCF_META_TYPE_VAR="2ee4a6a37a1445", @TCF_META_TYPE_INT=0x4]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x3, 0x1}, {0xa2f, 0x0, 0x2}}}, @TCA_EM_META_RVALUE={0x1a, 0x3, [@TCF_META_TYPE_VAR="25d59c9ebb8792c396", @TCF_META_TYPE_VAR="4b3fe68620", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="e77d8aa7"]}, @TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x7]}]}}, @TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0x1, 0x2, 0x7}, {0x0, 0x3, 0x2, "0354d8"}}}, @TCF_EM_NBYTE={0x18, 0x3, 0x0, 0x0, {{0x9, 0x2, 0x600}, {0x8, 0x5, 0x0, "b7b274fa66"}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x2, 0x3, 0x3}, {0x8439, 0x10, 0x8, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x352e}}, @TCA_EMATCH_TREE_LIST={0x1060, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x3, 0x7, 0xf7dc}, {{0x1, 0x1, 0x0, 0x1}, {0x3, 0x1, 0x1, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x7fff, 0x8, 0x3}, {0xffffffffffffffff, 0x6, 0x6}}}, @TCF_EM_CONTAINER={0x100c, 0x1, 0x0, 0x0, {{0x8, 0x0, 0xffc0}, "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"}}, @TCF_EM_CONTAINER={0x2c, 0x2, 0x0, 0x0, {{0x3ff, 0x0, 0x1}, "f6b7996d7c549f26cf5643ee631e8d466ef5e6dda619d5f44bc39f6cf6b4f750"}}]}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x0, 0x3, 0x4c}, {0x3, 0xd59, 0xb74, 0x1}}}, @TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x6, 0x2, 0x10}, {0x7, 0x0, 0x1}}}]}]}, @TCA_BASIC_EMATCHES={0x258, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x24c, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x5, 0x7, 0xffff}, {{0x1, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}}}, @TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x4, 0x2, 0x9}, {0x5, 0x6, 0x0, "19ea4b99684e"}}}, @TCF_EM_CONTAINER={0x2c, 0x3, 0x0, 0x0, {{0x0, 0x0, 0x40}, "75e541351b103774668b16182c42b7d569009565d37c56ae4cee02bb0baf9e1f"}}, @TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x9, 0x2, 0x9}, {0x9, 0x6, 0x1, "454c71ff0e3c"}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x8001, 0x7, 0x5}, {{0x3, 0x0, 0x1}, {0x1, 0x0, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x6, 0x8, 0x7}, {0xffffffffffffffff, 0x4, 0x2}}}, @TCF_EM_META={0xb8, 0x3, 0x0, 0x0, {{0x80, 0x4, 0x1}, [@TCA_EM_META_RVALUE={0x13, 0x3, [@TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="c4527d", @TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_RVALUE={0x4}, @TCA_EM_META_HDR={0xc, 0x1, {{0x3, 0x1, 0x1}, {0x1, 0x8, 0x2}}}, @TCA_EM_META_RVALUE={0xc, 0x3, [@TCF_META_TYPE_VAR="b3716862", @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x3]}, @TCA_EM_META_LVALUE={0x2d, 0x2, [@TCF_META_TYPE_VAR="f5e8198e247d1193", @TCF_META_TYPE_VAR="3e742760da", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="c9c9b8c89f7424e9", @TCF_META_TYPE_VAR="0a4fa6bd9cd80d", @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="3908c1a5e8799a53b5"]}, @TCA_EM_META_RVALUE={0x22, 0x3, [@TCF_META_TYPE_VAR="c3", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="3fabc716aafa55", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="f8ff", @TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_RVALUE={0xc, 0x3, [@TCF_META_TYPE_VAR="1619802d", @TCF_META_TYPE_INT]}, @TCA_EM_META_RVALUE={0x1a, 0x3, [@TCF_META_TYPE_VAR="74be4c8a6a", @TCF_META_TYPE_VAR="b1abcdd375", @TCF_META_TYPE_VAR="6818796a", @TCF_META_TYPE_VAR="20f40e950c1c00af"]}]}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0xfff4}, {{0x2, 0x1, 0x1}, {0x2}}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x40, 0x3, 0x6}, {0x630, 0x9, 0x101, 0xff}}}, @TCF_EM_META={0xcc, 0x1, 0x0, 0x0, {{0x9, 0x4, 0xf}, [@TCA_EM_META_HDR={0xc, 0x1, {{0xb, 0x1, 0x2}, {0xec, 0x4}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x6, 0x2, 0x2}, {0x9, 0x7}}}, @TCA_EM_META_LVALUE={0xf, 0x2, [@TCF_META_TYPE_VAR="02ba71d5", @TCF_META_TYPE_VAR="08568d701f242c"]}, @TCA_EM_META_LVALUE={0x43, 0x2, [@TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="675b408c78bdaf79", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="11a24657d7", @TCF_META_TYPE_VAR="3803b5fe2db330dcc5", @TCF_META_TYPE_VAR="54a43943ed1baf8e09", @TCF_META_TYPE_VAR="878dfffa423517", @TCF_META_TYPE_VAR="71ac764e00810e84df", @TCF_META_TYPE_VAR="578be0dbc95c8f99"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x8}, {0x9, 0x1, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x4}, {0x200, 0x8, 0x2}}}, @TCA_EM_META_RVALUE={0x18, 0x3, [@TCF_META_TYPE_VAR="0a4d22588231c6b11c7c", @TCF_META_TYPE_VAR="daebf35ee2035bb215a4"]}, @TCA_EM_META_RVALUE={0x21, 0x3, [@TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="e5494c64", @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="fe424bf442b9384eb8"]}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}, @filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_XOR={0x8, 0x7, 0x200}, @TCA_FLOW_RSHIFT={0x8}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x7}, @TCA_FLOW_XOR={0x8, 0x7, 0xa93}]}}, @TCA_RATE={0x6, 0x5, {0xf7, 0x2}}]}, 0x172c}}, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c00068008"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 4m3.994544694s ago: executing program 4 (id=1380): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r1, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB="6000000010000104000000000300000000000000", @ANYRES32=r1, @ANYBLOB="24200400858d0000400012800e00010069703665727370616e0000002c000280060018000100000005001600020000000400120014000702fc020000000000000000000000000000c564fa97d89a16bf643604a9d151baa230aec5b0b5a6a68871392bce1787d13f3cff5c6350d1168894d7aba7032051d8c3c7acb236d873b12af6ab27961c5dd4fd772522adda1a78923af2e470304f6eb2e52b16178d7d1dca7558019f533670b10bf9ec4d84"], 0x60}, 0x1, 0x0, 0x0, 0x4c014}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r5, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB="14000600fe8000000000000000000000000000aa1400070000000000000000000000000000bb"], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c0000000800124000000000050005000a000000050004000000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0) (async) sendmmsg$inet(r3, &(0x7f0000000c00)=[{{&(0x7f0000000040)={0x2, 0x4e25, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @multicast1}}}], 0x20, 0x3f}}], 0x1, 0xc0) (async) setsockopt$MRT6_INIT(r3, 0x29, 0xc8, &(0x7f0000000000), 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001680)=ANY=[@ANYBLOB="580100001000030400"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES8=r7], 0x158}, 0x1, 0xba01}, 0x44) 4m3.846021066s ago: executing program 4 (id=1384): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x6d93, 0x4) socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e20, @empty}}, 0x7, 0x1e10, 0x4, 0x5, 0x30, 0x8, 0x8a}, &(0x7f00000004c0)=0x9c) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r4, &(0x7f0000000400)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x2, @default}, 0x1c) r5 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000180)=[{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000000)="1258b7a7499068", 0x7}], 0x1, &(0x7f0000000600)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x48001}], 0x1, 0x4044800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)=""/96, 0x60}], 0x1}, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000854}, 0x20000040) r7 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) ppoll(&(0x7f0000000200)=[{r7, 0xa040}, {r0, 0x5061}, {r4, 0x4001}, {r1, 0x8}, {r5, 0x2}, {r0, 0x440}, {r1, 0x2100}, {r6, 0x20}], 0x8, &(0x7f0000000480)={r8, r9+60000000}, &(0x7f0000000540)={[0x6]}, 0x8) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r5, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x1) sendmsg$sock(r0, &(0x7f0000000780)={&(0x7f0000000300)=@in6={0xa, 0x4e23, 0x41a, @mcast2}, 0x80, 0x0, 0x0, &(0x7f0000000040)=[@mark={{0x14, 0x1, 0x51, 0x1}}], 0x18}, 0x80) 4m3.514954547s ago: executing program 4 (id=1386): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socketpair$unix(0x1, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000080), &(0x7f0000000240)=r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@ipv6_getaddrlabel={0x50, 0x4a, 0x4, 0x70bd2b, 0x25dfdbfe, {0xa, 0x0, 0x80, 0x0, r3}, [@IFAL_LABEL={0x8, 0x2, 0x2}, @IFAL_LABEL={0x8, 0x2, 0x5}, @IFAL_ADDRESS={0x14, 0x1, @remote}, @IFAL_LABEL={0x8, 0x2, 0x1}, @IFAL_LABEL={0x8, 0x2, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 4m3.279671s ago: executing program 4 (id=1389): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x48, r1, 0x300, 0x9, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xfffffff3, 0x19}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x80000001}]}, 0x48}}, 0x20004080) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80001, 0x81, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x404c005}, 0x4000040) 3m48.205217674s ago: executing program 32 (id=1389): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x48, r1, 0x300, 0x9, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xfffffff3, 0x19}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x80000001}]}, 0x48}}, 0x20004080) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80001, 0x81, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x404c005}, 0x4000040) 2m26.042766251s ago: executing program 3 (id=2830): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) socket(0x1d, 0x3, 0xfffffffe) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYRES8], 0x18}, 0x1, 0x0, 0x0, 0x40000d4}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0xc}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000079108700000000001e000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8}, @NFTA_BYTEORDER_DREG={0x8}, @NFTA_BYTEORDER_LEN={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000071106d00001000009500000000000000000000000000000031b1fec07ada0dd22e15b15be212ce92a230f01fafa06a99432534e45f56c9f6cf73a1c3050000008047c0e7d8946e627466cee64f38bb8999064da3acce222a6a17fd1eda075cca883d8782b01a8c465ca9956e2d3e4b3252b92621e0eac71a07eafd2d8798d2560e588273af4bf9f13e95c09f55f565ff1f9f6a9afaf37dedc6194ff1bb2c0da7438fdfbdee11460af478e3155958780f2729b4806bc7cdbaf63dda652d99b7479c99da20e97308786d89816c81c5fb1bdbc7bc7a8789198449ea354e3885ceab51455f530000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) 2m25.098867589s ago: executing program 3 (id=2846): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r2, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000300)=r3}, 0x20) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000000)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r4, &(0x7f0000000400)="e8", &(0x7f0000000480)=@tcp6=r1, 0x1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x5, 0xe, 0x0, &(0x7f00000003c0)="000000000000000000000001e370", 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000ad8000000060a010400000000000000000a0000010900010073797a3100000000ac00048020000180070001006374000014000280080002400000000d0800014000000009540001800a00010072656469720000084400028008f101400000001108000240000000170800034000000061080003400000000608000140000000000800024000000008080002400000000f08000340000000303400018011000100666c6f775f6f66666c6f616400ffff001c0002800900010057797a32000000000900010073797a31000000000900020073797a32"], 0x100}, 0x1, 0x0, 0x0, 0x8001}, 0x24000000) 2m24.879655897s ago: executing program 3 (id=2849): r0 = socket$netlink(0x10, 0x3, 0x9) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x11}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0xc, &(0x7f00000000c0), 0xfff1}, 0x90) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r5) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000600)=@getsa={0x34, 0x12, 0x1, 0x0, 0x0, {@in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0xa, 0x6c}, [@mark={0xc, 0x15, {0x0, 0x7}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000180)={0x1f, 0x4, 0x3}, 0x6) setsockopt$inet_int(r8, 0x0, 0x13, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, r6, 0x7ad71c5c2912d839, 0x70bd29, 0x25dfdbfc}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000000c0)={0x2c, r2, 0x1, 0x0, 0x25dfdbfc, {0x25}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x9}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0xfffffffffffffff1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4815}, 0x4008084) 2m24.831786096s ago: executing program 3 (id=2851): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x401, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b, 0x14218}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY_RESELECT={0x5}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000001c0)={0x0, @broadcast, @initdev}, &(0x7f0000000280)=0xc) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008080}, 0x4048806) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r4, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x8000000}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa6}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008845}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a40000000060a0b0400000000000000000200000014000480100001800b00010072656a65637400000900010073797a3000000000090002007a3200000000140000001100010000000000000000000000000ae811d7f5114e50a7bd7ad08ca0f3b00c448f594471b2cd2986"], 0x68}, 0x1, 0x0, 0x0, 0x34028800}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) (async) syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x401, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b, 0x14218}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY_RESELECT={0x5}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000001c0)={0x0, @broadcast, @initdev}, &(0x7f0000000280)=0xc) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008080}, 0x4048806) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r4, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x8000000}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa6}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008845}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a40000000060a0b0400000000000000000200000014000480100001800b00010072656a65637400000900010073797a3000000000090002007a3200000000140000001100010000000000000000000000000ae811d7f5114e50a7bd7ad08ca0f3b00c448f594471b2cd2986"], 0x68}, 0x1, 0x0, 0x0, 0x34028800}, 0x0) (async) 2m24.535752424s ago: executing program 3 (id=2854): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x2, [@enum64={0x9, 0x6, 0x0, 0x13, 0x0, 0x1, [{0x9, 0x6, 0x4}, {0xe, 0x9, 0xfffff800}, {0x4, 0xffffff9d, 0xfffffffd}, {0xd, 0xf, 0xb4b2}, {0x6, 0x8, 0xb79}, {0x8000000b, 0xd3d7, 0x80000001}]}]}}, &(0x7f0000000100)=""/141, 0x6e, 0x8d, 0x1, 0x7}, 0x28) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180800ec0c00000000000000000000001801000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x4c000) (async) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000380)={'syzkaller1\x00', @link_local}) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x1, 0x70bd2f, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x102, 0x1400}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x81, 0x5a1, 0x7fff}}]}]}]}, 0x4c}}, 0x24040800) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) (async) r4 = socket(0xb, 0x800, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000004f00010000000000000000080001"], 0x1c}}, 0x0) 2m24.167333285s ago: executing program 3 (id=2860): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ppoll(&(0x7f0000000080)=[{r1, 0x409c}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={0x14, 0x26, 0x301, 0x70bd2b, 0xffbffffc, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x800) 2m9.128972113s ago: executing program 33 (id=2860): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ppoll(&(0x7f0000000080)=[{r1, 0x409c}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={0x14, 0x26, 0x301, 0x70bd2b, 0xffbffffc, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x800) 51.618912827s ago: executing program 1 (id=4010): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r1 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000080), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f00000011c0)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRESHEX=r0, @ANYRES16=r0], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f00000001c0)=""/222, 0x41100, 0x7c}, 0x94) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$tcp_mem(r3, &(0x7f0000000140)={0x5, 0x20, 0x6, 0x20, 0xe4bb}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0ffc40bffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400210000000404000001000000b7050000220000006a0a00fe00000000850000000b000000b7000000592000009500000000000000a3028cb5af6c8f5d76781dcb7729f0170720596bb3b4d821d976f5843061cc2e3afbae82d7932d192321fa3b3042f100"/172], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0xa002a0, 0x10, 0x18, &(0x7f0000000000)="5ae02efc441a80536af0d1d905c723fa", &(0x7f0000000040)=""/24, 0x6414}, 0x28) write$cgroup_subtree(r3, &(0x7f00000002c0)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x89f2, &(0x7f0000000280)={'ip6tnl0\x00'}) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @broadcast}, {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) write$tcp_mem(r2, &(0x7f00000003c0)={0x2, 0x20, 0xfffffffffffffffe, 0x20, 0x8}, 0x48) getsockopt$bt_hci(r1, 0x84, 0x22, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000001100)=ANY=[@ANYRES64=r1, @ANYRESHEX=r4, @ANYRESHEX=0x0], &(0x7f0000000040)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) 51.256685911s ago: executing program 1 (id=4016): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0xd2}, 0x9c) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000340)="480000001400190d09034beafd0d36020a841afeff00230f00000000a2bc5603ca00000f7f89004e00200000000101ff00c00e03000200000000000000000300005839c900910000", 0x48}], 0x1) 51.018031557s ago: executing program 1 (id=4020): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x20, 0x0, 0x0, 0x0, 0xc8, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x8}}}}]}, 0x38}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x6c}}, 0x0) 50.955735736s ago: executing program 1 (id=4021): syz_emit_ethernet(0x42, &(0x7f0000000300)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@ssrr={0x89, 0x7, 0xfa, [@remote]}, @generic={0x7, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) (async, rerun: 64) r0 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001480)=@newtaction={0x6c, 0x30, 0x83d79f1e8021ba05, 0x0, 0x0, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x20000000}, @rand_addr, @multicast2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 50.853723082s ago: executing program 1 (id=4023): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x27dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xb}, {0x5, 0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1000, 0x0, 0x97, 0x1, 0x4, 0xffffb614, 0x2, 0x1000001, 0x40}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x240048e1}, 0x4008000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000400)={'syzkaller0\x00', @broadcast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@local, 0x9, 0x1, 0x3, 0x8, 0x4}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, &(0x7f0000000100)) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 50.654704759s ago: executing program 1 (id=4026): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001c0000000000000000000000711207000000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @cgroup_sock_addr=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000260001032bbd7000fcffbfff010000007e4068db85719938d35ba0630fc2ffd8b8df9623d1215b3df6da3991e6ec0d762ef7d58bdcda72d2a36c1df5eb3c3cea69b48d76cb957f42f83d9c8020939ac945b690c2a20d13d593af459fbd90e4652d6ca8ab5f40565659423ec2179d23faeaaad18f8f7de4d9e9c73c03ca"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x800) 35.631177432s ago: executing program 34 (id=4026): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001c0000000000000000000000711207000000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @cgroup_sock_addr=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000260001032bbd7000fcffbfff010000007e4068db85719938d35ba0630fc2ffd8b8df9623d1215b3df6da3991e6ec0d762ef7d58bdcda72d2a36c1df5eb3c3cea69b48d76cb957f42f83d9c8020939ac945b690c2a20d13d593af459fbd90e4652d6ca8ab5f40565659423ec2179d23faeaaad18f8f7de4d9e9c73c03ca"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x800) 2.266340177s ago: executing program 0 (id=4686): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x8, 0x10002, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xc, 0x4, 0x4, 0x9, 0x4643c, r0}, 0x50) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000001740)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0xfe}}, 0x1c, &(0x7f0000000580), 0xe}}, {{&(0x7f0000000600)={0xa, 0x4e1c, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}, 0x1c, &(0x7f0000001480)=[{&(0x7f0000000a40)='~', 0x1}], 0x1}}], 0x2, 0x0) (async) shutdown(r2, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000002c0)={0xf21b, 0x4, 0x8000, 0x4, 0xffff, 0x4, 0x9, 0x4}, &(0x7f0000000380)=0x20) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00', 0x0}) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) (async) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@ipv4_deladdr={0x0, 0x15, 0x200, 0xf0bd26, 0x25dfdbfe, {0x2, 0x40, 0x0, 0xfd, r5}, [@IFA_TARGET_NETNSID]}, 0xdb}}, 0x4000) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r5}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) (async) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) (async) r8 = syz_genetlink_get_family_id$smc(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, r8, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20009080) (async) sendmsg$SMC_PNETID_DEL(r7, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r8, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) (async) r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) r11 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r11, 0x89e2, 0x0) (async) bind$xdp(0xffffffffffffffff, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) ioctl$sock_netdev_private(r10, 0x8914, &(0x7f0000000000)) (async) ioctl$sock_netrom_SIOCADDRT(r9, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0xfffd, 'syz0\x00', @default, 0xfffffdb8, 0x2, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) (async) socket$alg(0x26, 0x5, 0x0) (async) ioctl$sock_netrom_SIOCADDRT(r9, 0x890b, &(0x7f00000001c0)={0x0, @null, @bpq0, 0x2, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$SIOCAX25DELFWD(r7, 0x89eb, &(0x7f0000000380)={@bcast, @null}) 1.934631229s ago: executing program 2 (id=4692): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FIONCLEX(r0, 0x5450) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) recvfrom$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) pwritev(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0xffffffff, 0x2) r2 = socket(0x26, 0x5, 0x5) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000040)=0xe, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYRES64=r1], &(0x7f0000000000)='GPL\x00'}, 0x94) 1.722870149s ago: executing program 0 (id=4694): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000b40)=@nat={'nat\x00', 0x62, 0x5, 0x3c0, 0x188, 0x188, 0xffffffff, 0xe0, 0x188, 0x328, 0x328, 0xffffffff, 0x328, 0x328, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0xa8, 0xe0, 0x0, {0x22e}, [@common=@unspec=@statistic={{0x38}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x2, {0x9, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @port, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @rand_addr, @broadcast, @port, @gre_key}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'nr0\x00', 'macvlan0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key, @icmp_id}}}}, {{@uncond, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@unspec=@state={{0x28}}, @common=@icmp={{0x28}, {0x0, "6e82"}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x420) (async) r1 = socket(0x1d, 0x2, 0x6) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) (async) r3 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x33, 0x10000, 0x2e, 0x100, 0x7, 0x3, 0x0, 0x0, 0x401}}) (async) recvmmsg(r2, &(0x7f0000004f80)=[{{&(0x7f0000000a00)=@ax25={{0x3, @default}, [@rose, @netrom, @default, @bcast, @default, @default, @rose, @null]}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000005180)=""/4110, 0x100e}, {&(0x7f0000000a80)=""/145, 0x91}, {&(0x7f0000000b40)=""/192, 0xc0}, {&(0x7f0000000c00)=""/214, 0xd6}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000d80)=""/104, 0x68}, {&(0x7f0000000d00)=""/54, 0x36}, {&(0x7f0000000e00)}, {&(0x7f0000000e40)=""/101, 0x65}, {&(0x7f0000000140)=""/67, 0x43}], 0xa, &(0x7f0000001000)=""/174, 0xae}, 0x10}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/59, 0x3b}, {&(0x7f0000001100)=""/172, 0xac}, {&(0x7f00000011c0)=""/37, 0x25}, {&(0x7f0000001200)=""/199, 0xc7}, {&(0x7f0000001300)=""/232, 0xe8}], 0x5, &(0x7f0000001480)=""/17, 0x11}, 0x5}, {{&(0x7f00000014c0)=@ieee802154, 0x80, &(0x7f0000001580)=[{&(0x7f0000001540)=""/8, 0x8}], 0x1}, 0x5}, {{&(0x7f00000015c0)=@nl, 0x80, &(0x7f00000027c0)=[{&(0x7f0000001640)=""/12, 0xc}, {&(0x7f00000026c0)=""/255, 0xff}], 0x2, &(0x7f0000002800)=""/181, 0xb5}, 0x7f}, {{0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f0000005100)=""/101, 0x65}, {&(0x7f0000002940)=""/217, 0xd9}], 0x2}, 0x2}, {{&(0x7f0000002a80)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000004ec0)=[{&(0x7f0000002b00)=""/229, 0xe5}, {&(0x7f0000002c00)=""/4096, 0x1000}, {&(0x7f0000003c00)=""/89, 0x59}, {&(0x7f0000003c80)=""/156, 0x9c}, {&(0x7f0000003d40)=""/4096, 0x1000}, {&(0x7f0000000000)=""/1, 0x1}, {&(0x7f0000004d80)=""/29, 0x1d}, {&(0x7f0000004dc0)=""/124, 0x7c}, {&(0x7f0000004e40)=""/74, 0x4a}], 0x9}, 0x7}], 0x6, 0x20, 0x0) (async) write$bt_hci(r2, &(0x7f00000008c0)={0x1, @le_read_remote_features={{0x2016, 0x2}, {0xc9}}}, 0x6) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x5) (async) r4 = socket(0x23, 0x5, 0x0) sendmmsg(r4, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, 0x0, 0x0) 1.72156327s ago: executing program 6 (id=4695): socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) unshare(0x20020400) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="1818000004000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x5, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x3d) sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x40, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xe, 0x6}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x7, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x48cd}, 0x4000080) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r10, 0x400, 0x70bd29, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000015}, 0x10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x48) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000004000000040000000300000000000000", @ANYRES32=r12, @ANYBLOB="0000000000000000eeffffff0000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r13}, 0x38) sendmsg$NFQNL_MSG_CONFIG(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000240)=@o_path={0x0, r14}, 0x18) sendmsg$NFQNL_MSG_VERDICT(r11, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000580)=ANY=[@ANYBLOB="20000000010301000000000000000000020000000c000200fffffffd00000000"], 0x20}}, 0x44) 1.688021833s ago: executing program 7 (id=4696): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) (async) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) (async) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000), 0xe) (async) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) (async) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000201000030500000000030700000000de00", @ANYRES32=0x0, @ANYBLOB="20020400061000001c0012800b00010062726964676500000c000280060006000180000008000a00", @ANYRES32=r3, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 1.546690467s ago: executing program 7 (id=4697): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="580000000206050000000000000000000000000005000100070b00000000020073797a30000000080c000780080013000000000014000300686173683a69702c706f72742c69700005000500020000000500040000000000699691"], 0x58}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1000000100000000000000e70700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) close(r1) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4f20, @loopback}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) sendmmsg$inet(r3, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) listen(r2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r5, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r2}, 0x20) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x7, &(0x7f0000000180)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f00000001c0)={0x8, 'veth0_to_bond\x00', {'team_slave_1\x00'}, 