last executing test programs: 13.242738291s ago: executing program 2 (id=3140): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="0218000014000000000000000000000005000500000000000a00ffff00000000fe8000000000000000000000000000aa0000000000000000080012000000000003000000000000002600000000000000000000000000000002000002000000000000000000000000fc010000000000000000000000000000050006006c0000000a"], 0xa0}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYRESOCT=r1], 0x90}}, 0x2000) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$can_raw(0x1d, 0x3, 0x1) unshare(0x28000600) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r6) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=r7, @ANYBLOB="830405000000000020001280080001006774700014000280080004000100000008000200db4c34ce"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) sendto$packet(r5, &(0x7f0000000100)="70256e83e2e5d57c68214e26a3fa617ab7d642cf579023c046c0eb31499d283e19db111d9e9ed35c", 0x28, 0xc855, &(0x7f0000000200)={0x11, 0x86dd, r8, 0x1, 0x8, 0x6, @random="842c4c45bc33"}, 0x14) getsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000001040)=[{}], &(0x7f0000000100)=0x41) tee(r2, r3, 0x8f5, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff000000007110ae000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r12 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r12, &(0x7f0000000240)="800000800000210ee7decd7a0003", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r11, 0x1, 0xd8, 0x6, @broadcast}, 0x14) sendmsg$nl_route(r9, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_dellink={0x2c, 0x11, 0x8, 0x70bd25, 0x25dfdbfd, {0x7, 0x0, 0x0, r11, 0x2441}, [@IFLA_IFALIASn={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004044}, 0x440c4) r13 = openat$nci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$nci(r13, 0x0, 0x0) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r14, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b160000000000000000020000084000048018000180080001006f7366000c0002800800014000000004240001800a000100726564697200000014000280080001402400001408000240000000eb0900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) socket$inet6(0xa, 0x80002, 0x0) 12.1258207s ago: executing program 2 (id=3151): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(r0, &(0x7f0000000fc0)=[{{&(0x7f00000003c0)=@generic, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)=""/207}, {&(0x7f0000000540)=""/162}, {&(0x7f0000000600)=""/77}], 0x0, &(0x7f0000000680)=""/224}, 0x6}, {{&(0x7f0000000780)=@isdn, 0x0, &(0x7f0000000800)=[{&(0x7f0000001240)=""/4096}, {&(0x7f0000000240)=""/64}], 0x0, &(0x7f0000000ac0)=""/174}}, {{&(0x7f0000000b80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x0, &(0x7f0000000840)=[{&(0x7f0000000cc0)=""/224}, {&(0x7f0000000c00)=""/87}, {&(0x7f0000000dc0)=""/209}], 0x0, &(0x7f0000000ec0)=""/195}, 0x81}], 0x101f2043b8267e, 0x10120, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) socket$inet_tcp(0x2, 0x1, 0x0) ioctl(r1, 0x8b1b, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x34, 0x32, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3e}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x2004c8d8) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0xe22, 0x1, @mcast1, 0x20}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x3c}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22e8a65c15}, 0x4008840) r4 = socket$netlink(0x10, 0x3, 0x5) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x50, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x4}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x880}, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r5, 0x29, 0x4b, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x23, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) socket$kcm(0x29, 0x0, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) 10.47292683s ago: executing program 1 (id=3159): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) close(0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pselect6(0x0, 0x0, &(0x7f0000000140)={0x4, 0xfffffffffffffffa, 0x8, 0x2, 0x2, 0x7, 0x8, 0xd569}, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r1, 0xc0109428, &(0x7f0000000040)={0x3, 0x100000001}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x548, 0x0, 0xa, 0x148, 0x290, 0x10, 0x4b0, 0x2a8, 0x2a8, 0x4b0, 0x2a8, 0x3, 0x0, {[{{@ip={@private=0xa010102, @multicast1, 0x0, 0x0, 'bridge0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x220, 0x290, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0xe2, 0x9, 0x0, 0x0, 0xfffffffb, 0x7}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x400, 0x0, 0x44, 0x81, 0xff, 0xff, 0xfffffaf9, 0xe, 0x20, 0x8}, {0x9}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x2, 0x0, 0x7f, 0x0, 0x0, "f2f7b90ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc0d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', 'veth0_to_team\x00', {}, {}, 0x20}, 0x0, 0x1f8, 0x220, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve0\x00', {0x4, 0xff, 0x0, 0x0, 0x0, 0x7fff, 0x240, 0x0, 0x8}, {0xfffffffffffffffc}}}, @common=@inet=@l2tp={{0x30}, {0x3, 0x0, 0x2, 0x1, 0x5}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x3, 0x2}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x5a8) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x6b7e369c4a37b0ea) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x0) setsockopt$sock_int(r5, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r5, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xffffffa9}, {&(0x7f00000002c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}, {0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="96e6e14d06cd2cd1dc6969313336a9017d94"}, {&(0x7f0000000400)="499b7fee4035c5b8beb1f70453870f0783c185665f5661dc54c5a1a1ad65e127a695fb29eb758e857595e5277fdfcd8246da633a7d6ed7e05fe75f4f36c670e755ca5142914fdc83650da6c01c7a06ebf495fbe36b151a4c207d9347308484a5891ad7c14310bd"}, {&(0x7f0000000640)="7caba4f81ffec1c44c4691773da226d91a54e9721f1f4c8f4d4f19a73292612c8ad72d40ac83e55148f6700815e6d140cfab03adc719caee1f3feed087bc616c3bc19a510350d0befe495457b7d16c139c6e6850f1e32a661bd7cc91e333472aae3e3eb8815a38aa8fea91788c44336c8437a86f885f3546456df377a81b43b22f543cad111ff0d0"}], 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="00000000000000001701000004000000040000000000000000000000000000001701000003000000000000000000000000000000000000001701000002000000000000008db6ba8669d9e3af336c9db7d7b600000000000067ab9dfade50263fca68064513414d4a7812c38b4c70753e9ef9f941ff7c1ebcfd79c64a594b41dd41b329d3cc14c29fa008f5c24363ad52e2bafeba6e55ac24ad2a44cbeacd365353b6541f21789daab56174ca2941b64022d67061ec8e2b1fa1eed6e9d4"], 0x0, 0x40088c0}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r0, 0x0) 9.452945335s ago: executing program 1 (id=3162): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000380)='devices.allow\x00', 0x2, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00v\x00\r\v'], 0x20}, 0x1, 0x0, 0x0, 0x4080}, 0x20000000) listen(r2, 0x8) r4 = accept4(r2, 0x0, 0x0, 0x0) socket(0x1, 0x5, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0xc, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="900000", @ANYRES16=0x0, @ANYBLOB="000427bd7000fcdbdf25040000004800068004000200040005003c00040067636d286165732900000000000000000000000000000000000000000000000014000000001abb0ded3553a071e6de54b9c4ca64ba75f7973000068008000100070000000400020004000300190003005ac157e18ad1c460cd1a13b7715d756a042acea24700000004000180"], 0x90}, 0x1, 0x0, 0x0, 0x20000000}, 0x94) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r9], 0x1c}}, 0x840) write$nci(r6, &(0x7f0000000500)=ANY=[@ANYBLOB="7105026b020000"], 0x1b) write(r4, &(0x7f0000000000)="ca", 0x1) sendmmsg$alg(r4, &(0x7f0000000340)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000440)="95", 0x1}], 0x1, 0x0, 0x0, 0x400401c}], 0x1, 0x8000) close(r4) write$cgroup_devices(r1, &(0x7f0000000280)=ANY=[@ANYBLOB='b *:4\trmr'], 0xa) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) 8.214150216s ago: executing program 2 (id=3166): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=@newtaction={0x38e8, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xfffffffffffffffe}}}]}, {0x4}, {0xc}, {0xc}}}]}, {0xf4, 0x1, [@m_police={0xf0, 0x1c, 0x0, 0x0, {{0xb}, {0x4}, {0xc4, 0x6, "552e7af50a08f64d9d619f2d72e874d055d69f415e64944090280cd9723d06cefb78a64682e64aad57f704ff900ba662add72d267be80706a072c98f4f72154898857a821d071ed7320b1242db7fb8525ebed274a1e747349c82c028d04e1ba291b21b1ce64c47bd58fe56c610aea62721a704a483db2979f01b624ff2d377afd5ee554e40bfaee0dc8c1471f6969296810e99bcb0a1b100fdbdf366052a3268a5ea8bcc277325ce0777120410859edc2cbdf01b2b994b948cf90764dc6514b0"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}, {0x3434, 0x1, [@m_mpls={0x15c, 0xa, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x1}, @TCA_MPLS_TTL={0x5}, @TCA_MPLS_PROTO={0x6, 0x4, 0x201}, @TCA_MPLS_TTL={0x5, 0x7, 0x6}, @TCA_MPLS_TTL={0x5, 0x7, 0x4}, @TCA_MPLS_TTL={0x5, 0x7, 0x5}, @TCA_MPLS_BOS={0x5}]}, {0xf5, 0x6, "539b9a48bc415aee61532427309a92635de496b5c4b2207055025bd10b59263a7c8a6027ee16d25c8450f60d4417c4cd519ebd4bd2376cb0a770172912d56ca24e970676b0cbe694da6b0aa7e381d424eba0aa8d656ef4ab13747f1e97f939659379effd8c4e6a8fff7f56e13649eb61b43d9a627ef1e84a7db47d8783c0880b0ffd31e0204669050e0b1f56f46cf04c1e2b53ae2028b40e4d6554118b501bc6584dce190ad23f5e527ae358aa2b52c22a27cd7cc4a2ea9a65ebba11b9fad3e086c81604b286af4530378b6c1f9bf8d914aaf081f4e191351d439249f51622fd586620c0e55e307b3bc899122d1dc03254"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbmod={0x130, 0x1c, 0x0, 0x0, {{0xb}, {0x38, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @random="ee9fac115082"}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xf000}, @TCA_SKBMOD_SMAC={0xa, 0x4, @remote}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xb}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}]}, {0xd0, 0x6, "7513ef7eb76c585d6aba7cbc2c195a9f6dbeb29f06c41aca3ca1ffbe5550ffd6ea577e4d043dac0cf838071bd744c1ebec05000000fdd8db9e7dd123e6a93b49e6a143c42c2daae1300fb3800d0a9a3784685dfef3cda342dea16c6c125d00054023be5beaa422d12a5f14fd70ca0bcffc51b9800e8a13d03c4ef74f40a292a961ac6afb3faf952691d1a1f4b0504712a84d951405c018cce67a957b3719b4c4cb8388384bd7c225205961a5b92ed41fbb14d46cace85365c9e1c4e9e6cdee9d42a8ba1c9977cbf500000000"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_skbedit={0x80, 0x18, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xb, 0x5}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x1}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x2}]}, {0x3a, 0x6, "238265ccadf6021a275c58fd25d483982f09ee171e6f3c463594bcc2a52c3c3a1df61d16ecf057b96dd601994d30c8152a31d8f02f12"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_gact={0x1b0, 0x1d, 0x0, 0x0, {{0x9}, {0xac, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0x22f}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x5cf, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0xdfb, 0x10000000}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x136, 0x3}}, @TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x9, 0x3, 0x80000001, 0xf}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0xccc, 0x8}}, @TCA_GACT_PARMS={0x18, 0x2, {0x9, 0xe31, 0x3, 0x1000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x6, 0x10000007, 0x78662e10, 0x9}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x40b, 0x7}}, @TCA_GACT_PARMS={0x18, 0x2, {0x2cde, 0xa28, 0x0, 0x2}}]}, {0xda, 0x6, "c06cbe26574caa21ebf7cb4c988f3315f2569dcf02097a717e6ada561f2ae168b0e90f118db02e3db57eb360b9aca04fbe1a2858ede95c6037cbd90a9c02219d1c86ff03af992a74fae3be1803175d34ca504b2cda6a20b9f3b93a5f8931e53999f5ab64ada2cd3b9b1a1524a96139a723382fb7d079a2997f8fa27977d7ad7952121d4e4be0b9a15297baaa0aab80655ec6643685c3b106ea1cf1c34254f087f92e5b89077b910a40259ff98d975937de86e3e2ed09c07b7ecb07bb9eabc93ab6c07ab18381cf4efe103eab2e7bee2cbab42f438eeb"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_tunnel_key={0x160, 0x10, 0x0, 0x0, {{0xf}, {0x4c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e21}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xbe3f, 0x7, 0x5, 0x1, 0x9}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e21}]}, {0xe8, 0x6, "34f9f0a27e75707a8ce2aeb3a9185e644747ce1eabb95fc1d21cc89c78c05b66efeef008061e821b7ee76468c8180ff08db017a08882c9eb931e7ce5f6aca9c389e3de5c10bd370227d9624bfe3caddc0a00440af78c82ea1c443eae8bb5449ac9160c744e2fa3a4c8b29f67ec57c56ebd69c9f8eae84e633910d47dd40f9361ad47af467531febfbbf97c1ccd460b4271e467735c6dee0360f2f3fbe3de9d9c55e8d9c4d03175fcc952bd9f85efdfa719842e330b28700d210bcf687390541ac07a93cae3059a01aa01a3c6b68701a980f2e85cac7507da5a4d25ae0a260a9a9396021f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_gact={0xe0, 0x1c, 0x0, 0x0, {{0x9}, {0x10, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x6b5, 0x1}}]}, {0xa8, 0x6, "a46da468c0cb226a3c018dc0b5016c50c57cf1ab2585ea88b0a57ce9a545d33884c79c7413d49436f229ad77d8a7ce95fdb97f6980bd6823b539e912395812d664302299f791dd4cebebcf1fbdd068083cf96b7261c0fbdd8b22f2cc20f04d02ffde69f07fdc7f241ac0e152520abc485b0158379fc1df8a59204e84eb592fa6950e78be5ec8cf33a7d9a08273f9a022984f35eeaad43a48d8cb4919f6112468be8bd176"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_bpf={0x88, 0x14, 0x0, 0x0, {{0x8}, {0x40, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0xa}, @TCA_ACT_BPF_OPS={0x34, 0x4, [{0x2, 0x5, 0x0, 0x5000}, {0x4, 0x2, 0x1, 0x2}, {0x7c, 0x4, 0xbf, 0x3}, {0x2, 0x81, 0xd, 0x6}, {0x6, 0x9, 0x8, 0x7}, {0x3, 0xfc, 0x1, 0x2}]}]}, {0x24, 0x6, "dc81ee3b4c531a5971199e75e47a31e15cef27278104588665be1d002f14bc8d"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_pedit={0x2c60, 0x10, 0x0, 0x0, {{0xa}, {0x2c10, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe98, 0x4, {{{0x3, 0x3, 0x0, 0x1, 0x7}, 0x1, 0x81, [{0x6, 0x0, 0x127, 0x0, 0x6, 0x5}, {0x58, 0x0, 0x0, 0x80, 0x4, 0x507}, {0xf, 0x3, 0x0, 0xb, 0x3, 0x200}, {0x0, 0x80, 0x3, 0x3, 0x4, 0x3}, {0x10, 0x8, 0x2, 0x10000, 0x4, 0x81}]}, [{0x6, 0x4d, 0x9, 0x0, 0x6, 0x80}, {0x0, 0xfffffff8, 0xa, 0x9, 0x4, 0x9}, {0x7, 0xffff5766, 0x8, 0x8, 0x40, 0x1}, {0x0, 0x9, 0x3, 0xffffff81, 0x4, 0x451a}, {0x894b, 0x1, 0x6, 0x8, 0x77d7502, 0x4}, {0x4, 0xb232, 0xb, 0x53, 0xfffffff8, 0x3}, {0x3, 0x8, 0xce57, 0x7ff, 0xfffffffe, 0x66}, {0x7, 0xb0d, 0x9, 0xf, 0xde, 0xfffffff8}, {0x8d, 0x899, 0x1ff, 0x8e, 0x7, 0x9}, {0x0, 0x4, 0x3, 0xe, 0xa, 0x3}, {0x7, 0x0, 0x5c, 0x6, 0x1, 0x1}, {0xa9, 0xb, 0x3, 0x3, 0x0, 0x7}, {0xb, 0x80000000, 0xf8e, 0x0, 0x2, 0xfffffff7}, {0x1, 0x5, 0x0, 0x471d, 0xb, 0x1000}, {0x0, 0x2, 0x8, 0x3, 0x6, 0x80000001}, {0x0, 0x7f, 0x8, 0xa4, 0x2, 0x8}, {0x80000000, 0xff, 0x51, 0x3, 0x5, 0x8a}, {0x4, 0x7ff, 0x0, 0x95, 0x5, 0x72}, {0x9, 0x30e, 0x5, 0x1, 0x8, 0x5}, {0x8001, 0x8, 0xf, 0x4, 0x7, 0x1}, {0xfffffffa, 0x5, 0x9, 0x0, 0xa, 0x3}, {0x3, 0x0, 0x1, 0x9, 0x7, 0x3}, {0xd, 0x3, 0x5, 0x8, 0x97dc, 0x6ad}, {0x400, 0x4, 0x1, 0x3, 0x3, 0xfffffffd}, {0x6, 0x0, 0x3, 0x8, 0x9, 0x6}, {0x78d, 0x5, 0x6, 0xfffffffc, 0x130c, 0x9ad6}, {0x0, 0x65f39c20, 0x8, 0x800, 0x3, 0x1}, {0x80, 0x3, 0x9, 0xfffffff9, 0x40, 0x8}, {0x8, 0x7fff, 0xfffffff7, 0x80000000, 0xb, 0x4bc2}, {0x3, 0x9, 0x3ff, 0x9, 0x4, 0x2}, {0x7fff, 0x148, 0x10001, 0x3, 0x3, 0x4d}, {0x3, 0x1, 0x7fffffff, 0x7, 0x3, 0xc}, {0x5, 0x0, 0x81, 0xfffffe01, 0x5, 0x200}, {0xa18, 0x5, 0x5, 0x6b3, 0x7, 0x9}, {0x6, 0x8, 0x100, 0xf56, 0x6, 0x401}, {0x2, 0xfffffff9, 0xbd, 0x7, 0xfffffff9, 0x8}, {0x800, 0x5, 0x7, 0x0, 0x6, 0xa71}, {0xb, 0x5, 0x8, 0x7, 0x0, 0x5}, {0x0, 0x80000001, 0x7, 0xa, 0x400, 0x6}, {0x4, 0xc7, 0x6, 0x100, 0x9d2f}, {0x7fffffff, 0x100, 0x8, 0x0, 0x6, 0xc0000000}, {0x4000000, 0x80, 0xfffffff4, 0x4, 0xf340, 0x7}, {0x40, 0x6, 0x401, 0x9, 0x6, 0x3}, {0x100, 0x55c, 0xfff, 0x4, 0x6, 0xffffffc0}, {0x800, 0x0, 0x7, 0x6, 0x4, 0x10000}, {0x8, 0x2, 0x0, 0xffffffe1, 0x8, 0x8e}, {0x3, 0xfffffff7, 0x7fffffff, 0x4, 0xe42, 0x3}, {0x7, 0x0, 0xa80d, 0x2, 0x80000001, 0x5}, {0xffffffff, 0x4, 0x9, 0x1, 0x800, 0x200}, {0x5, 0x2, 0x7, 0x3a, 0x8, 0x6}, {0x81, 0x4, 0x6ee, 0x0, 0x84, 0xb}, {0xc0, 0xffff, 0x8, 0xb9d0, 0x4, 0x8f8}, {0x6, 0x101, 0x9, 0x6, 0xffffffff, 0x7fffffff}, {0x7, 0x101, 0x3, 0x9, 0xfffff773, 0x2}, {0xfffffc00, 0xabd6, 0xe9d, 0x8, 0x7f, 0xf6}, {0x4, 0x9, 0x80d, 0x31, 0x2, 0x6}, {0x3, 0x8, 0xd, 0x5c42, 0x8, 0x8ccd}, {0x101, 0x7, 0x8, 0xfffffffa, 0x3a, 0x8}, {0x4, 0x38, 0x5, 0x6, 0xfffffffb, 0x3}, {0x80, 0xfffffffb, 0x2, 0xffff, 0x3f7, 0xfffffffa}, {0x3, 0x81, 0x7ff, 0xfff, 0x7, 0x33}, {0x4, 0x40, 0x6, 0x9, 0xe, 0x4}, {0x1, 0x4, 0x4, 0x4, 0x34e5, 0x584}, {0x7fffffff, 0xc0000000, 0x8000, 0x7, 0x4, 0x5}, {0x2575, 0x100, 0x1, 0x7, 0x7, 0x30}, {0x7, 0x8, 0x5, 0xb6f6, 0xffffffff, 0x458f7447}, {0x0, 0x5, 0xfffffff9, 0x7, 0x4, 0x7}, {0x80000000, 0x8, 0xff, 0x101, 0x10, 0x7}, {0x575f3b3a, 0x2, 0x0, 0xfff, 0x8, 0xf3}, {0x7, 0x10001, 0x7, 0xcd, 0x0, 0x7fff}, {0x3, 0x69a08f7a, 0x0, 0x0, 0x7, 0x8001}, {0x0, 0x7, 0x4, 0xc, 0x1, 0x800}, {0x80010000, 0x51e00000, 0x3, 0x2, 0xa, 0x3}, {0x1000, 0x9, 0x9, 0x8, 0x80, 0x8}, {0x9, 0x8, 0x7, 0x9, 0x9, 0x9}, {0x0, 0xffff, 0x3, 0x958f, 0x5a87, 0x5}, {0x80, 0x25c, 0xad7, 0x0, 0x5, 0x3}, {0x8, 0x2, 0x7, 0x8001, 0x10001, 0xf761}, {0x6, 0x101, 0xf, 0x4, 0xd4ed, 0x3}, {0x9, 0x1, 0x7, 0x4, 0x4, 0x34218f82}, {0xfffffffa, 0x200, 0x5, 0x4, 0x2, 0x401}, {0xfffff801, 0x6, 0x10000, 0x9, 0x5, 0xe9e}, {0x5, 0x7, 0xf8000000, 0x7, 0x9, 0x7}, {0x5, 0xb, 0x7, 0x6, 0x1, 0x7}, {0xfffffbff, 0x7, 0x81, 0x7, 0x3ff, 0x9}, {0x80000000, 0xa, 0xe, 0x8, 0x3, 0x1}, {0x4, 0x9, 0x2, 0x0, 0x1, 0xfc}, {0xff, 0x7, 0x4, 0x7, 0x0, 0x2}, {0x4, 0x9, 0x3, 0x0, 0x7, 0x101}, {0x2, 0x6, 0x5, 0x200, 0x6, 0x4}, {0xd7, 0x5c997c47, 0x80000000, 0x1, 0x3, 0x1}, {0x5, 0x5, 0x0, 0x7, 0x837e, 0x88cf}, {0x6, 0xf, 0xec99, 0x5, 0x100, 0x3}, {0x3, 0xaf, 0x9, 0x4, 0x9, 0xfffffffc}, {0xe00, 0xffffffff, 0x2, 0x44f1, 0x3, 0x1000}, {0x2, 0x3e98, 0x5, 0x3ff, 0xc37, 0x3ed}, {0xff, 0x8, 0x5, 0x80, 0x0, 0x5}, {0xfffffff9, 0x2, 0x9b09, 0x4, 0x80000000, 0x1}, {0xdc2b, 0x4, 0x0, 0x2, 0x2, 0x7}, {0x0, 0xe, 0x54, 0x7, 0x0, 0x3}, {0xb, 0x5bb2, 0x63e2, 0x2, 0x1, 0x6}, {0xfffffffb, 0xc9d0, 0x0, 0xfffffff7, 0x0, 0x7}, {0x10, 0x9, 0x4, 0x9, 0x7, 0x10001}, {0xc9, 0xd, 0x80000000, 0x430, 0xd, 0x80000001}, {0x8, 0x0, 0x9de, 0x6, 0x5, 0x7}, {0xff, 0xff, 0x1, 0x7, 0x1, 0x1}, {0x80, 0x9, 0xb8, 0x7, 0x7, 0x4}, {0x6, 0x81, 0x9, 0xfffffff3, 0x6, 0xfffffff6}, {0x1, 0x6, 0x3c12, 0x8000, 0x6}, {0x7fff, 0x10, 0x2, 0x63, 0x4, 0xd5}, {0x6, 0x4, 0x8001, 0x80000001, 0x1, 0x2}, {0x4, 0x401, 0x1ff, 0x0, 0x80000001, 0x4b75}, {0xfffffff8, 0x5, 0xfffffffe, 0x330, 0xff2, 0x6}, {0x2, 0x1, 0x3, 0x7, 0x0, 0x6}, {0x18, 0x100, 0xfffffff8}, {0x2, 0x8c6f, 0x216, 0x3, 0x400}, {0x0, 0x5, 0x963c, 0xfffffffb, 0xfffffff9}, {0x1ff, 0x5, 0x5, 0x3a, 0x2, 0x4}, {0x1000, 0x76, 0x9, 0x8, 0x3, 0x9}, {0x5, 0xe9, 0x8, 0x7, 0x3344, 0x5}, {0x10, 0x6, 0x8, 0x4, 0x4, 0x6}, {0x80000001, 0x3ff, 0x4, 0x80000001, 0x80000001, 0x3}, {0x7, 0x5, 0x7ff, 0x100, 0x1, 0x3ff}, {0x6, 0xc000000, 0x60000, 0x6, 0x9, 0x7}, {0xd, 0x3, 0xd49, 0x6, 0x7, 0x400}, {0x0, 0x2, 0x7, 0x6, 0x3, 0x100}, {0x1, 0x200, 0xa665, 0x52b, 0x7, 0x4}, {0x7fffffff, 0x9, 0x80000001, 0x2, 0x100, 0x8}], [{0x3, 0x1}, {0x1, 0x1}, {0x1}, {0x5, 0x1}, {}, {0x2}, {0x5, 0x1}, {}, {0x5, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {}, {}, {0x0, 0x1}, {0x2}, {0x2}, {0x87c713a26debe3c}, {0x4, 0x1}, {0x5}, {0x2}, {0x1}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0xb}, {0x5, 0x1}, {0x2, 0x1}, {0x4}, {0x4, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x1}, {0x3, 0x1}, {0x4}, {0x5}, {}, {0x3, 0x1}, {0x2}, {}, {0x4}, {0x1}, {0x2}, {0x4, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x1}, {0x3}, {0x1}, {0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x5}, {0x5}, {0x5}, {}, {0x1}, {0x2}, {0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {}, {0x1}, {0x3}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x3}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x5, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x2}, {}, {}, {0x3}, {0x1}, {0x4}, {0x1}, {}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {0x2}, {}, {0x2}, {}, {0x2, 0x1}, {}, {0x1, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x44, 0x5, 0x0, 0x1, [{0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}, @TCA_PEDIT_PARMS={0xec8, 0x2, {{{0x7ff, 0x7fff, 0x5, 0x5, 0xffff}, 0x0, 0x40, [{0xd, 0x4, 0xb1, 0xff, 0x80000000, 0xf}, {0x3, 0x3, 0x8, 0xb5, 0x2, 0xfb4}, {0x0, 0x80, 0x2, 0xfffffff9, 0x3, 0x6}, {0x8, 0x2, 0x3, 0x9, 0x9, 0x200}, {0x5, 0xf, 0x6, 0x80000000, 0x1, 0x800}, {0x6, 0x6, 0x9, 0x2, 0x3, 0x4}, {0xb6, 0x6, 0x7ff, 0x1, 0x1, 0x424adb2f}]}, [{0x1, 0x80000001, 0x8, 0x7, 0x7, 0x9}, {0x7, 0x1, 0x4, 0x8, 0x1ba, 0x208c}, {0x400, 0xffffffad, 0x10, 0x0, 0x4c14afd, 0xff}, {0x669, 0x3, 0x7, 0x2e8, 0x10000, 0x5}, {0x5, 0x9, 0x7fff, 0x3ff, 0xd, 0xd49}, {0x6, 0xef6, 0x1, 0x3, 0x80, 0x5}, {0x0, 0x7cf86023, 0x6, 0x3, 0x2, 0x3}, {0x8000, 0xe98, 0x6, 0x7fff, 0x7}, {0xd, 0x6, 0x3, 0x585, 0x1, 0x7}, {0x1, 0x2, 0x2e, 0x2, 0x1, 0x175}, {0x1, 0xfffffffd, 0x756, 0xfff, 0x6, 0x2}, {0xb, 0x3, 0x1, 0x1, 0x8, 0x2}, {0xffffffff, 0x5, 0x561b, 0x2, 0xa, 0x5}, {0x8, 0x7, 0x2, 0x2, 0x3ff, 0x2}, {0x9, 0x7fff, 0x3, 0xc818, 0x7, 0xbc5}, {0x2, 0x1, 0xfffffff7, 0x1, 0x2, 0x380}, {0x6, 0x4, 0x1, 0xc, 0x2, 0x80000001}, {0x5, 0x6, 0x80000000, 0x7, 0x8}, {0x2481, 0x9, 0x40, 0x0, 0x7, 0x1}, {0x8, 0x9, 0xfffffff6, 0x7, 0x9c, 0xa}, {0xc, 0x9, 0xd141, 0xd0, 0x1, 0x10}, {0xf63, 0x6, 0xffff, 0x6, 0x3, 0x8}, {0x80000001, 0x0, 0x7c, 0x2, 0x9, 0x7}, {0x0, 0x17e, 0x5, 0xe1, 0x6, 0x3}, {0xce, 0x54b5, 0x4b2a, 0x6a, 0x3, 0x4}, {0xc968, 0x1, 0x6, 0x8, 0xa087, 0x6}, {0x3, 0x5d5, 0x6, 0x400, 0x1ff, 0x91}, {0x8, 0x4, 0x10000, 0x8, 0x5, 0x2}, {0x8001, 0x7, 0x2, 0x99c8, 0x4, 0x6}, {0x8, 0x7fffffff, 0x4e, 0x0, 0xfff, 0xb7}, {0x1, 0x4, 0x7, 0x0, 0x6}, {0x0, 0x5, 0x4, 0x2, 0xebf1, 0x4}, {0x8, 0x2, 0x1, 0x1ff, 0x4, 0x2}, {0x6, 0x3, 0x4520a938, 0x3, 0x3, 0x9}, {0xf81, 0x9, 0x990, 0x7, 0x92d, 0xf}, {0x6, 0x1, 0x1, 0x2, 0x40, 0x1}, {0x7, 0x8, 0x4, 0x69, 0x2, 0x3}, {0x5, 0x5, 0x68b8, 0xeb1, 0x2, 0x8000}, {0x1c, 0x5, 0x8, 0x7, 0x9, 0x221}, {0x3, 0xfffffe01, 0x80000001, 0x2, 0x4, 0x7}, {0xe08, 0x1, 0x4, 0xfffffff8, 0x1, 0xe44}, {0xfff, 0x7, 0x2, 0x8, 0x2, 0x3}, {0x1, 0xbf, 0x2, 0xfffffbff, 0x4, 0x8}, {0x6, 0x6, 0xb9720000, 0x7, 0x4, 0x1}, {0x10000, 0x6, 0x0, 0x8, 0x200, 0x2}, {0x4, 0xfff, 0x0, 0x358, 0x8, 0x165}, {0x9, 0xb, 0x3, 0x0, 0xbd1, 0x8}, {0x7fff, 0x198f, 0x10001, 0x80000000, 0xffff6792, 0x6}, {0x602, 0xfffffff7, 0x4, 0x9, 0x3}, {0xe069, 0x3, 0x7, 0x4, 0x1e06, 0x3}, {0x80000001, 0x1, 0x4, 0x10000000, 0xfd, 0x3}, {0x10, 0xff, 0x9, 0x1000000, 0x81, 0x26}, {0x3, 0x10000, 0x11bd, 0xfffffff7, 0x6, 0x6}, {0x29, 0x40, 0x5, 0x30000000, 0x4, 0xb19}, {0x6, 0x8, 0x4, 0xe607, 0x5, 0x8}, {0x8, 0x6, 0x5, 0x8, 0x7, 0xfffffffe}, {0x3, 0x6, 0x0, 0x2, 0x7, 0x6}, {0x52d4, 0x7, 0x40, 0x7, 0x5, 0xf3}, {0x2, 0x9, 0x0, 0x9, 0x80000000, 0x5f}, {0x5, 0x100, 0x2, 0x1, 0x2, 0xc432}, {0x4, 0x4, 0x100, 0xfffffffc, 0x2, 0x8}, {0x0, 0x5, 0xf, 0x5, 0x5, 0x8}, {0x13, 0x4, 0x8, 0x5, 0xe62a}, {0x2, 0xb95b, 0x6, 0xf, 0x2, 0xffff9111}, {0x0, 0x7, 0x3, 0x5b, 0x100, 0xb}, {0xaf, 0x4, 0x3, 0xfffffff7, 0x6, 0x5}, {0x1, 0x5, 0x3, 0x7, 0x2e, 0x400}, {0x0, 0x9, 0xfffffffb, 0x0, 0x8001, 0x9}, {0x6, 0x1, 0xc50e, 0x9, 0x1, 0x6}, {0x7, 0x6d3, 0x1, 0x40, 0x6, 0x2}, {0x4, 0x5, 0x1, 0x2, 0x5, 0x7}, {0x8, 0x8, 0xa, 0x100, 0x8, 0x8}, {0x401, 0x5, 0x2, 0xf539, 0x5, 0x1}, {0x7ff, 0x0, 0x362d, 0x5, 0xffffff00, 0x5}, {0x1000, 0x4, 0x754, 0x9, 0xe, 0x7f}, {0x193a, 0x9, 0xff, 0x1, 0x81, 0x5}, {0x0, 0x4dd, 0xe0, 0x0, 0x80, 0x800}, {0xc, 0xd, 0xe, 0x1, 0x2, 0xffc4}, {0x9, 0x7, 0x3, 0x3, 0x893f, 0x6}, {0x400, 0x401, 0x7, 0xd, 0x5, 0x8}, {0x6, 0x81, 0x9c5, 0x40, 0xf, 0x2}, {0x3, 0xfffffcc3, 0x58b, 0x10001, 0x5}, {0x8, 0x7fffffff, 0x0, 0x1000, 0xe07, 0x2}, {0xd05, 0x8, 0xc, 0x7, 0x2, 0x80000000}, {0x3, 0x1c54000, 0x7f, 0x0, 0x2, 0x9}, {0x8, 0x6, 0x7, 0x3a, 0x9, 0x6}, {0x2, 0x5, 0xa, 0x496, 0x10, 0x7}, {0x805c, 0x0, 0x7fffffff, 0x0, 0x6, 0x1}, {0x100, 0x9, 0x7, 0x6, 0x1}, {0x1, 0x22ed, 0x8, 0x2, 0x33, 0x1}, {0x2, 0x4f64e755, 0xffffffff, 0x4, 0x3, 0x4}, {0x3, 0x2, 0x8a400000, 0xff, 0xffff, 0x1}, {0x0, 0x1, 0x5, 0x1, 0x1, 0x4}, {0x3, 0x5, 0x5, 0x7, 0x4, 0x400}, {0x5, 0x0, 0x9, 0x9, 0xe8ab, 0x1}, {0x5, 0x4, 0x7, 0xffffffff, 0x4, 0x6}, {0x200, 0x0, 0x7fffffff, 0xc6, 0x5, 0xfff}, {0x1, 0x8001, 0x2, 