last executing test programs: 5m5.823487471s ago: executing program 3 (id=7751): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'gretap0\x00', &(0x7f0000000180)={'erspan0\x00', 0x0, 0x20, 0x8000, 0xa, 0x400, {{0x9, 0x4, 0x1, 0x12, 0x24, 0x64, 0x0, 0x80, 0x4, 0x0, @rand_addr=0xf85, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0xf, 0x99, [@local, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x728b, '\x00', r0, 0xffffffffffffffff, 0x5, 0x5, 0x2}, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="34000000100039042cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="059800000020000014001280080001006772650008000280040012"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x439, 0x70bd2b, 0x25dfdbf8, {0x0, 0x0, 0x0, r3, 0xac6a3b6d1feaaf8b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @multicast1}]}}}]}, 0x38}}, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r5, 0x0, 0x700) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x4010, r6, 0x952de000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="184a2c3900000000000000000000000000000018120000daa4b475a9a24588ce5bb154ba20555f929c8b8aefcd56e2bca074ceefa9c8ef2152658e657731274838a925ba08d91672c1e80c2dc7d30211c3c0025106b06380c56128ae5901f1660e77427a483b8d54789c2b6dcc3388202af989b205b5585e9ae078d3f714aba6b014c0190a8545134fe28407f389e97361b93e5e8b12ad6c0e0884ea815fd33f8d0ff99ba9be549aceb4785ce0c3", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) 5m5.613399513s ago: executing program 3 (id=7755): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) (async) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210104, @local, {[@timestamp_addr={0x44, 0x14, 0xa, 0x2, 0x0, [{@remote}, {@loopback}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB='}d', @ANYRES32=r3, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20040801}, 0x4008000) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_BT_POWER(r4, 0x112, 0x9, &(0x7f0000000080)=0x1, 0x1) 5m5.445734712s ago: executing program 3 (id=7757): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000340)={r3, 0x80000001}, &(0x7f0000000380)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000003c0)={r4, 0x9}, &(0x7f0000000400)=0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r5) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000080)={r3, @in6={{0xa, 0x4e21, 0xff, @remote, 0xe32c}}}, &(0x7f0000000140)=0x84) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f00000001c0)={r3, @in={{0x2, 0x4e23, @rand_addr=0x64010101}}}, 0x84) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000080)=""/210, &(0x7f0000000180)=0xd2) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r6) sendmsg$NFC_CMD_VENDOR(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, r7, 0x501, 0x70bd2c, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004005}, 0x8000) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x2, 0x10, 0x0, 0x9, 0x13, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in6=@mcast2, @in=@multicast1, 0x22, 0x4, 0x4}, @sadb_x_nat_t_type={0x1, 0x14, 0xfa}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in6={0xa, 0x4e21, 0x4, @private2, 0x7fffffff}, @in={0x2, 