0x85}) ioctl$sock_ifreq(r0, 0x19b95, &(0x7f0000000080)={'rose0\x00', @ifru_addrs=@llc={0x1a, 0x23d, 0x4, 0x7, 0x2, 0xff, @remote}}) 1.369913705s ago: executing program 6 (id=4699): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) (async, rerun: 32) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) bpf$LINK_GET_NEXT_ID(0x24, &(0x7f0000000080)={0x2}, 0x5) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "12ad"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x48, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\r\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 1.353169402s ago: executing program 7 (id=4700): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0x20}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x90) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000880)=@ipv6_delrule={0x1c, 0x1e, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, 0x1c}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4040010) 1.194747308s ago: executing program 6 (id=4702): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000040)={0x3, 0x5, "3076a3f5f9"}) close(r0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in=@dev, @in6=@ipv4={""/10, ""/2, @private}}}, {{@in6=@private0}, 0x0, @in=@multicast1}}, &(0x7f0000000180)=0xe8) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f00000001c0)=0x30, 0x4) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000200)=0xb, 0x4) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000240)={0x0, 0x5}, 0x8) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000280)=0x4, 0x4) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000400)={&(0x7f0000000300), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, r2, 0x2, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x10, 0x13, @udp='udp:syz0\x00'}}, ["", "", "", "", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x200008d0}, 0x20000004) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f0000000440), &(0x7f0000000480)=0x4) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000004c0)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000500)=0x14) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000540)={r3, 0x2}, 0x8) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x6) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r1) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x4c, r4, 0x8, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x4c}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x80) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000700)=0xffffffff, 0x4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_REMOVE(r5, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x7c, r6, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MLSLVLLST={0x58, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4dff7369}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x748b3890}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x75}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5ee48f0c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x74}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4f3b5fa9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x44}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xaf}]}]}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x800) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000008c0)={0x0, 0x40, 0x30}, 0xc) connect$bt_rfcomm(r1, &(0x7f0000000900)={0x1f, @none, 0xa0}, 0xa) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000940)) r7 = getpid() syz_open_procfs$namespace(r7, &(0x7f0000000980)='ns/uts\x00') r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000001080)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001040)={&(0x7f0000000a00)=@ipmr_newroute={0x614, 0x18, 0x20, 0x70bd28, 0x25dfdbff, {0x80, 0x20, 0x80, 0x81, 0xfd, 0x3, 0xfe, 0x8, 0x400}, [@RTA_ENCAP={0x5f8, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x5f4, 0x1, {{0x2, {0x8, 0x2, 0x4, 0x1, 0x0, 0x40, 0x3000, [@empty]}}, [@private2={0xfc, 0x2, '\x00', 0x1}, @local, @dev={0xfe, 0x80, '\x00', 0x41}, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @multicast1}, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, @ipv4={'\x00', '\xff\xff', @loopback}, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, @private0, @mcast1, @dev={0xfe, 0x80, '\x00', 0x20}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00', @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, @dev={0xfe, 0x80, '\x00', 0xd}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, @private0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, @rand_addr=' \x01\x00', @private1={0xfc, 0x1, '\x00', 0x1}, @local, @private1, @mcast1, @private2, @remote, @mcast1, @dev={0xfe, 0x80, '\x00', 0x13}, @empty, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, @dev={0xfe, 0x80, '\x00', 0x3b}, @private2, @mcast1, @private2, @private2, @mcast2, @local, @mcast1, @local, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, @remote, @dev={0xfe, 0x80, '\x00', 0xc}, @mcast1, @local, @dev={0xfe, 0x80, '\x00', 0x19}, @mcast2, @ipv4={'\x00', '\xff\xff', @remote}, @remote, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x14}, @remote, @empty, @mcast2, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @rand_addr=' \x01\x00', @local, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, @private0, @mcast1, @mcast1, @mcast1, @ipv4={'\x00', '\xff\xff', @empty}, @private1, @dev={0xfe, 0x80, '\x00', 0x2d}, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, @loopback, @mcast2, @ipv4={'\x00', '\xff\xff', @multicast2}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}}}]}, 0x614}, 0x1, 0x0, 0x0, 0xc800}, 0x4040000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001140)={{r1, 0xffffffffffffffff}, &(0x7f00000010c0), &(0x7f0000001100)=r1}, 0x20) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000001180)=0x400000) 1.163820573s ago: executing program 7 (id=4704): r0 = socket(0x1d, 0x2, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) (async, rerun: 64) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f00000000c0), 0x4) (async, rerun: 64) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @private0, 0x100000}, 0x1c) (async) sendto$inet6(r4, &(0x7f00000001c0)="a6e2976b", 0x4, 0x840, 0x0, 0x0) (async) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x9, 0x12, r2, 0x9a903000) (async, rerun: 32) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, 0x0, 0x0) (async, rerun: 32) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x1, 0x0}, &(0x7f0000000300)=0x40) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000090000000a20000000000a05140000000000000000010000000900010073797a300000000058000000160a09000900000000000000010000000900010073797a30000000000900020073797a32000000002c00038018000380140001006d6163736563300000000000000000000800024000000000080001400000000014000000110001"], 0xa0}}, 0x0) (async) listen(r3, 0x8) (async) r6 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={0x0, 0x4}, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) (async, rerun: 32) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (rerun: 32) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c) (async) setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000000)={{0x84, @multicast2, 0x4e20, 0x3, 'wrr\x00', 0xd, 0x81, 0x2e}, {@rand_addr=0xac1414aa, 0x4e1f, 0x0, 0x1cb, 0x12d5c, 0x12d59}}, 0x44) (async) sendmmsg$inet(r7, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x1}, 0x8) 1.04289673s ago: executing program 6 (id=4705): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000e27f000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000134c2651638af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000e80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000200)={0x34, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_TX={0x8, 0x9, 0xfffffffe}, @ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x34}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xfc0, &(0x7f0000001c00)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfb2, 0x6, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xf9e, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd, "9c67524ed6ed152d4f775bbc411126513b67aa2818e6f3aeb55bee6ae1049f195705bc8bd9b1085cd41af77353267df8a1d4cecdb01908186ea04e641c89a2ee0432e9c0894a8d7aff0c865e96548d507f048f907320b0f8b1e83b5f1425b63ad9c6adfd09578bbda92c9bd8f57d6efd752a6f20487ebea241d612212e3ccb077a5150c08f56aed6ee45acd4439043886b78cc5562b00bc57cf509d90b02a7bc86919f1b882f556e6aac5e9b93ee545b2b68bd014e2a49c332432ef4adeb61ac418aa4e20ee299f1a8b7a72e985223996b11a8913f3b1c23b10f88c3de28660457a37126fd3b6394536da0cd962f532ff22c496e1df4ffe049b193514c02571399d3618383a287068f4f15d51d1781cc0bc2af66ddc68135bfd33634e1a75be80630ce76ef79c86c9abb2fdc6d84367ea10fd8a6ee3c99eaec83c66bf5ffce6eb5ccc2546b6df905ff1aea223029ba2f7eb2469c5b8637b79347361f8cf0fa9d58a039e7811f343961b22c23d68b2c04eb8b5aeee7c6f71ce95cab886bf2694e0643d18761043e2d1dcb8ce0bdd15817a75f591b05146424797f729689e2a7bd53cb6c02fd15c339057c714794b407b342d12e69ec383b6ea6c99f845d04fd5128203c78a388fb0a1caf1f725f7636eb41e415951f8284a9c475760eb9312f7d6307037d472fbda509d56a0cf8e36d44f3f0b67fabdd2842ab4241cbfc7d309188d3a634129a13bfcac3b39b75d46bed585550ff7b41746dfd7e0f0c8a25e9f39deb7e2a4f0e068b86c6593b3b37838d2809eef3eb2f3120fde2fe3e9fef4e4bea1ddf3d17c40f753b37baaa110a8b4ad805d500e0235e9371b828993da25c5697d1001c8971b3862eef047730b242350403c851cd74cdea94501c0e2875a5830aa71733a0f022cb37e1cfffaee8eb0a23d51181a0691dadcd6b30a86a5fbf5c499120e265938f6430ffde09eb173327c2e25bdf22ae0d742141db856c4beee07af0ce37c078f6e59b41a29502cc01737c984185f6622a3ce02ed04daf2a7eb03c92a5a5ecce5973ef704aba9efcb99bf52f5c662d52f4399a13af760f9f9ff3d5930c3fae014b92ee0aded4ba51d95cf946d5f55f5b5d4603f8b76087d681ad77fc385fe114331c24a4ada85eaebf5405467dbe656b31b79a0f893864a13bda309a2fec2f4fc4858d9daf946df31f4077338bfc3116a45827ce8907ad691d241d3a8859a3672aeee3878e45b0be6f68194638dee30ba6735a6424e51f8b9a4965d37ab7ca96e167a5c32c8a935ff34693e24d067039db0f4ffe4dc5fe7c56a0d6e52a7cef9a6f1cc8b88d61d2258e3e0e8f2d7b699d4a22ab661f6afae5b48cc8fbc9ddfe57e76f274e65b210994fd96cd4deb6fdb795df4147ca0d876b1b08b64d20a28a358f48086c0f8d1f0741260f95adabba51f2d3f36107d49d46ba0c666232597bf08bfab60b5a432a1652e2c503fcf977ea6ff15c8e8f3bd9b7a3017c36be787d5a6579f5236b17d7bdc2c3918d9257e266bdf7929bb366d98d2b225c08c3c5ed22113b8c051c811bd1e52ecbe619dbc9579270c7cf69ac129e84a7141e689d9745d56e1cda6affdc1856757a6e39039b17d5286cf393186b99b20c54987087ece9972c39b4a05f1ca218c35254c666e7fcb7df4aa401cc79e1aade63732064ca80af164709a85fcf8ac72fa5ace60aa04d2ee0d5f051cb032f7c25100facb7ec1c247812b0de4f1c3c1ab98f904d9752cc427bc0445d8e27b51d5a8084087ea61f82ccc1114679f673753eddc7cfc00ba7e25db3391579ecdf638ab73078133e49b522d3d16bf2ebd06e7cefc24154088965ad3c9291c68f19f7cdd2943abc716ecf0b33fe249108da2b1f9abdbcb4dba89746a8c5711a41556efe5537327e253bd9ac68dc56516392292152b86ef118e25cac4e3c7c2b20bbc5bbc2d825c8dc14e9807aa6a423fdebfa7deee913c8f9f58bd967d43af1d65dc5ce72b2cd1a17ce34facd199bf2c62beeb752d156d6f31ea0323bc3ec0500587c485d8141f5b5ac81457df9396fbf98222212ef70527b6ed8d6e4d11156c8ecaee4692e068a72cb3b12686436028a7297956c48ee8fc393907edd3695fddbb786808c0a48182e3334e73fedcef0ee1bfbb13dce8a79b8822fd1ca0ed645f64d134c240844be5a7ac3aa15419ae79e7b1d721ae5abe1b0896c6189f23b65d79f5c3677b89f40aceff98dfca244a160dff264a2b14a3774064e1152fe0cabfc23e3e16dba5f46ea6af09fb3b8529022837c7e9303e3ecd0170fcc0e6fb0f3981d9f8f838412eae1a3dd13b7a980a642739e8abebed29db34c06460f09e27ddba1ed76b4ac6290235f6f81fcd3eb12af9821575b050aaf80d5c6c695807f7480f24e4bc0159744f9045a2d37574508d7e687482f775d0a4c471c4914e6a64b0d444037407b8d079751ddf4b14ed0ee6f1e622952a331a1a147f3a805fb7ca29c3c7feb2dddd0db795ac0ca327d95b19ff37bd8d553703014e5137f8c41b947d199f95f245d3354f9679876db736da5cfbd7cb9f80a12e50c895b999b670c9e161aa12e82c79d98fed5017e11674158a2f258ecc7c550f10dee6bb9d159316c567e3973e8aa30f157f6d30f239877021e7161c0a93c7b6bedccc7a3d8c9313f6f860d33ae0c162236853ae29d7a619bc306998e51c5d91a73475119a648700fbf3a41701ef87b440b83573a44339aea5806c0883470613e38baa518466dee2c671d96768f8d842feb5a812ea3ecd1e307a913a1032f06af2656b0a969b38366c39ca149205540391f36c897efb80aa43707c12e21544386fc232a45c9eb40a64c35edd4db20bd4970d642c0c2a0ee43ce8bf4d1bd84b3c3fa198cfc8d1f83960a1c3cd85a164926dc962a9078c5b079e0f4bb0b4e94b0aec3d13e7c47edc936927da2e6e7fe9485b0489bc4fdd1699611aeb00d767057602b8e53dfb4a6651c0f2873e5f60fdd7e2542d6aba79f491f87522f77427323e87386c89e1df9dd6e4f32be85c9eefbd6e6b177dde573b0d0bb8df828185aedc7aba2e6c3d4d9df393b203c1147f005860a6dd44dbcebead0eeb29fe3216930ef4a5994a93851df960d3be82d4294b64ba8295a59d099fd10afe39c2a79727a5447fa27909d53df6a00a63897261619e853036a6852e95ac6da62276007f2f3f386267cd8a0d136e645247e76db84e466e56ba42618b4fdef3e6d8c48dae5d03e1e369cd74042146e361cd6b4e654c8adc75446c454d3275a7d91646c4fb721966df9df3f761f10bebd212bfc87db9c48ffa0c6efcb17db3955f4a6f58919a036cda4f0a0c07a7306d2909adeeb474bd0bbec58865c4a5804108a014838673ff26438c162ec61e71bb880b154d475c71d500bfda3128b9fac2bccecb790dbd3075f424b1244f111c7eb5cbb7af0b6f3ec9cac20f82b1631822b940c03d697e213747627a5a7ed57414f2826888e515b88e61e69b742b053fe086ffc916abe00a41870cd332201d96c96bd174b369094b0da81ddc50affefa3709a358a5c00308d30a41d10b1c3f91a011bd246588336ff76dd60c10c3bbc8eec06adb3e73cc21d218b83eb9306e0650dd4e41bd65e15bb99a0653fc312251c174abed9e3ed04ef0378feaf78d839ebf61fda85c290f140cd3690cff881c348c57f504c50ca61986b29e58fdb0cbe276e42c982154762110c0f65b240aebe4291c66157629f0a45ea48e8e6a5dfe062214d635c5f828d1c888ec83a279ddac80f748c00e984248bef8e884590dcc1322aceb2d3b525618450fa0649e4ae8722769c6a32eb47161f7bf08bd59f903240ab9f790313b41607554b21ce45f10cde937f9f68fbb23ace0eaebd86b1201ea230c7f4c57f6594e655904db2a6d3d294f98fe630a524573f52c145b19eea382bc3adac7c7b62863bfa04f2d9fb9b93e7cda0fff4af897281580b879912ebd2c9c9d433ef479e886a477ce4538590179049aaff5e8e51b25db6c0300393a37c25c350e1e4effdd657f26de15199d39e134d1e7fe278b68377674a0e31a12e67096d44f62bd0353147041050fe44d9fbfc95fa8aa368e5868148a9e7a6f5551cf55f677b48ac2b4cd29a300d3cb9cd3a5ef486b9b3138018fb1568ce3f59385b98e93b7113dc85cd242bb57e545d6c151727d1c33ced565b2e29419bc6c458b45ab2107a55793618d20bd476e81ff79543cbace7b26a53a67a3f17ad0e2f2c0cc55f45d374ddc3cf8ada0c52cf1251cc4a6e1c7e84a1536cf328a0a392a3b79bbef1b40ad6e69811f3ec73b971c7cf6d64bfd0b183135d76fbb121aa99c753dce310f3288d460a1158a0c1c2ca4a66eadb38c6669dae4742a1da14b007555ffdae4e60f535ee23018dde93863b028346edc0f8da3ee5208b06fb107e921492ed9f2f2064d865afb5f955c80b1a6c5dbc540f1af7dd68925353d288fce304243f09d1791661027ea11f21ade9abb81a71343f1d405f35b01a504a99e08514f3b8307dce0b7c4305c0e531a538c6c11d8021183a87c2de3e1e384d114559601b948359f153d9845067683d8ef3dc75829a46211368ddf4837c021bf3ba1cc8005ab6902e094635f86f2f090851d5ac0af51c3aec46bdf9024ebe196351e2acd483f71821f033aa02d7bdee2fe987412bda115a5ce7f51dfdb78ce378485801fa10180339d3c5372a65cc46d2f0ef8ad3317062af5c243f81d920075e4874ea69081ba22d8be502422e973128c657da28f4f63d34919b5a4663544e244524263bae0a9a6c7455a16b5b860aedea7a2ea87abb402e151461d8310d05dd611e063e278628420a3f7bf0fd9acfb6dc82741cb588b4d1d8a5b2b5db58e052b07c4e354034842102305c0b070dbe2cea7a59b306054ffcb08432c67d272f40d6d9f42826ed660e6558f80f8522499e0f89335c18297ee395bcbf0ad1af122434e9319177f9ad9c5c140841551733282f74ea025e4e3c4ae11dc64df48497d747ab0d08a2de58abff2242c6267a7498b7ae4fc1ebabc8dc5ede8a053000fe8af5ade0f6868c22d4b2602c36cfc3605a616850973edcc5ebec3e18dea4a4e3f4e11f1c979991b636233ae70f0cb42d592e5bc5b7b3773820b22c386f365738d4ba6a0e76e6e5ab480a77336b394fc807950df4939f6dda4cf088b318660da8b487b1cd0b8b8aaf69bc5c1f7330d1cfc7a7ab84f01a5f4d8ee0b887bd91d8af80be32e171ca03e9a906c6c8b342baec668db3ff9522002d5f60e751e712031d3cbeff0d47523625b3d41633e7c0d3ef3b5b4336b17c36075debcdea4b6357ab468114ae7265eaa39545973a602af35dfbd0ed03a3c6b717eefb92c52291a0b014ae4467a233db1d48c625228733262acf9d08c98e2aba18df6dde6160fe748bbaf217cae345449c1cb5e22ef26e6e8ef2666a307a3ca7a08ab2a7e3a938eab61b772a69aa4dce0ace312136870dadad35c98d2911b4d37dfcf31c3c36cd26177e3cda3049aecc9928545c2e102d2586225cfc96e9884042923e2874ebf71dc81060970705aba2a7ad1127b218e4ade098a41285ff7bee3a0b8dfcddf9933730183c92158d0bbc8dd874e3fab555c30075"}}}}}}, 0x0) readv(r5, &(0x7f0000000080)=[{&(0x7f0000000180)=""/53, 0x35}], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="2c00000010004b0400010000c5a0211e3de064002a272c353a0fa080b1776e3c17b206f5427abd33116183a1d63629be81d9452951de3e3deafe59f6e9cdee4a4f95ae8c373e35c53f0118f64313a06b9baa98c8296164c818bf0156d32bb7ca6e94b95b0a781ab6ae94ec061fdb9378c2de412d7509558436cba69eb308f15cce7ddfc84e971e8db57932e7f85f9fdc26eaa1774fd3ff1f06869347ae3b8fd6b6936bf47c8c98e43c8cce11054816", @ANYRES32=r8, @ANYBLOB="00000000000000000a0001000180c200000e0000"], 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f0000000380)={'ip6gre0\x00', 0x0, 0x2f, 0x3, 0x8, 0x2, 0x1a, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10, 0x80, 0x40, 0x5}}) r12 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r14 = openat$cgroup_ro(r6, &(0x7f0000000740)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) r15 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r15) r16 = getpid() sendmsg$unix(r15, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000240)='CJ]', 0x3}], 0x1, &(0x7f0000000e00)=[@cred={{0x1c, 0x1, 0x2, {r16, 0xee01, 0xee01}}}], 0x20, 0x10}, 0x80) sendmsg$nl_route(r1, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)=@RTM_GETNSID={0x44, 0x5a, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@NETNSA_NSID={0x8, 0x1, 0x4}, @NETNSA_NSID={0x8, 0x1, 0x1}, @NETNSA_FD={0x8, 0x3, r14}, @NETNSA_PID={0x8, 0x2, r16}, @NETNSA_NSID={0x8}, @NETNSA_FD={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040080}, 0x800) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000400)={'erspan0\x00', &(0x7f0000000500)={'erspan0\x00', 0x0, 0x0, 0x8, 0x5, 0x9, {{0x24, 0x4, 0x1, 0x1, 0x90, 0x67, 0x0, 0x29, 0x2f, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x22}, {[@lsrr={0x83, 0x7, 0x25, [@remote]}, @cipso={0x86, 0x31, 0x3, [{0x0, 0x6, "2f58e87d"}, {0x1, 0x5, "0de672"}, {0x2, 0x11, "c99c162e54a5fa42bbf77b4b49be25"}, {0x7, 0xf, "b5f13ddf397b01e6057740d29e"}]}, @ssrr={0x89, 0x7, 0xed, [@local]}, @timestamp_prespec={0x44, 0x3c, 0xce, 0x3, 0x1, [{@multicast2}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x48}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2aca1a7d}, {@multicast1, 0x1}, {@local, 0x2}, {@local, 0x6}, {@loopback, 0x10000}]}]}}}}}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f00000006c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f00000005c0)={0xd0, r4, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40}, 0x4040080) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000100008401000000000000000200000005000020000000000000000604"], 0x0, 0x3e, 0x0, 0x1}, 0x20) socket(0x2, 0x80805, 0x0) 1.019713915s ago: executing program 7 (id=4706): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x40047440, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)={0x38, r2, 0x1, 0x0, 0x25dfdbfd, {{0x2}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7fff, 0x74}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15e0}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0x38}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001780)=ANY=[@ANYBLOB="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"], 0x290}}, 0x4048010) syz_emit_ethernet(0x3f, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @val={@void, {0x8100, 0x6}}, {@arp={0x806, @generic={0x201, 0x8848, 0x6, 0xc, 0x11, @empty, "070000000000050000009b96", @broadcast, "3d5e1dabd251dbfd5549e724f7"}}}}, 0x0) 1.004635599s ago: executing program 2 (id=4707): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x8, 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x20}) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller1\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x4}, {0xfff2, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x0, 0x7fffffff, 0x8}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@newqdisc={0x148, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r8, {0x10}, {}, {0xa, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x118, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_DPS={0x10, 0x3, {0x4, 0xf, 0x0, 0x3}}]}}]}, 0x148}, 0x1, 0x0, 0x0, 0x4040098}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r10, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r9, 0x1, 0xd8, 0x6, @random="32b40c6fc44c"}, 0x14) sendto$packet(r10, &(0x7f0000000380)="c1858aec1d0a06756f6608f23687", 0xe, 0x24080000, &(0x7f0000000240)={0x11, 0x19, r9, 0x1, 0x5, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r11, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) setsockopt$inet6_tcp_int(r11, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48018}, 0x40044) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) 997.848319ms ago: executing program 5 (id=4708): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) (async, rerun: 32) listen(r0, 0x0) (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x34, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x1, 0xfe, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_DST={0x0, 0x2, @mcast1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f0000000380)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00 \x00', 0x14, 0x6, 0xff, @private2, @local, {[], {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 838.903631ms ago: executing program 5 (id=4709): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x30, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000040)={'ip_vti0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x8000, 0x7800, 0x3, 0x1, {{0x2d, 0x4, 0x1, 0x0, 0xb4, 0x64, 0x0, 0x9, 0x2f, 0x0, @private=0xa010102, @empty, {[@noop, @cipso={0x86, 0x37, 0x3, [{0x0, 0x12, "fea5d78cd9a496dd3a699510538c4985"}, {0x6, 0xa, "3dac052eef08c455"}, {0x2, 0x10, "46addb838c7dcfd7bb1f13af4eb2"}, {0x5, 0x5, "fb9c96"}]}, @cipso={0x86, 0x59, 0xffffffffffffffff, [{0x2, 0xd, "c80b55b56a3dec0e35a46c"}, {0x1, 0xe, "cb31ac04845cdeeeaf89dec9"}, {0x1, 0x12, "661ddb51601c7b619965f9a3b1380f78"}, {0x6, 0x11, "cfff718784d0b767a73e845bf30d5d"}, {0x6, 0x12, "d7c77a45422efee8ffaf58bbcbb44eb4"}, {0x2, 0x3, "e8"}]}, @lsrr={0x83, 0xf, 0x2a, [@multicast1, @broadcast, @dev={0xac, 0x14, 0x14, 0x29}]}]}}}}}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x64, 0x64, 0xa, [@enum64={0x8, 0x3, 0x0, 0x13, 0x1, 0xc, [{0x5, 0x7fff, 0x4000000}, {0x10, 0xc666, 0xd8e}, {0x1, 0x3ff, 0x5}]}, @typedef={0x2, 0x0, 0x0, 0x8, 0x2}, @decl_tag={0xa, 0x0, 0x0, 0x11, 0x5, 0xffffffffffffffff}, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0xffff, [{0x4, 0x3, 0xd6e1}]}]}, {0x0, [0x5f, 0x2e, 0x61, 0x5f, 0x61, 0x30, 0x5f, 0x0]}}, &(0x7f00000002c0)=""/32, 0x86, 0x20, 0x0, 0x1ff}, 0x28) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x80000000, 0xc, 0x9, 0x28041, r1, 0x7ff, '\x00', r2, r3, 0x4, 0x2, 0x5, 0xa, @value=r4}, 0x50) r6 = socket(0x10, 0x2, 0x0) write(r6, &(0x7f0000000280)="2c0000001d005f80004000000000000005000000000000000000080008000100000000ff5b1844ad30c8ac46", 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b704000002ec0000850000008200000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 835.635911ms ago: executing program 7 (id=4710): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000040)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @mcast1={0xff, 0x0, '\x00', 0x0}, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0xfffffffffffffca3, {0x0, 0x0, 0x0, 0xff80}}]}]}}}}}}}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r4 = socket(0xa, 0x3, 0x3a) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x2, 0x9, 0x2, 0x6, 0x2}, 0x10}, 0x1, 0x7}, 0x0) r6 = socket(0x22, 0x2, 0x4) bind$bt_hci(r6, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_mreqn(r4, 0x0, 0x24, &(0x7f00000003c0)={@rand_addr, @empty, 0x0}, &(0x7f0000000440)=0xc) sendmsg$nl_route_sched(r8, &(0x7f00000004c0)={&(0x7f0000000380), 0xc, &(0x7f0000000480)={&(0x7f0000001840)=@newchain={0x4718, 0x64, 0xc08, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x7, 0xf}, {0xfff3, 0xfff1}, {0xfff2}}, [@filter_kind_options=@f_flower={{0xb}, {0x44, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST_MASK={0x14, 0x22, [0xffffff00, 0xff, 0xff000000, 0xffffffff]}, @TCA_FLOWER_KEY_IP_TTL={0x5, 0x4b, 0x7}, @TCA_FLOWER_KEY_ARP_SHA={0xa, 0x3f, @remote}, @TCA_FLOWER_KEY_FLAGS_MASK={0x8, 0x30, 0x3ff}, @TCA_FLOWER_KEY_ARP_TIP={0x8, 0x3b, @empty}, @TCA_FLOWER_KEY_VLAN_ID={0x6, 0x17, 0x5e6}]}}, @filter_kind_options=@f_u32={{0x8}, {0x467c, 0x2, [@TCA_U32_ACT={0x3e14, 0x7, [@m_tunnel_key={0x128, 0x14, 0x0, 0x0, {{0xf}, {0x4c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x80}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x13}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @remote}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private0}]}, {0xae, 0x6, "12972ccf5705e54ac8053401432b9089c32c48aa09a62076e7c6d17e5a9507690affc51d0630df68a021169899091797ed4db9df06c6cc22b58efb02a4e3b541343b454e6ea8ceb597bfe113edcb5a7b0e49e540483c78860218973c5776610b74ee92b7bc346585bbb63ab1854dc82e801a74dcc1912607387d92c44ea443ef7738eac36bc040ad2c6db23e207d5a59b264890d100c6d5cfcba53280d4d549711f1edb72da2ff26289b"}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_vlan={0x130, 0xe, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x1e8}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x41b}]}, {0xeb, 0x6, "f642f20deb9a176704c946696a6c0cdd8775dea46450f29d49d7e93ae0070b8cc10a68aa6e7c52ffdfef16b53311a3161dd07d076902c2d62ae4946d8b12b17042a0ead8972b426dcdcc92fdcc422a72ebd53b6e83c768fd52efc337500d27be32ca42c4604d7641252032f1739366b3dcaccb0b968d9f8b54d8f382f36633da17c7a60c6fa55354b6c153c2b9876a08b25b185d08d6e182e31789b63e6075715e279fa1c63b68b1a947ecc42800ebd6d7a51d38712ccb857acd518cbd08907e57d54cb9fcb7697b813bc530fb7e54363518c0ad9da66da8d3ec411d441556e71c27fa54965b0e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_pedit={0x3bb8, 0xe, 0x0, 0x0, {{0xa}, {0x3a8c, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x60, 0x5, 0x0, 0x1, [{0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x6}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}]}, @TCA_PEDIT_PARMS_EX={0xe50, 0x4, {{{0x4, 0x7, 0x8, 0x3, 0x7}, 0x4, 0x5, [{0x1, 0x2, 0xc462, 0xc, 0x4, 0x401}, {0x4, 0x1, 0x2, 0x5, 0x1000, 0x6}]}, [{0x8, 0x9, 0x200, 0x8001, 0x4, 0x77f0}, {0xfffffffd, 0xc, 0xe, 0x0, 0x1ff, 0x7}, {0x9, 0x2, 0x8, 0x800, 0x1, 0x7fff}, {0x81, 0x1, 0xdfe, 0x1, 0x6, 0xf9cf}, {0x80000001, 0xfff, 0x4, 0xfffffff9, 0x6, 0x4}, {0xfffffffe, 0x0, 0x3, 0x2, 0x80, 0x5}, {0x1, 0x8, 0x4, 0x2, 0xfffff515, 0x8}, {0x1, 0x6ad, 0x9, 0x2, 0xff, 0xf4da}, {0xfffffffa, 0x3, 0x2, 0x87b8, 0x8, 0xba}, {0xb798, 0x84a0, 0xfffffffe, 0x7, 0x1, 0x8000}, {0x5, 0x8, 0x5, 0x714d32a9, 0x9, 0x2}, {0x6, 0x1, 0xfff, 0x7fff, 0x2, 0x8000}, {0xfffffffe, 0xe, 0x8, 0x401, 0x101, 0xfffffffe}, {0x6, 0x66, 0x10001, 0x1, 0x6, 0x3b}, {0x4, 0x8, 0x8001, 0xffffffff, 0x2, 0x7}, {0x8, 0x1, 0x8001, 0xd0, 0x40, 0x43}, {0x7ff, 0x2, 0xa8, 0x8, 0x101, 0x4}, {0x80, 0x0, 0x8, 0x5, 0xc1, 0xa1}, {0x10, 0x81, 0x4, 0x8001, 0xdc, 0xfffffff9}, {0x6395, 0x1, 0x0, 0x8, 0x4, 0x3}, {0x89df, 0x6, 0x8, 0x8000, 0x4, 0x5}, {0x6, 0x7, 0x1e, 0x80000001, 0x400, 0x6}, {0x400, 0x3, 0x7, 0x200, 0x88, 0x5}, {0x1, 0x80000001, 0x5a, 0x0, 0x81, 0x50000}, {0x6, 0x9, 0xc7, 0x7fff, 0x100, 0x14afc2f3}, {0x10000000, 0x7, 0xfffffff8, 0xf, 0xffffffff, 0xc}, {0x3, 0x4f71, 0x80000000, 0x400, 0x7, 0xf46}, {0x10000, 0x6, 0x8, 0xff, 0x2, 0x6}, {0x6, 0x2, 0x1, 0x1, 0x6, 0x7}, {0x2, 0xffffffff, 0x3, 0x7, 0x4, 0xb691}, {0x5, 0x2, 0x6, 0x2, 0xf, 0xfffffffc}, {0x1, 0x7fffffff, 0x8996000, 0xc, 0x2, 0x3}, {0x8001, 0x9383, 0x4, 0x7, 0x0, 0x5}, {0xf, 0x8000, 0x7f, 0x9, 0x7f, 0x6}, {0x3, 0x6, 0xc, 0x2, 0x8, 0x9}, {0x0, 0x7, 0x31, 0x5, 0xf9a, 0xe}, {0x80000001, 0x1, 0xd1, 0x7f, 0xe, 0x9}, {0x8, 0x9, 0x6f0d50b9, 0x40, 0xe66, 0x6}, {0x3, 0x6, 0x1ff, 0x8, 0x4, 0xc}, {0x713, 0x1, 0xc, 0x6d, 0x7, 0x3b}, {0x9, 0x6, 0x8, 0xffff, 0x8}, {0x4, 0x7, 0x4, 0x8, 0x8, 0xfffffffd}, {0x2, 0x0, 0x66, 0x9, 0x8, 0x100}, {0x28, 0x8, 0xe, 0x0, 0x10000, 0x5}, {0x100, 0x7c7, 0xe7, 0x4fe2, 0x6, 0x7}, {0x6, 0x7f, 0x4, 0x9, 0x9f17, 0x4}, {0xf7a, 0x0, 0x8, 0x0, 0x6, 0x2}, {0x3ff, 0x37, 0x200, 0x66e3, 0x2, 0x7}, {0xa, 0x100, 0x8, 0x6879800, 0x3, 0x12}, {0x84d5, 0x79, 0x10001, 0xe, 0x0, 0x4}, {0x0, 0x80, 0x23, 0x0, 0x1, 0x17}, {0x1, 0x28, 0x3, 0xc947, 0x58fa, 0x4}, {0xb, 0x5, 0x9, 0x101, 0x8, 0x1}, {0x6, 0x0, 0x9, 0xff, 0x101, 0x5}, {0x17, 0x8, 0x6, 0xd018, 0x3, 0xe}, {0xa, 0xe4, 0x8, 0x4187, 0x24000, 0xac}, {0xfffff000, 0x10, 0x3, 0x0, 0x800, 0x80}, {0xee3, 0xffffffff, 0x0, 0xd5, 0x3, 0xfff}, {0x5813, 0x8, 0x70, 0x9, 0x8000, 0xc}, {0x7, 0x101, 0x93, 0x9, 0x3, 0x8292}, {0x1, 0xe7, 0x5, 0xda8, 0x0, 0x2}, {0x1, 0x7, 0x7, 0xd77c, 0xa051, 0x82ca}, {0x129644ab, 0x3, 0x5, 0x6, 0x8000, 0x1}, {0x3c, 0x400, 0x3e1, 0x8, 0x1, 0xffc5}, {0x7fff, 0x6, 0x4, 0xb, 0x3}, {0x0, 0xd41, 