0x7f, 0x1a7, 0x484}, {0x1000, 0x6, 0x8, 0x0, 0x7e9, 0x7}, {0x9, 0x1000, 0x3, 0x8, 0x6, 0xff}, {0x8, 0x1, 0x8000, 0x3, 0xffff, 0x4}, {0x10001, 0x8, 0x3, 0x8, 0xffff, 0x53a}, {0x8, 0x5, 0x2, 0x3, 0xd691, 0xfffffff7}, {0x6, 0x9, 0xffff, 0x6, 0x2, 0x8}, {0x4, 0x46, 0x8, 0x80, 0x8, 0x800000}, {0x5, 0x8, 0xb, 0xb85, 0x25227490, 0x298}, {0xd6, 0x9, 0x1, 0x4, 0x180, 0x95b4}, {0x0, 0x1, 0xe, 0x9, 0x9, 0x2}, {0xfffffffd, 0xcb7f, 0x6, 0x8, 0x100, 0x2}, {0x8, 0x8, 0x400, 0x4, 0x2, 0xc15b838}, {0x3, 0x3c19, 0x9, 0x80, 0xa, 0xcc49}, {0xe7c, 0x3, 0x9, 0x5, 0x9, 0x1}, {0x2, 0xfaaa, 0x7fff, 0x80000001, 0x6, 0x47ad2dbb}, {0x5, 0x2, 0x4, 0x2, 0x800, 0xd6}, {0x8, 0x9, 0x9, 0x200, 0xfffffff1, 0x9}, {0x2, 0xffff, 0x3, 0x9, 0xa, 0x9}, {0x4, 0xf5e, 0x9, 0x3, 0x4, 0x80}, {0x30, 0x8, 0x0, 0xfffffffe, 0x0, 0x4}, {0x2, 0x800, 0x2, 0x8000, 0x1, 0x7}, {0xffffffff, 0x1, 0x5, 0x6, 0x7f, 0x8}, {0x340000, 0x0, 0x99, 0x9, 0x3, 0x2}, {0x6, 0x5, 0x0, 0x6aa3, 0x4, 0x4}, {0x5, 0x1, 0x101, 0x4, 0x3, 0x4}, {0x1, 0x8, 0x10, 0x1, 0x6, 0x4}, {0x7, 0x7, 0x1ff, 0x7, 0x0, 0x2}, {0x10, 0x91e9, 0x8, 0xfffffff8, 0x3, 0xe}, {0x7, 0x9, 0x1, 0x3, 0x6, 0x4000}, {0x80, 0xffffffff, 0x6, 0x5, 0x8, 0x5}], [{0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x6}, {0x2}, {0x3, 0x1}, {0x2}, {}, {0x4}, {0x3, 0x1}, {0x3}, {0x4, 0x1}, {0x1}, {0x5}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {}, {0x4}, {0x5}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x2, 0x1}, {0x7, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x3}, {}, {0x1, 0x1}, {}, {0x2}, {0x2, 0x1}, {}, {0x1}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2}, {0x5, 0x1}, {0x1, 0x1}, {0x3}, {0x2}, {0x1, 0x1}, {0x4}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x5, 0x1}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x4}, {0x4, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x1}, {0x1}, {0x1}, {}, {0x5}, {0x1, 0x1}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x1, 0x1}, {0x7}, {0x5, 0xc395f48933cb92a3}, {0x4}, {0x1, 0x1}, {0x2}, {0x1, 0x1}, {0x1, 0x1}, {}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x1}, {0x2, 0xe3ed3ea2e7f4a7af}, {0xff46ca0b7c832ec6}, {0x2}, {0x1, 0x1}, {0x1}, {0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x5}]}}, @TCA_PEDIT_PARMS_EX={0xe68, 0x4, {{{0xb71, 0x7, 0xffffffffffffffff, 0x5, 0x9}, 0x9, 0x2, [{0xffffff81, 0x91, 0x5, 0x4, 0x7439f0ac}, {0x5, 0xfffffffc, 0xfff, 0x9, 0x3, 0x9}, {0x7fff, 0x2, 0xcc7e, 0xbf31, 0xa872, 0x4}]}, [{0x3, 0xff, 0x52, 0x8, 0xeaf, 0x1}, {0x5, 0x9, 0x4, 0x6, 0x2, 0x7}, {0x5, 0x3ff, 0x7fff, 0x2, 0xffffffff, 0xfffffffb}, {0x3, 0x9861, 0x81, 0x14000000, 0x7, 0x80000001}, {0x6, 0x7, 0x1, 0xf, 0x7fff, 0xfff}, {0xfffffffc, 0x6, 0x3, 0x7ff, 0x59e}, {0x81, 0x3, 0x6, 0x8, 0x4, 0x4}, {0xfcb, 0x5, 0x1, 0xacf8, 0x0, 0x3}, {0x7, 0x2954, 0x7fff, 0x2, 0x5, 0x7}, {0x9, 0x8001, 0x1, 0x8000, 0x8, 0xfffffffc}, {0x5, 0x8, 0x18, 0x7, 0x200, 0x7}, {0x1ec8, 0x5, 0x2f16, 0x9, 0x7f, 0xd}, {0x7, 0x74, 0xb4bf, 0x101, 0x9, 0x5}, {0xa, 0x300, 0x4, 0x6, 0xb7, 0x4}, {0x8, 0x7, 0x7, 0xb4, 0x2, 0xa62}, {0xd, 0x4c0d7aaf, 0xffffffcf, 0x7, 0xffffffc0, 0x7fff}, {0x9, 0x4, 0x1, 0x5, 0x8, 0x30d}, {0x5, 0x10, 0x10, 0x1, 0x8, 0xfffffff7}, {0x2, 0x0, 0x5, 0x80000000, 0x6, 0x3}, {0xf7e, 0x0, 0x8, 0x9, 0x4, 0x7fffffff}, {0x7, 0x800, 0x1000, 0x10, 0xcc, 0xffffff40}, {0x0, 0x80000000, 0x960, 0x3, 0x2, 0x3}, {0x7fff, 0x200, 0x1d800000, 0x8, 0x4, 0x2c4}, {0x9, 0xd, 0x6, 0x6, 0x112d, 0x5}, {0x4, 0x80000, 0x7fffffff, 0x5, 0xb, 0x7f}, {0xd4, 0x775, 0x8, 0x8, 0x8, 0x3}, {0x2, 0x1c0000, 0x80000000, 0x31d, 0x4, 0xd1a}, {0x5, 0x9, 0x8001, 0x4, 0x0, 0x8}, {0x0, 0x4, 0x4, 0xba, 0xdc, 0xfff}, {0x6, 0x7f, 0x3, 0x6, 0x5e6, 0x1}, {0xb, 0xc, 0x9, 0x4, 0x7, 0xe2}, {0x3, 0x8, 0x80000001, 0x400, 0x7, 0x210}, {0x2, 0x1, 0x80, 0x10000, 0x6, 0x98}, {0x80000000, 0x3, 0x1, 0x10, 0xf, 0x5}, {0x2, 0x9, 0x6, 0x3, 0x3, 0x1}, {0x183, 0xff, 0x80000001, 0x9, 0xffffab92, 0xc}, {0x1000, 0x6, 0x400, 0x3, 0x1, 0x1a1d}, {0x6, 0xea, 0x0, 0xa, 0x4, 0x7ff}, {0x5, 0xb, 0x0, 0x8, 0x100, 0x7}, {0xfffffff8, 0x6, 0x67, 0x2, 0x4, 0xffff}, {0x0, 0x2, 0x0, 0x5, 0x8, 0x1}, {0xffff, 0xffff8000, 0x5, 0x9, 0x1ff, 0x2}, {0x3, 0x8, 0x200, 0x7, 0x3, 0x6}, {0x2, 0x2, 0xc, 0x40, 0x3, 0x7}, {0x5, 0x1, 0x7, 0x401, 0xa44, 0x8}, {0x1, 0x5, 0x1, 0x9, 0x7fffffff, 0x7}, {0xd, 0x81, 0x7, 0x9, 0xbbdc, 0x6}, {0xce, 0x800, 0xdff, 0x7, 0x8}, {0x93f, 0xfffffffa, 0x2, 0x7, 0x34e, 0x62}, {0x3, 0x7, 0x0, 0x3, 0x2, 0x8}, {0x9, 0x4, 0x9140, 0x80000000, 0x62, 0xfffff801}, {0xfffffffc, 0x3, 0x0, 0x9, 0x9, 0x8}, {0x1, 0x2d, 0xdb, 0x2a0, 0x3, 0x5}, {0x3, 0x2, 0x7, 0x0, 0x9, 0x3}, {0xf5, 0x200, 0x1000, 0xfc7b, 0x101, 0x134e}, {0x0, 0x9, 0xf9f, 0x0, 0x8, 0x1}, {0x2, 0x0, 0x1, 0x0, 0x0, 0xffffffff}, {0x2d00, 0x7, 0xba, 0x0, 0xffff, 0x9}, {0x3, 0xfff, 0x9, 0x91ed, 0x6, 0x6}, {0x8, 0xfffffff4, 0x9, 0x4, 0xd5, 0x5402d1b1}, {0x80000001, 0x4, 0x3, 0x480, 0x7}, {0x1, 0x7, 0xcf26, 0x4, 0x8, 0x296}, {0x8, 0x6, 0x4, 0x4, 0x10001, 0xfffffffe}, {0x7fff, 0x3, 0xffffffc9, 0x1, 0x2, 0x4}, {0xc, 0x7f, 0x3ebb44f5, 0x51106d0d, 0xe794, 0x9}, {0x0, 0x8, 0x10001, 0x0, 0x0, 0x81}, {0x10, 0x6, 0xccb8, 0x8, 0x1, 0x3}, {0x40, 0x8, 0x389, 0x3, 0x9, 0x7}, {0x10001, 0x1, 0x9553, 0x5, 0x0, 0x6}, {0x0, 0x9, 0xff, 0x7, 0x2a0, 0x1}, {0x1, 0x29c28e41, 0x100, 0x8, 0xfffffff5, 0x8}, {0x3, 0x800, 0x287, 0x2, 0x8, 0x4c}, {0x7, 0x101, 0x6, 0x68293550, 0xa35, 0x9}, {0x80, 0x6, 0x8, 0x0, 0x3, 0x6a}, {0x8, 0xfffffffa, 0x5, 0x4, 0xffffffff, 0x39237b8a}, {0x3ff, 0x10000, 0x2, 0x2, 0x3bd, 0x7}, {0x5, 0xfff, 0x3, 0x80000000, 0x1000, 0x1ff}, {0x8db, 0x9, 0x0, 0x1, 0x1}, {0x6, 0xffff, 0xc0, 0x7, 0x7, 0x4}, {0x6, 0xf4e, 0x9, 0x3, 0x5, 0x4}, {0x8001, 0xff, 0x3, 0x81, 0xf, 0x3}, {0xfffffff8, 0xfff, 0x7, 0x4, 0x9, 0x400}, {0x7, 0x10, 0x7e, 0x8001, 0x9}, {0x3, 0x1, 0xdd, 0x0, 0x8, 0x7}, {0x2, 0x3, 0x38, 0x559, 0x1000, 0xfffffffd}, {0x80, 0x7, 0xb17, 0x100, 0x3, 0x6}, {0x1000, 0x9, 0x9, 0x2, 0x8, 0x40000000}, {0x8, 0x7, 0xb5c, 0x4, 0x5}, {0x3, 0x5, 0x8, 0xba, 0xa69, 0x9}, {0x9, 0x6, 0x1, 0xd, 0x3, 0x2}, {0xcce, 0xe, 0x68de600f, 0x6, 0x7, 0xf545}, {0xb, 0xd96, 0x3, 0x9, 0x1, 0x7}, {0x400, 0x7, 0x9, 0x7ff, 0x2, 0xf}, {0x9, 0x3e69, 0x9, 0x8, 0x3, 0x8001}, {0x5, 0x2, 0x6, 0x8, 0x53, 0x2}, {0x3, 0x5, 0x3, 0x5, 0xf, 0xe0}, {0x7fff, 0x8, 0x0, 0x0, 0x80000000, 0x6}, {0x2, 0x3, 0x6, 0x9, 0x2, 0x4}, {0x2, 0x7, 0x80, 0xe88, 0x3, 0x1}, {0x4, 0x1, 0xe91, 0xf, 0x1, 0x6}, {0x10000, 0xffffffc0, 0x4, 0x8, 0x8, 0x81}, {0x8, 0x440000, 0x0, 0x1, 0x5, 0xfff}, {0xfffffffd, 0xe, 0x7fff, 0x2, 0x4, 0x6}, {0x0, 0x0, 0x10, 0x7, 0x5, 0x400}, {0x0, 0x9, 0xa, 0x7, 0xfffffff8, 0x10001}, {0x4100, 0x10000, 0xbdb9, 0x9, 0x9, 0x1000}, {0x7, 0x0, 0xff, 0x0, 0x800, 0xffff}, {0x1, 0x5, 0x9, 0xfffffff7, 0x8, 0x8}, {0x5, 0xc, 0x0, 0x2, 0x8, 0x80000001}, {0x6, 0x8, 0x10, 0x10000, 0x5, 0x32}, {0x80000001, 0x8000, 0x5, 0xe, 0x4, 0x3ff}, {0x100, 0x7fff, 0xfff, 0x1, 0x1, 0xd}, {0x8, 0x7, 0x80000001, 0xd, 0x1, 0x6}, {0x86, 0x3125, 0x800, 0x7, 0x2, 0x5}, {0x2, 0x5, 0x4df, 0xa, 0x7, 0x3ff}, {0x400, 0xe7df, 0x1, 0x800, 0x5, 0x8}, {0x1000, 0x101, 0x7, 0x800, 0x0, 0x3}, {0x2, 0xfffffffb, 0x7ff, 0x0, 0x5, 0x40}, {0x4, 0xfffffff7, 0x7fff, 0xe, 0x48, 0x800}, {0xffff, 0x10000, 0x5, 0x0, 0x4, 0x1}, {0x5, 0x6, 0x1c400, 0x1, 0x200, 0xae6c}, {0xd, 0x1, 0x6, 0xfffffff7, 0x7, 0xfffffffd}, {0x0, 0x5, 0x7, 0x5, 0x8001, 0x401}, {0x0, 0x9, 0x5, 0x3, 0x5, 0x7}, {0x7, 0x80000001, 0x3, 0x929, 0x8, 0x8}, {0x6, 0x3, 0x81, 0x1, 0x9, 0x101}, {0x7, 0x4, 0x44f, 0x101, 0x9, 0x8}, {0x3, 0x7, 0x3, 0xa, 0x2, 0x3}], [{0x3, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x4}, {0x2, 0x1}, {0x4}, {0x2}, {0x2}, {0x5}, {0x3, 0x1}, {0x5}, {0x2}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x0, 0x1}, {0x5}, {}, {0x5}, {0x4, 0x1}, {0x4}, {0x2}, {0x1, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x1, 0x15ee5b1ff40b76fc}, {0x4, 0x1}, {0x2}, {0x3, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x2}, {0x2}, {0x3, 0x1}, {0x5}, {0x2}, {0x3, 0x1}, {0x4}, {0x1, 0x3926992cce5fa501}, {0x2}, {0x2, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x2}, {0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1}, {0x1}, {}, {0x5}, {}, {0x1}, {0x3}, {0x4, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x8fdab96158e71738}, {0x3, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x5}, {0x5, 0x1}, {0x4, 0x1}, {0x2}, {0x3, 0x1}, {0x4}, {0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x3}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x2, 0x1}, {0x4}, {0x1}], 0x1}}]}, {0x27, 0x6, "fb50f8d1f4e662741c95ffac63b9a8c3e65b0af6598fcdf54128a17c87dab5de178c70"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_csum={0x4c, 0x5, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0xae43, 0x2, 0x8000, 0xfffffff8}, 0x2b}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}, {0x334, 0x1, [@m_nat={0x124, 0x5, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x57eb, 0x8, 0x80000000, 0x8}, @broadcast, @multicast1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x3, 0x3, 0x2, 0x8}, @multicast2, @multicast1, 0x2f8874b97c968ec5}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xe, 0x0, 0x3, 0x5, 0x3}, @broadcast, @dev={0xac, 0x14, 0x14, 0x2d}, 0xffffff00, 0x1}}]}, {0x82, 0x6, "50416d0d3e4e04b84a2d4238a15af9ffaf2de360b4d69f7f4d172533bf5110d009e620918cf18511b2d676be6bc7de7ad1848fb534df0439436bf56ec5bd880bfa47e9f03c1c7603598ac3366c5aee55c8ff2d6f822bdc11b7a73a77a18e4d3a272bd872bcd673b7824df71538302e4ea63f948c5d82b2d2149b6c073a94"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_simple={0x188, 0x19, 0x0, 0x0, {{0xb}, {0x98, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x1, 0x9, 0x20000000, 0x3ff, 0x7}}, @TCA_DEF_DATA={0x8, 0x3, '!:^\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x2, 0x1, 0x3, 0x2, 0x2}}, @TCA_DEF_PARMS={0x18, 0x2, {0x1, 0x5, 0xffffffffffffffff, 0x4, 0xc}}, @TCA_DEF_DATA={0xc, 0x3, 'geneve1\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x94b, 0x79, 0x4, 0x2, 0x7}}, @TCA_DEF_PARMS={0x18, 0x2, {0x10, 0x7ff, 0x5, 0xff, 0xffff8001}}]}, {0xc6, 0x6, "63309dad199eec2c8dec606bf8d4e237028f8f7c07ab332f15ae0fd9a1fe3f2bce226e217b54532dee8e5dacb52519eb5085f0fee5112b8a38a1109df72e2d2b3e49a34e4b7c3ac182307e303739001b80bd0f32f059df59f3d2d228c65b07e408b9286d59488c154e4544c35510c841fdf59ef404973b3addb891092d10454b1d1267f438a6e1b2c1025ea31887f2c39c6aed608306efca6b05b7838a1a39e9392f93a768c1d3cc1fe8cbcac297f160eaf27a0ab4169ab4df6582b5f679c5490561"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_sample={0x84, 0x12, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x3}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x400000}]}, {0x45, 0x6, "65f3c517fb0e907f936856321e300766d916ea1910b5fa89a596a661356153de7bc21b7d85788d690fca66b1580850004b88c31dc90fbd58aa09a9f6d78e37405c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x38e8}}, 0x20000000) (async, rerun: 64) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) (rerun: 64) syz_emit_ethernet(0x36, &(0x7f00000003c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) (async, rerun: 32) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2400c042) (rerun: 32) 8.071208445s ago: executing program 2 (id=3167): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000080)={0xa, 0x0, 0x2, @local, 0xff}, 0x20) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r1, 0x0, 0x6, 0x0, 0x0) syz_emit_ethernet(0x126, &(0x7f0000000800)=ANY=[], 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, 0xb, 0x6, 0xf03, 0x0, 0x0, {0x3, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x40) (async, rerun: 64) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x1000000, @local}, 0x0, {[0x1, 0x76ab, 0x0, 0x0, 0x9]}}, 0x5c) (async, rerun: 64) syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) (async) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x5, &(0x7f00000006c0), 0x4) (async) socket$rds(0x15, 0x5, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000002"], 0x48) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000200007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000480)={r8}, 0xc) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000000)={@remote, r9}, 0x14) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) (rerun: 64) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@newtfilter={0x24, 0x11, 0x1, 0x70bd24, 0x2001, {0x0, 0x0, 0x74, r10, {0x5, 0x4}, {0x1, 0xb}, {0xfff2, 0x10}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x48000}, 0x4000840) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl1\x00', r10, 0x6, 0x2, 0x2, 0x0, 0x7, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80, 0x7, 0x4, 0x4}}) (rerun: 32) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000180)={@loopback, r11}, 0x14) 6.255847977s ago: executing program 2 (id=3174): r0 = socket$can_j1939(0x1d, 0x2, 0x7) connect(r0, &(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e22, @local}, 0x2, 0x0, 0x1, 0x1}}, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x403, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x3, 0x0, 0x1020}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4, 0xe}, @IFLA_GENEVE_PORT={0x6, 0x5, 0x4e22}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x40080) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x70, 0x1405, 0x400, 0x70bd29, 0x25dfdbfc, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x1}, {0x8}}]}, 0x70}, 0x1, 0x0, 0x0, 0x8810}, 0x24000000) 6.231230181s ago: executing program 1 (id=3175): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(r0, &(0x7f0000000fc0)=[{{&(0x7f00000003c0)=@generic, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)=""/207}, {&(0x7f0000000540)=""/162}, {&(0x7f0000000600)=""/77}], 0x0, &(0x7f0000000680)=""/224}, 0x6}, {{&(0x7f0000000780)=@isdn, 0x0, &(0x7f0000000800)=[{&(0x7f0000001240)=""/4096}, {&(0x7f0000000240)=""/64}], 0x0, &(0x7f0000000ac0)=""/174}}, {{&(0x7f0000000b80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x0, &(0x7f0000000840)=[{&(0x7f0000000cc0)=""/224}, {&(0x7f0000000c00)=""/87}, {&(0x7f0000000dc0)=""/209}], 0x0, &(0x7f0000000ec0)=""/195}, 0x81}], 0x101f2043b8267e, 0x10120, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) socket$inet_tcp(0x2, 0x1, 0x0) ioctl(r1, 0x8b1b, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x44, 0x32, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3e}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x2004c8d8) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0xe22, 0x1, @mcast1, 0x20}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x3c}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22e8a65c15}, 0x4008840) r4 = socket$netlink(0x10, 0x3, 0x5) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x50, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x4}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x880}, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r5, 0x29, 0x4b, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x23, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) socket$kcm(0x29, 0x0, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) 6.049642485s ago: executing program 2 (id=3177): r0 = socket(0x40000000015, 0x5, 0x0) connect$l2tp6(r0, &(0x7f0000000200)={0xa, 0x0, 0x8, @private2, 0x0, 0x2}, 0x6) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000100)=[{0x50, 0xcb, 0x5, 0x80f7}, {0x6, 0xfc, 0x4, 0x75}]}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x30, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xfff3}, {}, {0xe, 0x300}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000002000010000000000fcdbdf250a8000000000000332000300140001002001000000000000000000000000000105001600870000006b52a569aa58bc536c4a95d8156be0e7fedde8c3e8530a1dcc51"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x40800) r3 = socket$netlink(0x10, 0x3, 0xc) ioctl$sock_netdev_private(r3, 0x8924, &(0x7f0000000080)="963a") r4 = socket$kcm(0x23, 0x2, 0x0) sendmsg$sock(r4, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@getnexthop={0x18, 0x76, 0xb0d, 0x0, 0x0, {0x3}}, 0x18}, 0x1, 0x0, 0x0, 0x4080}, 0x20000000) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) r7 = socket$kcm(0x2, 0x5, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff00000065"], 0x78) ioctl$sock_TIOCINQ(r4, 0x541b, &(0x7f0000000080)) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x70bd26, 0x1, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r8, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r8, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62", 0xe}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f00000005c0)="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", 0xfe}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdb", 0x68}, {&(0x7f00000007c0)="f2e659", 0x3}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd1", 0x4}, {&(0x7f0000000580)="b8a2f6", 0x3}, {&(0x7f00000002c0)="7940e900e0377757a9edc0d9376c21328ad2f7584fe4c8b712b3e5e08ecff5258151bd9eea7b4ce21f67ab51922ce035987127fda5812df903188e321419610f4beb6cdf6fa073876157c4f1d2054439d8db3f4d937872de928b62741fd60e6b56979ad883f89a02e24a577275bfb498b7a127abd0eb099e704d18d63dad611b45acfc3b8dc5457c8383d7d8621942e8e2ce6e4017dd6e5ed9732e739be6593c3b033524669ce17c3b822a6953eb11a20921220000000000000000", 0xbb}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000880)="87", 0x1}, {&(0x7f0000000900)="11e09017", 0xfffffec4}], 0x2}}], 0x4, 0x4000000) sendmsg$inet(r8, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000000140)="7fb8", 0x2}], 0x1}, 0x40400c1) socket$nl_route(0x10, 0x3, 0x0) 3.519159532s ago: executing program 0 (id=3191): socket$inet6_sctp(0xa, 0x4, 0x84) socket$inet6_sctp(0xa, 0x4, 0x84) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'aead\x00', 0x0, 0x0, 'essiv(pcrypt(aegis256-generic),blake2b-256-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8010, 0xffffffffffffffff, 0x7a19d000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x1, 0x0, &(0x7f0000000300)) socket$igmp(0x2, 0x3, 0x2) syz_emit_ethernet(0x55, &(0x7f0000000780)=ANY=[@ANYBLOB="050300000050aaaaaaaaaa108848000f13ddc42b39452abc000000000000972744ca550b864686bd38c9800791aaffdbf8ffffffffffffffe007efc86bdcaee93fcf358f2d478db9cdfbe2a4071ef4e6b711e6c01d3365980100000000", @ANYRESHEX=0x0, @ANYRES16=0x0], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, 0x0, 0x2000040) socket$key(0xf, 0x3, 0x2) r4 = socket$nl_crypto(0x10, 0x3, 0x15) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_crypto(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="e00000001100010027bd7000fbdbdf256c72772d63616d656c6c69612d61736d00000000000000000000ff000000000000000000000000000000000000000000000000000000004100"/173], 0xe0}, 0x1, 0x0, 0x0, 0x20040810}, 0x850) r5 = socket$kcm(0x10, 0x2, 0x10) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r8 = socket(0x40000000015, 0x5, 0x0) bind$xdp(r6, &(0x7f0000000240)={0x2c, 0x1, r7, 0x0, r8}, 0x10) socket$kcm(0xa, 0x5, 0x0) 2.826949225s ago: executing program 0 (id=3197): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e20, 0x7fff, @local, 0xfffffff7}}, 0x0, 0xc}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r0, @ANYRES32=0x0, @ANYRESDEC=r0, @ANYRES32=0x0, @ANYRESHEX], 0x3c}, 0x1, 0x0, 0x0, 0x4894}, 0x0) 2.683689645s ago: executing program 0 (id=3199): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)='\'', 0x1) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) 1.963727422s ago: executing program 4 (id=3203): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000840)={0x20, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffc}]}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x70bd29, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0xfffffffb}, @FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x7fffffff}]}, 0x2c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) r5 = socket$kcm(0x21, 0x2, 0x2) ioctl$int_in(r5, 0x5452, &(0x7f0000000100)=0x8) sendmsg$kcm(r5, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb71658bda99b49720fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) sendmsg$TIPC_NL_NET_SET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd7000fbd9df250f0000002c0007800c0003000200000000000000080002007f00000080"], 0x44}, 0x1, 0x0, 0x0, 0x2805}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000140)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x7, [@fwd={0x3}, @var={0x5, 0x0, 0x0, 0xe, 0x1}]}, {0x0, [0x0, 0x61, 0x2e, 0x61, 0x2e]}}, 0x0, 0x3b, 0x0, 0x1, 0x1}, 0x28) 1.743765002s ago: executing program 0 (id=3205): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=@allocspi={0x100, 0x16, 0x1, 0x70bd2b, 0x25dfdbfe, {{{@in=@private=0xa010101, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e21, 0x0, 0x4e24, 0x0, 0xa, 0xe0, 0x20, 0x1d}, {@in6=@local, 0x4d5, 0x33}, @in=@dev={0xac, 0x14, 0x14, 0x10}, {0x8, 0x7b5, 0x0, 0x6, 0x9, 0xfffffffffffffffa, 0xffffffff, 0x3}, {0x2, 0x2, 0x1, 0xfffffffffffffffa}, {0x0, 0x10001, 0xfffffff9}, 0x70bd2a, 0x0, 0x2, 0x2, 0x6, 0x1}, 0x8, 0x6000000}, [@replay_thresh={0x8, 0xb, 0x4}]}, 0x100}, 0x1, 0x0, 0x0, 0x10}, 0x400c8c0) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) (async, rerun: 32) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@mpls_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x20}, [@RTA_DST={0x8, 0x1, {0x7f, 0x0, 0x1}}]}, 0x24}}, 0x0) getsockopt$X25_QBITINCL(r4, 0x106, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r5) sendmsg$IEEE802154_START_REQ(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x3c, r6, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x12}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x1}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_BCN_ORD={0x5}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x18000}, 0x0) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) (async, rerun: 64) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r5) (async, rerun: 64) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0xfffffffffffffdb6, &(0x7f0000000fc0)={&(0x7f0000000180)={0x40, r3, 0x1, 0x70bd2d, 0x4000, {{0x2}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7, 0x1e}}}}, [@chandef_params, @NL80211_ATTR_TX_NO_CCK_RATE]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x80) 1.599542999s ago: executing program 3 (id=3206): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) (async) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x10000800, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000340)=ANY=[@ANYBLOB="340085987952a59b3045abdb86fbe8a8440000", @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) bind$llc(r3, 0x0, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3) (async) socket(0x1, 0x6, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r4) recvmmsg(r4, &(0x7f0000000740)=[{{&(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000240)=""/95, 0x5f}, {&(0x7f00000003c0)=""/162, 0xa2}], 0x2}, 0xc}, {{&(0x7f00000004c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000540), 0x0, &(0x7f0000000600)=""/176, 0xb0}, 0xfffffff7}], 0x2, 0x2000, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a28000000000a01040000000000000000010080030900010073797a300000000008000240000000012c000000030a010100000000e4000000010002000900010073797a30000000000900030073797a320a05000000000000000000010000050c00024000"], 0xa8}}, 0x0) (async) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000100)={r6, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) (async) setsockopt$packet_drop_memb(r5, 0x107, 0x2, &(0x7f00000000c0)={r6, 0x1, 0x6, @random="057586837900"}, 0xfffffddb) (async) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) (async) listen(r7, 0xfffffffc) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 1.593636443s ago: executing program 0 (id=3207): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getnetconf={0x14, 0x52, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40000c4) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_crypto(0x10, 0x3, 0x15) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bind$netlink(r2, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbfb, 0x8}, 0xc) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000001c0), 0x400802, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r7, 0x8040942d, 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x0, 0x5, 0x6, 0x6, 0x33, @loopback, @loopback, 0x8000, 0x19, 0x3ff, 