0x4e24, @private=0xa010101}}, @sadb_x_sec_ctx={0x4, 0x18, 0x5, 0x6, 0x12, "897b6e4240648293d6931f2709fe31c1c59e"}]}, 0x98}}, 0x0) r10 = syz_genetlink_get_family_id$net_dm(&(0x7f0000004b40), r8) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r12, 0x301, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000090}, 0x20000080) sendmsg$NET_DM_CMD_START(r8, &(0x7f0000004c00)={0x0, 0x0, &(0x7f0000004bc0)={&(0x7f0000004b80)={0x14, r10, 0x1, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8000) 4m44.199834607s ago: executing program 3 (id=7761): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x98}, 0x1, 0x0, 0x0, 0x24040854}, 0x40000) 4m44.197218847s ago: executing program 3 (id=7763): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x25, 0x0, 0x0, 0x8003f}, {0x6, 0x2, 0x9, 0xfdfffff7}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x25, 0x0, 0x0, 0x8003f}, {0x6, 0x2, 0x9, 0xfdfffff7}]}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b80000001300e9992dbd7000fe83bbe638e5b0bd79289fe8ea4600000000fc000000000000000000000000000000ac1e00010000000000000000000000004e22000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000000000000000000000000000000900000000000000000000000000000080000000000000000000000000000000feffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000"], 0xb8}}, 0x4000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) getsockopt$sock_buf(r1, 0x1, 0x1a, &(0x7f0000000480)=""/96, &(0x7f0000000400)=0x60) (async) getsockopt$sock_buf(r1, 0x1, 0x1a, &(0x7f0000000480)=""/96, &(0x7f0000000400)=0x60) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) ioctl(r0, 0xfff, &(0x7f0000000380)="2252e94a93de342bb7569e57212a3e7e74137069d2205c842337bfe02677733bb0739b2c87911810e76b1abeda2df98c784be1c87c58a1107f85bf9fb0a0e263d4c6025b16fb8a0d5d92b879051917351c1114614f49d87df2d84a4d0c4aeed3b2a3fada59a5706bd0f735ceaa6ac853662df3249132e1a0e3979c") 4m44.194171597s ago: executing program 3 (id=7767): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000980)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000080), 0x8, 0x10, &(0x7f0000000000)={0x3}, 0x10}, 0x94) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448cb, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76389e147583ddd0569ba56a5cfd", 0x0, 0x1fc2, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002602000000dbdf2501000000000000000c410000000c00147377f5e04a7d16f92f"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) 4m44.193880607s ago: executing program 32 (id=7767): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000980)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000080), 0x8, 0x10, &(0x7f0000000000)={0x3}, 0x10}, 0x94) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448cb, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76389e147583ddd0569ba56a5cfd", 0x0, 0x1fc2, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002602000000dbdf2501000000000000000c410000000c00147377f5e04a7d16f92f"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) 2.294048566s ago: executing program 4 (id=11715): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x280, 0x0, 0x8, 0xfa04, 0x0, 0x6c02, 0x1e8, 0x194, 0x194, 0x1e8, 