0x3, 0x10, 0x8001, 0x7}, {0x0, 0x2, 0x10000, 0x4, 0xb4, 0x2}, {0x0, 0x6, 0xb64, 0x37, 0x800, 0x8}, {0x68e, 0x3ff, 0x0, 0x3, 0xef, 0x7a}, {0x1, 0xff, 0x80, 0x8000, 0x6, 0x80000001}, {0x10001, 0xffffffff, 0x6, 0x6, 0x5, 0x40a}, {0xfffffffc, 0x0, 0x2, 0x9, 0x9, 0xcfcf}, {0x7fff, 0x7, 0xc, 0x0, 0x200}, {0xa, 0x10001, 0x6, 0x7, 0x4, 0x81}, {0xd619, 0x10000000, 0xd024, 0x5d70, 0x4, 0x4}, {0x2c, 0x401, 0x1, 0x2b7a, 0x21fd, 0x8}, {0xf, 0x9, 0x10001, 0x684d, 0x401, 0x6}, {0x8, 0x3032, 0x4, 0x7, 0x649, 0x1}, {0x3, 0x3, 0x3, 0x6, 0x3, 0xffff}, {0x9, 0x3, 0x0, 0x1, 0xff, 0x5}, {0xa4, 0xb7d6, 0x5, 0x8, 0x401}, {0x6a5a, 0x6, 0x4, 0x9, 0x4}, {0xffff7fff, 0x7, 0x2, 0x4, 0x7c, 0xb0}, {0x80000001, 0x7fff, 0x101, 0x6, 0x4, 0x8}, {0xd, 0x8, 0x1, 0x6fe6, 0x5, 0x101}, {0x5, 0x9, 0x0, 0x81, 0x8, 0x80}, {0x7, 0x0, 0x8, 0x2, 0x5, 0x8001}, {0x8, 0x6, 0xfffffffd, 0xe, 0x1b9a0, 0xff}, {0xffffff80, 0x3, 0x98, 0xffffffff, 0x80000001, 0x1}, {0x1, 0x8, 0xf, 0x8, 0x5, 0x5}, {0x0, 0xb6c6, 0xd, 0xaa, 0x7, 0x6}, {0x8, 0xfffffff6, 0x7, 0x4, 0x5, 0x2}, {0x100, 0x8, 0x0, 0x3, 0x3, 0x10}, {0x1, 0xf1, 0x16f, 0x0, 0x6, 0x40}, {0x64d, 0x0, 0x7, 0x3, 0xce, 0x4}, {0x3a4, 0xfffffff2, 0x7, 0x3, 0x743}, {0x3, 0x401, 0x0, 0x7f, 0x5, 0x7fffffff}, {0x6, 0x5e4, 0x0, 0xfff, 0x5}, {0xb, 0x101, 0x1, 0x8, 0x2, 0x101}, {0x400, 0x55, 0x4e, 0x5, 0x48, 0x2}, {0x7, 0x3, 0x8, 0x2, 0x7177, 0x1}, {0x44a, 0x6, 0x1ff, 0xf, 0x1, 0xc}, {0x8000, 0x8, 0x7, 0x0, 0x2fd, 0x57eb}, {0x0, 0x10000000, 0x6, 0x10001, 0x7, 0x2}, {0x9e2, 0x913a83d, 0x6, 0x8ed, 0x4, 0xffffffff}, {0x29a, 0x7fff, 0x3, 0x2, 0x6, 0x839}, {0x80, 0x0, 0x80000000, 0x8001, 0x3bbc, 0x5}, {0x0, 0x9, 0x3, 0x7ff, 0x1000, 0x8000}, {0x8, 0x3, 0x8, 0x38bb, 0x7, 0xd}, {0x8, 0xa0, 0x6d, 0xfffffffc, 0x80}, {0x30, 0x1, 0xffffffff, 0xffffff62, 0x6, 0x8}, {0xffffff00, 0x27, 0x0, 0x401, 0x7, 0x1}, {0x1, 0x5, 0x200, 0x100, 0x200, 0x9}, {0x8, 0xfffffff9, 0x7c, 0x3, 0x0, 0x2}, {0x3, 0x0, 0x2, 0x9, 0x0, 0x401}, {0x3ff, 0x1, 0x1, 0x6, 0x2, 0xfffffffe}, {0x2, 0x566a803e, 0x3, 0xb, 0xf, 0xffffffff}, {0x8, 0x3, 0xfef, 0xffffff00, 0x5, 0x7}, {0x2, 0x1, 0x7, 0x8, 0x902, 0x9}, {0x10, 0x9, 0x3, 0xf6, 0x14, 0x9}, {0x4, 0x2, 0x5, 0x401, 0x3, 0xfffffffd}, {0x100, 0x8, 0x1, 0x5, 0x800, 0x6}, {0x81, 0x80000000, 0x27fe, 0x4, 0x4, 0x2}, {0x5, 0x8, 0xfffffff8, 0x10001, 0x0, 0x80000001}, {0x3ff, 0x800, 0x8, 0xc6e, 0x0, 0xb}, {0x81, 0x8, 0x3, 0x3, 0x400, 0x3}, {0x4, 0x200, 0x58919e71, 0x101, 0x4, 0x4}, {0x7f, 0x205510a, 0x4, 0x7, 0xe, 0x4cd144bb}], [{0x4}, {0x3}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x2}, {0x3}, {0x3}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x5}, {0x5, 0x1}, {0x4}, {0x7}, {0x5}, {0x4, 0x1}, {}, {0x4}, {0x5}, {0x2}, {0x5, 0x1}, {0x1, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {}, {0x3}, {0x2, 0x1}, {0x5}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x5}, {0x5, 0x1}, {0x4}, {}, {0x5, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2, 0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {}, {0x3}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5}, {0x4, 0x1}, {0xb}, {0x1, 0x36a7aaae9d6c7aef}, {}, {0x5, 0x1}, {0x5}, {0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {0x2, 0x1}, {0x2}, {0x3}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2}, {0x1}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x6, 0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x2}, {0x4}, {0x5, 0x1}, {0x3, 0x1}], 0x1}}, @TCA_PEDIT_PARMS_EX={0xe80, 0x4, {{{0x0, 0x7, 0x6, 0x8, 0x749}, 0x4, 0x0, [{0x9, 0xfff, 0xfffffff9, 0xffffffff, 0x4, 0x401}, {0x7, 0xffff, 0x1, 0x42, 0x1, 0x4}, {0x0, 0x9, 0x3, 0x0, 0x5, 0x1}, {0x8, 0x8, 0x3f, 0x2, 0x1, 0x81}]}, [{0x6, 0x5, 0x6ca1, 0x0, 0x7ff, 0x9}, {0x4, 0x3, 0x6, 0x3, 0x8}, {0x8813, 0x1, 0x2, 0x5, 0x3, 0x8}, {0x2, 0x2, 0x0, 0x6, 0x9, 0x1}, {0x8, 0x0, 0x0, 0xbc3027c6, 0x2, 0x5}, {0x5, 0x1, 0x4, 0x9, 0x9836, 0xc6}, {0x7, 0x400, 0x8, 0x7, 0x0, 0x6}, {0x7, 0xd4a, 0xf6fe, 0x6, 0x80000000, 0x1}, {0x3, 0x3, 0x161e, 0x4, 0xcf, 0x1}, {0x4, 0xff, 0x1, 0xe27a, 0x6, 0x9}, {0x6, 0xf, 0x5, 0xc29, 0xa, 0x2}, {0x80000000, 0x0, 0x1, 0x7, 0x401, 0x9}, {0x4, 0x5, 0x8001, 0x1, 0xdf, 0x1}, {0x7, 0x0, 0xb3d, 0xfffffffa, 0x8000, 0xffffffff}, {0x7, 0x3, 0x2, 0x6, 0xe363, 0xff}, {0x8, 0x62a6, 0x7fff, 0x226, 0x2, 0x7ff}, {0x4, 0x2, 0x5, 0x9, 0x5, 0x80000001}, {0x0, 0x24000, 0x0, 0x4, 0x8, 0x1}, {0x9, 0xfff, 0x8, 0x1, 0xe62, 0x3}, {0x0, 0xb, 0x5, 0x401, 0x2, 0x6}, {0xff, 0x8, 0x8, 0x2, 0xd760, 0x8}, {0x400, 0xd, 0x2782cc17, 0x7f, 0x1, 0x7fffffff}, {0xffff8000, 0x8, 0xfffffff9, 0x9, 0x9, 0x7}, {0x5, 0x3, 0x6, 0x100, 0xffff5e90, 0x80}, {0x0, 0xfffffff7, 0xff, 0x4, 0x7ff, 0x4}, {0x4, 0x0, 0x5, 0x101, 0x3, 0x6336}, {0x400, 0xb, 0x1, 0x3, 0x56, 0x7}, {0x4, 0x3, 0x5, 0x5, 0xd2, 0x67eebef1}, {0x34, 0x2, 0xcbc0, 0x7, 0xe}, {0x1, 0x4, 0x3, 0x7, 0xffffffff, 0x7}, {0xa2, 0x0, 0x9, 0xf, 0xed67, 0x101}, {0x9, 0x1ae, 0xa, 0x1, 0x7, 0x5}, {0x10000, 0x3ff, 0x3, 0x4, 0x2, 0x120000}, {0x8f, 0x4, 0x800, 0x7f, 0x1, 0x5}, {0x3, 0x1, 0x3, 0x4, 0xfffffffe, 0x4}, {0xff, 0x9, 0x7, 0xffffffff, 0x80000000, 0x6}, {0x101, 0x6, 0x49, 0x8, 0x4, 0xce}, {0x0, 0x8, 0x8, 0x8, 0x3, 0x7}, {0x1ff, 0x5, 0x7, 0x5, 0x9, 0xc7c}, {0x10, 0x5, 0x4, 0x40, 0x6898, 0x3e}, {0x7fff, 0x7, 0x7, 0x4, 0xffff, 0x304}, {0x7, 0x10, 0xffff7481, 0x7, 0x97f, 0x8}, {0x1, 0x5, 0x6, 0x8000, 0x400, 0x6}, {0x400, 0x18, 0x1, 0x10, 0x3, 0x7}, {0xe, 0x2, 0x8, 0x90, 0xf, 0x2}, {0x2, 0x0, 0x3, 0x9, 0x8, 0xd}, {0x7, 0x2, 0x34, 0x7, 0x8, 0x1a44}, {0x5, 0x327a, 0x5, 0x9, 0x6, 0x100}, {0xffffffff, 0x7f, 0x86, 0x4, 0x3, 0x1}, {0x3, 0xe, 0x9, 0x6, 0x0, 0x2}, {0x1, 0x80, 0xfffff801, 0x0, 0x7, 0x80}, {0x7fffffff, 0x5, 0xe, 0xffff, 0x9, 0x5}, {0x31a5, 0x95d, 0x200, 0x6, 0xc1, 0x3}, {0x1c, 0xb198, 0x0, 0x8, 0x7f, 0x495}, {0x7, 0x1, 0x0, 0x40, 0x101, 0x8}, {0x2, 0xd50b, 0x100, 0x2, 0x3, 0x80000001}, {0x5, 0x8, 0x7, 0x4fdc3a83, 0xadc, 0x4}, {0x2, 0x401, 0x6, 0x8, 0xfffffff7, 0x7}, {0x4318db28, 0x3, 0x7, 0x2, 0x0, 0x5}, {0xfffffff7, 0xb2, 0x1, 0xe, 0x9, 0x6}, {0x100, 0x4, 0x800000, 0x81, 0xd3e, 0x2}, {0x8000, 0x6, 0x10001, 0x0, 0x5, 0x80000001}, {0x70, 0x5, 0x7a000000, 0x2, 0xf1000000, 0x3}, {0x7, 0x81, 0x3, 0x9, 0x7}, {0x6, 0xcd9, 0x1, 0x1, 0x4, 0x65b}, {0x5, 0x0, 0xa, 0x4, 0xd, 0xfffffff8}, {0xa, 0x0, 0xb, 0xd0ad, 0x5, 0x1}, {0x1, 0x6, 0xd70, 0x9, 0x9, 0x4}, {0x7, 0x6, 0x9, 0x4, 0xa, 0xd995}, {0x7fff, 0x6, 0x8000, 0x3ff, 0x6ca, 0x4}, {0x8, 0x7, 0x1, 0x7, 0x4, 0xfffffff9}, {0x9, 0x0, 0x5, 0x101, 0x10001, 0x6}, {0x0, 0x4, 0x3c4cb247, 0x20, 0x8, 0x6fd}, {0x10, 0x2, 0xfff, 0xd4e4, 0x6, 0x1}, {0x6, 0xe2, 0x0, 0xd9, 0x9, 0x8}, {0x4, 0x8, 0x6, 0x8, 0x10}, {0x7, 0x3, 0x85, 0x4, 0x1, 0x2}, {0x2, 0xd, 0xd806, 0xd3, 0x1c3, 0x7}, {0xddf1, 0x0, 0x5, 0x0, 0x6, 0x400}, {0x6, 0x1, 0x1, 0x2772a115, 0xf743, 0x80000}, {0x0, 0x5, 0x5, 0x133b, 0xffff, 0x9}, {0x3, 0x7fffffff, 0x6, 0x4, 0x7, 0xd}, {0x0, 0xf4e, 0x328, 0x5, 0xd, 0x1}, {0xf72, 0x1, 0x9b2b, 0x2, 0x5d, 0x9}, {0x1, 0x80, 0x4, 0x2, 0x1, 0x3}, {0x2, 0x5, 0x0, 0x9, 0x4}, {0x1ff, 0x8000, 0x5, 0x2, 0xffffff0c, 0x100}, {0x4, 0x4, 0xffffffff, 0x7, 0x4, 0x9}, {0x4, 0x7, 0x33, 0x6, 0x7fff}, {0xcd, 0x6, 0x10, 0xc510, 0x10001, 0xa}, {0x1, 0x37, 0x1, 0x3, 0x3, 0x1}, {0x9e29, 0x0, 0x100, 0xc5, 0x5, 0x3ff}, {0xfffffffc, 0x7, 0x7, 0x3, 0x80000001, 0x74f}, {0x5e7, 0x1, 0x7, 0x4, 0x66e, 0xb2a}, {0x3ff, 0xffff, 0x0, 0xbb2, 0xfff, 0xffffffff}, {0x80000000, 0xb, 0x8, 0x1, 0x1, 0x5}, {0x3d22b759, 0x4, 0x4, 0xde, 0x8}, {0x575, 0xb, 0x9, 0x0, 0xfffffffa, 0x2}, {0x4, 0xffffffff, 0x4, 0x8, 0x100, 0xd}, {0x8001, 0x7fffffff, 0x1, 0xe8, 0x2, 0xb2}, {0x7355, 0x8001, 0x5, 0x0, 0x3e0cefb2, 0xd}, {0x9, 0x9a30, 0x7ff, 0x80000000, 0x1, 0xed9}, {0x4, 0xfffffff8, 0x3e45, 0x80, 0x3, 0x7}, {0xe1c, 0x1, 0x7, 0x9ce, 0x8000, 0xe2f}, {0xb3c, 0x3f, 0xd8, 0x0, 0x7fff, 0x9}, {0x3, 0xa, 0xa5, 0xffffff1e, 0xb, 0x5}, {0x5e8, 0x51, 0x5, 0x7, 0x9, 0x1ff}, {0x1, 0x1, 0xe4, 0x8, 0x18ba, 0x800}, {0x6, 0xc, 0x8001, 0x1, 0xdd3, 0xc}, {0x545, 0x21, 0x8, 0x5, 0x46b, 0x2}, {0x1, 0x1, 0x8, 0x6cf, 0x5, 0x800000}, {0x2, 0x80000001, 0x1, 0x800, 0xf553, 0x8f77}, {0x0, 0x4, 0x11dafb38, 0xc, 0x10001, 0xfffffff7}, {0x7, 0x9, 0x10001, 0xfffffe01, 0x3, 0xfffffffb}, {0x4, 0x10001, 0xc, 0x2585, 0x6, 0x772}, {0x0, 0x6, 0xa9, 0x4800000, 0xff, 0x2}, {0x5, 0x9, 0xa86, 0x88c4, 0x80, 0xc6d8}, {0x9, 0x9, 0x8, 0x487, 0x7, 0x1}, {0x5, 0x1, 0x1ff, 0x8, 0x0, 0x1}, {0x7, 0x3, 0xffffff7f, 0x7, 0x8, 0x4}, {0x8, 0x1, 0x1, 0xfff, 0x80000001, 0x5}, {0x0, 0x7, 0x6, 0x7, 0xec, 0x3}, {0x7, 0x9, 0x4, 0xb0000, 0x3, 0x6}, {0x8ec3, 0x6, 0x8, 0xabc5, 0xf698, 0xfffffffe}, {0x75, 0x8a, 0x1000, 0x1d22, 0xfff, 0x2}, {0x2, 0x7, 0x4, 0x1, 0x6, 0x6e2}, {0x6, 0x1df4, 0x326, 0xb, 0x80000000, 0xc}, {0xffff0000, 0x4, 0x5b72, 0x80000001, 0x4, 0x9}], [{0x5, 0x1}, {0x1}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x4}, {0x1, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1}, {0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x4}, {0x1}, {0x2, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {0x4}, {0x1, 0x1}, {0x5}, {0x3}, {0x1, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x5}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x5}, {0x1, 0x1}, {}, {0x4}, {0x2}, {0x5}, {0x2, 0x1}, {}, {0x2}, {0x1}, {0x5}, {0x1}, {0x1, 0x1}, {}, {}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x5, 0xc289ad29b14d7f6d}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x5}, {0x4}, {0x3}, {0x2, 0x1}, {0x4}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x3, 0x1}, {0x2}, {0x5, 0x1}, {0x3}, {0x4}, {}, {0x2, 0x1}, {0x4}, {0x3}, {}, {0x5, 0x1}, {0x1, 0x1}, {0x1}, {}, {0x3, 0x1}, {0x2, 0x1}, {}, {0x0, 0x1}, {0x5}, {0x3}, {0x1}, {0x3}, {0x5, 0x1}, {0x1, 0x1}, {0x3}, {0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0xfea3472587011be3}, {}, {}, {0x1, 0x1}, {0x3}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {}, {0x2, 0x1}, {0x5}, {0x3}, {}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x3, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x40, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}, @TCA_PEDIT_PARMS={0xe68, 0x2, {{{0xfffffffe, 0x8, 0x7, 0x4, 0x6}, 0x81, 0x7, [{0x7fffffff, 0x3, 0xfffff001, 0x6, 0x17310000, 0xa9}, {0x6, 0x6, 0x82d, 0xb, 0x4, 0x401}, {0x400, 0x100, 0x3f4, 0xfffffff1, 0x8000, 0x32}]}, [{0x2, 0x7, 0x42c5, 0x1c2, 0x8, 0x347}, {0x9, 0xa36, 0x10, 0x100, 0x5, 0x4}, {0xfffffffa, 0xd, 0x80, 0x0, 0x200, 0x7ff}, {0x2, 0x6, 0x53, 0x2, 0x40, 0x464}, {0xfffffffb, 0x3ff, 0xfffffeff, 0xffffffff, 0x4, 0x3}, {0xa1, 0x6, 0x8, 0x2, 0x6, 0xb}, {0x2, 0x6, 0x7, 0x7, 0x0, 0x9}, {0x3ff, 0x9, 0x1, 0x4, 0xd, 0x9}, {0x1, 0x3ff, 0x4, 0x4, 0x1}, {0x1, 0x2, 0x8000, 0x0, 0x9, 0x2}, {0x8, 0x8001, 0x372, 0x9, 0x8, 0x2c16}, {0x7, 0x1, 0x7, 0x9, 0x2, 0x8001}, {0xfffffff9, 0x3, 0xe, 0x312, 0x5}, {0x4, 0x5, 0x6, 0x4, 0x904, 0x1}, {0x3, 0x8, 0x3, 0xbc, 0x100, 0x5}, {0x101, 0x2, 0x9, 0x22a, 0xed, 0x5}, {0x6, 0x77, 0x5, 0x5, 0x7}, {0xffff, 0x0, 0xc, 0x7, 0xa728, 0x7}, {0x7, 0x7, 0x2, 0x5, 0x4, 0x6}, {0xeab, 0x6, 0x6, 0xff, 0x9, 0x1000}, {0x95, 0x8001, 0x4, 0x6, 0x800, 0x6}, {0x5, 0x401, 0xb, 0x54, 0x0, 0x4}, {0x1, 0x8000, 0x6, 0x8, 0x708321a5, 0xd}, {0x2, 0x2, 0x4, 0x800, 0xe7, 0x9}, {0x8a, 0x4, 0x4, 0x800, 0x3ff, 0x5}, {0xe1, 0x2, 0xd, 0x6, 0x80000001, 0x100}, {0xfffffffb, 0x0, 0x0, 0x7, 0x2, 0x6}, {0x0, 0x7, 0x1ff, 0x8000, 0x100, 0x1}, {0x7, 0x4, 0x8, 0x6, 0x6}, {0x7296, 0x0, 0x2, 0x7, 0x7, 0x7}, {0x7, 0x80, 0x7, 0x1, 0x0, 0x2}, {0x188, 0xffffffe2, 0x6, 0x0, 0x3, 0x6}, {0x4, 0x5, 0x6f, 0xa273, 0xfff, 0x8}, {0x1, 0x7, 0x2, 0x7, 0x2f, 0x7}, {0x1, 0x2d9, 0x0, 0x3, 0x8, 0xd473}, {0x8001, 0x1, 0x1, 0x8, 0x6}, {0x2, 0x1, 0x200, 0x2, 0x5, 0xd}, {0x1, 0x8, 0x80000001, 0x1000, 0xf85, 0x6}, {0x5, 0x7, 0x8001, 0x0, 0x1, 0x86}, {0x7, 0x2, 0x8, 0xf, 0x99}, {0x6, 0x10001, 0x4, 0xf4, 0x9, 0x64}, {0x81, 0x40, 0x3, 0x7ff, 0xff, 0xfffff000}, {0x80000001, 0x3, 0x562c353f, 0x1, 0xf, 0x4}, {0x40, 0x80000000, 0x2, 0x6, 0x0, 0x6}, {0x5, 0x7, 0x80000001, 0x200, 0x7f, 0x6}, {0x6, 0x8, 0xffffffff, 0x6, 0x5, 0x7}, {0x3, 0x3, 0x6, 0x7, 0xa9, 0x5}, {0x0, 0xc, 0x6, 0xffff, 0x9, 0x7ff}, {0x79bf, 0x4, 0x4, 0x0, 0xc4, 0x900000}, {0x4, 0x1, 0x1000, 0x4, 0x2, 0x1000}, {0x4, 0x4, 0xa, 0xf, 0x1}, {0x5, 0x5, 0x10, 0x4, 0xe9e, 0xf24}, {0x0, 0xfffff800, 0x8, 0x1, 0x8130, 0xfde}, {0x9, 0x4, 0x0, 0x8, 0x9, 0x1952}, {0x1, 0x9, 0x2c, 0x3, 0x9, 0x3}, {0x0, 0x8, 0xf3, 0xfffffc01, 0x0, 0x5}, {0x5, 0x3, 0xffffffff, 0x10, 0x9, 0xffff0001}, {0xa4b, 0xe0, 0x2, 0x2, 0x81, 0x3}, {0xfffffffc, 0x3, 0x6, 0x401, 0xbaa, 0x9}, {0x0, 0x1, 0x1c89, 0xffffffff, 0x1, 0x2}, {0x7, 0x3, 0x1, 0x3, 0x6, 0x8}, {0x1, 0x9, 0xd33, 0xe8, 0x6b52, 0x7}, {0x0, 0x3, 0x8, 0x8000, 0x401, 0xdb}, {0x9, 0x2, 0x4, 0x7, 0x48, 0x401}, {0x6, 0xf49249a8, 0x111bd84c, 0x401, 0xffffffff, 0x7}, {0x400, 0x1, 0x2e93, 0x8, 0x7fffffff, 0xfffffeff}, {0x2d, 0x300000, 0x6405, 0x3, 0x7fffffff, 0x9}, {0x6, 0xfffffff1, 0xb, 0x100, 0x2, 0x401}, {0x8, 0x6, 0x3, 0x9, 0x3ff, 0x3}, {0x4, 0x100, 0x40, 0x8000, 0xff, 0x5}, {0x6, 0x7, 0x4, 0x4, 0x81, 0xffffffff}, {0x0, 0x101, 0x9, 0xa, 0x28, 0xc}, {0x4a89eab3, 0x894, 0x8001, 0x7ff, 0x6, 0x5}, {0x7, 0x8001, 0xfffffff8, 0x8, 0x5, 0x3}, {0x4, 0x1, 0x5d42, 0x6, 0x0, 0x6}, {0x100, 0x80000001, 0x0, 0x4, 0xfff, 0x2}, {0x2, 0x625, 0x2, 0x3, 0x42, 0x4}, {0x7f, 0x8, 0xd1d, 0x4000800, 0xffff8652, 0x7}, {0x5, 0xffff8001, 0x9, 0x0, 0x0, 0x1}, {0x7, 0x10, 0x8000, 0x7, 0x0, 0x200040}, {0xfa, 0x2, 0x2, 0x7fffffff, 0x5, 0x1}, {0xa, 0xff, 0x7, 0xff, 0x1, 0x200}, {0xfffffffb, 0x5, 0x7, 0x2, 0x101, 0xfffffffe}, {0x9, 0x1ff, 0x5, 0x0, 0x1, 0x3}, {0x4, 0xb, 0x100, 0x7, 0x2, 0x200}, {0x9, 0x1, 0x7, 0x7ff, 0x5, 0xc883}, {0x2, 0x80000001, 0x2, 0x81, 0x28b9, 0x5}, {0x58b36c41, 0x7, 0xc, 0x0, 0x6, 0x5}, {0x0, 0x1, 0xd, 0xe, 0x2, 0xb9f}, {0x7, 0x6, 0x4, 0x0, 0x9, 0x5}, {0xba, 0xfe000000, 0xe, 0xfa, 0x8, 0x5}, {0xc5, 0xd, 0x5, 0x7, 0xfff, 0x7f}, {0x8, 0x8000, 0x1, 0x1, 0x0, 0x3}, {0x3, 0x0, 0xc51, 0x0, 0x1, 0xed96}, {0x2, 0x4, 0x5, 0x7, 0x10000, 0x8001}, {0x6, 0x80000000, 0x4, 0x0, 0xb, 0x6}, {0x5, 0x8, 0x1000, 0xffffffff, 0xfffffff8, 0x20000}, {0x9, 0x2, 0xffff6840, 0x1, 0xdd, 0x10000}, {0x7ff, 0x1, 0x5, 0x6, 0x7}, {0x7, 0x8, 0x1000, 0x67, 0x52f8, 0x638848bf}, {0x81, 0x8, 0x0, 0x8, 0x8, 0x100}, {0x0, 0xfffffff7, 0x3, 0xfffffff7, 0x7, 0x31b}, {0x9, 0x9, 0x8, 0xf, 0xff, 0xc}, {0xfffffffc, 0x4, 0x0, 0x2, 0x1}, {0xd, 0x10001, 0x2, 0x0, 0x3, 0x40}, {0xffff0001, 0x8001, 0x8, 0xffffffff, 0x3, 0x8}, {0x1, 0x0, 0x5, 0x3, 0xfffffae5, 0xe74}, {0x4, 0xfffff001, 0x4, 0x80000000, 0x8, 0x3}, {0x9, 0xfffff27e, 0x6, 0x80, 0xfff, 0xb635}, {0x8f68, 0x7f, 0x7fffffff, 0x3, 0x3, 0xfffffff7}, {0xd, 0x10000, 0x6, 0x0, 0x1ff, 0x5}, {0xfffffff7, 0x650, 0x2, 0x5, 0x1, 0x5}, {0xfffffff9, 0x3, 0xa794e5e, 0x3, 0x11, 0x9}, {0x7, 0x2, 0x5, 0x3, 0x2, 0xfb}, {0x1, 0x3, 0x80000000, 0x8, 0x79da}, {0x73fdee64, 0x0, 0x1, 0x1, 0x1718c217, 0x7}, {0x6, 0xfffffff9, 0xcfdd, 0x7, 0x7, 0x5}, {0x1, 0x1, 0x2, 0x81, 0x0, 0x5f37}, {0x71f, 0x10, 0x6, 0x6, 0x0, 0x7fff}, {0x8, 0x7fff, 0x0, 0x9, 0x884ef84, 0x9}, {0x6, 0x6, 0x4, 0x4, 0x6, 0x3}, {0x8, 0x7, 0x3, 0x0, 0x3, 0x9}, {0xf3, 0x7, 0x64, 0x0, 0x1, 0x8001}, {0x4, 0x7fffffff, 0x80000001, 0x3, 0x1f, 0x8}, {0x2, 0x80000000, 0x7, 0x81, 0x5996, 0x6}, {0x5, 0x8, 0x7f, 0x2, 0x0, 0xa872}, {0xffff8aa3, 0x84, 0x5, 0x4, 0x7c2, 0x7f}, {0x3, 0x1, 0x7, 0x8, 0x6, 0x2}], [{0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x2}, {0x2}, {0x4, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {}, {0x4}, {0x5, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x3}, {0x5, 0x1}, {}, {0x4}, {0x6}, {}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x6}, {0x1, 0x1}, {0x5}, {0x4, 0x1}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x2}, {0x2, 0x1}, {0x1}, {0x4}, {0x3}, {0x4}, {0x2}, {0x2, 0x1}, {0x5, 0x1}, {0x4}, {}, {0x5, 0x1}, {0x3}, {0x1, 0x1}, {0x1}, {0x2}, {0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5, 0xfc8649cf707a810f}, {0x4}, {0x4, 0x1}, {}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x5}, {0x3}, {0x2}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x4}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x2}, {0x3}, {}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {}, {0x1}, {0x5, 0x1}, {}, {0x3, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {}, {0x4}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x4, 0x1}, {0x2}], 0x1}}, @TCA_PEDIT_PARMS_EX={0xeb0, 0x4, {{{0x4, 0x9, 0x3, 0x9, 0x7}, 0x4, 0x5, [{0x800000, 0x7, 0x2, 0x4, 0x3, 0x4}, {0xfffffffd, 0x10, 0xffffffff, 0x1, 0x8000, 0x6}, {0x3, 0x7, 0x8, 0x3, 0x4, 0x3}, {0x1, 0x7, 0x3, 0x5, 0x800, 0x2}, {0x8b5, 0x4c3133eb, 0xefe8, 0xcb, 0x8, 0x19dd}, {0x636, 0x4, 0xfffffff8, 0x1, 0x80000001, 0x9}]}, [{0x0, 0x5, 0x8, 0xc, 0x8, 0x5}, {0x49c18212, 0xfffff45a, 0x1000, 0x0, 0x6, 0x2}, {0x8, 0xe7, 0x1ff, 0x1, 0x0, 0x18}, {0x7fff, 0x6, 0x5, 0x4, 0x5, 0x1}, {0x7, 0x4, 0x1, 0x6, 0x7, 0x66}, {0xff, 0x401, 0x9, 0xfff, 0x1, 0x8}, {0x7, 0x7, 0x40, 0x10, 0x7ff, 0x9}, {0x6d02, 0x0, 0xc0000000, 0x3, 0x9, 0x1}, {0x4, 0xab, 0x7ff, 0x4, 0x6b0c, 0x6000}, {0x7ff, 0x8, 0x4, 0x8, 0x2, 0x5}, {0x9, 0x2, 0x3ff, 0x3, 0x8, 0x7}, {0x1, 0x80000001, 0x83a, 0x8, 0x81, 0x8}, {0x1, 0xff, 0x5, 0xffffffff, 0x80, 0x7}, {0x7f, 0x4, 0x8, 0x8, 0x80000000, 0x14c2}, {0x6, 0x9, 0x0, 0x6, 0x9, 0x7}, {0xf4, 0x4, 0xc, 0x3, 0x1, 0x5}, {0x3, 0x3ff, 0x19e, 0xff, 0x0, 0x1}, {0x8000, 0xf4, 0x9, 0xdd1, 0x54, 0x2}, {0x2, 0x3, 0x0, 0x1, 0x9, 0x7}, {0x0, 0xfffffffa, 0xe7, 0x10001, 0x6, 0x6}, {0x3, 0x0, 0xb9, 0x0, 0x1, 0x8000}, {0x0, 0x3, 0xe4, 0x9, 0x47c, 0x7}, {0x592, 0x2, 0xbc, 0xf1, 0x1, 0x9}, {0x5, 0x2, 0x9, 0x3, 0x4, 0x5}, {0x0, 0x7f, 0x0, 0xf, 0x8, 0x3}, {0x5, 0x3, 0x101, 0x2, 0x2}, {0x7, 0x3d2e, 0xd, 0x3000000, 0x4, 0xd}, {0xa, 0x8, 0x9, 0x3, 0x100, 0x19a0}, {0xfffffffb, 0x6, 0x0, 0x8000, 0x9, 0xc}, {0x8, 0x4, 0x4, 0x6, 0x1000, 0x3}, {0x9, 0x5, 0x6, 0x3, 0x0, 0x1}, {0x7fffffff, 0x6, 0x7, 0x5, 0x7ff, 0x40}, {0x2, 0xf, 0x4, 0x1, 0x7, 0x7}, {0xfff, 0x8c2, 0x5096, 0xfafe, 0x0, 0x5}, {0x7, 0x4, 0xe3, 0x438, 0x6f, 0x1}, {0x3, 0x5, 0xfffffffb, 0x31d, 0x2, 0xff}, {0x0, 0x400, 0x8, 0x5, 0x9, 0x9f}, {0x8, 0x7, 0xffffffff, 0xe7e, 0x7e1, 0xe}, {0x6, 0x2, 0x80000000, 0x401, 0x0, 0x7}, {0x9ad, 0x4, 0x2, 0x7fff, 0x5f, 0x8}, {0x8, 0x3, 0x0, 0x9, 0xc, 0xcb82}, {0x52ce, 0x6, 0x8, 0x3, 0xe54, 0x8000}, {0x9f3, 0xffff, 0x7, 0x7, 0x7fffffff, 0xb}, {0x31, 0x3, 0x9, 0x3, 0xfffffffc, 0x9}, {0x3ff, 0xffffffff, 0x4, 0x0, 0x4fea, 0x8}, {0x3, 0x9, 0x4, 0x2, 0x8, 0xff0e}, {0xf5, 0xffff0001, 0x2, 0x7, 0x2, 0x2}, {0x6, 0xb, 0x7, 0x3, 0x3, 0x6}, {0x7, 0x3, 0x7ff, 0x519, 0x1, 0x401}, {0x0, 0x94fe, 0xe, 0x8, 0x4, 0xbc0b}, {0x5, 0xfb5, 0x1, 0x9, 0x0, 0x5}, {0xed81, 0x0, 0x1, 0x7, 0x6, 0x10000}, {0x4b, 0x6, 0x9, 0x14b2, 0x9, 0x7}, {0x1, 0x9, 0x3, 0xffffffff, 0x1, 0x6}, {0x1, 0xeb, 0x8, 0x5, 0x9, 0x5}, {0xfffffffd, 0x74772f86, 0x8, 0x6fcc, 0x6, 0x7}, {0x7, 0x3, 0x4, 0x8001, 0x80000000, 0x1}, {0x2, 0x2, 0x1000, 0xa5, 0x5, 0x80}, {0x10000, 0xffffffff, 0x3, 0x383a, 0x0, 0x8}, {0x7, 0x8, 0x0, 0x7, 0x7, 0x80000000}, {0x8d0, 0x6, 0x3, 0xfab, 0x6, 0x1}, {0x400, 0x80, 0x2, 0x5f, 0x2, 0xfffffffc}, {0x9a06, 0xfffffffc, 0x1, 0x3, 0x6, 0x7}, {0x4, 0x0, 0x4e, 0x6, 0x8, 0x7}, {0x8, 0x8001, 0x7, 0x6257, 0xdcb6, 0x80000001}, {0x7ff, 0xffff, 0x5, 0x2, 0x4, 0x1}, {0xfff, 0x7fff, 0xb, 0x0, 0xe, 0x8001}, {0x8000, 0x8, 0x4, 0x1, 0x1, 0x69}, {0x3, 0xffff, 0x8, 0xffffffff, 0x3, 0xffff0001}, {0x3, 0x7, 0x1000, 0x0, 0x5, 0x6}, {0x6, 0x7ff, 0x81, 0x1000, 0x2, 0x9}, {0x3, 0x7, 0x5, 0x2, 0xd9, 0x4}, {0x0, 0x4, 0x7, 0x8, 0x0, 0x40}, {0xffffffff, 0x401, 0x40000000, 0x7, 0x5, 0x8000}, {0x100, 0x7fff, 0x81, 0x401, 0x302, 0x3}, {0x7ff, 0x5, 0x4, 0x7, 0x4, 0x8000}, {0x4, 0x0, 0x0, 0x9, 0x0, 0xffff}, {0x3, 0x6, 0x9, 0xfffffffd, 0x7, 0x1d6}, {0x9, 0x9, 0xffffffff, 0xffffffff, 0x8, 0x9}, {0x3, 0x2, 0x5, 0x8, 0x2, 0x6}, {0x8000, 0x7fffffff, 0x1ff, 0x7f, 0x5, 0x8}, {0x7, 0xfffffff7, 0x1, 0x2, 0x57d, 0x8}, {0x1ff, 0x851, 0x5, 0xffff, 0x8, 0x657}, {0x7, 0xaa81, 0xd8, 0x8, 0xa821, 0xa7}, {0xe7bd, 0xfff, 0x8, 0xfffffffc, 0x4, 0x7}, {0x50, 0xf3, 0x6, 0x1, 0x10000, 0x7}, {0x4, 0x8f, 0xfffff801, 0x4c, 0xfffffffe, 0x3}, {0x7, 0x5, 0xfffffff0, 0x3, 0x9, 0x2}, {0x1000, 0x81, 0x10001, 0x9, 0x3, 0xbd}, {0x3ff, 0x8, 0x3, 0x5, 0x0, 0x5}, {0x2, 0xf5f, 0x9, 0x6, 0x10, 0xff}, {0x10, 0x6, 0xc, 0x10001, 0x2, 0x2}, {0x9, 0x1, 0x558a, 0xaf14, 0x6, 0x8}, {0x1000, 0xfff, 0x8, 0xc4, 0x71d, 0xd}, {0x0, 0xfffffff9, 0xffff, 0x2, 0x14, 0x9}, {0x9, 0xa1, 0x7, 0x0, 0x2, 0x8}, {0x0, 0x7, 0x0, 0x7d32, 0x6, 0x3}, {0x1, 0x7ff, 0x0, 0x4a84ffbb, 0x3, 0xe4d4}, {0x9, 0x5, 0x1ff, 0x200, 0x9, 0x9}, {0xfffffff8, 0x0, 0x7f, 0x0, 0x10, 0x5}, {0x6, 0x4, 0x7, 0x7, 0x800, 0x9}, {0x1, 0x5, 0x5, 0x6, 0x9, 0x8}, {0x3, 0x27e, 0x8, 0x9, 0x788, 0x181}, {0x2e90, 0x1, 0x400, 0xed6, 0x9, 0x3}, {0xff, 0x3, 0x9, 0x10, 0x7, 0x10001}, {0xf90, 0x101, 0x6, 0x100, 0x86, 0x8}, {0x6, 0x5, 0x1, 0x7744, 0x1, 0x5}, {0x8001, 0x9e1a5d, 0x2, 0x3, 0x1, 0x7}, {0x6, 0x1ff, 0xa, 0x4, 0x8, 0x8}, {0x9, 0x7, 0x2, 0x9, 0x7f, 0x79}, {0x9, 0xfffffff7, 0x8, 0xff, 0xa0b}, {0x4, 0x3, 0x7f, 0x6, 0x80}, {0x6, 0xc2f5, 0xfffffff8, 0x0, 0x6, 0x1}, {0x8, 0x9, 0x9, 0xffff, 0xffffffff, 0xb380000}, {0x6d60, 0x6, 0xe, 0x8, 0xff, 0x7}, {0x0, 0x9, 0x2, 0x5, 0x1, 0x9}, {0x5, 0x6, 0x8, 0x8, 0x55, 0x857}, {0x3, 0x5, 0x4, 0xf2, 0x8, 0x4}, {0xffffffff, 0x4, 0xa0d, 0x0, 0x4, 0xa}, {0x7, 0x8c6, 0xfffffffd, 0x10, 0x7, 0x9}, {0xfffff106, 0x8e1, 0x14c, 0x0, 0x31800, 0x101}, {0x3, 0x9, 0x6, 0xf908, 0x0, 0x4}, {0x4, 0xffffffff, 0x4, 0x7, 0x9, 0x1}, {0x2aa, 0x101, 0x4, 0x1000, 0xc, 0x74fbe152}, {0x8d, 0x7e0d, 0x1, 0xc, 0xacf5, 0x7}, {0x0, 0x81, 0x8, 0x2, 0x9, 0x80000001}, {0xca, 0x4, 0xa, 0x2, 0x10001, 0x5}, {0x8, 0x0, 0x9, 0x401, 0x2, 0x9}], [{}, {0x2, 0x1}, {0x264e0da0508fbbf1, 0x1}, {0x1}, {0x3}, {0x1}, {0x315bc8248a79c4b6}, {0x1, 0x1}, {0x2, 0x1}, {0x4}, {0x2, 0x1}, {0x2}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4}, {0x2}, {0x5}, {0x1}, {}, {}, {0x2, 0x2ee8c6841eff5fd8}, {0x4}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x4}, {0xd3787ddd1aef759a, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x2, 0x1}, {0x3, 0x1}, {0x3}, {0x2}, {}, {0x1, 0x1}, {}, {0x1, 0x1}, {0x3, 0x5d91b1f9c96a6c78}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x1}, {0x3}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0xfcba4342744e35d1, 0x1}, {0x4}, {0x1, 0x1}, {0x2, 0x1}, {0x2}, {0x4, 0x868101bea7113727}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x4}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x2}, {0x2}, {0x5}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x3, 0x1}, {}, {0x2}, {}, {0x3}, {0x5}, {0x3}, {0x1, 0x3}]}}]}, {0x103, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}, @TCA_U32_CLASSID={0x8, 0x1, {0x8, 0xf}}, @TCA_U32_MARK={0x10, 0xa, {0x7, 0x8}}, @TCA_U32_CLASSID={0x8, 0x1, {0xa, 0x6}}, @TCA_U32_SEL={0x3e4, 0x5, {0x7, 0x8, 0x6, 0x548, 0xfffb, 0x0, 0x12f, 0x1, [{0x9, 0x4, 0x85, 0x2}, {0x2, 0x0, 0x9, 0xd}, {0x40, 0xc, 0x0, 0x40}, {0x5, 0x99, 0x6, 0xd28}, {0x0, 0x3, 0x0, 0x100}, {0x7, 0x5, 0xff, 0x4}, {0x8, 0xffff816e, 0x10000, 0x9}, {0x6e72, 0x3, 0x8, 0x9}, {0xfe, 0x9, 0xffffffb5, 0xb09}, {0x3, 0x5, 0x9, 0x7}, {0xa6, 0x968, 0x2, 0x3}, {0x3, 0x9, 0x2}, {0xfffffffd, 0x0, 0x7, 0x7f}, {0x6b5, 0x1, 0xf964, 0x2}, {0x0, 0x10000, 0x1, 0x8}, {0x8, 0x800, 0x800, 0x101}, {0x9, 0x230c, 0x0, 0x1d4}, {0x2, 0x7c, 0x9, 0xe}, {0x7b1b, 0x7, 0x5, 0xfffffff8}, {0x8, 0x4, 0xda, 0x101}, {0xffff0cc8, 0x6, 0x9, 0x80}, {0xfffffff7, 0x0, 0x101, 0x7}, {0x401, 0x8000, 0x2, 0xfffeffff}, {0x0, 0x401, 0x400cbe21, 0x7}, {0x6d, 0x8, 0x5, 0x92}, {0x7, 0x8, 0x15, 0x6}, {0x9, 0x7ff, 0x3, 0x1}, {0x2, 0x9b, 0x2, 0x7}, {0x8, 0x8001, 0x1ff, 0x1}, {0x5, 0x2, 0x4}, {0xe, 0xc000, 0x7, 0x1}, {0x8, 0x2, 0x7, 0x118}, {0x7, 0xc, 0x6, 0x1ff}, {0x8, 0x5, 0x24, 0x2f}, {0xc8000000, 0x5, 0x1, 0x5}, {0x10000, 0x3ff, 0x7, 0x3}, {0xb4cc, 0x8000, 0x1, 0x6}, {0xffffbbc6, 0xb, 0x1, 0xa3}, {0x0, 0x81, 0x6, 0x1}, {0x2, 0x3, 0x7, 0x100}, {0xe, 0xc, 0x1, 0xfffffffa}, {0x1, 0x939, 0x3, 0x2945}, {0x900, 0x7f8, 0x5, 0x2}, {0x1, 0x2, 0xffffffff, 0x1}, {0x0, 0x5, 0xf, 0x7}, {0x8, 0xbc, 0x0, 0x46b}, {0x7, 0x9, 0x1, 0x7}, {0x5, 0x0, 0x2, 0x2}, {0x39, 0x8, 0x3ff, 0xb91}, {0x9, 0x3, 0x26cc07b6, 0xbe6}, {0x7, 0x5b4, 0x8, 0xfffffff7}, {0x5, 0x2, 0x9, 0x6}, {0x6, 0xe7c, 0x40, 0x82}, {0x2, 0x7, 0x3, 0xb}, {0x3fa, 0x1, 0xffffffff, 0x7}, {0x4, 0x9, 0x6, 0x3}, {0xf59, 0x81, 0x3ff, 0x80}, {0x5, 0x7615, 0x401, 0x1}, {0x3, 0x3, 0x8, 0x27}, {0x5, 0xfff, 0x0, 0x2b}, {0x1, 0x3, 0x4, 0x4}]}}, @TCA_U32_POLICE={0x44c, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0xff, 0xffffffffffffffff, 0x9, 0x3305, 0x8000, {0x3, 0x1, 0xfe01, 0x0, 0x1, 0x3}, {0x4, 0x1, 0x6, 0x7, 0x3ff, 0x9}, 0x3, 0x6, 0x62e}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x101, 0xcfe3c6b, 0x6, 0x4d24, 0xd9, 0x75, 0xb5a, 0x9f5, 0xffffff42, 0x9, 0xf8, 0xfff, 0x9, 0xc6, 0xd96, 0x7, 0x5, 0x5, 0x5, 0xfffffff8, 0xff, 0x7, 0x40, 0x5, 0x2, 0x1000, 0x66, 0x8, 0x5, 0x0, 0x8, 0x3, 0x2c, 0xe8, 0x5a, 0x798b, 0x9, 0x8, 0x4, 0x7, 0xf, 0xe58, 0x1, 0x4b4d6047, 0x3, 0x3, 0x5, 0x4b, 0x80, 0xfff, 0xf, 0x75d9, 0x5, 0x6a, 0x1, 0x5, 0x101, 0x4, 0xff, 0x10001, 0x4, 0x2, 0x8001, 0x10000, 0xffff, 0xfffffdb0, 0x4, 0xa, 0x1, 0x5, 0x5, 0x5863, 0x100, 0x4, 0x9, 0x81, 0x8, 0x1, 0x10001, 0x1, 0x8, 0x8b, 0x3e, 0x8, 0x40000, 0x1, 0x1, 0x6b2, 0x21b3, 0x8001, 0x5, 0x5, 0xffff0000, 0x4, 0xfffffc01, 0x4c6, 0xfff, 0x5, 0x2, 0x0, 0x8, 0xd53, 0xfff, 0x1, 0x6, 0x3, 0x4, 0xf, 0x7fffffff, 0x193, 0x8001, 0x1, 0x3, 0xffffffa1, 0x4, 0x7, 0xfffffff2, 0x1, 0x10, 0x8d7, 0x0, 0xfffffffc, 0x7, 0x9, 0x3, 0x0, 0x2, 0x6b, 0x6, 0x2, 0xd, 0x8, 0x0, 0x90, 0x7e7, 0x81, 0xb, 0x401, 0x6, 0xd4b6, 0x7, 0x5, 0x6, 0x3f, 0x1, 0x7, 0x8, 0x9, 0x4, 0x4, 0x6, 0x8, 0x1, 0x0, 0x8000, 0x7fffffff, 0xfff, 0x8, 0x7, 0x3, 0x7, 0x1, 0x1ff, 0x400, 0x9, 0x3, 0x7, 0x10, 0x1, 0x200, 0x81, 0x0, 0x7, 0x8, 0x8, 0x8, 0x8, 0x4, 0x4, 0xfffffc01, 0x6, 0x3, 0x12, 0x80000000, 0x254, 0x2, 0x9, 0x229, 0x6, 0x9, 0x10, 0x7, 0x400, 0x7, 0x6, 0x5, 0x0, 0x4, 0x8000, 0x76f092ca, 0xfffff801, 0x9, 0x6, 0xffffffff, 0x797, 0xa45f, 0x1, 0x10f, 0x0, 0x100, 0x2, 0x401, 0x8, 0x7fff, 0x4, 0x7, 0x3, 0x7b3f, 0x9b, 0x8, 0x1, 0x9, 0x7, 0xffffffff, 0xd31, 0x81, 0x1000, 0x1, 0x2, 0x8, 0x80000000, 0x1, 0xfffffff8, 0x0, 0xc6d, 0x7, 0xfffff448, 0x73e, 0x8b, 0x10, 0xe, 0xa8, 0x2, 0x0, 0xf, 0x10001, 0x6, 0x0, 0x14bc, 0x22, 0x1ff, 0x4, 0x8, 0xf2, 0x2922]}]}, @TCA_U32_INDEV={0x14, 0x8, 'wg2\x00'}]}}, @TCA_CHAIN={0x8, 0xb, 0x800}, @TCA_CHAIN={0x8, 0xb, 0x2}, @TCA_RATE={0x6, 0x5, {0x8, 0x42}}, @TCA_CHAIN={0x8, 0xb, 0x4}]}, 0x4718}, 0x1, 0x0, 0x0, 0x8000}, 0xc000) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r7, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000006c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="190300000000000000004a0000000e0002"], 0x34}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x7800, 0x700, 0x1, 0x0, {{0x5, 0x4, 0x2, 0x0, 0x14, 0x66, 0x0, 0xe, 0x4, 0x0, @multicast1, @local}}}}) write$tun(r2, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0xfce) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) r13 = socket(0x11, 0xa, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r13, 0x891e, &(0x7f0000000080)={'ip6gre0\x00', 0x0}) sendmsg$IPCTNL_MSG_CT_NEW(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000100005800a000100512e39d534c37a65"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @private2}]}}}]}, 0x4c}}, 0x0) r14 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r4) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="000227bd7000fbdbdf250191823bf158d04f8d04801300000008000400060000000500050000000000080004000010a10008000200000000000800030000"], 0x44}, 0x1, 0x0, 0x0, 0x4044000}, 0x4000000) 809.85566ms ago: executing program 0 (id=4711): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={0x1, 0xffffffffffffffff}, 0x4) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newtaction={0x6c, 0x30, 0x51b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x0, 0x20000000}, 0x9}}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}]}]}, 0x6c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8f7ffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000002000000b70500000800000085000000a500000095"], &(0x7f0000000300)='GPL\x00', 0x5}, 0x94) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x29, 0x6, 0x4, 0xffff, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00', 0x20, 0x80, 0xc3c3, 0x8}}) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000240)={0x1, 0x1, 0x80, 0x3, @vifc_lcl_ifindex=r3, @multicast2}, 0x10) 702.662328ms ago: executing program 5 (id=4712): socket$inet_udplite(0x2, 0x2, 0x88) (async) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f0000000000)={@broadcast, @loopback, @initdev}, &(0x7f0000000040)=0xc) 642.89884ms ago: executing program 2 (id=4713): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000120065f2000000005c8602fb93ba9c00", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00.'], 0x28}}, 0x0) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000640)=[{&(0x7f0000000100)="afa63660", 0x4}], 