last executing test programs: 4.318490716s ago: executing program 2 (id=10752): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETMIFCNT_IN6(r2, 0x89e0, &(0x7f0000000040)) r3 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48010}, 0x55) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=@newlink={0x50, 0x10, 0xc3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x4}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e20}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)={0x14, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x6}]}, 0x14}], 0x1}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}}, 0x0) 4.17625667s ago: executing program 3 (id=10753): r0 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={0x0, @l2tp={0x2, 0x0, @rand_addr=0x64010101, 0x3}, @nl=@proc={0x10, 0x0, 0x25dfdbff, 0x20000}, @isdn={0x22, 0x2, 0x7, 0x2, 0x9}, 0xa55c, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000240)='ip6_vti0\x00', 0x7, 0x4, 0x3}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x19}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140affffffff00000000000002000009080003400000000a0900010073797a30000000000c000640000000000000000214000000020a010100000000000000000000000a14000000110001"], 0x70}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) unshare(0x20000400) r3 = socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) accept4$phonet_pipe(r4, 0x0, &(0x7f0000000300), 0x80800) r5 = accept4(r3, 0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000feffffff0000000000000000850000002200000085000000d000000095"], &(0x7f0000000000)='syzkaller\x00', 0x20, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44054}, 0x8010) poll(&(0x7f0000000380)=[{r5, 0x414e}], 0x1, 0x6) socket$netlink(0x10, 0x3, 0x0) 4.152127793s ago: executing program 1 (id=10754): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x8, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xb, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xd, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r9, {0xf000, 0xffff}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x4, 0xfff1}}]}}]}, 0x38}}, 0x200c8080) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r12, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000000000008500000087000000850000002a00000095", @ANYRES8], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r13, 0x0, 0xe, 0x0, &(0x7f0000000040)="e06921e8682d85ff9782762f86dd", 0x0, 0xc7d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.623877399s ago: executing program 2 (id=10759): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}, 0x1, 0x0, 0x0, 0x44}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0xa8}}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)={0x58, r3, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}]}, 0x58}}, 0x40) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c00000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00?\x00\x00\b\x00\n\x00', @ANYRES32=r8, @ANYBLOB="240012800b000100627269646765"], 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x12, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41100, 0x61, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYRES16=r0, @ANYRES16=r2, @ANYRESOCT=r9], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r10, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r11], 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r12, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r13 = socket(0x1, 0x803, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000035f05bd700000008a41ef988606639985e54ee914084e95700000000024e24ff7502b48250a78f34acddea38924a77e788dd235cdc97a30b8f5ec8c4aa3e4f24ec5e5ef9550f69b41e5147abd0a5c0ab2698569f31b8818c9f2917c775bc893c46724bf9539706205da567fa3bab6f93fa609a9216e4530b3195ffcd184c57b50aedef4e8427cf342bac642f688c258ed766b2c21e9d8766dfef584a7d76f1f65ca5fc5d157636e8cf3b5d14c7cc778eef888a77af16cfbbcb313c3b68896b35ecab9a76cfdde4c2e41b22ea00fd4000000", @ANYRES32=0x0, @ANYBLOB="0005000082180000140012800b00010062726964676500000400028008000a00", @ANYRES32=r14, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) socket$nl_route(0x10, 0x3, 0x0) r15 = socket(0x1, 0x803, 0x0) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r16 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r16, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0xc010) 3.487597682s ago: executing program 1 (id=10761): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="12000000080000000400000003"], 0x50) (async, rerun: 32) r1 = socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 32) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) listen(r1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={r0, &(0x7f0000000480), &(0x7f0000000540)=@tcp=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000080), &(0x7f0000000180)=@tcp=r1}, 0x20) (async, rerun: 64) r2 = socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 64) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x7, &(0x7f0000000100)=0x4000200, 0x4) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000000000"], 0x0, 0x26}, 0x20) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffd8f}, 0x90) (rerun: 32) r4 = socket$inet(0x2, 0x2, 0x409) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000500)="962b07a3f9c8", 0x6}], 0x2, &(0x7f00000002c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1000}}], 0x18}, 0x42090) (async) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x90) (async) unshare(0x24060400) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0xfffe, {0xa, 0x4e21, 0x8, @mcast1, 0x7}}}, 0x32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xe, 0x2, &(0x7f00000000c0)=ANY=[@ANYBLOB="91108100000000009500"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'erspan0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000300)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x40, '\x00', r7}, 0x94) 3.35641794s ago: executing program 1 (id=10762): unshare(0x6a040000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) getsockopt$rose(0xffffffffffffffff, 0x104, 0x7, 0x0, 0x0) bind$rds(r0, &(0x7f0000000300)={0x2, 0x4e20, @local}, 0xffffffffffffff9b) sendmsg$rds(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x6c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x2}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x4}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x5c}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x5}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0xffffffc1) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x50000, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001580)={0x2, 0xa, 0xe8, 0x5, 0x2, 0x0, 0x70bd25, 0x25dfdbfd}, 0x10}}, 0x810) ioctl$TUNSETIFF(r6, 0x400454ca, 0x0) write$tun(r6, 0x0, 0xfdef) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000100)=@ethtool_coalesce={0xe, 0x0, 0x1000, 0x6, 0x400000, 0x7ff, 0x4, 0xc0000000, 0x402, 0x6, 0x5, 0x5, 0x3, 0x4006, 0x80, 0xfffffffc, 0x0, 0x37e9, 0x80000004, 0x1, 0x6, 0x424f, 0x3}}) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3000000, 0x1010, r3, 0x787c5000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="080bf4e404000000050000000000008073100000", @ANYRES32, @ANYBLOB="0000000600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000010000000500"/28], 0x50) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r0, 0x0) syz_emit_ethernet(0x3a, &(0x7f00000001c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @remote, {[@timestamp={0x44, 0x4, 0xe2}]}}, @timestamp={0xd, 0x0, 0x0, 0x9, 0x2, 0x672d, 0x1, 0x9}}}}}, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xba0c29e690d41d4b, 0x20000000ec071, 0xffffffffffffffff, 0x0) 3.124973931s ago: executing program 2 (id=10764): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a"], 0x7c}}, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8924, &(0x7f00000000c0)={'pimreg0\x00', 0x1}) 2.980265756s ago: executing program 3 (id=10765): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x2, 0x7f61, 0x1, 0xc5, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x80000, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0x5, 0xb}, {0xffe0, 0xfff2}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000080)={'veth1_macvtap\x00', @local}) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x200000, 0x0, 0xff, 0x1, 0xf278}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0xd}, 0x200000, 0x2, 0x0, 0x0, 0x99, 0x3}, 0x20) shutdown(r8, 0x1) recvfrom$inet(r8, 0x0, 0x0, 0x100, 0x0, 0x0) recvfrom$inet(r8, 0x0, 0x0, 0x720, 0x0, 0x0) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x5) ioctl$AUTOFS_IOC_SETTIMEOUT(0xffffffffffffffff, 0x80049367, &(0x7f0000000140)=0x800) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r11, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r11, @ANYRES16=r12, @ANYBLOB="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"], 0x14c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x85) 2.619865918s ago: executing program 2 (id=10769): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) close(0xffffffffffffffff) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000100)=0x4) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) accept4(r2, 0x0, 0x0, 0x0) (async) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r3, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r4, 0x10e, 0x9, 0x0, &(0x7f0000000100)) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="28010000100007000000000200000000ff020000000000000000000000000001e00000020000000000000000000000004e200000000000000000000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc00000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000200700000000000000014000e00fe8000000000000000000000000000bb24000900"], 0x128}}, 0x0) (async) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="28010000100007000000000200000000ff020000000000000000000000000001e00000020000000000000000000000004e200000000000000000000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc00000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000200700000000000000014000e00fe8000000000000000000000000000bb24000900"], 0x128}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x4, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4000885}, 0x24008800) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), r5) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000d40)=ANY=[@ANYBLOB="040100001a0007000000000000000000fe80000000000000000000000000001be0000002000000000000000000000000ffff00000000000000000000020000003ca2c48f958e99f1c556baa67f793bb4db3132a1ba332cb18d2b39fe8a63109de28178ea4e14ab65e0bcca0ab73c0a10867c860907eada4c281f7dfcf8e61901aa4254506e2f13ae5ab1211dff", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc000000000000000000000000000000000300000000000003000000000000000200000000000000000000007ffffffe0000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000fdffffffffffffff0000040000000000e80a000000000000000000000a000200700000000000000014000e00ac1e000100"/188], 0x104}}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="52073001730e0000e50000000004000000084457f500000000472070843683d5bf3058f19c7c0c739c300e93c60053aa6f9779c3fb333ed84bbfae748d9ed13c2b6987a631a370411cc4d9dffb6f1a6a33afa0f99f84588828b5e1cb9ce22a4703e53bf82f23f84afcfb3fce6ff9e503cfb72fd6956a6a0724fdbb52dd8944c5f0460961dfe1109b9e78abb5aaa02cb3cd3b0d4d6869428aecd26e3ad30e5636d2eedaab89cdf586cef96204a4ef9149e545b461a377373b02028ec7de1ba7154ddf475c4750d2905af9d1cd210914296bcf4930", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000300"/28], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="52073001730e0000e50000000004000000084457f500000000472070843683d5bf3058f19c7c0c739c300e93c60053aa6f9779c3fb333ed84bbfae748d9ed13c2b6987a631a370411cc4d9dffb6f1a6a33afa0f99f84588828b5e1cb9ce22a4703e53bf82f23f84afcfb3fce6ff9e503cfb72fd6956a6a0724fdbb52dd8944c5f0460961dfe1109b9e78abb5aaa02cb3cd3b0d4d6869428aecd26e3ad30e5636d2eedaab89cdf586cef96204a4ef9149e545b461a377373b02028ec7de1ba7154ddf475c4750d2905af9d1cd210914296bcf4930", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000300"/28], 0x50) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYBLOB='V?\x00\x00-\x00Y'], 0xfe33) socket$packet(0x11, 0x3, 0x300) (async) socket$packet(0x11, 0x3, 0x300) 2.612852181s ago: executing program 3 (id=10770): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0xe, &(0x7f00000011c0)=ANY=[@ANYBLOB="b702000000000080bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e240000000000004504040001ffffff9404000001000a00b7040000000100006a0af2fe000000008500000078000000b70000000000000095000000000000009e17f199a68b061b93d83298a8cdda1ce784909b849d5550ad855dab54d8877a6db61d69f2ffcaa10350e11cb97ce8df1bc9a0c4eeceb9171e43405d621ffbc9b0d8ca56b50f0c010d631f6dbc8486bc5d5bf2ca8285056892db03cf1c62dd7c08a90b189d190c341035de53a9a53608c10556e5734eb84049761451ce540c772e069f80cb201b2de17dfdb4b60939d5d6aed4062049b87e03e2cd18568136207304e26f7fcc059c062234d5595f6fbaa187b81d1106000000000f0000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd8000000000000000b91c61bd99dc89f12907af7dccd106cb937b450f859ce8292a79c3e40000b59b0fc46d6cec3c080a882add4e1179bd4a44f231a2d73148be428ba953df4aece69311687f4122073a236c3a32efa04137d46f0247d2638da3261c8162bb7c7824be6195a66d2e17e122040e11001131ce319045e5b3334e68475ac3f46aa2837f9004600daded9b19b35eebe52613c346e255421b23a278fd00004270b1cd5fc9aa2286ccca37db965d9dd366598f5ec993cb0cf127e2a46cfbdf63eea190d86a4d1b75ae98480100d33128954a7d093a54f7e75b3753508ca3c41685d1e407315e59d626c23b3f89a926e9382966853774e7dd1f1a2177cdf2802237c177d543e8da47a01f05e117e53518270239b69c117e2637c31085f4d8a596b6edab26afaf6605b231199f38a6fc7eb83714387450ea18eafbace8eec18a4b2c442e7b88a7611c1283bec84e1715fb9f4fcaf52c08058fc4f21c0ad71adabdd850aed3feec6eaab347bdf474e17b9aa345d1e6e3bb83f90230bdf53e7d0e5c3f914d905422b83f30936674ba8f0bffaf2305c0972df71fe5f4e01506471e897bced7798509e64df360d95f9a4099f864b0ba45efbdbd1d9db21a1d5c065567fd70aae68096827fa5c2d9bd20292344c7dcf6241447cfbb05b5d0fdb4e08afbac5397b64aa369922ed7ed8918f97294b6854210d2b93aaf92159dbaa2f186d4a420c68d6baf1c31de4f0bf478bfd51bb1e96ea849a80ae5a89be7e38474c7aade344d68324f9e12a6b9770e6bd12ae69efffaee58040753701af84c2924c1b5aea1650f42c9ae9820a33095f062fb88313d035ea405515a61a4be64f9fa0985c5be592090cc48291004609fdac2ab6100000000000000a84570c7c00d647daf8af334050b61e9b2d3f0adad1d1ff47be19b8da2799e9ecef8efabe73f92dbd0760f8bbd9c710bd1371e2b5d9a2ea2190f5e4f5cd641cdfe5d89f84a368ef7e6ff1eacdc0ec9e97b8f9c9e314661ea0aa8a104008d188b66b3a4aedeed9df4238a08fc2fb1007233cc2c87fcaa0cccd8ec03444471c1dd660c73acc17bff740d199a7c0c52c63c0408b5158e0000000c275eedb02f141113cf2c55b2c08c2c68cc99d2bb5840fba332e1c82862ec9b90104c48e41d32a47ac94ddee815dba8aeb5d3121cf247a81aef7805b020e9eec44cbe3055be69fe066824ba2292b9cdce41635fc00df96fb10a3a8cc60c4a76c65ebbb0640e0a29de94edf5cbefac1c5fa96e7080af804b22cabce10ea52f1018527f4aa39cdafa3eff63de2a7f50d042667820f6f86f276afb2b81da301e031351ee13013137e9d5cec0c84d7e3f82c6fd12eb98f9ea654bcb9ce59a2015183c6e65bb0537e611b830d74c30fb8207fca0990acdbb51e4e234026e00000000b3ebae3eb52c140953a350fcf0124b1a30b1afc29ea56f8413686d912eb8118d73ef9c6d3843ebcb555301c0205dd3040000002e334319c8979c322e92fbc2c400009f2404b941553843de114fdb03c19d606bd760c40f7f28360820b82d548198041562bcbd9edce223b54cf3c35823f3c446f0a20160ac181c96606dbc967673aca98d6f5637b20fd2809a29ea5e40139a19415f7fc5d852209bdfed74008651752b5e052412d3e00a44417b7caf91a173925a66ee6e30723e73f3b7d66d2a5d09ff40c0bc6e7a5cfef7f327018578892a23014c3629f2e41af619f0d9f0ec8d551415051ff94391c03f3501c928ed7818af61729278f84d4730ef28af4c202e0f175e2a5cbddc8b973e2701b33f1b963025220c04817010b6fb70"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) ioctl$sock_ax25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000140)={@bcast, @null, 0x1, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$tipc(0x1e, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x22d00, 0x0) ioctl$PPPIOCGFLAGS1(r3, 0x8004745a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x400140, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x8000, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$inet(r4, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r5, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x62, 0xfffffffffffffffd}, 0x0, &(0x7f0000001000)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind(r6, &(0x7f0000000680)=@hci={0x1f, 0x1, 0x3}, 0x80) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x3, 0x9}, @TCA_PIE_LIMIT={0x8, 0x2, 0x40}]}}]}, 0x40}}, 0x4000010) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff030}, {0x6, 0xfe}]}, 0x10) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000040)={@private1, 0x17, r7}) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0x12, r0, 0x84da0000) 2.241053997s ago: executing program 4 (id=10771): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="180000007200b5b3000000000000000007", @ANYRES32], 0x18}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$key(r4, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000bc0)={0x2, 0x12, 0xcb, 0x9, 0x2, 0x0, 0x70bd2b, 0x25dfdbfb}, 0x10}}, 0xc810) sendmmsg$unix(r4, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20048080}}], 0x1, 0x20000000) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x39}, 0x1, 0x0, 0x0, 0x80}, 0x0) r8 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x4e23, 0x4, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) sendmmsg$inet6(r8, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000) bind$packet(r4, &(0x7f0000000080)={0x11, 0xf7, r7, 0x1, 0xa, 0x6, @link_local}, 0x14) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="00008100ffffffffffffaaaaaa79aa3f0800450000214000e000062f065f7a5b3496c3cc349b70"], 0x32) 1.8244147s ago: executing program 0 (id=10772): syz_emit_ethernet(0xfef3, &(0x7f0000000040)=ANY=[], 0x0) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20009}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x80, r0, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x4}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3c}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7f}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xb1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}]}]}, 0x80}}, 0x40000) 1.801141369s ago: executing program 0 (id=10773): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@delqdisc={0x24, 0x25, 0x1, 0x70bd25, 0x255fdbff, {0x0, 0x0, 0x0, r6, {}, {0x8, 0xfff1}, {0x4, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20081054}, 0x24008088) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@delqdisc={0x24, 0x25, 0x1, 0x70bd25, 0x255fdbff, {0x0, 0x0, 0x0, r6, {}, {0x8, 0xfff1}, {0x4, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20081054}, 0x24008088) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c"], 0x7c}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) (async) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r8, @ANYBLOB="00000000000000001c001a800800028008000200080000003e"], 0x44}}, 0x4068081) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r8, @ANYBLOB="00000000000000001c001a800800028008000200080000003e"], 0x44}}, 0x4068081) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 1.78246607s ago: executing program 4 (id=10774): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd70}, 0x48) r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002bbd7000f8dbdf253a00c49d6657acb199da0000000000000600650002000000"], 0x28}, 0x1, 0x0, 0x0, 0x2600c844}, 0x80) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1, 0x9}]}, &(0x7f00000002c0)=0x10) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000200)={r4, 0xff}, 0x8) r5 = socket$inet(0x2, 0xa, 0x3) ioctl$sock_inet_SIOCDELRT(r5, 0x890c, &(0x7f0000000340)={0x0, {0x2, 0x4e20, @loopback}, {0x2, 0x4e23, @multicast2}, {0x2, 0x4e24, @remote}, 0x108, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x401, 0x6, 0xa}) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={r6, 0xfffffffe}, 0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000040)={r6, 0x6, 0x30, 0xfffffffffffffffc, 0x9}, &(0x7f0000000080)=0x18) 1.551974731s ago: executing program 2 (id=10775): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x402e78}, [@printk={@llx, {}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffff6}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}, {0x85, 0x0, 0x0, 0x10}}]}, &(0x7f0000000040)='GPL\x00', 0xe, 0xff7, &(0x7f0000000280)=""/4087, 0x41100, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0xfffffffc, 0x1}]}]}}, 0x0, 0x2e, 0x0, 0x1}, 0x28) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000002c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000680)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000ffdbdf252000000008000300", @ANYRES32=r4, @ANYBLOB="14002d"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) r5 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r5, 0x10f, 0x81, &(0x7f0000000480), 0x4) recvmmsg(r5, &(0x7f0000002500)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001980)=""/96, 0x60}], 0x1, 0x0, 0x18}, 0x9}, {{0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000002280)=""/58, 0x3a}], 0x1, &(0x7f0000002300)=""/12, 0xc}, 0x90}], 0x2, 0x40002122, 0x0) sendmsg$tipc(r5, &(0x7f0000000200)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x2}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000500)="e8", 0x1}], 0x1}, 0x4800) setsockopt$inet6_int(r0, 0x29, 0xd0, &(0x7f0000000000)=0xffffffa4, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 1.551439771s ago: executing program 3 (id=10776): r0 = socket(0x1d, 0x2, 0x6) getpeername$packet(r0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000000)="890704", 0x3) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(0xffffffffffffffff, 0xc0205866, 0x0) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmmsg$unix(r4, &(0x7f0000007b80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2404c054}}], 0x1, 0x2000c080) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000033c0)=@newtfilter={0x2c, 0x2c, 0x400, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x5}, {}, {0x8, 0x4}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x8}}]}, 0x2c}}, 0x0) 1.38704754s ago: executing program 0 (id=10777): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000001800dd8d00000000fedbfffffffffffffffdfe020002000000001e000100000008000700ac1414277064066824061dd8af594bb9be6d9dbb8d6d3b85e84ec0ba1bdb66a76c5c2285fb8cc54654617b932b114a658c55fecdc399c5fbfa7b7462927f84636cb3ca90c1d26c52c34ac8d052768334d62c33e83b16e2c8ee99424b89929f5cfc8fb1a177a129186ee4f897dc670b2e2417a231196374682ae9bc38e90f1588bd6773721a9d35a8b96ad9272ea67e58888d7db942bea8b835fb4bc474fff0b3f2e91cb2d109e37f8c752bcd6256e365ea91390dff"], 0x2c}, 0x1, 0x0, 0x0, 0x4a044}, 0x20004090) (async, rerun: 32) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000002c0)=0x3, 0x4) (async, rerun: 32) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4) (async) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x20000000) (async, rerun: 64) socket$kcm(0x10, 0x2, 0x4) (async, rerun: 64) close(0x3) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0xa}, 0x1c) (async, rerun: 64) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) (async) sendto$inet6(r2, &(0x7f0000000300), 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002800)=ANY=[@ANYBLOB="a40000000001010400000000000000000a0000003c0001802c00018014000300000000000000000000000000000000001400040000000000000000000000ffffe00000010c00028005000100000000003c0002800c00028005000100000000002c00018014006b000000000000000002000000000000000114000400fe8000000000000000000000000000aa0800074000000000100006800c0003800400020000000000"], 0xa4}}, 0x0) socket(0xa, 0x3, 0x3a) (async, rerun: 64) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) vmsplice(r5, 0x0, 0x0, 0x6) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{}, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) (async) write$ppp(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x300) (async, rerun: 64) socket$inet6(0xa, 0x80002, 0x0) (rerun: 64) 1.042851614s ago: executing program 3 (id=10778): syz_emit_ethernet(0x32, &(0x7f0000000040)={@random="e90c610faca2", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x2, 0xc, 0x100}}}}}}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x18}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001400)=""/226, 0xe2}], 0x1}, 0x5}], 0x1, 0x202, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd60b8192300100000fe8000000000000000000000000000aafe8000000000000000000000000000aa89010000000000003100c204"], 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xa8}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xda, 0x0, 0x0, 0x0, 0xfffffff7}, [@func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}]}, &(0x7f00000000c0)='syzkaller\x00', 0x252, 0xab, &(0x7f0000000140)=""/171, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x7, 0x5a1b, 0x9}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000280)=[0xffffffffffffffff], 0x0, 0x10, 0x1ff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x503, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21110, 0x31}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000002}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040810}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4084}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x1ff, 0x0, 