0x194, 0x3, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x32}, 0x0, 0x0, 'veth0_to_hsr\x00', 'dvmrp1\x00', {}, {}, 0x6}, 0x0, 0x70, 0xd0, 0x0, {0x0, 0x74020000}}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@remote, [0xff, 0x0, 0xff000000], 0x4e23, 0x4e24, 0x4e20, 0x4e24, 0x800, 0x5, 0x5, 0x6, 0x10}}}, {{@ip={@multicast2, @dev={0xac, 0x14, 0x14, 0x10}, 0xffffffff, 0x0, '\x00', 'vlan0\x00', {}, {}, 0x92, 0x1, 0x44}, 0x0, 0xb0, 0x118, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x4, 0x5, 0x3, 0x1, 0x2, 0x4], 0x4}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1b, 0x5, 0x1, 0x9, 'syz0\x00', 'syz1\x00', {0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100249a000000000000010000000800010023000000140004800500030001000000050003f97f0000000800020002000000"], 0x38}}, 0x0) pipe(&(0x7f0000000340)) r3 = socket$kcm(0x10, 0x7, 0x0) sendmsg$inet(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000500010004000300eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 2.123087542s ago: executing program 4 (id=11720): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001000)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001000)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x800448d3, &(0x7f00000001c0)="9f9553") sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001540)=@newtfilter={0x3d78, 0x2c, 0x605, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0x0, 0x10}, {0x5, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x3d4c, 0x2, [@TCA_FW_ACT={0x3d48, 0x4, [@m_sample={0xa8, 0x9, 0x0, 0x0, {{0xb}, {0x4}, {0x7b, 0x6, "d9bf1b911d6e634a03b851df05b34dd5c88b979a5067425728202ceb8bc1c0a17ca2e0adeae2c75cae4393dd2d46f688b97f054d0325484dddadd158299bbcdc0192f48567b0883154e0447f200e7f31d7f3fce5d6198907c78d40a961980212538ba920b171d56b492816aaabdd6a5868c95d724409a5"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_connmark={0x160, 0x0, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xa, 0x6, 0xffffffffffffffff, 0xa6, 0xbef}, 0x8bc}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffb01, 0x3, 0x20000000, 0xe, 0xb4}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x6, 0x1, 0xf, 0x3}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2f, 0xd5, 0x1, 0x0, 0x8}, 0x101}}]}, {0xbf, 0x6, "a47f059bc2876d7c57606fcda3ec9e084a274c17b02da2c06d618c84e4826fc0c5e607bd4ed5fe376fd76d458d1151245c94537e2cac0ca4f509a50a12a416df90374b8c23b00c0840052b2a9eb9de91420e56cb9eacf69937093820708e1185d1ecd30b9b5fa981b2dfeee6ed24d5498f44d55f51de0b598d9ca74ff0cfd5cd4de989b37cf6128ac82951401d7267bc82287252bd7f6efbfea633d338ddf406d3db9e00b3b43423426f316146dc9b35a243c00338a6d4fc725221"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_pedit={0x3a14, 0xc, 0x0, 0x0, {{0xa}, {0x39dc, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe98, 0x2, {{{0x3, 0x400, 0xffffffffffffffff, 0x8, 0x9}, 0x3, 0x3, [{0x3, 0x3, 0x5, 0x5, 0x3833, 0x1ff}, {0x800, 0x2, 0x6, 0x1, 0xdc, 0x7fff}, {0x20000000, 0x7, 0x0, 0x9, 0xffffffff, 0x7ff}, {0x3, 0x0, 0x8, 0x0, 0x11e}, {0x8, 0x7, 0x8, 0xf, 0x7b8, 0x925}]}, [{0x0, 0x7f, 0x40, 0x4, 0x4, 0x2}, {0x1, 0x3, 0x8, 0x5, 0xd4, 0x10}, {0x6, 0x1, 0x1, 0x2263, 0x429, 0x1}, {0x6, 0x511c, 