0x1) recvmsg$unix(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) close(r3) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)={0x15c, r0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_SEC_LEVEL={0xc, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7}]}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x4}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1}]}, @NL802154_ATTR_SEC_LEVEL={0x54, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x74}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x4c}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x9}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x9}]}, @NL802154_ATTR_SEC_LEVEL={0x54, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x6}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xc}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x8}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_LEVEL={0x2c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x4}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x9}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x2000c000}, 0x80) 616.356665ms ago: executing program 5 (id=4714): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f02feff000000000001000058000b4824ca945f64009400ff0325010ebc000000000000008004f0fffeffe809005300fff5dd000000100001000d0c10000000000000000000", 0x58}], 0x1) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (rerun: 32) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async, rerun: 32) r3 = socket$kcm(0x2, 0xa, 0x2) (rerun: 32) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) (async, rerun: 64) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) (async) writev(r2, &(0x7f00000004c0)=[{&(0x7f0000000100)='\x00\x00\x00\x00', 0x4}, {&(0x7f0000000800)="38c8114fa3db529ed03bcef786dd", 0xe}], 0x2) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001900)={'wlan1\x00'}) 601.720507ms ago: executing program 6 (id=4715): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000a40)={'veth1_to_team\x00', &(0x7f0000002b80)=@ethtool_gstrings={0x1b, 0x8, 0x5, "8aa3fcdf10"}}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) getsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f00000000c0)={@initdev, @broadcast}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="18000700"/20, @ANYRES32=0x0], 0x18}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r5, &(0x7f0000000000)="e6", 0x0}, 0x20) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) r7 = socket(0x22, 0x2, 0x2) getsockopt$inet_sctp_SCTP_ASSOCINFO(r7, 0x84, 0x1, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000000280)=0x124000, 0x4) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, 0x0, 0x0) sendmmsg$inet(r8, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d9", 0x32}], 0x1}}], 0x1, 0x2090) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r8, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000b00)=""/4096, 0x1000, 0x1, 0x0}, &(0x7f0000000180)=0x40) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f000000cbc0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x97}, [{}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7f}], [{}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r11) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x2c, r12, 0x1, 0x0, 0x0, {0x4}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r6, {0x7}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) 454.613528ms ago: executing program 2 (id=4716): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x2, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000006301edff0000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) socket$packet(0x11, 0x3, 0x300) (async) shutdown(0xffffffffffffffff, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x200480c1) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async) syz_emit_ethernet(0x3a, &(0x7f0000002a40)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x4, 0x81}}}}}}, 0x0) (async) setsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000100)=0x5, 0x4) recvmsg(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5d}, 0x20) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x1b8}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) (async) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000080)={r0, 0x2, 0x584fa81b}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x4, 0x9, 0x2, 0x6, 0x42, @mcast2, @remote, 0x768, 0x7, 0x1, 0x7}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x1f, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x30}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ldst={0x0, 0x0, 0x4, 0x6, 0x3, 0x40, 0x8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe06}}, @ldst={0x0, 0x0, 0x0, 0x6, 0x4, 0xffffffffffffffff, 0x10}, @ldst={0x0, 0x3, 0x0, 0x8, 0x2, 0x80, 0xffffffffffffffff}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000300)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', r5, 0x38}, 0x94) 454.299308ms ago: executing program 0 (id=4717): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="240000001a1401002abd700001dcdf250800010000000000090002"], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) (async) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="240000001a1401002abd700001dcdf250800010000000000090002"], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="000000e8ff07000014000300000000000000000000000000000000001800128008000100707070000c000280", @ANYRES32], 0x4c}}, 0x0) 362.329474ms ago: executing program 5 (id=4718): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x25, 0x1, @val=@kprobe_multi=@addrs={0x1, 0x2, 0x0, &(0x7f0000000040)=[0x3, 0x2], 0x4}}, 0x30) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x20) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000009c0)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)}], 0x1, 0x0, 0x0, 0x20000000}], 0x1, 0x24000040) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004c80), 0x0, 0x4004000) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 356.723302ms ago: executing program 0 (id=4719): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x50, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'lo\x00', 0x0}) (async, rerun: 64) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e22, 0x8, @mcast1, 0x7}}, [0x100, 0x7fff, 0x7, 0xb, 0x9, 0x0, 0x1, 0x14, 0x28a2e51e, 0x7, 0x5, 0x9, 0x2, 0xee0e, 0x7]}, &(0x7f0000000040)=0x100) (rerun: 64) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000200)={0x200, 0x7, 0x0, 0x1fc8000, 0x6, 0x1, 0x400, 0x8001, r4}, &(0x7f0000000280)=0x20) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x8a}]}}]}, 0x3c}}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000080)={0x2, 0x0, 0x0, @private1}, 0xf) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000240), 0x12) (async) r8 = openat$cgroup_procs(r6, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x34, 0x2, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x7}, @CTA_EXPECT_MASK={0x10, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004000}, 0x4001) sendfile(r8, r8, 0x0, 0x9) 307.548563ms ago: executing program 2 (id=4720): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newtaction={0x68, 0x32, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffff7}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x41, 0x3, 0x288, 0x0, 0x0, 0x0, 0x120, 0x0, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @remote, 0x0, 0x0, 'wlan1\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0xf8, 0x120, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}, @common=@inet=@multiport={{0x50}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@broadcast, @private, 0x0, 0x0, 'veth1_to_team\x00', 'sit0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2e8) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)={0x24, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r5}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b64087c6030"]}]}, 0x24}], 0x1}, 0x84) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x5e, 0x0, r5}, {0x0, 0x800, 0x0, 0x7, 0x0, 0x0, 0x3, 0x7}, {0x0, 0x0, 0x3}, 0x3}, [@tmpl={0x184, 0x5, [{{@in=@remote, 0x0, 0x6c}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x8}, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x1}, {{@in6=@private2, 0x0, 0x32}, 0x0, @in6=@remote, 0x3502}, {{@in6=@loopback, 0x0, 0x3c}, 0x2, @in=@remote, 0x0, 0x1, 0x3}, {{@in6=@mcast2, 0x4d3, 0x3c}, 0xa, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in=@empty, 0x0, 0x32}, 0x2, @in=@dev, 0xffffffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x2b}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x4}]}]}, 0x23c}}, 0x0) 199.023571ms ago: executing program 5 (id=4721): socket$tipc(0x1e, 0x5, 0x0) (async) r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) (async) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000000c0)=@ipv6_getaddr={0x18, 0x16, 0x1, 0x0, 0xfffffffc, {0xa, 0x0, 0x0, 0xfe}}, 0x18}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$inet6_udplite(0xa, 0x2, 0x88) (async) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) (async) close(r6) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) (async) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r5, &(0x7f00000001c0)=[{&(0x7f0000000000)="8903000000000000017380c888ca", 0xe}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="db07d0e2", @ANYRES16=r2, @ANYBLOB="0100fdfffffffcdbdf250200000008000300", @ANYRES32=r4, @ANYBLOB="080026005014000008009f0007000000"], 0x2c}, 0x1, 0x0, 0x0, 0xd37697ff280d3c0e}, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x40, 0x6, 0x3}, 0x10) 138.307017ms ago: executing program 6 (id=4722): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000004d40)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1, 0x2}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{&(0x7f0000000340)={0xa, 0x4e23, 0x4, @private2, 0x58}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000380)="998165", 0x3}], 0x1}}], 0x2, 0x0) shutdown(r1, 0x1) setsockopt(r1, 0x84, 0x83, &(0x7f00000002c0)="1a00000002000000", 0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000100)={0x0, 0x64, 0x6, [0x100, 0x6, 0x101, 0x0, 0x2, 0x8001]}, &(0x7f0000000140)=0x14) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000000c0)={0x84, @dev={0xac, 0x14, 0x14, 0x9}, 0x19, 0x3, 'sh\x00', 0x29, 0x10000, 0x10800008}, 0x2c) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x401, 0xfffffffd, 0x3, {0x0, 0x0, 0x0, 0x0, 0xd126a8577c57125b, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x9, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_FLOOD={0x5, 0x1b, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0xfc56}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) close(r5) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018008000100666962001c0002800800024000000001080001400000000008000340000000110900010073797a30000004000900020073797a3200000000140000001100010000000000000000000000000a"], 0x80}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x8}, @IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}, @IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x50}}, 0x0) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x181341, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) close(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r11 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_ext={0x1c, 0x35, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xad6, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @alu={0x7, 0x0, 0x3, 0x8, 0x1, 0x100, 0x10}, @ldst={0x0, 0x2, 0x8940958054bae543, 0xa, 0x5, 0x20, 0x10}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf135}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @alu={0x4, 0x1, 0xb, 0xb, 0x9, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000300)='syzkaller\x00', 0x1ff, 0xd3, &(0x7f00000007c0)=""/211, 0x41100, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0x1, 0x8, 0xffff, 0x80000000}, 0x10, 0xd37a, 0xffffffffffffffff, 0x4, &(0x7f0000000500)=[0x1, 0x1, 0xffffffffffffffff, 0x1], &(0x7f00000008c0)=[{0x5, 0x1, 0xf, 0xb}, {0x0, 0x3, 0x6, 0x4}, {0x4, 0x3, 0xe, 0x1}, {0x4, 0x4, 0x6, 0x1}], 0x10, 0x6}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000009c0)=r11, 0x4) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="80000000", @ANYRES16=r7, @ANYBLOB="010000000040030000000f00000008000300", @ANYRES32=r8, @ANYBLOB="4a000e0080000000080211000001080211000000a968dcf6a11b0000000000000000000064000100040603070200fc002a01013c040104070671070000000001060876060c027fffe900000008000c00640000000500a3000100000008000d"], 0x80}}, 0x0) 2.70992ms ago: executing program 0 (id=4723): r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000305000000000020000000000000", @ANYRES32=0x0, @ANYBLOB="15e3000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r2, @ANYBLOB="0a000100aaaa00"], 0x48}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(r3, &(0x7f0000000180)={0x0, 0xffbd, &(0x7f0000000140)={&(0x7f00000001c0)={0x44, r4, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0xffffffffffffffb8, 0x9, 0x2}}]}, 0x44}, 0x1, 0x0, 0x0, 0x840}, 0x20004000) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 0s ago: executing program 2 (id=4724): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, r1, 0x1, 0x70bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x24}}, 0x80) socket$inet_tcp(0x2, 0x1, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[], 0x1c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x2, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) kernel console output (not intermixed with test programs): dv: batadv0: Interface activated: batadv_slave_1 [ 307.996941][T13575] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.006755][T13575] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.016556][T13575] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.026959][T13575] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.063218][ T5831] Bluetooth: hci3: command tx timeout [ 308.107530][T13575] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.116467][T13575] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.146224][T13575] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.157027][T13575] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.633273][T17202] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3022'. [ 308.738702][ T5826] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 308.751485][ T5826] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 308.765372][ T5826] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 308.775238][ T5826] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 308.785198][ T5826] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 309.007550][T17210] syzkaller0: entered promiscuous mode [ 309.017428][T17210] syzkaller0: entered allmulticast mode [ 309.044856][T17220] pimreg: entered allmulticast mode [ 309.181658][T17225] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3026'. [ 310.141932][ T5831] Bluetooth: hci3: command tx timeout [ 310.635414][T17227] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3026'. [ 310.644927][ T3015] net_ratelimit: 13 callbacks suppressed [ 310.644946][ T3015] bond7: (slave macvlan2): failed to get link speed/duplex [ 310.761111][T13559] bond7: (slave macvlan2): failed to get link speed/duplex [ 310.870029][ T5831] Bluetooth: hci0: command tx timeout [ 310.910520][T13559] bond7: (slave macvlan2): failed to get link speed/duplex [ 310.924944][T17206] wlan0 speed is unknown, defaulting to 1000 [ 310.943575][T17206] wg1 speed is unknown, defaulting to 1000 [ 310.949460][T17251] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3033'. [ 311.006641][T17251] netlink: 100 bytes leftover after parsing attributes in process `syz.5.3033'. [ 311.030408][T13575] bond7: (slave macvlan2): failed to get link speed/duplex [ 311.126450][T17262] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3034'. [ 311.260298][T13559] bond7: (slave macvlan2): failed to get link speed/duplex [ 311.282878][T17206] chnl_net:caif_netlink_parms(): no params data found [ 311.361504][T17272] xt_CT: No such helper "syz1" [ 311.403525][T17280] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3039'. [ 311.426191][T17280] Cannot find add_set index 0 as target [ 311.475895][T17206] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.484286][T17206] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.491846][T17206] bridge_slave_0: entered allmulticast mode [ 311.499592][T17206] bridge_slave_0: entered promiscuous mode [ 311.508747][T17206] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.516815][T17206] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.524570][T17206] bridge_slave_1: entered allmulticast mode [ 311.532380][T17206] bridge_slave_1: entered promiscuous mode [ 311.581744][T17206] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.598975][T17206] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 311.652459][T13575] bond7: (slave macvlan2): failed to get link speed/duplex [ 311.810406][T17206] team0: Port device team_slave_0 added [ 311.827717][T17206] team0: Port device team_slave_1 added [ 311.933603][T17303] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3045'. [ 311.971014][T17206] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 312.007124][T17206] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 312.044435][T17206] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 312.088541][T17206] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 312.096442][T17307] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3046'. [ 312.106698][T17206] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 312.127314][T17307] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3046'. [ 312.133735][T17206] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 312.153739][T17310] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3045'. [ 312.220692][ T5831] Bluetooth: hci3: command tx timeout [ 312.247361][T17310] team0: Port device team_slave_0 removed [ 312.452720][T17329] syzkaller0: entered promiscuous mode [ 312.458301][T17329] syzkaller0: entered allmulticast mode [ 312.488502][T17206] hsr_slave_0: entered promiscuous mode [ 312.499439][T17206] hsr_slave_1: entered promiscuous mode [ 312.508463][T17206] debugfs: 'hsr0' already exists in 'hsr' [ 312.515058][T17206] Cannot create hsr debugfs directory [ 312.534226][T17335] tipc: Started in network mode [ 312.539232][T17335] tipc: Node identity b639a2332bae, cluster identity 4711 [ 312.553707][T17335] tipc: Enabled bearer , priority 0 [ 312.618700][T17329] tipc: Resetting bearer [ 312.644729][T17327] tipc: Resetting bearer [ 312.664406][T17327] tipc: Disabling bearer [ 312.681037][ T3015] bond7: (slave macvlan2): failed to get link speed/duplex [ 312.870453][T13559] bond7: (slave macvlan2): failed to get link speed/duplex [ 312.941621][ T5831] Bluetooth: hci0: command tx timeout [ 312.990136][T13559] bond7: (slave macvlan2): failed to get link speed/duplex [ 313.005490][T17206] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 313.029633][T17206] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 313.055581][T17206] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 313.094219][T17206] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 313.105837][T17354] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3061'. [ 313.182288][T13556] bond7: (slave macvlan2): failed to get link speed/duplex [ 313.294657][T17206] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.347898][T17206] 8021q: adding VLAN 0 to HW filter on device team0 [ 313.392267][T13559] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.399447][T13559] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.503313][T13554] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.510627][T13554] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.526440][T17376] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 313.752171][T17388] netlink: 'syz.1.3069': attribute type 83 has an invalid length. [ 313.919112][T17206] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 314.586997][T17206] veth0_vlan: entered promiscuous mode [ 314.603212][T17206] veth1_vlan: entered promiscuous mode [ 314.685241][T17206] veth0_macvtap: entered promiscuous mode [ 314.716646][T17206] veth1_macvtap: entered promiscuous mode [ 314.764090][T17206] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 314.811668][T17206] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 314.835037][T17448] vlan2: entered allmulticast mode [ 314.840780][T17448] veth0_to_batadv: entered allmulticast mode [ 314.872519][ T3015] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.888135][ T3015] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.929802][ T3015] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.968434][ T3015] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.020034][ T5831] Bluetooth: hci0: command tx timeout [ 315.318487][T13575] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.350382][T13575] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.384320][T17481] netlink: 'syz.0.3089': attribute type 1 has an invalid length. [ 315.405838][T17481] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 315.413225][T17481] IPv6: NLM_F_CREATE should be set when creating new route [ 315.487399][T13556] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.488756][T17485] block nbd3: Unsupported socket: should be TCP or UNIX. [ 315.496927][T13556] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.528863][T17484] block nbd3: Unsupported socket: should be TCP or UNIX. [ 315.727253][T17494] __nla_validate_parse: 6 callbacks suppressed [ 315.727270][T17494] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3096'. [ 315.743761][T13559] net_ratelimit: 16 callbacks suppressed [ 315.743780][T13559] bond7: (slave macvlan2): failed to get link speed/duplex [ 315.759099][T17498] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3095'. [ 315.804916][T17499] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3095'. [ 315.823242][T17498] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3095'. [ 315.881199][T13559] bond7: (slave macvlan2): failed to get link speed/duplex [ 316.002043][T13556] bond7: (slave macvlan2): failed to get link speed/duplex [ 316.011677][T17498] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3095'. [ 316.057213][T17498] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3095'. [ 316.079498][ T5826] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 316.093304][ T5826] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 316.100409][T17513] netlink: 388 bytes leftover after parsing attributes in process `syz.6.3100'. [ 316.110952][ T5826] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 316.118983][ T5826] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 316.126887][T13556] bond7: (slave macvlan2): failed to get link speed/duplex [ 316.135518][ T5826] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 316.245184][T17518] netlink: 'syz.6.3101': attribute type 11 has an invalid length. [ 316.253292][T13554] bond7: (slave macvlan2): failed to get link speed/duplex [ 316.253447][T17518] netlink: 224 bytes leftover after parsing attributes in process `syz.6.3101'. [ 316.353250][T17498] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3095'. [ 316.363081][T17498] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3095'. [ 316.391894][T13559] bond7: (slave macvlan2): failed to get link speed/duplex [ 316.424936][T17520] netlink: 'syz.6.3102': attribute type 1 has an invalid length. [ 316.542887][T17520] bond1 (unregistering): Released all slaves [ 316.628001][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057863400: rx timeout, send abort [ 316.654311][T17527] mac80211_hwsim hwsim41 wlan0: entered promiscuous mode [ 316.668181][T17509] wlan0 speed is unknown, defaulting to 1000 [ 316.674549][T13554] bond7: (slave macvlan2): failed to get link speed/duplex [ 316.704233][T17509] wg1 speed is unknown, defaulting to 1000 [ 316.754286][T13559] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x2 [ 316.816913][ T3015] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 316.833046][ T3015] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.955056][ T3015] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 316.989511][ T3015] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.040419][T13556] bond7: (slave macvlan2): failed to get link speed/duplex [ 317.130154][ T5831] Bluetooth: hci0: command tx timeout [ 317.137897][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057863400: abort rx timeout. Force session deactivation [ 317.234851][T17554] openvswitch: netlink: Multiple metadata blocks provided [ 317.306196][ T3015] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 317.372125][ T3015] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.473233][T13556] bond7: (slave macvlan2): failed to get link speed/duplex [ 317.534668][ T3015] bond0: (slave netdevsim0): Releasing backup interface [ 317.557592][ T3015] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 317.574138][ T3015] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.776727][T17580] syzkaller1: entered promiscuous mode [ 317.794202][T17580] syzkaller1: entered allmulticast mode [ 318.220007][ T5831] Bluetooth: hci7: command tx timeout [ 318.466212][ T3015] dvmrp0 (unregistering): left allmulticast mode [ 318.719013][ T3015] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 318.731060][ T3015] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 318.743155][ T3015] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 318.753267][ T3015] bond0 (unregistering): Released all slaves [ 318.763343][ T3015] bond1 (unregistering): Released all slaves [ 318.865600][ T3015] bond2 (unregistering): Released all slaves [ 318.968162][ T3015] bond3 (unregistering): Released all slaves [ 319.073968][ T3015] bond4 (unregistering): Released all slaves [ 319.174249][ T3015] bond5 (unregistering): Released all slaves [ 319.194425][T17509] chnl_net:caif_netlink_parms(): no params data found [ 319.277598][T17601] bond1: entered promiscuous mode [ 319.293190][T17601] bond1: entered allmulticast mode [ 319.312172][T17601] 8021q: adding VLAN 0 to HW filter on device bond1 [ 319.374527][ T3015] : left promiscuous mode [ 319.699462][ T3015] tipc: Disabling bearer [ 319.721156][ T3015] tipc: Left network mode [ 319.835236][ T3015] IPVS: stopping backup sync thread 11021 ... [ 319.960732][T17509] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.968318][T17509] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.998757][T17509] bridge_slave_0: entered allmulticast mode [ 320.010638][T17509] bridge_slave_0: entered promiscuous mode [ 320.028567][T17646] bridge4: entered promiscuous mode [ 320.064715][T17509] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.081314][T17509] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.105861][T17509] bridge_slave_1: entered allmulticast mode [ 320.124018][T17509] bridge_slave_1: entered promiscuous mode [ 320.267316][T17509] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 320.311455][ T5831] Bluetooth: hci7: command tx timeout [ 320.449267][T17509] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 320.557568][T17674] netdevsim netdevsim0: Direct firmware load for  failed with error -2 [ 320.598189][T17674] netdevsim netdevsim0: Falling back to sysfs fallback for:  [ 320.662002][T17509] team0: Port device team_slave_0 added [ 320.694759][T17509] team0: Port device team_slave_1 added [ 320.872941][T13565] net_ratelimit: 3 callbacks suppressed [ 320.872960][T13565] bond7: (slave macvlan2): failed to get link speed/duplex [ 320.959640][T17509] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 320.972674][T17509] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 321.022232][T17509] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 321.060013][T13565] bond7: (slave macvlan2): failed to get link speed/duplex [ 321.103758][ T3015] hsr_slave_1: left promiscuous mode [ 321.115193][ T3015] veth1_macvtap: left promiscuous mode [ 321.124209][ T3015] veth0_macvtap: left promiscuous mode [ 321.131370][ T3015] veth1_vlan: left promiscuous mode [ 321.137436][ T3015] veth0_vlan: left promiscuous mode [ 321.759462][ T3015] team0 (unregistering): Port device team_slave_1 removed [ 321.798904][ T3015] team0 (unregistering): Port device team_slave_0 removed [ 322.105388][T17509] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 322.112767][T17509] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 322.139614][T17509] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 322.216199][T17707] netlink: 'syz.6.3146': attribute type 2 has an invalid length. [ 322.244289][T17707] netlink: 'syz.6.3146': attribute type 1 has an invalid length. [ 322.381037][ T5831] Bluetooth: hci7: command tx timeout [ 322.523091][T17741] __nla_validate_parse: 8 callbacks suppressed [ 322.523108][T17741] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3152'. [ 