0x0, 0x41000, 0x2}, 0x94) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 932.490622ms ago: executing program 0 (id=10779): r0 = socket$inet6(0xa, 0x2, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000380)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x11, 0x0, @local, @local, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x7, 0x0, [@empty]}, @timestamp_prespec={0x44, 0x3c, 0x2, 0x3, 0x0, [{@private=0xa010132}, {@local, 0x4000}, {@empty}, {@remote}, {@private}, {@dev={0xac, 0x14, 0x14, 0x1f}}, {@private}]}]}}}}}}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r1, &(0x7f0000000340)=[{{&(0x7f0000000380)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5, '\x00', 0x0}}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000100)="a0002883781ecc0e", 0x4008}], 0x6}}], 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc804}, 0x2) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {}, {0x8, 0x4}}}, 0x24}}, 0x2) r7 = socket(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x5}}, 0x1c) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000006d00000095"], &(0x7f0000000500)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r8, 0x0, 0x36, 0x0, &(0x7f0000000980)="c1298e99b95dfaff4284860186ddd6832a84a09f59804362eaa7b4bab76ac58f07b714b5eb499edf3a37d6905ca2abbe46bc30d684ef", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 895.038881ms ago: executing program 1 (id=10780): r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x51}}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e23, 0x5, @mcast1, 0x4}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000f340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xe}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x31}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xdc}}, 0x884) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x110}}, 0x0) 776.82548ms ago: executing program 4 (id=10781): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x891c, &(0x7f0000000540)={'bridge0\x00', {0x2, 0x4e24, @local}}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c0000001000030500000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0703050000000000140012800c0001006d616376746170000400028008000500", @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000016000000080000004000000056000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000100"/28], 0x50) r2 = accept$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000480)=0x14) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f00000004c0)=@req={0x1, 0x8, 0x3}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000240000f9230000000400000002000000000000102eeed4ff0800000000000002000000000b000000000000080000000000610400"], &(0x7f00000001c0)=""/29, 0x40, 0x1d, 0x1}, 0x28) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x0, 0x2, 0x9}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000000e408000000f5ff00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000fcffffff0000000080000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000000400000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@empty, 0x8000000, 0x2, 0x3, 0x4, 0x0, 0x5}, 0x20) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x3a0, 0xffffffff, 0xf0, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x318, 0x318, 0x318, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x35, {0x3}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x3d, {0x6}}}}, {{@ipv6={@private0, @loopback, [0xff, 0x0, 0xff000000, 0xff000000], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0x2, {0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) 447.490277ms ago: executing program 0 (id=10782): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x10, 0x2b, 0x0, @private2, @local, {[@fragment={0x0, 0x0, 0x3, 0x0, 0x0, 0x1}], {0x0, 0x0, 0x8}}}}}}, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x54, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x40011}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'dvmrp0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x30, 0x0, 0x0, 0x8000}, {0x6}]}, 0x10) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000004b40)={&(0x7f0000004e00)=@newtaction={0x46e8, 0x30, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [{0x46d4, 0x1, [@m_pedit={0x46d0, 0x1e, 0x0, 0x0, {{0xa}, {0x46a4, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0xe, 0x5f3e, 0xffffffffffffffff, 0x4, 0x60c}, 0x8, 0x6}, [{0x9, 0xb0a, 0x3, 0xf, 0x9, 0x1376}, {0xffff, 0x8, 0x400, 0x9, 0x82, 0x8}, {0x8, 0x81, 0x8, 0x78, 0x4, 0x9}, {0xbb77, 0x6, 0x7fffffff, 0xa, 0x81, 0x400}, {0x2, 0xfff, 0x6, 0xffff9fd5, 0x7ff, 0x100}, {0x8, 0x6, 0xf28b, 0x1, 0xfffffc21, 0x67}, {0x81, 0x4, 0x1b, 0x5, 0x4, 0x7}, {0x8, 0x4, 0xffffbc46, 0xc, 0x0, 0x4}, {0x3, 0x7, 0x1, 0x401, 0xffffffff, 0x7}, {0x0, 0x7, 0x4, 0x7f, 0x4e68, 0xf}, {0x89b8, 0x3, 0x9, 0xb110, 0x1, 0x7fffffff}, {0x6, 0x1, 0x6, 0x6, 0x6, 0x2}, {0x3, 0x7fffffff, 0xc, 0x3, 0xe, 0x8}, {0x6, 0xcd4b, 0x7, 0x7, 0x10}, {0x9217, 0xafde, 0x4, 0xffff, 0x9, 0x8a9}, {0x1a4, 0x80000001, 0x66e8, 0x7, 0xfff, 0x711}, {0xa0, 0x200, 0x8, 0x1, 0x1, 0xf}, {0x8, 0x2, 0x0, 0x401, 0x4, 0x101}, {0x8000, 0x8521, 0x3, 0x4, 0x4, 0x3}, {0x10001, 0x6, 0x3, 0x3, 0x1, 0x6}, {0x4, 0x1, 0x8186, 0x8, 0xc, 0x34}, {0x6ee, 0x3, 0x2, 0x5, 0x1, 0x5}, {0x8, 0x3, 0x8, 0x5, 0x101, 0x5}, {0x526, 0x3, 0xf, 0x600c96bb, 0x9b49, 0x6}, {0x58d0, 0x0, 0x5, 0x7ff, 0xc, 0x1}, {0x3, 0xe, 0x3, 0x6, 0x200, 0x5c7c}, {0x6, 0x9, 0x9, 0x2, 0x9, 0x6}, {0x8, 0xfffffff7, 0x0, 0xae7, 0xfff}, {0x7, 0xada5, 0xaa, 0x5, 0x80000000, 0xee}, {0x10000, 0xc, 0x0, 0x1, 0x4, 0xb0}, {0x5, 0x2, 0x0, 0xffffffff, 0x1c6, 0xb}, {0x85, 0xeb7, 0xf1092c6, 0x2, 0x0, 0x29c}, {0xfffffc00, 0x7, 0x8, 0x76a7bc96, 0x7, 0xf}, {0x1, 0xfffffffe, 0x80000000, 0x7, 0x6, 0xfffffc00}, {0x2, 0x6, 0x200, 0x5, 0x6, 0x1}, {0x5, 0x7, 0x0, 0xffffff81, 0x0, 0x1}, {0x7e1, 0x80, 0x25, 0x7f, 0xbcc, 0x7}, {0xe, 0x1, 0x3, 0x1, 0x7ff, 0x6167}, {0x4, 0x4, 0x9, 0x7000, 0x9, 0xe09d}, {0x3, 0xe, 0xfffffbff, 0x9, 0x1000, 0xb07}, {0x3, 0x7, 0xcbf, 0xe, 0x400, 0x3}, {0x400, 0xc0b, 0x18, 0x4, 0x69, 0x8}, {0x0, 0x3, 0x5, 0xffffffff, 0x1ff, 0x5bfc}, {0x107, 0xb4000000, 0x7, 0x2, 0x10000, 0x21ed}, {0x3, 0x401, 0x4, 0x7fffffff, 0x3, 0x8}, {0x90, 0x3, 0x0, 0x9, 0x1, 0x3}, {0x2, 0xffffffff, 0x7, 0x400, 0x8, 0xf}, {0xc, 0x3, 0xfffffff9, 0x0, 0x4, 0xffffb0c7}, {0x6, 0x8, 0x80000001, 0x2, 0x1, 0x7ff}, {0x4, 0x6fc, 0x3, 0x6, 0x2, 0xdc33}, {0x7f, 0x1ff, 0x5, 0x9, 0xffffffff}, {0x9, 0x80000000, 0x5, 0x3ff, 0x7, 0xc}, {0x0, 0x0, 0x2, 0x3, 0x0, 0x5}, {0xffff0000, 0x1, 0xfff, 0x8, 0x0, 0xe}, {0xffff5878, 0x9, 0xfffffffa, 0x800, 0x1, 0xffff}, {0x9, 0x3, 0x4, 0x23c6f1bf, 0x4, 0x7f}, {0x8, 0xc0d3, 0x3, 0x3, 0xa9, 0x10000}, {0xa, 0x9c0e, 0xfffffff9, 0x1, 0x8, 0x3}, {0x4, 0x7, 0x7ff, 0x3, 0x91, 0x5c7}, {0x1, 0x1, 0xe9cd, 0x1, 0x0, 0x8}, {0x80, 0xfffffffc, 0xffffffff, 0x80, 0x5c, 0x1}, {0x0, 0x6, 0xffff15b4, 0x18, 0x7a80000, 0x6}, {0x529, 0xfffffe77, 0x2, 0x5, 0x8, 0x10001}, {0xfffffffd, 0x5, 0x80, 0x0, 0x0, 0x1000}, {0x80000001, 0xb6c, 0x4, 0x3, 0x3ae, 0x4}, {0xfd23, 0x2, 0x4, 0x10000, 0x2, 0x7ff}, {0x5, 0xc, 0x3, 0xb, 0x3, 0x9}, {0x8000, 0x8000, 0x733, 0x8d6, 0xffffffff, 0x2}, {0xfffffffc, 0x4, 0xe, 0x5ca, 0xfffffffe, 0x3}, {0x8, 0x2, 0x7, 0x6, 0x9, 0x1}, {0x9, 0x80, 0x7fff, 0xcd57, 0x2, 0x13b7}, {0x4, 0x6, 0xd1eb, 0x8, 0x7, 0x8}, {0xad6, 0x7, 0x4a46, 0x5, 0x2, 0x3}, {0x9, 0x101, 0x7, 0xf91, 0xffff, 0xc7bb}, {0x8423, 0x770, 0x200, 0x400, 0xfff, 0x1}, {0x9, 0xf, 0xd, 0x2, 0x10000, 0x4}, {0xb, 0x0, 0xc, 0xfffffc81, 0x1, 0x5}, {0x3d00, 0xdab, 0xff, 0x9, 0xee2}, {0x2, 0xf86, 0xa, 0x2, 0x6, 0x400}, {0x0, 0x8000, 0x2, 0x101, 0x10000, 0x2000}, {0x4, 0x7f, 0x8, 0x5, 0x3, 0xffff7fff}, {0x8, 0x8000, 0x6, 0x1, 0xf8, 0x7}, {0xffff61c6, 0x7fff, 0x0, 0x8, 0x8, 0x9fa2}, {0x0, 0x0, 0x9, 0x7, 0xfffff773, 0x511}, {0x1, 0xb, 0x7, 0x4, 0xffff79fe, 0x2}, {0xffffffff, 0x1, 0x4, 0x3, 0x5f9, 0xff}, {0xb, 0x4, 0x2, 0xd, 0x7, 0x80}, {0x3, 0x7, 0x0, 0x200040, 0x5, 0xf4}, {0x1, 0xe0e8, 0x8000, 0xc, 0x80000000, 0x4}, {0xfffffea6, 0x0, 0x1, 0xe, 0x8, 0x6}, {0x7, 0xf, 0x7fff, 0x0, 0x22, 0x6}, {0x7, 0x80000000, 0xff, 0x35, 0x6f4a5b74, 0xfffffeff}, {0x3, 0x1, 0x5, 0xce, 0x8, 0xfffff48e}, {0x1ff, 0x9, 0x200, 0x2, 0x7fffffff, 0x5}, {0x8, 0x1000, 0x4, 0x0, 0x7, 0x1}, {0x9, 0xf, 0x10001, 0xa838, 0x9, 0x6}, {0x10, 0x2, 0x87, 0x3, 0xffffffff, 0x3}, {0x8, 0x67f0, 0x7, 0x9, 0xa0d, 0x1ff}, {0x9, 0x400, 0xb917, 0x5, 0x5, 0x3}, {0x1, 0xffffffe8, 0xffffffff, 0x6, 0x2, 0xa}, {0x4, 0x1, 0xfffff9e6, 0x9, 0xe438, 0x8}, {0x40, 0x6, 0xfffffffe, 0x7fffffff, 0x7f, 0x2a8}, {0x6, 0x7, 0x7, 0x8001, 0x2d, 0x7}, {0x7, 0xf, 0x5, 0x7ff, 0x3, 0x4}, {0x4, 0x0, 0xffffabd5, 0x80000001, 0x101, 0x7}, {0x7, 0x3, 0x80000000, 0x7fff, 0x76, 0x1}, {0x8, 0x1, 0xf, 0xfffff001, 0x7}, {0x5, 0x7fff, 0xe, 0x2, 0x1, 0x101}, {0x4, 0x1ff, 0x4, 0x6, 0xe7fe, 0xff}, {0x1, 0x4, 0x5, 0x3, 0xffffffff, 0x9}, {0x2, 0xff, 0x8, 0x1, 0x7}, {0xe, 0x4, 0xfff, 0x8, 0x7ff, 0x2d68}, {0x1ff, 0x4, 0x80000001, 0x5, 0x4034, 0x2}, {0xa, 0x8, 0x5, 0x2, 0x1, 0x9}, {0x1, 0x19, 0x7, 0x8, 0xfffffff7, 0x1}, {0xccb2, 0x6, 0xb27, 0x4e, 0x5, 0x4}, {0x10000, 0x8, 0x40, 0x6, 0x100, 0x3}, {0x8, 0x7f, 0x5, 0x9c0, 0xadf, 0x5a}, {0x5, 0xfffff482, 0x2, 0x6, 0x0, 0xb}, {0x2, 0xb, 0x6, 0x952, 0x1, 0x3}, {0x1, 0x9, 0xffffffc0, 0x4, 0x9, 0x7}, {0x3, 0x6f, 0x1, 0x4, 0xfffffff7, 0x4}, {0x400, 0xf3fa, 0x5, 0x4, 0x0, 0x5}, {0x5ff, 0xc3d1, 0x80000001, 0xec, 0x8, 0x1aaf}, {0x0, 0x2, 0x6, 0x5, 0x8, 0x9}, {0x62b7, 0xbfb, 0x1f, 0x8001, 0x8000, 0x4}, {0x1ff, 0x8, 0x3, 0x15bd, 0xfffffffc, 0x3}, {0xde, 0x8, 0x9, 0x2, 0x8, 0x5}], [{0x4, 0x1}, {0x5, 0x1}, {}, {0x5, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x5}, {0x5}, {0x3, 0x1}, {0x3}, {0x1}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x4}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x5}, {0x2, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3}, {0x4, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5}, {0x0, 0x1}, {0x5, 0x1}, {}, {0x3, 0x1}, {0x5}, {0x4, 0x1}, {0x5}, {}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x4}, {0x3, 0x1}, {0x3}, {0x2}, {0x2, 0x1}, {0x5, 0x1}, {0x4}, {0xb, 0x1}, {0x2}, {}, {0x5}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x4}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x2, 0x1}, {0x2}, {0x4d4ef39f4a1608d2, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4}, {0x1}, {0x2}, {0x5}, {0x5}, {0x2b4c0d11ce634288}, {0x1, 0x1}, {0x1}, {0x4}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x1}, {0x4, 0x1}, {0x3}, {0x1, 0x1}, {0x2}, {0x1}, {}, {}, {0x4}, {0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {0x1}, {0x5, 0x1}]}}, @TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x0, 0x4, 0x1}, 0xb2, 0xba}, [{0x7b59074e, 0x0, 0x8, 0xff, 0x2, 0x9}, {0xe0, 0x48, 0x3, 0xa49, 0x81, 0x8}, {0xfffffff9, 0x5, 0x7, 0xc, 0x7, 0xfffffff8}, {0xaef4, 0x9b1, 0x0, 0x6, 0x200, 0xc}, {0xd, 0xbd, 0xfe, 0x7, 0x3, 0x6}, {0x0, 0x4, 0x1000, 0x80000000, 0x7, 0x8}, {0xc, 0x3, 0xd, 0x2, 0x6, 0x9}, {0x9d7e, 0x9, 0xf, 0x6, 0x5, 0x2}, {0x8001, 0xffffff01, 0x40000, 0xfffff000, 0x10}, {0x100, 0x8, 0x8, 0xa543, 0x40, 0x1}, {0x34000000, 0x5, 0x1, 0x5, 0x7, 0x81}, {0xfffffff9, 0x7, 0x0, 0x2, 0x101}, {0x80, 0x2400, 0x2, 0x5, 0x4, 0x5}, {0x9, 0x8, 0x7, 0x1, 0x9, 0x4}, {0x6, 0xaf, 0x6, 0x9, 0x400, 0x864}, {0x0, 0xb, 0x24dbfcde, 0x3, 0x8000, 0x1}, {0x7, 0x9, 0xf, 0x2, 0x4}, {0x1, 0x2, 0x10000, 0x9, 0x8, 0x401}, {0x1, 0x7, 0x5, 0x4, 0x5, 0xe7a}, {0x2, 0x80, 0xb, 0x7fffffff, 0x2, 0xb}, {0x2, 0x1, 0x7, 0x7e, 0x8, 0x1000}, {0x2, 0x1, 0x4, 0x19a, 0xc1, 0x6}, {0x401, 0x401, 0x9, 0x1, 0x1, 0x3ff}, {0x7fff, 0x7ff, 0x8, 0x5, 0x2, 0x6}, {0xb0, 0x10000, 0x6, 0x1, 0x3, 0x8}, {0x7, 0x7fffffff, 0x2, 0x7, 0x62f, 0xa7}, {0x4, 0x5, 0x3, 0x9, 0xc43, 0x4}, {0xffff8000, 0x6, 0x1, 0x7, 0x8001, 0x7fff}, {0x1, 0x81, 0x8, 0xff, 0xe92, 0x3}, {0x7ff, 0x28, 0x7, 0x0, 0x0, 0x8}, {0x6, 0x7, 0x6, 0x5, 0x4, 0xffffff25}, {0x9, 0x8000, 0x2, 0x6, 0xf28c, 0x1}, {0xf7, 0x2, 0x101, 0x3, 0x401, 0x101}, {0xdc4, 0x9, 0x4, 0x7, 0xffffffff, 0x7}, {0x4, 0x544d, 0x6, 0x8, 0x9, 0x1}, {0x36, 0x5, 0x101, 0x1ff, 0x5, 0x4}, {0x8000, 0x5, 0x6b, 0x1, 0x1, 0xfffffffc}, {0x3, 0x80000000, 0x6, 0xf3ca, 0x9, 0x784}, {0x7, 0x3, 0xf, 0x8a, 0x101, 0x800}, {0x4, 0x76, 0x7, 0x7, 0x0, 0x8a33}, {0x7, 0x6, 0x4, 0x8, 0xc861, 0x5}, {0x758, 0xe, 0x5c, 0x400, 0x8, 0x10001}, {0x0, 0xa, 0x3, 0xbf5c4a4b, 0x8, 0x180000}, {0x9, 0x9, 0x8, 0x7, 0xffffffff, 0x3}, {0x100, 0xfffffff3, 0xbd, 0x7fff, 0x3, 0x1}, {0xea94, 0x2, 0xc, 0x7fff, 0x4b09, 0x2}, {0x8001, 0x4bf, 0x4, 0x7, 0x1, 0xa}, {0xdf8b, 0x3, 0x200, 0xe903, 0x80, 0x197b0}, {0x1, 0x3, 0xfffffff7, 0x1, 0x7, 0xb7ce}, {0xd7, 0x9, 0x5, 0xfffffffd, 0x43, 0x71c}, {0x5, 0x3, 0x4, 0x8, 0x7, 0x10001}, {0x8, 0x8, 0x4, 0x3, 0x0, 0x200}, {0x342e0f9d, 0x401, 0x1, 0x8, 0x8, 0x6}, {0x3, 0x4, 0xfffffff5, 0x6, 0x6, 0x7ff}, {0x2, 0x5, 0x3ff, 0x8, 0x5, 0x8}, {0x6c0, 0xa54b, 0x81, 0x200, 0xa3fa, 0x5338}, {0x112, 0x8, 0x7, 0x5, 0x8, 0x8000}, {0x7ff, 0x7f, 0x80000001, 0x2289895, 0xd33, 0x1}, {0x6, 0x100, 0x7, 0x401, 0xa528, 0x4}, {0x3, 0xff, 0x8, 0x4, 0x1000, 0x4}, {0x7, 0x0, 0x8001, 0x767, 0xaa6, 0x8}, {0x7f, 0x1, 0xc, 0x0, 0x8, 0x100}, {0xd8, 0x0, 0x5, 0x3, 0x3, 0x3}, {0x62, 0x3, 0x8, 0x2, 0x9, 0x6a56}, {0xffff, 0x2, 0x2, 0x7, 0x400, 0x6}, {0x6, 0x401, 0x4, 0x400000, 0x39f2, 0x7fff}, {0x1000, 0x0, 0xffffff53, 0x2, 0x5, 0x10}, {0x0, 0x5, 0x400, 0x5, 0x3, 0x7}, {0x10001, 0x7, 0x32, 0x2, 0x5, 0xb241}, {0x0, 0x80000, 0xa, 0x10001, 0x3, 0x7ff}, {0x8001, 0x80000000, 0xfffffffe, 0x379, 0x8, 0x37b855e6}, {0xffffffff, 0x5, 0x0, 0x7, 0x7, 0x2}, {0x1, 0x2, 0x71, 0x2, 0x6, 0x6}, {0xd37, 0x400, 0x89, 0x2, 0x0, 0x3}, {0xdd69, 0x80000000, 0x0, 0x1, 0x8, 0x5}, {0x5, 0x2, 0x7ff, 0x80, 0x3, 0x9}, {0x0, 0x4, 0x1, 0x8, 0xffff2ff5, 0xfffffffc}, {0x0, 0x4, 0x0, 0x2800, 0x9, 0xd}, {0x8, 0x71, 0x80, 0x5, 0xc, 0x22b3}, {0x41c5, 0x9, 0x7, 0x3, 0x601, 0x9}, {0x5, 0x4, 0x8001, 0x4, 0x3, 0xd}, {0x6, 0x3, 0xfffffffb, 0x1000, 0x3, 0x1000}, {0x3c, 0x2, 0x4, 0x3, 0x7, 0x6}, {0x1ff, 0xe, 0xd14, 0x2, 0x651e7419, 0x4}, {0x2, 0xd0d, 0x3, 0xc, 0x3, 0x2952}, {0x5, 0x10, 0x1, 0x9, 0x6, 0x9}, {0x8, 0x6, 0x6, 0x80000000, 0xb3, 0x8}, {0x1, 0x7fffffff, 0x7, 0x8444, 0xfffffffd, 0x1}, {0x3245ddf0, 0x0, 0x5, 0xb, 0x28, 0x7}, {0x9, 0xee, 0x3, 0x9, 0x1, 0x4}, {0x101, 0xfe, 0x0, 0x64, 0x7, 0x80000000}, {0x2, 0x8, 0x2, 0x7, 0x3, 0x286}, {0x4, 0x3, 0x7fff, 0x7, 0xa, 0xcd}, {0x5, 0x8, 0xe64, 0x1, 0xb6, 0x1c9dd2bf}, {0x8, 0x2, 0x6, 0x40, 0x5}, {0x8, 0xb, 0x0, 0x4, 0xfffffffe, 0x735}, {0x567c, 0x7, 0x3, 0x80000001, 0x1, 0x7}, {0x6, 0xffffffff, 0x0, 0x3, 0x1, 0x10001}, {0x61, 0x7, 0x7, 0x8, 0x2, 0x3}, {0x7, 0x80000000, 0xb4dfbc4, 0x80000001, 0x100, 0x8}, {0x80000001, 0x2, 0x9, 0x10000, 0xffffffff, 0x8}, {0xca2a, 0xd7, 0x3, 0x6, 0x30, 0x9}, {0x2, 0x0, 0x5, 0x7, 0xffffffff, 0x4}, {0x6, 0x8, 0x0, 0xfffffd95, 0x91f, 0xf}, {0x4, 0x81, 0xfff, 0xa00, 0x1000, 0x7f}, {0x0, 0xffff, 0x2, 0x10001, 0x8c37, 0xc}, {0xfffffffb, 0x0, 0x6a5d, 0x100, 0x13e, 0x1}, {0x800, 0x2, 0x9}, {0x1, 0x80, 0x2, 0x7, 0x0, 0x17}, {0x6a, 0x80, 0x400, 0x5, 0x3, 0x800}, {0x8, 0x2, 0x4, 0x4, 0x7, 0xfff}, {0x2, 0x81, 0x10000, 0x7, 0x2aaa54ae, 0x8}, {0x6, 0x7d6162b3, 0x80000000, 0x2, 0x168, 0x9}, {0xe, 0xb, 0x10000, 0xf, 0x61, 0x800}, {0x5f, 0x80000001, 0x8, 0x2, 0x2, 0x4}, {0x3, 0x2, 0x282a56f8, 0x7, 0x6c, 0x2a2}, {0x400, 0x7ff, 0x2, 0x7, 0x3}, {0xffffff2d, 0x3, 0x7, 0x1, 0x7, 0x2b}, {0x81, 0x6, 0x3, 0x77, 0x1, 0x7}, {0xed0e, 0x2, 0x1, 0x6, 0x7, 0x6}, {0x3, 0x8, 0x5, 0xe, 0x7, 0xa}, {0xf, 0x435, 0x5, 0xc8c8, 0x3f, 0x2}, {0xe, 0x2, 0x4, 0x0, 0x5, 0x3}, {0x40, 0x3ff, 0x5, 0x2, 0x4, 0x4}, {0x4, 0xbf, 0xfffffff5, 0x80000000, 0xe8, 0x2}, {0x3e, 0xfffffffb, 0x8, 0x8, 0x8, 0x3}, {0x5f, 0x8001, 0x3, 0x3, 0x2, 0x9}, {0x6, 0x2, 0x80000000, 0x4, 0x9, 0x1}], [{0x3}, {0x5, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x4}, {0x5}, {0x2}, {0x2, 0x1}, {0x4}, {}, {0x5}, {0x1, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x4}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {}, {0x3}, {0x0, 0x1}, {0x2}, {0x3, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x2}, {0x2}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {0x4}, {}, {0x5, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x2}, {0x2}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x2}, {0x4}, {0x2, 0x1}, {0x1}, {0x1}, {0x0, 0x1}, {0x7, 0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x2152f0d0de7e2261}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x3}, {0x4}, {0x4}, {0x2}, {0x2}, {0x5}, {0x2}, {0x4}, {0x3}, {0x5}, {}, {0x1, 0x1}, {}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4}, {0x3}, {0x5}, {0x3}, {0x0, 0x1}, {0x4}, {0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {0x5, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x5}, {0x3}, {0x5, 0x1}, {0x1}, {0x0, 0x1}, {0x1}, {0x2}, {0x3, 0x1}]}}, @TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x9, 0xfffffc00, 0x0, 0x3}, 0x2, 0xb}, [{0x6e, 0x1000, 0x2, 0x2, 0x7, 0x1}, {0x3, 0x100, 0x7, 0x8, 0x2, 0x800}, {0x4b, 0x3, 0xfb, 0x8, 0x7, 0xf2}, {0x80, 0x0, 0x7f, 0x6, 0x5487, 0x9}, {0x9, 0xfffffffc, 0x2, 0x9, 0xfb, 0x1}, {0x7ff, 0x1, 0x101, 0x1000, 0x9, 0x1}, {0x6d3, 0x10000, 0x1, 0x75a6, 0xcf05, 0x6}, {0x6, 0x880d, 0x2, 0xf, 0x2, 0x400}, {0x9, 0x10000, 0x7ff, 0xffffff80, 0x1, 0x4}, {0x9, 0xc, 0xfffff9a4, 0x3, 0x7ff, 0x9e6}, {0xc9, 0x3, 0x7fffffff, 0x3, 0x2, 0xfffff001}, {0x6, 0x200, 0x3, 0x8, 0xfffffffb, 0xade}, {0x67c1, 0x9, 0x2, 0x9, 0x7, 0x1}, {0x1, 0x9765, 0xa, 0x5, 0xfef, 0x85f9}, {0x3, 0x5, 0x3ff, 0x3, 0x1, 0x6}, {0x7, 0xfff, 0x7fffffff, 0xa, 0xb, 0xfff}, {0xa, 0x2, 0xfffffff9, 0x9fea, 0x101, 0x22fd00}, {0x9, 0x2, 0x5, 0x2, 0x1, 0x7f}, {0x5, 0x1, 0x2, 0x400, 0x400, 0x7f}, {0x5eb8, 0x40b, 0x95c, 0x5a1, 0x25, 0x1}, {0x9, 0x1, 0x1, 0xba2, 0xf}, {0x8d7, 0x6, 0x4, 0x9, 0x8, 0x7}, {0x3, 0x8001, 0x10000, 0x7, 0x800}, {0x6, 0x0, 0x1, 0x9, 0x5, 0x92b}, {0x77f, 0x80000001, 0x2, 0x6, 0x2, 0xb}, {0x2, 0x5, 0x2, 0x5, 0x3, 0x7f}, {0x80, 0xfff, 0x2, 0x7, 0x0, 0x401}, {0xb, 0x3ff, 0x3, 0x7fffffff, 0x80000000, 0xfff}, {0xfffffff9, 0xfffffffe, 0x3ff, 0xfffffffa, 0xfffffff0, 0xef0}, {0x1000, 0x7, 0x10001, 0x55bb0cd4, 0x1, 0xa}, {0x9, 0x8, 0xffff, 0x1, 0xb89, 0x1}, {0x8, 0x28000, 0x19c4, 0xc, 0x1000, 0x44e}, {0x80000000, 0x9, 0x10001, 0x9, 0x7, 0x7}, {0x9, 0x3, 0x200, 0x3ff, 0x8001, 0xffffffff}, {0x8, 0x7, 0x0, 0x0, 0x9, 0x9}, {0xa39b, 0x5, 0x6, 0x9, 0x6, 0x3}, {0x4, 0x4, 0x2, 0x6, 0x10, 0xffffffff}, {0x9, 0x18, 0x4, 0x2, 0xe5ea, 0x7}, {0x8, 0x0, 0xffffffff, 0x5, 0x8, 0x2}, {0x6, 0x3, 0x0, 0xfffffffe, 0x6, 0x1}, {0x382, 0xe6, 0x6, 0x7, 0x7, 0x800}, {0x507d, 0x200, 0x1ff, 0xe, 0x40}, {0x5fb, 0xffffffff, 0x3, 0xfffffff1, 0x200, 0x10}, {0x2, 0x8, 0x1, 0xdc3, 0x2}, {0x7, 0x8, 0x401, 0x9, 0xa9, 0x4}, {0xb, 0x7ff, 0x9, 0x0, 0xe43, 0x6}, {0x2, 0x5, 0x0, 0x5, 0x4, 0x8001}, {0x1ff, 0x9, 0x5, 0x32f7f5fa, 0x2, 0xffffffff}, {0xed, 0xffffff81, 0x4, 0x6, 0xce, 0x4}, {0x2, 0x7, 0x0, 0x300000, 0xfffffffb, 0x2}, {0x0, 0xf, 0x2, 0x7, 0x0, 0xffffff01}, {0x0, 0x1, 0xfffffffb, 0x5, 0x9, 0x9}, {0x8, 0xe, 0x4, 0x8, 0x6, 0x4}, {0x5, 0x7, 0xf3d0, 0x0, 0x6, 0x23}, {0xfffffff9, 0xff, 0x9, 0x1ce0, 0xe, 0x4}, {0x6, 0x200, 0x401, 0x7f, 0xffff, 0x81}, {0x0, 0x4e9b, 0x0, 0xa7eb, 0x10001, 0x1ff}, {0x4, 0x3, 0x1, 0x2000, 0x6, 0xc}, {0x8000, 0x7, 0x7, 0x0, 0x8, 0x7}, {0x10, 0x9, 0x4, 0x3, 0x80, 0x200}, {0x9, 0x9, 0x8c0, 0x1, 0xfffffffb, 0x7}, {0x0, 0x6c1, 0x5, 0x3, 0x8, 0xaf4c}, {0x3, 0x4, 0x8, 0x9, 0x6, 0x7}, {0x8, 0xa532, 0x81, 0x69, 0xec, 0x2}, {0x19ee024d, 0x7dd8, 0x3, 0xffff, 0x400, 0x4}, {0x3, 0x7fff, 0xcba0, 0x8a, 0x1, 0x4}, {0xff, 0x3, 0x4, 0x5, 0x130c, 0xfffeffff}, {0x2, 0x400, 0x7fff, 0x7, 0x800, 0x7ff}, {0xd3d, 0x3, 0xfff, 0x0, 0x7, 0x6}, {0x6, 0x0, 0x122, 0x3ff, 0xffffca74, 0x2}, {0xa, 0x4, 0x400, 0x9, 0x8a, 0x8}, {0x6, 0x80000000, 0xec27, 0xffffffff, 0x0, 0x4}, {0xffff, 0x8, 0x5, 0x1000, 0x10, 0x2}, {0x3ff, 0xfffffffb, 0x8, 0x4, 0xe, 0x18}, {0x10, 0xffff, 0x4, 0x9, 0x5, 0xc}, {0x9, 0x2, 0x6b868, 0x9, 0x9c, 0xc}, {0x9, 0x7fff, 0x1, 0x8000, 0x4, 0x80000000}, {0x1, 0xffff, 0x2b, 0x800, 0x9, 0x2}, {0xa, 0x7, 0x5, 0x8, 0x4, 0x6}, {0x8000, 0x2, 0x4, 0x6, 0xb, 0x1}, {0x706, 0x10, 0xfff, 0x3, 0x2, 0x69e}, {0x8, 0x67f09ee4, 0x2, 0xffffffff, 0x8, 0x3ff}, {0x10, 0x3, 0x101, 0x200, 0x1ff, 0xfff}, {0xad, 0x3, 0x2, 0x2, 0xfffffff8, 0x7ff}, {0x0, 0x8, 0x0, 0x7eb5, 0x10, 0x8}, {0x1, 0x1, 0x5, 0x7, 0x4, 0x2}, {0xff, 0x5, 0x7f, 0xaf2, 0x8001, 0x5}, {0x6, 0x5, 0x1, 0x9, 0x2, 0x36}, {0x7, 0x1000, 0xfff, 0x6, 0x8, 0x8}, {0x9, 0x9, 0x8001, 0x7fe00, 0x80, 0x6}, {0x101, 0x5, 0x5, 0x1, 0x5, 0x81}, {0x3, 0x5, 0xc, 0x9, 0x6, 0x6c7}, {0x5, 0x79e4, 0x8a, 0x8, 0x8, 0x8}, {0x8, 0x7fffffff, 0x3f3, 0x4c9b, 0x5, 0x3}, {0xffffffff, 0x6, 0x4, 0x7fffffff, 0x8001, 0x2}, {0x1bea, 0x4a1b7e08, 0x1, 0xffffff75, 0x7, 0xc2c76b5}, {0xfffffff3, 0x9, 0x5, 0x7, 0xffffff25, 0x5}, {0xffff8576, 0xe05, 0xc, 0x3468, 0x5, 0x9}, {0x4, 0x7f, 0x2, 0x8, 0xe, 0x5}, {0x8, 0x5, 0x9, 0xffffff81, 0x1, 0x6}, {0x8000, 0x81, 0x1, 0xffffffff}, {0x8, 0x7, 0xefa, 0x5, 0xb335, 0x80000001}, {0x5, 0x4, 0x1, 0x7ff, 0x3, 0x8}, {0x3, 0x4, 0xfffffff9, 0x10001, 0x3, 0xa}, {0xe78, 0x4, 0x7fff, 0x3ff, 0x8, 0x3725}, {0x3, 0x4, 0x3, 0x2, 0x6d, 0x393}, {0xfffffffb, 0x10000, 0x9, 0x0, 0x2, 0xfffffff8}, {0x1, 0x7, 0x5, 0xfff, 0xd6dc, 0x3}, {0x7, 0x7fffffff, 0x200, 0xfff, 0x2}, {0x4, 0x120, 0xfff, 0xa, 0x8fd, 0x5}, {0x0, 0x4, 0x7f1, 0x7eb6, 0x2, 0x5}, {0x9, 0x5, 0x10000, 0x6, 0x9, 0xd}, {0x5, 0xfffffff9, 0x6, 0x7, 0x5, 0x3}, {0x3, 0xebed, 0xfffffff7, 0xfffffffa, 0x7f, 0xd5c}, {0xfffffff4, 0x8001, 0x60, 0x5, 0x9, 0xfff}, {0xffffff95, 0x5, 0x5, 0x5, 0xffff, 0xfffffffa}, {0x4, 0x800, 0x9, 0x6, 0x180, 0x6}, {0x4393, 0x5, 0xffffff75, 0x1, 0x2, 0x1}, {0x1, 0x8, 0x2, 0xe, 0x6, 0x6}, {0xfffffffc, 0x87, 0x20, 0x81, 0x7a851035, 0x42f}, {0x3, 0x1, 0x7, 0x4, 0x4, 0xf00000}, {0x3, 0x400, 0xbe35, 0x5, 0x2, 0x8}, {0x6d0, 0x8, 0x6, 0xfffffffe, 0x1, 0xce01}, {0x4, 0x4, 0x2, 0x3, 0x7, 0x8}, {0x10001, 0xc4f, 0x9ab, 0x8001, 0x0, 0xffffffff}, {0x0, 0x1ff, 0x0, 0x0, 0x5, 0xe}, {0x7, 0x369c6b5f, 0x5, 0x1, 0x1, 0xc1}, {0x3, 0x1, 0x800, 0xe, 0x9, 0x3}], [{0x1, 0x1}, {0x4, 0x1}, {0x4}, {}, {}, {0x3, 0x1}, {0x5}, {0x5}, {0x5, 0x1}, {0x2}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x4, 0x1}, {0x5}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {0x3}, {0x3}, {0x5}, {0x1, 0x1}, {0x5}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x4}, {0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x2}, {0x2}, {0x5, 0x3}, {0x1}, {0x2}, {0x3, 0x1}, {}, {0x4, 0x1}, {0x0, 0x1}, {0x7}, {0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0xa3d85f73dae52d58}, {0x5, 0x1}, {0x1, 0x1}, {0x4}, {0x3, 0x1}, {}, {0x1}, {0x4}, {0x3, 0x1}, {0x2}, {0x5, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x1}, {0x4}, {0x4}, {0x2}, {0x1}, {0x3}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {}, {0x4}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x4}, {0x2}, {0x5, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x3}, {0x4, 0x1}, {0x1}, {0x5}, {0x1, 0x1}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x4}, {0x1, 0x1}, {0x5}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {0x1}, {0x2}, {}, {}, {0x87b955025a62a5e6, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x5}, {0x5}, {0x4, 0x1}, {0x4, 0x1}], 0x1}}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x9, 0xa5f, 0x4, 0xb1, 0x6}, 0xde, 0x4}, [{0x3f5, 0xffffffdb, 0x7, 0x1, 0x4, 0x8}, {0xfff, 0x2, 0x10001, 0x4, 0xb542, 0x2}, {0xffffffff, 0x0, 0x0, 0x7, 0xe, 0x25}, {0x5, 0xf, 0x10000, 0xc00000, 0x7, 0x3}, {0x6, 0x7, 0x7, 0x5, 0x8, 0x9}, {0x9, 0x0, 0x5, 0x0, 0xb3, 0x401}, {0xd, 0x6, 0x1, 0xd008, 0xffffffff, 0x10001}, {0x3, 0x10, 0x6, 0xa493228, 0x8, 0x56e1}, {0x2, 0x5, 0x3, 0xffff7097, 0x5, 0x5}, {0x9, 0x0, 0x8, 0x7, 0xfffffffc, 0x9}, {0xfffff001, 0x7f, 0x100, 0x1, 0x5, 0x76}, {0x3, 0xc, 0x3, 0x1, 0x0, 0x5}, {0xfffffff7, 0x7, 0x8d1, 0x4, 0x6, 0x6}, {0x6, 0x9, 0xfffffffd, 0x1, 0xffff, 0x7fff}, {0x5, 0x10000, 0x7fffffff, 0x6, 0xe10b, 0xcf}, {0x0, 0xa, 0x80000000, 0x9, 0x10001, 0x80000000}, {0x3, 0x4, 0x6, 0x40100000, 0x3b5, 0x9}, {0x6b1, 0x0, 0x1, 0x0, 0x7fff, 0xa1}, {0xd, 0xb07a, 0x7, 0x7, 0x5319, 0x5}, {0x7fffffff, 0x1, 0xf76, 0x4, 0x7, 0xcb9}, {0x3ff, 0x7e6, 0x400, 0x4, 0x80, 0x1}, {0x2, 0x9, 0x4, 0xfffffffb, 0x3, 0x8}, {0x6, 0x6, 0x8000, 0x4, 0x10001, 0x7f}, {0x7, 0x1, 0x8, 0x34, 0x2, 0x6}, {0x3, 0xfffffff3, 0x8, 0x23, 0x6, 0xffffffff}, {0x200, 0x6, 0x7fff, 0x4, 0x8, 0xa}, {0x1, 0xfffffff9, 0xc, 0x7fffffff, 0x9bb, 0x8082}, {0x4, 0x6, 0x8, 0x5, 0x0, 0x40}, {0x401, 0xc, 0x10000, 0x995, 0x1}, {0x10001, 0x5, 0xf3e9, 0x100, 0x5, 0x8}, {0x8, 0x5, 0x7, 0xe30, 0x6, 0x3}, {0x3, 0x1ff, 0x9, 0x5, 0x7}, {0xff, 0x8, 0xad7, 0x1, 0x1000, 0x7fff}, {0x7, 0x6, 0xffff, 0x6, 0xa, 0x1}, {0x4, 0xe, 0xffffffff, 0x8e0, 0x2, 0x6}, {0x5, 0x1, 0x0, 0xc0, 0x100, 0x1}, {0x3, 0x8, 0x3, 0xfffffffc, 0x9, 0x1}, {0x5, 0x401, 0x8, 0x80000000, 0x60, 0x9}, {0x1, 0x5ea, 0x100, 0x2, 0x401, 0x106}, {0xc20, 0x800, 0x1ea, 0x5, 0x8}, {0x3, 0x2, 0x1, 0x81, 0x7d, 0x40}, {0x8001, 0x5b9, 0x2b65, 0x7, 0x2}, {0xfff, 0x6, 0xfffffffe, 0x9, 0x2, 0x2}, {0x3, 0xffff, 0x7, 0x1, 0x696ff1ba, 0xc}, {0x2, 0x5, 0x7, 0x5, 0x3, 0x74}, {0x8, 0x9, 0x18a, 0x4, 0xfffffff3, 0xb}, {0x4, 0x0, 0x8, 0x0, 0xb75, 0x4}, {0x8, 0x2, 0x3, 0x9, 0x7, 0x7}, {0xfffffffe, 0x4, 0x7, 0x1, 0x9, 0x40}, {0x0, 0xfffffffc, 0x5, 0x1, 0xc, 0x1}, {0x8, 0x8, 0x7f, 0x0, 0x6, 0x80}, {0x200, 0x7fff, 0x0, 0x9, 0x3ff, 0x7}, {0x5, 0xc5, 0x3, 0x6, 0xffffffff, 0xf783}, {0x5, 0x1, 0x7, 0xa4, 0x89c5, 0xfaa}, {0x0, 0x5f2c25c, 0xfffffffa, 0x0, 0x4, 0x10001}, {0x7, 0xf7c, 0x1, 0xfffffffe, 0xe, 0xfffffffd}, {0xfaa, 0x8, 0xe, 