0xab4}}) sendmsg$nl_route(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=@bridge_newvlan={0x3c, 0x70, 0x20, 0x70bd29, 0x25dfdbfc, {0x7, 0x0, 0x0, r8}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x20, 0x2}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x48, 0x1}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x6, 0x2}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004090}, 0x4000000) bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0)={0x0, r6}, 0x8) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r3) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000000680)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000640)={&(0x7f0000000480)={0x1c0, r9, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x2d}, @void, @val={0xc, 0x99, {0xb66b, 0x30}}}}, [@NL80211_ATTR_VENDOR_DATA={0xfc, 0xc5, "783a3f9bc547d671f41f284ba2a46750b8cbda2f28788e86776594879c6d8065319e305820f163bd9947b17e7642e8a807fcfd9fd6c9741f59720b8a6a7f7caea6079b2c981ff2e9b40cb692230d2568ef6ed47f2ed95ef9dee43efb1fc83419e78bb15abde1c7d84aee389c8e5ab272bd344a863a13414068ae61ea2b90e3ee61520457cea054588e4766851d646d8b38054d1117420bdbcdb41cf65ea99a3dd0720f62c4b4a417997e0de5c83153d7589f35c472531fe95b5c9efd8f069973430178d4089daa840e1fe016c2bc6a9e4ac7fb5b0042a2347ace3e82f0c4c038bec3bbaa735269189d6d094598671f84831e76d684967c10"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xffffffff}, @NL80211_ATTR_VENDOR_DATA={0x4}, @NL80211_ATTR_VENDOR_DATA={0x7e, 0xc5, "e9832f3934e2a9929f2650542a5cfb6d860758c7b909bfa1bcb8efe118384222f80717dff87823fe5b46dbdfc2374c1202fd78beefdc03b5edf79b453bd0e3213a8d36de9828a440afde1ed94803d4c70132f2283446a03636b3d05774cb1bcc304229e66cf39ac4c1201d65c8cfed7ee4bb058a2cb1f7d6cb3b"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x400}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xd}]}, 0x1c0}}, 0xc011) r10 = accept4$unix(r6, &(0x7f00000006c0), &(0x7f0000000740)=0x6e, 0x80800) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000780)={r10}) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000008c0)={&(0x7f00000007c0)=""/243, 0x1006000, 0x1800, 0x400, 0x1}, 0x20) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000940), r1) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r11, &(0x7f0000001c00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000000980)={0x1228, r12, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_NET={0x64, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80000001}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4f9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffffe}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7ff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}]}, @TIPC_NLA_SOCK={0xbc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x10}]}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fffffff}]}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xaa}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x19e82b92}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffd90}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000000}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5dda}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK={0x70, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9a}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb0}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xd000}]}]}, @TIPC_NLA_NODE={0x1028, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xf}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xe95d}]}]}, 0x1228}, 0x1, 0x0, 0x0, 0x44001}, 0x8000) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r13, &(0x7f0000001d80)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001d40)={&(0x7f0000001c80)={0x8c, r12, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xb}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "fddaff9add27747b4dcf828a524114813baaacf4b521b0fc90c131"}}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x101}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1c}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x30}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffffc}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) r14 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001e00), r6) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002100)={r5, 0xe0, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000001e40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000001e80)=[0x0, 0x0], &(0x7f0000001ec0)=[0x0], 0x0, 0x7c, &(0x7f0000001f00)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001f40), &(0x7f0000001f80), 0x8, 0x78, 0x8, 0x8, &(0x7f0000001fc0)}}, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_GET(r1, &(0x7f00000023c0)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002380)={&(0x7f0000002140)={0x204, r14, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x94, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x204}, 0x1, 0x0, 0x0, 0xc000}, 0x50) write$cgroup_int(r4, &(0x7f0000002400)=0x4e8, 0x12) ioctl$BTRFS_IOC_RESIZE(r5, 0x50009403, &(0x7f0000002440)={{r11}, {@void, @actul_num={@val=0x2d, 0xc, 0x45}}}) socket$kcm(0x29, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000002480)="453b10eba668ae02586b0f75f890c3967dee294e63ec08a2b468afda043055a7c4ac0f5fdd90b02d50472174ee5cd54152e11e24133411908a1fcbc142b49f71d319f80bd644842e341e356c227e9f469779fccb7c6605bd4aa00edeced156e8bc5794c58c3dbebe404bb6d338", 0x6d) 1.554102721s ago: executing program 4 (id=3208): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpuacct.usage_user\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f00000002c0), &(0x7f0000000240)=r1}, 0x20) ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090000000000000008000000911176000000000095"], &(0x7f0000000c40)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) 1.47669233s ago: executing program 0 (id=3209): r0 = socket$can_bcm(0x1d, 0x2, 0x2) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) close(0x4) r3 = accept(r1, 0x0, 0x0) shutdown(r3, 0x1) pselect6(0x40, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x6073, 0x7, 0x0, 0x0, 0x9e25, 0x0, 0xffffffffffffffff}, &(0x7f0000000280), 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x23, &(0x7f0000000000), 0x4) getsockopt(r0, 0xfff, 0x9, &(0x7f0000000100)=""/38, &(0x7f0000000180)=0x26) sendmsg$inet(r5, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x20000000) recvmsg(r4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002940)=""/4098, 0x15}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00') unshare(0x6a040000) r6 = socket(0x8, 0x4, 0x3) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r6, 0x40106183, 0x0) r7 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x800) setsockopt$packet_add_memb(r7, 0x107, 0x1, 0x0, 0x0) connect$can_bcm(r0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r8, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 1.363712236s ago: executing program 4 (id=3210): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000080)=0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x80, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_TUPLE_REPLY={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xb2c}]}, @CTA_FILTER={0x4c, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x100}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x16}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x182}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x66}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x113}, @CTA_FILTER_REPLY_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x1}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x8}, @CTA_FILTER_REPLY_FLAGS={0x8}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}]}, 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f0000000280)={r1, &(0x7f0000000000)='t*)(++\\^^(}\\\xe8:\x00', 0x802284, &(0x7f0000000100)={@align=0x2, {0x9, 0x7, 0x0, 0x1200}}, 0x2, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000240)=0x2}) sendmsg$AUDIT_USER_TTY(r2, &(0x7f0000000440)={&(0x7f0000000300), 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x9c, 0x464, 0x20, 0x70bd27, 0x25dfdbfe, "7f8a1dff6c43bb47dcfe9d38a0cc184373370ec97ea53e3316284342497fe521264176de79ee9e736f602fcbbe4faa8fff03e9b34a75ab6d55b7bc5c637dcb821a35f329fcafb44864462c4c92b8c08808aa2550f123014eda5e8fa6b6148e0c0d8860fd804ac6561ba31a2287890266376da4cc382b05012d9be7797a5bb8b8ecfea3ff815f55473fa0", ["", "", ""]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) 1.332870276s ago: executing program 3 (id=3211): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) (async) close(0x3) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1200000004000000080000000c"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x4, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000010000ee850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) (async) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24048045}, 0x20000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0xfd, 0x6, 0x0, 0x39, @initdev={0xfe, 0x88, '\x00', 0xff, 0x0}, @mcast2={0xff, 0x3}, 0x2000, 0xba08}}) 1.308618283s ago: executing program 1 (id=3212): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e22, @private=0xa010101}]}, &(0x7f0000000180)=0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)='/', 0x1}], 0x1, 0x0, 0x0, 0x40010}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000380)=ANY=[], 0x32600) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020206b1af8ff00000000bfa100000000000007010000f8ffffffb702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x20, 0x1b, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x36c0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_fd={0x18, 0x1, 0x1, 0x0, r3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x2800000}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f00000003c0)={r4, &(0x7f0000000080)='\x00', 0x563001, &(0x7f00000000c0)={@_ha_fsid={[0x9, 0x2]}, {0x40, 0x641, 0x5, 0x8}}, 0x0, &(0x7f00000002c0), &(0x7f0000000300)=0x5}) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r5) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r5) sendmsg$IPVS_CMD_GET_SERVICE(r6, &(0x7f00000006c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x80, r7, 0x2, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7f00}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8001}]}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x40}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x34}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000c91}, 0x4000000) setsockopt$inet6_mreq(r6, 0x29, 0x1d, &(0x7f0000002e80)={@loopback}, 0x14) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x23, &(0x7f0000000000)={0x0, 0x2}, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f00, 0x55, 0x0, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0xbdd, 0x0, 0xb1, 0xfffffffffffffef4, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd9487ef2d2131e4ef3c6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb4206757531", &(0x7f0000000400)="8c596894db53ae4c4efade7a57a861cdb810f19ba525cd9ec510959bd6f6b11f68f19baa78357b8bd63fbb7c9df5933425820af0d027fe429006dcd85ade6eecef0e321affd92f5bd298582cd172350995f9100bff0b471c8de0a1", 0x5, 0x0, 0xffffffff}, 0x50) 1.115055562s ago: executing program 3 (id=3213): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0xbb171, 0xffffffffffffffff, 0x0) (async) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$igmp(0x2, 0x3, 0x2) (async) ioctl$SIOCGETVIFCNT(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x1}) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async, rerun: 64) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'bridge_slave_0\x00', @random="4e25df848da9"}) write$tun(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffe800000000000000000000000000010ff02000000000000000000000000000189"], 0x340a) bind$netlink(r1, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a300000000008000340000000011400000011"], 0x64}}, 0x0) (async) r6 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x22}, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f0000000500)=[{0x18, 0x110, 0xd, "aa"}, {0x18, 0x110, 0x1, '\x00'}], 0x30}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000200900020073797a310000000008000440000000000900010073797af7ec9aa90a14000000110000e500"/100], 0x64}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000005c0)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xac800000}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) (async) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0xdfbd5000) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000000802000000011fd0500000000bdfc0f005f0b00"/36], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x1f, &(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085100000faffffff18180000", @ANYRES32=r2, @ANYBLOB="0000000000000000ff4005005d020000186800000a000000000000000000000018110000", @ANYRES32, @ANYRES32], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r8, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x9, &(0x7f0000000140)=[0x0, 0x0], 0x0, 0x0, 0xaa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x8, 0x0, 0x0}}, 0x10) 1.052623719s ago: executing program 4 (id=3214): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b52710aeee835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5bc6d3fd0500000022eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe326c2ed0a432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xfffffffe}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x26}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r2, 0x26, 0x0, 0xf51, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x1f8, 0xd0, 0x720d, 0x148, 0x0, 0x148, 0x188, 0x240, 0x240, 0x188, 0x240, 0x7fffffe, 0x0, {[{{@ip={@multicast1, @rand_addr=0x64010100, 0xff, 0xff000000, 'veth1_to_hsr\x00', 'dvmrp1\x00', {0xff}, {}, 0xff, 0x3, 0x30}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x1, 0x1e04, 0x2, 0x3, 0x7], 0x0, 0x2}, {0xffffffffffffffff, [0x7, 0xb2cc575b459b5b36, 0x4, 0x1, 0x3], 0x6, 0x7}}}}, {{@ip={@broadcast, @multicast1, 0xff000000, 0xffffffff, 'sit0\x00', 'vlan1\x00', {0xff}, {0xff}, 0x1, 0x3, 0x40}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x258) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="0001000016000100000000000000000000000000000000000000000000000000ffffffff0000000000000000000000004e200000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ac1414aa0000000000000000000000000000000033000000ac1414bb00000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002000000000000000000000000000000001000000000000000000000000000000000000001000000000000000a00000000000000000000000500000005000000080023"], 0x100}}, 0x0) 940.345684ms ago: executing program 4 (id=3215): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={r2, @empty, @multicast1}, 0xc) unshare(0x2c020400) r3 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$bt_BT_RCVMTU(r3, 0x6b, 0xd, 0x0, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f00000003c0)={{r0, &(0x7f0000000140)='vcan0\x00', 0x38000, &(0x7f0000000180)={@_ha_fsid={[0x9, 0xfffffffe]}, {0x4, 0x9, 0x8, 0x10000}}, 0x5, &(0x7f00000001c0), &(0x7f0000000200)=0x7}, {[0xa23, 0x3, 0xb, 0x2]}, 0xfffffffe, 0x98, &(0x7f0000000240)=""/152}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8, 0x0, r4, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0xffffffff}, 0xfffffffffffffde9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x11, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xa9, 0x0, 0x0, 0x0, 0xe}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x7, 0xfe7, &(0x7f0000001e00)=""/4071}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_tracing={0x1a, 0x12, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x2}, [@ldst={0x0, 0x3, 0x0, 0x6, 0xa, 0xc, 0xfffffffffffffff0}, @ringbuf_query, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @map_idx={0x18, 0x2}]}, &(0x7f0000000780)='GPL\x00', 0x1, 0x30, &(0x7f00000007c0)=""/48, 0x41000, 0x0, '\x00', r2, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000840)={0x4, 0xc, 0xfffffffb, 0x2}, 0x10, 0x25106, 0xffffffffffffffff, 0x0, &(0x7f0000000880)=[0x1, 0x1], 0x0, 0x10, 0x7}, 0x94) bpf$OBJ_GET_MAP(0x7, &(0x7f00000009c0)=@o_path={&(0x7f0000000980)='./file0\x00', 0x0, 0x10, r0}, 0x18) r8 = accept$packet(r6, 0x0, &(0x7f0000000040)) sendto$packet(r8, &(0x7f0000000580)="6c47254b955181ecea41761b47209943ca71631677728b893069ed249d6e0d4a374cae253419c9135b4ad5ee2e03c63c559706a469800bb4b841e6dc90dbacbd47a48d47c04136d57ae6057719f234d6dbce1e0e45c1eeacd6a770b2458f7becef751945728a", 0x66, 0x24004030, &(0x7f0000000600)={0x11, 0xf7, r2, 0x1, 0x9, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}}, 0x14) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000a40)=@o_path={&(0x7f0000000a00)='./file0\x00', 0x0, 0x18, r0}, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x4c02}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r10, &(0x7f0000000000)=ANY=[@ANYRESOCT, @ANYBLOB="1c121513ddc4974e7383586ba93b81cf20b5a61a10b7ea43af69da34f7d73e442e5a32c937985779915e3e243d26008b317a00d8c8f21e2c4c4eb5f6178d7e4346724cf10a879e33613d90ca2c4a6f84905f043b9711dab74fb1eb60826b003c20e73d60c7c1a4e5640b7805ba2290f424bebff9b9a74957dd6cbd6218ca073cbd2cd0a107f0be54ed30ee2b6ffe5feef1114e", @ANYRESHEX=r10], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0) r11 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r11, 0x800442d2, &(0x7f00000000c0)={0x0, 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b00)=@bpf_tracing={0x1a, 0x1d, &(0x7f0000000bc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7490, 0x0, 0x0, 0x0, 0x912}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @exit, @alu={0x7, 0x0, 0x6, 0xa, 0x7, 0xfffffffffffffff0}, @ldst={0x2, 0x2, 0x3, 0x5, 0xb, 0xfffffffffffffff4, 0x4}, @generic={0x92, 0x5, 0xb, 0x800, 0x3}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000440)='GPL\x00', 0x3fb, 0xf8, &(0x7f0000000cc0)=""/248, 0x41000, 0x4, '\x00', 0x0, 0x1c, r6, 0x8, &(0x7f0000000680)={0x6, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x1d295, r7, 0x1, &(0x7f0000000a80)=[r9, r9], &(0x7f0000000ac0)=[{0x80000000, 0x1, 0x1, 0x1}], 0x10, 0xc941}, 0x94) 790.778546ms ago: executing program 3 (id=3216): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40455d00000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e74657200400100000c0a01010000000000000000070000000900020073797a31000000000900010073797a300000000014010380100100800800034000000002030106"], 0x1d4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00ed6a", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2c00, 0x2, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newqdisc={0x218, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x84, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fff, 0x6}}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x80000001}}, @TCA_HTB_DIRECT_QLEN={0xfffffffffffffefd, 0x5, 0xffc}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x1400, 0x6}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x1}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x2}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x80000001}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x9, 0xfff}}]}}, @TCA_STAB={0x160, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x1b, 0xffff, 0x400, 0x2, 0x5, 0x9, 0x3}}, {0xa, 0x2, [0x7ff, 0x2, 0xfff]}}, {{0x1c, 0x1, {0x8, 0x5, 0xb, 0xffffffff, 0x0, 0x7, 0xa, 0x2}}, {0x8, 0x2, [0x200, 0x3]}}, {{0x1c, 0x1, {0x40, 0x40, 0x4, 0x101, 0x0, 0x14d60000, 0x511d, 0x9}}, {0x16, 0x2, [0x40, 0x1fe, 0x8001, 0x3, 0x0, 0x4, 0x409, 0x1, 0x8]}}, {{0x1c, 0x1, {0x3, 0x0, 0x90, 0xffff, 0x2, 0xfffd, 0xd9c7, 0x8}}, {0x14, 0x2, [0x4, 0xe4ce, 0x7fff, 0x8, 0x7, 0x6, 0x4, 0x35]}}, {{0x1c, 0x1, {0xdb, 0x2, 0x3, 0x1, 0x1, 0x8000, 0xfffffc01, 0x2}}, {0x8, 0x2, [0x6, 0x4]}}, {{0x1c, 0x1, {0x5, 0x7, 0x400, 0x1, 0x0, 0x2, 0xe5, 0x9}}, {0x16, 0x2, [0xccf3, 0x4, 0x3, 0x1, 0xa4, 0x6, 0x6, 0x10, 0xe]}}, {{0x1c, 0x1, {0xf, 0x2, 0x3, 0xb, 0x0, 0x6, 0x7, 0x3}}, {0xa, 0x2, [0x1da1, 0x2, 0x82e]}}, {{0x1c, 0x1, {0x3, 0x0, 0x100, 0x4, 0x2, 0x4, 0x0, 0x6}}, {0x10, 0x2, [0x101, 0xad, 0x1000, 0x81, 0x80, 0x7]}}]}, @TCA_RATE={0x6, 0x5, {0x0, 0xea}}]}, 0x218}}, 0x20000000) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40455d00000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e74657200400100000c0a01010000000000000000070000000900020073797a31000000000900010073797a300000000014010380100100800800034000000002030106"], 0x1d4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00ed6a", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2c00, 0x2, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newqdisc={0x218, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x84, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fff, 0x6}}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x80000001}}, @TCA_HTB_DIRECT_QLEN={0xfffffffffffffefd, 0x5, 0xffc}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x1400, 0x6}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x1}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x2}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x80000001}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x9, 0xfff}}]}}, @TCA_STAB={0x160, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x1b, 0xffff, 0x400, 0x2, 0x5, 0x9, 0x3}}, {0xa, 0x2, [0x7ff, 0x2, 0xfff]}}, {{0x1c, 0x1, {0x8, 0x5, 0xb, 0xffffffff, 0x0, 0x7, 0xa, 0x2}}, {0x8, 0x2, [0x200, 0x3]}}, {{0x1c, 0x1, {0x40, 0x40, 0x4, 0x101, 0x0, 0x14d60000, 0x511d, 0x9}}, {0x16, 0x2, [0x40, 0x1fe, 0x8001, 0x3, 0x0, 0x4, 0x409, 0x1, 0x8]}}, {{0x1c, 0x1, {0x3, 0x0, 0x90, 0xffff, 0x2, 0xfffd, 0xd9c7, 0x8}}, {0x14, 0x2, [0x4, 0xe4ce, 0x7fff, 0x8, 0x7, 0x6, 0x4, 0x35]}}, {{0x1c, 0x1, {0xdb, 0x2, 0x3, 0x1, 0x1, 0x8000, 0xfffffc01, 0x2}}, {0x8, 0x2, [0x6, 0x4]}}, {{0x1c, 0x1, {0x5, 0x7, 0x400, 0x1, 0x0, 0x2, 0xe5, 0x9}}, {0x16, 0x2, [0xccf3, 0x4, 0x3, 0x1, 0xa4, 0x6, 0x6, 0x10, 0xe]}}, {{0x1c, 0x1, {0xf, 0x2, 0x3, 0xb, 0x0, 0x6, 0x7, 0x3}}, {0xa, 0x2, [0x1da1, 0x2, 0x82e]}}, {{0x1c, 0x1, {0x3, 0x0, 0x100, 0x4, 0x2, 0x4, 0x0, 0x6}}, {0x10, 0x2, [0x101, 0xad, 0x1000, 0x81, 0x80, 0x7]}}]}, @TCA_RATE={0x6, 0x5, {0x0, 0xea}}]}, 0x218}}, 0x20000000) (async) 775.14682ms ago: executing program 4 (id=3217): r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0xc}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0xffffff08}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x78}}, 0x0) connect$netlink(r0, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x30, 0x20, 0x1, 0x70bd23, 0xffffffff, {0xa, 0x14, 0x0, 0x40, 0x1, 0x0, 0x0, 0x1, 0x1}, [@FRA_DST={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40810}, 0x4004044) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f00000001c0)={0x77359400}, 0x10) write(r0, &(0x7f0000000000)='\"', 0x1) recvmmsg(r0, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32=r5], 0x3c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r4, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x880}, 0x20008014) r6 = socket(0x2a, 0x3, 0x8) r7 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, &(0x7f0000000100)=0x4, r6, &(0x7f0000000180)=0x4, 0x6, 0x9) sendmsg$netlink(r7, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="2c000000100001002bbd7000fbdbdf2504004f8008003300", @ANYRES32=0x0, @ANYBLOB="0c0025800800130b04000a80bf00f200"], 0x2c}], 0x1, 0x0, 0x0, 0x8000}, 0x8880) 585.732702ms ago: executing program 3 (id=3218): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x15, 0x4, &(0x7f00000011c0)=ANY=[@ANYBLOB="1800000008000000000000000800000091110d000000000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xd, &(0x7f0000001080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x7b}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1ca8}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x18, 0x3c, 0x301, 0x70bd25, 0xfffffffc, {0xb}, [@typed={0x4, 0x3}]}, 0x18}, 0x1, 0x0, 0x0, 0x200448d3}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=@newtaction={0xbc, 0x30, 0x1, 0x0, 0x25dfdbfe, {}, [{0xa8, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_ife={0x78, 0x1, 0x0, 