323.268425][T17757] IPv6: addrconf: prefix option has invalid lifetime [ 323.275189][T17757] IPv6: addrconf: prefix option has invalid lifetime [ 324.137616][T17740] netlink: 'syz.6.3152': attribute type 4 has an invalid length. [ 324.168964][T17509] hsr_slave_0: entered promiscuous mode [ 324.178551][T17509] hsr_slave_1: entered promiscuous mode [ 324.186367][T17509] debugfs: 'hsr0' already exists in 'hsr' [ 324.200667][T17509] Cannot create hsr debugfs directory [ 324.278820][T17741] hsr_slave_1 (unregistering): left promiscuous mode [ 324.460012][ T5831] Bluetooth: hci7: command tx timeout [ 324.629378][ T3015] IPVS: stop unused estimator thread 0... [ 324.630731][T13575] bond7: (slave macvlan2): failed to get link speed/duplex [ 324.738343][T17782] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 324.929030][T17787] IPVS: Scheduler module ip_vs_sip not found [ 324.950093][T13556] bond7: (slave macvlan2): failed to get link speed/duplex [ 325.107721][T17805] netlink: 'syz.6.3166': attribute type 11 has an invalid length. [ 325.108787][T13559] bond7: (slave macvlan2): failed to get link speed/duplex [ 325.341656][T13556] bond7: (slave macvlan2): failed to get link speed/duplex [ 325.532244][T17836] netlink: 'syz.6.3173': attribute type 2 has an invalid length. [ 325.606746][T17839] syzkaller1: entered promiscuous mode [ 325.629056][T17839] syzkaller1: entered allmulticast mode [ 325.671159][T17843] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3172'. [ 325.681679][T13556] bond7: (slave macvlan2): failed to get link speed/duplex [ 325.691105][T17843] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3172'. [ 325.816704][T13559] bond7: (slave macvlan2): failed to get link speed/duplex [ 326.100429][T13559] bond7: (slave macvlan2): failed to get link speed/duplex [ 326.121867][T17509] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 326.156387][T17509] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 326.156460][T17865] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.3179'. [ 326.197405][T17509] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 326.244890][T17509] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 326.371236][T13559] bond7: (slave macvlan2): failed to get link speed/duplex [ 326.476568][T17894] : renamed from ipvlan1 [ 326.653885][T13575] bond7: (slave macvlan2): failed to get link speed/duplex [ 326.725100][T17509] 8021q: adding VLAN 0 to HW filter on device bond0 [ 326.786030][T17509] 8021q: adding VLAN 0 to HW filter on device team0 [ 326.800882][T13556] bond7: (slave macvlan2): failed to get link speed/duplex [ 326.821486][T13559] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.828770][T13559] bridge0: port 1(bridge_slave_0) entered forwarding state [ 326.921304][T13556] bond7: (slave macvlan2): failed to get link speed/duplex [ 326.937168][T13559] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.944403][T13559] bridge0: port 2(bridge_slave_1) entered forwarding state [ 327.067115][T17918] netlink: 'syz.6.3192': attribute type 39 has an invalid length. [ 327.100908][ T3015] bond7: (slave macvlan2): failed to get link speed/duplex [ 327.320118][T13556] bond7: (slave macvlan2): failed to get link speed/duplex [ 327.431374][T13559] bond7: (slave macvlan2): failed to get link speed/duplex [ 327.463382][T17945] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3198'. [ 327.539900][T13560] bond7: (slave macvlan2): failed to get link speed/duplex [ 327.657208][ T3015] bond7: (slave macvlan2): failed to get link speed/duplex [ 327.780813][T17952] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3200'. [ 327.858331][T17967] xt_hashlimit: overflow, try lower: 3/0 [ 327.962024][T17971] netlink: 'syz.0.3204': attribute type 1 has an invalid length. [ 328.091039][T17968] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 328.110318][T17968] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 328.177964][T17971] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3204'. [ 328.196736][T17968] bond2: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 328.253640][T17509] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 328.443941][T17509] veth0_vlan: entered promiscuous mode [ 328.484248][T17992] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3209'. [ 328.607905][T18002] syzkaller0: entered promiscuous mode [ 328.617128][T18002] syzkaller0: entered allmulticast mode [ 328.637983][T17509] veth1_vlan: entered promiscuous mode [ 330.240947][T18007] vxcan1 speed is unknown, defaulting to 1000 [ 330.331010][T18007] vxcan1 speed is unknown, defaulting to 1000 [ 330.344524][T18007] vxcan1 speed is unknown, defaulting to 1000 [ 330.392832][T17509] veth0_macvtap: entered promiscuous mode [ 330.430303][T17509] veth1_macvtap: entered promiscuous mode [ 330.473188][T17509] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 330.477076][T18036] netlink: 'syz.2.3217': attribute type 2 has an invalid length. [ 330.488933][T18036] netlink: 'syz.2.3217': attribute type 1 has an invalid length. [ 330.502137][T18036] netlink: 'syz.2.3217': attribute type 2 has an invalid length. [ 330.514813][T17509] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 330.565502][T13554] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.591184][T13554] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.625559][T18036] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3217'. [ 330.645671][T13554] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.661335][T13554] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.729684][T18041] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.743405][T18045] netlink: 'syz.5.3219': attribute type 1 has an invalid length. [ 330.753560][T18041] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.782631][T18047] netlink: 'syz.0.3218': attribute type 16 has an invalid length. [ 330.818994][T18047] netlink: 'syz.0.3218': attribute type 17 has an invalid length. [ 330.893597][T18007] infiniband syz2: set active [ 330.899517][T18007] infiniband syz2: added vxcan1 [ 330.907473][T18007] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 330.916866][T18007] infiniband syz2: Couldn't open port 1 [ 330.967094][T18007] RDS/IB: syz2: added [ 330.968049][T18045] bond3: entered promiscuous mode [ 330.973772][T18007] smc: adding ib device syz2 with port count 1 [ 330.977638][T18045] 8021q: adding VLAN 0 to HW filter on device bond3 [ 330.987655][T18007] smc: ib device syz2 port 1 has no pnetid [ 331.085359][ T5946] vxcan1 speed is unknown, defaulting to 1000 [ 331.100429][ T9] vxcan1 speed is unknown, defaulting to 1000 [ 331.116827][T18007] vxcan1 speed is unknown, defaulting to 1000 [ 331.130272][T13559] net_ratelimit: 7 callbacks suppressed [ 331.130288][T13559] bond7: (slave macvlan2): failed to get link speed/duplex [ 331.256862][T18062] syzkaller0: entered promiscuous mode [ 331.270803][T18062] syzkaller0: entered allmulticast mode [ 331.295143][T13556] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.310123][ T3015] bond7: (slave macvlan2): failed to get link speed/duplex [ 331.332653][T13556] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.353446][T18071] pimreg: left allmulticast mode [ 331.432279][T18062] tipc: Started in network mode [ 331.437185][T18062] tipc: Node identity ca297c26229c, cluster identity 4711 [ 331.454572][T18062] tipc: Enabled bearer , priority 0 [ 331.471867][T18062] tipc: Resetting bearer [ 331.481264][T18061] tipc: Resetting bearer [ 331.508852][T18061] tipc: Disabling bearer [ 331.535626][ T3015] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.543865][T18007] vxcan1 speed is unknown, defaulting to 1000 [ 331.560274][T13575] bond7: (slave macvlan2): failed to get link speed/duplex [ 331.564274][ T3015] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.671861][T13575] bond7: (slave macvlan2): failed to get link speed/duplex [ 331.801781][ T3015] bond7: (slave macvlan2): failed to get link speed/duplex [ 331.912017][T18092] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3230'. [ 331.940330][T13556] bond7: (slave macvlan2): failed to get link speed/duplex [ 331.966929][ T797] hid-generic 0005:0006:5508.0002: hidraw0: BLUETOOTH HID vc3.36 Device [syz0] on aa:aa:aa:aa:aa:aa [ 332.043488][T18007] vxcan1 speed is unknown, defaulting to 1000 [ 332.051042][T13565] bond7: (slave macvlan2): failed to get link speed/duplex [ 332.189015][T18104] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3236'. [ 332.198466][T13556] bond7: (slave macvlan2): failed to get link speed/duplex [ 332.233841][T18098] fido_id[18098]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci7/hci7:200/report_descriptor': No such file or directory [ 332.234381][T18103] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 332.282526][T18106] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 332.332855][ T3015] bond7: (slave macvlan2): failed to get link speed/duplex [ 332.483263][ T3015] bond7: (slave macvlan2): failed to get link speed/duplex [ 332.663680][T18121] tipc: Started in network mode [ 332.668779][T18121] tipc: Node identity ca58bc2e7f9e, cluster identity 4711 [ 332.686789][T18121] tipc: Enabled bearer , priority 0 [ 332.785555][T18121] syzkaller0: entered promiscuous mode [ 332.799842][T18121] syzkaller0: entered allmulticast mode [ 332.815723][T18121] tipc: Resetting bearer [ 332.834980][T18007] vxcan1 speed is unknown, defaulting to 1000 [ 332.920458][T18137] netlink: 'syz.2.3246': attribute type 30 has an invalid length. [ 333.101469][T18144] netlink: 'syz.2.3248': attribute type 1 has an invalid length. [ 333.124628][T18120] tipc: Resetting bearer [ 333.615248][T18151] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3250'. [ 333.670793][T18152] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3250'. [ 334.806086][T18120] tipc: Disabling bearer [ 334.826085][T18007] vxcan1 speed is unknown, defaulting to 1000 [ 334.840564][ T9] tipc: Node number set to 3049700398 [ 334.995124][T18161] tipc: Enabling of bearer rejected, failed to enable media [ 335.217950][T18169] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3257'. [ 335.227325][T18169] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3257'. [ 335.245061][T18007] vxcan1 speed is unknown, defaulting to 1000 [ 335.371946][T18176] netlink: 'syz.1.3259': attribute type 6 has an invalid length. [ 335.412539][T18176] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3259'. [ 335.473772][T18177] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3259'. [ 335.517112][T18177] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3259'. [ 335.561571][T18177] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3259'. [ 335.636284][T18189] netlink: 'syz.0.3264': attribute type 10 has an invalid length. [ 335.644577][T18177] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3259'. [ 335.676468][T18189] team0: Port device dummy0 added [ 335.682037][T18177] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3259'. [ 335.739229][T18007] vxcan1 speed is unknown, defaulting to 1000 [ 335.956300][T18202] macvtap1: entered allmulticast mode [ 335.972673][T18202] veth0_macvtap: entered allmulticast mode [ 336.217450][T18213] netlink: 'syz.0.3271': attribute type 1 has an invalid length. [ 336.534557][T18217] netlink: 'syz.5.3272': attribute type 7 has an invalid length. [ 336.539955][T18218] netlink: 'syz.5.3272': attribute type 7 has an invalid length. [ 337.554521][T18007] vxcan1 speed is unknown, defaulting to 1000 [ 337.690206][T13556] net_ratelimit: 17 callbacks suppressed [ 337.690224][T13556] bond7: (slave macvlan2): failed to get link speed/duplex [ 337.705629][T18224] netlink: 'syz.0.3274': attribute type 1 has an invalid length. [ 337.729207][T18224] netlink: 'syz.0.3274': attribute type 2 has an invalid length. [ 337.747754][T18224] netlink: 'syz.0.3274': attribute type 2 has an invalid length. [ 337.771249][T18224] netlink: 'syz.0.3274': attribute type 2 has an invalid length. [ 337.881636][ T3015] bond7: (slave macvlan2): failed to get link speed/duplex [ 337.958247][T18241] nbd: illegal input index 2958377 [ 338.029888][ T3015] bond7: (slave macvlan2): failed to get link speed/duplex [ 338.213549][T18254] team0: Device gtp0 is up. Set it down before adding it as a team port [ 338.276214][T18007] vxcan1 speed is unknown, defaulting to 1000 [ 338.282460][ T3015] bond7: (slave macvlan2): failed to get link speed/duplex [ 338.601261][T13541] bond7: (slave macvlan2): failed to get link speed/duplex [ 338.719999][T13541] bond7: (slave macvlan2): failed to get link speed/duplex [ 338.800510][T18291] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve1, syncid = 0, id = 0 [ 338.822952][T18290] __nla_validate_parse: 71 callbacks suppressed [ 338.822972][T18290] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3294'. [ 338.877735][T18290] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3294'. [ 338.890182][T18290] openvswitch: netlink: Missing key (keys=40, expected=80) [ 338.905313][T18285] syzkaller0: entered promiscuous mode [ 338.924599][T18285] syzkaller0: entered allmulticast mode [ 338.944842][T18295] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3295'. [ 338.984588][T18298] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3295'. [ 339.272152][T18315] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3300'. [ 340.561348][T18326] netlink: 3648 bytes leftover after parsing attributes in process `syz.2.3303'. [ 340.600703][T18326] netlink: 3648 bytes leftover after parsing attributes in process `syz.2.3303'. [ 340.639877][T13541] bond7: (slave macvlan2): failed to get link speed/duplex [ 340.766655][T18338] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3306'. [ 340.796497][T18344] netlink: 72 bytes leftover after parsing attributes in process `syz.6.3309'. [ 340.812815][T18332] 8021q: adding VLAN 0 to HW filter on device bond3 [ 340.895484][T18340] 8021q: adding VLAN 0 to HW filter on device bond3 [ 340.904556][T18340] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 340.916941][T18340] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 340.950741][T13556] bond7: (slave macvlan2): failed to get link speed/duplex [ 341.034796][T18351] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3311'. [ 341.069113][T13556] bond7: (slave macvlan2): failed to get link speed/duplex [ 341.434917][T18373] Bluetooth: MGMT ver 1.23 [ 342.720932][T13554] net_ratelimit: 12 callbacks suppressed [ 342.720951][T13554] bond7: (slave macvlan2): failed to get link speed/duplex [ 342.973796][T13556] bond7: (slave macvlan2): failed to get link speed/duplex [ 343.100599][T13554] bond7: (slave macvlan2): failed to get link speed/duplex [ 343.230517][T13554] bond7: (slave macvlan2): failed to get link speed/duplex [ 343.344472][T13554] bond7: (slave macvlan2): failed to get link speed/duplex [ 343.470502][T13556] bond7: (slave macvlan2): failed to get link speed/duplex [ 343.499968][ T5826] Bluetooth: hci0: command 0x0c1a tx timeout [ 343.500620][ T5831] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 343.592170][T13565] bond7: (slave macvlan2): failed to get link speed/duplex [ 343.700211][T13559] bond7: (slave macvlan2): failed to get link speed/duplex [ 343.809887][T13556] bond7: (slave macvlan2): failed to get link speed/duplex [ 343.959915][T13556] bond7: (slave macvlan2): failed to get link speed/duplex [ 344.029532][T18542] xt_CONNSECMARK: invalid mode: 0 [ 344.074815][T18544] __nla_validate_parse: 18 callbacks suppressed [ 344.074833][T18544] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3367'. [ 344.105149][T18544] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3367'. [ 344.149807][T18544] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3367'. [ 344.197130][T18552] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3370'. [ 344.281960][T18547] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3368'. [ 344.320171][T18566] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3371'. [ 344.475501][T18547] macsec2: entered promiscuous mode [ 344.481956][T18547] macsec2: entered allmulticast mode [ 344.487883][T18547] bridge0: entered allmulticast mode [ 344.499338][T18547] bridge0: port 3(macsec2) entered blocking state [ 344.505527][T18573] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3376'. [ 344.507193][T18547] bridge0: port 3(macsec2) entered disabled state [ 344.527873][T18547] bridge0: left allmulticast mode [ 344.774132][T18582] @0: renamed from bond_slave_1 (while UP) [ 344.817812][T18582] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3379'. [ 344.852681][T18582] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3379'. [ 344.863822][T18586] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3381'. [ 344.983394][T18591] netlink: 'syz.6.3384': attribute type 21 has an invalid length. [ 345.782037][T18591] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 345.809891][T18591] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 345.885391][T18591] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 345.892208][T18649] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 345.911903][T18591] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 345.925426][T18647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 346.079540][T18591] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 346.096469][T18591] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 346.250210][T18591] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 346.270869][T18591] Bluetooth: hci7: Error when powering off device on rfkill (-4) [ 346.301660][T18670] tipc: Enabled bearer , priority 0 [ 346.373101][T18670] syzkaller0: entered promiscuous mode [ 346.378681][T18670] syzkaller0: entered allmulticast mode [ 346.390429][T18670] tipc: Resetting bearer [ 346.485455][T18675] netlink: 'syz.0.3411': attribute type 3 has an invalid length. [ 346.515416][T18675] netlink: 'syz.0.3411': attribute type 1 has an invalid length. [ 346.531476][T18670] : entered promiscuous mode [ 346.754226][T18668] tipc: Resetting bearer [ 346.769302][T18700] IPVS: set_ctl: invalid protocol: 2 10.1.1.0:20004 [ 348.347026][T18668] tipc: Disabling bearer [ 348.360081][ T983] tipc: Node number set to 2643960371 [ 348.366365][T13560] net_ratelimit: 19 callbacks suppressed [ 348.366380][T13560] bond7: (slave macvlan2): failed to get link speed/duplex [ 348.490109][ T3015] bond7: (slave macvlan2): failed to get link speed/duplex [ 348.624235][T13560] bond7: (slave macvlan2): failed to get link speed/duplex [ 348.650780][T18736] Unsupported ieee802154 address type: 0 [ 348.761249][T13565] bond7: (slave macvlan2): failed to get link speed/duplex [ 348.871061][T13560] bond7: (slave macvlan2): failed to get link speed/duplex [ 348.995124][T13560] bond7: (slave macvlan2): failed to get link speed/duplex [ 349.111535][T18765] __nla_validate_parse: 12 callbacks suppressed [ 349.111553][T18765] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3434'. [ 349.151141][ T3015] bond7: (slave macvlan2): failed to get link speed/duplex [ 349.270867][T13560] bond7: (slave macvlan2): failed to get link speed/duplex [ 349.365232][T18793] pimreg: entered allmulticast mode [ 349.393845][T13560] bond7: (slave macvlan2): failed to get link speed/duplex [ 349.484828][T18797] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 349.496908][T18803] vcan0: tx address claim with dest, not broadcast [ 349.510202][T13565] bond7: (slave macvlan2): failed to get link speed/duplex [ 349.715472][T18815] warn_alloc: 1 callbacks suppressed [ 349.715646][T18815] syz.6.3449: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 349.766893][T18819] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3447'. [ 349.782340][T18815] CPU: 1 UID: 0 PID: 18815 Comm: syz.6.3449 Not tainted syzkaller #0 PREEMPT(full) [ 349.782369][T18815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 349.782395][T18815] Call Trace: [ 349.782403][T18815] [ 349.782412][T18815] dump_stack_lvl+0xe8/0x150 [ 349.782444][T18815] warn_alloc+0x249/0x340 [ 349.782467][T18815] ? stack_trace_save+0xa9/0x100 [ 349.782494][T18815] ? __pfx_warn_alloc+0x10/0x10 [ 349.782521][T18815] ? kasan_save_track+0x4f/0x80 [ 349.782537][T18815] ? kasan_save_track+0x3e/0x80 [ 349.782551][T18815] ? __kasan_kmalloc+0x93/0xb0 [ 349.782568][T18815] ? __kmalloc_cache_noprof+0x3d1/0x6e0 [ 349.782585][T18815] ? xskq_create+0x56/0x170 [ 349.782603][T18815] ? xsk_setsockopt+0x54c/0x990 [ 349.782627][T18815] ? do_sock_setsockopt+0x17c/0x1b0 [ 349.782648][T18815] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 349.782670][T18815] ? do_syscall_64+0xe2/0xf80 [ 349.782695][T18815] __vmalloc_node_range_noprof+0x132/0x1730 [ 349.782756][T18815] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 349.782784][T18815] ? __kasan_kmalloc+0x93/0xb0 [ 349.782810][T18815] vmalloc_user_noprof+0xad/0xe0 [ 349.782829][T18815] ? xskq_create+0xbf/0x170 [ 349.782847][T18815] xskq_create+0xbf/0x170 [ 349.782868][T18815] xsk_init_queue+0xad/0x110 [ 349.782898][T18815] xsk_setsockopt+0x54c/0x990 [ 349.782929][T18815] ? __pfx_xsk_setsockopt+0x10/0x10 [ 349.782956][T18815] ? __pfx_aa_sk_perm+0x10/0x10 [ 349.782982][T18815] ? aa_sock_opt_perm+0xff/0x1a0 [ 349.783008][T18815] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 349.783028][T18815] ? __pfx_xsk_setsockopt+0x10/0x10 [ 349.783056][T18815] do_sock_setsockopt+0x17c/0x1b0 [ 349.783085][T18815] __x64_sys_setsockopt+0x13d/0x1b0 [ 349.783116][T18815] do_syscall_64+0xe2/0xf80 [ 349.783135][T18815] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.783153][T18815] ? trace_irq_disable+0x37/0x100 [ 349.783171][T18815] ? clear_bhb_loop+0x60/0xb0 [ 349.783194][T18815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.783213][T18815] RIP: 0033:0x7fec67d9aeb9 [ 349.783231][T18815] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 349.783247][T18815] RSP: 002b:00007fec68b7b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 349.783268][T18815] RAX: ffffffffffffffda RBX: 00007fec68015fa0 RCX: 00007fec67d9aeb9 [ 349.783283][T18815] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 349.783295][T18815] RBP: 00007fec67e08c1f R08: 0000000000000004 R09: 0000000000000000 [ 349.783308][T18815] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 349.783320][T18815] R13: 00007fec68016038 R14: 00007fec68015fa0 R15: 00007ffeceadf298 [ 349.783354][T18815] [ 349.783363][T18815] Mem-Info: [ 349.897050][T18828] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3451'. [ 349.934243][T18815] active_anon:8321 inactive_anon:0 isolated_anon:0 [ 349.934243][T18815] active_file:3090 inactive_file:40078 isolated_file:0 [ 349.934243][T18815] unevictable:768 dirty:39 writeback:0 [ 349.934243][T18815] slab_reclaimable:12734 slab_unreclaimable:132057 [ 349.934243][T18815] mapped:41260 shmem:2220 pagetables:1524 [ 349.934243][T18815] sec_pagetables:0 bounce:0 [ 349.934243][T18815] kernel_misc_reclaimable:0 [ 349.934243][T18815] free:1259210 free_pcp:13557 free_cma:0 [ 350.155071][T18834] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 350.175291][T18815] Node 0 active_anon:36284kB inactive_anon:0kB active_file:12360kB inactive_file:160112kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:173240kB dirty:156kB writeback:0kB shmem:10144kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17468kB pagetables:5956kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 350.239945][T18821] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 350.258754][T18815] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 350.311418][T18840] syzkaller0: entered promiscuous mode [ 350.317128][T18840] syzkaller0: entered allmulticast mode [ 350.335203][T18840] net veth1_virt_wifi : renamed from virt_wifi0 [ 350.344065][T18815] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 350.382255][T18815] lowmem_reserve[]: 0 2494 2495 2495 2495 [ 350.388560][T18815] Node 0 DMA32 free:1123952kB boost:0kB min:34216kB low:42768kB high:51320kB reserved_highatomic:0KB free_highatomic:0KB active_anon:38984kB inactive_anon:0kB active_file:12360kB inactive_file:160112kB unevictable:1536kB writepending:156kB zspages:0kB present:3129332kB managed:2554124kB mlocked:0kB bounce:0kB free_pcp:28452kB local_pcp:12820kB free_cma:0kB [ 350.456624][T18815] lowmem_reserve[]: 0 0 1 1 1 [ 350.473540][T18815] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1132kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 350.517762][T18815] lowmem_reserve[]: 0 0 0 0 0 [ 350.523536][T18815] Node 1 Normal free:3886676kB boost:0kB min:55668kB low:69584kB high:83500kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:20704kB local_pcp:7072kB free_cma:0kB [ 350.652605][T18815] lowmem_reserve[]: 0 0 0 0 0 [ 350.699673][T18815] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 350.761760][T18815] Node 0 DMA32: 1684*4kB (U) 2954*8kB (UE) 1301*16kB (UME) 99*32kB (ME) 36*64kB (ME) 20*128kB (UME) 16*256kB (UME) 36*512kB (UM) 44*1024kB (UM) 25*2048kB (UM) 230*4096kB (M) = 1120080kB [ 350.831207][T18815] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 350.878112][T18815] Node 1 Normal: 175*4kB (UE) 51*8kB (UME) 40*16kB (UME) 90*32kB (UME) 23*64kB (UME) 9*128kB (UME) 6*256kB (UME) 4*512kB (UME) 3*1024kB (UME) 1*2048kB (E) 945*4096kB (M) = 3886676kB [ 350.957363][T18815] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 350.999082][T18815] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 351.023422][T18815] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 351.053057][T18874] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3458'. [ 351.076887][T18815] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 351.103236][T18815] 44559 total pagecache pages [ 351.113824][T18879] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3457'. [ 351.116342][T18815] 0 pages in swap cache [ 351.127434][T18815] Free swap = 124996kB [ 351.132147][T18815] Total swap = 124996kB [ 351.136354][T18815] 2097051 pages RAM [ 351.169383][T18815] 0 pages HighMem/MovableOnly [ 351.174622][T18815] 426622 pages reserved [ 351.209969][T18815] 0 pages cma reserved [ 352.535596][T18862] syz_tun: entered allmulticast mode [ 352.542253][T18862] syz_tun: left allmulticast mode [ 352.829580][T18896] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3465'. [ 352.932533][T18896] bond4 (unregistering): Released all slaves [ 352.968875][T18891] netlink: 'syz.6.3463': attribute type 12 has an invalid length. [ 352.978306][T18891] netlink: 'syz.6.3463': attribute type 29 has an invalid length. [ 352.987032][T18891] netlink: 148 bytes leftover after parsing attributes in process `syz.6.3463'. [ 353.004680][T18891] netlink: 'syz.6.3463': attribute type 2 has an invalid length. [ 353.013523][T18891] netlink: 15 bytes leftover after parsing attributes in process `syz.6.3463'. [ 353.060902][T18900] syzkaller0: entered promiscuous mode [ 353.070746][T18900] syzkaller0: entered allmulticast mode [ 353.078874][T18900] tipc: Started in network mode [ 353.090612][T18900] tipc: Node identity 2a0f390af9be, cluster identity 4711 [ 353.098054][T18900] tipc: Enabled bearer , priority 0 [ 353.109314][T18899] tipc: Resetting bearer [ 353.185243][T18910] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3469'. [ 353.197435][T18899] tipc: Disabling bearer [ 353.222473][T18912] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3470'. [ 353.245232][T18910] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 353.252259][T18910] syzkaller1: linktype set to 823 [ 353.370230][T10700] net_ratelimit: 11 callbacks suppressed [ 353.370249][T10700] bond7: (slave macvlan2): failed to get link speed/duplex [ 353.477638][T18930] netlink: 'syz.6.3476': attribute type 1 has an invalid length. [ 353.512340][T13541] bond7: (slave macvlan2): failed to get link speed/duplex [ 353.680791][T13565] bond7: (slave macvlan2): failed to get link speed/duplex [ 353.800662][T13560] bond7: (slave macvlan2): failed to get link speed/duplex [ 353.900314][T18953] netlink: 'syz.5.3483': attribute type 4 has an invalid length. [ 353.973388][ T3015] bond7: (slave macvlan2): failed to get link speed/duplex [ 354.055489][T18959] netlink: 'syz.0.3484': attribute type 1 has an invalid length. [ 354.135310][T18970] netlink: 'syz.0.3484': attribute type 1 has an invalid length. [ 354.160280][T18970] netlink: 'syz.0.3484': attribute type 2 has an invalid length. [ 354.197386][T18959] 8021q: adding VLAN 0 to HW filter on device bond4 [ 354.245079][T13560] bond7: (slave macvlan2): failed to get link speed/duplex [ 354.380729][T13541] bond7: (slave macvlan2): failed to get link speed/duplex [ 354.431359][T18984] __nla_validate_parse: 2 callbacks suppressed [ 354.431381][T18984] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3492'. [ 354.491391][T13541] bond7: (slave macvlan2): failed to get link speed/duplex [ 