0xb, 0xa, 0x10000}, {0x4bdd9df8, 0x3, 0x8, 0x80000001, 0xf83, 0x7ff}, {0x4, 0x9, 0x9, 0x0, 0xa5, 0x7}, {0x8, 0x5, 0x2, 0x7740000, 0x10, 0xc}, {0x7b72, 0x5, 0x7, 0x9, 0x9, 0x2a}, {0x8001, 0x8001, 0xfb8, 0x4, 0x7, 0x9}, {0x2, 0x5, 0x7, 0x74, 0xf, 0x7}, {0x3, 0x86c0, 0x1, 0x2, 0x40db, 0xfffffffb}, {0x6, 0x10001, 0xa, 0x80000000, 0x5, 0xa67e3f1}, {0x17, 0x3, 0xc, 0x8, 0xfca, 0x2}, {0x800, 0x80000001, 0xe7, 0xbc83, 0x4, 0x2}, {0x55, 0x2, 0x2, 0x0, 0x36, 0x4}, {0x4, 0x6, 0x8, 0x4, 0x8, 0x100}, {0x8, 0x9, 0x5, 0xfffffff5, 0x2, 0xf80}, {0x100, 0x1, 0x7, 0x16a, 0x77f8, 0x1000}, {0x4, 0x5, 0x80000001, 0xffffffff, 0x5, 0xfffffffe}, {0xb66, 0x0, 0x7, 0x1, 0xfffff001, 0x8000}, {0x3, 0xf7, 0xc9, 0x5b321789, 0x8, 0xffffffa4}, {0x3, 0x80000001, 0x0, 0xb, 0xa3, 0x80000001}, {0x80, 0x3, 0xfffffffd, 0x3, 0x5, 0xfffffffd}, {0x80000000, 0x3, 0x5, 0x0, 0x3, 0x1}, {0x4, 0x9, 0x8, 0x8001, 0x7fffffff, 0x7}, {0x9, 0x3, 0xb, 0x0, 0x0, 0x71}, {0x9, 0x9, 0x8, 0x9, 0x1, 0x9}, {0x8, 0x2, 0x6, 0x8, 0x6, 0x2}, {0xfffffffc, 0x1, 0x2, 0x81, 0x3, 0xfff}, {0x8, 0x1000, 0x1ff, 0x9aec, 0x7, 0x4}, {0xfffffff1, 0x1e, 0x6, 0x1, 0x8, 0x6}, {0x90c4, 0x3, 0x1, 0x4, 0x1ff, 0x7}, {0x2, 0x1, 0x6, 0x9, 0x7, 0x8}, {0xa, 0xffffff5b, 0x6, 0xfff, 0x6, 0x7fff}, {0x3, 0x5, 0xd, 0x5, 0x4, 0x1}, {0x1, 0x9, 0xea8, 0x6ec492a2, 0xffff0000, 0x7}, {0xa4d, 0x7fffffff, 0x9, 0x3, 0x0, 0x2}, {0x4, 0x4, 0x5, 0x0, 0x1, 0x94}, {0x1, 0x5, 0x7fff, 0x401, 0x0, 0x7}, {0x80, 0x1, 0xe815, 0x3ff, 0x0, 0x3}, {0x3, 0x6244, 0x80, 0x9, 0xffffffff, 0x2}, {0x3e, 0x0, 0x7, 0xecb, 0x8000, 0x1000}, {0x5, 0x5, 0xe7d3, 0x1, 0xffff, 0xfffffff8}, {0x0, 0x5, 0xb447, 0x6e3a}, {0x2, 0xd, 0x1, 0xff, 0xfff, 0x2}, {0xfffffffe, 0xfffffff9, 0x2, 0xc6d, 0x4, 0x8}, {0x3, 0x0, 0x9, 0x80, 0x7ff, 0x3}, {0x5, 0x8, 0x3, 0xc3, 0x7, 0xff00}, {0xffff, 0x2, 0x8, 0x0, 0x8, 0x8}, {0x5, 0x2, 0x4, 0x8001, 0x8, 0x3}, {0x0, 0x9, 0x28f0, 0xd, 0xfffeffff, 0x6}, {0x8, 0x4d, 0x2, 0x1, 0x7, 0x9}, {0xf, 0xfffffff6, 0x170f77bf, 0x7ff, 0x5, 0x4}, {0x9, 0x3, 0x40, 0x5, 0x7, 0x9}, {0xb, 0x7fffffff, 0x800, 0xc8, 0x4, 0x30cb}, {0x2a, 0xfff, 0x5, 0x2108, 0x0, 0x7}, {0x6, 0xf, 0x91, 0x8, 0x2, 0x1f04}, {0xfffffff4, 0xffff, 0xfffffffc, 0x8, 0xf75, 0x200}, {0x8000, 0x7fff, 0x6, 0x2, 0x2, 0xf}, {0x8, 0xe, 0x7, 0x2, 0x5ffe97d7, 0x8}, {0x426, 0x7fbd, 0x98, 0xa, 0x80000000, 0xc}, {0x6, 0x9, 0xfff, 0xd, 0x0, 0x2}, {0x10, 0x1, 0x0, 0xb, 0x0, 0x5}, {0x7, 0x10, 0x7, 0x100, 0x4, 0x4}, {0x80, 0x800, 0x7f, 0x0, 0x6, 0xd}, {0x8, 0x2, 0x3, 0x2, 0x39352fec, 0x4}, {0x1, 0x8, 0x6, 0x9, 0x0, 0x1b438583}, {0x40, 0x6, 0x2b56, 0xfffffffd, 0x9, 0x4}, {0x0, 0x6, 0x80, 0xe, 0xd2f}, {0x5, 0x8, 0x3, 0x6, 0x1, 0xfffffcda}, {0x2, 0x80, 0x4fbd, 0x8, 0x1, 0x8000}, {0x2, 0xd, 0x3dd, 0x4, 0x4, 0x99}, {0x3, 0x5, 0x1, 0x19, 0x8, 0x7}, {0x80cf, 0x7, 0x3, 0x7, 0x8, 0xffff49b7}, {0x40, 0x1, 0xfffffffa, 0x0, 0x7fffffff, 0xa1}], [{0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x2}, {0x4}, {0x1, 0x1}, {0x4}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x5}, {}, {0x4}, {0x2, 0x1}, {0x2}, {0x2}, {0x5, 0x1}, {0x3}, {0x1, 0x1}, {0x3}, {0x5}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {}, {0x2}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x5}, {0x1, 0x1}, {0x4}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0xf89190cf348f1379}, {0x4, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x332626dcc96271b6, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x4}, {0x2}, {0x0, 0x1}, {0x2, 0x1}, {0x3}, {0x2}, {0x2, 0x1}, {0x5}, {0x0, 0x1}, {0x3}, {0x2}, {0x3}, {0x4, 0x1}, {0x4}, {}, {0x3, 0x1}, {0x5, 0x1}, {0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x51d00f17d02e1716}, {0x2}, {0x3, 0x1}, {0x2}, {0x2, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x5}, {0x3}, {0x7}, {0x3, 0x1}, {0x2}, {0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x6, 0x1}, {0x5, 0x1}, {0x5}, {0x5, 0x1}, {}, {0x1, 0x1}, {0x5}, {0x4}, {0x5}, {0x4}, {0x1, 0x1}, {}, {0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x1}], 0x1}}, @TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x6, 0x0, 0x10000000, 0x0, 0x5}, 0x3, 0x2}, [{0x5, 0xd, 0x6, 0x1, 0xfffffffd, 0xc292}, {0x5, 0x9, 0x213, 0x5, 0x2, 0x4}, {0x4, 0x7, 0x7, 0x4, 0x4, 0x7}, {0x8001, 0xa, 0x6, 0x0, 0x35bf}, {0x61a, 0x74e, 0xee65, 0x1, 0x9}, {0xa, 0x200, 0x7, 0x80000001, 0xffff, 0x9}, {0x5, 0x9, 0x1a, 0xffffffff, 0x7, 0x8001}, {0x4, 0xffffffff, 0xffff, 0x4, 0xb, 0x7}, {0x7, 0x100, 0x8, 0x3e9, 0x0, 0x3f8}, {0x436, 0x9, 0x0, 0x97, 0x7, 0x4}, {0x3, 0x10000, 0x8, 0x9a16, 0x5, 0xd5d}, {0x2, 0x80000001, 0x8001, 0x200, 0xfffffffc, 0x7}, {0x7, 0x7, 0x401, 0x6, 0x5db7, 0xffffffff}, {0xffff0000, 0x8, 0x6, 0x2, 0x0, 0xf4}, {0xb0, 0x80, 0x4533, 0x3, 0x1, 0xa8}, {0x10001, 0x6, 0x8, 0xa, 0x1, 0x3be}, {0x10000, 0xd, 0x80000001, 0x400, 0x3, 0x2}, {0x8, 0x3, 0x8, 0xf, 0x0, 0x8}, {0x6d4f84f0, 0x2, 0x4, 0x7fff, 0x1, 0x6}, {0xdf, 0x1000, 0x1, 0x3, 0xb2f8, 0xc}, {0x101, 0x6, 0x80000001, 0x5, 0x4}, {0x4, 0x5, 0x7fffffff, 0x8, 0x1, 0x2}, {0x6, 0x6, 0x3, 0x4, 0x2, 0x1b}, {0x2, 0x4b1, 0x3, 0x100, 0x7, 0x6}, {0x4, 0x3, 0x80000000, 0x40, 0x9, 0xbc3276d}, {0x6f9, 0x5, 0x7fffffff, 0x1, 0x7, 0x583}, {0x1, 0x1000, 0x7e2, 0x0, 0x7, 0x81}, {0xc4b, 0x90e, 0x4, 0x0, 0x8000, 0x1}, {0x1000, 0x6, 0x7, 0x5, 0xf5f, 0xff}, {0x6, 0x8, 0x7, 0x0, 0x9, 0xc}, {0x7, 0xb, 0x0, 0xac02, 0x9, 0x40}, {0xfffffe00, 0x5, 0xc, 0x3, 0xf776}, {0x7, 0x6, 0x5, 0x4, 0xfffffffb, 0x10}, {0x9, 0x5, 0xc7, 0x6, 0x5, 0x5}, {0x203, 0xffffffff, 0x7, 0xffffffff, 0x7, 0x6}, {0xffffff81, 0x74d, 0x34, 0xc, 0x40, 0xfffffffa}, {0x134, 0x8, 0xfffffff9, 0x101, 0xea}, {0x400, 0xfff, 0x3, 0x40, 0x401, 0x5db}, {0x0, 0xe, 0x1, 0x8, 0x7, 0xa}, {0x80000001, 0xf22, 0x6, 0x5, 0x5, 0x8}, {0xffff, 0x4, 0x0, 0x4, 0x2, 0x1}, {0x1ff, 0x2, 0x3, 0x0, 0x7fffffff, 0x9}, {0x3, 0x7, 0x1, 0x9, 0x9}, {0x2, 0x40, 0xfffffffe, 0xfffffff9, 0x1, 0x2}, {0x0, 0xd, 0x2, 0xd3, 0x4}, {0x7fffffff, 0x8, 0x915e, 0x7, 0x427a, 0x3}, {0x3ff, 0x401, 0x1a, 0x4c, 0x6, 0xfffeffff}, {0x3ce, 0x2, 0xfc, 0x5, 0x0, 0x2}, {0x0, 0x6, 0x4, 0x6, 0x81, 0x3}, {0xffff8000, 0x1, 0x2, 0x3, 0x6, 0x9}, {0x3, 0x2, 0x8, 0x7, 0x9, 0x7}, {0xca4e, 0x4, 0x9, 0x9, 0x100, 0x2}, {0x4, 0x8, 0xfffffffd, 0x4c, 0x6b24, 0xfffffffc}, {0x3, 0x2, 0xdd3, 0x3, 0x315, 0x8000}, {0x6, 0x9, 0x7fff, 0xb, 0x4, 0x8}, {0x9, 0x8, 0x5, 0x5, 0x10000, 0x9}, {0x8, 0x7, 0x6, 0x6, 0x5, 0x2}, {0x1, 0xffff2eee, 0x2, 0x5, 0x6e, 0x10}, {0x3, 0x9, 0x0, 0x9, 0x9, 0x2}, {0x5, 0xdee0, 0x401, 0x3, 0x5, 0x1f5aef7}, {0xadb2, 0x7, 0x1, 0xf, 0x4, 0x10001}, {0xfffffff8, 0x401, 0xfffffffc, 0xffffffff, 0x9, 0xe1}, {0x2, 0x5, 0x5, 0xcd, 0x800, 0x3}, {0x7d, 0x5, 0xa2d8, 0x6, 0x9, 0xff}, {0x1, 0x4, 0x9, 0x7, 0x8, 0x80}, {0xef2b, 0x8, 0xd, 0x140, 0xffffffff, 0x5f5}, {0x4, 0xa19, 0x788, 0x5, 0x8, 0x8}, {0x9, 0x40, 0x2, 0x4, 0x4, 0x4}, {0x3, 0x9, 0x4, 0xfff, 0x26c, 0xffffff80}, {0xa00, 0x0, 0x3ff, 0xaece, 0xc88d, 0x7}, {0x8, 0x5, 0x4, 0x9, 0x5, 0x6}, {0x4, 0x6, 0x0, 0x1, 0x4, 0x7}, {0x39, 0x1, 0x9, 0x200d, 0x0, 0x2}, {0xd9, 0x8, 0x7, 0x0, 0x400, 0xfffffe7f}, {0x73091179, 0x3, 0x9dfd, 0x23, 0x2, 0x2}, {0x200, 0xfffffffb, 0x9, 0x5b260c11, 0xc, 0xf9f3}, {0x9, 0x0, 0x4, 0x3, 0xed06, 0x8}, {0x1432, 0x57, 0x2, 0x8, 0x8}, {0x0, 0xfffffffe, 0xfffff4b6, 0x9, 0x7f, 0x8}, {0x4, 0x7fffffff, 0x4, 0x8, 0xd4, 0x8000}, {0x0, 0x1ff, 0x0, 0x1, 0x7, 0x1000}, {0x3, 0xe, 0xfff, 0x588, 0xd4ce, 0xa}, {0x8, 0x3, 0x190, 0x3, 0x0, 0x10}, {0x8, 0xb8, 0x7, 0x69efedf4, 0x48d6, 0x4}, {0x0, 0x2, 0x0, 0x81, 0xffff7fff, 0xf}, {0x401f, 0x9, 0x8000, 0x7, 0x6, 0x38}, {0x0, 0x7, 0x7, 0x5, 0x9, 0x1}, {0x4, 0x4, 0x4, 0x61229332, 0x7, 0x74}, {0x4, 0x1ff, 0x8, 0x2, 0x9, 0x8}, {0x5, 0x2, 0xffffffff, 0x101, 0x3, 0x6}, {0x1, 0x8001, 0x4, 0xd2, 0x0, 0xe}, {0x7f, 0xfff, 0x200, 0x81, 0x6, 0x6e6000}, {0x4, 0x6, 0x3, 0xd, 0x4, 0x10001}, {0xd724, 0x9, 0x0, 0x7, 0x1, 0x200}, {0x400, 0x1, 0x3ff, 0x3, 0x2, 0x4}, {0x4d5, 0x1, 0x0, 0x3f30, 0xa8267f5a, 0x9}, {0x3ff, 0x2, 0x5, 0x9, 0x6, 0x139}, {0x7, 0x9, 0x7, 0xfff, 0x2, 0x3}, {0xe59, 0x7, 0x4, 0x94, 0xe, 0x2}, {0x5, 0x9c7d, 0x5, 0x4, 0x800, 0x6}, {0x3, 0xff, 0x8, 0x8, 0x9, 0x2}, {0x0, 0x13, 0xb4d, 0x1, 0x7f, 0x326ce5bb}, {0x83, 0x5, 0x4, 0xfffffff9, 0xfffffff6, 0x8}, {0x6, 0x1, 0x0, 0x9, 0x0, 0x1}, {0x3, 0x68b6, 0xfffff0fa, 0x69, 0x7, 0x3}, {0x8, 0x5, 0x1, 0x7, 0xc93, 0x6}, {0x0, 0x4, 0x7685, 0x6, 0x9a8, 0x7f}, {0x4, 0x0, 0x7, 0x9, 0x3, 0x3cd9}, {0xe2d, 0x8, 0x2, 0x6, 0xfffffffb, 0x7}, {0x6, 0x4, 0xb5, 0x7ff, 0x1, 0x7}, {0xffff0000, 0x6, 0x80000000, 0x2, 0x8, 0x400}, {0x7, 0x2, 0x0, 0xc, 0x1, 0xfffffff5}, {0x0, 0xffff, 0x0, 0x9, 0x5, 0x5}, {0xc1b0, 0x9, 0x101, 0x4, 0x2, 0x5}, {0x7, 0xfffffff7, 0x1, 0x8, 0x8}, {0x2, 0x602, 0x0, 0xb, 0x3, 0x2}, {0x4, 0x7f, 0x5a, 0x7, 0xe, 0x4}, {0x3, 0x8, 0xffffffff, 0x7, 0x59aa, 0x34a}, {0x4684, 0x1, 0x7, 0x0, 0x8}, {0x9, 0x9, 0xf39, 0x8001, 0x7, 0x8}, {0x10, 0x27, 0x54ca, 0x1, 0x8, 0x1}, {0x6, 0x9, 0x0, 0x7fffffff, 0xb, 0x5}, {0x4, 0x7fffffff, 0x5537, 0x9, 0x4, 0xffffff80}, {0x5, 0x9, 0x6, 0x3, 0x70c, 0xffffffff}, {0x9e, 0x6, 0x6, 0x8, 0x9, 0x1}, {0x5, 0x8, 0x3, 0x81, 0x800, 0x800}, {0x3, 0x9, 0x400, 0x6, 0x8}, {0x7, 0x2, 0x6, 0x7ff, 0xd, 0x401}], [{0x1, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3}, {0x5, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x2}, {0x4, 0x1}, {0x3}, {0x1, 0x1}, {0x2}, {0x1}, {0x4}, {0x1, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x2}, {0x4}, {0x5, 0x1}, {}, {0x0, 0x1}, {}, {0x6, 0x1}, {0x2, 0x1}, {0x2}, {0x4}, {0x1}, {0x2}, {0x4}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x5, 0x1}, {0x2}, {0x7}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {}, {0x3}, {0x2}, {0x5, 0x1}, {0x2}, {0x1}, {0x4}, {0x5, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x2, 0x1}, {0xc9825dc022a327b}, {0x2}, {}, {0x4}, {0x0, 0x1}, {0x4, 0x1}, {0x5}, {}, {0x5}, {0x1}, {0x1, 0x1}, {0x4}, {0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x5}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4}, {0x5}, {0x3, 0x1}, {0x3}, {0x2, 0x1}, {0x6, 0x1}, {0x3}, {0x5}, {}, {0x5, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x1}, {0x2}, {}, {0x4}, {0x0, 0x1}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {}, {}, {0x5, 0x1}, {0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3}, {0x1, 0xd11500dcc4e7a2e7}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x3}, {0x3}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x46e8}, 0x1, 0x0, 0x0, 0x40000c0}, 0xc054) r7 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f00000022c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe399f4e376fdba1273f4ffa7f71c1926aae1efd700000000000000", 0x1c}, {&(0x7f0000000600)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721", 0x9c}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x24000040}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)=""/2, 0x2}, {&(0x7f00000006c0)=""/4096, 0x1000}], 0x2}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000200012800b00010067656e65766500001000028004000600060005004e24000008000a00", @ANYRES32=r3], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 446.757241ms ago: executing program 4 (id=10783): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000000680)={0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000540)=0x2490, 0x4) (async) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f0000000200)={r3, &(0x7f00000005c0)='.\x00\xf9\xae\xc1\xb1\x9eJ\xdd\xd9\x91\xb3\xb33h\x98f\v\xec\x1co\xe9\xad\xb2\xed\xf0\xf5~\xc7\xb6\x99S(p\xcb:\xd6\xb8+\x06\xe6\xf1\xe3\xfc\xa6G\x85\x9a\xd5\xd9\xbbn`\r<\xc6xPW\xbd\xd1\xcf\xaff\xb7+h\x82\xc7\xb2\xc3\xaf\xdd\x00a@\x04\xf6\x87\x98}p\x92', 0x6c8640, &(0x7f0000000140)={@_ha_fsid={[0x4, 0x80000001]}, {0x2, 0x1, 0x43, 0x6}}, 0x8, &(0x7f0000000180), &(0x7f00000001c0)=0x1f8}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r5) (async) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000002c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01012cbd7000fcdbdf251500000008000300", @ANYRES32=r7, @ANYBLOB="0500290008"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4040012) (async) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000340)={0x0, 0x8}, &(0x7f0000000380)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f00000003c0)={0x1, 0x400, 0x4, 0x9, 0x80, 0x2cb8, 0xfffffffe, 0x400, r8}, 0x20) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001000)=ANY=[@ANYBLOB="940100002c00040000000000ffdbdf25017c000008000180f1a988e676010280f45f341be640bd9bdf915da9014e9b80f055fae599d5ebef45b2c35917b57b4bae2067b3e92f5c1b95ae8dee26bdea48873ee4cb22c42253d26459f34d39c3fe619b3c831913982fb11dc96a8ccfe38b8b00", @ANYRES32=0x0, @ANYBLOB="14001c002001000000000000000000000000000208005000ac1414aafd00bf800800db00", @ANYRES32, @ANYBLOB="080047000500000008002900e97e000033d84a1a6e57b53bbad13ccfb5462e9b4525a61adc9dad41a380b59d2d8af58c78975af338a97e0bca67209e7e0af3536d9e24a814b5e3bc9cc820b25a87b479e5b346deaa6af87fbc4a5f05710f70185b056fcdf69b65c11e7d09a5220d786c7103db7185a8f70a0470e95e01ffa5f370d1e6028cd6f0cbaa8e5279207660e5e7d3beb6e3128566a82ba7ec3557e61f830c680cfb34af79cf6939b1ad4922af7d036fd48a526794c1cc515e07df902e2d01616ab80430dcc4a7da7c2f8bfcd1e75af075f7fc1ed56a9e0453107c8f2efe044254f93c0a60cad4e37095f49e6b360000000000"], 0x194}, 0x1, 0x0, 0x0, 0xc044}, 0xc050) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@newtaction={0x564, 0x30, 0x100, 0x70bd29, 0x25dfdbfe, {}, [{0x550, 0x1, [@m_csum={0x98, 0x11, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x5, 0x5, 0x10001, 0x3}, 0x21}}]}, {0x4d, 0x6, "8b510c8b897019fd5b02e3e850b789bbbe99ee3547aa4f1e36e6ff1199fb68b712044c0e8ee3d606ba0a6978ab639e3a1bc27670a38a0a20ee777e2aaff86d21625c72b1058f846727"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}, @m_mpls={0xe8, 0x19, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5}, @TCA_MPLS_TC={0x5, 0x6, 0x1}]}, {0xab, 0x6, "d89ae7bbb4361c052fd38f7646067ab904d511a5227b8e565f251922abea15ff06efb10a17191f10064025dc8144e3b2d7366e34fa9c6ae0f1091c51c1acf882565a10b858d96e885673be3009c01d35b950d0b0110a52bf63b9b4e47aee17dd387066047260f6206fd33a7ecacdfd3f9b8e1743196954d99fa70e43055e33a923fab28b03266b53db458da4027a300a9c6c0ed8ba9ea3407f604504834faa006d20c03e0acbc6"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_bpf={0xf4, 0x13, 0x0, 0x0, {{0x8}, {0x5c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r9}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x4, 0x2, 0x8, 0x2, 0x7}}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x4, 0x80}]}, @TCA_ACT_BPF_FD={0x8, 0x5, r10}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x5, 0x7, 0xa6, 0x1}]}]}, {0x72, 0x6, "7c20c0927c139487e45194335473814d44a524f0d45a920c50a8d28fa788ebaa754482694aa4098821278b641e4fe04bd082552da66c200c14eba8e9ad284268a2c84d28621f7e45a79c9b40fa9e343d5b3d1c0f19d013931d1c176801b57721cce0eb5231ef52bfe510b9f4e744"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ife={0xec, 0x1d, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xffffff51, 0xffff0001, 0x5, 0x6, 0xfff}}}, @TCA_IFE_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}}]}, {0x9c, 0x6, "9ecd0934f895b26a01d9f2174c38d68e89f032edffb0f72842d76584ed8eb207ee38b4c08977dd36ffcd3930b7581443892d6ce138fd5effca205b12282eec757bfa962befa8126adbfbc5d35863f75bb81669e34572a81136edc2ed319ba38ce01f48cfeaac84469aa68f571986578b9e3a7c83db5cebb6e1db72f3b738cfcc95396fc425a2fa640bb3269e5a2c5b0a93217cba68e68db1"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x5}}}}, @m_mpls={0xd8, 0x3, 0x0, 0x0, {{0x9}, {0x54, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0xc0ffa}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8}, @TCA_MPLS_LABEL={0x8, 0x5, 0x6f361}, @TCA_MPLS_TTL={0x5, 0x7, 0xb}, @TCA_MPLS_LABEL={0x8, 0x5, 0x10267}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_PROTO={0x6, 0x4, 0x9}, @TCA_MPLS_TC={0x5, 0x6, 0x4}, @TCA_MPLS_LABEL={0x8, 0x5, 0xf150f}, @TCA_MPLS_TTL={0x5, 0x7, 0x10}]}, {0x5b, 0x6, "a3a4bc572a5c28b50567086a63244a23f3584bef3f9bc8a11cf69a03b13ce9bb39ca511e09412ae51bcbd6c0fe0c968392a684fdc1529157c0f7f275165ac5adaedf7b3cf31cdc61610097ac505892b44ab4e3601c1ec1"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_mpls={0x114, 0x20, 0x0, 0x0, {{0x9}, {0x54, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x2}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x6, 0x7, 0xffffffffffffffff, 0x2, 0x6}, 0x4}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x6, 0x7, 0x0, 0x0, 0x23}, 0x2}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x892f}]}, {0x96, 0x6, "bb934241dcbf5b1149c800966f005679675087cb16cf29b3e8933b2386c3a2cb1b7c03befca6ed438cf719f973945d5487f773f6c9882292c8534150f741dadc430dae2582fa24359a94bcb181db0934f6f7bfaf47121ec2f168a9a9d555dabf61cab7086280c1a1c030ddf7480e6a6bc2d26aab2c502fbaa6b8cc0683b7973508c4035f6dc014ffde315fce518534f59a72"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x564}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) getsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000000), &(0x7f0000000640)=0x4) (async, rerun: 32) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r12, {0x0, 0x4}, {}, {0x9, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x10, 0x2, [@TCA_MATCHALL_ACT={0x4}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x20000890) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000081001000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r13 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_ADDDEST(r13, 0x0, 0x487, &(0x7f0000000080)={{0x33, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x2, 'wlc\x00', 0x9, 0x1ff, 0x27}, {@private=0xa010102, 0x200, 0x0, 0x1, 0x400, 0x7}}, 0x44) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$nfc(&(0x7f0000000ec0), r14) sendmsg$NFC_CMD_DEP_LINK_UP(r14, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000f40)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r15, @ANYBLOB="01002bbd7000fcdadf250400000008000400ffffffff08000100", @ANYRES32=0x0, @ANYBLOB="05000a000b000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4041}, 0x4000010) (async, rerun: 32) sendmsg$NFC_CMD_GET_TARGET(r5, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x14, r15, 0x200, 0x70bd28, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x40000) (rerun: 32) 274.802927ms ago: executing program 1 (id=10784): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYBLOB="010000000000000000001c0000000a0004007770616e330000000800010001000000"], 0x28}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, 0x3, 0x8, 0x301, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8}]}]}, 0x30}}, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_TX_TS(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="210b00000000000000006700000008000300", @ANYRES32=0x0, @ANYBLOB="0c002b01"], 0x28}}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000540)='cdg', 0x6) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) 268.750992ms ago: executing program 0 (id=10785): unshare(0x20000400) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r1, &(0x7f0000000000)={0x10, @short}, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) pselect6(0xfe41, &(0x7f0000000040)={0xd, 0x0, 0x0, 0x8000000}, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r2, 0x100) accept4(r2, 0x0, 0x0, 0x80000) shutdown(r2, 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000005c40)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x10000000, 0x0, 0x8}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x4c8d0) 135.909934ms ago: executing program 4 (id=10786): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) (async) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @empty, 0x3}, 0x1c) (async, rerun: 32) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) (rerun: 32) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f00000006c0), 0x20005, r1}, 0x38) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000740)={r1, &(0x7f0000000600), 0x0}, 0x20) (async) r2 = socket$netlink(0x10, 0x3, 0x8000000004) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r3, 0x0) (async, rerun: 64) r4 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x2c, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40080d9}, 0x4000080) (async) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) (async) r6 = accept(r3, 0x0, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x42, &(0x7f0000000300)={0x0, 0xea60}, 0x10) recvmsg$qrtr(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000bc0)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x2}, 0x38, 0x20) (async) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000100)="580000001400add427323b472545b45602117fffffff81004e210e227f000001925aac0020207b00090080007f000006e809000000ff0000f03ac71002000000feffffffff1c000000e7ee00000000000000000200200000f113bfb6cb42d8025c8c32f5b53b5e6e69aa9da2217bee6eb1de9fd71c28f39995ce2a73a6348b02f737eb310ec89b571be4ce359a313d790bf13daeeb06c720e2b2465a817db2642f3fbd390e386d571b67203d84ce8472655bb77f74387737984ae0951faac81cc1d9a8369828892edfb100aff2659841832fd44de1002d6e1d4398a24786b9cbe0092e4041544ea507ecc67dc9c4d0a3717dccd04635", 0xf6}], 0x1) 115.945095ms ago: executing program 3 (id=10787): syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) socket$phonet(0x23, 0x2, 0x1) (async) r2 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_netdev_private(r2, 0x8915, &(0x7f0000000000)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001000000b7050000050000006a0a00fe00000000850000000a000000b70000000000000095000000000000009cc6b3fcd62c7d376238975d43a4505f80fc88943c4f0cf08e467b592f868ee30a0e8c1bf176db2a6b2feb4b6fd3d5707bfd2d84aaa3b1d4e984c46ea7e2a447a36f5662403e1b2be4cc7c2683908a0d411a9872061ce618117c56f0979bd10b97163c953ab1abda4589e9cbe8d0d26b5069f8a98f7dc8f76b74635fc9f9de9ca3c00cb9bf4e418d07fa22f0610a70f2bdf4000000000000b0c2940dd8e263aa743f7555193161f45346d2014006000000e1ffff8816326d7d35c32aac1c7d5b5be399f6609876b5887437a172751151b633fbc02a74067529194e533583412dff048f0000000000000000b2728a04816cfb851cd364ff19ffcafe3e64be033c9d2f002cc93c1c13ceec04a347383420336bec88c24a9fb6a6991ddb737d527d6acb15426415b6e8b14fdfa2c6e94bd0339454c13ad30000000000170022626165866c156a25148972700000b515a1000000000000000eb2e9c15b6c8f6198282d0000000000c2ccf3f69cfcf1e15ea7a9e57aee78e12a2caebaada42811754e19a7e9b531636794a718b4766d2c7c61c3dba128c7fcd1f97989ccf1d55de496eae46c590c2d0225f9cd07005ac7f76d9d560a08c9fd0caafd9d095cb9db0099014cd0d4df62af52b088b01adeadc4c5225a6cd8486b03f83805dffe90dbf7ad042012b7213a2b03e3b1634ddfc9d6f570c4990fbbc7306871d9a52a157fb1a10fa2868df06faf83a8420e9ce62567043ce7e56d1ebe81"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3a}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0xffff0000, 0x40f, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0xffff, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xfffffdba, 0x1, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @default, @null]}) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000300)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x9, 'syz0\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x82e, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0xfff) poll(&(0x7f00000000c0)=[{r4, 0x1288}], 0x1, 0x27f) (async) poll(&(0x7f00000000c0)=[{r4, 0x1288}], 0x1, 0x27f) r5 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000400)={0x0, r2}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x75, 0x75, 0x5, [@func={0x3, 0x0, 0x0, 0xc, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x1, 0x7566}}, @datasec={0x3, 0x2, 0x0, 0xf, 0x1, [{0x3, 0x2, 0x7}, {0x1, 0x1, 0x5}], "18"}, @decl_tag={0xd, 0x0, 0x0, 0x11, 0x1, 0x6}, @func={0x8, 0x0, 0x0, 0xc, 0x1}, @decl_tag={0xf, 0x0, 0x0, 0x11, 0x5, 0x9}]}, {0x0, [0x5f, 0x2e, 0x61]}}, &(0x7f0000000380)=""/82, 0x95, 0x52, 0x0, 0x4, 0x10000, @value=r5}, 0x28) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f00000001c0)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x2, 'syz1\x00', @null, 0x40005, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default]}) 93.330029ms ago: executing program 1 (id=10788): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @rand_addr=' \x01\x00', @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x80, 0xfffffffc, 0xdc67}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl1\x00', r1, 0x0, 0x0, 0x20, 0x0, 0xd, @dev={0xfe, 0x80, '\x00', 0x2d}, @mcast1, 0x700, 0x8000, 0xfffffffc}}) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x20000014}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYRESHEX=r0], 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r2, 0x2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x2) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYRES64=r3, @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r10, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=@newtfilter={0x54, 0x28, 0xd27, 0x1000004, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0xd, 0x9}, {0x4}, {0xfff2, 0xa}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_SCTP_DST={0x6}, @TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x2}]}}]}, 0x54}}, 0x4000) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) 40.552304ms ago: executing program 2 (id=10789): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0x9, 0x5, 0xd, 0x8b, 0xd, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x9, 0xe, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x4, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r7, {0x6}, {0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0xe, 0xf, 0x6, 0x6, 0x1, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x101], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) close(0x3) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0x9, 