0x1, 0x41e3000, 0x3, 0x7fffffff}, {0x5, 0x81, 0x18, 0xffff, 0x9, 0x1}, {0x4, 0x9, 0xc6, 0x8, 0x8, 0x8}, {0x65, 0x1, 0x9, 0x10, 0x6, 0x9}, {0x3c8b, 0x6, 0x0, 0x10000, 0x8000, 0x8}, {0xfffffffe, 0x8e9e, 0x8, 0x33, 0xd, 0x9}, {0x4, 0x2, 0xae, 0x0, 0x80, 0x3}, {0x36, 0x6, 0x58, 0x3, 0x3, 0x1ff}, {0x7b6, 0x7, 0x3, 0x0, 0x4}, {0x40, 0xffffffff, 0x0, 0x3, 0xb, 0x80000000}, {0xc0000, 0x9, 0x7fff, 0x1, 0x6, 0xd}, {0x6, 0x7ff, 0x10001, 0x6, 0x2, 0x3}, {0x4, 0xbf, 0x8, 0x7, 0xfffff6ae, 0xcb4}, {0x7, 0x9, 0x8, 0x5, 0x10, 0x6}, {0xffff, 0x3, 0x2, 0x0, 0x6, 0x7f}, {0x3, 0x2, 0x5, 0x5a794a9e, 0xef, 0x3}, {0x101, 0x8, 0x5506, 0xa6, 0x5, 0xc}, {0x4, 0x8001, 0x7, 0x0, 0x2, 0x9}, {0x8, 0xc, 0x80, 0x7, 0x6, 0x2}, {0x6fe, 0x6, 0x1, 0x0, 0x401, 0x3}, {0x4, 0xc, 0x6f6, 0x81, 0x38b21d70, 0x1}, {0x6, 0x3, 0x0, 0x7, 0x9, 0x75}, {0x79, 0xc, 0xffff, 0x4, 0xf, 0x6}, {0x6, 0x2, 0xfffffffc, 0xfffffff5, 0xd396, 0x8c}, {0x8, 0x8, 0x9, 0x5, 0xf54, 0x3ff}, {0x32c0, 0x400, 0x68, 0x87e, 0x4, 0x18000}, {0xb2, 0x1, 0x4, 0xffffffff, 0xfffff2ee, 0x1000}, {0x4, 0x86b8, 0x3, 0x63982c92, 0x5, 0xffffffff}, {0xc9b9, 0x7, 0x8, 0x2, 0x9, 0x80}, {0xfffffff9, 0x4, 0x3, 0x5, 0x81, 0xfffffffc}, {0xffff, 0x7, 0x5, 0x9, 0x6, 0x26}, {0x7, 0x7fff, 0x1, 0x6, 0x7145, 0x5}, {0x10000, 0x1, 0x8001, 0x2, 0x10, 0xffff8001}, {0x7, 0x0, 0x8, 0x9, 0x3, 0x2}, {0x6, 0x8a, 0xfffffff2, 0x0, 0x6, 0xda0000}, {0x0, 0x3, 0x7, 0x5, 0x80000000, 0x2}, {0x6, 0xa, 0xfffffffc, 0x6509aa98, 0x6, 0x7}, {0xfffffff7, 0x4, 0x40, 0x9, 0x0, 0x3}, {0x8, 0x6, 0x9, 0x0, 0x7, 0x3}, {0x200, 0xf, 0x6de2, 0x3, 0x0, 0x7}, {0x3, 0x9, 0x3, 0x5, 0x8, 0x96}, {0x2, 0x2, 0x2efca1e6, 0x7, 0x101, 0x5}, {0x0, 0x8, 0x67d, 0x9d0, 0x4, 0x20afda19}, {0x7, 0x0, 0x5, 0x200, 0x0, 0x7}, {0x1d9f632f, 0xffffff48, 0x0, 0x7, 0x8, 0x1}, {0x8, 0x80000001, 0x4, 0x6, 0x8000, 0x75d9}, {0x4, 0x9, 0x1, 0x4, 0xfd5, 0x3}, {0xfffffffd, 0xffffffff, 0xc, 0x22b, 0x4, 0x40}, {0x1, 0x3, 0x8, 0x80, 0xfffffff8, 0x5}, {0x7, 0x306, 0x0, 0x152670e3, 0x7, 0x478e}, {0x200, 0x3, 0x6, 0x6, 0x5}, {0x7, 0x7ff, 0xc40, 0x9, 0x0, 0x400}, {0xff, 0x8, 0x853, 0x1, 0x3c0c, 0x1}, {0x800, 0x98c, 0x9f, 0x329, 0x18000}, {0x0, 0x4, 0xa46, 0x80000001, 0x388c, 0x4}, {0xfffffffc, 0x3, 0x7, 0x61b, 0x8, 0x800}, {0x9, 0xb, 0x800, 0x80, 0x2b3a36bb, 0xfffffff7}, {0x0, 0x4, 0x9, 0xf, 0xc41, 0x3}, {0x2, 0x4ec, 0x81, 0x2f34, 0x0, 0x9c}, {0x10000, 0x7, 0x1000, 0x2, 0x2a680000, 0x7}, {0x7, 0x1b39, 0x10, 0xfffff801, 0x8, 0xffffffff}, {0x0, 0x3, 0x0, 0x2, 0xffff, 0x68}, {0x66b3, 0x6, 0x5, 0x103a, 0x9, 0xcea}, {0xd8, 0x7, 0x5, 0xe, 0x5, 0x9}, {0x1ff, 0x7, 0xf, 0x0, 0x2, 0x7f}, {0xc28, 0x7fff, 0x8, 0x2, 0xfffffffc, 0xaffb}, {0x5, 0x27, 0x4, 0xc56, 0x1bf4}, {0x8, 0x0, 0xd4, 0x10, 0x5, 0x8c04}, {0x0, 0x40, 0x177e, 0x9, 0x7ff}, {0x4, 0x7, 0x401, 0x9, 0x6b1d, 0x6}, {0x2, 0x3, 0x0, 0x3, 0x3ff, 0x2}, {0x1ff, 0x9, 0x26b, 0x3, 0x3ff, 0x5}, {0x6, 0x7, 0xffff, 0x9, 0x7ff, 0xfffffff7}, {0x8, 0xe, 0x1000, 0x0, 0xdcb, 0x6}, {0x2, 0x7, 0x4, 0x93, 0x3, 0x867}, {0x33e, 0x0, 0x7ff, 0x80000001, 0x1, 0x6}, {0x23c, 0x4, 0xffffff0e, 0x7fffffff, 0x200, 0x2}, {0x0, 0xff, 0x98, 0x2, 0x7, 0x8}, {0x40, 0x1000, 0x1, 0x1, 0x3, 0x6}, {0x0, 0x6, 0xffffffff, 0x3, 0x3, 0xfffffff8}, {0xfffffeff, 