354.576923][T19000] xt_hashlimit: overflow, rate too high: 0 [ 354.577351][T18998] vlan2: entered promiscuous mode [ 354.592262][T18998] vlan2: entered allmulticast mode [ 354.597576][T18998] hsr_slave_1: entered allmulticast mode [ 354.620925][T13541] bond7: (slave macvlan2): failed to get link speed/duplex [ 354.637420][T18997] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3494'. [ 354.657929][T18997] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3494'. [ 354.670014][T18997] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3494'. [ 354.730757][ T3015] bond7: (slave macvlan2): failed to get link speed/duplex [ 354.843810][T19013] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3500'. [ 354.961595][T19018] netlink: 84 bytes leftover after parsing attributes in process `syz.6.3502'. [ 354.987922][T19018] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3502'. [ 355.190804][T19029] syzkaller0: entered promiscuous mode [ 355.199717][T19029] syzkaller0: entered allmulticast mode [ 355.216525][T19029] netlink: 'syz.6.3505': attribute type 29 has an invalid length. [ 355.235507][T19029] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3505'. [ 355.258935][T19032] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg2, syncid = 2, id = 0 [ 355.269568][T19033] netlink: 'syz.6.3505': attribute type 29 has an invalid length. [ 355.319451][T19033] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3505'. [ 355.792774][T19062] Cannot find add_set index 0 as target [ 355.855976][T19067] vcan0: entered allmulticast mode [ 355.911049][T19074] atomic_op ffff8880565d2998 conn xmit_atomic 0000000000000000 [ 355.987743][T19080] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3518'. [ 356.065886][T19076] 8021q: adding VLAN 0 to HW filter on device bond5 [ 356.754806][T19119] xt_TCPMSS: Only works on TCP SYN packets [ 356.775933][T19121] syzkaller0: entered promiscuous mode [ 356.788023][T19121] syzkaller0: entered allmulticast mode [ 357.018214][T19138] batadv_slave_1: entered allmulticast mode [ 357.273488][T19137] batadv_slave_1: left allmulticast mode [ 357.346260][ T30] audit: type=1800 audit(1770308582.237:7): pid=19155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3540" name="memory.events" dev="tmpfs" ino=579 res=0 errno=0 [ 357.525603][T19165] syzkaller1: entered promiscuous mode [ 357.531168][T19165] syzkaller1: entered allmulticast mode [ 358.441147][T19207] bridge0: port 3(team0) entered disabled state [ 358.500743][T19207] team0 (unregistering): left allmulticast mode [ 358.507501][T19207] team_slave_0: left allmulticast mode [ 358.513887][T19207] team_slave_1: left allmulticast mode [ 358.520002][T19207] team0 (unregistering): left promiscuous mode [ 358.522210][T19214] netlink: 'syz.6.3557': attribute type 11 has an invalid length. [ 358.526235][T19207] team_slave_0: left promiscuous mode [ 358.526549][T19207] team_slave_1: left promiscuous mode [ 358.548586][T19207] bridge0: port 3(team0) entered disabled state [ 358.577556][T19207] team0 (unregistering): Port device team_slave_0 removed [ 358.614563][T19207] team0 (unregistering): Port device team_slave_1 removed [ 358.623827][T19219] validate_nla: 1 callbacks suppressed [ 358.623846][T19219] netlink: 'syz.6.3558': attribute type 1 has an invalid length. [ 358.639162][T19219] net_ratelimit: 28 callbacks suppressed [ 358.639178][T19219] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 358.642676][T19207] team0 (unregistering): Port device bridge1 removed [ 358.690604][T13565] bond7: (slave macvlan2): failed to get link speed/duplex [ 358.830841][T13565] bond7: (slave macvlan2): failed to get link speed/duplex [ 358.865135][T19229] netlink: 'syz.1.3559': attribute type 10 has an invalid length. [ 358.875516][T19229] bond0: (slave wlan1): Opening slave failed [ 358.941704][ T3015] bond7: (slave macvlan2): failed to get link speed/duplex [ 359.004958][T19234] netlink: 'syz.6.3562': attribute type 2 has an invalid length. [ 359.079281][ T3015] bond7: (slave macvlan2): failed to get link speed/duplex [ 359.210404][ T3015] bond7: (slave macvlan2): failed to get link speed/duplex [ 359.367529][T13541] bond7: (slave macvlan2): failed to get link speed/duplex [ 359.447701][T19261] __nla_validate_parse: 17 callbacks suppressed [ 359.447718][T19261] netlink: 120 bytes leftover after parsing attributes in process `syz.2.3568'. [ 359.516979][T13575] bond7: (slave macvlan2): failed to get link speed/duplex [ 359.564250][T19221] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 359.640381][T13560] bond7: (slave macvlan2): failed to get link speed/duplex [ 359.703405][T19270] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 359.877882][T19282] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3574'. [ 359.956103][T19284] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 360.278410][T19288] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3576'. [ 360.443916][T19293] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3578'. [ 360.468877][T19296] syzkaller0: entered promiscuous mode [ 360.476372][T19296] syzkaller0: entered allmulticast mode [ 360.488438][T19291] delete_channel: no stack [ 360.523586][T19296] tipc: Enabled bearer , priority 0 [ 360.578102][T19295] tipc: Resetting bearer [ 360.655457][T19295] tipc: Disabling bearer [ 360.681207][T19308] netlink: 232 bytes leftover after parsing attributes in process `syz.1.3584'. [ 360.936467][T19325] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3587'. [ 361.623764][T19311] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3585'. [ 361.973439][T19310] lec:lec_atm_close: lec0: Shut down! [ 362.085898][T19365] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3595'. [ 362.281074][T19373] netlink: 'syz.6.3598': attribute type 1 has an invalid length. [ 362.424142][T19373] 8021q: adding VLAN 0 to HW filter on device bond1 [ 362.495783][T19375] bond1: (slave geneve2): making interface the new active one [ 362.515259][T19375] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 362.551967][T19382] ip6gre1: entered promiscuous mode [ 362.561225][T19382] ip6gre1: entered allmulticast mode [ 362.581149][T19379] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 362.599561][T19388] syzkaller0: entered promiscuous mode [ 362.633821][T19388] syzkaller0: entered allmulticast mode [ 362.686423][T19391] xt_bpf: check failed: parse error [ 362.743384][T19388] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3602'. [ 362.922043][T19407] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3608'. [ 363.342049][T13559] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 363.383510][ T5940] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 363.396131][T13559] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 363.522303][ T5940] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 363.649897][T10700] net_ratelimit: 79 callbacks suppressed [ 363.649916][T10700] bond7: (slave macvlan2): failed to get link speed/duplex [ 363.700621][ T5940] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 363.788220][T19471] netlink: 'syz.1.3622': attribute type 10 has an invalid length. [ 363.844879][T19471] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 363.910028][T13554] bond7: (slave macvlan2): failed to get link speed/duplex [ 363.976025][T19479] pimreg: left allmulticast mode [ 363.996907][T19485] FAULT_INJECTION: forcing a failure. [ 363.996907][T19485] name failslab, interval 1, probability 0, space 0, times 0 [ 364.012216][T19485] CPU: 0 UID: 0 PID: 19485 Comm: syz.6.3626 Not tainted syzkaller #0 PREEMPT(full) [ 364.012254][T19485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 364.012273][T19485] Call Trace: [ 364.012280][T19485] [ 364.012288][T19485] dump_stack_lvl+0xe8/0x150 [ 364.012315][T19485] should_fail_ex+0x412/0x560 [ 364.012339][T19485] should_failslab+0xa8/0x100 [ 364.012359][T19485] kmem_cache_alloc_noprof+0x87/0x6e0 [ 364.012380][T19485] ? __netlink_lookup+0xc6/0x8b0 [ 364.012398][T19485] ? skb_clone+0x212/0x3a0 [ 364.012422][T19485] skb_clone+0x212/0x3a0 [ 364.012445][T19485] __netlink_deliver_tap+0x404/0x850 [ 364.012474][T19485] ? netlink_deliver_tap+0x2e/0x1b0 [ 364.012493][T19485] netlink_deliver_tap+0x19c/0x1b0 [ 364.012517][T19485] netlink_unicast+0x7e3/0x9b0 [ 364.012549][T19485] ? __pfx_netlink_unicast+0x10/0x10 [ 364.012570][T19485] ? __alloc_skb+0x193/0x390 [ 364.012589][T19485] ? netlink_sendmsg+0x650/0xb40 [ 364.012604][T19485] ? skb_put+0x11b/0x210 [ 364.012625][T19485] netlink_sendmsg+0x813/0xb40 [ 364.012651][T19485] ? __pfx_netlink_sendmsg+0x10/0x10 [ 364.012671][T19485] ? aa_file_perm+0x12d/0x1630 [ 364.012691][T19485] ? aa_sock_msg_perm+0xf1/0x1b0 [ 364.012712][T19485] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 364.012733][T19485] sock_write_iter+0x503/0x550 [ 364.012758][T19485] ? __pfx_sock_write_iter+0x10/0x10 [ 364.012801][T19485] do_iter_readv_writev+0x619/0x8c0 [ 364.012829][T19485] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 364.012855][T19485] ? bpf_lsm_file_permission+0x9/0x20 [ 364.012872][T19485] ? security_file_permission+0x75/0x260 [ 364.012891][T19485] ? rw_verify_area+0x255/0x4d0 [ 364.012917][T19485] vfs_writev+0x33c/0x990 [ 364.012944][T19485] ? __pfx_vfs_writev+0x10/0x10 [ 364.012977][T19485] ? __fget_files+0x2a/0x420 [ 364.012999][T19485] ? __fget_files+0x3a0/0x420 [ 364.013015][T19485] ? __fget_files+0x2a/0x420 [ 364.013042][T19485] do_writev+0x154/0x2e0 [ 364.013062][T19485] ? __pfx_do_writev+0x10/0x10 [ 364.013092][T19485] do_syscall_64+0xe2/0xf80 [ 364.013110][T19485] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.013126][T19485] ? trace_irq_disable+0x37/0x100 [ 364.013142][T19485] ? clear_bhb_loop+0x60/0xb0 [ 364.013162][T19485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.013183][T19485] RIP: 0033:0x7fec67d9aeb9 [ 364.013203][T19485] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 364.013217][T19485] RSP: 002b:00007fec68b7b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 364.013236][T19485] RAX: ffffffffffffffda RBX: 00007fec68015fa0 RCX: 00007fec67d9aeb9 [ 364.013249][T19485] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000006 [ 364.013260][T19485] RBP: 00007fec68b7b090 R08: 0000000000000000 R09: 0000000000000000 [ 364.013270][T19485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 364.013281][T19485] R13: 00007fec68016038 R14: 00007fec68015fa0 R15: 00007ffeceadf298 [ 364.013312][T19485] [ 364.369909][T10700] bond7: (slave macvlan2): failed to get link speed/duplex [ 364.495508][ T3015] bond7: (slave macvlan2): failed to get link speed/duplex [ 364.610393][T13559] bond7: (slave macvlan2): failed to get link speed/duplex [ 364.722305][T10700] bond7: (slave macvlan2): failed to get link speed/duplex [ 364.841469][T13565] bond7: (slave macvlan2): failed to get link speed/duplex [ 364.960641][T13559] bond7: (slave macvlan2): failed to get link speed/duplex [ 365.069905][T13559] bond7: (slave macvlan2): failed to get link speed/duplex [ 365.257201][T19554] netlink: 'syz.5.3640': attribute type 17 has an invalid length. [ 365.290506][T19554] __nla_validate_parse: 3 callbacks suppressed [ 365.290524][T19554] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3640'. [ 365.330433][T19554] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3640'. [ 365.350294][T10700] bond7: (slave macvlan2): failed to get link speed/duplex [ 365.361288][T19565] sctp: [Deprecated]: syz.6.3644 (pid 19565) Use of int in max_burst socket option. [ 365.361288][T19565] Use struct sctp_assoc_value instead [ 365.653586][ T5492] lec:lec_start_xmit: lec0:No lecd attached [ 366.114696][T19611] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3657'. [ 366.114773][T19613] syzkaller0: entered promiscuous mode [ 366.149268][T19613] syzkaller0: entered allmulticast mode [ 366.273809][T19613] netlink: 16178 bytes leftover after parsing attributes in process `syz.6.3658'. [ 366.366488][T19625] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3661'. [ 366.578743][T19639] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3665'. [ 366.940645][T19658] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3673'. [ 367.097260][T19675] netlink: 'syz.5.3677': attribute type 3 has an invalid length. [ 367.194032][T19679] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3678'. [ 367.249925][T19685] sctp: [Deprecated]: syz.1.3680 (pid 19685) Use of struct sctp_assoc_value in delayed_ack socket option. [ 367.249925][T19685] Use struct sctp_sack_info instead [ 367.272753][T19680] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3678'. [ 367.416342][T19680] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3678'. [ 367.500408][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 367.740375][ C1] af_packet: tpacket_rcv: packet too big, clamped from 28 to 4294967272. macoff=96 [ 367.767155][T19710] syzkaller0: entered promiscuous mode [ 367.811992][T19710] syzkaller0: entered allmulticast mode [ 369.489932][T10700] net_ratelimit: 20 callbacks suppressed [ 369.489952][T10700] bond7: (slave macvlan2): failed to get link speed/duplex [ 369.720675][ T3015] bond7: (slave macvlan2): failed to get link speed/duplex [ 369.817681][T19778] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 369.915002][T19778] team1: entered promiscuous mode [ 369.921182][T19778] team1: entered allmulticast mode [ 369.962804][T13565] bond7: (slave macvlan2): failed to get link speed/duplex [ 369.987336][T19784] bond0: Error: Cannot enslave bond to itself. [ 370.089859][T13565] bond7: (slave macvlan2): failed to get link speed/duplex [ 370.202246][T13554] bond7: (slave macvlan2): failed to get link speed/duplex [ 370.330032][T13554] bond7: (slave macvlan2): failed to get link speed/duplex [ 370.451407][T13565] bond7: (slave macvlan2): failed to get link speed/duplex [ 370.561117][T13565] bond7: (slave macvlan2): failed to get link speed/duplex [ 370.576836][T19831] netlink: 'syz.6.3721': attribute type 8 has an invalid length. [ 370.703119][T13565] bond7: (slave macvlan2): failed to get link speed/duplex [ 370.705748][T19838] netlink: 'syz.5.3724': attribute type 11 has an invalid length. [ 370.779809][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5120 ms [ 370.788289][ C1] lec:lec_tx_timeout: lec0 [ 370.793569][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 370.809004][T19844] __nla_validate_parse: 4 callbacks suppressed [ 370.809022][T19844] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3727'. [ 370.831083][T13565] bond7: (slave macvlan2): failed to get link speed/duplex [ 370.870193][T19844] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3727'. [ 370.899277][T19844] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3727'. [ 370.948166][T19844] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3727'. [ 370.968350][T19847] netlink: 'syz.5.3728': attribute type 11 has an invalid length. [ 370.982402][T19847] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3728'. [ 371.148068][T19857] tipc: Enabled bearer , priority 0 [ 371.176960][T19857] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3732'. [ 371.217139][T19857] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3732'. [ 371.255775][T19867] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3734'. [ 371.312427][T19867] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 371.344274][T19867] team0: Failed to send port change of device batadv1 via netlink (err -105) [ 371.355797][T19867] team0: Failed to send options change via netlink (err -105) [ 371.381728][ T5940] IPVS: starting estimator thread 0... [ 371.388310][T19867] team0: Port device batadv1 added [ 371.394686][T10700] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 371.404062][T10700] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 371.444106][T19857] +: renamed from syzkaller0 [ 371.453331][T19857] tipc: Disabling bearer [ 371.473301][T10700] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 371.482265][T19874] IPVS: using max 36 ests per chain, 86400 per kthread [ 371.501510][T13575] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 372.216836][T19915] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3748'. [ 372.268887][T19920] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3748'. [ 372.335523][T19915] netlink: 'syz.2.3748': attribute type 9 has an invalid length. [ 372.610242][T19936] syzkaller0: entered promiscuous mode [ 372.616777][T19936] syzkaller0: entered allmulticast mode [ 372.752952][T19945] netlink: 'syz.0.3756': attribute type 2 has an invalid length. [ 373.272587][T19989] netlink: 'syz.6.3767': attribute type 11 has an invalid length. [ 373.519484][T20002] sch_tbf: burst 21990 is lower than device lo mtu (11337746) ! [ 373.529099][T20004] netlink: 'syz.2.3775': attribute type 24 has an invalid length. [ 373.654180][T20016] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 373.845454][T20016] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 373.918680][T20025] netlink: 'syz.6.3781': attribute type 7 has an invalid length. [ 373.941093][T20025] netlink: 'syz.6.3781': attribute type 7 has an invalid length. [ 373.967428][T13565] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 373.986343][T13565] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.021095][T13565] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.132567][T13565] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.446968][T20058] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 374.492897][T20063] netlink: 'syz.1.3794': attribute type 9 has an invalid length. [ 374.504544][T20063] netlink: 'syz.1.3794': attribute type 11 has an invalid length. [ 374.514748][T20063] netlink: 'syz.1.3794': attribute type 12 has an invalid length. [ 374.719894][T13565] net_ratelimit: 24 callbacks suppressed [ 374.719913][T13565] bond7: (slave macvlan2): failed to get link speed/duplex [ 374.890671][ T3015] bond7: (slave macvlan2): failed to get link speed/duplex [ 375.014910][ T3015] bond7: (slave macvlan2): failed to get link speed/duplex [ 375.150924][ T3015] bond7: (slave macvlan2): failed to get link speed/duplex [ 375.342173][T13554] bond7: (slave macvlan2): failed to get link speed/duplex [ 375.461978][T13554] bond7: (slave macvlan2): failed to get link speed/duplex [ 375.532096][T20138] tipc: Enabling of bearer rejected, failed to enable media [ 375.579972][T13565] bond7: (slave macvlan2): failed to get link speed/duplex [ 375.710279][T13565] bond7: (slave macvlan2): failed to get link speed/duplex [ 375.820012][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 375.828063][ C1] lec:lec_tx_timeout: lec0 [ 375.832970][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 375.842761][T13554] bond7: (slave macvlan2): failed to get link speed/duplex [ 375.965086][T20159] netlink: 'syz.5.3816': attribute type 1 has an invalid length. [ 375.979961][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 375.992312][ T3015] bond7: (slave macvlan2): failed to get link speed/duplex [ 376.038838][T20161] xt_hashlimit: size too large, truncated to 1048576 [ 376.141983][T20171] netlink: 'syz.0.3821': attribute type 3 has an invalid length. [ 376.171000][T20171] netlink: 'syz.0.3821': attribute type 1 has an invalid length. [ 376.178766][T20171] __nla_validate_parse: 18 callbacks suppressed [ 376.178779][T20171] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3821'. [ 376.213318][T20172] netlink: 'syz.0.3821': attribute type 3 has an invalid length. [ 376.228934][T20172] netlink: 'syz.0.3821': attribute type 1 has an invalid length. [ 376.247979][T20172] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3821'. [ 376.434882][T20192] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3826'. [ 376.568244][T20200] netlink: 88 bytes leftover after parsing attributes in process `syz.5.3829'. [ 376.616706][T20202] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3830'. [ 376.833828][T20218] xt_hashlimit: size too large, truncated to 1048576 [ 376.927004][T20223] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3836'. [ 376.955719][T20223] netlink: 'syz.2.3836': attribute type 7 has an invalid length. [ 376.997448][T20223] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3836'. [ 377.079477][T20230] netlink: 'syz.6.3839': attribute type 33 has an invalid length. [ 377.088752][T20230] netlink: 152 bytes leftover after parsing attributes in process `syz.6.3839'. [ 377.268237][T20239] batadv_slave_1: entered allmulticast mode [ 377.375355][T20244] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3844'. [ 377.388443][T20248] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3845'. [ 377.448576][T20244] bond2 (unregistering): Released all slaves [ 377.474670][T20254] IPVS: sync thread started: state = MASTER, mcast_ifn = team_slave_1, syncid = 3, id = 0 [ 377.594993][T20258] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 379.494884][T20389] xt_hashlimit: size too large, truncated to 1048576 [ 379.740154][T13559] net_ratelimit: 31 callbacks suppressed [ 379.740174][T13559] bond7: (slave macvlan2): failed to get link speed/duplex [ 379.881419][T13554] bond7: (slave macvlan2): failed to get link speed/duplex [ 380.000250][T10700] bond7: (slave macvlan2): failed to get link speed/duplex [ 380.102374][T20424] bond2: option all_slaves_active: invalid value (222) [ 380.118243][T20424] bond2 (unregistering): Released all slaves [ 380.229936][T13554] bond7: (slave macvlan2): failed to get link speed/duplex [ 380.340678][T13554] bond7: (slave macvlan2): failed to get link speed/duplex [ 380.454597][ T3015] bond7: (slave macvlan2): failed to get link speed/duplex [ 380.569939][T10700] bond7: (slave macvlan2): failed to get link speed/duplex [ 380.656296][T20465] vlan2: entered allmulticast mode [ 380.666056][T20465] hsr0: entered allmulticast mode [ 380.677194][T20465] hsr_slave_0: entered allmulticast mode [ 380.696418][T20465] hsr_slave_1: entered allmulticast mode [ 380.753640][T13554] bond7: (slave macvlan2): failed to get link speed/duplex [ 380.839805][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 380.847917][ C1] lec:lec_tx_timeout: lec0 [ 380.853116][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 380.881005][ T3015] bond7: (slave macvlan2): failed to get link speed/duplex [ 381.029974][T13565] bond7: (slave macvlan2): failed to get link speed/duplex [ 381.222515][T20499] __nla_validate_parse: 36 callbacks suppressed [ 381.222534][T20499] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.3908'. [ 381.288383][T20506] netlink: 'syz.1.3911': attribute type 1 has an invalid length. [ 381.299709][T20505] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3911'. [ 381.320425][T20505] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3911'. [ 381.409551][T20510] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 381.433968][T20510] bond2 (unregistering): Released all slaves [ 381.447796][T20515] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3914'. [ 381.463759][T20518] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3915'. [ 381.478881][T20514] netlink: 'syz.2.3913': attribute type 83 has an invalid length. [ 381.488928][T20515] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3914'. [ 381.518474][T20513] bond2: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 381.539245][T20513] bond2 (unregistering): Released all slaves [ 381.557620][T20510] sctp: [Deprecated]: syz.6.3914 (pid 20510) Use of struct sctp_assoc_value in delayed_ack socket option. [ 381.557620][T20510] Use struct sctp_sack_info instead [ 381.760484][T20531] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3918'. [ 381.779702][T20531] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3918'. [ 381.898630][T20544] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.3923'. [ 382.163273][T20567] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 382.173853][T20568] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 382.269148][T20573] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3930'. [ 383.296556][T20639] netlink: 'syz.5.3952': attribute type 1 has an invalid length. [ 383.304739][T20639] netlink: 'syz.5.3952': attribute type 2 has an invalid length. [ 383.336439][T20639] netlink: 'syz.5.3952': attribute type 1 has an invalid length. [ 383.406784][T20651] netlink: 'syz.1.3953': attribute type 2 has an invalid length. [ 383.940917][T20687] netlink: 'syz.1.3964': attribute type 1 has an invalid length. [ 383.958697][T20687] netlink: 'syz.1.3964': attribute type 2 has an invalid length. [ 384.144369][T20702] netlink: 'syz.2.3966': attribute type 1 has an invalid length. [ 384.329350][T20713] xt_CT: You must specify a L4 protocol and not use inversions on it [ 384.811840][T13559] net_ratelimit: 215 callbacks suppressed [ 384.811860][T13559] bond7: (slave macvlan2): failed to get link speed/duplex [ 384.847692][T20748] netlink: 'syz.0.3980': attribute type 11 has an invalid length. [ 384.940737][T13554] bond7: (slave macvlan2): failed to get link speed/duplex [ 385.074669][T20759] xt_TCPMSS: Only works on TCP SYN packets [ 385.090546][T13560] bond7: (slave macvlan2): failed to get link speed/duplex [ 385.209943][T13560] bond7: (slave macvlan2): failed to get link speed/duplex [ 385.351273][T13554] bond7: (slave macvlan2): failed to get link speed/duplex [ 385.471420][T13559] bond7: (slave macvlan2): failed to get link speed/duplex [ 385.501039][ T5984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.528492][T20786] x_tables: duplicate underflow at hook 1 [ 385.581428][T13554] bond7: (slave macvlan2): failed to get link speed/duplex [ 385.659889][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.690693][T13559] bond7: (slave macvlan2): failed to get link speed/duplex [ 385.860605][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 385.868785][ C1] lec:lec_tx_timeout: lec0 [ 385.873631][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 386.193995][T20830] Cannot find set identified by id 0 to match [ 386.298125][T20835] gtp0: entered promiscuous mode [ 386.309148][T20835] gtp0: entered allmulticast mode [ 386.328781][T20834] __nla_validate_parse: 26 callbacks suppressed [ 386.328797][T20834] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4013'. [ 386.350167][T20834] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4013'. [ 386.437822][T20835] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4013'. [ 386.447211][T20835] nbd: must specify a device to reconfigure [ 386.498128][T20846] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4015'. [ 386.643448][T20850] netlink: 212328 bytes leftover after parsing attributes in process `syz.5.4017'. [ 386.887725][T20863] netlink: 5 bytes leftover after parsing attributes in process `syz.5.4022'. [ 386.898574][T20863] 0{X: renamed from gretap0 [ 386.907252][T20863] 0{X: left promiscuous mode [ 386.920090][T20863] 0{X: entered allmulticast mode [ 386.946987][T20865] tipc: Enabled bearer , priority 0 [ 387.147055][T20883] sch_tbf: burst 21990 is lower than device lo mtu (65499) ! [ 387.193110][T20882] tipc: Enabled bearer , priority 2 [ 387.204331][T20882] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4028'. [ 387.592593][T20904] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4034'. [ 387.824145][T20916] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4038'. [ 387.847283][T20916] vcan0 (unregistering): left allmulticast mode [ 387.999621][T20921] xt_socket: unknown flags 0x50 [ 388.224094][T20931] tipc: Enabling of bearer rejected, failed to enable media [ 388.272374][T20923] wlan0 speed is unknown, defaulting to 1000 [ 388.280695][T20923] vxcan1 speed is unknown, defaulting to 1000 [ 388.413938][T20937] netlink: 208 bytes leftover after parsing attributes in process `syz.5.4046'. [ 388.415897][T20936] veth0: entered promiscuous mode [ 388.463641][T20936] bridge0: entered promiscuous mode [ 388.505403][T20939] raw_sendmsg: syz.5.4048 forgot to set AF_INET. Fix it! [ 388.548938][T20934] bridge0: left promiscuous mode [ 388.554360][T20934] veth0: left promiscuous mode [ 389.903710][T13541] net_ratelimit: 71 callbacks suppressed [ 389.903728][T13541] bond7: (slave macvlan2): failed to get link speed/duplex [ 390.034037][T21014] syzkaller0: entered promiscuous mode [ 390.039995][T21014] syzkaller0: entered allmulticast mode [ 390.879819][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 390.887916][ C1] lec:lec_tx_timeout: lec0 [ 390.892594][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 391.341967][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 391.879938][T13575] bond7: (slave macvlan2): failed to get link speed/duplex [ 391.990861][T13565] bond7: (slave macvlan2): failed to get link speed/duplex [ 392.094578][T21061] validate_nla: 5 callbacks suppressed [ 392.094596][T21061] netlink: 'syz.6.4085': attribute type 