0x5, 0xd, 0x8b, 0xd, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x9, 0xe, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x4, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r7, {0x6}, {0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0xe, 0xf, 0x6, 0x6, 0x1, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x101], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) (async) close(0x3) (async) 0s ago: executing program 4 (id=10790): r0 = socket(0x400000000010, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000880)={0x18, 0x42, 0x601, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @pid}]}, 0x18}], 0x1}, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r1, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x21}}]}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) kernel console output (not intermixed with test programs): bute type 13 has an invalid length. [ 1257.688220][T10446] Cannot find set identified by id 65534 to match [ 1257.776427][T10443] __nla_validate_parse: 1 callbacks suppressed [ 1257.776449][T10443] netlink: 175008 bytes leftover after parsing attributes in process `syz.0.9260'. [ 1257.947826][T10452] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9262'. [ 1257.959944][T10454] syzkaller0: entered promiscuous mode [ 1257.969148][T10452] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.9262'. [ 1257.978578][T10454] syzkaller0: entered allmulticast mode [ 1258.215909][T10463] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9265'. [ 1258.934136][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1258.942198][ C1] lec:lec_tx_timeout: lec0 [ 1258.946969][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1259.360306][T10522] RDS: rds_bind could not find a transport for 0:0:20::, load rds_tcp or rds_rdma? [ 1259.651879][T10532] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1260.082510][T10545] wg1 speed is unknown, defaulting to 1000 [ 1260.270885][T10561] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9294'. [ 1260.353895][T10545] lo speed is unknown, defaulting to 1000 [ 1260.428646][T10569] netlink: 'syz.3.9296': attribute type 1 has an invalid length. [ 1260.656865][T25860] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1260.694352][T25860] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1260.703278][T25860] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1260.741963][T25860] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1260.870660][T10550] Can't find ip_set type [ 1260.882623][T10579] netlink: 52 bytes leftover after parsing attributes in process `syz.3.9301'. [ 1260.903043][T10545] lo speed is unknown, defaulting to 1000 [ 1261.149685][T10591] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9304'. [ 1262.087264][T10600] netlink: 'syz.2.9307': attribute type 1 has an invalid length. [ 1262.507898][T10622] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9316'. [ 1262.829789][T10642] netlink: 188 bytes leftover after parsing attributes in process `syz.4.9320'. [ 1262.856884][T10642] openvswitch: netlink: Key 14 has unexpected len 0 expected 28 [ 1263.041822][T10656] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9324'. [ 1263.068374][T10480] Set syz1 is full, maxelem 65536 reached [ 1263.072558][T10649] netlink: 3 bytes leftover after parsing attributes in process `syz.3.9324'. [ 1263.318553][T10669] netlink: 224 bytes leftover after parsing attributes in process `syz.3.9327'. [ 1263.328690][T10669] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9327'. [ 1263.381443][T10664] batman_adv: batadv0: Adding interface: vlan3 [ 1263.390143][T10664] batman_adv: batadv0: The MTU of interface vlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1263.419905][T10664] batman_adv: batadv0: Not using interface vlan3 (retrying later): interface not active [ 1263.565203][T10681] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9330'. [ 1263.594692][T10681] netlink: 580 bytes leftover after parsing attributes in process `syz.1.9330'. [ 1263.839101][T10699] pimreg: entered allmulticast mode [ 1263.852566][T10699] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9335'. [ 1263.963900][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 1263.971998][ C1] lec:lec_tx_timeout: lec0 [ 1263.976577][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1264.764675][T10713] netlink: 'syz.4.9339': attribute type 13 has an invalid length. [ 1264.785844][T10716] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9341'. [ 1264.799159][T10713] gre0: left promiscuous mode [ 1264.804390][T10713] gre0: left allmulticast mode [ 1264.830235][T10713] 8021q: adding VLAN 0 to HW filter on device team0 [ 1264.840964][T10713] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1265.114873][T10733] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9344'. [ 1266.192358][T10663] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1266.408178][T10741] tipc: Started in network mode [ 1266.434441][T10741] tipc: Node identity aaaaaaaaaa41, cluster identity 4711 [ 1266.442524][T10741] tipc: Enabled bearer , priority 10 [ 1266.491234][T10736] netlink: 'syz.4.9345': attribute type 1 has an invalid length. [ 1266.531804][T10753] netlink: 'syz.0.9350': attribute type 1 has an invalid length. [ 1266.574167][T10753] netlink: 'syz.0.9350': attribute type 1 has an invalid length. [ 1266.830079][T10772] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1267.554043][ T5882] tipc: Node number set to 15444650 [ 1267.596475][T10769] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1267.602656][T10769] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1267.662625][T10769] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1267.671172][T10769] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1267.697366][T10769] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1267.705168][T10769] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1267.912405][T10801] __nla_validate_parse: 7 callbacks suppressed [ 1267.912424][T10801] netlink: 260 bytes leftover after parsing attributes in process `syz.3.9365'. [ 1267.959068][T10809] SET target dimension over the limit! [ 1268.025778][T10812] wg1 speed is unknown, defaulting to 1000 [ 1268.070245][T10805] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9366'. [ 1268.124460][T10819] netlink: 388 bytes leftover after parsing attributes in process `syz.4.9366'. [ 1268.393043][T10821] netlink: 192 bytes leftover after parsing attributes in process `syz.0.9371'. [ 1268.590886][T10812] lo speed is unknown, defaulting to 1000 [ 1268.599078][T10811] wg1 speed is unknown, defaulting to 1000 [ 1268.789304][T10838] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9375'. [ 1268.983807][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1268.984179][T10848] IPv6: NLM_F_CREATE should be specified when creating new route [ 1268.991869][ C1] lec:lec_tx_timeout: lec0 [ 1269.007989][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1269.039516][T10851] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1269.085358][T10848] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9376'. [ 1269.236454][T10830] wg1 speed is unknown, defaulting to 1000 [ 1269.242443][T10861] sit0: Caught tx_queue_len zero misconfig [ 1269.256100][T10861] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9378'. [ 1269.334508][T10812] lo speed is unknown, defaulting to 1000 [ 1269.334508][T10811] lo speed is unknown, defaulting to 1000 [ 1269.561380][T10878] Cannot find add_set index 0 as target [ 1269.568172][T10877] syz.0.9382: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1269.626470][T10877] CPU: 1 UID: 0 PID: 10877 Comm: syz.0.9382 Not tainted syzkaller #0 PREEMPT(full) [ 1269.626499][T10877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1269.626513][T10877] Call Trace: [ 1269.626523][T10877] [ 1269.626533][T10877] dump_stack_lvl+0xe8/0x150 [ 1269.626567][T10877] warn_alloc+0x249/0x340 [ 1269.626595][T10877] ? stack_trace_save+0xa9/0x100 [ 1269.626621][T10877] ? __pfx_warn_alloc+0x10/0x10 [ 1269.626650][T10877] ? kasan_save_track+0x4f/0x80 [ 1269.626671][T10877] ? kasan_save_track+0x3e/0x80 [ 1269.626690][T10877] ? __kasan_kmalloc+0x93/0xb0 [ 1269.626711][T10877] ? __kmalloc_cache_noprof+0x31c/0x660 [ 1269.626732][T10877] ? xskq_create+0x56/0x170 [ 1269.626762][T10877] ? xsk_setsockopt+0x54c/0x990 [ 1269.626786][T10877] ? do_sock_setsockopt+0x17c/0x1b0 [ 1269.626824][T10877] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 1269.626853][T10877] ? do_syscall_64+0x14d/0xf80 [ 1269.626878][T10877] __vmalloc_node_range_noprof+0x132/0x1730 [ 1269.626934][T10877] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1269.626965][T10877] ? __kasan_kmalloc+0x93/0xb0 [ 1269.626993][T10877] vmalloc_user_noprof+0xad/0xe0 [ 1269.627012][T10877] ? xskq_create+0xbf/0x170 [ 1269.627041][T10877] xskq_create+0xbf/0x170 [ 1269.627072][T10877] xsk_init_queue+0x8a/0xe0 [ 1269.627111][T10877] xsk_setsockopt+0x54c/0x990 [ 1269.627139][T10877] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1269.627166][T10877] ? __pfx_aa_sk_perm+0x10/0x10 [ 1269.627191][T10877] ? aa_sock_opt_perm+0xff/0x1a0 [ 1269.627217][T10877] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1269.627240][T10877] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1269.627269][T10877] do_sock_setsockopt+0x17c/0x1b0 [ 1269.627306][T10877] __x64_sys_setsockopt+0x13d/0x1b0 [ 1269.627340][T10877] do_syscall_64+0x14d/0xf80 [ 1269.627358][T10877] ? trace_irq_disable+0x3b/0x150 [ 1269.627385][T10877] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1269.627406][T10877] ? clear_bhb_loop+0x40/0x90 [ 1269.627431][T10877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1269.627453][T10877] RIP: 0033:0x7f7034f9c799 [ 1269.627471][T10877] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1269.627491][T10877] RSP: 002b:00007f7035f20028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1269.627514][T10877] RAX: ffffffffffffffda RBX: 00007f7035215fa0 RCX: 00007f7034f9c799 [ 1269.627531][T10877] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000a [ 1269.627544][T10877] RBP: 00007f7035032c99 R08: 0000000000000004 R09: 0000000000000000 [ 1269.627556][T10877] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1269.627570][T10877] R13: 00007f7035216038 R14: 00007f7035215fa0 R15: 00007ffdb6d18ea8 [ 1269.627600][T10877] [ 1269.627609][T10877] Mem-Info: [ 1270.031757][T10893] netlink: 229 bytes leftover after parsing attributes in process `syz.3.9385'. [ 1270.058573][T10877] active_anon:6722 inactive_anon:0 isolated_anon:0 [ 1270.058573][T10877] active_file:2962 inactive_file:40721 isolated_file:0 [ 1270.058573][T10877] unevictable:768 dirty:178 writeback:0 [ 1270.058573][T10877] slab_reclaimable:13829 slab_unreclaimable:129911 [ 1270.058573][T10877] mapped:31806 shmem:1373 pagetables:1711 [ 1270.058573][T10877] sec_pagetables:0 bounce:0 [ 1270.058573][T10877] kernel_misc_reclaimable:0 [ 1270.058573][T10877] free:1273100 free_pcp:23471 free_cma:0 [ 1270.152480][T10811] lo speed is unknown, defaulting to 1000 [ 1270.161093][T10877] Node 0 active_anon:26688kB inactive_anon:0kB active_file:11848kB inactive_file:162684kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:49300kB dirty:712kB writeback:0kB shmem:3956kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15060kB pagetables:6696kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1270.250576][T10877] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:77824kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1270.330141][T10877] Node 0 DMA free:11248kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 1270.404395][T10877] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 1270.410352][T10877] Node 0 DMA32 free:1370876kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26688kB inactive_anon:0kB active_file:11848kB inactive_file:162684kB unevictable:1536kB writepending:712kB zspages:0kB present:3129332kB managed:2552728kB mlocked:0kB bounce:0kB free_pcp:37148kB local_pcp:19336kB free_cma:0kB [ 1270.414656][T10901] netlink: 'syz.3.9387': attribute type 8 has an invalid length. [ 1270.447415][T10877] lowmem_reserve[]: 0 0 0 0 0 [ 1270.472845][T10877] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:884kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 1270.504398][T10877] lowmem_reserve[]: 0 0 0 0 0 [ 1270.518464][T10877] Node 1 Normal free:3710276kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:56956kB local_pcp:27716kB free_cma:0kB [ 1270.525084][T10901] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9387'. [ 1270.597235][T10877] lowmem_reserve[]: 0 0 0 0 0 [ 1270.600062][T10908] netlink: 'syz.1.9389': attribute type 1 has an invalid length. [ 1270.602299][T10877] Node 0 DMA: 0*4kB 2*8kB (U) 2*16kB (U) 2*32kB (U) 2*64kB (U) 2*128kB (U) 2*256kB (U) 2*512kB (U) 3*1024kB (U) 3*2048kB (UM) 0*4096kB = 11248kB [ 1270.654055][T10877] Node 0 DMA32: 2981*4kB (UME) 6353*8kB (UME) 4665*16kB (UME) 1513*32kB (UME) 454*64kB (UME) 571*128kB (UM) 567*256kB (UM) 467*512kB (UME) 332*1024kB (UM) 175*2048kB (UM) 0*4096kB = 1370572kB [ 1270.695918][T10877] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1270.719166][T10830] lo speed is unknown, defaulting to 1000 [ 1270.766467][T10919] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9390'. [ 1270.775813][T10877] Node 1 Normal: 3*4kB (U) 9*8kB (UME) 17*16kB (UME) 13*32kB (UME) 13*64kB (UME) 12*128kB (UME) 7*256kB (UM) 9*512kB (UME) 4*1024kB (UM) 5*2048kB (UE) 900*4096kB (UM) = 3710276kB [ 1270.797114][T10901] bond0: entered promiscuous mode [ 1270.802190][T10901] bond_slave_0: entered promiscuous mode [ 1270.854299][T10901] bond_slave_1: entered promiscuous mode [ 1270.860656][T10877] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1270.876119][T10877] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1270.886550][T10877] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1270.897977][T10877] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1270.911188][T10901] gretap0: entered promiscuous mode [ 1270.916852][T10877] 45051 total pagecache pages [ 1270.916870][T10877] 0 pages in swap cache [ 1270.916880][T10877] Free swap = 124996kB [ 1270.916890][T10877] Total swap = 124996kB [ 1270.916901][T10877] 2097051 pages RAM [ 1270.916910][T10877] 0 pages HighMem/MovableOnly [ 1270.916919][T10877] 427033 pages reserved [ 1270.916929][T10877] 0 pages cma reserved [ 1271.014984][T10901] debugfs: 'hsr1' already exists in 'hsr' [ 1271.020757][T10901] Cannot create hsr debugfs directory [ 1271.067016][T10901] hsr1: entered promiscuous mode [ 1271.114404][T10908] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1271.323317][T10942] netlink: 'syz.3.9392': attribute type 1 has an invalid length. [ 1271.375345][T10942] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1271.464498][T10830] lo speed is unknown, defaulting to 1000 [ 1271.604177][ T29] audit: type=1800 audit(1773269069.430:25): pid=10965 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.9398" name="memory.events" dev="tmpfs" ino=241 res=0 errno=0 [ 1273.124383][T11019] netlink: 'syz.2.9409': attribute type 11 has an invalid length. [ 1273.255668][ T25] block nbd1: Possible stuck request ffff888059e60000: control (read@0,1024B). Runtime 120 seconds [ 1273.281274][ T25] block nbd1: Possible stuck request ffff888059e60200: control (read@1024,1024B). Runtime 120 seconds [ 1273.302458][ T25] block nbd1: Possible stuck request ffff888059e60400: control (read@2048,1024B). Runtime 120 seconds [ 1273.304462][T11025] netlink: 'syz.2.9411': attribute type 5 has an invalid length. [ 1273.314369][ T25] block nbd1: Possible stuck request ffff888059e60600: control (read@3072,1024B). Runtime 120 seconds [ 1273.767980][T11050] xt_hashlimit: size too large, truncated to 1048576 [ 1273.992420][T11062] FAULT_INJECTION: forcing a failure. [ 1273.992420][T11062] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1274.036409][T11062] CPU: 1 UID: 0 PID: 11062 Comm: syz.2.9419 Not tainted syzkaller #0 PREEMPT(full) [ 1274.036435][T11062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1274.036447][T11062] Call Trace: [ 1274.036454][T11062] [ 1274.036463][T11062] dump_stack_lvl+0xe8/0x150 [ 1274.036494][T11062] should_fail_ex+0x412/0x560 [ 1274.036521][T11062] _copy_from_user+0x2d/0xb0 [ 1274.036550][T11062] ____sys_sendmsg+0x308/0x9f0 [ 1274.036576][T11062] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1274.036603][T11062] ? import_iovec+0x73/0xa0 [ 1274.036634][T11062] ___sys_sendmsg+0x2a5/0x360 [ 1274.036657][T11062] ? __pfx____sys_sendmsg+0x10/0x10 [ 1274.036707][T11062] ? __fget_files+0x2a/0x420 [ 1274.036732][T11062] ? __fget_files+0x3a0/0x420 [ 1274.036766][T11062] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1274.036787][T11062] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1274.036814][T11062] ? __pfx_ksys_write+0x10/0x10 [ 1274.036846][T11062] do_syscall_64+0x14d/0xf80 [ 1274.036863][T11062] ? trace_irq_disable+0x3b/0x150 [ 1274.036888][T11062] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1274.036906][T11062] ? clear_bhb_loop+0x40/0x90 [ 1274.036929][T11062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1274.036947][T11062] RIP: 0033:0x7f86ca39c799 [ 1274.036966][T11062] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1274.036981][T11062] RSP: 002b:00007f86cb21b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1274.037001][T11062] RAX: ffffffffffffffda RBX: 00007f86ca615fa0 RCX: 00007f86ca39c799 [ 1274.037014][T11062] RDX: 0000000000008000 RSI: 0000200000000080 RDI: 0000000000000003 [ 1274.037026][T11062] RBP: 00007f86cb21b090 R08: 0000000000000000 R09: 0000000000000000 [ 1274.037038][T11062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1274.037049][T11062] R13: 00007f86ca616038 R14: 00007f86ca615fa0 R15: 00007ffdfa025e98 [ 1274.037078][T11062] [ 1274.444720][T11055] wg1 speed is unknown, defaulting to 1000 [ 1274.758503][T11083] __nla_validate_parse: 4 callbacks suppressed [ 1274.758522][T11083] netlink: 56 bytes leftover after parsing attributes in process `syz.2.9422'. [ 1274.774035][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5760 ms [ 1274.774063][ C1] lec:lec_tx_timeout: lec0 [ 1274.787286][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1274.976717][T11095] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9425'. [ 1274.986456][T11089] syzkaller1: entered promiscuous mode [ 1274.991956][T11089] syzkaller1: entered allmulticast mode [ 1275.070919][T11089] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9424'. [ 1275.361877][T11055] lo speed is unknown, defaulting to 1000 [ 1275.627570][T11124] FAULT_INJECTION: forcing a failure. [ 1275.627570][T11124] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1275.697249][T11124] CPU: 0 UID: 0 PID: 11124 Comm: syz.1.9430 Not tainted syzkaller #0 PREEMPT(full) [ 1275.697275][T11124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1275.697286][T11124] Call Trace: [ 1275.697295][T11124] [ 1275.697303][T11124] dump_stack_lvl+0xe8/0x150 [ 1275.697333][T11124] should_fail_ex+0x412/0x560 [ 1275.697361][T11124] _copy_to_user+0x31/0xb0 [ 1275.697389][T11124] simple_read_from_buffer+0xe1/0x170 [ 1275.697419][T11124] proc_fail_nth_read+0x1bb/0x230 [ 1275.697447][T11124] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1275.697476][T11124] ? rw_verify_area+0x2a6/0x4d0 [ 1275.697495][T11124] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1275.697521][T11124] vfs_read+0x20c/0xa70 [ 1275.697538][T11124] ? fdget_pos+0x246/0x320 [ 1275.697568][T11124] ? __pfx___mutex_lock+0x10/0x10 [ 1275.697589][T11124] ? __pfx_vfs_read+0x10/0x10 [ 1275.697609][T11124] ? __fget_files+0x2a/0x420 [ 1275.697637][T11124] ? __fget_files+0x3a0/0x420 [ 1275.697658][T11124] ? __fget_files+0x2a/0x420 [ 1275.697690][T11124] ksys_read+0x150/0x270 [ 1275.697711][T11124] ? __pfx_ksys_read+0x10/0x10 [ 1275.697740][T11124] do_syscall_64+0x14d/0xf80 [ 1275.697756][T11124] ? trace_irq_disable+0x3b/0x150 [ 1275.697782][T11124] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1275.697801][T11124] ? clear_bhb_loop+0x40/0x90 [ 1275.697819][T11124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1275.697839][T11124] RIP: 0033:0x7fa6e575cfce [ 1275.697857][T11124] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1275.697873][T11124] RSP: 002b:00007fa6e65e6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1275.697893][T11124] RAX: ffffffffffffffda RBX: 00007fa6e65e76c0 RCX: 00007fa6e575cfce [ 1275.697905][T11124] RDX: 000000000000000f RSI: 00007fa6e65e70a0 RDI: 0000000000000004 [ 1275.697917][T11124] RBP: 00007fa6e65e7090 R08: 0000000000000000 R09: 0000000000000000 [ 1275.697929][T11124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1275.697939][T11124] R13: 00007fa6e5a16038 R14: 00007fa6e5a15fa0 R15: 00007ffc7d4c8a98 [ 1275.697969][T11124] [ 1276.177565][T11055] lo speed is unknown, defaulting to 1000 [ 1276.432830][T11142] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9432'. [ 1276.535246][T11153] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9432'. [ 1276.676833][T11142] team1: entered promiscuous mode [ 1276.694620][T11161] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9436'. [ 1276.721726][T11142] team1: entered allmulticast mode [ 1276.734110][T11142] 8021q: adding VLAN 0 to HW filter on device team1 [ 1276.747491][T11153] team2 (uninitialized): Failed to send options change via netlink (err -105) [ 1276.784779][T11162] netlink: 'syz.3.9435': attribute type 54 has an invalid length. [ 1276.787477][T11167] netlink: 'syz.0.9437': attribute type 1 has an invalid length. [ 1276.984864][T11153] team2: entered promiscuous mode [ 1276.989986][T11153] team2: entered allmulticast mode [ 1277.015416][T11153] 8021q: adding VLAN 0 to HW filter on device team2 [ 1277.094880][T11167] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1277.156295][T11170] bridge1: entered promiscuous mode [ 1277.181032][T11170] bridge1: entered allmulticast mode [ 1277.476481][T11195] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9442'. [ 1277.487876][T11195] netlink: 6 bytes leftover after parsing attributes in process `syz.2.9442'. [ 1277.533504][T11195] netlink: 580 bytes leftover after parsing attributes in process `syz.2.9442'. [ 1277.601692][ T6209] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1277.620940][ T6209] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1277.629713][ T6209] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1277.645894][ T6209] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1277.657255][ T6209] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1277.755752][T16472] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1277.773092][T16472] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1277.781349][T16472] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1277.795429][T16472] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1277.803108][T16472] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1277.930059][T11215] netlink: 'syz.0.9444': attribute type 4 has an invalid length. [ 1277.984610][T11215] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9444'. [ 1278.128073][T11222] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 1278.144384][T11198] wg1 speed is unknown, defaulting to 1000 [ 1278.611413][ T5938] IPVS: starting estimator thread 0... [ 1278.704410][T11244] IPVS: using max 29 ests per chain, 69600 per kthread [ 1278.962477][T11200] wg1 speed is unknown, defaulting to 1000 [ 1278.962487][T11198] lo speed is unknown, defaulting to 1000 [ 1278.979118][T11261] netlink: 'syz.1.9452': attribute type 1 has an invalid length. [ 1279.371615][T28463] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 1279.431090][ T636] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 1279.624495][T28463] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 1279.669832][T28463] netdevsim netdevsim4 eth4: set [1, 0] type 2 family 0 port 20000 - 0 [ 1279.684250][T11201] wg1 speed is unknown, defaulting to 1000 [ 1279.717194][T11290] netlink: zone id is out of range [ 1279.722452][T11290] netlink: zone id is out of range [ 1279.728955][T11290] netlink: zone id is out of range [ 1279.744905][T11290] netlink: zone id is out of range [ 1279.750806][T11290] netlink: zone id is out of range [ 1279.767883][ T7554] bridge_slave_1: left allmulticast mode [ 1279.789050][T11290] netlink: zone id is out of range [ 1279.794460][ T7554] bridge_slave_1: left promiscuous mode [ 1279.794748][ T7554] bridge0: port 2(bridge_slave_1) entered disabled state [ 1279.813523][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 1279.815952][ T7554] bridge_slave_0: left allmulticast mode [ 1279.821573][ C1] lec:lec_tx_timeout: lec0 [ 1279.832444][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1279.836926][ T7554] bridge_slave_0: left promiscuous mode [ 1279.847426][T11290] netlink: zone id is out of range [ 1279.857551][T11290] netlink: zone id is out of range [ 1279.862969][ T7554] bridge0: port 1(bridge_slave_0) entered disabled state [ 1279.863089][T11294] __nla_validate_parse: 5 callbacks suppressed [ 1279.863103][T11294] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9462'. [ 