0x0, {{0x8}, {0x50, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4}}}, @TCA_IFE_METALST={0x30, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x3}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0xfffffffe}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x7, 0x3, @val=0xa53d}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}]}, {0x4, 0x6, "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"}, {0xc}, {0xc}}}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x8010}, 0xc0) 359.53858ms ago: executing program 3 (id=3219): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0xff}}]}, &(0x7f0000000180)=0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0x0, 0x26, 0x0, 0xa}, 0x28) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000040)={r3, 0x1}, 0x8) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r5 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_raw(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000ff0)={0x0}, 0x2}, 0x24000895) connect$bt_rfcomm(r4, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xa) ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) socket$nl_route(0x10, 0x3, 0x0) shutdown(r4, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) unshare(0x6020400) r7 = socket(0x15, 0x5, 0x0) getsockopt(r7, 0x8, 0x0, 0x0, &(0x7f0000000000)) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000001000030500000000000000", @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x50}, 0x400c89c) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @random="cf3cccaf382f", @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0xfe, 0x6, 0x0, @remote, @local, {[@end, @end, @timestamp_addr={0x44, 0x4, 0x7d, 0x1, 0x4}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) 358.895873ms ago: executing program 1 (id=3220): setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) (async) accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0x10) (async) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'erspan0\x00', 0x0}) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r3, 0x89a2, &(0x7f0000000200)='bridge0\x00') (async) ioctl$sock_SIOCBRDELBR(r2, 0x89a3, &(0x7f0000000200)='bridge0\x00') (async) r4 = socket$inet(0x2, 0x80001, 0x84) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000002100010000000000000000000a000040000000000000000005001600001b000008001700", @ANYRES64], 0x2c}, 0x1, 0x0, 0x0, 0x20004894}, 0x20000080) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="10000000001000003c0012800b000100697036746e6c1d002c000280140003001d0100000b000000000000000000000214000200fed73347eda214e3e7d780"], 0x5c}}, 0x0) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES64=r1, @ANYBLOB="05042fbd7000ffdbdf250100000008000100", @ANYRES32=r7], 0x5c}, 0x1, 0x0, 0x0, 0x4000401}, 0x400e8c0) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e0000000000101040000000000000000020000001c001880080001400100000000000000000000020800034000000002240001801400018008000100e000000108000200e00000010c000280050001000000000004001640440010"], 0xe0}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000003c0)={r9, 0x0, 0x20}, 0xc) (async) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x24, 0x0, 0x0) (async) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEV_UP(r11, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xcfdbc6a363471954}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x34, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x20008000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r12, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 0s ago: executing program 1 (id=3221): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(r0, &(0x7f0000000fc0)=[{{&(0x7f00000003c0)=@generic, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)=""/207}, {&(0x7f0000000540)=""/162}, {&(0x7f0000000600)=""/77}], 0x0, &(0x7f0000000680)=""/224}, 0x6}, {{&(0x7f0000000780)=@isdn, 0x0, &(0x7f0000000800)=[{&(0x7f0000001240)=""/4096}, {&(0x7f0000000240)=""/64}], 0x0, &(0x7f0000000ac0)=""/174}}, {{&(0x7f0000000b80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x0, &(0x7f0000000840)=[{&(0x7f0000000cc0)=""/224}, {&(0x7f0000000c00)=""/87}, {&(0x7f0000000dc0)=""/209}], 0x0, &(0x7f0000000ec0)=""/195}, 0x81}], 0x101f2043b8267e, 0x10120, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) socket$inet_tcp(0x2, 0x1, 0x0) ioctl(r1, 0x8b1b, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x44, 0x32, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3e}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x2004c8d8) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0xe22, 0x1, @mcast1, 0x20}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x3c}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22e8a65c15}, 0x4008840) r4 = socket$netlink(0x10, 0x3, 0x5) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x50, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x4}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x880}, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r5, 0x29, 0x4b, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x23, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) socket$kcm(0x29, 0x0, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) kernel console output (not intermixed with test programs): ice bond5 [ 427.515961][T15508] bond5: (slave bridge7): making interface the new active one [ 427.555045][T15508] bridge7: entered promiscuous mode [ 427.564088][T15510] sock: sock_timestamping_bind_phc: sock not bind to device [ 427.576860][T15508] bond5: (slave bridge7): Enslaving as an active interface with an up link [ 427.924845][T15535] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 428.408902][T15554] xt_hl: Unknown Hop Limit match mode: 206 [ 428.410109][T15557] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 64993 [ 428.503027][T15559] syzkaller0: entered promiscuous mode [ 428.509723][T15559] syzkaller0: entered allmulticast mode [ 430.179095][T15642] bond6: entered promiscuous mode [ 430.184658][T15642] 8021q: adding VLAN 0 to HW filter on device bond6 [ 430.215487][T15647] syzkaller0: entered promiscuous mode [ 430.221160][T15647] syzkaller0: entered allmulticast mode [ 430.429257][T15657] bond5: entered allmulticast mode [ 431.243441][T15687] syzkaller0: entered promiscuous mode [ 431.269679][T15687] syzkaller0: entered allmulticast mode [ 431.289030][T15692] __nla_validate_parse: 7 callbacks suppressed [ 431.289045][T15692] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2214'. [ 431.375963][T15700] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2216'. [ 431.486067][T15701] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2216'. [ 431.867078][T15714] tipc: Enabled bearer , priority 0 [ 431.900744][T15713] tipc: Resetting bearer [ 431.919519][T15712] tipc: Disabling bearer [ 432.116084][T15716] netlink: 'syz.2.2221': attribute type 1 has an invalid length. [ 432.176576][T15719] netlink: 'syz.0.2222': attribute type 11 has an invalid length. [ 432.669996][T15744] netlink: 'syz.4.2231': attribute type 21 has an invalid length. [ 432.696556][T15744] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2231'. [ 432.985268][T15769] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2238'. [ 433.048660][T15767] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2236'. [ 433.271467][T15783] netlink: 'syz.0.2241': attribute type 13 has an invalid length. [ 433.323112][T15783] netlink: 'syz.0.2241': attribute type 12 has an invalid length. [ 433.345990][T15786] xt_HMARK: spi-set and port-set can't be combined [ 433.510196][T15797] bond10: option ad_select: invalid value (34) [ 433.518907][T15797] bond10 (unregistering): Released all slaves [ 433.700795][T15808] netlink: zone id is out of range [ 433.711997][T15808] netlink: zone id is out of range [ 433.731409][T15808] netlink: zone id is out of range [ 433.743934][T15808] netlink: zone id is out of range [ 433.755602][T15808] netlink: zone id is out of range [ 433.776867][T15808] netlink: zone id is out of range [ 433.805475][T15808] netlink: zone id is out of range [ 433.819870][T15808] netlink: zone id is out of range [ 433.832947][T15808] netlink: zone id is out of range [ 433.845603][T15808] netlink: zone id is out of range [ 434.114183][T15821] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2253'. [ 434.364070][T15830] IPVS: Scheduler module ip_vs_sip not found [ 434.561371][T15834] netlink: 'syz.2.2257': attribute type 1 has an invalid length. [ 434.581617][T15843] netlink: 'syz.0.2260': attribute type 1 has an invalid length. [ 434.594309][T15843] netlink: 'syz.0.2260': attribute type 2 has an invalid length. [ 434.608561][T15843] netlink: 'syz.0.2260': attribute type 1 has an invalid length. [ 434.616480][T15843] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2260'. [ 434.815485][T15853] block nbd3: Unsupported socket: should be TCP or UNIX. [ 434.841535][T15853] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.2264'. [ 434.881760][T15853] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2264'. [ 435.207214][T15869] syzkaller0: entered promiscuous mode [ 435.213011][T15869] syzkaller0: entered allmulticast mode [ 437.599859][T15879] veth1_vlan (unregistering): left allmulticast mode [ 437.770049][T15879] tipc: Disabling bearer [ 437.969099][T15906] tipc: Enabled bearer , priority 0 [ 438.002966][T15904] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 438.051028][T15914] __nla_validate_parse: 6 callbacks suppressed [ 438.051048][T15914] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2277'. [ 438.086415][T15909] syzkaller0: entered promiscuous mode [ 438.097968][T15909] syzkaller0: entered allmulticast mode [ 438.145028][T15904] tipc: Enabling of bearer rejected, already enabled [ 438.168565][T15921] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2280'. [ 438.191119][T15903] tipc: Resetting bearer [ 438.360078][T15903] tipc: Disabling bearer [ 438.454887][T15939] smc: adding net device wg2 with user defined pnetid S [ 438.468862][T15947] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 438.493656][T15939] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2282'. [ 438.568794][T15949] Cannot find del_set index 49151 as target [ 438.721928][T15957] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2291'. [ 438.791618][ T29] audit: type=1804 audit(1780480425.759:5): pid=15957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2291" name="/newroot/478/cgroup.controllers" dev="tmpfs" ino=2479 res=1 errno=0 [ 438.874334][ T29] audit: type=1800 audit(1780480425.769:6): pid=15957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2291" name="cgroup.controllers" dev="tmpfs" ino=2479 res=0 errno=0 [ 438.951041][ T29] audit: type=1804 audit(1780480425.839:7): pid=15957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.2291" name="/newroot/478/cgroup.controllers" dev="tmpfs" ino=2479 res=1 errno=0 [ 439.018819][T15975] netlink: 'syz.4.2288': attribute type 1 has an invalid length. [ 439.284850][T15975] 8021q: adding VLAN 0 to HW filter on device bond11 [ 439.301460][T15980] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2295'. [ 439.666663][T16003] netlink: 200 bytes leftover after parsing attributes in process `syz.4.2300'. [ 439.889877][T16018] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2305'. [ 440.033492][T16027] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2308'. [ 440.074674][T16029] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2309'. [ 440.336825][T16047] Bluetooth: MGMT ver 1.23 [ 440.338845][T16006] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2302'. [ 440.911134][T16079] bond7: option mode: invalid value (66) [ 441.019677][T16079] bond7 (unregistering): Released all slaves [ 441.079824][T16081] net_ratelimit: 166 callbacks suppressed [ 441.079841][T16081] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 441.204423][T16104] xt_TPROXY: Can be used only with -p tcp or -p udp [ 441.285566][T16098] bond13: entered promiscuous mode [ 441.291475][T16098] bond13: entered allmulticast mode [ 441.326024][T16106] bridge10: entered promiscuous mode [ 441.338572][T16106] bridge10: entered allmulticast mode [ 441.368415][T16110] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 441.509034][T16115] bond5: left allmulticast mode [ 441.583964][T16119] nbd: must specify a size in bytes for the device [ 441.739180][T16128] netlink: 'syz.2.2330': attribute type 1 has an invalid length. [ 441.770710][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806798ac00: rx timeout, send abort [ 441.955594][ T8572] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 441.972736][ T8572] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 441.984793][ T8572] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 442.003136][ T8572] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 442.032859][T16140] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 442.042675][T16140] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 442.270841][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806798a000: rx timeout, send abort [ 442.279239][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806798ac00: abort rx timeout. Force session deactivation [ 442.561991][T16160] netlink: 'syz.1.2337': attribute type 1 has an invalid length. [ 442.744523][T16158] netlink: 'syz.0.2336': attribute type 16 has an invalid length. [ 442.779155][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806798a000: abort rx timeout. Force session deactivation [ 442.780984][T16158] netlink: 'syz.0.2336': attribute type 3 has an invalid length. [ 442.812807][T16160] 8021q: adding VLAN 0 to HW filter on device bond10 [ 443.117812][T16173] xt_CT: You must specify a L4 protocol and not use inversions on it [ 443.200035][T16165] bond9: entered allmulticast mode [ 443.334045][T16178] netlink: 'syz.4.2340': attribute type 1 has an invalid length. [ 443.344966][T16176] bond9: entered promiscuous mode [ 443.350623][T16176] macvlan1: entered promiscuous mode [ 443.356498][T16176] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 443.461012][T16185] tipc: Can't bind to reserved service type 1 [ 443.483569][T16178] bond12: entered promiscuous mode [ 443.504274][T16178] 8021q: adding VLAN 0 to HW filter on device bond12 [ 443.753939][T16202] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 443.893692][T16199] __nla_validate_parse: 23 callbacks suppressed [ 443.893710][T16199] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2346'. [ 444.404250][T16214] syzkaller0: entered promiscuous mode [ 444.411679][T16214] syzkaller0: entered allmulticast mode [ 445.110846][T16239] dvmrp5: entered allmulticast mode [ 445.141221][T16240] netlink: 'syz.1.2354': attribute type 10 has an invalid length. [ 445.158755][T16240] geneve1: entered promiscuous mode [ 445.181540][T16240] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 445.212145][ T135] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 445.236247][ T135] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 445.244677][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 445.316774][ T135] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 445.352327][ T135] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 445.841964][T16270] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2361'. [ 446.135541][T16276] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2362'. [ 446.186450][T16276] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2362'. [ 446.227768][T16276] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2362'. [ 446.253701][T16276] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2362'. [ 446.648213][T16302] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 446.694871][T16310] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2373'. [ 446.715158][T16313] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 446.730178][T16313] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 446.760109][T16314] bridge0: port 1(ipvlan0) entered blocking state [ 446.767649][T16314] bridge0: port 1(ipvlan0) entered disabled state [ 446.776163][T16314] ipvlan0: entered allmulticast mode [ 446.783581][T16314] bridge0: entered allmulticast mode [ 446.809781][T16314] ipvlan0: left allmulticast mode [ 446.819286][T16314] bridge0: left allmulticast mode [ 446.825712][T16317] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2376'. [ 446.845741][T16319] netlink: 'syz.1.2377': attribute type 1 has an invalid length. [ 446.855268][T16319] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 447.653799][T16359] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2386'. [ 447.752090][T16352] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2384'. [ 447.865648][T16359] bond10: entered promiscuous mode [ 447.882590][T16359] bond10: entered allmulticast mode [ 447.918145][T16359] 8021q: adding VLAN 0 to HW filter on device bond10 [ 448.065177][T16373] erspan0: entered promiscuous mode [ 448.403727][T16391] tipc: Started in network mode [ 448.435389][T16391] tipc: Node identity d66b98ed220b, cluster identity 4711 [ 448.486063][T16391] tipc: Enabled bearer , priority 0 [ 448.507811][T16396] syzkaller0: entered promiscuous mode [ 448.548169][T16396] syzkaller0: entered allmulticast mode [ 448.630956][T16388] syzkaller1: entered promiscuous mode [ 448.654078][T16388] syzkaller1: entered allmulticast mode [ 448.684191][T16388] tipc: Resetting bearer [ 448.698333][T16401] netlink: 'syz.4.2396': attribute type 6 has an invalid length. [ 448.727128][T16401] netlink: 'syz.4.2396': attribute type 6 has an invalid length. [ 449.201624][T16387] tipc: Resetting bearer [ 449.276747][T16416] __nla_validate_parse: 3 callbacks suppressed [ 449.276764][T16416] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2399'. [ 449.299123][T16387] tipc: Disabling bearer [ 449.522874][T16431] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2402'. [ 451.804045][T16445] netlink: 'syz.3.2405': attribute type 1 has an invalid length. [ 451.816195][T16445] netlink: 'syz.3.2405': attribute type 2 has an invalid length. [ 451.837832][T16445] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2405'. [ 451.919842][T16448] netlink: 'syz.4.2406': attribute type 1 has an invalid length. [ 452.003519][T16456] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2406'. [ 452.022171][T16456] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2406'. [ 452.330925][T16465] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2411'. [ 452.366473][T16452] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2409'. [ 452.404746][ T5648] block nbd3: Receive control failed (result -1) [ 452.862669][T16478] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2414'. [ 452.913971][T16480] tipc: Enabled bearer , priority 0 [ 453.000204][T16488] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2418'. [ 453.060242][T16493] netlink: 'syz.1.2419': attribute type 2 has an invalid length. [ 453.068733][T16493] netlink: 'syz.1.2419': attribute type 1 has an invalid length. [ 453.076841][T16493] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2419'. [ 453.435832][T16507] netlink: 'syz.4.2423': attribute type 1 has an invalid length. [ 453.557969][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 453.806263][T16480] tipc: Disabling bearer [ 453.946077][T16525] netlink: 'syz.4.2426': attribute type 1 has an invalid length. [ 454.020360][T16525] geneve3: entered promiscuous mode [ 454.366797][T16552] __nla_validate_parse: 3 callbacks suppressed [ 454.366816][T16552] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2437'. [ 454.399858][T16552] vlan0: entered promiscuous mode [ 454.413146][T16552] gretap0: entered promiscuous mode [ 454.896728][T16583] bridge0: port 1(erspan0) entered blocking state [ 454.907876][T16583] bridge0: port 1(erspan0) entered disabled state [ 454.916217][T16583] erspan0: entered allmulticast mode [ 454.927858][T16583] erspan0: entered promiscuous mode [ 454.941512][T16583] bridge0: port 1(erspan0) entered blocking state [ 454.948179][T16583] bridge0: port 1(erspan0) entered forwarding state [ 454.961212][T16585] erspan0: left allmulticast mode [ 454.967715][T16585] erspan0: left promiscuous mode [ 454.973143][T16585] bridge0: port 1(erspan0) entered disabled state [ 455.149376][T16590] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2442'. [ 455.285866][T16596] netlink: 'syz.3.2443': attribute type 49 has an invalid length. [ 455.309965][T16597] batadv0: entered promiscuous mode [ 455.318143][T16597] macsec1: entered promiscuous mode [ 455.323564][T16600] netlink: 'syz.0.2446': attribute type 8 has an invalid length. [ 455.324046][T16597] macsec1: entered allmulticast mode [ 455.337918][T16597] batadv0: entered allmulticast mode [ 455.344902][T16597] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 455.355127][T16597] batadv0: left allmulticast mode [ 455.361619][T16597] batadv0: left promiscuous mode [ 455.400033][T16600] bond11: (slave lo): Releasing backup interface [ 455.414382][T16600] bond11: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 455.450524][T16600] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 455.642371][T16615] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2450'. [ 455.651561][T16615] netlink: 47 bytes leftover after parsing attributes in process `syz.4.2450'. [ 455.664320][T16615] netlink: 'syz.4.2450': attribute type 6 has an invalid length. [ 456.007850][T16598] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 456.144606][T16645] xt_hashlimit: size too large, truncated to 1048576 [ 456.206635][T16650] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2456'. [ 456.423155][T16662] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2458'. [ 456.475520][T16664] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.2459'. [ 456.507369][T16662] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2458'. [ 456.640699][T16678] FAULT_INJECTION: forcing a failure. [ 456.640699][T16678] name failslab, interval 1, probability 0, space 0, times 0 [ 456.678931][T16678] CPU: 0 UID: 0 PID: 16678 Comm: syz.1.2461 Not tainted syzkaller #0 PREEMPT(full) [ 456.678954][T16678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 456.678968][T16678] Call Trace: [ 456.678978][T16678] [ 456.678986][T16678] dump_stack_lvl+0xe8/0x150 [ 456.679014][T16678] should_fail_ex+0x412/0x560 [ 456.679040][T16678] should_failslab+0xa8/0x100 [ 456.679057][T16678] ? alloc_empty_file+0x5b/0x1d0 [ 456.679077][T16678] kmem_cache_alloc_noprof+0x87/0x650 [ 456.679106][T16678] alloc_empty_file+0x5b/0x1d0 [ 456.679125][T16678] alloc_file_pseudo+0x155/0x240 [ 456.679146][T16678] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 456.679165][T16678] ? alloc_fd+0x64b/0x6c0 [ 456.679195][T16678] anon_inode_getfd+0xc8/0x1f0 [ 456.679245][T16678] map_create+0x1247/0x16a0 [ 456.679281][T16678] ? security_bpf+0x7e/0x2d0 [ 456.679384][T16678] __sys_bpf+0x6e1/0x950 [ 456.679408][T16678] ? __pfx___sys_bpf+0x10/0x10 [ 456.679445][T16678] ? ksys_write+0x242/0x270 [ 456.679468][T16678] ? __pfx_ksys_write+0x10/0x10 [ 456.679493][T16678] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.679512][T16678] __x64_sys_bpf+0x7c/0x90 [ 456.679532][T16678] do_syscall_64+0x174/0x580 [ 456.679552][T16678] ? trace_irq_disable+0x3b/0x140 [ 456.679573][T16678] ? clear_bhb_loop+0x40/0x90 [ 456.679593][T16678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.679608][T16678] RIP: 0033:0x7fe00619ce59 [ 456.679624][T16678] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 456.679638][T16678] RSP: 002b:00007fe0043f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 456.679655][T16678] RAX: ffffffffffffffda RBX: 00007fe006415fa0 RCX: 00007fe00619ce59 [ 456.679666][T16678] RDX: 0000000000000048 RSI: 0000200000000000 RDI: 0000000000000000 [ 456.679675][T16678] RBP: 00007fe0043f6090 R08: 0000000000000000 R09: 0000000000000000 [ 456.679685][T16678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 456.679694][T16678] R13: 00007fe006416038 R14: 00007fe006415fa0 R15: 00007ffd98274d18 [ 456.679729][T16678] [ 457.274054][T16685] ip6t_srh: unknown srh match flags 4000 [ 457.719258][T16722] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2468'. [ 457.750561][T16723] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2467'. [ 