1 has an invalid length. [ 392.146463][T21061] 8021q: adding VLAN 0 to HW filter on device bond2 [ 392.208774][T21061] 8021q: adding VLAN 0 to HW filter on device bond2 [ 392.216951][T21061] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 392.239550][T21061] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 392.286410][T21060] syzkaller1: entered promiscuous mode [ 392.292791][T21060] syzkaller1: entered allmulticast mode [ 392.301870][T13575] bond7: (slave macvlan2): failed to get link speed/duplex [ 392.346567][T21061] veth5: entered promiscuous mode [ 392.356211][T21061] bond2: (slave veth5): Enslaving as an active interface with a down link [ 392.411091][T10700] bond7: (slave macvlan2): failed to get link speed/duplex [ 392.540111][ T3015] bond7: (slave macvlan2): failed to get link speed/duplex [ 392.595644][T21102] __nla_validate_parse: 5 callbacks suppressed [ 392.595661][T21102] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4091'. [ 392.666179][T10700] bond7: (slave macvlan2): failed to get link speed/duplex [ 392.797898][ T3015] bond7: (slave macvlan2): failed to get link speed/duplex [ 392.831745][T21111] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4093'. [ 392.913165][T21116] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 392.930206][T13541] bond7: (slave macvlan2): failed to get link speed/duplex [ 392.990433][ T985] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 393.265227][T21142] delete_channel: no stack [ 393.341918][T21142] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.370972][T21142] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.378293][T21142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 393.382027][T21149] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4106'. [ 393.397271][T21147] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4105'. [ 393.605312][T21162] veth0: entered promiscuous mode [ 393.625315][T21162] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4111'. [ 393.638250][T21162] netlink: 112 bytes leftover after parsing attributes in process `syz.5.4111'. [ 393.650878][T21164] netlink: 212336 bytes leftover after parsing attributes in process `syz.2.4112'. [ 393.651377][T21161] veth0: left promiscuous mode [ 393.758572][T21168] netlink: 'syz.5.4114': attribute type 10 has an invalid length. [ 393.769147][T21168] netlink: 228 bytes leftover after parsing attributes in process `syz.5.4114'. [ 393.816211][T21173] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4114'. [ 393.936698][T21173] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap0 [ 393.952288][T21181] netlink: 'syz.2.4117': attribute type 10 has an invalid length. [ 393.970382][T21173] gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 393.981727][T21173] gretap0: entered promiscuous mode [ 393.987280][T21173] gretap0: entered allmulticast mode [ 394.006459][T21185] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4117'. [ 394.236577][T21197] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 394.379692][T21204] netlink: 'syz.6.4122': attribute type 33 has an invalid length. [ 394.391893][T21202] netlink: 'syz.5.4124': attribute type 2 has an invalid length. [ 394.410735][T21206] netlink: 'syz.2.4123': attribute type 1 has an invalid length. [ 394.526382][T21204] bond3: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 394.586504][T21204] bond3 (unregistering): Released all slaves [ 394.703415][T21204] netlink: 'syz.6.4122': attribute type 33 has an invalid length. [ 394.834285][T21204] bond3: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 394.863444][T21204] bond3 (unregistering): Released all slaves [ 394.916733][T21204] netlink: 'syz.6.4122': attribute type 33 has an invalid length. [ 394.982094][T21204] bond3: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 395.006209][T21204] bond3 (unregistering): Released all slaves [ 395.100399][T13565] net_ratelimit: 15 callbacks suppressed [ 395.100419][T13565] bond7: (slave macvlan2): failed to get link speed/duplex [ 395.167298][T21204] netlink: 'syz.6.4122': attribute type 33 has an invalid length. [ 395.246937][T21204] bond3: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 395.266898][T21256] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 395.322642][T21204] bond3 (unregistering): Released all slaves [ 395.535017][T21281] hsr_slave_0: left promiscuous mode [ 395.561011][T21281] hsr_slave_1: left promiscuous mode [ 395.729961][T13541] bond7: (slave macvlan2): failed to get link speed/duplex [ 395.860259][ T3015] bond7: (slave macvlan2): failed to get link speed/duplex [ 395.900155][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 395.908227][ C1] lec:lec_tx_timeout: lec0 [ 395.914101][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 395.971385][T13541] bond7: (slave macvlan2): failed to get link speed/duplex [ 396.040146][T21309] netlink: 'syz.5.4143': attribute type 1 has an invalid length. [ 396.086641][T13565] bond7: (slave macvlan2): failed to get link speed/duplex [ 396.212273][ T3015] bond7: (slave macvlan2): failed to get link speed/duplex [ 396.330956][T10700] bond7: (slave macvlan2): failed to get link speed/duplex [ 396.339808][T21323] tipc: Enabled bearer , priority 0 [ 396.541708][T21323] syzkaller0: entered promiscuous mode [ 396.547229][T21323] syzkaller0: entered allmulticast mode [ 396.582919][T21323] tipc: Resetting bearer [ 396.620640][T10700] bond7: (slave macvlan2): failed to get link speed/duplex [ 396.640588][T21322] tipc: Resetting bearer [ 396.695870][T21339] openvswitch: netlink: Duplicate key (type 32). [ 398.173104][T21322] tipc: Disabling bearer [ 398.197332][T21334] `: renamed from bond0 (while UP) [ 398.205254][T21342] __nla_validate_parse: 17 callbacks suppressed [ 398.205270][T21342] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4151'. [ 398.229835][T10700] bond7: (slave macvlan2): failed to get link speed/duplex [ 398.248185][ T985] tipc: Node number set to 3551607050 [ 398.336669][T21356] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4153'. [ 398.353815][T21356] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4153'. [ 398.481102][T21362] team0: No ports can be present during mode change [ 398.511874][T21367] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4159'. [ 398.548611][T21367] bridge0: entered promiscuous mode [ 398.555297][T21367] macsec1: entered promiscuous mode [ 398.561315][T21367] macsec1: entered allmulticast mode [ 398.567946][T21367] bridge0: entered allmulticast mode [ 398.575725][T21367] bridge0: port 3(macsec1) entered blocking state [ 398.584217][T21367] bridge0: port 3(macsec1) entered disabled state [ 398.595097][T21367] bridge0: left allmulticast mode [ 398.600757][T21367] bridge0: left promiscuous mode [ 398.658711][T21370] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4161'. [ 398.668931][T21370] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4161'. [ 398.679707][T21370] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4161'. [ 398.719330][T21370] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4161'. [ 399.258687][T21418] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4172'. [ 399.284763][T21418] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4172'. [ 399.500204][T21425] tipc: Started in network mode [ 399.505121][T21425] tipc: Node identity aaaaaaaaaa1f, cluster identity 4711 [ 399.516977][T21425] tipc: Enabled bearer , priority 0 [ 399.629642][T21447] syz.2.4179 (21447) used obsolete PPPIOCDETACH ioctl [ 399.778748][T21449] syzkaller0: entered promiscuous mode [ 399.786323][T21449] syzkaller0: entered allmulticast mode [ 399.919599][T21454] validate_nla: 2 callbacks suppressed [ 399.919612][T21454] netlink: 'syz.2.4182': attribute type 15 has an invalid length. [ 399.956513][T21455] tap0: tun_chr_ioctl cmd 1074025678 [ 399.962460][T21455] tap0: group set to 0 [ 399.977647][T21454] syzkaller0: entered promiscuous mode [ 399.988660][T21454] syzkaller0: entered allmulticast mode [ 400.125523][T13554] net_ratelimit: 12 callbacks suppressed [ 400.125542][T13554] bond7: (slave macvlan2): failed to get link speed/duplex [ 400.224175][T21465] Cannot find set identified by id 65534 to match [ 400.256681][T13560] bond7: (slave macvlan2): failed to get link speed/duplex [ 400.450798][T10700] bond7: (slave macvlan2): failed to get link speed/duplex [ 400.475738][T21477] blkio.reset_stats is deprecated [ 400.570230][T13560] bond7: (slave macvlan2): failed to get link speed/duplex [ 400.609176][T21495] bond0: (slave gre0): Error: Device type is different from other slaves [ 400.671313][ T985] tipc: Node number set to 11905706 [ 400.682670][T10700] bond7: (slave macvlan2): failed to get link speed/duplex [ 400.735323][T21500] syzkaller0: entered promiscuous mode [ 400.743941][T21500] syzkaller0: entered allmulticast mode [ 400.761542][T21500] tipc: Enabled bearer , priority 0 [ 400.772076][T21499] tipc: Resetting bearer [ 400.813316][T21499] tipc: Disabling bearer [ 400.819117][ T30] audit: type=1107 audit(1770308625.707:8): pid=21506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='3*? }{y| [ 400.819117][ T30] >+yjҿ [ 400.819117][ T30] %w-iY= ye(^NY&SB#?:TCNl0ƳXOT( /ZK #j(_IC'=w^{ u&wX#b4ly9^xGMPS;4;5Ȳ/Z' [ 400.904607][T21505] ip6gre1: entered allmulticast mode [ 400.920631][T10700] bond7: (slave macvlan2): failed to get link speed/duplex [ 400.929844][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 400.937855][ C1] lec:lec_tx_timeout: lec0 [ 400.942538][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 401.029954][T10700] bond7: (slave macvlan2): failed to get link speed/duplex [ 401.147497][T13560] bond7: (slave macvlan2): failed to get link speed/duplex [ 401.286538][T13565] bond7: (slave macvlan2): failed to get link speed/duplex [ 401.410230][T10700] bond7: (slave macvlan2): failed to get link speed/duplex [ 401.703346][T21566] netlink: 'syz.5.4218': attribute type 1 has an invalid length. [ 401.714486][T21566] netlink: 'syz.5.4218': attribute type 1 has an invalid length. [ 401.725526][T21566] netlink: 'syz.5.4218': attribute type 8 has an invalid length. [ 402.075949][T21596] team0 (unregistering): Port device team_slave_1 removed [ 402.124998][T21596] team0 (unregistering): Port device dummy0 removed [ 402.265214][ T5826] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 402.278672][ T5826] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 402.290323][ T5826] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 402.310063][ T5826] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 402.317854][ T5826] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 402.595523][T21621] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 402.671140][T21605] wlan0 speed is unknown, defaulting to 1000 [ 402.683577][T21605] vxcan1 speed is unknown, defaulting to 1000 [ 402.703538][T21627] veth0_to_bond: entered allmulticast mode [ 402.773702][T21632] netlink: 'syz.5.4238': attribute type 23 has an invalid length. [ 403.150576][T21647] netlink: 'syz.5.4243': attribute type 1 has an invalid length. [ 403.603733][T21605] chnl_net:caif_netlink_parms(): no params data found [ 403.860783][T21605] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.868020][T21605] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.885780][T21605] bridge_slave_0: entered allmulticast mode [ 403.896563][T21605] bridge_slave_0: entered promiscuous mode [ 403.906478][T21605] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.914262][T21605] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.922366][T21605] bridge_slave_1: entered allmulticast mode [ 403.930135][T21605] bridge_slave_1: entered promiscuous mode [ 404.043026][T21605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 404.070575][T21605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 404.187456][T21605] team0: Port device team_slave_0 added [ 404.206104][T21605] team0: Port device team_slave_1 added [ 404.320890][T21706] team0 (unregistering): Port device team_slave_0 removed [ 404.336563][T21706] team0 (unregistering): Port device team_slave_1 removed [ 404.380829][ T5826] Bluetooth: hci4: command tx timeout [ 404.408190][ T1108] tipc: Resetting bearer [ 404.428771][T21722] __nla_validate_parse: 17 callbacks suppressed [ 404.428791][T21722] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4261'. [ 404.462559][T21605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 404.470565][T21605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 404.497265][T21605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 404.549428][T21605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 404.552078][T21727] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4262'. [ 404.565737][T21605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 404.565767][T21605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 404.666398][T21605] hsr_slave_0: entered promiscuous mode [ 404.693052][T21605] hsr_slave_1: entered promiscuous mode [ 405.131766][T13560] net_ratelimit: 23 callbacks suppressed [ 405.131792][T13560] bond7: (slave macvlan2): failed to get link speed/duplex [ 405.290926][T13575] bond7: (slave macvlan2): failed to get link speed/duplex [ 405.307286][T21764] netlink: 88 bytes leftover after parsing attributes in process `syz.2.4274'. [ 405.336928][T21605] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 405.370372][T21605] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 405.382142][T21605] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 405.454240][T21605] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 405.683831][T21799] netlink: 1196 bytes leftover after parsing attributes in process `syz.0.4282'. [ 405.882011][T21605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 405.930166][T13575] bond7: (slave macvlan2): failed to get link speed/duplex [ 405.949836][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 405.958045][ C1] lec:lec_tx_timeout: lec0 [ 405.963541][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 405.992003][T21605] 8021q: adding VLAN 0 to HW filter on device team0 [ 406.026250][T13575] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.034862][T13575] bridge0: port 1(bridge_slave_0) entered forwarding state [ 406.050803][T21815] netlink: 'syz.2.4288': attribute type 1 has an invalid length. [ 406.052936][T13575] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.066044][T13575] bridge0: port 2(bridge_slave_1) entered forwarding state [ 406.077447][T21816] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4287'. [ 406.142458][T21815] 8021q: adding VLAN 0 to HW filter on device bond3 [ 406.176690][T21820] bond3: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 406.206218][T21815] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 406.460208][ T5826] Bluetooth: hci4: command tx timeout [ 406.501294][T13560] bond7: (slave macvlan2): failed to get link speed/duplex [ 406.520797][T13552] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 406.652309][T13575] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 406.681739][ T1108] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 406.710563][ T1108] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 406.739844][ T12] bond7: (slave macvlan2): failed to get link speed/duplex [ 406.740032][ T1108] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 406.802982][T21859] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4296'. [ 406.980622][T21870] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4301'. [ 407.141673][T21867] netlink: 'syz.5.4299': attribute type 9 has an invalid length. [ 407.149582][T21867] netlink: 'syz.5.4299': attribute type 11 has an invalid length. [ 407.170412][T21867] netlink: 'syz.5.4299': attribute type 12 has an invalid length. [ 407.191733][T21867] netlink: 210020 bytes leftover after parsing attributes in process `syz.5.4299'. [ 407.227634][T21605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 407.229878][T21867] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4299'. [ 407.357123][T21897] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4303'. [ 407.386360][T21902] xt_policy: neither incoming nor outgoing policy selected [ 407.698397][T21920] macsec1: entered promiscuous mode [ 407.775044][T21925] netlink: 'syz.2.4312': attribute type 1 has an invalid length. [ 407.819423][T21925] netlink: 'syz.2.4312': attribute type 2 has an invalid length. [ 407.833359][T21925] netlink: 'syz.2.4312': attribute type 2 has an invalid length. [ 407.844142][T21925] netlink: 'syz.2.4312': attribute type 2 has an invalid length. [ 407.959311][T21605] veth0_vlan: entered promiscuous mode [ 407.987032][T21605] veth1_vlan: entered promiscuous mode [ 408.034829][T21605] veth0_macvtap: entered promiscuous mode [ 408.058659][T21605] veth1_macvtap: entered promiscuous mode [ 408.098190][T21605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 408.117124][T21949] x_tables: duplicate underflow at hook 2 [ 408.128600][T21605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 408.159474][ T3015] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.191507][ T3015] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.202793][ T3015] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.223189][ T3015] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.348192][T21958] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 408.399060][T21958] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 408.449411][T13569] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.467861][T13569] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.536840][ T1108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.539093][T21967] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 408.552805][T21967] IPv6: NLM_F_CREATE should be set when creating new route [ 408.560401][T21967] IPv6: NLM_F_CREATE should be set when creating new route [ 408.567652][T21967] IPv6: NLM_F_CREATE should be set when creating new route [ 408.570145][ T1108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.579508][ T5826] Bluetooth: hci4: command tx timeout [ 408.586496][T21967] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 409.165828][T22000] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 409.443524][T22014] __nla_validate_parse: 11 callbacks suppressed [ 409.443536][T22014] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4338'. [ 409.642915][T22026] tipc: Cannot configure node identity twice [ 409.678913][T22029] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4342'. [ 409.776005][T22031] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4343'. [ 409.854705][T22029] netlink: 'syz.2.4342': attribute type 11 has an invalid length. [ 409.875464][T22029] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4342'. [ 409.905396][T22041] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4346'. [ 410.014285][T22048] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4347'. [ 410.063087][T22048] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4347'. [ 410.114230][T22054] netlink: 'syz.0.4346': attribute type 10 has an invalid length. [ 410.150715][T13552] net_ratelimit: 108 callbacks suppressed [ 410.150733][T13552] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 410.179948][T13552] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 410.184289][T22055] sctp: [Deprecated]: syz.7.4349 (pid 22055) Use of int in maxseg socket option. [ 410.184289][T22055] Use struct sctp_assoc_value instead [ 410.213056][T13575] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 410.240834][T13575] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 410.264573][T22048] gretap1: entered promiscuous mode [ 410.270273][T22048] gretap1: entered allmulticast mode [ 410.280673][T13575] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 410.320732][T13575] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 410.329382][T13569] bond7: (slave macvlan2): failed to get link speed/duplex [ 410.400263][T13569] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 410.430797][T13569] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 410.489946][T13569] bond7: (slave macvlan2): failed to get link speed/duplex [ 410.620462][ T5826] Bluetooth: hci4: command tx timeout [ 410.718780][T22073] tls_set_device_offload: netdev not found [ 410.733792][T22073] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4357'. [ 410.815602][T22084] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4359'. [ 410.827598][T22073] bond0 (unregistering): Released all slaves [ 410.969799][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 410.977881][ C1] lec:lec_tx_timeout: lec0 [ 410.984327][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 411.214828][T22098] erspan0: entered promiscuous mode [ 411.225548][T22098] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4364'. [ 411.265118][T22101] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 411.372448][T22112] netlink: 'syz.5.4366': attribute type 10 has an invalid length. [ 411.466829][T22112] `: (slave netdevsim0): Enslaving as an active interface with a down link [ 412.700705][ T5826] Bluetooth: hci4: command tx timeout [ 412.762297][T22184] syzkaller0: entered promiscuous mode [ 412.797174][T22184] syzkaller0: entered allmulticast mode [ 412.965552][T22200] ip6t_srh: unknown srh invflags 4000 [ 413.094599][T22207] netlink: 'syz.6.4393': attribute type 1 has an invalid length. [ 413.134731][T22207] netlink: 'syz.6.4393': attribute type 2 has an invalid length. [ 413.160857][T22207] netlink: 'syz.6.4393': attribute type 1 has an invalid length. [ 413.198992][T22207] netlink: 'syz.6.4393': attribute type 3 has an invalid length. [ 413.760081][T22222] netlink: 'syz.6.4396': attribute type 11 has an invalid length. [ 413.859348][T22224] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 413.908490][T22224] netlink: 'syz.0.4397': attribute type 1 has an invalid length. [ 414.044255][T22232] bond6: (slave gretap1): making interface the new active one [ 414.052914][T22232] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 414.338209][T22238] wlan0 speed is unknown, defaulting to 1000 [ 414.346339][T22238] vxcan1 speed is unknown, defaulting to 1000 [ 414.645644][T22259] netlink: 'syz.0.4405': attribute type 2 has an invalid length. [ 415.160895][T22293] net_ratelimit: 147 callbacks suppressed [ 415.160914][T22293] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 415.188111][ T3015] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 415.202191][T22297] __nla_validate_parse: 10 callbacks suppressed [ 415.202208][T22297] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4415'. [ 415.234677][T22293] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 415.245276][ T3015] bond7: (slave macvlan2): failed to get link speed/duplex [ 415.252867][T13569] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 415.274553][T13569] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 415.302158][T22301] openvswitch: netlink: IP tunnel dst address not specified [ 415.338265][T22301] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 415.387546][T22305] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4419'. [ 415.400120][ T3015] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 415.420889][ T3015] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 415.481951][T22307] syzkaller0: entered promiscuous mode [ 415.487596][T22307] syzkaller0: entered allmulticast mode [ 415.885398][T22324] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 415.896217][T22324] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4421'. [ 415.999792][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 416.008055][ C1] lec:lec_tx_timeout: lec0 [ 416.012832][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 416.037756][T22330] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4426'. [ 416.389598][T22351] SET target dimension over the limit! [ 416.494555][T22359] netlink: 56 bytes leftover after parsing attributes in process `syz.6.4432'. [ 416.499044][T22356] ip6gre1: entered promiscuous mode [ 416.530728][T22361] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4432'. [ 416.562887][T22363] IPVS: set_ctl: invalid protocol: 94 172.20.20.40:20003 [ 417.030203][T22394] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4443'. [ 417.390770][T22417] pim6reg: entered allmulticast mode [ 417.532065][T22425] netlink: 'syz.6.4454': attribute type 1 has an invalid length. [ 417.592056][T22425] bond4: entered promiscuous mode [ 417.606598][T22425] 8021q: adding VLAN 0 to HW filter on device bond4 [ 417.716507][T22425] bond4: (slave bridge3): making interface the new active one [ 417.734334][T22425] bridge3: entered promiscuous mode [ 417.743418][T22425] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 417.755740][T22438] netlink: 'syz.0.4459': attribute type 1 has an invalid length. [ 417.860696][T22438] 8021q: adding VLAN 0 to HW filter on device bond7 [ 417.995854][T22455] tipc: Enabled bearer , priority 0 [ 418.018157][T22457] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4462'. [ 418.068956][T22461] netlink: 'syz.0.4463': attribute type 1 has an invalid length. [ 418.101131][T22461] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4463'. [ 418.124178][T22464] IPVS: set_ctl: invalid protocol: 29 172.20.20.170:20004 [ 418.145950][T22455] syzkaller0: entered promiscuous mode [ 418.162418][T22455] syzkaller0: entered allmulticast mode [ 418.168928][T22455] tipc: Resetting bearer [ 418.288448][ T3015] tipc: Resetting bearer [ 418.336875][T22454] tipc: Resetting bearer [ 418.688326][T22480] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4469'. [ 420.169855][ T3015] net_ratelimit: 183 callbacks suppressed [ 420.169874][ T3015] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 420.212998][ T3015] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 420.239964][ T1108] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 420.260825][ T3015] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 420.285027][ T1108] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 420.302525][T22454] tipc: Disabling bearer [ 420.310776][ T1108] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 420.330004][ T1108] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 420.335918][ T983] tipc: Node number set to 3904207910 [ 420.353743][ T3015] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 420.371447][ T3015] bond7: (slave macvlan2): failed to get link speed/duplex [ 420.381085][ T3015] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 420.840058][T22536] __nla_validate_parse: 1 callbacks suppressed [ 420.840076][T22536] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4483'. [ 420.937464][T22533] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4483'. [ 421.053050][T22550] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4489'. [ 421.344072][T22570] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4496'. [ 421.362680][T22569] ip6t_srh: unknown srh invflags 4000 [ 421.368379][T22569] ip6t_srh: unknown srh invflags 4000 [ 421.382363][T22569] ip6t_srh: unknown srh invflags 4000 [ 421.395473][T22569] ip6t_srh: unknown srh invflags 4000 [ 421.428583][T22573] x_tables: ip6_tables: DNPT target: used from hooks FORWARD, but only usable from PREROUTING/OUTPUT [ 422.059935][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6050 ms [ 422.068270][ C1] lec:lec_tx_timeout: lec0 [ 422.074678][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 422.748441][T22665] batadv1: entered allmulticast mode [ 423.085234][T22687] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4524'. [ 423.106137][T22687] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4524'. [ 423.335481][T22707] netlink: 'syz.5.4527': attribute type 1 has an invalid length. [ 423.343585][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 423.456036][T22713] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4531'. [ 423.550340][ T5940] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 423.705243][T22718] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4532'. [ 424.088374][T22744] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4538'. [ 424.400575][T22766] netlink: 'syz.2.4543': attribute type 7 has an invalid length. [ 424.460201][ T5984] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 424.518382][T22776] netlink: 224 bytes leftover after parsing attributes in process `syz.6.4546'. [ 424.615027][T22779] IPVS: set_ctl: invalid protocol: 51 127.0.0.1:20004 [ 424.744879][T22788] netlink: 'syz.7.4551': attribute type 1 has an invalid length. [ 424.753558][T22788] netlink: 'syz.7.4551': attribute type 2 has an invalid length. [ 425.132954][ T5831] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 425.144159][ T5831] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 