1279.891044][T11290] netlink: zone id is out of range [ 1279.891547][T11296] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9463'. [ 1279.897194][T11290] netlink: zone id is out of range [ 1279.905764][ T6209] Bluetooth: hci1: command tx timeout [ 1279.918455][T11296] netlink: 'syz.3.9463': attribute type 3 has an invalid length. [ 1279.931573][T11297] netlink: 140 bytes leftover after parsing attributes in process `syz.3.9463'. [ 1280.018412][ T7554] ip6gretap0 (unregistering): left promiscuous mode [ 1280.133879][ T7554] bond0 (unregistering): (slave vti0): Releasing backup interface [ 1280.141834][ T7554] vti0 (unregistering): left promiscuous mode [ 1280.180228][ T7554] gretap0 (unregistering): left promiscuous mode [ 1280.242084][ T7554] batman_adv: batadv0: Removing interface: macvlan3 [ 1280.528001][ T7554] bond1 (unregistering): Released all slaves [ 1280.542257][ T7554] bond2 (unregistering): (slave bond3): Releasing backup interface [ 1280.550726][ T7554] bond3 (unregistering): left promiscuous mode [ 1280.558740][ T7554] bond2 (unregistering): Released all slaves [ 1280.572551][ T7554] bond3 (unregistering): Released all slaves [ 1280.588565][ T7554] bond4 (unregistering): Released all slaves [ 1280.606282][ T7554] bond0 (unregistering): Released all slaves [ 1280.619946][ T7554] bond5 (unregistering): Released all slaves [ 1280.632931][ T7554] bond6 (unregistering): Released all slaves [ 1280.657147][ T7554] bond7 (unregistering): Released all slaves [ 1280.672024][ T7554] bond8 (unregistering): Released all slaves [ 1280.689172][T11198] lo speed is unknown, defaulting to 1000 [ 1280.689252][T11200] lo speed is unknown, defaulting to 1000 [ 1281.019949][ T7554] : left promiscuous mode [ 1281.102507][T11311] bond2: entered promiscuous mode [ 1281.108238][T11311] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1281.221405][T11322] netlink: 'syz.3.9467': attribute type 1 has an invalid length. [ 1281.260623][ T7554] l24): left promiscuous mode [ 1281.408178][ T7554] : left promiscuous mode [ 1281.449204][T11201] lo speed is unknown, defaulting to 1000 [ 1281.461561][T11340] xt_hashlimit: size too large, truncated to 1048576 [ 1281.505776][ T7554] tipc: Left network mode [ 1281.973753][ T6209] Bluetooth: hci1: command tx timeout [ 1282.086989][T11200] lo speed is unknown, defaulting to 1000 [ 1282.106338][T11368] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9475'. [ 1282.303527][T11201] lo speed is unknown, defaulting to 1000 [ 1282.640938][T11379] bond3: entered promiscuous mode [ 1282.672746][T11379] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1283.078284][T11400] netlink: 'syz.2.9481': attribute type 11 has an invalid length. [ 1283.682445][T11433] netlink: 48 bytes leftover after parsing attributes in process `syz.3.9485'. [ 1284.053705][ T6209] Bluetooth: hci1: command tx timeout [ 1284.079902][T11201] chnl_net:caif_netlink_parms(): no params data found [ 1284.364893][T11451] syzkaller1: entered promiscuous mode [ 1284.382452][T11467] Cannot find add_set index 0 as target [ 1284.395885][T11451] syzkaller1: entered allmulticast mode [ 1284.750748][T11477] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9492'. [ 1284.767851][T11201] bridge0: port 1(bridge_slave_0) entered blocking state [ 1284.806918][T11201] bridge0: port 1(bridge_slave_0) entered disabled state [ 1284.823320][T11201] bridge_slave_0: entered allmulticast mode [ 1284.838989][T11201] bridge_slave_0: entered promiscuous mode [ 1284.843799][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1284.852818][ C1] lec:lec_tx_timeout: lec0 [ 1284.858294][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1284.862015][T11201] bridge0: port 2(bridge_slave_1) entered blocking state [ 1284.890573][T11201] bridge0: port 2(bridge_slave_1) entered disabled state [ 1284.902553][T11485] netlink: 7 bytes leftover after parsing attributes in process `syz.0.9494'. [ 1284.906544][T11201] bridge_slave_1: entered allmulticast mode [ 1284.920663][T11201] bridge_slave_1: entered promiscuous mode [ 1284.974336][T11485] x_tables: unsorted entry at hook 2 [ 1284.988660][T11485] netlink: 140 bytes leftover after parsing attributes in process `syz.0.9494'. [ 1285.128434][T11201] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1285.163108][T11201] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1285.465503][T11201] team0: Port device team_slave_0 added [ 1285.506352][T11201] team0: Port device team_slave_1 added [ 1285.598965][T11201] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1285.624144][T11201] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1285.714202][T11201] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1285.799654][T11201] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1285.813574][T11201] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1285.925874][T11201] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1286.147564][ T6209] Bluetooth: hci1: command tx timeout [ 1286.573508][ T7554] hsr_slave_0: left promiscuous mode [ 1286.592520][ T7554] hsr_slave_1: left promiscuous mode [ 1286.608428][ T7554] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1286.618443][ T7554] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1286.991619][ T7554] team0 (unregistering): Port device team_slave_1 removed [ 1287.007690][ T7554] team0 (unregistering): Port device team_slave_0 removed [ 1287.061236][T25860] smc: removing ib device syz0 [ 1287.271756][T11201] hsr_slave_0: entered promiscuous mode [ 1287.281396][T11201] hsr_slave_1: entered promiscuous mode [ 1287.289024][T11201] debugfs: 'hsr0' already exists in 'hsr' [ 1287.296431][T11201] Cannot create hsr debugfs directory [ 1287.304445][T11544] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 1287.808200][T11576] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9512'. [ 1288.269952][T11602] netlink: 'syz.2.9517': attribute type 3 has an invalid length. [ 1288.299177][T11598] dvmrp1: entered allmulticast mode [ 1288.319239][T11602] netlink: 244 bytes leftover after parsing attributes in process `syz.2.9517'. [ 1288.536830][T11611] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9519'. [ 1288.743178][T11619] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9521'. [ 1288.757366][T11620] netlink: 'syz.3.9522': attribute type 13 has an invalid length. [ 1288.822044][T11619] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9521'. [ 1288.874305][T11594] lo speed is unknown, defaulting to 1000 [ 1288.899176][T11619] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9521'. [ 1288.921211][T11619] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9521'. [ 1288.974817][T11619] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9521'. [ 1289.030031][T11201] netdevsim netdevsim4 eth4 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1289.191606][T11634] ip6t_srh: unknown srh match flags 4000 [ 1289.451762][T11201] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1289.635430][T11645] veth3: entered allmulticast mode [ 1289.756565][T11201] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1289.819073][T11594] lo speed is unknown, defaulting to 1000 [ 1289.873537][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1289.881640][ C1] lec:lec_tx_timeout: lec0 [ 1289.886929][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1289.977568][T11201] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1290.174270][ T7554] IPVS: stop unused estimator thread 0... [ 1290.269558][T11678] netlink: 'syz.3.9533': attribute type 1 has an invalid length. [ 1290.308934][T11678] __nla_validate_parse: 28 callbacks suppressed [ 1290.308956][T11678] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9533'. [ 1290.349268][T11681] netlink: 'syz.0.9534': attribute type 2 has an invalid length. [ 1290.373155][T11682] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9533'. [ 1290.627157][T11201] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1290.715180][T11694] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9536'. [ 1290.719304][T11201] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1290.725556][T11696] netlink: 'syz.3.9537': attribute type 39 has an invalid length. [ 1290.753314][T11701] IPv6: NLM_F_CREATE should be specified when creating new route [ 1290.767358][T11700] netlink: 168 bytes leftover after parsing attributes in process `syz.0.9538'. [ 1290.838659][T11201] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1290.885212][T11695] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1290.899916][T11201] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1291.072970][T11715] syzkaller0: entered promiscuous mode [ 1291.084898][T11715] syzkaller0: entered allmulticast mode [ 1291.127390][T11719] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9541'. [ 1291.149551][T11719] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9541'. [ 1291.400255][T11722] syzkaller0: entered promiscuous mode [ 1291.412899][T11722] syzkaller0: entered allmulticast mode [ 1291.417378][T11736] netlink: 'syz.0.9544': attribute type 1 has an invalid length. [ 1291.469114][T11736] netlink: 168 bytes leftover after parsing attributes in process `syz.0.9544'. [ 1293.910698][T11767] ip6tnl0: Caught tx_queue_len zero misconfig [ 1293.934308][T11767] IPVS: ip_vs_edit_dest(): server weight less than zero [ 1293.942622][T11201] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1293.987577][T11770] netlink: 'syz.1.9547': attribute type 1 has an invalid length. [ 1294.006660][T11201] 8021q: adding VLAN 0 to HW filter on device team0 [ 1294.102180][T11770] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1294.138959][T11787] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9549'. [ 1294.202435][T11795] netlink: 14 bytes leftover after parsing attributes in process `syz.1.9547'. [ 1294.303908][T11773] bond4: (slave veth5): Enslaving as an active interface with a down link [ 1294.345588][T25860] bridge0: port 1(bridge_slave_0) entered blocking state [ 1294.352767][T25860] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1294.425457][T11782] bond4: (slave dummy0): Enslaving as an active interface with a down link [ 1294.509610][T11795] bond4: (slave dummy0): Releasing active interface [ 1294.738611][ T1324] bridge0: port 2(bridge_slave_1) entered blocking state [ 1294.745847][ T1324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1294.893511][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1294.901593][ C1] lec:lec_tx_timeout: lec0 [ 1294.906599][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1295.007760][T11821] netlink: 160 bytes leftover after parsing attributes in process `syz.2.9557'. [ 1295.036777][T11821] net_ratelimit: 43 callbacks suppressed [ 1295.036855][T11821] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1295.636047][T11856] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9562'. [ 1295.662826][T11201] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1295.666390][T11855] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9562'. [ 1295.806144][T11863] netlink: 'syz.0.9563': attribute type 1 has an invalid length. [ 1296.000804][T11863] bond10: entered promiscuous mode [ 1296.022015][T11863] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1296.085316][T11862] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 1296.253094][T11888] C: renamed from team_slave_0 (while UP) [ 1296.280079][T11888] netlink: 'syz.3.9567': attribute type 8 has an invalid length. [ 1296.324317][T11888] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1296.544987][T11908] netlink: 5 bytes leftover after parsing attributes in process `syz.0.9571'. [ 1296.545945][T11201] veth0_vlan: entered promiscuous mode [ 1296.589410][T11908] ..0{X: renamed from gretap0 [ 1296.607583][T11908] ..0{X: entered allmulticast mode [ 1296.616068][T11908] A link change request failed with some changes committed already. Interface ..0{X may have been left with an inconsistent configuration, please check. [ 1296.691941][T11201] veth1_vlan: entered promiscuous mode [ 1296.875286][T11201] veth0_macvtap: entered promiscuous mode [ 1296.934683][T11201] veth1_macvtap: entered promiscuous mode [ 1297.044246][T11928] smc: net device veth1_to_team applied user defined pnetid SYZ0 [ 1297.055022][T11928] tipc: Enabled bearer , priority 0 [ 1297.208090][T11201] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1297.216670][T11944] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9575'. [ 1297.285736][T11201] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1297.328261][ T1519] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1297.359806][ T1519] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1297.391228][T11926] tipc: Disabling bearer [ 1297.415668][ T1519] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1297.438497][ T1519] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1297.758990][T11968] netlink: 292 bytes leftover after parsing attributes in process `syz.0.9578'. [ 1297.807361][T11957] lo speed is unknown, defaulting to 1000 [ 1297.958640][ T636] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1297.996236][ T636] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1298.072629][ T1523] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1298.110672][ T1523] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1298.309999][T11985] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9582'. [ 1298.448872][T11957] lo speed is unknown, defaulting to 1000 [ 1298.678993][T12004] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9585'. [ 1298.816643][T12008] netlink: 'syz.1.9587': attribute type 4 has an invalid length. [ 1299.029111][T12009] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1299.441814][T16472] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1299.452922][T16472] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1299.466766][T16472] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1299.475560][T16472] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1299.476640][T12032] netlink: 11 bytes leftover after parsing attributes in process `syz.3.9595'. [ 1299.492680][T16472] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1299.585791][T12022] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9592'. [ 1299.617883][T12032] syzkaller0: entered promiscuous mode [ 1299.623393][T12032] syzkaller0: entered allmulticast mode [ 1299.690706][T12032] syzkaller0: left promiscuous mode [ 1299.724426][T12032] syzkaller0: left allmulticast mode [ 1299.743521][T12029] lo speed is unknown, defaulting to 1000 [ 1299.913865][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1299.921959][ C1] lec:lec_tx_timeout: lec0 [ 1300.138783][ T1298] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1300.151861][ T1298] lec:lec_start_xmit: lec0:No lecd attached [ 1300.465734][T12029] lo speed is unknown, defaulting to 1000 [ 1300.513284][T12024] lo speed is unknown, defaulting to 1000 [ 1300.849562][T12057] No such timeout policy "syz1" [ 1300.938907][T12029] chnl_net:caif_netlink_parms(): no params data found [ 1301.053951][T12066] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9600'. [ 1301.064020][T12065] netlink: 212916 bytes leftover after parsing attributes in process `syz.3.9601'. [ 1301.084603][T12063] netlink: 76 bytes leftover after parsing attributes in process `syz.1.9600'. [ 1301.329969][T12024] lo speed is unknown, defaulting to 1000 [ 1301.338494][T12029] bridge0: port 1(bridge_slave_0) entered blocking state [ 1301.357364][T12029] bridge0: port 1(bridge_slave_0) entered disabled state [ 1301.371693][T12029] bridge_slave_0: entered allmulticast mode [ 1301.380589][T12029] bridge_slave_0: entered promiscuous mode [ 1301.400823][T12029] bridge0: port 2(bridge_slave_1) entered blocking state [ 1301.408598][T12029] bridge0: port 2(bridge_slave_1) entered disabled state [ 1301.417495][T12029] bridge_slave_1: entered allmulticast mode [ 1301.426067][T12029] bridge_slave_1: entered promiscuous mode [ 1301.500774][T12029] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1301.532200][T12029] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1301.562443][T12083] openvswitch: netlink: IP tunnel dst address not specified [ 1301.583133][ T6209] Bluetooth: hci2: command tx timeout [ 1301.703274][T12029] team0: Port device team_slave_0 added [ 1301.781505][T12029] team0: Port device team_slave_1 added [ 1301.998299][T12029] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1302.018685][T12029] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1302.093360][T12029] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1302.113157][T12029] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1302.130976][T12029] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1302.301977][T12029] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1302.321184][T12105] netlink: 'syz.1.9610': attribute type 3 has an invalid length. [ 1302.445525][T12029] hsr_slave_0: entered promiscuous mode [ 1302.468765][T12029] hsr_slave_1: entered promiscuous mode [ 1302.484592][T12029] debugfs: 'hsr0' already exists in 'hsr' [ 1302.490429][T12029] Cannot create hsr debugfs directory [ 1302.703126][T12117] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9613'. [ 1302.874272][T12131] sctp: [Deprecated]: syz.3.9618 (pid 12131) Use of int in max_burst socket option deprecated. [ 1302.874272][T12131] Use struct sctp_assoc_value instead [ 1302.952774][T12131] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9618'. [ 1303.305692][T12157] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9625'. [ 1303.340026][ T25] block nbd1: Possible stuck request ffff888059e60000: control (read@0,1024B). Runtime 150 seconds [ 1303.357066][ T25] block nbd1: Possible stuck request ffff888059e60200: control (read@1024,1024B). Runtime 150 seconds [ 1303.368793][ T25] block nbd1: Possible stuck request ffff888059e60400: control (read@2048,1024B). Runtime 150 seconds [ 1303.380147][ T25] block nbd1: Possible stuck request ffff888059e60600: control (read@3072,1024B). Runtime 150 seconds [ 1303.536287][T12029] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode [ 1303.572175][T12029] netdevsim netdevsim0 netdevsim0 (unregistering): left promiscuous mode [ 1303.584625][T12174] netlink: 'syz.3.9629': attribute type 1 has an invalid length. [ 1303.604361][T12174] netlink: 224 bytes leftover after parsing attributes in process `syz.3.9629'. [ 1303.618754][T12029] bridge0: port 3(netdevsim0) entered disabled state [ 1303.654368][ T6209] Bluetooth: hci2: command tx timeout [ 1304.108766][T12029] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1304.140143][T12211] netlink: 'syz.1.9638': attribute type 1 has an invalid length. [ 1304.151958][T12029] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1304.212785][T12211] bond5: entered promiscuous mode [ 1304.218609][T12211] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1304.229323][T12029] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1304.291988][T12029] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1304.361003][T12211] netlink: 'syz.1.9638': attribute type 142 has an invalid length. [ 1304.424606][T12211] macvtap1: entered allmulticast mode [ 1304.482312][T12211] bond5: (slave bridge2): making interface the new active one [ 1304.505515][T12211] bridge2: entered promiscuous mode [ 1304.525683][T12211] bond5: (slave bridge2): Enslaving as an active interface with an up link [ 1304.664804][T12029] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1304.749078][T12029] 8021q: adding VLAN 0 to HW filter on device team0 [ 1304.765098][ T1324] bridge0: port 1(bridge_slave_0) entered blocking state [ 1304.772254][ T1324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1304.796498][ T1324] bridge0: port 2(bridge_slave_1) entered blocking state [ 1304.803699][ T1324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1305.048482][T12254] ipt_ECN: cannot use operation on non-tcp rule [ 1305.098529][T12257] netlink: 'syz.1.9652': attribute type 1 has an invalid length. [ 1305.139687][T12257] bond6 (unregistering): Released all slaves [ 1305.161543][T12029] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1305.247195][T12029] veth0_vlan: entered promiscuous mode [ 1305.275907][T12029] veth1_vlan: entered promiscuous mode [ 1305.280984][T12257] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9652'. [ 1305.360821][T12029] veth0_macvtap: entered promiscuous mode [ 1305.379660][T12029] veth1_macvtap: entered promiscuous mode [ 1305.425669][T12029] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1305.457866][T12029] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1305.478515][T12275] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9655'. [ 1305.523216][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1305.548469][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1305.601745][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1305.669208][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1305.671609][T12277] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9659'. [ 1305.732988][T12277] vlan2: entered promiscuous mode [ 1305.744217][ T6209] Bluetooth: hci2: command tx timeout [ 1305.764184][T12277] batadv0: entered promiscuous mode [ 1305.813493][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5660 ms [ 1305.821524][ C1] lec:lec_tx_timeout: lec0 [ 1305.925545][T12296] syzkaller0: entered promiscuous mode [ 1305.958955][T12296] syzkaller0: entered allmulticast mode [ 1306.044432][T12300] netlink: 'syz.1.9664': attribute type 2 has an invalid length. [ 1306.089098][T12300] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9664'. [ 1306.166607][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1306.204792][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1306.291261][T12306] netlink: 'syz.2.9666': attribute type 21 has an invalid length. [ 1306.299828][T12306] netlink: 128 bytes leftover after parsing attributes in process `syz.2.9666'. [ 1306.327167][T12306] netlink: 'syz.2.9666': attribute type 4 has an invalid length. [ 1306.393361][T12306] netlink: 'syz.2.9666': attribute type 5 has an invalid length. [ 1306.406494][T12306] netlink: 3 bytes leftover after parsing attributes in process `syz.2.9666'. [ 1306.476985][ T1523] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1306.494340][ T1523] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1306.560374][T12322] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.9670'. [ 1306.788612][T12326] netlink: 'syz.3.9672': attribute type 1 has an invalid length. [ 1306.810865][T12326] netlink: 224 bytes leftover after parsing attributes in process `syz.3.9672'. [ 1307.120608][T12350] netlink: 476 bytes leftover after parsing attributes in process `syz.0.9677'. [ 1307.335016][T12367] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9683'. [ 1307.365982][T12369] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9684'. [ 1307.516611][T12362] syzkaller1: entered promiscuous mode [ 1307.525475][T12362] syzkaller1: entered allmulticast mode [ 1307.814818][ T6209] Bluetooth: hci2: command tx timeout [ 1307.820420][T12390] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.9689'. [ 1308.216954][T12407] netlink: 211856 bytes leftover after parsing attributes in process `syz.1.9694'. [ 1308.496914][ T1437] lec:lec_start_xmit: lec0:No lecd attached [ 1309.800522][T12483] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1310.159050][T12514] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma? [ 1310.317395][T12520] syz.3.9727 (12520) used obsolete PPPIOCDETACH ioctl [ 1310.836619][T12550] tun0: tun_chr_ioctl cmd 1074025677 [ 1310.842166][T12550] tun0: linktype set to 15 [ 1310.988951][T12562] macvtap0: entered allmulticast mode [ 1311.429861][T12598] lo speed is unknown, defaulting to 1000 [ 1311.577705][T12606] __nla_validate_parse: 9 callbacks suppressed [ 1311.577725][T12606] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9751'. [ 1311.670797][T12612] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9750'. [ 1311.737610][T12598] lo speed is unknown, defaulting to 1000 [ 1311.747141][T12611] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9752'. [ 1311.758105][T12612] IPVS: set_ctl: invalid protocol: 44 224.0.0.2:20004 [ 1312.113169][T12632] netlink: 'syz.1.9757': attribute type 32 has an invalid length. [ 1312.292328][T12645] netlink: 'syz.1.9761': attribute type 1 has an invalid length. [ 1312.369944][T12649] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9763'. [ 1312.422739][T12651] netlink: 68 bytes leftover after parsing attributes in process `syz.4.9763'. [ 1312.471887][T12649] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9763'. [ 1312.530369][T12650] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9762'. [ 1312.722046][T12661] vti0: entered promiscuous mode [ 1312.727483][T12661] vti0: entered allmulticast mode [ 1312.838110][T12667] IPVS: set_ctl: invalid protocol: 115 172.20.20.170:20002 [ 1312.964722][T12665] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1313.085470][T12670] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1313.137559][T12686] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9767'. [ 