457.784959][T16718] syzkaller0: entered promiscuous mode [ 457.793307][T16718] syzkaller0: entered allmulticast mode [ 457.878807][T16727] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 48 [ 457.981494][T16735] validate_nla: 2 callbacks suppressed [ 457.981511][T16735] netlink: 'syz.4.2470': attribute type 1 has an invalid length. [ 460.262392][T16747] __nla_validate_parse: 2 callbacks suppressed [ 460.262410][T16747] netlink: 260 bytes leftover after parsing attributes in process `syz.0.2472'. [ 460.287291][T16749] FAULT_INJECTION: forcing a failure. [ 460.287291][T16749] name failslab, interval 1, probability 0, space 0, times 0 [ 460.308683][T16749] CPU: 1 UID: 0 PID: 16749 Comm: syz.4.2473 Not tainted syzkaller #0 PREEMPT(full) [ 460.308705][T16749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 460.308715][T16749] Call Trace: [ 460.308722][T16749] [ 460.308729][T16749] dump_stack_lvl+0xe8/0x150 [ 460.308754][T16749] should_fail_ex+0x412/0x560 [ 460.308774][T16749] ? __d_alloc+0x37/0x6f0 [ 460.308795][T16749] should_failslab+0xa8/0x100 [ 460.308813][T16749] kmem_cache_alloc_lru_noprof+0x87/0x640 [ 460.308833][T16749] ? __lock_acquire+0x6b5/0x2cf0 [ 460.308859][T16749] __d_alloc+0x37/0x6f0 [ 460.308884][T16749] d_alloc_pseudo+0x21/0xc0 [ 460.308905][T16749] alloc_file_pseudo+0xdd/0x240 [ 460.308927][T16749] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 460.308946][T16749] ? alloc_fd+0x64b/0x6c0 [ 460.308975][T16749] anon_inode_getfd+0xc8/0x1f0 [ 460.308995][T16749] map_create+0x1247/0x16a0 [ 460.309020][T16749] ? security_bpf+0x7e/0x2d0 [ 460.309043][T16749] __sys_bpf+0x6e1/0x950 [ 460.309066][T16749] ? __pfx___sys_bpf+0x10/0x10 [ 460.309103][T16749] ? ksys_write+0x242/0x270 [ 460.309126][T16749] ? __pfx_ksys_write+0x10/0x10 [ 460.309151][T16749] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.309168][T16749] __x64_sys_bpf+0x7c/0x90 [ 460.309189][T16749] do_syscall_64+0x174/0x580 [ 460.309206][T16749] ? trace_irq_disable+0x3b/0x140 [ 460.309228][T16749] ? clear_bhb_loop+0x40/0x90 [ 460.309247][T16749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.309262][T16749] RIP: 0033:0x7f9f3d59ce59 [ 460.309278][T16749] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 460.309291][T16749] RSP: 002b:00007f9f3e3d2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 460.309308][T16749] RAX: ffffffffffffffda RBX: 00007f9f3d815fa0 RCX: 00007f9f3d59ce59 [ 460.309319][T16749] RDX: 0000000000000048 RSI: 0000200000000000 RDI: 0000000000000000 [ 460.309329][T16749] RBP: 00007f9f3e3d2090 R08: 0000000000000000 R09: 0000000000000000 [ 460.309339][T16749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 460.309348][T16749] R13: 00007f9f3d816038 R14: 00007f9f3d815fa0 R15: 00007ffc2b2451c8 [ 460.309376][T16749] [ 460.603904][T16758] netlink: 'syz.0.2476': attribute type 1 has an invalid length. [ 460.772789][T16766] netlink: 'syz.0.2478': attribute type 5 has an invalid length. [ 460.901282][T16774] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2479'. [ 460.944172][T16776] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 460.985337][T16776] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 461.011996][T16780] netlink: 'syz.2.2479': attribute type 1 has an invalid length. [ 461.029657][T16776] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 461.070968][T16776] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 461.281322][ T8579] smbdirect: ib_dev[syz2] removed [ 461.309181][T16799] batadv0: entered promiscuous mode [ 461.324437][T16799] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 461.359314][T16807] FAULT_INJECTION: forcing a failure. [ 461.359314][T16807] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 461.378644][T16807] CPU: 1 UID: 0 PID: 16807 Comm: syz.4.2487 Not tainted syzkaller #0 PREEMPT(full) [ 461.378667][T16807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 461.378677][T16807] Call Trace: [ 461.378684][T16807] [ 461.378691][T16807] dump_stack_lvl+0xe8/0x150 [ 461.378715][T16807] should_fail_ex+0x412/0x560 [ 461.378738][T16807] _copy_to_user+0x31/0xb0 [ 461.378844][T16807] simple_read_from_buffer+0xe1/0x170 [ 461.378867][T16807] proc_fail_nth_read+0x1bb/0x230 [ 461.378911][T16807] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 461.378934][T16807] ? rw_verify_area+0x2a6/0x4d0 [ 461.378955][T16807] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 461.378975][T16807] vfs_read+0x20c/0xa70 [ 461.379001][T16807] ? __pfx___mutex_lock+0x10/0x10 [ 461.379056][T16807] ? __pfx_vfs_read+0x10/0x10 [ 461.379077][T16807] ? __fget_files+0x2a/0x420 [ 461.379111][T16807] ? __fget_files+0x3a0/0x420 [ 461.379129][T16807] ? __fget_files+0x2a/0x420 [ 461.379156][T16807] ksys_read+0x150/0x270 [ 461.379179][T16807] ? __pfx_ksys_read+0x10/0x10 [ 461.379215][T16807] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.379234][T16807] do_syscall_64+0x174/0x580 [ 461.379250][T16807] ? trace_irq_disable+0x3b/0x140 [ 461.379271][T16807] ? clear_bhb_loop+0x40/0x90 [ 461.379291][T16807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.379307][T16807] RIP: 0033:0x7f9f3d55d68e [ 461.379323][T16807] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 461.379342][T16807] RSP: 002b:00007f9f3e3d1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 461.379359][T16807] RAX: ffffffffffffffda RBX: 00007f9f3e3d26c0 RCX: 00007f9f3d55d68e [ 461.379371][T16807] RDX: 000000000000000f RSI: 00007f9f3e3d20a0 RDI: 0000000000000003 [ 461.379380][T16807] RBP: 00007f9f3e3d2090 R08: 0000000000000000 R09: 0000000000000000 [ 461.379389][T16807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 461.379426][T16807] R13: 00007f9f3d816038 R14: 00007f9f3d815fa0 R15: 00007ffc2b2451c8 [ 461.379459][T16807] [ 461.843169][T16818] netlink: 'syz.2.2486': attribute type 1 has an invalid length. [ 461.870339][T16820] netlink: 'syz.0.2491': attribute type 2 has an invalid length. [ 461.888773][T16820] netlink: 'syz.0.2491': attribute type 1 has an invalid length. [ 461.932212][T16820] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2491'. [ 461.951961][T16823] netlink: 'syz.1.2492': attribute type 1 has an invalid length. [ 462.085238][T16834] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2493'. [ 462.119987][T16837] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2495'. [ 462.172725][T16818] 8021q: adding VLAN 0 to HW filter on device bond11 [ 462.215126][T16826] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2493'. [ 462.260708][T16837] erspan0: entered promiscuous mode [ 462.876053][T16870] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2498'. [ 462.914903][T16870] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2498'. [ 463.076488][T16879] block nbd1: NBD_DISCONNECT [ 463.117158][T16879] block nbd1: Send disconnect failed -104 [ 463.126033][T16879] block nbd1: shutting down sockets [ 463.718825][T16899] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2510'. [ 463.964117][T16905] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2511'. [ 465.433169][T16944] __nla_validate_parse: 2 callbacks suppressed [ 465.433186][T16944] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2521'. [ 465.670830][T16948] netlink: 260 bytes leftover after parsing attributes in process `syz.2.2523'. [ 465.937197][T16954] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2524'. [ 466.039403][ T5768] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.413392][T16961] : renamed from veth0_to_bond [ 466.431108][T16962] netlink: 'syz.3.2526': attribute type 1 has an invalid length. [ 466.502448][T16962] bond8: entered promiscuous mode [ 466.508183][T16962] 8021q: adding VLAN 0 to HW filter on device bond8 [ 466.737335][T16961] bond8: (slave veth17): making interface the new active one [ 466.777089][T16961] veth17: entered promiscuous mode [ 466.812786][T16961] bond8: (slave veth17): Enslaving as an active interface with an up link [ 466.881764][T16966] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2527'. [ 467.078909][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.366184][T16982] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 467.425361][ T8579] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 467.453618][ T8579] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.663322][ T7477] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 467.682200][ T7477] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.784346][ T7477] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 467.807681][ T7477] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.904579][ T7477] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 467.931860][ T7477] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.955037][T16996] netlink: 260 bytes leftover after parsing attributes in process `syz.4.2534'. [ 468.117514][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.278794][ T8136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.300222][T17003] netlink: 'syz.4.2537': attribute type 4 has an invalid length. [ 468.338484][T17002] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2537'. [ 468.368893][T17003] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2537'. [ 468.868492][T17028] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2544'. [ 468.919635][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.990688][T17034] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2544'. [ 469.024067][T17038] netlink: 260 bytes leftover after parsing attributes in process `syz.1.2547'. [ 469.153462][T17043] 8021q: adding VLAN 0 to HW filter on device bond14 [ 469.157639][T17028] Cannot find add_set index 4 as target [ 469.238802][T17043] 8021q: adding VLAN 0 to HW filter on device bond14 [ 469.250074][T17043] bond14: (slave vti1): The slave device specified does not support setting the MAC address [ 469.272782][T17049] netlink: 'syz.1.2549': attribute type 11 has an invalid length. [ 469.286174][T17043] bond14: (slave vti1): Error -95 calling set_mac_address [ 469.372137][T17046] bond14: (slave dummy0): Error -99 calling set_mac_address [ 469.532492][T17064] xt_hashlimit: size too large, truncated to 1048576 [ 469.798279][T17087] tipc: New replicast peer: 255.255.255.255 [ 469.822513][T17087] tipc: Enabled bearer , priority 10 [ 469.959235][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.483766][T17114] ip6gre2: entered promiscuous mode [ 470.495367][T17114] ip6gre2: entered allmulticast mode [ 470.729070][T17125] __nla_validate_parse: 5 callbacks suppressed [ 470.729087][T17125] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2571'. [ 470.878840][T17128] xt_CT: No such helper "snmp_trap" [ 470.955925][T17134] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 470.995602][T17134] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 471.019120][ T5768] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.033495][T17134] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 471.055521][T17134] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 471.112478][T17136] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2574'. [ 471.174027][T17147] nbd: must specify at least one socket [ 471.186369][T17148] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2578'. [ 471.313570][T17151] syz_tun: left promiscuous mode [ 471.321610][ T8136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.341562][T17151] 8021q: adding VLAN 0 to HW filter on device bond0 [ 471.353631][T17151] 8021q: adding VLAN 0 to HW filter on device team0 [ 471.375275][T17151] batadv0: left promiscuous mode [ 471.386505][T17151] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 471.546281][T17151] batadv_slave_1: left promiscuous mode [ 471.580043][T17151] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 471.903682][T17180] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2586'. [ 472.037955][ T5768] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.118716][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.397198][T17204] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2590'. [ 472.416714][T17203] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2590'. [ 473.077284][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.323158][T17237] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 473.410529][T17232] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2601'. [ 473.480374][T17232] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2601'. [ 474.117252][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.138903][T17269] sch_tbf: peakrate 67108864 is lower than or equals to rate 4294966145 ! [ 474.251452][T17270] bridge7: entered promiscuous mode [ 474.256804][T17270] bridge7: entered allmulticast mode [ 474.357775][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.432660][T17274] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 474.564264][T17276] sctp: [Deprecated]: syz.4.2612 (pid 17276) Use of int in max_burst socket option. [ 474.564264][T17276] Use struct sctp_assoc_value instead [ 474.628390][T17278] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2613'. [ 474.713834][T17274] team0: Device xfrm0 is of different type [ 474.748186][T17282] tipc: Enabled bearer , priority 0 [ 474.838180][T17284] netlink: 'syz.0.2614': attribute type 1 has an invalid length. [ 474.846482][T17284] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2614'. [ 475.158418][ T5365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.339510][T17309] hsr0: entered promiscuous mode [ 475.776521][T17325] pimreg9: entered allmulticast mode [ 475.867008][ T9] tipc: Node number set to 3640879886 [ 475.960426][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.353077][T17347] tipc: Enabling of bearer rejected, failed to enable media [ 476.435418][T17350] __nla_validate_parse: 1 callbacks suppressed [ 476.435437][T17350] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2630'. [ 476.472714][T17350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2630'. [ 476.483526][T17350] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2630'. [ 476.781878][T17359] netlink: 'syz.0.2634': attribute type 3 has an invalid length. [ 476.997958][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.397736][ T8136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.040618][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.077831][ T5365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.118235][ T5365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.438369][ T8136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.157850][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.720262][ T8136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.197313][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.998154][ T5365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.477789][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.037221][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.077332][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.127351][ T5365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.517258][ T8136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.157339][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.207901][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.237516][ T5365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.557250][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.038757][ T5365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.080016][ T5365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.319005][ T8136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.541766][T17425] openvswitch: netlink: Unexpected mask (mask=5000040, allowed=1010048) [ 491.777113][T17436] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2651'. [ 491.801703][T17436] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2651'. [ 492.038097][T17446] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2650'. [ 492.118921][T17446] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2650'. [ 492.128240][ T5365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.598946][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.640934][T17466] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2657'. [ 492.734639][T17478] netlink: 'syz.3.2655': attribute type 1 has an invalid length. [ 492.868933][T17484] netlink: 'syz.1.2660': attribute type 10 has an invalid length. [ 492.914703][T17484] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2660'. [ 492.951668][T17478] 8021q: adding VLAN 0 to HW filter on device bond9 [ 492.973509][T17482] bond9: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 492.995252][T17482] bond9: entered allmulticast mode [ 493.005491][T17484] geneve1: left promiscuous mode [ 493.024488][T17484] bond0: (slave geneve1): Releasing backup interface [ 493.051118][T17484] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 493.162093][ T8578] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 493.164527][T17484] netlink: 67 bytes leftover after parsing attributes in process `syz.1.2660'. [ 493.187983][ T8578] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 493.254300][T17495] net_ratelimit: 1 callbacks suppressed [ 493.254317][T17495] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 493.326332][T17503] netlink: 'syz.0.2663': attribute type 10 has an invalid length. [ 493.344573][T17503] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2663'. [ 493.383458][T17484] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 493.413411][ T8578] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 493.445675][ T8578] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 493.934007][T17526] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2668'. [ 494.198958][ T5365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.289498][T17533] netlink: 'syz.4.2669': attribute type 6 has an invalid length. [ 494.317212][T17533] netlink: 'syz.4.2669': attribute type 7 has an invalid length. [ 494.325070][T17533] netlink: 'syz.4.2669': attribute type 8 has an invalid length. [ 494.424805][T17537] syzkaller0: entered promiscuous mode [ 494.436567][T17537] syzkaller0: entered allmulticast mode [ 494.559862][T17540] bond10: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 494.610471][T17543] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2670'. [ 494.648063][T17540] bond10 (unregistering): Released all slaves [ 494.733500][T17537] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 495.250065][ T5365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.663830][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.779672][T17571] tipc: Resetting bearer [ 495.965231][T17594] macsec2: entered promiscuous mode [ 495.978035][T17569] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 496.151334][T17600] x_tables: duplicate entry at hook 1 [ 496.278209][T17584] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.333166][T17600] bond15: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 496.360118][T17600] bond15 (unregistering): Released all slaves [ 496.437396][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 496.925017][T17638] __nla_validate_parse: 39 callbacks suppressed [ 496.925032][T17638] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2689'. [ 496.953771][T17638] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2689'. [ 497.083395][T17582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.328387][T17668] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.338568][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.359476][T17669] xt_nfacct: accounting object `syz0' does not exist [ 497.360590][T17668] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.452717][T17674] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2698'. [ 497.549970][T17677] netlink: 'syz.4.2696': attribute type 1 has an invalid length. [ 497.577338][T17678] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2700'. [ 497.603559][T17678] ip6gre2: entered promiscuous mode [ 497.634736][T17678] ip6gre2: entered allmulticast mode [ 497.801932][T17677] 8021q: adding VLAN 0 to HW filter on device bond14 [ 497.863602][T17678] netlink: 'syz.2.2700': attribute type 6 has an invalid length. [ 497.887614][T17678] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2700'. [ 497.900922][T17686] netlink: 67 bytes leftover after parsing attributes in process `syz.0.2702'. [ 498.083964][T17695] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2703'. [ 498.088443][T17697] siw: device registration error -23 [ 498.112174][T17695] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2703'. [ 498.379497][T17712] netlink: 'syz.1.2709': attribute type 1 has an invalid length. [ 498.677336][ T5733] net_ratelimit: 5 callbacks suppressed [ 498.677354][ T5733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.688380][T17725] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2714'. [ 499.171678][T17582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.186193][T17759] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2718'. [ 499.379738][T17763] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 499.443429][T17773] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.453770][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.481293][T17770] netlink: 'syz.0.2723': attribute type 10 has an invalid length. [ 499.569087][T17770] team0: Port device veth1_to_hsr added [ 500.202484][T17582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.721008][T17827] ip6tnl4: entered allmulticast mode [ 500.837438][T17835] tipc: Enabled bearer , priority 0 [ 500.859377][T17835] syzkaller0: entered promiscuous mode [ 500.871690][T17835] syzkaller0: entered allmulticast mode [ 500.918056][ T8722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.971479][T17846] tipc: Resetting bearer [ 501.005607][T17833] tipc: Resetting bearer [ 501.102141][T17851] netlink: 'syz.0.2740': attribute type 4 has an invalid length. [ 501.209544][T17833] tipc: Disabling bearer [ 501.244577][T17582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.264334][T17855] syzkaller1: entered promiscuous mode [ 501.286514][T17855] syzkaller1: entered allmulticast mode [ 501.719088][ T5740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.956422][T17887] tipc: Enabled bearer , priority 0 [ 501.988972][T17887] __nla_validate_parse: 3 callbacks suppressed [ 501.988990][T17887] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2752'. [ 502.026252][T17889] netlink: 'syz.3.2751': attribute type 1 has an invalid length. [ 502.095374][T17887] tipc: Resetting bearer [ 502.294485][T17582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.475475][T17903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.514239][T17899] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2753'. [ 502.921694][T17929] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2762'. [ 502.969181][T17932] netlink: 'syz.3.2763': attribute type 1 has an invalid length. [ 502.979695][T17929] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2762'. [ 503.006234][T17931] netlink: 'syz.3.2763': attribute type 1 has an invalid length. [ 503.035613][T17932] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 503.039608][T17931] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 503.164100][T17947] netlink: 'syz.4.2762': attribute type 1 has an invalid length. [ 503.755688][T17976] netlink: 'syz.3.2772': attribute type 23 has an invalid length. [ 503.810240][T17976] net_ratelimit: 3 callbacks suppressed [ 503.810258][T17976] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 503.950381][T17989] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:20003 [ 504.123386][T17583] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.254183][T18003] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2779'. [ 504.264270][T18003] veth0_macvtap: left promiscuous mode [ 504.379762][T18012] netlink: 'syz.2.2781': attribute type 1 has an invalid length. [ 504.535493][T18014] bond12: entered promiscuous mode [ 504.552969][T18014] bond12: entered allmulticast mode [ 504.584766][T18014] 8021q: adding VLAN 0 to HW filter on device bond12 [ 504.758278][ T8722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.124151][ T5647] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 505.139157][ T5647] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 505.150111][ T5647] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 505.157487][T17582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.172251][ T5647] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 505.183562][ T5647] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 505.334613][ T5648] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 505.346645][ T5648] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 505.359807][ T5648] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 505.376154][ T5648] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 505.386720][ T5648] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 506.036799][T18064] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2791'. [ 506.122732][T18067] netlink: 200 bytes leftover after parsing attributes in process `syz.2.2791'. [ 506.149811][T18067] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.171385][T18067] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.181604][T18067] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.191025][T18067] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.200107][T17583] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.211266][T18067] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.671896][T18082] IPv6: NLM_F_CREATE should be specified when creating new route [ 506.695637][T18079] bond10: option resend_igmp: invalid value (2878) [ 506.723064][T18079] bond10: option resend_igmp: allowed values 0 - 255 [ 506.763824][T18079] bond10 (unregistering): Released all slaves [ 506.945776][T18086] veth1_to_bond: entered allmulticast mode [ 507.094383][T18091] syzkaller0: entered promiscuous mode [ 507.118806][T18091] syzkaller0: entered allmulticast mode [ 507.451278][T18105] netlink: 496 bytes leftover after parsing attributes in process `syz.3.2800'. [ 507.478610][ T5648] Bluetooth: hci5: command tx timeout [ 507.718377][T18085] veth1_to_bond: left allmulticast mode [ 507.986635][T18033] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.008863][T18033] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.022345][T18033] bridge_slave_0: entered allmulticast mode [ 508.034311][T18033] bridge_slave_0: entered promiscuous mode [ 508.043603][T18033] bridge0: port 2(bridge_slave_1) entered blocking state [ 508.052049][T18033] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.060225][T18033] bridge_slave_1: entered allmulticast mode [ 508.070695][T18033] bridge_slave_1: entered promiscuous mode [ 508.191243][T18033] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 508.240696][T18033] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 508.391284][T18033] team0: Port device team_slave_0 added [ 508.427626][T18033] team0: Port device team_slave_1 added [ 508.542589][T18033] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 508.567437][T18033] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 508.647610][T18033] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 508.700909][T18033] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 508.717228][T18033] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 508.765042][T18145] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2810'. [ 508.776987][T18033] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 508.860239][T18033] hsr_slave_0: entered promiscuous mode [ 508.871739][T18033] hsr_slave_1: entered promiscuous mode [ 508.976496][T18132] netlink: 'syz.4.2806': attribute type 1 has an invalid length. [ 509.054167][T18154] netlink: 'syz.3.2811': attribute type 1 has an invalid length. [ 509.068322][T18132] bond15: entered promiscuous mode [ 509.078299][T18132] 8021q: adding VLAN 0 to HW filter on device bond15 [ 509.144270][T18135] bond15: (slave bridge9): making interface the new active one [ 509.165175][T18135] bridge9: entered promiscuous mode [ 509.179328][T18135] bond15: (slave bridge9): Enslaving as an active interface with an up link [ 509.327761][T17583] net_ratelimit: 258 callbacks suppressed [ 509.327779][T17583] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.560699][ T5648] Bluetooth: hci5: command tx timeout [ 509.593041][T18033] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 44100 - 0 [ 509.752080][T18033] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 44100 - 0 [ 509.805806][T18172] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2815'. [ 509.839888][T18033] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 44100 - 0 [ 510.000937][T18184] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2816'. [ 510.161648][T18191] xt_NFQUEUE: number of total queues is 0 [ 510.357933][T17583] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.518087][ T8722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.700921][T18182] workqueue: Failed to create a rescuer kthread for wq "bond17": -EINTR [ 510.732274][T18033] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 44100 - 0 [ 510.838790][ T5740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.157425][T17582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.637081][ T5648] Bluetooth: hci5: command tx timeout [ 511.797732][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 511.938319][ T7469] bond6 (unregistering): (slave ip6gretap1): Releasing active interface [ 512.197690][T17583] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.270624][ T7469] bond0 (unregistering): Released all slaves [ 512.283232][ T7469] bond1 (unregistering): Released all slaves [ 512.296434][ T7469] bond2 (unregistering): Released all slaves [ 512.323937][ T7469] bond3 (unregistering): Released all slaves [ 512.338942][ T7469] bond4 (unregistering): Released all slaves [ 512.353637][ T7469] bond5 (unregistering): Released all slaves [ 512.375987][ T7469] bond6 (unregistering): Released all slaves [ 512.393368][ T7469] bond7 (unregistering): Released all slaves [ 512.411079][ T7469] bond8 (unregistering): (slave veth0_to_bond): Releasing active interface [ 512.424458][ T7469] bond8 (unregistering): Released all slaves [ 512.440789][ T7469] bond9 (unregistering): Released all slaves [ 512.454668][ T7469] bond10 (unregistering): Released all slaves [ 512.468434][ T7469] bond11 (unregistering): Released all slaves [ 512.612852][ T7469] tipc: Left network mode [ 512.722392][T18172] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 512.879197][T18033] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 512.955498][T18033] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 513.082928][T18213] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2821'. [ 513.113905][T18033] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 513.182430][T18033] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 513.248794][T17582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.408548][T18033] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 513.447578][T18033] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 513.556008][T18033] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 513.571594][T18033] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 513.715984][T18241] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2827'. [ 513.719135][ T5648] Bluetooth: hci5: command tx timeout [ 513.879483][ T5740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.234170][T18261] netlink: 180 bytes leftover after parsing attributes in process `syz.0.2830'. [ 514.279079][T17584] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.378454][T18033] 8021q: adding VLAN 0 to HW filter on device bond0 [ 514.543951][T18033] 8021q: adding VLAN 0 to HW filter on device team0 [ 514.571779][ T8575] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.578975][ T8575] bridge0: port 1(bridge_slave_0) entered forwarding state [ 514.622762][ T8575] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.629974][ T8575] bridge0: port 2(bridge_slave_1) entered forwarding state [ 515.250782][T18289] netlink: 180 bytes leftover after parsing attributes in process `syz.3.2832'. [ 515.326515][T17582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.480330][ T7469] hsr_slave_0: left promiscuous mode [ 515.506072][ T7469] hsr_slave_1: left promiscuous mode [ 516.358054][T17584] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.883546][ T7469] IPVS: stop unused estimator thread 0... [ 516.921291][ T8722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.923420][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 516.986421][T18033] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 517.056275][T18033] veth0_vlan: entered promiscuous mode [ 517.072919][T18033] veth1_vlan: entered promiscuous mode [ 517.103176][T18033] veth0_macvtap: entered promiscuous mode [ 517.113740][T18033] veth1_macvtap: entered promiscuous mode [ 517.120395][T17583] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.142083][T17583] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.167731][T18033] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 517.176664][T17583] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.209453][T17583] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.227691][T18033] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 517.241674][T17583] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.278290][ T7477] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.281665][T17583] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.292112][ T7477] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.334692][ T7477] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.359446][ T7477] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.480808][T18350] ipvlan2: entered promiscuous mode [ 517.701233][T18354] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2839'. [ 517.795758][T18358] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2839'. [ 518.234343][T18381] IPVS: set_ctl: invalid protocol: 29 172.30.0.3:20000 [ 518.239841][T18380] sctp: [Deprecated]: syz.4.2841 (pid 18380) Use of struct sctp_assoc_value in delayed_ack socket option. [ 518.239841][T18380] Use struct sctp_sack_info instead [ 518.373256][T18294] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 518.543423][ T7475] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 518.584973][ T7475] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 518.715336][ T7476] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 518.762006][ T7476] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 518.873754][T18407] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2847'. [ 518.915862][T18405] bridge8: entered promiscuous mode [ 519.811032][T18449] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2857'. [ 520.145944][T18435] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20001 [ 520.161498][T18465] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2858'. [ 520.172393][T18434] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20001 [ 520.281255][T18470] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2862'. [ 520.664870][T18461] 8021q: adding VLAN 0 to HW filter on device bond0 [ 520.689577][T18461] 8021q: adding VLAN 0 to HW filter on device team0 [ 520.838495][T17581] net_ratelimit: 1029 callbacks suppressed [ 520.838514][T17581] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.913880][T18461] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 520.935020][T18461] vlan1: left promiscuous mode [ 520.943483][T18461] geneve1: left promiscuous mode [ 520.975295][T18461] 8021q: adding VLAN 0 to HW filter on device bond3 [ 520.988678][T18461] bond4: left promiscuous mode [ 521.005379][T18461] ip6gre1: left promiscuous mode [ 521.020931][T18461] bond5: left promiscuous mode [ 521.025942][T18461] bridge7: left promiscuous mode [ 521.033400][T18461] bond6: left promiscuous mode [ 521.044965][T18461] 8021q: adding VLAN 0 to HW filter on device bond7 [ 521.058965][T18461] bond8: left promiscuous mode [ 521.063865][T18461] veth17: left promiscuous mode [ 521.073008][T18461] 8021q: adding VLAN 0 to HW filter on device eth0 [ 521.082832][T18461] 8021q: adding VLAN 0 to HW filter on device eth1 [ 521.092266][T18461] 8021q: adding VLAN 0 to HW filter on device eth2 [ 521.103004][T18461] 8021q: adding VLAN 0 to HW filter on device eth3 [ 521.112583][T18461] 8021q: adding VLAN 0 to HW filter on device bond9 [ 521.129465][ T8575] bond2: (slave veth11): link status definitely up, 10000 Mbps full duplex [ 521.138815][ T8575] bond2: (slave veth11): making interface the new active one [ 521.153485][ T8575] bond2: active interface up! [ 521.164788][T18435] syzkaller1: entered promiscuous mode [ 521.171350][T18435] syzkaller1: entered allmulticast mode [ 521.181732][T18471] syzkaller1: entered promiscuous mode [ 521.187532][T18471] syzkaller1: entered allmulticast mode [ 521.195116][T18489] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 521.213868][T18481] syzkaller1: left promiscuous mode [ 521.219540][ T5740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.238162][T18481] syzkaller1: left allmulticast mode [ 521.346759][ T7476] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured! [ 521.444752][T18507] xt_hashlimit: size too large, truncated to 1048576 [ 521.879296][T17583] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.995447][T18521] xfrm0: entered allmulticast mode [ 522.039477][ T5740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.049666][T18521] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 522.126556][T18525] ÿ: renamed from bond_slave_0 [ 522.234839][T18530] macsec1: entered promiscuous mode [ 522.478780][T18542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.488209][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.629322][T18551] netlink: 'syz.3.2880': attribute type 1 has an invalid length. [ 522.644791][T18550] netlink: 'syz.3.2880': attribute type 1 has an invalid length. [ 522.689220][T18552] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2881'. [ 522.735046][T18561] sctp: [Deprecated]: syz.1.2883 (pid 18561) Use of int in max_burst socket option deprecated. [ 522.735046][T18561] Use struct sctp_assoc_value instead [ 522.871347][T18561] netlink: 'syz.1.2883': attribute type 1 has an invalid length. [ 522.918269][T17583] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.928791][T18561] netlink: 'syz.1.2883': attribute type 2 has an invalid length. [ 522.997754][ T5740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.291051][T18596] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.2887'. [ 525.637179][ C0] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured! [ 525.900394][T18569] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 526.039182][T17581] net_ratelimit: 2 callbacks suppressed [ 526.039199][T17581] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.052882][T17581] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.182268][T18613] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2891'. [ 527.077446][T17582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.161680][T17581] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.173616][ T135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.183781][T17581] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.193758][T17583] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.280593][T17581] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.079915][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.319681][T17581] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.378417][T18616] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2893'. [ 531.405257][T18616] netlink: 'syz.1.2893': attribute type 30 has an invalid length. [ 531.413202][T17583] net_ratelimit: 2 callbacks suppressed [ 531.413219][T17583] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.474142][T18626] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2893'. [ 531.513288][T18626] netlink: 'syz.1.2893': attribute type 30 has an invalid length. [ 531.562165][T18635] netlink: 'syz.3.2895': attribute type 1 has an invalid length. [ 531.803734][T18649] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2898'. [ 531.943297][T18622] tipc: Resetting bearer [ 532.124613][ T8722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.277832][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 532.450433][T17583] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.600376][T18622] vlan1: left allmulticast mode [ 532.608220][T18622] geneve1: left allmulticast mode [ 532.647490][T18622] ip6erspan0: left allmulticast mode [ 532.760970][T18622] bond3: left allmulticast mode [ 532.830083][T18622] ip6gre1: left allmulticast mode [ 532.976443][T18622] bond9: left allmulticast mode [ 533.026248][T18621] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 533.033817][T18635] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 533.074338][T18640] gretap2: entered allmulticast mode [ 533.207804][ T7475] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 533.226881][ T5760] syz0: Port: 1 Link DOWN [ 533.274610][ T7475] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.327030][ T7475] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 533.361728][ T7475] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.404732][ T7475] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 533.463759][ T7475] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.482219][T17583] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.519659][ T7475] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 533.578349][ T7475] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.637212][ T7475] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 533.685624][ T7475] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 533.723795][T18692] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2905'. [ 533.758931][ T7477] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 533.790132][ T7477] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 534.017441][T18706] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2908'. [ 534.094133][T18706] ip6gre3: entered promiscuous mode [ 534.128122][T18706] ip6gre3: entered allmulticast mode [ 534.138529][ T7475] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 534.170321][ T5760] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 534.181869][ T7475] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 534.257197][ T5760] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 534.437882][ T5760] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 534.448986][T18730] netlink: 'syz.4.2913': attribute type 1 has an invalid length. [ 534.541338][T17583] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.575384][T18730] 8021q: adding VLAN 0 to HW filter on device bond16 [ 534.911292][T18756] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2919'. [ 535.158586][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.253925][ T29] audit: type=1804 audit(1780480522.219:8): pid=18774 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2927" name="/newroot/564/memory.events" dev="tmpfs" ino=2910 res=1 errno=0 [ 535.294238][T18778] xt_bpf: check failed: parse error [ 535.306765][ T29] audit: type=1800 audit(1780480522.219:9): pid=18774 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2927" name="memory.events" dev="tmpfs" ino=2910 res=0 errno=0 [ 535.437480][T18785] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2930'. [ 535.457228][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.457736][T18782] netlink: 'syz.4.2928': attribute type 5 has an invalid length. [ 535.474836][T18781] netlink: 'syz.4.2928': attribute type 5 has an invalid length. [ 535.532204][T18789] netlink: 'syz.2.2931': attribute type 1 has an invalid length. [ 535.572180][T17583] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.600723][T18789] 8021q: adding VLAN 0 to HW filter on device bond13 [ 535.621520][T18791] bond13: entered allmulticast mode [ 535.637791][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.740201][T18789] bond13: (slave ip6gretap1): making interface the new active one [ 535.754966][T18796] netlink: 'syz.1.2933': attribute type 1 has an invalid length. [ 535.781915][T18789] ip6gretap1: entered allmulticast mode [ 535.802906][T18789] bond13: (slave ip6gretap1): Enslaving as an active interface with an up link [ 535.842925][T18803] syz.0.2935: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 535.914026][T18803] CPU: 1 UID: 0 PID: 18803 Comm: syz.0.2935 Not tainted syzkaller #0 PREEMPT(full) [ 535.914052][T18803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 535.914063][T18803] Call Trace: [ 535.914071][T18803] [ 535.914079][T18803] dump_stack_lvl+0xe8/0x150 [ 535.914106][T18803] warn_alloc+0x249/0x340 [ 535.914131][T18803] ? stack_trace_save+0xa9/0x100 [ 535.914159][T18803] ? __pfx_warn_alloc+0x10/0x10 [ 535.914188][T18803] ? kasan_save_track+0x4f/0x80 [ 535.914208][T18803] ? kasan_save_track+0x3e/0x80 [ 535.914226][T18803] ? __kasan_kmalloc+0x93/0xb0 [ 535.914246][T18803] ? __kmalloc_cache_noprof+0x31c/0x660 [ 535.914265][T18803] ? xskq_create+0x56/0x170 [ 535.914286][T18803] ? xsk_setsockopt+0x54c/0x990 [ 535.914304][T18803] ? do_sock_setsockopt+0x17c/0x1b0 [ 535.914319][T18803] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 535.914333][T18803] ? do_syscall_64+0x174/0x580 [ 535.914354][T18803] __vmalloc_node_range_noprof+0x132/0x1750 [ 535.914409][T18803] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 535.914437][T18803] ? __kasan_kmalloc+0x93/0xb0 [ 535.914465][T18803] vmalloc_user_noprof+0xad/0xe0 [ 535.914484][T18803] ? xskq_create+0xbf/0x170 [ 535.914506][T18803] xskq_create+0xbf/0x170 [ 535.914529][T18803] xsk_init_queue+0x8a/0xe0 [ 535.914553][T18803] xsk_setsockopt+0x54c/0x990 [ 535.914577][T18803] ? __pfx_xsk_setsockopt+0x10/0x10 [ 535.914599][T18803] ? __pfx_aa_sk_perm+0x10/0x10 [ 535.914625][T18803] ? aa_sock_opt_perm+0xff/0x1a0 [ 535.914650][T18803] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 535.914673][T18803] ? __pfx_xsk_setsockopt+0x10/0x10 [ 535.914697][T18803] do_sock_setsockopt+0x17c/0x1b0 [ 535.914729][T18803] __x64_sys_setsockopt+0x13d/0x1b0 [ 535.914750][T18803] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.914769][T18803] do_syscall_64+0x174/0x580 [ 535.914785][T18803] ? trace_irq_disable+0x3b/0x140 [ 535.914807][T18803] ? clear_bhb_loop+0x40/0x90 [ 535.914828][T18803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.914843][T18803] RIP: 0033:0x7f232419ce59 [ 535.914861][T18803] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 535.914875][T18803] RSP: 002b:00007f2324f9b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 535.914893][T18803] RAX: ffffffffffffffda RBX: 00007f2324415fa0 RCX: 00007f232419ce59 [ 535.914904][T18803] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 535.914914][T18803] RBP: 00007f2324232d6f R08: 0000000000000004 R09: 0000000000000000 [ 535.914925][T18803] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 535.914936][T18803] R13: 00007f2324416038 R14: 00007f2324415fa0 R15: 00007fff15303aa8 [ 535.914967][T18803] [ 535.914991][T18803] Mem-Info: [ 535.937880][T18806] netlink: 'syz.2.2937': attribute type 10 has an invalid length. [ 535.990793][T18808] netlink: 'syz.0.2935': attribute type 10 has an invalid length. [ 536.081360][T18803] active_anon:11401 inactive_anon:11 isolated_anon:0 [ 536.081360][T18803] active_file:2513 inactive_file:40695 isolated_file:0 [ 536.081360][T18803] unevictable:768 dirty:136 writeback:0 [ 536.081360][T18803] slab_reclaimable:11610 slab_unreclaimable:159349 [ 536.081360][T18803] mapped:29465 shmem:1292 pagetables:1349 [ 536.081360][T18803] sec_pagetables:0 bounce:0 [ 536.081360][T18803] kernel_misc_reclaimable:0 [ 536.081360][T18803] free:1234001 free_pcp:23432 free_cma:0 [ 536.094377][T18811] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2935'. [ 536.104497][T18803] Node 0 active_anon:45604kB inactive_anon:44kB active_file:10052kB inactive_file:162576kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:97380kB dirty:544kB writeback:0kB