425.155604][ T5831] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 425.164076][ T5831] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 425.177046][ T5831] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 425.178200][T22807] Bluetooth: MGMT ver 1.23 [ 425.239863][T13569] net_ratelimit: 159 callbacks suppressed [ 425.239883][T13569] bond7: (slave macvlan2): failed to get link speed/duplex [ 425.240079][ T1108] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 425.300359][ T1108] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 425.351922][ T1108] bond7: (slave macvlan2): failed to get link speed/duplex [ 425.426447][ T1108] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 425.435224][ T1108] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 425.493315][T13575] bond7: (slave macvlan2): failed to get link speed/duplex [ 425.552708][T13569] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 425.561516][T13569] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 425.576028][T22820] syzkaller0: entered promiscuous mode [ 425.591121][T22820] syzkaller0: entered allmulticast mode [ 425.605633][T22823] sch_tbf: burst 0 is lower than device lo mtu (65499) ! [ 425.626318][T22824] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 425.669985][T13569] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 425.715446][T22824] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 425.872898][T22825] ip6gre0: entered promiscuous mode [ 425.889196][T22825] __nla_validate_parse: 4 callbacks suppressed [ 425.889209][T22825] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4563'. [ 425.905795][T22804] wlan0 speed is unknown, defaulting to 1000 [ 425.935653][T22828] bond5: Unable to set peer notification delay as MII monitoring is disabled [ 425.947236][T22828] bond5 (unregistering): Released all slaves [ 425.977637][T22832] lo: entered promiscuous mode [ 425.995453][T22838] netlink: 'syz.2.4567': attribute type 15 has an invalid length. [ 425.996452][T22804] vxcan1 speed is unknown, defaulting to 1000 [ 426.024219][T22838] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4567'. [ 426.071339][ T3015] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 426.091359][T22838] netlink: 'syz.2.4567': attribute type 15 has an invalid length. [ 426.099204][T22838] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4567'. [ 426.111766][ T3015] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 426.124452][ T3015] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 426.228427][ T3015] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 426.311489][T22850] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4572'. [ 426.847128][T22882] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4580'. [ 426.963965][T22804] chnl_net:caif_netlink_parms(): no params data found [ 427.062134][T22894] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4582'. [ 427.155629][T22899] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4585'. [ 427.169336][T22899] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4585'. [ 427.179039][T22900] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4585'. [ 427.179073][T22900] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4585'. [ 427.262981][ T5831] Bluetooth: hci8: command tx timeout [ 427.328976][T22804] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.355326][T22804] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.373028][T22804] bridge_slave_0: entered allmulticast mode [ 427.391964][T22804] bridge_slave_0: entered promiscuous mode [ 427.416670][T22804] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.442607][T22804] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.458499][T22804] bridge_slave_1: entered allmulticast mode [ 427.469038][T22804] bridge_slave_1: entered promiscuous mode [ 427.579585][T22804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 427.615254][T22804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 427.715218][T22804] team0: Port device team_slave_0 added [ 427.724130][T22804] team0: Port device team_slave_1 added [ 427.798510][T22804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 427.816314][T22804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 427.819781][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5740 ms [ 427.851448][ C1] lec:lec_tx_timeout: lec0 [ 427.857754][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 427.860613][T22804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 427.913850][T22804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 427.921460][T22804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 427.952612][T22804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 428.089149][T22804] hsr_slave_0: entered promiscuous mode [ 428.118799][T22804] hsr_slave_1: entered promiscuous mode [ 428.147071][T22804] debugfs: 'hsr0' already exists in 'hsr' [ 428.159236][T22804] Cannot create hsr debugfs directory [ 428.316419][T22963] netlink: 'syz.6.4601': attribute type 1 has an invalid length. [ 428.621939][T22804] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.853354][T22804] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.000832][T22991] tipc: Enabled bearer , priority 0 [ 429.013541][T22986] syzkaller0: MTU too low for tipc bearer [ 429.036995][T22986] tipc: Disabling bearer [ 429.085911][T22804] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.310575][T22804] `: (slave netdevsim0): Releasing backup interface [ 429.333858][T22804] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.347502][ T5831] Bluetooth: hci8: command tx timeout [ 430.302147][T13569] net_ratelimit: 6947 callbacks suppressed [ 430.302168][T13569] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 430.302244][T13552] bond7: (slave macvlan2): failed to get link speed/duplex [ 430.330703][T13575] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 430.370533][T13552] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 430.390357][ T1108] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 430.415210][ T1108] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 430.420866][ T5940] IPVS: starting estimator thread 0... [ 430.520552][T13552] bond7: (slave macvlan2): failed to get link speed/duplex [ 430.520980][T23023] IPVS: using max 35 ests per chain, 84000 per kthread [ 430.540423][T13552] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 430.540665][T23030] delete_channel: no stack [ 430.570672][T13552] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 430.629448][T22804] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 430.682250][T22804] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 430.683313][T23033] netlink: 'syz.7.4619': attribute type 3 has an invalid length. [ 430.690896][T13569] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 430.771081][T22804] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 430.818434][T22804] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 430.872552][T23043] veth1_virt_wifi: entered promiscuous mode [ 430.878704][T23043] veth1_virt_wifi: entered allmulticast mode [ 431.030505][T23059] __nla_validate_parse: 22 callbacks suppressed [ 431.030520][T23059] netlink: 68 bytes leftover after parsing attributes in process `syz.6.4624'. [ 431.084956][T23056] syzkaller0: entered promiscuous mode [ 431.109240][T23056] syzkaller0: entered allmulticast mode [ 431.188593][T23071] netlink: 59 bytes leftover after parsing attributes in process `syz.2.4627'. [ 431.256976][T22804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 431.420794][ T5831] Bluetooth: hci8: command tx timeout [ 431.433519][T23086] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4632'. [ 431.509176][T22804] 8021q: adding VLAN 0 to HW filter on device team0 [ 431.584451][T13569] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.591649][T13569] bridge0: port 1(bridge_slave_0) entered forwarding state [ 431.618930][T13569] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.626220][T13569] bridge0: port 2(bridge_slave_1) entered forwarding state [ 431.817117][T23102] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4638'. [ 431.828704][T23103] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4637'. [ 431.860308][T23102] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4638'. [ 431.890003][T23102] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4638'. [ 431.943322][T23102] netlink: 'syz.6.4638': attribute type 3 has an invalid length. [ 431.960828][T23108] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4639'. [ 432.028788][T23106] netlink: 52 bytes leftover after parsing attributes in process `syz.6.4638'. [ 432.195531][T22804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 432.356140][T23131] syzkaller1: entered promiscuous mode [ 432.362014][T23131] syzkaller1: entered allmulticast mode [ 432.784987][T23145] syzkaller0: entered promiscuous mode [ 432.798478][T23147] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4647'. [ 432.810392][T23145] syzkaller0: entered allmulticast mode [ 432.843359][T23147] 8021q: adding VLAN 0 to HW filter on device bond5 [ 432.870321][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 432.878946][ C1] lec:lec_tx_timeout: lec0 [ 432.884300][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 432.992867][T22804] veth0_vlan: entered promiscuous mode [ 433.025249][T22804] veth1_vlan: entered promiscuous mode [ 433.116560][T22804] veth0_macvtap: entered promiscuous mode [ 433.128400][T22804] veth1_macvtap: entered promiscuous mode [ 433.199611][T22804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 433.296110][T22804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 433.386457][ T1108] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.425797][ T1108] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.447743][ T1108] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.472506][T13572] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.500188][ T5831] Bluetooth: hci8: command tx timeout [ 433.721375][T13575] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.735050][T13575] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.809175][ T3015] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.838595][ T3015] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.864470][T23188] ip6t_rpfilter: unknown options [ 433.979473][T23192] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 434.159418][T23202] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 434.165813][T23202] syzkaller1: linktype set to 823 [ 434.360643][T23217] netlink: 'syz.6.4670': attribute type 1 has an invalid length. [ 434.416402][T23217] 8021q: adding VLAN 0 to HW filter on device bond6 [ 434.440762][T23220] syzkaller0: entered promiscuous mode [ 434.446622][T23220] syzkaller0: entered allmulticast mode [ 434.489211][T23224] 8021q: adding VLAN 0 to HW filter on device bond6 [ 434.498398][T23224] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 434.511163][T23224] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 434.574609][T23226] syzkaller0: entered promiscuous mode [ 434.586758][T23226] syzkaller0: entered allmulticast mode [ 434.680756][T23217] veth7: entered promiscuous mode [ 434.695031][T23217] bond6: (slave veth7): Enslaving as an active interface with a down link [ 434.760722][T23241] can: request_module (can-proto-0) failed. [ 435.293323][T23255] bond1: Removing last ns target with arp_interval on [ 435.316135][ T12] net_ratelimit: 160 callbacks suppressed [ 435.316154][ T12] bond7: (slave macvlan2): failed to get link speed/duplex [ 435.330207][T13569] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 435.360535][T13572] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 435.390514][T13572] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 435.413300][T13575] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 435.424087][T13575] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 435.517727][T23267] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 435.587810][T13575] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 435.630393][T13575] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 435.662974][T13575] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 435.685868][T23268] veth0_macvtap (unregistering): left allmulticast mode [ 436.057830][T23292] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 436.068529][T23299] netlink: 'syz.7.4696': attribute type 1 has an invalid length. [ 436.081687][T23292] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 436.090920][T23292] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 436.108182][T23299] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 436.110075][T23296] netlink: 'syz.6.4695': attribute type 1 has an invalid length. [ 436.236856][T23311] __nla_validate_parse: 6 callbacks suppressed [ 436.236920][T23311] netlink: 60 bytes leftover after parsing attributes in process `syz.7.4697'. [ 436.758733][T23338] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4705'. [ 437.227847][T23378] xt_policy: too many policy elements [ 437.234009][T23377] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4715'. [ 437.256821][T23382] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4717'. [ 437.436244][T23356] syzkaller1: entered promiscuous mode [ 437.442243][T23356] syzkaller1: entered allmulticast mode [ 437.456240][T23390] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 437.517759][T23394] tipc: Started in network mode [ 437.523415][T23394] tipc: Node identity 7256e5f24947, cluster identity 4711 [ 437.532713][T23394] tipc: Enabled bearer , priority 0 [ 437.606413][T23394] syzkaller0: entered promiscuous mode [ 437.614019][T23394] syzkaller0: entered allmulticast mode [ 437.639555][T23394] tipc: Resetting bearer [ 437.693328][T23393] tipc: Resetting bearer [ 437.811838][T23407] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4723'. [ 437.902417][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 437.910590][ C1] lec:lec_tx_timeout: lec0 [ 437.915431][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 438.062497][ T31] INFO: task syz.3.2860:16574 blocked for more than 143 seconds. [ 438.072638][ T31] Not tainted syzkaller #0 [ 438.077669][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 438.087525][ T31] task:syz.3.2860 state:D stack:26280 pid:16574 tgid:16573 ppid:5832 task_flags:0x400040 flags:0x00080002 [ 438.101227][ T31] Call Trace: [ 438.104616][ T31] [ 438.107548][ T31] __schedule+0x14ea/0x5050 [ 438.112991][ T31] ? __pfx___schedule+0x10/0x10 [ 438.117946][ T31] ? schedule+0x90/0x360 [ 438.123059][ T31] schedule+0x164/0x360 [ 438.127410][ T31] schedule_preempt_disabled+0x13/0x30 [ 438.133787][ T31] __mutex_lock+0x7fe/0x1300 [ 438.138421][ T31] ? __mutex_lock+0x5ac/0x1300 [ 438.145859][ T31] ? nfsd_nl_rpc_status_get_dumpit+0xdc/0x1410 [ 438.152537][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 438.157579][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 438.163986][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 438.169437][ T31] nfsd_nl_rpc_status_get_dumpit+0xdc/0x1410 [ 438.176329][ T31] ? kasan_save_track+0x3e/0x80 [ 438.181719][ T31] ? __kasan_kmalloc+0x93/0xb0 [ 438.186482][ T31] ? __kmalloc_node_track_caller_noprof+0x558/0x7f0 [ 438.194291][ T31] ? kmalloc_reserve+0x136/0x290 [ 438.199340][ T31] ? __alloc_skb+0x204/0x390 [ 438.204958][ T31] ? netlink_dump+0x1ef/0xe80 [ 438.209638][ T31] ? __netlink_dump_start+0x5cb/0x7e0 [ 438.215293][ T31] ? genl_family_rcv_msg_dumpit+0x213/0x310 [ 438.221968][ T31] ? genl_rcv_msg+0x5e8/0x7a0 [ 438.226672][ T31] ? netlink_rcv_skb+0x232/0x4b0 [ 438.232485][ T31] ? netlink_unicast+0x80f/0x9b0 [ 438.237443][ T31] ? netlink_sendmsg+0x813/0xb40 [ 438.242925][ T31] ? ____sys_sendmsg+0xa68/0xad0 [ 438.247954][ T31] ? ___sys_sendmsg+0x2a5/0x360 [ 438.255189][ T31] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 438.261333][ T31] ? do_syscall_64+0xe2/0xf80 [ 438.266202][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.273075][ T31] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 438.279631][ T31] ? rcu_is_watching+0x15/0xb0 [ 438.284941][ T31] ? trace_kmalloc+0x1f/0xb0 [ 438.289620][ T31] ? __kmalloc_node_track_caller_noprof+0x577/0x7f0 [ 438.297955][ T31] ? __build_skb_around+0x22d/0x3c0 [ 438.303710][ T31] genl_dumpit+0x10b/0x1b0 [ 438.308129][ T31] netlink_dump+0x722/0xe80 [ 438.313098][ T31] ? __pfx_netlink_dump+0x10/0x10 [ 438.318128][ T31] ? genl_start+0x499/0x6c0 [ 438.323865][ T31] __netlink_dump_start+0x5cb/0x7e0 [ 438.330353][ T31] genl_family_rcv_msg_dumpit+0x213/0x310 [ 438.336109][ T31] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 438.342958][ T31] ? genl_get_cmd+0x4a8/0x930 [ 438.347644][ T31] ? __pfx_genl_start+0x10/0x10 [ 438.353427][ T31] ? __pfx_genl_dumpit+0x10/0x10 [ 438.358384][ T31] ? __pfx_genl_done+0x10/0x10 [ 438.363832][ T31] ? __dev_queue_xmit+0x274/0x3850 [ 438.368978][ T31] genl_rcv_msg+0x5e8/0x7a0 [ 438.374023][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 438.379081][ T31] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 438.388175][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 438.394267][ T31] netlink_rcv_skb+0x232/0x4b0 [ 438.400826][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 438.406072][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 438.412315][ T31] ? genl_rcv+0x19/0x40 [ 438.416494][ T31] ? down_read+0x272/0x2e0 [ 438.421450][ T31] ? genl_rcv+0xd/0x40 [ 438.425658][ T31] genl_rcv+0x28/0x40 [ 438.429659][ T31] netlink_unicast+0x80f/0x9b0 [ 438.435084][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 438.441261][ T31] ? __alloc_skb+0x193/0x390 [ 438.445876][ T31] ? netlink_sendmsg+0x650/0xb40 [ 438.451622][ T31] ? skb_put+0x11b/0x210 [ 438.455900][ T31] netlink_sendmsg+0x813/0xb40 [ 438.462161][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 438.467735][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 438.475026][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 438.481529][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 438.486878][ T31] ____sys_sendmsg+0xa68/0xad0 [ 438.492761][ T31] ? __might_fault+0xaf/0x130 [ 438.498085][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 438.505229][ T31] ? import_iovec+0x73/0xa0 [ 438.510915][ T31] ___sys_sendmsg+0x2a5/0x360 [ 438.516181][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 438.521503][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 438.527026][ T31] ? futex_wait+0x29a/0x380 [ 438.532530][ T31] ? __fget_files+0x2a/0x420 [ 438.537331][ T31] ? __fget_files+0x3a0/0x420 [ 438.543117][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 438.548091][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 438.554261][ T31] ? rcu_is_watching+0x15/0xb0 [ 438.559144][ T31] do_syscall_64+0xe2/0xf80 [ 438.564814][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.571651][ T31] ? trace_irq_disable+0x37/0x100 [ 438.576805][ T31] ? clear_bhb_loop+0x60/0xb0 [ 438.582344][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.588332][ T31] RIP: 0033:0x7f260a79aeb9 [ 438.594023][ T31] RSP: 002b:00007f260b582028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 438.603712][ T31] RAX: ffffffffffffffda RBX: 00007f260aa15fa0 RCX: 00007f260a79aeb9 [ 438.612219][ T31] RDX: 0000000000000800 RSI: 0000200000000180 RDI: 0000000000000003 [ 438.621117][ T31] RBP: 00007f260a808c1f R08: 0000000000000000 R09: 0000000000000000 [ 438.629106][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 438.638973][ T31] R13: 00007f260aa16038 R14: 00007f260aa15fa0 R15: 00007ffdd7487148 [ 438.647783][ T31] [ 438.651954][ T31] [ 438.651954][ T31] Showing all locks held in the system: [ 438.661544][ T31] 1 lock held by khungtaskd/31: [ 438.666527][ T31] #0: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 438.676816][ T31] 3 locks held by kworker/u8:8/3015: [ 438.683095][ T31] #0: ffff88813fe69948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 438.695544][ T31] #1: ffffc9000c207bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 438.709295][ T31] #2: ffffffff8f9ac0c8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 438.719175][ T31] 2 locks held by getty/5583: [ 438.724386][ T31] #0: ffff88814da600a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 438.734755][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 438.745882][ T31] 3 locks held by kworker/0:6/5940: [ 438.751598][ T31] #0: ffff88813fe55948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 438.763197][ T31] #1: ffffc9000452fbc0 ((work_completion)(&tn->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 438.775831][ T31] #2: ffffffff8f9ac0c8 (rtnl_mutex){+.+.}-{4:4}, at: tipc_net_finalize_work+0x1e/0x90 [ 438.786790][ T31] 1 lock held by udevd/7053: [ 438.791518][ T31] #0: ffff8880255d5358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 438.801863][ T31] 2 locks held by syz.4.1389/11149: [ 438.807721][ T31] #0: ffffffff8fa1a170 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 438.816308][ T31] #1: ffffffff8e879368 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x16c0 [ 438.827057][ T31] 3 locks held by syz.3.2860/16574: [ 438.833667][ T31] #0: ffffffff8fa1a170 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 438.842425][ T31] #1: ffff8880779e26f0 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 438.853274][ T31] #2: ffffffff8e879368 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_rpc_status_get_dumpit+0xdc/0x1410 [ 438.865271][ T31] 3 locks held by syz.1.4026/20880: [ 438.871083][ T31] #0: ffffffff8fa1a170 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 438.879298][ T31] #1: ffff88807a8ca6f0 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 438.890741][ T31] #2: ffffffff8e879368 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_rpc_status_get_dumpit+0xdc/0x1410 [ 438.901894][ T31] 2 locks held by syz.7.4710/23354: [ 438.907102][ T31] #0: ffff888059455288 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 438.918590][ T31] #1: ffffffff8e560c78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 438.933695][ T31] 1 lock held by syz.7.4710/23356: [ 438.938833][ T31] #0: ffffffff8f9ac0c8 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x83c/0x1150 [ 438.948859][ T31] 1 lock held by syz.7.4710/23374: [ 438.954576][ T31] #0: ffffffff8f9ac0c8 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150 [ 438.964150][ T31] 2 locks held by syz.7.4710/23410: [ 438.969431][ T31] #0: ffffffff8ff0ed60 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 438.979585][ T31] #1: ffffffff8f9ac0c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a1/0x1be0 [ 438.989226][ T31] 2 locks held by syz.5.4721/23393: [ 438.995410][ T31] #0: ffffffff8f9ac0c8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 439.004830][ T31] #1: ffffffff8e560c78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 439.017201][ T31] 1 lock held by syz.6.4722/23398: [ 439.023696][ T31] #0: ffffffff8f9ac0c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a1/0x1be0 [ 439.033585][ T31] 2 locks held by syz.6.4722/23402: [ 439.038880][ T31] #0: ffffffff8ff100d0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 439.049287][ T31] #1: ffffffff8f9ac0c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a1/0x1be0 [ 439.059668][ T31] 1 lock held by syz.6.4722/23406: [ 439.065511][ T31] #0: ffffffff8f9ac0c8 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x3bc/0x1e10 [ 439.075652][ T31] 1 lock held by syz.6.4722/23408: [ 439.081890][ T31] #0: ffffffff8f9ac0c8 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x3bc/0x1e10 [ 439.091730][ T31] 2 locks held by syz.6.4722/23409: [ 439.096920][ T31] #0: ffffffff8fa1a170 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 439.106002][ T31] #1: ffffffff8f9ac0c8 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_pre_doit+0x5f/0x930 [ 439.116551][ T31] 2 locks held by syz.6.4722/23411: [ 439.121824][ T31] #0: ffffffff8fa1a170 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 439.130593][ T31] #1: ffffffff8f9ac0c8 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_pre_doit+0x5f/0x930 [ 439.141075][ T31] 2 locks held by syz.0.4723/23403: [ 439.146282][ T31] #0: ffffffff8fef57a0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 439.157035][ T31] #1: ffffffff8f9ac0c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a1/0x1be0 [ 439.166777][ T31] 1 lock held by syz.2.4724/23404: [ 439.173287][ T31] #0: ffff88803dfa0d88 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 439.184028][ T31] 1 lock held by syz.2.4724/23405: [ 439.189132][ T31] #0: ffffffff8f9ac0c8 (rtnl_mutex){+.+.}-{4:4}, at: rtm_new_nexthop+0xfbc/0x8620 [ 439.201217][ T31] 2 locks held by dhcpcd/23413: [ 439.209264][ T31] [ 439.212676][ T31] ============================================= [ 439.212676][ T31] [ 439.222292][ T31] NMI backtrace for cpu 1 [ 439.222309][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 439.222324][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 439.222332][ T31] Call Trace: [ 439.222338][ T31] [ 439.222344][ T31] dump_stack_lvl+0xe8/0x150 [ 439.222365][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 439.222384][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 439.222403][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 439.222422][ T31] sys_info+0x135/0x170 [ 439.222436][ T31] watchdog+0xf90/0xfe0 [ 439.222453][ T31] ? watchdog+0x209/0xfe0 [ 439.222471][ T31] kthread+0x726/0x8b0 [ 439.222488][ T31] ? __pfx_watchdog+0x10/0x10 [ 439.222500][ T31] ? __pfx_kthread+0x10/0x10 [ 439.222516][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 439.222534][ T31] ? __pfx_kthread+0x10/0x10 [ 439.222547][ T31] ret_from_fork+0x51b/0xa40 [ 439.222567][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 439.222584][ T31] ? __switch_to+0xc82/0x1410 [ 439.222603][ T31] ? __pfx_kthread+0x10/0x10 [ 439.222618][ T31] ret_from_fork_asm+0x1a/0x30 [ 439.222646][ T31] [ 439.222651][ T31] Sending NMI from CPU 1 to CPUs 0: [ 439.352903][ C0] NMI backtrace for cpu 0 [ 439.352919][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 439.352936][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 439.352945][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 439.352964][ C0] Code: a8 60 02 e9 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 67 12 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 439.352977][ C0] RSP: 0018:ffffffff8e207dc0 EFLAGS: 00000246 [ 439.352992][ C0] RAX: 000000000017b763 RBX: ffffffff8199570d RCX: 0000000080000001 [ 439.353003][ C0] RDX: 0000000000000001 RSI: ffffffff8dcc9188 RDI: ffffffff8c073980 [ 439.353013][ C0] RBP: ffffffff8e207eb0 R08: ffff8880b86336db R09: 1ffff110170c66db [ 439.353024][ C0] R10: dffffc0000000000 R11: ffffed10170c66dc R12: ffffffff8fef1a70 [ 439.353035][ C0] R13: 1ffffffff1c52a78 R14: 0000000000000000 R15: 0000000000000000 [ 439.353045][ C0] FS: 0000000000000000(0000) GS:ffff8881256f5000(0000) knlGS:0000000000000000 [ 439.353057][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 439.353067][ C0] CR2: 000056055d9af168 CR3: 00000000761fa000 CR4: 00000000003526f0 [ 439.353081][ C0] Call Trace: [ 439.353087][ C0] [ 439.353093][ C0] default_idle+0x9/0x20 [ 439.353108][ C0] default_idle_call+0x72/0xb0 [ 439.353124][ C0] do_idle+0x1bd/0x500 [ 439.353141][ C0] ? __pfx_do_idle+0x10/0x10 [ 439.353155][ C0] ? do_idle+0x4d0/0x500 [ 439.353169][ C0] cpu_startup_entry+0x43/0x60 [ 439.353181][ C0] rest_init+0x2de/0x300 [ 439.353198][ C0] start_kernel+0x380/0x3d0 [ 439.353217][ C0] x86_64_start_reservations+0x24/0x30 [ 439.353243][ C0] x86_64_start_kernel+0x143/0x1c0 [ 439.353258][ C0] common_startup_64+0x13e/0x147 [ 439.353282][ C0] [ 439.553862][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 439.560738][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 439.569842][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 439.579884][ T31] Call Trace: [ 439.583155][ T31] [ 439.586086][ T31] vpanic+0x1e0/0x670 [ 439.590070][ T31] panic+0xc5/0xd0 [ 439.593787][ T31] ? __pfx_panic+0x10/0x10 [ 439.598199][ T31] ? __pfx_panic+0x10/0x10 [ 439.602601][ T31] watchdog+0xfda/0xfe0 [ 439.606748][ T31] ? watchdog+0x209/0xfe0 [ 439.611083][ T31] kthread+0x726/0x8b0 [ 439.615236][ T31] ? __pfx_watchdog+0x10/0x10 [ 439.619970][ T31] ? __pfx_kthread+0x10/0x10 [ 439.624607][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 439.630160][ T31] ? __pfx_kthread+0x10/0x10 [ 439.634755][ T31] ret_from_fork+0x51b/0xa40 [ 439.639442][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 439.644641][ T31] ? __switch_to+0xc82/0x1410 [ 439.649423][ T31] ? __pfx_kthread+0x10/0x10 [ 439.654005][ T31] ret_from_fork_asm+0x1a/0x30 [ 439.658778][ T31] [ 439.662256][ T31] Kernel Offset: disabled [ 439.666651][ T31] Rebooting in 86400 seconds..