1313.226875][T12665] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1313.333276][T12665] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1313.392415][T12695] syz.2.9777: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1313.410196][T12695] CPU: 0 UID: 0 PID: 12695 Comm: syz.2.9777 Not tainted syzkaller #0 PREEMPT(full) [ 1313.410221][T12695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1313.410231][T12695] Call Trace: [ 1313.410239][T12695] [ 1313.410247][T12695] dump_stack_lvl+0xe8/0x150 [ 1313.410278][T12695] warn_alloc+0x249/0x340 [ 1313.410302][T12695] ? stack_trace_save+0xa9/0x100 [ 1313.410327][T12695] ? __pfx_warn_alloc+0x10/0x10 [ 1313.410355][T12695] ? kasan_save_track+0x4f/0x80 [ 1313.410374][T12695] ? kasan_save_track+0x3e/0x80 [ 1313.410392][T12695] ? __kasan_kmalloc+0x93/0xb0 [ 1313.410411][T12695] ? __kmalloc_cache_noprof+0x31c/0x660 [ 1313.410430][T12695] ? xskq_create+0x56/0x170 [ 1313.410458][T12695] ? xsk_setsockopt+0x54c/0x990 [ 1313.410478][T12695] ? do_sock_setsockopt+0x17c/0x1b0 [ 1313.410505][T12695] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 1313.410539][T12695] ? do_syscall_64+0x14d/0xf80 [ 1313.410561][T12695] __vmalloc_node_range_noprof+0x132/0x1730 [ 1313.410612][T12695] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1313.410639][T12695] ? __kasan_kmalloc+0x93/0xb0 [ 1313.410665][T12695] vmalloc_user_noprof+0xad/0xe0 [ 1313.410683][T12695] ? xskq_create+0xbf/0x170 [ 1313.410708][T12695] xskq_create+0xbf/0x170 [ 1313.410734][T12695] xsk_init_queue+0x8a/0xe0 [ 1313.410760][T12695] xsk_setsockopt+0x54c/0x990 [ 1313.410789][T12695] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1313.410811][T12695] ? __pfx_aa_sk_perm+0x10/0x10 [ 1313.410836][T12695] ? aa_sock_opt_perm+0xff/0x1a0 [ 1313.410860][T12695] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1313.410880][T12695] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1313.410901][T12695] do_sock_setsockopt+0x17c/0x1b0 [ 1313.410929][T12695] __x64_sys_setsockopt+0x13d/0x1b0 [ 1313.410955][T12695] do_syscall_64+0x14d/0xf80 [ 1313.410971][T12695] ? trace_irq_disable+0x3b/0x150 [ 1313.410995][T12695] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1313.411013][T12695] ? clear_bhb_loop+0x40/0x90 [ 1313.411035][T12695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1313.411053][T12695] RIP: 0033:0x7f86ca39c799 [ 1313.411072][T12695] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1313.411087][T12695] RSP: 002b:00007f86cb21b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1313.411107][T12695] RAX: ffffffffffffffda RBX: 00007f86ca615fa0 RCX: 00007f86ca39c799 [ 1313.411120][T12695] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 1313.411132][T12695] RBP: 00007f86ca432c99 R08: 0000000000000004 R09: 0000000000000000 [ 1313.411144][T12695] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1313.411156][T12695] R13: 00007f86ca616038 R14: 00007f86ca615fa0 R15: 00007ffdfa025e98 [ 1313.411187][T12695] [ 1313.411734][T12695] Mem-Info: [ 1313.700530][T12695] active_anon:6620 inactive_anon:0 isolated_anon:0 [ 1313.700530][T12695] active_file:2962 inactive_file:40741 isolated_file:0 [ 1313.700530][T12695] unevictable:745 dirty:186 writeback:0 [ 1313.700530][T12695] slab_reclaimable:13724 slab_unreclaimable:127827 [ 1313.700530][T12695] mapped:30682 shmem:1404 pagetables:1761 [ 1313.700530][T12695] sec_pagetables:0 bounce:0 [ 1313.700530][T12695] kernel_misc_reclaimable:0 [ 1313.700530][T12695] free:1275065 free_pcp:24152 free_cma:0 [ 1313.749197][T12695] Node 0 active_anon:26380kB inactive_anon:0kB active_file:11848kB inactive_file:162764kB unevictable:1444kB isolated(anon):0kB isolated(file):0kB mapped:36708kB dirty:740kB writeback:0kB shmem:4080kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15200kB pagetables:6896kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1313.783126][T12695] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:86020kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1313.813926][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5320 ms [ 1313.813957][ C1] lec:lec_tx_timeout: lec0 [ 1313.843578][T12695] Node 0 DMA free:11248kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 1313.875543][T12695] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 1313.879344][T12665] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1313.881428][T12695] Node 0 DMA32 free:1392700kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26392kB inactive_anon:0kB active_file:11848kB inactive_file:162764kB unevictable:1536kB writepending:744kB zspages:0kB present:3129332kB managed:2552728kB mlocked:0kB bounce:0kB free_pcp:38452kB local_pcp:20920kB free_cma:0kB [ 1313.954511][T12695] lowmem_reserve[]: 0 0 0 0 0 [ 1313.959278][T12695] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:884kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 1314.019629][T12695] lowmem_reserve[]: 0 0 0 0 0 [ 1314.025334][T12695] Node 1 Normal free:3696152kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:58792kB local_pcp:31176kB free_cma:0kB [ 1314.059316][T12695] lowmem_reserve[]: 0 0 0 0 0 [ 1314.068165][T12695] Node 0 DMA: 0*4kB 2*8kB (U) 2*16kB (U) 2*32kB (U) 2*64kB (U) 2*128kB (U) 2*256kB (U) 2*512kB (U) 3*1024kB (U) 3*2048kB (UM) 0*4096kB = 11248kB [ 1314.091701][T12695] Node 0 DMA32: 1831*4kB (UME) 7180*8kB (UME) 5372*16kB (UME) 960*32kB (UME) 464*64kB (UME) 585*128kB (UM) 594*256kB (UM) 479*512kB (UME) 333*1024kB (UM) 178*2048kB (UM) 1*4096kB (U) = 1392956kB [ 1314.112149][T12695] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1314.127521][T12695] Node 1 Normal: 4*4kB (U) 9*8kB (UME) 18*16kB (UME) 15*32kB (UME) 15*64kB (UME) 12*128kB (UME) 7*256kB (UM) 11*512kB (UME) 5*1024kB (UM) 7*2048kB (UE) 895*4096kB (UM) = 3696152kB [ 1314.211300][ T4472] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1314.226179][T12695] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1314.245373][T12724] netlink: 'syz.4.9784': attribute type 1 has an invalid length. [ 1314.259853][T12695] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1314.297161][T12695] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1314.302110][T12724] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1314.315430][ T1514] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1314.329116][T12695] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1314.359676][T12695] 45071 total pagecache pages [ 1314.368666][T12695] 0 pages in swap cache [ 1314.372857][T12695] Free swap = 124996kB [ 1314.378905][T12695] Total swap = 124996kB [ 1314.385966][T12695] 2097051 pages RAM [ 1314.389887][T12695] 0 pages HighMem/MovableOnly [ 1314.397351][T12695] 427033 pages reserved [ 1314.401679][T12695] 0 pages cma reserved [ 1314.440951][ T4472] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1314.451755][T12724] netlink: 256 bytes leftover after parsing attributes in process `syz.4.9784'. [ 1314.462629][T12724] netlink: 256 bytes leftover after parsing attributes in process `syz.4.9784'. [ 1314.485840][ T1514] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1314.709883][T12740] lo speed is unknown, defaulting to 1000 [ 1314.877744][T12757] bond1: entered promiscuous mode [ 1314.883341][T12757] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1314.929838][T12757] bond1 (unregistering): Released all slaves [ 1315.062255][T12740] lo speed is unknown, defaulting to 1000 [ 1315.063488][T12737] lo speed is unknown, defaulting to 1000 [ 1315.380881][T12764] bond6: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 1315.394914][T12764] bond6 (unregistering): Released all slaves [ 1315.524275][T12737] lo speed is unknown, defaulting to 1000 [ 1315.530136][T12752] lo speed is unknown, defaulting to 1000 [ 1315.667001][T12775] netlink: 'syz.1.9798': attribute type 14 has an invalid length. [ 1315.707627][T12775] netlink: 'syz.1.9798': attribute type 12 has an invalid length. [ 1315.928285][T12752] lo speed is unknown, defaulting to 1000 [ 1316.083384][T12782] batman_adv: batadv0: Removing interface: vlan3 [ 1316.685349][T12798] __nla_validate_parse: 6 callbacks suppressed [ 1316.685370][T12798] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9806'. [ 1316.761988][T12798] team0: Port device team_slave_0 removed [ 1316.794921][T12796] lo speed is unknown, defaulting to 1000 [ 1316.810906][T12800] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9806'. [ 1317.097692][T12814] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9809'. [ 1317.201638][T12796] lo speed is unknown, defaulting to 1000 [ 1317.204378][T12793] lo speed is unknown, defaulting to 1000 [ 1317.402127][T12827] netlink: 'syz.1.9815': attribute type 10 has an invalid length. [ 1317.641023][T12827] netlink: 'syz.1.9815': attribute type 5 has an invalid length. [ 1317.649964][T12825] netlink: 'syz.2.9814': attribute type 3 has an invalid length. [ 1317.649972][T12837] nbd: nbd2 already in use [ 1317.664769][T12830] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9816'. [ 1317.675852][T12793] lo speed is unknown, defaulting to 1000 [ 1317.811421][T12825] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1317.994856][T12844] netlink: 'syz.1.9818': attribute type 30 has an invalid length. [ 1318.247174][T12853] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 1318.587626][T12865] netlink: 'syz.4.9822': attribute type 4 has an invalid length. [ 1318.679283][T12869] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9825'. [ 1318.769341][T12873] netlink: 'syz.1.9826': attribute type 4 has an invalid length. [ 1318.791936][T12869] ip6gretap0: entered promiscuous mode [ 1318.815744][T12869] gretap0: entered promiscuous mode [ 1318.822147][T12869] debugfs: 'hsr1' already exists in 'hsr' [ 1318.833596][T12869] Cannot create hsr debugfs directory [ 1319.209215][T12898] netlink: 312 bytes leftover after parsing attributes in process `syz.3.9838'. [ 1319.237883][T12901] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9837'. [ 1319.257696][T12901] vlan0: entered promiscuous mode [ 1319.416488][T12889] lec:lec_atm_close: lec0: Shut down! [ 1319.523083][T12918] xt_recent: Unsupported userspace flags (000000b1) [ 1319.538592][T12920] netlink: 352 bytes leftover after parsing attributes in process `syz.0.9841'. [ 1319.547151][T12918] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9840'. [ 1319.607706][T12923] netlink: 'syz.4.9842': attribute type 1 has an invalid length. [ 1319.706380][T12923] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1319.727808][T12929] netlink: 'syz.0.9843': attribute type 29 has an invalid length. [ 1319.742659][T12929] netlink: 'syz.0.9843': attribute type 29 has an invalid length. [ 1319.752516][T12929] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9843'. [ 1319.840017][T12931] netlink: 'syz.4.9844': attribute type 10 has an invalid length. [ 1320.687706][T12975] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1321.580014][T13042] : renamed from macsec0 [ 1321.778315][T13052] __nla_validate_parse: 12 callbacks suppressed [ 1321.778335][T13052] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9873'. [ 1321.882621][T13057] xt_hashlimit: size too large, truncated to 1048576 [ 1321.915040][T13059] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9873'. [ 1322.071768][T13053] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1322.235169][T13068] vti1: entered promiscuous mode [ 1322.253569][T13068] vti1: entered allmulticast mode [ 1322.401257][T13053] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1322.580808][T13053] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1322.763878][T13077] syzkaller0: entered promiscuous mode [ 1322.768732][T13101] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9880'. [ 1322.792342][T13077] syzkaller0: entered allmulticast mode [ 1322.870383][T13053] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1322.969868][T13112] netlink: 72 bytes leftover after parsing attributes in process `syz.1.9883'. [ 1324.778029][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5360 ms [ 1324.786304][ C1] lec:lec_tx_timeout: lec0 [ 1325.279846][ T1517] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1325.292520][ T1517] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1325.396381][T13128] Can't find ip_set type bitmap:ip,mac [ 1325.433617][ T1517] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1325.491541][T13136] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9891'. [ 1325.542998][ T1517] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1325.620705][T13140] netlink: 80 bytes leftover after parsing attributes in process `syz.4.9893'. [ 1325.915459][T13161] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9900'. [ 1325.928454][T13163] validate_nla: 1 callbacks suppressed [ 1325.928475][T13163] netlink: 'syz.0.9897': attribute type 1 has an invalid length. [ 1325.957270][T13164] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9900'. [ 1325.968145][T13164] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9900'. [ 1325.978155][T13161] netlink: 248 bytes leftover after parsing attributes in process `syz.4.9900'. [ 1326.045603][T13163] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1326.406427][T13183] vxcan3: entered promiscuous mode [ 1326.519218][T13197] only policy match revision 0 supported [ 1326.519240][T13197] unable to load match [ 1326.666751][T13211] sctp: [Deprecated]: syz.1.9913 (pid 13211) Use of int in maxseg socket option. [ 1326.666751][T13211] Use struct sctp_assoc_value instead [ 1326.835092][T13223] netlink: 'syz.0.9917': attribute type 1 has an invalid length. [ 1326.878206][T13223] bond3: entered promiscuous mode [ 1326.884695][T13223] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1326.957110][T13230] __nla_validate_parse: 5 callbacks suppressed [ 1326.957128][T13230] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9918'. [ 1326.991774][T13223] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1326.999786][T13223] bond3: (slave vti0): The slave device specified does not support setting the MAC address [ 1327.024845][T13223] bond3: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 1327.041207][T13223] bond3: (slave vti0): making interface the new active one [ 1327.049784][T13223] vti0: entered promiscuous mode [ 1327.057151][T13223] bond3: (slave vti0): Enslaving as an active interface with an up link [ 1327.121442][T13239] netlink: 'syz.3.9921': attribute type 4 has an invalid length. [ 1327.130208][T13241] netlink: 'syz.3.9921': attribute type 4 has an invalid length. [ 1327.371749][T13249] bond3: option packets_per_slave: invalid value (1048582) [ 1327.384037][T13259] netlink: 'syz.4.9923': attribute type 1 has an invalid length. [ 1327.397098][T13249] bond3: option packets_per_slave: allowed values 0 - 65535 [ 1327.413190][T13249] bond3 (unregistering): Released all slaves [ 1327.462290][T13262] netlink: 'syz.3.9926': attribute type 1 has an invalid length. [ 1327.484103][T13266] netlink: 'syz.2.9928': attribute type 10 has an invalid length. [ 1327.501609][T13264] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9927'. [ 1327.594985][T13272] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 1327.658293][T13276] netlink: 364 bytes leftover after parsing attributes in process `syz.0.9931'. [ 1327.751227][T13281] netlink: set zone limit has 4 unknown bytes [ 1327.851860][T13287] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9934'. [ 1327.866121][T13287] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1327.919795][T13293] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9931'. [ 1327.968158][T13291] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9935'. [ 1329.209312][T13333] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9949'. [ 1329.225154][T13331] netlink: 76 bytes leftover after parsing attributes in process `syz.4.9948'. [ 1329.423543][ T29] audit: type=1800 audit(1773269127.250:26): pid=13344 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.9947" name="e" dev="tmpfs" ino=989 res=0 errno=0 [ 1329.505766][T13346] netlink: 'syz.4.9951': attribute type 1 has an invalid length. [ 1329.547551][T13346] netlink: 244 bytes leftover after parsing attributes in process `syz.4.9951'. [ 1329.566174][T13346] NCSI netlink: No device for ifindex 0 [ 1329.827238][T13359] sctp: [Deprecated]: syz.1.9954 (pid 13359) Use of int in maxseg socket option. [ 1329.827238][T13359] Use struct sctp_assoc_value instead [ 1329.851518][T13362] sctp: [Deprecated]: syz.1.9954 (pid 13362) Use of int in maxseg socket option. [ 1329.851518][T13362] Use struct sctp_assoc_value instead [ 1329.874531][T13359] IPVS: set_ctl: invalid protocol: 60 10.1.1.2:20001 [ 1330.090795][T13378] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9959'. [ 1330.361720][T13390] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 1330.371742][T13390] bridge1: entered allmulticast mode [ 1330.730597][T13411] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1330.804477][T13415] lec:lec_atm_send: lec0: Unknown message type 1157461643 [ 1330.806363][T13414] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1331.178138][T13405] bridge0: port 2(bridge_slave_1) entered disabled state [ 1331.185594][T13405] bridge0: port 1(bridge_slave_0) entered disabled state [ 1331.242299][T13393] lec:lec_atm_close: lec0: Shut down! [ 1331.545311][T13405] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1331.600422][T13405] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1331.856984][T13405] vlan0: left promiscuous mode [ 1332.077064][T13405] bridge1: left allmulticast mode [ 1332.161354][ T1514] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1332.186423][ T1514] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1332.210874][ T1514] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1332.222226][ T1514] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1332.327148][T13435] __nla_validate_parse: 4 callbacks suppressed [ 1332.327167][T13435] netlink: 96 bytes leftover after parsing attributes in process `syz.0.9974'. [ 1332.403501][T13435] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9974'. [ 1332.598921][T13449] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9979'. [ 1332.667000][T13451] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9980'. [ 1333.165051][T13484] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.9986'. [ 1333.418225][ T25] block nbd1: Possible stuck request ffff888059e60000: control (read@0,1024B). Runtime 180 seconds [ 1333.432598][ T25] block nbd1: Possible stuck request ffff888059e60200: control (read@1024,1024B). Runtime 180 seconds [ 1333.444238][ T25] block nbd1: Possible stuck request ffff888059e60400: control (read@2048,1024B). Runtime 180 seconds [ 1333.455935][ T25] block nbd1: Possible stuck request ffff888059e60600: control (read@3072,1024B). Runtime 180 seconds [ 1333.472692][T13494] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9989'. [ 1333.664874][T13502] IPVS: set_ctl: invalid protocol: 59 127.0.0.1:20001 [ 1333.710903][T13507] netlink: 'syz.3.9992': attribute type 1 has an invalid length. [ 1333.752048][T13507] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1333.799536][T13507] bond1: (slave veth5): Enslaving as an active interface with a down link [ 1333.823778][T13507] bond1: (slave dummy0): making interface the new active one [ 1333.832729][T13507] dummy0: entered promiscuous mode [ 1333.839686][T13507] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 1333.866697][T13507] netlink: 14 bytes leftover after parsing attributes in process `syz.3.9992'. [ 1333.888424][T13507] bond1: (slave dummy0): Releasing active interface [ 1333.913975][T13507] dummy0 (unregistering): left promiscuous mode [ 1334.591023][T13533] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10000'. [ 1334.688787][T13535] netlink: 11 bytes leftover after parsing attributes in process `syz.0.10001'. [ 1334.715985][T13535] syzkaller0: entered promiscuous mode [ 1334.718554][T13537] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10002'. [ 1334.722007][T13535] syzkaller0: entered allmulticast mode [ 1334.746745][T13537] bond0: ARP target 170.170.170.170 is already present [ 1334.761331][T13537] bond0: option arp_ip_target: invalid value (2863311530) [ 1334.792962][T13535] syzkaller0: left promiscuous mode [ 1334.816472][T13535] syzkaller0: left allmulticast mode [ 1334.841967][T13541] netlink: 'syz.1.10004': attribute type 1 has an invalid length. [ 1334.922446][T13545] IPv6: Can't replace route, no match found [ 1334.959226][T13545] IPv6: Can't replace route, no match found [ 1334.981097][T13547] gtp0: entered promiscuous mode [ 1334.998529][T13547] gtp0: entered allmulticast mode [ 1335.145937][T13552] dvmrp0: entered allmulticast mode [ 1335.771479][T13580] lo speed is unknown, defaulting to 1000 [ 1335.823145][T13581] netlink: 'syz.1.10014': attribute type 1 has an invalid length. [ 1335.938144][T13586] bond2: entered promiscuous mode [ 1335.947577][T13586] bond2: entered allmulticast mode [ 1335.961501][T13586] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1336.295290][T13611] nbd4: detected capacity change from 0 to 63 [ 1336.436139][ T6209] block nbd4: Receive control failed (result -104) [ 1336.538107][T13580] lo speed is unknown, defaulting to 1000 [ 1336.689183][T13634] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1336.723804][T13631] vlan2: entered promiscuous mode [ 1336.733973][T13631] bridge0: entered promiscuous mode [ 1336.773507][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5540 ms [ 1336.781694][ C1] lec:lec_tx_timeout: lec0 [ 1336.990384][T13641] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1337.424329][T13668] tipc: Started in network mode [ 1337.429376][T13668] tipc: Node identity 9e89c76f8a79, cluster identity 4711 [ 1337.447726][T13668] tipc: Enabled bearer , priority 0 [ 1337.460638][T13668] syzkaller0: entered promiscuous mode [ 1337.475150][T13668] syzkaller0: entered allmulticast mode [ 1337.508360][T13668] tipc: Resetting bearer [ 1337.588807][T13667] tipc: Resetting bearer [ 1337.634928][T13667] tipc: Disabling bearer [ 1337.730992][T13684] __nla_validate_parse: 9 callbacks suppressed [ 1337.731013][T13684] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10044'. [ 1337.950269][T13692] vlan3: entered promiscuous mode [ 1337.967470][T13692] bridge0: entered promiscuous mode [ 1338.088465][T13699] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10049'. [ 1338.113345][T13699] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10049'. [ 1338.144096][T13699] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10049'. [ 1338.158450][T13699] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10049'. [ 1338.187399][T13699] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10049'. [ 1338.213014][T13704] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10051'. [ 1338.485055][T13724] lo speed is unknown, defaulting to 1000 [ 1338.759505][T13739] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10061'. [ 1338.989661][T13744] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10061'. [ 1339.257330][T13757] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10062'. [ 1339.602244][T13724] lo speed is unknown, defaulting to 1000 [ 1339.646298][T13757] hsr_slave_0: left promiscuous mode [ 1339.662696][T13759] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1339.677393][T13757] hsr_slave_1: left promiscuous mode [ 1339.866875][T13766] netlink: 'syz.3.10068': attribute type 1 has an invalid length. [ 1339.925854][T13766] netlink: 'syz.3.10068': attribute type 1 has an invalid length. [ 1339.995267][T13780] netlink: 'syz.4.10069': attribute type 142 has an invalid length. [ 1340.079970][T13774] bridge0: port 2(bridge_slave_1) entered disabled state [ 1340.088763][T13774] bridge0: port 1(bridge_slave_0) entered disabled state [ 1340.160633][T13790] xt_TCPMSS: Only works on TCP SYN packets [ 1340.555406][T13809] lo speed is unknown, defaulting to 1000 [ 1341.043331][T13834] netlink: 'syz.1.10083': attribute type 322 has an invalid length. [ 1341.143273][T13809] lo speed is unknown, defaulting to 1000 [ 1341.227323][T13842] lo speed is unknown, defaulting to 1000 [ 1342.062229][T13842] lo speed is unknown, defaulting to 1000 [ 1342.288541][ T4470] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1342.392895][ T4470] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1342.426872][ T4470] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1342.468945][ T4470] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1343.242604][T13928] netlink: 'syz.1.10102': attribute type 21 has an invalid length. [ 1343.302527][T13928] __nla_validate_parse: 14 callbacks suppressed [ 1343.302546][T13928] netlink: 156 bytes leftover after parsing attributes in process `syz.1.10102'. [ 1343.402187][T13914] vlan3: entered promiscuous mode [ 1343.408051][T13914] gretap0: entered promiscuous mode [ 1343.515113][T13939] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10105'. [ 1343.801396][T13952] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10111'. [ 1343.831449][T13954] netlink: 'syz.4.10112': attribute type 10 has an invalid length. [ 1343.840589][T13954] netlink: 'syz.4.10112': attribute type 29 has an invalid length. [ 1344.210837][T13978] netlink: 'syz.1.10118': attribute type 9 has an invalid length. [ 1344.231181][T13977] netlink: 