shmem:3632kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14520kB pagetables:5256kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 536.137891][T18808] team0: Port device dummy0 added [ 536.155541][T18803] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:20480kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 536.165808][T18811] openvswitch: netlink: Message has 2 unknown bytes. [ 536.280628][T18803] Node 0 DMA free:11256kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 536.446456][T18803] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 536.472767][T18817] netlink: 'syz.0.2935': attribute type 10 has an invalid length. [ 536.498779][T18827] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.2939'. [ 536.501079][T18803] Node 0 DMA32 free:1241084kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:45504kB inactive_anon:44kB active_file:10052kB inactive_file:162576kB unevictable:1536kB writepending:544kB zspages:0kB present:3129332kB managed:2552596kB mlocked:0kB bounce:0kB free_pcp:40948kB local_pcp:20752kB free_cma:0kB [ 536.555081][T18803] lowmem_reserve[]: 0 0 0 0 0 [ 536.562488][T18803] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:672kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 536.606391][T18803] lowmem_reserve[]: 0 0 0 0 0 [ 536.611943][T18803] Node 1 Normal free:3683388kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:56232kB local_pcp:26932kB free_cma:0kB [ 536.615253][T18817] bridge0: port 1(vlan2) entered disabled state [ 536.674351][T18803] lowmem_reserve[]: 0 0 0 0 0 [ 536.722518][T18803] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 11256kB [ 536.745545][T18817] team0: Port device dummy0 removed [ 536.766493][T18803] Node 0 DMA32: 5631*4kB (UM) 5142*8kB (UME) 2345*16kB (UME) 422*32kB (UME) 155*64kB (UME) 886*128kB (UME) 740*256kB (UM) 425*512kB (UM) 248*1024kB (UME) 113*2048kB (UM) 27*4096kB (UM) = 1241020kB [ 536.820226][T18803] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 536.848557][T18803] Node 1 Normal: 7*4kB (UM) 8*8kB (UM) 12*16kB (UM) 11*32kB (UM) 7*64kB (UM) 8*128kB (UM) 10*256kB (UM) 9*512kB (UM) 6*1024kB (UM) 5*2048kB (U) 893*4096kB (UM) = 3683388kB [ 536.867784][T18803] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 536.879118][T18803] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 536.888813][T18803] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 536.903195][T18848] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2946'. [ 536.913469][T18803] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 536.924751][T18803] 44498 total pagecache pages [ 536.930100][T18803] 0 pages in swap cache [ 536.934294][T18803] Free swap = 124996kB [ 536.938759][T18803] Total swap = 124996kB [ 536.942955][T18803] 2097051 pages RAM [ 536.946959][T18803] 0 pages HighMem/MovableOnly [ 536.953426][T18803] 427119 pages reserved [ 536.964985][T18852] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2946'. [ 536.974318][T18803] 0 pages cma reserved [ 536.988235][T18853] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2948'. [ 537.000217][T18843] : renamed from bond0 (while UP) [ 537.080793][T18856] netlink: 'syz.2.2945': attribute type 1 has an invalid length. [ 537.118414][T18848] team1: entered promiscuous mode [ 537.132453][T18848] team1: entered allmulticast mode [ 537.149251][T18848] 8021q: adding VLAN 0 to HW filter on device team1 [ 537.164125][T18860] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2949'. [ 537.182214][T18852] team2 (uninitialized): Failed to send options change via netlink (err -105) [ 537.274168][T18852] team2: entered promiscuous mode [ 537.287696][T18852] team2: entered allmulticast mode [ 537.298070][T18852] 8021q: adding VLAN 0 to HW filter on device team2 [ 537.342380][T18869] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2949'. [ 537.519917][T18856] 8021q: adding VLAN 0 to HW filter on device bond14 [ 537.562390][T18862] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2949'. [ 537.676152][T18878] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2953'. [ 537.750897][T18883] x_tables: duplicate entry at hook 2 [ 537.818422][T18889] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2956'. [ 538.031665][ T8579] nci: nci_rx_work: unknown MT 0x1 [ 538.178513][T18916] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 538.196188][T18916] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 538.220840][T18920] netlink: 260 bytes leftover after parsing attributes in process `syz.1.2964'. [ 538.248575][T18920] FAULT_INJECTION: forcing a failure. [ 538.248575][T18920] name failslab, interval 1, probability 0, space 0, times 0 [ 538.275152][T18920] CPU: 0 UID: 0 PID: 18920 Comm: syz.1.2964 Not tainted syzkaller #0 PREEMPT(full) [ 538.275173][T18920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 538.275182][T18920] Call Trace: [ 538.275189][T18920] [ 538.275196][T18920] dump_stack_lvl+0xe8/0x150 [ 538.275220][T18920] should_fail_ex+0x412/0x560 [ 538.275242][T18920] should_failslab+0xa8/0x100 [ 538.275260][T18920] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 538.275281][T18920] ? __alloc_skb+0x186/0x7d0 [ 538.275296][T18920] ? __alloc_skb+0x1d0/0x7d0 [ 538.275308][T18920] ? __local_bh_enable_ip+0xd0/0x130 [ 538.275365][T18920] __alloc_skb+0x1d0/0x7d0 [ 538.275381][T18920] ? netlink_ack_tlv_len+0x6c/0x210 [ 538.275402][T18920] netlink_ack+0x146/0xa50 [ 538.275425][T18920] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 538.275505][T18920] ? ref_tracker_free+0x693/0x840 [ 538.275558][T18920] ? __pfx_ref_tracker_free+0x10/0x10 [ 538.275585][T18920] netlink_rcv_skb+0x2b6/0x4b0 [ 538.275603][T18920] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 538.275621][T18920] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 538.275652][T18920] ? netlink_deliver_tap+0x2e/0x1b0 [ 538.275669][T18920] ? netlink_deliver_tap+0x2e/0x1b0 [ 538.275691][T18920] netlink_unicast+0x75c/0x8e0 [ 538.275718][T18920] netlink_sendmsg+0x813/0xb40 [ 538.275744][T18920] ? __pfx_netlink_sendmsg+0x10/0x10 [ 538.275764][T18920] ? aa_sock_msg_perm+0xf1/0x1b0 [ 538.275788][T18920] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 538.275812][T18920] ____sys_sendmsg+0x972/0x9f0 [ 538.275831][T18920] ? __might_fault+0xaf/0x130 [ 538.275857][T18920] ? __pfx_____sys_sendmsg+0x10/0x10 [ 538.275882][T18920] ? import_iovec+0x73/0xa0 [ 538.275904][T18920] ___sys_sendmsg+0x2a5/0x360 [ 538.275919][T18920] ? __lock_acquire+0x6b5/0x2cf0 [ 538.275942][T18920] ? __pfx____sys_sendmsg+0x10/0x10 [ 538.275988][T18920] ? __fget_files+0x2a/0x420 [ 538.276006][T18920] ? __fget_files+0x3a0/0x420 [ 538.276034][T18920] __x64_sys_sendmsg+0x1bd/0x2a0 [ 538.276054][T18920] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 538.276081][T18920] ? __pfx_ksys_write+0x10/0x10 [ 538.276110][T18920] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.276131][T18920] do_syscall_64+0x174/0x580 [ 538.276146][T18920] ? trace_irq_disable+0x3b/0x140 [ 538.276168][T18920] ? clear_bhb_loop+0x40/0x90 [ 538.276188][T18920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.276203][T18920] RIP: 0033:0x7f352839ce59 [ 538.276218][T18920] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 538.276231][T18920] RSP: 002b:00007f3529209028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 538.276248][T18920] RAX: ffffffffffffffda RBX: 00007f3528615fa0 RCX: 00007f352839ce59 [ 538.276259][T18920] RDX: 0000000024008004 RSI: 0000200000000180 RDI: 0000000000000003 [ 538.276269][T18920] RBP: 00007f3529209090 R08: 0000000000000000 R09: 0000000000000000 [ 538.276278][T18920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 538.276287][T18920] R13: 00007f3528616038 R14: 00007f3528615fa0 R15: 00007ffd094b19e8 [ 538.276315][T18920] [ 538.577071][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 538.678369][T18886] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 538.835872][T18924] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 538.864893][T18924] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 538.875739][T18924] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 538.905301][T18924] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 538.914832][T18924] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 539.206533][ T5632] syz_tun (unregistering): left allmulticast mode [ 539.384166][T18954] ipt_REJECT: TCP_RESET invalid for non-tcp [ 539.390619][ T8582] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 539.402407][ T8582] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.413013][ T8582] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 539.435701][T18950] syzkaller1: entered promiscuous mode [ 539.441677][T18950] syzkaller1: entered allmulticast mode [ 539.462945][T18950] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 539.531754][ T8582] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 539.545512][ T8582] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.557618][ T8582] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 539.578621][T18962] netlink: 'syz.2.2972': attribute type 1 has an invalid length. [ 539.642321][T18965] wg1: entered promiscuous mode [ 539.647747][T18965] wg1: entered allmulticast mode [ 539.682165][ T8582] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 539.693184][ T8582] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.703985][ T8582] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 539.797934][ T8582] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 539.810213][ T8582] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.820990][ T8582] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 540.105468][ T8582] vlan2: left allmulticast mode [ 540.110881][ T8582] dummy0: left allmulticast mode [ 540.117760][ T8582] vlan2: left promiscuous mode [ 540.122643][ T8582] dummy0: left promiscuous mode [ 540.130337][ T8582] bridge0: port 1(vlan2) entered disabled state [ 540.157474][ T8582] dvmrp0: left allmulticast mode [ 540.162533][ T8582] pimreg9: left allmulticast mode [ 540.266412][ T8582] bond9 (unregistering): (slave ip6gre3): Releasing backup interface [ 540.274731][ T8582] ip6gre3 (unregistering): left promiscuous mode [ 540.441785][ T8582] bond7 (unregistering): (slave geneve5): Releasing active interface [ 540.455038][ T8582] bond4 (unregistering): (slave geneve4): Releasing active interface [ 540.500437][ T8582] bond3 (unregistering): (slave bridge1): Releasing backup interface [ 540.513821][ T8582] bridge1 (unregistering): left promiscuous mode [ 540.528926][ T8582] bond5 (unregistering): (slave bridge3): Releasing backup interface [ 540.548839][ T8582] bond0 (unregistering): (slave bridge6): Releasing active interface [ 540.569134][ T8582] bond1 (unregistering): Released all slaves [ 540.584959][ T8582] bond2 (unregistering): Released all slaves [ 540.604633][ T8582] bond3 (unregistering): Released all slaves [ 540.624781][ T8582] bond4 (unregistering): Released all slaves [ 540.643871][ T8582] bond5 (unregistering): (slave veth7): Releasing backup interface [ 540.655891][ T8582] bond5 (unregistering): Released all slaves [ 540.669777][ T8582] bond6 (unregistering): Released all slaves [ 540.684478][ T8582] bond7 (unregistering): Released all slaves [ 540.698535][ T8582] bond8 (unregistering): Released all slaves [ 540.714726][ T8582] bond9 (unregistering): Released all slaves [ 540.736459][ T8582] bond10 (unregistering): Released all slaves [ 540.750094][ T8582] bond11 (unregistering): Released all slaves [ 540.785903][ T8582] bond0 (unregistering): Released all slaves [ 540.799551][ T8582] bond12 (unregistering): Released all slaves [ 540.813749][ T8582] bond13 (unregistering): Released all slaves [ 540.831963][ T8582] bond14 (unregistering): Released all slaves [ 540.845678][ T8582] bond15 (unregistering): Released all slaves [ 540.860982][ T8582] bond16 (unregistering): Released all slaves [ 540.963040][T18923] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.970499][T18923] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.998425][T18923] bridge_slave_0: entered allmulticast mode [ 541.008917][T18924] Bluetooth: hci4: command tx timeout [ 541.022430][T18923] bridge_slave_0: entered promiscuous mode [ 541.047772][T18923] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.058549][T18923] bridge0: port 2(bridge_slave_1) entered disabled state [ 541.078347][T18923] bridge_slave_1: entered allmulticast mode [ 541.096839][T18923] bridge_slave_1: entered promiscuous mode [ 541.153226][T18923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 541.189256][T18923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 541.229328][ T8582] tipc: Disabling bearer [ 541.235355][ T8582] tipc: Disabling bearer [ 541.246225][ T8582] tipc: Left network mode [ 541.260145][T18923] team0: Port device team_slave_0 added [ 541.272259][T18923] team0: Port device team_slave_1 added [ 541.318085][T18923] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 541.325217][T18923] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 541.352588][T18923] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 541.371975][T18923] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 541.379441][T18923] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 541.405586][T18923] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 541.473538][T18923] hsr_slave_0: entered promiscuous mode [ 541.480053][T18923] hsr_slave_1: entered promiscuous mode [ 541.486101][T18923] debugfs: 'hsr0' already exists in 'hsr' [ 541.491992][T18923] Cannot create hsr debugfs directory [ 541.908075][T18927] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 542.505799][T18984] syzkaller0: entered promiscuous mode [ 542.545260][T18984] syzkaller0: entered allmulticast mode [ 542.734556][T19006] hmac(sha224: entered promiscuous mode [ 542.814750][T19010] netlink: 'syz.1.2980': attribute type 3 has an invalid length. [ 542.883636][T19008] syzkaller1: entered promiscuous mode [ 542.901443][T19008] syzkaller1: entered allmulticast mode [ 543.077323][T18924] Bluetooth: hci4: command tx timeout [ 543.361403][T19035] smc: net device hsr0 applied user defined pnetid SYZ2 [ 543.391746][T19044] netlink: 'syz.2.2985': attribute type 1 has an invalid length. [ 543.410118][ T8582] hsr_slave_0: left promiscuous mode [ 543.417925][ T8582] hsr_slave_1: left promiscuous mode [ 543.433700][ T8582] veth1_macvtap: left promiscuous mode [ 543.604573][ T8582] team0 (unregistering): Port device veth1_to_hsr removed [ 543.751795][T19043] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 543.874335][T19044] 8021q: adding VLAN 0 to HW filter on device bond15 [ 543.895703][T19054] __nla_validate_parse: 3 callbacks suppressed [ 543.895720][T19054] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2987'. [ 543.920384][T19051] bond15: (slave geneve2): making interface the new active one [ 543.946133][T19051] bond15: (slave geneve2): Enslaving as an active interface with an up link [ 543.965488][T18923] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 543.982771][T18924] block nbd4: Receive control failed (result -1) [ 544.014975][T18923] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 544.092564][T19060] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2988'. [ 544.158630][T18923] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 544.222185][T18923] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 544.240575][T19060] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2988'. [ 544.248584][T18923] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 544.297718][T19069] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2990'. [ 544.306178][T18923] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 544.306717][T19069] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2990'. [ 544.440177][T18923] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 544.458713][T19069] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2990'. [ 544.493848][T18923] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 544.503429][T19069] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2990'. [ 544.532654][ T8582] IPVS: stop unused estimator thread 0... [ 544.826790][T18923] 8021q: adding VLAN 0 to HW filter on device bond0 [ 544.931494][T18923] 8021q: adding VLAN 0 to HW filter on device team0 [ 544.986454][ T8582] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.993644][ T8582] bridge0: port 1(bridge_slave_0) entered forwarding state [ 545.158537][T18924] Bluetooth: hci4: command tx timeout [ 545.168039][T19098] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2996'. [ 545.249434][ T8582] bridge0: port 2(bridge_slave_1) entered blocking state [ 545.256615][ T8582] bridge0: port 2(bridge_slave_1) entered forwarding state [ 545.396771][T19098] 8021q: adding VLAN 0 to HW filter on device bond18 [ 545.429602][T19108] gretap2: entered allmulticast mode [ 545.447306][T19108] bond18: (slave gretap2): Enslaving as an active interface with an up link [ 545.501704][T19121] bond18 (unregistering): (slave gretap2): Releasing backup interface [ 545.528109][T19121] bond18 (unregistering): Released all slaves [ 545.901292][T19142] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3000'. [ 546.025014][T19142] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3000'. [ 546.388507][T19170] netlink: 'syz.1.3006': attribute type 1 has an invalid length. [ 546.541254][T19170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 546.627049][T19174] bond0: (slave gretap1): making interface the new active one [ 546.664651][T19174] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 546.679961][T19183] netlink: 'syz.4.3007': attribute type 83 has an invalid length. [ 546.997176][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 547.155556][T18923] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 547.240030][T18924] Bluetooth: hci4: command tx timeout [ 547.341553][T19208] xt_hl: Unknown TTL match mode: 237 [ 547.408765][T18923] veth0_vlan: entered promiscuous mode [ 547.450838][T18923] veth1_vlan: entered promiscuous mode [ 547.606498][T18923] veth0_macvtap: entered promiscuous mode [ 547.625981][T18923] veth1_macvtap: entered promiscuous mode [ 547.653745][T18923] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 547.678811][T18923] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 547.712306][ T8579] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.748467][ T8579] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.776562][ T8579] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.810794][ T8579] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.904723][T19191] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 550.763861][T19311] netlink: 'syz.3.3017': attribute type 2 has an invalid length. [ 550.795415][T19311] __nla_validate_parse: 1 callbacks suppressed [ 550.795431][T19311] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3017'. [ 550.812934][T19314] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3018'. [ 550.933185][ T8583] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 550.963548][ T8583] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 551.104445][T19328] x_tables: duplicate underflow at hook 2 [ 551.122398][ T8579] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 551.133908][T19333] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3022'. [ 551.148484][ T8579] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 551.165052][T19328] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3021'. [ 551.201882][T19328] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3021'. [ 551.506581][T19349] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2965'. [ 551.671523][T19357] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3026'. [ 551.711867][T19357] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 551.752192][T19357] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3026'. [ 551.762679][T19349] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2965'. [ 551.878382][T19357] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3026'. [ 551.910635][T19362] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.934235][T19362] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.004877][ T5648] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 552.020920][ T5648] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 552.029874][ T5648] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 552.040580][ T5648] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 552.055232][ T5648] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 552.596701][ T5630] syz_tun (unregistering): left allmulticast mode [ 552.791018][T19412] syzkaller1: entered promiscuous mode [ 552.799468][T19412] syzkaller1: entered allmulticast mode [ 552.827284][T19418] netlink: 'syz.2.3037': attribute type 21 has an invalid length. [ 552.845632][T19418] netlink: 'syz.2.3037': attribute type 6 has an invalid length. [ 553.662021][T19364] bridge0: port 1(bridge_slave_0) entered blocking state [ 553.669446][T19364] bridge0: port 1(bridge_slave_0) entered disabled state [ 553.676861][T19364] bridge_slave_0: entered allmulticast mode [ 553.685334][T19364] bridge_slave_0: entered promiscuous mode [ 553.694642][T19364] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.702268][T19364] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.710734][T19364] bridge_slave_1: entered allmulticast mode [ 553.720800][T19364] bridge_slave_1: entered promiscuous mode [ 553.765692][T19364] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 553.781025][T19364] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 553.822408][T19364] team0: Port device team_slave_0 added [ 553.831379][T19364] team0: Port device team_slave_1 added [ 553.871042][T19364] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 553.879785][T19364] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 553.906305][T19364] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 553.921580][T19364] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 553.929088][T19364] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 553.961802][T19364] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 554.027654][T19364] hsr_slave_0: entered promiscuous mode [ 554.034112][T19364] hsr_slave_1: entered promiscuous mode [ 554.040512][T19364] debugfs: 'hsr0' already exists in 'hsr' [ 554.046354][T19364] Cannot create hsr debugfs directory [ 554.117813][T18924] Bluetooth: hci2: command tx timeout [ 554.200829][T19364] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.295102][T19364] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.355757][T19364] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.442055][T19364] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.511606][T19396] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 555.543329][T19364] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 555.669714][T19364] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 555.695459][T19364] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 555.729243][T19364] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 555.746100][T19364] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 555.773360][T19364] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 555.795289][T19364] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 555.811952][T19364] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 555.873469][T19466] netlink: 'syz.1.3048': attribute type 1 has an invalid length. [ 555.884438][T19464] bridge0: port 1(bridge_slave_0) entered forwarding state [ 555.921753][T19475] __nla_validate_parse: 4 callbacks suppressed [ 555.921771][T19475] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3050'. [ 555.983472][T19476] netlink: 'syz.0.3050': attribute type 1 has an invalid length. [ 556.030406][T19466] 8021q: adding VLAN 0 to HW filter on device bond1 [ 556.207178][T18924] Bluetooth: hci2: command tx timeout [ 556.216057][T19364] 8021q: adding VLAN 0 to HW filter on device bond0 [ 556.265321][T19364] 8021q: adding VLAN 0 to HW filter on device team0 [ 556.289283][ T8581] bridge0: port 1(bridge_slave_0) entered