0x8, 0x8, 0x0, 0xd3, 0x7}, {0x5, 0x4, 0x755b, 0x64f, 0xaf, 0x9}, {0x48d, 0x3ff, 0x9, 0x78, 0xffff, 0x1}, {0x9, 0x3, 0x3, 0x1ff, 0x6, 0x1}, {0xb6d, 0x0, 0x27893d2, 0xfffffffd, 0x3, 0x4}, {0x8000, 0x7, 0x6, 0x5, 0x101, 0x9}, {0x2, 0x7, 0x8001, 0x7fff, 0x9, 0x4}, {0x4, 0x3, 0x1ff, 0xfff, 0x9, 0x2}, {0x5, 0x5, 0x9a, 0x80, 0x9, 0x2}, {0x6, 0x0, 0x3ff, 0x3ff, 0xd}, {0x2, 0x4, 0xfff, 0x7, 0x5, 0x3}, {0xa7, 0x2, 0x4, 0x9, 0x3b, 0x401}, {0x8, 0x2, 0xfffffffe, 0xa6, 0xffff, 0x1}, {0xd, 0xe, 0x0, 0x3, 0x7fff, 0x9}, {0xef59, 0x4, 0x200, 0x0, 0x401, 0x10001}, {0xce, 0x8, 0x5, 0x4, 0x456, 0x2}, {0x354, 0x8000, 0x4, 0x5, 0x46}, {0x7, 0x5, 0x1, 0xffffffff, 0xb, 0x9}, {0x5, 0x0, 0x7, 0x8, 0x80000001, 0x401}, {0x55b7, 0xd, 0x8, 0x40f1, 0x0, 0x1}, {0x2, 0x0, 0x7, 0x3, 0x6, 0x10}, {0x101, 0x2, 0x6, 0x40, 0x1ff, 0x9}, {0x0, 0x7, 0x9, 0x3, 0x7, 0x9}, {0x5, 0x200, 0xfffffa90, 0xf, 0x10001, 0x7}, {0x0, 0x3f4, 0x0, 0xffffffff, 0x8001, 0xfff}, {0x79, 0x3, 0x8, 0xea, 0xa79, 0x9}, {0x2, 0x4, 0x4, 0x10001, 0x6, 0x444}, {0x400, 0x4, 0x0, 0x0, 0x7, 0x1}, {0x1, 0x26e, 0x5, 0x5, 0x1}, {0xdd, 0x1bc168ae, 0x0, 0x2, 0x6, 0x1}, {0x4a36cf50, 0x0, 0x401, 0x3ff, 0x7, 0x5}, {0x8001, 0xd100, 0x0, 0x0, 0x7, 0x6}, {0x4, 0x1, 0x3, 0x0, 0x2f, 0x616cdeeb}, {0x7, 0x9, 0xbd, 0x7102, 0x5, 0xffffffff}, {0x6, 0x101, 0x1ff, 0xfffffff7, 0x2, 0x973}, {0x81, 0x8, 0x5, 0xffff, 0x6, 0x2}, {0x1ff, 0x2, 0x5, 0x8a52, 0xfba, 0x9}, {0x2, 0x4, 0xfffffffd, 0xe8d7, 0x1, 0x5}, {0x1, 0x2089, 0x216, 0x6, 0x180, 0x80000001}, {0xa17, 0x400, 0xc, 0x40000000}, {0x9, 0xaeb5, 0x200, 0x200, 0x1408, 0x9}, {0x1, 0x2, 0xfffffff8, 0x100, 0xfffffffb, 0x5}, {0xffff, 0xfff, 0x4, 0x4, 0xe5}, {0x3, 0xfffffff7, 0x64, 0x5}, {0x7f, 0x6, 0xb2b, 0x9, 0x8, 0x8f}], [{0x5}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x7}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x2}, {0x5}, {0x0, 0x1}, {}, {0x2}, {0x2}, {0x1, 0x1}, {0x2}, {0x1, 0x1}, {0x4af4951c52fba761}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x5, 0x1}, {0x4}, {0x3}, {0x1, 0x1}, {0x5}, {0x2}, {0x1, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3}, {}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2, 0x73d185fb0c8d7e3a}, {0x2, 0x1}, {0x5, 0x1}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x1}, {0x2, 0x1}, {0x1, 0x1d001f21dafe8c46}, {0x5}, {0x4, 0x1}, {}, {0x4, 0x1}, {0x1}, {}, {0x3}, {0x5, 0x1}, {0x4}, {0x1, 0x1}, {0x3}, {0x4}, {}, {}, {0x5}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2}, {0x5, 0x1}, {}, {}, {}, {0x4}, {0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5, 0xc867443f1b5fd41e}, {0x4, 0x1}, {0x2}, {0x2}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {}, {0x4}, {0x0, 0x1}, {0x3}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x2}, {0x4, 0x1}, {0x3}, {0x1}, {0x1}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5}, {0x5, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x5}, {0x7, 0x1}]}}, @TCA_PEDIT_PARMS_EX={0xe50, 0x4, {{{0x6, 0x2, 0x0, 0x7, 0x80000000}, 0x0, 0x1, [{0x6, 0x8, 0x3, 0x9, 0x997c, 0x7f}, {0xc, 0x9, 0x7, 0x9, 0x8000, 0x9}]}, [{0x7, 0x4, 0x6, 0x949, 0x3, 0xd0b1}, {0x0, 0xfffffff9, 0xfffffffb, 0x4, 0x8, 0x80}, {0x9, 0x1, 0x0, 0x6, 0x3, 0x3}, {0x8000, 