'syz.1.10118': attribute type 9 has an invalid length. [ 1344.249114][T13977] netlink: 212340 bytes leftover after parsing attributes in process `syz.1.10118'. [ 1344.281028][T13978] netlink: 212340 bytes leftover after parsing attributes in process `syz.1.10118'. [ 1344.317991][T13983] bridge_slave_0: left allmulticast mode [ 1344.333348][T13983] bridge_slave_0: left promiscuous mode [ 1344.340780][T13983] bridge0: port 1(bridge_slave_0) entered disabled state [ 1344.368906][T13983] bridge_slave_1: left allmulticast mode [ 1344.395840][T13983] bridge_slave_1: left promiscuous mode [ 1344.401751][T13983] bridge0: port 2(bridge_slave_1) entered disabled state [ 1344.430005][T13980] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10119'. [ 1344.454552][T13983] bond0: (slave bond_slave_0): Releasing backup interface [ 1344.478480][T13983] bond0: (slave bond_slave_1): Releasing backup interface [ 1344.502132][T13983] team0: Port device team_slave_0 removed [ 1344.514901][T13983] team0: Port device team_slave_1 removed [ 1344.520993][T13983] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1344.529834][T13983] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1344.644491][T13985] lo speed is unknown, defaulting to 1000 [ 1344.849834][T14002] netlink: 36 bytes leftover after parsing attributes in process `syz.1.10123'. [ 1344.939685][T14006] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10124'. [ 1345.089984][T14016] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10127'. [ 1345.148966][ T1313] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1345.159876][ T1313] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1345.176653][ T1313] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1345.191293][ T1313] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1345.269502][T14022] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10129'. [ 1345.288262][T14022] syzkaller0: entered promiscuous mode [ 1345.304895][T14022] syzkaller0: entered allmulticast mode [ 1345.311808][T13985] lo speed is unknown, defaulting to 1000 [ 1345.451202][T14031] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1345.458366][T14031] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1345.484075][T14031] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1345.490611][T14031] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1345.521424][T14031] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1345.528466][T14031] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1346.008178][T14065] sch_tbf: peakrate 3 is lower than or equals to rate 183 ! [ 1346.237002][T14080] netlink: 'syz.2.10146': attribute type 11 has an invalid length. [ 1346.473212][T14096] lo speed is unknown, defaulting to 1000 [ 1346.617071][T14088] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1346.777168][T14096] lo speed is unknown, defaulting to 1000 [ 1346.839150][T14119] netlink: 'syz.0.10157': attribute type 1 has an invalid length. [ 1347.033595][T14129] netlink: 'syz.1.10160': attribute type 29 has an invalid length. [ 1347.169966][T14139] netlink: 'syz.2.10159': attribute type 1 has an invalid length. [ 1347.402373][T14139] bond5: entered promiscuous mode [ 1347.477049][T14139] bond5: entered allmulticast mode [ 1347.520869][T14139] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1347.650716][T14137] bond7: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 1347.674697][T14137] bond7 (unregistering): Released all slaves [ 1347.700193][T14129] netlink: 'syz.1.10160': attribute type 29 has an invalid length. [ 1348.192926][T14176] IPVS: set_ctl: invalid protocol: 33 100.1.1.2:20000 [ 1348.901473][T14199] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1349.009368][T14203] __nla_validate_parse: 7 callbacks suppressed [ 1349.009387][T14203] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10181'. [ 1349.010879][T14204] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10181'. [ 1349.755005][T14216] netlink: 'syz.4.10184': attribute type 1 has an invalid length. [ 1349.784165][T14216] netlink: 240 bytes leftover after parsing attributes in process `syz.4.10184'. [ 1352.292281][T14239] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 1352.310658][T14243] tc_dump_action: action bad kind [ 1352.531450][T14248] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.10192'. [ 1352.558587][T14248] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10192'. [ 1352.570036][T14249] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10193'. [ 1352.619521][T14253] geneve0: entered allmulticast mode [ 1352.745273][T14260] openvswitch: netlink: IP tunnel dst address not specified [ 1352.960187][T14270] netlink: 'syz.4.10200': attribute type 1 has an invalid length. [ 1352.996783][T14270] bond3: entered promiscuous mode [ 1353.005531][T14270] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1353.026985][T14276] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10200'. [ 1353.188102][T14282] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1353.708126][T14307] netlink: 64 bytes leftover after parsing attributes in process `syz.1.10208'. [ 1353.708139][T14305] netlink: 60 bytes leftover after parsing attributes in process `syz.0.10207'. [ 1353.762560][T14307] netlink: 'syz.1.10208': attribute type 11 has an invalid length. [ 1353.772735][T14307] netlink: 'syz.1.10208': attribute type 23 has an invalid length. [ 1353.794332][T14307] netlink: 224 bytes leftover after parsing attributes in process `syz.1.10208'. [ 1354.117543][T14322] __nla_validate_parse: 5 callbacks suppressed [ 1354.117562][T14322] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10212'. [ 1354.168370][T14324] netlink: 180 bytes leftover after parsing attributes in process `syz.3.10213'. [ 1354.179684][T14324] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10213'. [ 1354.490062][T14341] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10217'. [ 1354.581875][T14350] lo speed is unknown, defaulting to 1000 [ 1354.899813][T14350] lo speed is unknown, defaulting to 1000 [ 1355.024963][T14370] netlink: 44 bytes leftover after parsing attributes in process `syz.2.10224'. [ 1355.098756][T14377] netlink: 52 bytes leftover after parsing attributes in process `syz.1.10227'. [ 1355.108720][T14377] netlink: 'syz.1.10227': attribute type 1 has an invalid length. [ 1355.163530][T14379] tipc: Enabled bearer , priority 0 [ 1355.187721][T14379] syzkaller0: entered promiscuous mode [ 1355.193349][T14379] syzkaller0: entered allmulticast mode [ 1355.264152][T14379] tipc: Resetting bearer [ 1355.305071][T14378] tipc: Resetting bearer [ 1355.395824][T14386] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10231'. [ 1355.547499][T14378] tipc: Disabling bearer [ 1355.695788][ T4472] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1355.710003][ T4472] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1355.729810][ T4472] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1355.768526][ T4472] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1355.850159][T14406] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10238'. [ 1355.983881][T14415] openvswitch: netlink: Flow actions attr not present in new flow. [ 1356.051613][T14420] netlink: 'syz.3.10244': attribute type 1 has an invalid length. [ 1356.068182][T14420] netlink: 84 bytes leftover after parsing attributes in process `syz.3.10244'. [ 1356.106638][T14420] netlink: 1 bytes leftover after parsing attributes in process `syz.3.10244'. [ 1356.347659][T14434] lo speed is unknown, defaulting to 1000 [ 1356.899204][T14434] lo speed is unknown, defaulting to 1000 [ 1357.015099][T14454] netlink: 'syz.1.10252': attribute type 1 has an invalid length. [ 1357.976677][T14476] lo speed is unknown, defaulting to 1000 [ 1358.343020][T14496] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 1358.364985][T14496] bridge4: entered allmulticast mode [ 1358.457904][T14476] lo speed is unknown, defaulting to 1000 [ 1359.105586][T14528] "syz.1.10276" (14528) uses obsolete ecb(arc4) skcipher [ 1359.750909][T14556] lo speed is unknown, defaulting to 1000 [ 1359.799181][T14562] tipc: Started in network mode [ 1359.823493][T14562] tipc: Node identity 821db018d077, cluster identity 4711 [ 1359.831516][T14562] tipc: Enabled bearer , priority 0 [ 1359.842183][T14562] syzkaller0: entered promiscuous mode [ 1359.848935][T14562] syzkaller0: entered allmulticast mode [ 1360.023292][T14556] lo speed is unknown, defaulting to 1000 [ 1360.179834][T14577] mac80211_hwsim hwsim136 syzkaller0: entered promiscuous mode [ 1360.189304][T14577] mac80211_hwsim hwsim136 syzkaller0: entered allmulticast mode [ 1360.212731][T14555] tipc: Resetting bearer [ 1360.268937][T14555] tipc: Disabling bearer [ 1360.323040][T14583] bridge_slave_0: left allmulticast mode [ 1360.329665][T14583] bridge_slave_0: left promiscuous mode [ 1360.335817][T14583] bridge0: port 1(bridge_slave_0) entered disabled state [ 1360.347441][T14583] bridge_slave_1: left allmulticast mode [ 1360.353164][T14583] bridge_slave_1: left promiscuous mode [ 1360.360055][T14583] bridge0: port 2(bridge_slave_1) entered disabled state [ 1360.371942][T14583] bond0: (slave bond_slave_0): Releasing backup interface [ 1360.397380][T14583] bond0: (slave bond_slave_1): Releasing backup interface [ 1360.407887][T14583] team0: Port device team_slave_0 removed [ 1360.421168][T14583] team0: Port device team_slave_1 removed [ 1360.427845][T14583] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1360.436323][T14583] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1360.539745][T14588] netlink: 'syz.3.10287': attribute type 6 has an invalid length. [ 1360.588912][T14598] : renamed from bond_slave_0 (while UP) [ 1360.957770][T14592] lo speed is unknown, defaulting to 1000 [ 1360.966869][T14601] __nla_validate_parse: 7 callbacks suppressed [ 1360.966889][T14601] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10291'. [ 1361.532822][T14592] lo speed is unknown, defaulting to 1000 [ 1361.580236][ T1298] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1361.596298][ T1298] lec:lec_start_xmit: lec0:No lecd attached [ 1361.619917][T14616] netlink: 36 bytes leftover after parsing attributes in process `syz.1.10294'. [ 1361.956003][T14635] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10297'. [ 1362.195988][T14640] openvswitch: netlink: IP tunnel dst address not specified [ 1362.197601][T14638] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10298'. [ 1362.232276][T14638] tipc: Started in network mode [ 1362.238481][T14638] tipc: Node identity aaaaaaaaaa41, cluster identity 4711 [ 1362.250297][T14638] tipc: Enabled bearer , priority 10 [ 1362.411376][T14642] mac80211_hwsim hwsim136 syzkaller0: left promiscuous mode [ 1362.426591][T14642] mac80211_hwsim hwsim136 syzkaller0: left allmulticast mode [ 1362.585620][T14660] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10305'. [ 1362.619558][T14660] netlink: 7 bytes leftover after parsing attributes in process `syz.2.10305'. [ 1362.791531][T14671] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10308'. [ 1362.812428][T14671] macsec1: entered promiscuous mode [ 1362.819622][T14671] dummy0: entered promiscuous mode [ 1362.830276][T14671] macsec1: entered allmulticast mode [ 1362.839330][T14671] dummy0: entered allmulticast mode [ 1362.851088][T14671] dummy0: left allmulticast mode [ 1362.858833][T14671] dummy0: left promiscuous mode [ 1362.882308][T14675] sysfs: cannot create duplicate filename '/class/ieee80211/π,xb)% ]3DL̥!' [ 1362.893599][T14675] CPU: 1 UID: 0 PID: 14675 Comm: syz.2.10310 Not tainted syzkaller #0 PREEMPT(full) [ 1362.893629][T14675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1362.893641][T14675] Call Trace: [ 1362.893649][T14675] [ 1362.893658][T14675] dump_stack_lvl+0xe8/0x150 [ 1362.893706][T14675] sysfs_warn_dup+0x8e/0xa0 [ 1362.893734][T14675] sysfs_do_create_link_sd+0xc0/0x110 [ 1362.893762][T14675] device_add_class_symlinks+0x1cf/0x240 [ 1362.893789][T14675] device_add+0x475/0xb70 [ 1362.893813][T14675] wiphy_register+0x1d73/0x2d50 [ 1362.893858][T14675] ? __pfx_wiphy_register+0x10/0x10 [ 1362.893881][T14675] ? __pfx_netdev_run_todo+0x10/0x10 [ 1362.893909][T14675] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 1362.893946][T14675] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 1362.893984][T14675] ieee80211_register_hw+0x35f0/0x42c0 [ 1362.894016][T14675] ? ieee80211_register_hw+0x1421/0x42c0 [ 1362.894043][T14675] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1362.894085][T14675] ? __hrtimer_setup+0x181/0x200 [ 1362.894108][T14675] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1362.894135][T14675] mac80211_hwsim_new_radio+0x3334/0x5b60 [ 1362.894186][T14675] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1362.894204][T14675] ? kstrndup+0xbf/0x160 [ 1362.894238][T14675] hwsim_new_radio_nl+0xf6a/0x1c00 [ 1362.894281][T14675] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1362.894311][T14675] ? rcu_is_watching+0x15/0xb0 [ 1362.894344][T14675] ? trace_kmalloc+0x2a/0x110 [ 1362.894371][T14675] ? __nla_parse+0x40/0x60 [ 1362.894404][T14675] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1362.894436][T14675] genl_family_rcv_msg_doit+0x22a/0x330 [ 1362.894462][T14675] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1362.894513][T14675] ? bpf_lsm_capable+0x9/0x20 [ 1362.894537][T14675] ? security_capable+0x7e/0x2c0 [ 1362.894568][T14675] genl_rcv_msg+0x61c/0x7a0 [ 1362.894595][T14675] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1362.894613][T14675] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1362.894633][T14675] ? __lock_acquire+0x6b5/0x2cf0 [ 1362.894667][T14675] netlink_rcv_skb+0x232/0x4b0 [ 1362.894692][T14675] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1362.894713][T14675] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1362.894755][T14675] ? down_read+0x272/0x2e0 [ 1362.894774][T14675] ? genl_rcv+0xd/0x40 [ 1362.894793][T14675] genl_rcv+0x28/0x40 [ 1362.894810][T14675] netlink_unicast+0x80f/0x9b0 [ 1362.894841][T14675] ? __pfx_netlink_unicast+0x10/0x10 [ 1362.894865][T14675] ? netlink_sendmsg+0x650/0xb40 [ 1362.894887][T14675] ? skb_put+0x11b/0x210 [ 1362.894914][T14675] netlink_sendmsg+0x813/0xb40 [ 1362.894948][T14675] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1362.894976][T14675] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1362.895000][T14675] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1362.895025][T14675] ____sys_sendmsg+0x972/0x9f0 [ 1362.895061][T14675] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1362.895090][T14675] ? import_iovec+0x73/0xa0 [ 1362.895122][T14675] ___sys_sendmsg+0x2a5/0x360 [ 1362.895147][T14675] ? __pfx____sys_sendmsg+0x10/0x10 [ 1362.895173][T14675] ? futex_wake+0x4ac/0x580 [ 1362.895228][T14675] ? __fget_files+0x2a/0x420 [ 1362.895253][T14675] ? __fget_files+0x3a0/0x420 [ 1362.895287][T14675] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1362.895308][T14675] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1362.895334][T14675] ? rcu_is_watching+0x15/0xb0 [ 1362.895372][T14675] do_syscall_64+0x14d/0xf80 [ 1362.895388][T14675] ? trace_irq_disable+0x3b/0x150 [ 1362.895413][T14675] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1362.895432][T14675] ? clear_bhb_loop+0x40/0x90 [ 1362.895453][T14675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1362.895469][T14675] RIP: 0033:0x7f86ca39c799 [ 1362.895487][T14675] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1362.895502][T14675] RSP: 002b:00007f86cb21b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1362.895522][T14675] RAX: ffffffffffffffda RBX: 00007f86ca615fa0 RCX: 00007f86ca39c799 [ 1362.895535][T14675] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004 [ 1362.895547][T14675] RBP: 00007f86ca432c99 R08: 0000000000000000 R09: 0000000000000000 [ 1362.895558][T14675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1362.895568][T14675] R13: 00007f86ca616038 R14: 00007f86ca615fa0 R15: 00007ffdfa025e98 [ 1362.895594][T14675] [ 1363.323430][ T8304] tipc: Node number set to 15444650 [ 1363.501041][ T25] block nbd1: Possible stuck request ffff888059e60000: control (read@0,1024B). Runtime 210 seconds [ 1363.515284][ T25] block nbd1: Possible stuck request ffff888059e60200: control (read@1024,1024B). Runtime 210 seconds [ 1363.527224][ T25] block nbd1: Possible stuck request ffff888059e60400: control (read@2048,1024B). Runtime 210 seconds [ 1363.539455][ T25] block nbd1: Possible stuck request ffff888059e60600: control (read@3072,1024B). Runtime 210 seconds [ 1363.564515][ T29] audit: type=1800 audit(1773269161.400:27): pid=14692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.10311" name="memory.events" dev="tmpfs" ino=1387 res=0 errno=0 [ 1363.594078][T14693] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10313'. [ 1363.928037][T14726] IPv6: sit2: Disabled Multicast RS [ 1364.229460][T14745] netlink: 'syz.0.10329': attribute type 3 has an invalid length. [ 1364.402886][T14762] netlink: 'syz.1.10332': attribute type 1 has an invalid length. [ 1364.863890][T14788] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10340'. [ 1364.894647][T14788] netlink: 'syz.3.10340': attribute type 15 has an invalid length. [ 1364.964547][T14794] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10339'. [ 1365.189739][T14803] lo speed is unknown, defaulting to 1000 [ 1365.218473][T14805] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1365.684715][T14823] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1365.707790][T14828] lo speed is unknown, defaulting to 1000 [ 1365.726870][T14803] lo speed is unknown, defaulting to 1000 [ 1366.073800][T14859] __nla_validate_parse: 2 callbacks suppressed [ 1366.073832][T14859] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10356'. [ 1366.256249][T14831] lo speed is unknown, defaulting to 1000 [ 1366.257674][T14828] lo speed is unknown, defaulting to 1000 [ 1366.599856][T14875] netlink: 'syz.2.10360': attribute type 10 has an invalid length. [ 1366.614176][T14875] netlink: 2 bytes leftover after parsing attributes in process `syz.2.10360'. [ 1366.697268][ T25] block nbd4: Possible stuck request ffff888026c60000: control (read@0,1024B). Runtime 30 seconds [ 1366.697310][T14875] bond0: entered promiscuous mode [ 1366.708900][ T25] block nbd4: Possible stuck request ffff888026c60200: control (read@1024,1024B). Runtime 30 seconds [ 1366.724270][T14875] : entered promiscuous mode [ 1366.724478][T14875] bond_slave_1: entered promiscuous mode [ 1366.729307][ T25] block nbd4: Possible stuck request ffff888026c60400: control (read@2048,1024B). Runtime 30 seconds [ 1366.746445][ T25] block nbd4: Possible stuck request ffff888026c60600: control (read@3072,1024B). Runtime 30 seconds [ 1366.768374][T14875] bridge0: port 3(bond0) entered blocking state [ 1366.774944][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5180 ms [ 1366.774975][ C1] lec:lec_tx_timeout: lec0 [ 1366.788615][T14875] bridge0: port 3(bond0) entered disabled state [ 1366.795410][T14875] bond0: entered allmulticast mode [ 1366.800797][T14875] : entered allmulticast mode [ 1366.805910][T14875] bond_slave_1: entered allmulticast mode [ 1366.815467][T14875] bridge0: port 3(bond0) entered blocking state [ 1366.821871][T14875] bridge0: port 3(bond0) entered forwarding state [ 1366.833559][T14837] lo speed is unknown, defaulting to 1000 [ 1366.848240][T14877] netlink: 68 bytes leftover after parsing attributes in process `syz.4.10361'. [ 1366.994244][T14884] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10363'. [ 1366.995387][T14882] netlink: 72 bytes leftover after parsing attributes in process `syz.0.10362'. [ 1367.034538][T14882] netlink: 3 bytes leftover after parsing attributes in process `syz.0.10362'. [ 1367.064871][T14889] netlink: 72 bytes leftover after parsing attributes in process `syz.0.10362'. [ 1367.076115][T14889] netlink: 3 bytes leftover after parsing attributes in process `syz.0.10362'. [ 1367.144545][T14831] lo speed is unknown, defaulting to 1000 [ 1367.199180][T14837] lo speed is unknown, defaulting to 1000 [ 1367.223033][T14897] netlink: 'syz.4.10366': attribute type 1 has an invalid length. [ 1367.245093][T14897] netlink: 96 bytes leftover after parsing attributes in process `syz.4.10366'. [ 1367.260279][T14898] openvswitch: netlink: IP tunnel dst address not specified [ 1367.275515][T14897] netlink: 1 bytes leftover after parsing attributes in process `syz.4.10366'. [ 1367.311567][T14897] netlink: 'syz.4.10366': attribute type 1 has an invalid length. [ 1367.340071][T14897] netlink: 'syz.4.10366': attribute type 8 has an invalid length. [ 1367.598064][T14912] vlan2: entered promiscuous mode [ 1367.603146][T14912] gretap0: entered promiscuous mode [ 1368.202514][T14946] netlink: 'syz.1.10381': attribute type 2 has an invalid length. [ 1368.253109][T14951] netlink: 'syz.1.10381': attribute type 2 has an invalid length. [ 1368.579450][T14960] netlink: 'syz.1.10387': attribute type 1 has an invalid length. [ 1368.620741][ T7974] IPVS: starting estimator thread 0... [ 1368.720702][T14969] netlink: 'syz.3.10391': attribute type 13 has an invalid length. [ 1368.728838][T14963] IPVS: using max 31 ests per chain, 74400 per kthread [ 1368.866252][T14969] netlink: 'syz.3.10391': attribute type 23 has an invalid length. [ 1369.138247][T14996] netlink: 'syz.4.10399': attribute type 4 has an invalid length. [ 1371.240505][T15026] syzkaller0: entered promiscuous mode [ 1371.246700][T15026] syzkaller0: entered allmulticast mode [ 1371.261392][T15026] __nla_validate_parse: 12 callbacks suppressed [ 1371.261406][T15026] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10406'. [ 1371.277797][T15026] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10406'. [ 1372.065148][T14993] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1372.077042][T14997] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10398'. [ 1372.307127][T15050] netlink: 'syz.2.10413': attribute type 28 has an invalid length. [ 1372.336725][T15050] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10413'. [ 1372.533147][T15062] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10418'. [ 1372.749182][T15074] netlink: 'syz.4.10420': attribute type 1 has an invalid length. [ 1372.816973][T15074] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1372.843185][T15075] vlan2: entered promiscuous mode [ 1372.874270][T15075] geneve1: entered promiscuous mode [ 1372.895616][T15075] vlan2: entered allmulticast mode [ 1372.900785][T15075] geneve1: entered allmulticast mode [ 1372.950079][T15073] bond4: (slave veth7): Enslaving as an active interface with a down link [ 1372.995944][T15074] bond4: (slave dummy0): making interface the new active one [ 1373.006643][T15074] dummy0: entered promiscuous mode [ 1373.012172][T15074] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 1373.041504][T15052] tipc: Enabling of bearer rejected, failed to enable media [ 1373.286538][T15099] netlink: 'syz.3.10425': attribute type 12 has an invalid length. [ 1373.333569][T15099] netlink: 'syz.3.10425': attribute type 29 has an invalid length. [ 1373.367153][T15099] netlink: 'syz.3.10425': attribute type 1 has an invalid length. [ 1373.377724][T15099] netlink: 104 bytes leftover after parsing attributes in process `syz.3.10425'. [ 1373.387970][T15099] bridge0: port 1(bridge_slave_0) entered disabled state [ 1373.405191][ T1437] lec:lec_start_xmit: lec0:No lecd attached [ 1373.415430][T15104] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10426'. [ 1373.476393][T15104] ip6gretap0 (unregistering): left promiscuous mode [ 1373.503238][T15106] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10428'. [ 1373.530641][T15107] netlink: 'syz.1.10429': attribute type 12 has an invalid length. [ 1373.620490][T15115] lo speed is unknown, defaulting to 1000 [ 1373.914452][T15129] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 1374.190562][T15115] lo speed is unknown, defaulting to 1000 [ 1374.368031][T15162] vlan1: entered allmulticast mode [ 1374.397173][T15162] netlink: 14 bytes leftover after parsing attributes in process `syz.2.10440'. [ 1374.485977][T15162] bridge0: port 3(bond0) entered disabled state [ 1374.507429][T15162] bridge0: port 3(bond0) entered disabled state [ 1374.552546][T15162] bond0 (unregistering): (slave 30): Releasing backup interface [ 1374.587169][T15162] : left promiscuous mode [ 1374.598314][T15162] : left allmulticast mode [ 1374.610542][T15162] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1374.641599][T15162] bond_slave_1: left promiscuous mode [ 1374.654415][T15162] bond_slave_1: left allmulticast mode [ 1374.662096][T15162] bond0 (unregistering): Released all slaves [ 1375.131504][T15188] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10446'. [ 1377.033264][T15145] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1377.136078][T15198] __nla_validate_parse: 2 callbacks suppressed [ 1377.136097][T15198] netlink: 104 bytes leftover after parsing attributes in process `syz.1.10449'. [ 1377.143794][T15191] netlink: 'syz.4.10447': attribute type 1 has an invalid length. [ 1377.170108][T15191] netlink: 228 bytes leftover after parsing attributes in process `syz.4.10447'. [ 1377.234969][T15200] lo speed is