blocking state [ 556.296492][ T8581] bridge0: port 1(bridge_slave_0) entered forwarding state [ 556.355383][T19485] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3051'. [ 556.371422][ T7469] bridge0: port 2(bridge_slave_1) entered blocking state [ 556.378621][ T7469] bridge0: port 2(bridge_slave_1) entered forwarding state [ 556.419008][T19485] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3051'. [ 556.840492][T19502] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3054'. [ 557.151381][T19513] tipc: Started in network mode [ 557.163001][T19513] tipc: Node identity 3e1432a38828, cluster identity 4711 [ 557.175553][T19513] tipc: Enabled bearer , priority 0 [ 557.186936][T19513] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.224918][T19513] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 557.318536][T19513] tipc: Resetting bearer [ 557.430462][T19511] tipc: Disabling bearer [ 557.514516][T19364] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 558.287181][T18924] Bluetooth: hci2: command tx timeout [ 558.516653][T19364] veth0_vlan: entered promiscuous mode [ 558.526196][T19551] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3064'. [ 558.546892][T19551] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3064'. [ 558.567264][T19551] netlink: 6 bytes leftover after parsing attributes in process `syz.3.3064'. [ 558.596174][T19554] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3064'. [ 558.616345][T19554] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3064'. [ 558.636781][T19554] netlink: 6 bytes leftover after parsing attributes in process `syz.3.3064'. [ 559.015928][T19364] veth1_vlan: entered promiscuous mode [ 559.272524][T19364] veth0_macvtap: entered promiscuous mode [ 559.305453][T19364] veth1_macvtap: entered promiscuous mode [ 559.364952][T19364] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 559.390281][T19364] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 559.428965][ T8574] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.458920][ T8574] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.511149][ T8574] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.555556][ T8574] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.823175][ T8574] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 559.854264][ T8574] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 559.966762][ T8582] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 559.991356][ T8582] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 560.233079][T19606] netlink: 'syz.4.3025': attribute type 3 has an invalid length. [ 560.368718][T18924] Bluetooth: hci2: command tx timeout [ 560.423593][T19619] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 560.577750][T19625] netlink: 'syz.4.3025': attribute type 1 has an invalid length. [ 561.453785][T19635] netlink: 'syz.2.3076': attribute type 1 has an invalid length. [ 561.982563][T19635] 8021q: adding VLAN 0 to HW filter on device bond16 [ 562.536799][T19664] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 562.594899][T19664] bond2: (slave lo): Enslaving as an active interface with an up link [ 562.624936][T19664] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 562.821398][T19680] netlink: 'syz.4.3083': attribute type 15 has an invalid length. [ 563.289120][T19703] __nla_validate_parse: 2 callbacks suppressed [ 563.289139][T19703] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3086'. [ 563.401193][T19704] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3089'. [ 563.852877][T19703] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3086'. [ 564.237657][T19739] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3095'. [ 564.277197][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 564.481887][T19745] netlink: 'syz.3.3096': attribute type 1 has an invalid length. [ 564.739593][T19753] syzkaller1: entered promiscuous mode [ 564.759557][T19753] syzkaller1: entered allmulticast mode [ 564.781958][T19756] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3099'. [ 565.267367][ T5802] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 565.340559][ T5733] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 565.483407][T19782] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3104'. [ 565.708981][ T8722] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 565.850223][T19796] bond0: (slave bond_slave_1): Releasing backup interface [ 581.764123][T19898] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3110'. [ 581.828653][T19904] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3112'. [ 581.910969][T19907] netlink: zone id is out of range [ 581.920614][T19907] netlink: zone id is out of range [ 581.942042][T19907] netlink: zone id is out of range [ 581.975578][T19907] netlink: set zone limit has 4 unknown bytes [ 582.030006][ T5648] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 582.040368][ T5648] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 582.050111][ T5648] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 582.059787][ T5648] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 582.069836][ T5648] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 582.302408][T19917] netlink: 'syz.0.3114': attribute type 1 has an invalid length. [ 582.335118][T19886] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 582.364495][T19886] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 582.641805][T19917] bond1: entered promiscuous mode [ 582.647956][T19917] 8021q: adding VLAN 0 to HW filter on device bond1 [ 582.669912][T19920] 8021q: adding VLAN 0 to HW filter on device bond1 [ 582.683606][T19920] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 582.714936][T19920] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 582.749995][T19920] bond1: (slave ip6gre1): making interface the new active one [ 582.777661][T19920] ip6gre1: entered promiscuous mode [ 582.793722][T19920] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 582.835675][ T8584] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 582.875313][ T8584] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.931250][T19928] bridge0: port 3(macvlan2) entered blocking state [ 582.952885][T19928] bridge0: port 3(macvlan2) entered disabled state [ 582.972306][T19928] macvlan2: entered allmulticast mode [ 582.980997][T19928] ip6gretap0: entered allmulticast mode [ 582.991637][T19928] macvlan2: entered promiscuous mode [ 583.002823][T19928] bridge0: port 3(macvlan2) entered blocking state [ 583.011367][T19928] bridge0: port 3(macvlan2) entered forwarding state [ 583.027432][ T8584] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 583.039233][ T8584] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.056318][ T8584] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 583.075742][ T8584] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.112579][ T8584] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 583.147154][ T8584] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.346366][T19945] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3118'. [ 583.589896][T19965] netlink: 'syz.4.3123': attribute type 4 has an invalid length. [ 583.605981][T19945] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3118'. [ 583.634830][T19965] netlink: 'syz.4.3123': attribute type 4 has an invalid length. [ 583.725060][T19967] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3124'. [ 584.117479][ T5648] Bluetooth: hci1: command tx timeout [ 584.158142][T19977] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3126'. [ 585.668999][T20006] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3136'. [ 585.678697][T20007] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3136'. [ 585.689142][T20007] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3136'. [ 585.721251][T20006] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3136'. [ 586.197106][ T5648] Bluetooth: hci1: command tx timeout [ 586.559221][T19909] bridge0: port 1(bridge_slave_0) entered blocking state [ 586.571558][T19909] bridge0: port 1(bridge_slave_0) entered disabled state [ 586.592971][T19909] bridge_slave_0: entered allmulticast mode [ 586.608113][T19909] bridge_slave_0: entered promiscuous mode [ 586.629807][T19909] bridge0: port 2(bridge_slave_1) entered blocking state [ 586.647829][T19909] bridge0: port 2(bridge_slave_1) entered disabled state [ 586.663885][T19909] bridge_slave_1: entered allmulticast mode [ 586.682504][T19909] bridge_slave_1: entered promiscuous mode [ 586.785781][T20021] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3139'. [ 586.886048][T19909] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 586.934569][T20021] xt_l2tp: invalid flags combination: 8 [ 586.984999][T19909] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 587.034210][T20022] xt_hashlimit: size too large, truncated to 1048576 [ 587.125193][T20025] gre0: entered promiscuous mode [ 587.136191][T20025] gre0: entered allmulticast mode [ 587.157457][T19909] team0: Port device team_slave_0 added [ 587.182839][T19909] team0: Port device team_slave_1 added [ 587.275270][T19909] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 587.289242][T19909] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 587.336074][T19909] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 587.349405][T19909] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 587.356376][T19909] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 587.402901][T19909] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 587.574885][T19909] hsr_slave_0: entered promiscuous mode [ 587.581886][T19909] hsr_slave_1: entered promiscuous mode [ 587.589186][T19909] debugfs: 'hsr0' already exists in 'hsr' [ 587.595060][T19909] Cannot create hsr debugfs directory [ 587.602403][T20030] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3141'. [ 587.826184][T20040] netlink: 200 bytes leftover after parsing attributes in process `syz.0.3142'. [ 587.838289][T20042] netlink: 200 bytes leftover after parsing attributes in process `syz.0.3142'. [ 588.204752][T20059] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3147'. [ 588.278216][ T5648] Bluetooth: hci1: command tx timeout [ 588.945220][T20073] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3151'. [ 589.055134][T20073] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3151'. [ 589.121889][T19909] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 589.155805][T19909] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 589.231752][T19909] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 589.252044][T19909] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 589.275718][T19909] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 589.296561][T19909] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 589.311033][T19909] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 589.386172][T19909] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 589.625376][T20093] netlink: 'syz.1.3154': attribute type 1 has an invalid length. [ 589.790522][T20092] block nbd0: NBD_DISCONNECT [ 589.839546][T20092] block nbd0: Send disconnect failed -32 [ 589.854831][T20092] block nbd0: shutting down sockets [ 589.910157][T20093] 8021q: adding VLAN 0 to HW filter on device bond3 [ 589.976340][T19909] 8021q: adding VLAN 0 to HW filter on device bond0 [ 590.016086][T19909] 8021q: adding VLAN 0 to HW filter on device team0 [ 590.049473][ T8583] bridge0: port 1(bridge_slave_0) entered blocking state [ 590.056672][ T8583] bridge0: port 1(bridge_slave_0) entered forwarding state [ 590.279211][T20098] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.314371][T20115] xt_l2tp: missing protocol rule (udp|l2tpip) [ 590.358144][ T5648] Bluetooth: hci1: command tx timeout [ 590.596400][ T7458] bridge0: port 2(bridge_slave_1) entered blocking state [ 590.603617][ T7458] bridge0: port 2(bridge_slave_1) entered forwarding state [ 590.675941][T20098] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.951450][T20098] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.119327][T20098] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.210715][T20131] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3161'. [ 591.359689][T20134] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3162'. [ 591.663615][ T8584] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.810318][ T8578] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.863620][ T8575] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.893696][ T8575] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.993304][T20152] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3164'. [ 592.086528][T20152] bond2: option miimon: invalid value (18446744073709551607) [ 592.114249][T20152] bond2: option miimon: allowed values 0 - 2147483647 [ 592.135960][T20158] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 592.212035][T20158] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 592.355805][T20152] bond2 (unregistering): Released all slaves [ 592.731180][T19909] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 592.820991][T19909] veth0_vlan: entered promiscuous mode [ 592.836555][T19909] veth1_vlan: entered promiscuous mode [ 592.889369][T19909] veth0_macvtap: entered promiscuous mode [ 592.911646][T19909] veth1_macvtap: entered promiscuous mode [ 592.944053][T20173] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 592.947033][T19909] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 592.981896][T19909] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 593.001334][ T135] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.011173][ T135] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.024012][ T135] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.033060][ T135] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.281127][T20184] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3171'. [ 593.301965][T20184] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3171'. [ 594.322958][T20134] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 594.492039][ T8583] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 594.517065][ T8583] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 594.606608][ T8575] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 594.658179][ T8575] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 595.033737][T20217] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3175'. [ 595.348108][T20217] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3175'. [ 595.823635][T20249] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 595.836308][T20249] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 595.848865][T20249] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 595.864863][T20249] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 595.875826][T20249] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 596.284439][T20258] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 596.316080][ T5802] IPVS: starting estimator thread 0... [ 596.335295][T20260] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3185'. [ 596.439198][T20261] IPVS: using max 34 ests per chain, 81600 per kthread [ 596.638057][T20266] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3187'. [ 596.734997][T20277] netlink: 'syz.4.3189': attribute type 1 has an invalid length. [ 596.853168][T20277] 8021q: adding VLAN 0 to HW filter on device bond1 [ 597.141457][T20282] bond1: (slave gretap1): making interface the new active one [ 597.175958][T20282] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 597.200874][T20284] tipc: Started in network mode [ 597.212595][T20284] tipc: Node identity ac1414aa, cluster identity 4711 [ 597.231572][T20284] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 597.266541][T20284] tipc: Enabled bearer , priority 10 [ 597.367171][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 597.507226][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 597.646997][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 597.787683][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 597.927005][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 597.957370][ T5648] Bluetooth: hci0: command tx timeout [ 598.067093][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 598.217785][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 598.357986][ T8136] tipc: Node number set to 2886997162 [ 598.491522][T20331] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3201'. [ 598.501715][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 598.767759][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 598.865848][T20340] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3203'. [ 598.915563][T20346] gre0: entered promiscuous mode [ 598.943355][T20346] gre0: entered allmulticast mode [ 598.970973][T20340] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3203'. [ 598.990578][T20340] tipc: Started in network mode [ 598.995570][T20340] tipc: Node identity 7f, cluster identity 4711 [ 599.004754][T20340] tipc: Node number set to 127 [ 599.162918][T20246] bridge0: port 1(bridge_slave_0) entered blocking state [ 599.189640][T20246] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.207491][T20246] bridge_slave_0: entered allmulticast mode [ 599.234590][T20246] bridge_slave_0: entered promiscuous mode [ 599.259965][T20246] bridge0: port 2(bridge_slave_1) entered blocking state [ 599.290499][T20246] bridge0: port 2(bridge_slave_1) entered disabled state [ 599.308593][T20246] bridge_slave_1: entered allmulticast mode [ 599.334516][T20246] bridge_slave_1: entered promiscuous mode [ 599.459074][T20246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 599.502649][T20246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 599.684993][T20385] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.749734][T20246] team0: Port device team_slave_0 added [ 599.785576][T20246] team0: Port device team_slave_1 added [ 599.885856][T20246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 599.901141][T20246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 599.930361][T20246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 599.948018][T20246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 599.980816][T20246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 600.010340][T20246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 600.025329][T20394] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3216'. [ 600.047051][ T5648] Bluetooth: hci0: command tx timeout [ 600.117291][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 600.135608][T20366] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 600.174436][T20366] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 600.206381][T20402] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3218'. [ 600.216692][T20403] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3217'. [ 600.227489][T20402] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3218'. [ 600.382000][T20246] hsr_slave_0: entered promiscuous mode [ 600.393637][T20246] hsr_slave_1: entered promiscuous mode [ 600.403667][T20246] debugfs: 'hsr0' already exists in 'hsr' [ 600.411889][T20246] Cannot create hsr debugfs directory [ 600.419429][T20366] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 600.429164][T20366] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 600.445286][T20407] bridge0: port 3(erspan0) entered blocking state [ 600.452454][T20407] bridge0: port 3(erspan0) entered disabled state [ 600.468395][T20407] erspan0: entered allmulticast mode [ 600.485559][T20407] erspan0: entered promiscuous mode [ 600.492106][T20412] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3219'. [ 600.593662][T20408] erspan0: left allmulticast mode [ 600.601401][T20408] erspan0: left promiscuous mode [ 600.622976][T20408] bridge0: port 3(erspan0) entered disabled state [ 600.691623][T20366] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 600.704544][T20366] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 601.092593][T19626] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI [ 601.104661][T19626] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 601.113159][T19626] CPU: 0 UID: 0 PID: 19626 Comm: kbnepd bnep0 Not tainted syzkaller #0 PREEMPT(full) [ 601.122685][T19626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 601.132725][T19626] RIP: 0010:klist_del+0x49/0x110 [ 601.137730][T19626] Code: f6 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 09 73 91 f6 4c 8b 33 49 83 e6 fe 49 8d 7e 58 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 eb 72 91 f6 4d 8b 7e 58 4c 89 f7 e8 cf 45 [ 601.157325][T19626] RSP: 0018:ffffc9000402f828 EFLAGS: 00010202 [ 601.163380][T19626] RAX: 000000000000000b RBX: ffff888075da3860 RCX: ffff888099e89f00 [ 601.171334][T19626] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000058 [ 601.179289][T19626] RBP: ffffc9000402f950 R08: ffff888088fe51e3 R09: 1ffff110111fca3c [ 601.187247][T19626] R10: dffffc0000000000 R11: ffffed10111fca3d R12: dffffc0000000000 [ 601.195206][T19626] R13: 1ffff1100ebb470c R14: 0000000000000000 R15: ffff8880a9ea07e0 [ 601.203173][T19626] FS: 0000000000000000(0000) GS:ffff88812528b000(0000) knlGS:0000000000000000 [ 601.212083][T19626] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 601.218658][T19626] CR2: 000055a1ac797768 CR3: 0000000078a54000 CR4: 00000000003526f0 [ 601.226616][T19626] Call Trace: [ 601.229882][T19626] [ 601.232798][T19626] device_del+0x27f/0x8f0 [ 601.237204][T19626] ? pm_runtime_set_memalloc_noio+0x1f4/0x260 [ 601.243287][T19626] ? __pfx_device_del+0x10/0x10 [ 601.248121][T19626] ? netdev_unregister_kobject+0x344/0x450 [ 601.253972][T19626] unregister_netdevice_many_notify+0x1b5a/0x20c0 [ 601.260420][T19626] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 601.267184][T19626] ? rtnl_net_dev_lock+0x36/0x2f0 [ 601.272333][T19626] ? rtnl_net_dev_lock+0x36/0x2f0 [ 601.277356][T19626] unregister_netdev+0x15f/0x200 [ 601.282285][T19626] ? __pfx_unregister_netdev+0x10/0x10 [ 601.287748][T19626] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 601.293613][T19626] bnep_session+0x2a2a/0x2c50 [ 601.298342][T19626] ? __lock_acquire+0x6b5/0x2cf0 [ 601.303278][T19626] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 601.308899][T19626] ? __pfx_bnep_session+0x10/0x10 [ 601.313913][T19626] ? __pfx_woken_wake_function+0x10/0x10 [ 601.319543][T19626] ? __kthread_parkme+0x7a/0x1f0 [ 601.324505][T19626] ? __kthread_parkme+0x19c/0x1f0 [ 601.329516][T19626] kthread+0x389/0x470 [ 601.333574][T19626] ? __pfx_bnep_session+0x10/0x10 [ 601.338580][T19626] ? __pfx_kthread+0x10/0x10 [ 601.343156][T19626] ret_from_fork+0x514/0xb70 [ 601.347766][T19626] ? __pfx_ret_from_fork+0x10/0x10 [ 601.352858][T19626] ? __switch_to+0xc79/0x1410 [ 601.357521][T19626] ? __pfx_kthread+0x10/0x10 [ 601.362093][T19626] ret_from_fork_asm+0x1a/0x30 [ 601.366843][T19626] [ 601.369854][T19626] Modules linked in: [ 601.375050][T19626] ---[ end trace 0000000000000000 ]--- [ 601.384105][T19626] RIP: 0010:klist_del+0x49/0x110 [ 601.389100][T19626] Code: f6 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 09 73 91 f6 4c 8b 33 49 83 e6 fe 49 8d 7e 58 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 eb 72 91 f6 4d 8b 7e 58 4c 89 f7 e8 cf 45 [ 601.410807][T19626] RSP: 0018:ffffc9000402f828 EFLAGS: 00010202 [ 601.417101][T19626] RAX: 000000000000000b RBX: ffff888075da3860 RCX: ffff888099e89f00 [ 601.425167][T19626] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000058 [ 601.434545][T19626] RBP: ffffc9000402f950 R08: ffff888088fe51e3 R09: 1ffff110111fca3c [ 601.443603][T19626] R10: dffffc0000000000 R11: ffffed10111fca3d R12: dffffc0000000000 [ 601.452119][T19626] R13: 1ffff1100ebb470c R14: 0000000000000000 R15: ffff8880a9ea07e0 [ 601.460350][T19626] FS: 0000000000000000(0000) GS:ffff88812528b000(0000) knlGS:0000000000000000 [ 601.470414][T19626] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 601.477640][T19626] CR2: 00007f35291a5ff8 CR3: 000000007d78a000 CR4: 00000000003526f0 [ 601.485771][T19626] Kernel panic - not syncing: Fatal exception [ 601.492109][T19626] Kernel Offset: disabled [ 601.496419][T19626] Rebooting in 86400 seconds..