0xfffff000, 0x1, 0x3, 0x1, 0x4}, {0x6, 0xd4d2, 0x6, 0x1, 0xffff}, {0x0, 0x4, 0xff, 0x0, 0x8000, 0x6}, {0x7, 0x4, 0x5, 0x1, 0x81, 0x7}, {0x1, 0x6, 0xf5, 0x2, 0xffffffe4, 0x2}, {0x7, 0x7, 0x5, 0x7f, 0x5}, {0xc, 0xc4, 0x2, 0x4, 0x7b, 0x5}, {0xfffffffb, 0xfff, 0x3, 0x401, 0x1fffc0, 0x3}, {0x48d4, 0x1, 0x7, 0x4, 0x1, 0x41}, {0x3, 0x2, 0xd, 0x7, 0x2}, {0x6, 0x0, 0x5, 0x6, 0x0, 0x5}, {0x5, 0x0, 0x9, 0x8, 0x6, 0xb68}, {0xae5, 0x1, 0x0, 0x59, 0x8, 0x10}, {0x400, 0x9, 0x9, 0x1e09ff02, 0x9, 0x9b}, {0xf1a, 0xeb0, 0x0, 0x8001, 0x7, 0x7788}, {0x9, 0x9, 0x8, 0x0, 0x3, 0x6}, {0x6, 0x10000, 0xb, 0x8, 0x2, 0x7}, {0x5, 0x8001, 0x5, 0xde, 0xfffffffa, 0x6dbf1d12}, {0x4, 0xf708a08f, 0x6eae8d9c, 0x4, 0x4, 0x200}, {0x200, 0x1, 0x64e5, 0x2, 0x5}, {0x9, 0x6, 0x1, 0x2, 0x7, 0x6}, {0x7, 0x3, 0xd68307cf, 0x7fff, 0xa81}, {0xadd1, 0xffffff80, 0x80000000, 0xe, 0x1}, {0xa9f, 0x0, 0x1000, 0x7ff, 0x5, 0x7fff}, {0x81, 0x1, 0xb, 0x0, 0x2, 0x9}, {0xed, 0xed, 0x1000, 0x10, 0x7, 0x176b}, {0x34f0, 0xf80, 0x3, 0x9, 0x7, 0x4}, {0x7, 0x9, 0x0, 0x12000000, 0x40, 0x6}, {0x10000, 0x9, 0x0, 0x509, 0x2, 0x2}, {0x1, 0x4, 0x81, 0x9, 0x1, 0x9}, {0x6, 0x1, 0x9, 0x3, 0x280000, 0x6}, {0x9, 0xc55, 0x0, 0x4, 0x6, 0x10001}, {0x8, 0x3, 0x1, 0x5, 0x3, 0x4}, {0x4, 0x0, 0x6, 0x8, 0x7fff, 0x2}, {0x6, 0x3, 0x0, 0x9f20, 0x946, 0x8}, {0x3, 0xfffffff7, 0x2, 0x200, 0x3, 0x8}, {0x10001, 0x400, 0x7, 0x5, 0xfffffffd, 0x6}, {0x58, 0x401, 0x3, 0x9, 0x9, 0x2}, {0x1, 0xdb7, 0x9, 0xffff, 0x3, 0x400}, {0x80000001, 0x4, 0x2, 0x1, 0x6}, {0x1000, 0x5, 0xe1a, 0x7, 0x90, 0x10}, {0x6, 0x2, 0x8000, 0xfffffff3, 0x9, 0x8}, {0xffffffff, 0x3, 0x7, 0x3, 0x1, 0x1}, {0x3, 0x32, 0x14, 0x40, 0x4, 0x87be}, {0x0, 0x1, 0x80000000, 0x5b0, 0x3ff, 0x6}, {0x80a1, 0x4, 0x0, 0x768e, 0x200, 0xffffbe37}, {0xffffffff, 0xd, 0xe, 0x80, 0x1000, 0xbca}, {0x3, 0x6, 0x6, 0x9, 0x8, 0x1}, {0x6, 0x3, 0x0, 0x2, 0x3, 0x8}, {0x7f, 0x3, 0xfffffffb, 0x0, 0x6b, 0x3}, {0xb1, 0xf9, 0x0, 0x3, 0x0, 0x8}, {0x0, 0x3ff, 0x9, 0x1800, 0xffffffff, 0xcf}, {0x2, 0x4, 0xff, 0x992, 0x4, 0x6}, {0x7, 0xe0f, 0x8, 0x2, 0xfffffff9, 0x4}, {0x40, 0x2, 0xfffffffe, 0x4, 0x8, 0x9}, {0x5, 0x7, 0x0, 0x3c57, 0x2d228400, 0x8b53}, {0x2, 0xa6, 0xcdd8, 0x9, 0x7ff, 0x8}, {0x7, 0x6, 0x2, 0x5, 0x6, 0x6}, {0x9, 0x3, 0xffffff93, 0x3, 0xfffffffe, 0x3}, {0x1, 0x7fff, 0x2, 0xd, 0x8, 0x5}, {0x35, 0x80, 0x2, 0x3, 0xa, 0x791}, {0x8, 0x7fffffff, 0x3, 0x200, 0x0, 0x7}, {0xf, 0xb, 0x1, 0x3, 0x80, 0x2}, {0x5, 0x3, 0x4, 0x4, 0x5, 0x2}, {0x8, 0x1, 0xa120, 0x9, 0x1, 0x3}, {0x8000, 0x7, 0x101, 0x7, 0x6, 0x4}, {0x4, 0x3, 0x1, 0xb01d, 0x10000, 0xc83}, {0x2, 0x4, 0x95, 0x4, 0x6, 0x3}, {0x9, 0x8, 0x7, 0x5, 0x9}, {0xfff, 0x6, 0x7, 0xfffffffa, 0x0, 0x4}, {0xffffffff, 0x3ff, 0xfffffffc, 0x1, 0xd}, {0x1, 0x0, 0x5, 0x3, 0x4, 0x6}, {0x1, 0x0, 0x7, 0x5, 0x8}, {0x8, 0x5, 0x3, 0x8, 0x1, 0x6}, {0x7ff, 0x8, 0x8, 0x3, 0x9, 0x5}, {0x8000, 0x8, 0x8, 0x9, 0x5, 0x3}, {0xfffffd7a, 0x9, 0x3, 0xfff, 0x38, 0x6}, {0x3, 0x41, 0x6, 0x7, 0x0, 0x2}, {0x9, 0x490, 0x1, 0x4, 0x1ff, 0x3}, {0x6, 0x9, 0x38, 0x97, 0x2040000, 0x20}, {0x6, 0x178, 0x7, 0xd1e, 0x8, 0x1}, {0x5, 0x7, 0x2, 0x8, 0x7a024b24, 0xb668}, {0x3ff, 0xe, 0x7, 0xffffcc28, 0x40000000, 0x7fffffff}, {0x5, 0x5, 0xa, 0x8, 0xe42b, 