unknown, defaulting to 1000 [ 1377.297159][T15208] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10451'. [ 1377.634705][T15200] lo speed is unknown, defaulting to 1000 [ 1378.124726][T15240] netlink: 1363 bytes leftover after parsing attributes in process `syz.0.10461'. [ 1378.161016][T15244] netlink: 'syz.1.10462': attribute type 2 has an invalid length. [ 1378.191007][T15244] : entered promiscuous mode [ 1378.308204][T15252] delete_channel: no stack [ 1378.434708][T15256] syzkaller1: entered promiscuous mode [ 1378.445218][T15256] syzkaller1: entered allmulticast mode [ 1378.527224][T15244] lo speed is unknown, defaulting to 1000 [ 1378.773446][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5370 ms [ 1378.781535][ C1] lec:lec_tx_timeout: lec0 [ 1379.008342][T15274] netlink: 'syz.2.10472': attribute type 1 has an invalid length. [ 1379.017463][T15244] lo speed is unknown, defaulting to 1000 [ 1379.019152][T15266] lo speed is unknown, defaulting to 1000 [ 1379.067763][T15274] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 1379.344873][T15266] lo speed is unknown, defaulting to 1000 [ 1380.127048][T15311] IPVS: set_ctl: invalid protocol: 103 100.1.1.1:20000 [ 1380.181051][T15301] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1380.463795][T15329] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10485'. [ 1380.534192][T15334] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10486'. [ 1381.030046][T15365] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10494'. [ 1381.119595][T15366] pim6reg1: entered promiscuous mode [ 1381.153026][T15366] pim6reg1: entered allmulticast mode [ 1381.312851][T15381] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10498'. [ 1381.369938][T15382] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10498'. [ 1381.385255][T15381] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10498'. [ 1381.761423][T15410] vlan1: entered promiscuous mode [ 1381.775750][T15410] bridge0: entered promiscuous mode [ 1382.182336][T15426] __nla_validate_parse: 4 callbacks suppressed [ 1382.182359][T15426] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10509'. [ 1382.335405][T15436] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10512'. [ 1382.894005][T15471] delete_channel: no stack [ 1382.904603][T15466] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10521'. [ 1382.914884][T15468] delete_channel: no stack [ 1383.782919][T15523] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1384.088646][T15542] lo speed is unknown, defaulting to 1000 [ 1384.274276][T25860] dummy0: left promiscuous mode [ 1384.542536][T15542] lo speed is unknown, defaulting to 1000 [ 1384.931107][T15574] netlink: 32 bytes leftover after parsing attributes in process `syz.4.10551'. [ 1384.941552][T15574] bond6: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1384.997222][T15574] bond6: (slave lo): Enslaving as an active interface with an up link [ 1385.016575][T15574] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1385.143577][T15577] netlink: 48 bytes leftover after parsing attributes in process `syz.4.10551'. [ 1385.315498][T15581] lo speed is unknown, defaulting to 1000 [ 1385.696146][T15595] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10555'. [ 1385.707320][T15581] lo speed is unknown, defaulting to 1000 [ 1385.930526][T15613] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10560'. [ 1386.170786][T15639] netlink: 'syz.3.10568': attribute type 4 has an invalid length. [ 1386.196799][T15639] netlink: 17 bytes leftover after parsing attributes in process `syz.3.10568'. [ 1386.291758][T15640] lo speed is unknown, defaulting to 1000 [ 1386.711596][T15640] lo speed is unknown, defaulting to 1000 [ 1386.848762][T15661] veth1: entered promiscuous mode [ 1386.854302][T15661] veth1: entered allmulticast mode [ 1386.966843][T15676] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10578'. [ 1387.071024][T15684] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1387.211903][T15687] IPVS: Unknown mcast interface: team_slave_0 [ 1387.219732][T15687] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10581'. [ 1387.507502][T15697] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10586'. [ 1387.517396][T15697] openvswitch: netlink: Unknown nsh attribute 0 [ 1387.641267][T15706] veth0_to_team: entered promiscuous mode [ 1387.648583][T15706] veth0_to_team: entered allmulticast mode [ 1387.836862][T15706] Set syz1 is full, maxelem 6117 reached [ 1388.008306][T15721] x_tables: duplicate underflow at hook 2 [ 1388.038152][T15722] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10594'. [ 1388.530414][T15752] netlink: 72 bytes leftover after parsing attributes in process `syz.0.10604'. [ 1388.542734][T15752] netlink: 72 bytes leftover after parsing attributes in process `syz.0.10604'. [ 1388.561967][T15754] netlink: 'syz.3.10605': attribute type 10 has an invalid length. [ 1388.573769][T15754] team0: Cannot enslave team device to itself [ 1388.773538][T15765] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10607'. [ 1388.798875][T15765] netlink: 'syz.2.10607': attribute type 1 has an invalid length. [ 1388.887197][T15772] netlink: 100 bytes leftover after parsing attributes in process `syz.2.10607'. [ 1388.912152][T15765] netlink: 36 bytes leftover after parsing attributes in process `syz.2.10607'. [ 1389.099876][T15788] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10614'. [ 1389.118681][T15788] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10614'. [ 1389.122704][T15784] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1389.150139][T15784] syzkaller0: entered promiscuous mode [ 1389.156531][T15784] syzkaller0: entered allmulticast mode [ 1389.241480][T15792] bond0 (unregistering): Released all slaves [ 1389.460713][T15803] lo speed is unknown, defaulting to 1000 [ 1389.534974][T15813] syzkaller1: entered promiscuous mode [ 1389.551643][T15813] syzkaller1: entered allmulticast mode [ 1389.563162][T15814] tipc: Enabled bearer , priority 0 [ 1389.583701][T15814] netlink: 'syz.1.10624': attribute type 1 has an invalid length. [ 1389.626591][T15814] mac80211_hwsim hwsim136 syzkaller0: entered promiscuous mode [ 1389.635936][T15814] mac80211_hwsim hwsim136 syzkaller0: entered allmulticast mode [ 1389.658200][T15814] tipc: Resetting bearer [ 1389.672238][T15814] tipc: Resetting bearer [ 1390.033630][T15803] lo speed is unknown, defaulting to 1000 [ 1390.351329][T15856] xt_CT: No such helper "syz0" [ 1390.430967][T15863] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1390.482224][T15863] IPVS: set_ctl: invalid protocol: 255 100.1.1.1:20002 [ 1390.489778][T15859] netem: change failed [ 1390.524245][T15863] IPVS: set_ctl: invalid protocol: 8 10.1.1.2:8178 [ 1390.716632][T15868] ip_vti0: entered promiscuous mode [ 1390.729465][T15868] ip_vti0: entered allmulticast mode [ 1391.039623][T15899] vlan0: entered promiscuous mode [ 1391.583186][T15933] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1391.595444][T15933] netlink: 'syz.3.10656': attribute type 10 has an invalid length. [ 1391.638342][T15933] bridge0: port 3(netdevsim0) entered blocking state [ 1391.664584][T15933] bridge0: port 3(netdevsim0) entered disabled state [ 1391.677705][T15933] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 1391.694572][T15933] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1391.702747][T15933] bridge0: port 3(netdevsim0) entered blocking state [ 1391.709604][T15933] bridge0: port 3(netdevsim0) entered forwarding state [ 1391.892288][T15942] tipc: Resetting bearer [ 1391.910437][T15942] tipc: Resetting bearer [ 1391.919395][T15942] tipc: Resetting bearer [ 1392.036277][T15951] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1392.282598][T15971] __nla_validate_parse: 18 callbacks suppressed [ 1392.282619][T15971] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10666'. [ 1392.284723][T15972] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10667'. [ 1392.312760][T15972] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10667'. [ 1392.329142][T15971] xfrm1: entered promiscuous mode [ 1392.352307][T15971] xfrm1: entered allmulticast mode [ 1392.359114][T15971] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10666'. [ 1392.404640][T15977] syzkaller1: entered promiscuous mode [ 1392.410609][T15977] syzkaller1: entered allmulticast mode [ 1392.426984][T15977] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10669'. [ 1392.620330][T15992] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10674'. [ 1392.689462][T15998] netlink: 112 bytes leftover after parsing attributes in process `syz.0.10676'. [ 1392.783694][T16004] netlink: 'syz.0.10676': attribute type 4 has an invalid length. [ 1392.816269][T15995] bond0: option mode: invalid value (254) [ 1392.829109][T16004] netlink: 224 bytes leftover after parsing attributes in process `syz.0.10676'. [ 1392.858180][T15995] bond0 (unregistering): Released all slaves [ 1393.093106][T16016] netlink: 44 bytes leftover after parsing attributes in process `syz.4.10679'. [ 1393.146967][T16017] netlink: 'syz.4.10679': attribute type 5 has an invalid length. [ 1393.165604][T16016] smc: net device veth1_to_team erased user defined pnetid SYZ0 [ 1393.249086][T16007] gretap3: entered promiscuous mode [ 1393.266220][T16007] batman_adv: batadv0: Adding interface: gretap3 [ 1393.272583][T16007] batman_adv: batadv0: The MTU of interface gretap3 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1393.307167][T16007] batman_adv: batadv0: Not using interface gretap3 (retrying later): interface not active [ 1393.576062][ T25] block nbd1: Possible stuck request ffff888059e60000: control (read@0,1024B). Runtime 240 seconds [ 1393.579641][T16038] netlink: 'syz.2.10684': attribute type 1 has an invalid length. [ 1393.587150][ T25] block nbd1: Possible stuck request ffff888059e60200: control (read@1024,1024B). Runtime 240 seconds [ 1393.606546][ T25] block nbd1: Possible stuck request ffff888059e60400: control (read@2048,1024B). Runtime 240 seconds [ 1393.617852][ T25] block nbd1: Possible stuck request ffff888059e60600: control (read@3072,1024B). Runtime 240 seconds [ 1393.767057][T16046] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10685'. [ 1393.786391][T16046] tipc: Enabling of bearer rejected, failed to enable media [ 1393.835099][T16047] 8021q: VLANs not supported on vxcan0 [ 1393.970114][T16052] syzkaller0: entered promiscuous mode [ 1393.976816][T16052] syzkaller0: entered allmulticast mode [ 1395.828887][ T5192] udevd[5192]: worker [5799] /devices/virtual/block/nbd1 timeout; kill it [ 1395.837840][ T5192] udevd[5192]: seq 49807 '/devices/virtual/block/nbd1' killed [ 1396.738106][T16097] netlink: 'syz.4.10696': attribute type 1 has an invalid length. [ 1396.778947][ T25] block nbd4: Possible stuck request ffff888026c60000: control (read@0,1024B). Runtime 60 seconds [ 1396.789660][ T25] block nbd4: Possible stuck request ffff888026c60200: control (read@1024,1024B). Runtime 60 seconds [ 1396.800850][ T25] block nbd4: Possible stuck request ffff888026c60400: control (read@2048,1024B). Runtime 60 seconds [ 1396.812080][ T25] block nbd4: Possible stuck request ffff888026c60600: control (read@3072,1024B). Runtime 60 seconds [ 1397.694528][T16098] bond8: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 1397.718825][T16099] bond8 (unregistering): (slave ip6gretap1): Releasing backup interface [ 1397.784886][T16106] __nla_validate_parse: 2 callbacks suppressed [ 1397.784907][T16106] netlink: 6 bytes leftover after parsing attributes in process `syz.1.10698'. [ 1397.792675][T16099] bond8 (unregistering): Released all slaves [ 1397.801047][T16106] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10698'. [ 1398.084836][T16114] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1398.186209][T16114] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1398.262017][T16114] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1398.282690][T16130] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10706'. [ 1398.317495][T16114] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1398.432237][ T1524] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1398.448610][ T4472] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1398.464342][ T4472] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1398.485953][ T4472] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1398.563154][T16140] netlink: 14 bytes leftover after parsing attributes in process `syz.2.10709'. [ 1398.610681][T16142] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10708'. [ 1398.839359][T16156] lo speed is unknown, defaulting to 1000 [ 1399.142865][T16181] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10719'. [ 1399.148306][T16174] bond0: option fail_over_mac: invalid value (127) [ 1399.200455][T16174] bond0 (unregistering): Released all slaves [ 1399.273142][T16184] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10719'. [ 1399.283039][T16156] lo speed is unknown, defaulting to 1000 [ 1399.494541][T16187] netlink: 'syz.1.10720': attribute type 3 has an invalid length. [ 1400.059731][T16202] can: request_module (can-proto-0) failed. [ 1400.069504][T16201] can: request_module (can-proto-0) failed. [ 1400.140374][T16209] netlink: 'syz.0.10725': attribute type 21 has an invalid length. [ 1400.148605][T16209] netlink: 128 bytes leftover after parsing attributes in process `syz.0.10725'. [ 1400.158619][T16209] netlink: 'syz.0.10725': attribute type 5 has an invalid length. [ 1400.166673][T16209] netlink: 3 bytes leftover after parsing attributes in process `syz.0.10725'. [ 1400.176520][T16209] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10725'. [ 1402.051615][T16172] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1402.432347][T16234] pim6reg: entered allmulticast mode [ 1402.448809][T16234] pim6reg: left allmulticast mode [ 1402.595381][T16250] netlink: 'syz.2.10739': attribute type 1 has an invalid length. [ 1402.674386][T16250] pimreg3: entered allmulticast mode [ 1402.720200][T16250] xfrm2: entered allmulticast mode [ 1402.796548][T16264] netlink: 'syz.4.10743': attribute type 21 has an invalid length. [ 1402.815346][T16269] __nla_validate_parse: 4 callbacks suppressed [ 1402.815365][T16269] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10744'. [ 1402.819557][T16264] netlink: 128 bytes leftover after parsing attributes in process `syz.4.10743'. [ 1402.848074][T16274] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10744'. [ 1402.886323][T16272] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10746'. [ 1402.910314][T16279] netlink: 108 bytes leftover after parsing attributes in process `syz.2.10747'. [ 1402.936934][T16264] netlink: 'syz.4.10743': attribute type 3 has an invalid length. [ 1402.954427][T16264] netlink: 3 bytes leftover after parsing attributes in process `syz.4.10743'. [ 1403.382309][T16307] netlink: 'syz.2.10752': attribute type 1 has an invalid length. [ 1403.400591][T16302] bridge_slave_0: left allmulticast mode [ 1403.438277][T16302] bridge_slave_0: left promiscuous mode [ 1403.445130][T16302] bridge0: port 1(bridge_slave_0) entered disabled state [ 1403.470149][T16302] bridge_slave_1: left allmulticast mode [ 1403.477272][T16302] bridge_slave_1: left promiscuous mode [ 1403.479566][T16312] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10753'. [ 1403.488894][T16302] bridge0: port 2(bridge_slave_1) entered disabled state [ 1403.509038][T16312] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10753'. [ 1403.525125][T16302] bond0: (slave bond_slave_0): Releasing backup interface [ 1403.539509][T16302] bond0: (slave bond_slave_1): Releasing backup interface [ 1403.589652][T16302] team0: Port device team_slave_1 removed [ 1403.598213][T16302] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1403.608989][T16302] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1403.622213][T16302] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1403.632131][T16302] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1403.648750][T16302] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1403.730149][T16307] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1403.793349][T16311] bond6: (slave veth9): Enslaving as an active interface with a down link [ 1403.819386][T16318] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1403.832260][T16318] bond6: (slave batadv1): making interface the new active one [ 1403.848424][T16318] batadv1: entered promiscuous mode [ 1403.860309][T16318] bond6: (slave batadv1): Enslaving as an active interface with an up link [ 1404.075558][T16338] netlink: 'syz.2.10759': attribute type 1 has an invalid length. [ 1404.117781][T16338] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10759'. [ 1404.262014][T16350] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10759'. [ 1404.421247][T16351] lo speed is unknown, defaulting to 1000 [ 1404.614583][ T6209] Bluetooth: hci1: command 0x0406 tx timeout [ 1404.743575][T16364] syzkaller0: entered promiscuous mode [ 1404.749172][T16364] syzkaller0: entered allmulticast mode [ 1404.774896][T16472] Bluetooth: hci2: command tx timeout [ 1404.797285][T16370] netlink: 'syz.4.10768': attribute type 2 has an invalid length. [ 1405.725792][T16351] lo speed is unknown, defaulting to 1000 [ 1407.178381][T16431] netlink: 'syz.0.10782': attribute type 1 has an invalid length. [ 1407.226057][T16431] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1407.254596][T16431] bond5: (slave geneve0): making interface the new active one [ 1407.265503][T16431] bond5: (slave geneve0): Enslaving as an active interface with an up link [ 1407.280615][T23715] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 1407.365971][T23715] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 1407.407720][T23715] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 1407.463468][T23715] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 1407.615709][T16456] [ 1407.618066][T16456] ====================================================== [ 1407.625081][T16456] WARNING: possible circular locking dependency detected [ 1407.632181][T16456] syzkaller #0 Not tainted [ 1407.636589][T16456] ------------------------------------------------------ [ 1407.643690][T16456] syz.3.10787/16456 is trying to acquire lock: [ 1407.649845][T16456] ffffffff8fd43a58 (nr_neigh_list_lock){+...}-{3:3}, at: nr_remove_neigh+0x25/0xe0 [ 1407.659366][T16456] [ 1407.659366][T16456] but task is already holding lock: [ 1407.666731][T16456] ffff888078cdf670 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0x1039/0x2630 [ 1407.676136][T16456] [ 1407.676136][T16456] which lock already depends on the new lock. [ 1407.676136][T16456] [ 1407.686528][T16456] [ 1407.686528][T16456] the existing dependency chain (in reverse order) is: [ 1407.695533][T16456] [ 1407.695533][T16456] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 1407.703641][T16456] _raw_spin_lock_bh+0x36/0x50 [ 1407.709015][T16456] nr_rt_device_down+0x153/0x860 [ 1407.714645][T16456] nr_device_event+0x137/0x150 [ 1407.719941][T16456] notifier_call_chain+0x1be/0x400 [ 1407.725835][T16456] __dev_notify_flags+0x16d/0x310 [ 1407.731417][T16456] netif_change_flags+0xe8/0x1a0 [ 1407.736880][T16456] dev_change_flags+0x130/0x260 [ 1407.742347][T16456] dev_ioctl+0x7b4/0x1150 [ 1407.747195][T16456] sock_do_ioctl+0x23e/0x320 [ 1407.752431][T16456] sock_ioctl+0x5c6/0x7f0 [ 1407.757275][T16456] __se_sys_ioctl+0xfc/0x170 [ 1407.762404][T16456] do_syscall_64+0x14d/0xf80 [ 1407.767503][T16456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1407.773910][T16456] [ 1407.773910][T16456] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 1407.781753][T16456] _raw_spin_lock_bh+0x36/0x50 [ 1407.787040][T16456] nr_rt_device_down+0xbe/0x860 [ 1407.792410][T16456] nr_device_event+0x137/0x150 [ 1407.797802][T16456] notifier_call_chain+0x1be/0x400 [ 1407.803433][T16456] netif_close_many+0x2ae/0x420 [ 1407.808866][T16456] netif_close+0x160/0x220 [ 1407.813799][T16456] dev_close+0x10a/0x220 [ 1407.818563][T16456] bpq_device_event+0x377/0x6a0 [ 1407.824025][T16456] notifier_call_chain+0x1be/0x400 [ 1407.829660][T16456] netif_close_many+0x2ae/0x420 [ 1407.835112][T16456] netif_close+0x160/0x220 [ 1407.840138][T16456] dev_close+0x10a/0x220 [ 1407.844905][T16456] bond_setup_by_slave+0x5f/0x3d0 [ 1407.852072][T16456] bond_enslave+0x847/0x3c10 [ 1407.857226][T16456] bond_do_ioctl+0x6ec/0x8d0 [ 1407.862332][T16456] dev_ifsioc+0x961/0x1280 [ 1407.867261][T16456] dev_ioctl+0x7b4/0x1150 [ 1407.872121][T16456] sock_do_ioctl+0x23e/0x320 [ 1407.877227][T16456] sock_ioctl+0x5c6/0x7f0 [ 1407.882105][T16456] __se_sys_ioctl+0xfc/0x170 [ 1407.887213][T16456] do_syscall_64+0x14d/0xf80 [ 1407.892316][T16456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1407.898722][T16456] [ 1407.898722][T16456] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 1407.906653][T16456] __lock_acquire+0x15a5/0x2cf0 [ 1407.912134][T16456] lock_acquire+0xf0/0x2e0 [ 1407.917065][T16456] _raw_spin_lock_bh+0x36/0x50 [ 1407.922351][T16456] nr_remove_neigh+0x25/0xe0 [ 1407.927455][T16456] nr_add_node+0x1e41/0x2630 [ 1407.932566][T16456] nr_rt_ioctl+0xe59/0xf90 [ 1407.937499][T16456] sock_do_ioctl+0x101/0x320 [ 1407.942624][T16456] sock_ioctl+0x5c6/0x7f0 [ 1407.947463][T16456] __se_sys_ioctl+0xfc/0x170 [ 1407.952572][T16456] do_syscall_64+0x14d/0xf80 [ 1407.957668][T16456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1407.964076][T16456] [ 1407.964076][T16456] other info that might help us debug this: [ 1407.964076][T16456] [ 1407.974295][T16456] Chain exists of: [ 1407.974295][T16456] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 1407.974295][T16456] [ 1407.988229][T16456] Possible unsafe locking scenario: [ 1407.988229][T16456] [ 1407.995759][T16456] CPU0 CPU1 [ 1408.001119][T16456] ---- ---- [ 1408.006474][T16456] lock(&nr_node->node_lock); [ 1408.011231][T16456] lock(nr_node_list_lock); [ 1408.018335][T16456] lock(&nr_node->node_lock); [ 1408.025607][T16456] lock(nr_neigh_list_lock); [ 1408.030280][T16456] [ 1408.030280][T16456] *** DEADLOCK *** [ 1408.030280][T16456] [ 1408.038407][T16456] 1 lock held by syz.3.10787/16456: [ 1408.043598][T16456] #0: ffff888078cdf670 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0x1039/0x2630 [ 1408.053572][T16456] [ 1408.053572][T16456] stack backtrace: [ 1408.059454][T16456] CPU: 1 UID: 0 PID: 16456 Comm: syz.3.10787 Not tainted syzkaller #0 PREEMPT(full) [ 1408.059472][T16456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1408.059481][T16456] Call Trace: [ 1408.059487][T16456] [ 1408.059494][T16456] dump_stack_lvl+0xe8/0x150 [ 1408.059517][T16456] print_circular_bug+0x2e1/0x300 [ 1408.059540][T16456] check_noncircular+0x12e/0x150 [ 1408.059562][T16456] __lock_acquire+0x15a5/0x2cf0 [ 1408.059588][T16456] lock_acquire+0xf0/0x2e0 [ 1408.059604][T16456] ? nr_remove_neigh+0x25/0xe0 [ 1408.059619][T16456] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1408.059634][T16456] ? nr_remove_neigh+0x25/0xe0 [ 1408.059646][T16456] _raw_spin_lock_bh+0x36/0x50 [ 1408.059665][T16456] ? nr_remove_neigh+0x25/0xe0 [ 1408.059677][T16456] nr_remove_neigh+0x25/0xe0 [ 1408.059698][T16456] nr_add_node+0x1e41/0x2630 [ 1408.059721][T16456] ? nr_call_to_digi+0x126/0x1b0 [ 1408.059741][T16456] nr_rt_ioctl+0xe59/0xf90 [ 1408.059764][T16456] ? kasan_quarantine_put+0xbb/0x1f0 [ 1408.059779][T16456] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 1408.059803][T16456] ? apparmor_capable+0x126/0x170 [ 1408.059898][T16456] ? capable+0x88/0xe0 [ 1408.059917][T16456] ? nr_ioctl+0x1b1/0x3b0 [ 1408.059934][T16456] sock_do_ioctl+0x101/0x320 [ 1408.059952][T16456] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1408.059967][T16456] ? do_futex+0x333/0x420 [ 1408.059989][T16456] sock_ioctl+0x5c6/0x7f0 [ 1408.060005][T16456] ? __pfx_sock_ioctl+0x10/0x10 [ 1408.060020][T16456] ? __fget_files+0x2a/0x420 [ 1408.060048][T16456] ? __fget_files+0x3a0/0x420 [ 1408.060066][T16456] ? __fget_files+0x2a/0x420 [ 1408.060086][T16456] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1408.060104][T16456] ? __pfx_sock_ioctl+0x10/0x10 [ 1408.060118][T16456] __se_sys_ioctl+0xfc/0x170 [ 1408.060135][T16456] do_syscall_64+0x14d/0xf80 [ 1408.060148][T16456] ? trace_irq_disable+0x3b/0x150 [ 1408.060168][T16456] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1408.060182][T16456] ? clear_bhb_loop+0x40/0x90 [ 1408.060198][T16456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1408.060212][T16456] RIP: 0033:0x7f7edc99c799 [ 1408.060226][T16456] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1408.060239][T16456] RSP: 002b:00007f7edd7bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1408.060256][T16456] RAX: ffffffffffffffda RBX: 00007f7edcc16090 RCX: 00007f7edc99c799 [ 1408.060266][T16456] RDX: 0000200000000280 RSI: 000000000000890b RDI: 0000000000000005 [ 1408.060276][T16456] RBP: 00007f7edca32c99 R08: 0000000000000000 R09: 0000000000000000 [ 1408.060285][T16456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1408.060293][T16456] R13: 00007f7edcc16128 R14: 00007f7edcc16090 R15: 00007fff2f8c5f18 [ 1408.060310][T16456] [ 1409.574418][ T5192] udevd[5192]: worker [8187] /devices/virtual/block/nbd4 is taking a long time [ 1415.673843][ T1512] batadv1: left promiscuous mode