0x5}, {0x25, 0x7, 0x6, 0x8, 0xd7, 0x8}, {0x10000, 0x0, 0x0, 0x7, 0x7ff, 0x3ff}, {0xfffffff9, 0xc, 0x2, 0x2, 0x6, 0x81}, {0x6, 0x8, 0x1, 0x80, 0x3000, 0x5}, {0x5, 0xe54, 0xaac, 0x99, 0x81, 0x1}, {0x7fffffff, 0x80, 0x1000, 0x8, 0x10001, 0x5}, {0x4, 0x3, 0x5, 0xe27, 0x400, 0x7}, {0x8, 0xa0000000, 0xe81a, 0x7, 0x1, 0xfffffc00}, {0x9, 0x7c2, 0x5, 0x7, 0x8, 0x89ce}, {0x9, 0x1, 0x1000, 0x100, 0x6, 0x7}, {0x9, 0x0, 0xd6, 0x9, 0x401, 0xcc}, {0x4, 0x4, 0x401, 0x1, 0x401, 0xd}, {0x0, 0x80000001, 0x1, 0x6, 0x4}, {0x2, 0x9, 0x1, 0x5, 0x5, 0x6}, {0x0, 0x525, 0x80000000, 0x9b97, 0x3, 0xfffffffc}, {0x5, 0x80000001, 0x7, 0xe, 0xfb, 0x5}, {0x80000000, 0x12, 0x5, 0x0, 0xd76, 0x2}, {0xf64, 0x8, 0x2, 0x7, 0x3, 0xb}, {0x5, 0xe, 0x3f8a0880, 0xfff, 0xffff, 0x7}, {0x4, 0x9, 0x4, 0x8, 0x4, 0x3}, {0x0, 0x1, 0x2, 0x4, 0x9, 0xfff}, {0x5, 0x3ff, 0x4, 0x1, 0x8, 0x3}, {0x5, 0x7fffffff, 0x2, 0x8, 0x9, 0x8}, {0x3, 0x80000001, 0xe3cc4f9, 0x100, 0x10000000, 0x9}, {0x4, 0x4, 0x1, 0x2, 0x3, 0x943}, {0x1, 0x1, 0x7fff, 0x401, 0x7, 0x3}, {0x52, 0x71, 0x7, 0x4, 0x8001, 0x3}, {0x2, 0x6b800, 0xffffffb7, 0x0, 0x4, 0x8}, {0x6, 0x1, 0x3, 0xffffff17, 0xd, 0x1}, {0x7, 0x80000001, 0x5, 0x1ff, 0x0, 0xacf}, {0x8, 0x1, 0x10, 0x7, 0x6, 0x1000}, {0x6, 0x2, 0x3, 0x2, 0x5, 0x9}, {0x4, 0x6, 0x1, 0x9, 0x1, 0x9}, {0x9, 0xb, 0x4, 0xf, 0x8, 0x758}, {0x0, 0x7fffffff, 0x3, 0x4, 0xc4, 0x8}, {0x6, 0x9, 0xcd, 0x1, 0x7fff, 0x3}, {0x0, 0x7f, 0x0, 0x3, 0x2ab, 0x2}, {0x8, 0x9, 0x5000, 0x4, 0x3, 0x2}, {0x8, 0x0, 0x8, 0x4, 0x10, 0x5}, {0x3, 0x8000000, 0x10001, 0xfffffffe, 0x8, 0xd}, {0x8, 0x1, 0x40, 0xcec8, 0x3, 0x7}], [{0x1, 0x1}, {}, {0x4}, {0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2}, {0x4, 0x1}, {0x4}, {0x3, 0x1}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {0x2}, {0x5, 0x1}, {0x3}, {0x5}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x2}, {0x3, 0x3}, {0x3}, {0x4}, {0x0, 0x1}, {}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2}, {0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x1}, {0x2}, {}, {0x4, 0x1}, {}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x7}, {0x1}, {0x0, 0x1}, {0x1}, {0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x5, 0x1}, {0x1}, {0x2}, {0x1, 0x1}, {}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x1}, {}, {0x0, 0x1}, {}, {0x5, 0x1}, {0x1}, {0x1}, {0x4}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5}, {0x4}, {0x1}, {0x0, 0x1}, {}, {0x3}, {}, {0x0, 0x1}, {0x2, 0x1}, {}, {0x5}, {}, {0x5}, {0x1, 0x1}]}}, @TCA_PEDIT_PARMS_EX={0xe38, 0x4, {{{0xdf, 0x4, 0x8, 0x8, 0x7}, 0x59, 0x5, [{0x2, 0xc9, 0xf, 0x6, 0x100, 0xfffffff7}]}, [{0x3, 0x2, 0x2, 0x2000000, 0x80000001, 0xffffffff}, {0xc45, 0x826a, 0x9, 0x6, 0xa, 0x4a}, {0x9, 0x3ff, 0x10000, 0x8, 0x8000, 0x3}, {0x6, 0x4, 0x1ff, 0x0, 0x2, 0x7}, {0x7, 0x0, 0x41, 0x3, 0x1, 0x1}, {0x9, 0x4a, 0x8, 0x0, 0x3ff, 0x351}, {0x6, 0x4, 0x4, 0x0, 0x3, 0x8}, {0x8, 0xa, 0x9, 0x80000000, 0x5, 0x10001}, {0x1, 0x3, 0x2, 0x7f, 0x100, 0x6}, {0xf, 0x10000, 0xc60, 0x5, 0x0, 0x9}, {0xffff4797, 0x6, 0xba3c, 0xffff, 0xdd, 0xee}, {0x6, 0xf7d5, 0x7, 0x1, 0x0, 0xb}, {0x3, 0x1, 0x4, 0x6, 0xfffffffa, 0xfff}, {0x3, 0x8, 0x2, 0x9, 0x7, 0x6}, {0x0, 0xfffffffc, 0x7, 0x3, 0x7, 0x6}, {0x9, 0x7, 0x101, 0x3, 0xc, 0x6}, {0x7, 0x7, 0x81, 0x4, 0xe, 0x267a}, {0x40, 0x6, 0x8001, 0x48, 0xe, 0x4}, {0x10001, 0x7fff, 0xffffff7f, 0x4, 0x5, 0xfffffffd}, {0x9884, 0x1, 0x83, 0xfffffffa, 0x8, 0x6}, {0x4, 0x5eec, 0x2, 0x4, 0xffffffff, 0x6}, {0xb40, 0x10001, 0x43, 0x9, 0x0, 0x8}, {0x0, 0x53e, 0x1, 0xfff, 0x0, 0x4}, {0x8, 0x5, 0x2, 0x8, 0xfffff27a, 0x3}, {0x5, 0xa, 0x5, 0x4179d0c3, 0x2, 0x5}, {0x5, 0x2186, 0x4, 0x9, 0x4, 0x3}, {0x80, 0x4, 0x1, 0x3, 0x7fff, 0x2}, {0x8, 0x9, 0x8, 0x5, 0xb, 0xf3a5}, {0x1, 0x3, 0xa7, 0x10, 0xc56, 0xff}, {0x3, 0x1, 0x0, 0x9, 0x7, 0x8}, {0xffff4458, 0x8, 0x80, 0x9, 0x80, 0x2}, {0x2d39f4a5, 0xe39, 0x350e, 0x2, 0x9, 0x9}, {0xf, 0x9d, 0x101, 0x3aabd43a, 0x2, 0x6}, {0x7fffffff, 0xff, 0xffffffff, 0x7ff, 0x8001, 0x200}, {0x40, 0xc17, 0x80000000, 0x42ff, 0x4, 0x2}, {0x401, 0x7, 0x5, 0x2, 0x7fff, 0x5}, {0x1, 0x5, 0xffff0000, 0xffffffff, 0x10, 0xff}, {0xffffffcc, 0x33a, 0x5, 0x1ff, 0x7, 0x1}, {0x1000, 0xfffffffa, 0x4, 0xffff, 0x3, 0x7fff}, {0x200, 0x6, 0x7, 0x9, 0xa}, {0x0, 0x9, 0x80000001, 0xb7, 0x8, 0x9}, {0x5, 0x8, 0x3, 0x3, 0x800, 0x2}, {0x6, 0xd, 0x8, 0x5, 0x6, 0x1}, {0x0, 0x3, 0x2, 0x7, 0x120, 0x8}, {0x3, 0x6, 0x8001, 0x4, 0x1, 0x4}, {0x27, 0x4b0, 0x200000, 0x6, 0x88e, 0x1}, {0x4, 0x5, 0x2, 0x6, 0x9, 0x62d}, {0x5533, 0x10, 0x0, 0x3, 0x5, 0x8}, {0xc3d9, 0x5e3, 0xfff, 0x4, 0x1, 0x365}, {0xd4, 0x6, 0x6b, 0x0, 0x7, 0x950d}, {0xfffffff7, 0x3, 0x5, 0x1, 0x6, 0x8001}, {0x200, 0x7c6, 0x5, 0x2, 0x31d}, {0x0, 0x0, 0x9, 0x4, 0xfffffffd}, {0x0, 0x2, 0x80000001, 0x8, 0x6, 0xfffffffe}, {0x8, 0xdff, 0x94f, 0x2, 0x6, 0x80}, {0x3, 0x8, 0x3ff, 0x9, 0x6, 0x200}, {0x9, 0x401, 0x7, 0x9, 0x7, 0xfffffd5e}, {0x5, 0x6, 0x400, 0x100, 0xc0, 0x10}, {0x4, 0x0, 0xb325, 0x7, 0x67, 0x1}, {0x8, 0x4, 0x0, 0x7, 0x6, 0xe9}, {0xffffffff, 0x59f, 0x101, 0x400, 0x5, 0x678f}, {0x8001, 0x7f, 0x8, 0xde5, 0x7, 0x4}, {0xb2f, 0x6, 0x93, 0x7fff, 0x0, 0x7fff}, {0x7fffffff, 0xffff, 0xfff, 0x8b, 0x2, 0x10001}, {0x5, 0x8, 0x8, 0x6, 0x8, 0x9}, {0x8, 0x5, 0xd26, 0x1, 0xfff, 0x9}, {0x0, 0xebe, 0xcd, 0xb, 0x4, 0x4}, {0x47, 0x744, 0x6, 0x2, 0x3, 0x5}, {0xffffffff, 0x0, 0x5, 0xb5, 0x0, 0x400}, {0x5, 0x1, 0x9, 0x401, 0x7, 0x8}, {0x0, 0x4, 0xa, 0x9, 0xe81}, {0x2, 0x800, 0xfffffffa, 0x8, 0x38cd, 0x80000000}, {0x8, 0x3, 0x4, 0x200, 0x15, 0x1}, {0x1, 0x8, 0x5, 0x9, 0x8, 0x1a}, {0x1, 0x3, 0x6, 0x80000001, 0x1, 0x7}, {0x8, 0x7a, 0x5, 0x8, 0xec8, 0xe2}, {0x9, 0x2, 0x926, 0x9, 0x0, 0x40}, {0x1c, 0x0, 0x0, 0x8, 0x7ff, 0x6}, {0xfffffffe, 0x200, 0x4, 0x3, 0x7, 0x4}, {0x100, 0x7d, 0xffffffff, 0x0, 0xff, 0x7}, {0x6, 0x8, 0x401, 0x5, 0xdd, 0xc}, {0x9, 0x800, 0xe, 0x2f64, 0x2, 0x400}, {0x101, 0xa9, 0x4, 0x8, 0x1ff, 0xac2}, {0x5, 0x10, 0x6, 0x0, 0x6, 0x7b}, {0x8f, 0x5, 0x1, 0x800, 0x1, 0x4ab}, {0xffffffff, 0x8001, 0x5, 0x0, 0x0, 0xfffffffc}, {0x9, 0x8001, 0x5, 0x4, 0x8, 0xda}, {0x8, 0x6, 0x200, 0xfffffff7, 0x6e79, 0x2}, {0x3fffc0, 0x3, 0x9, 0x4, 0x3, 0x8000}, {0x2, 0x2, 0x1, 0x2, 0x2, 0x1}, {0x2ff, 0x1bed, 0x9, 0x6, 0xb833, 0x5}, {0xc6d, 0x5, 0x100, 0xd, 0x9, 0x101}, {0xbb9, 0x7, 0x7, 0x6, 0x2, 0xa10}, {0xc, 0x6, 0xb2, 0x1000, 0x9}, {0xae51, 0x3, 0x4, 0x3, 0x7, 0x9}, {0x800, 0x48b, 0x4, 0x0, 0x9}, {0x8a3, 0x1, 0x9, 0x2, 0x9, 0x3}, {0x5, 0x101, 0x1, 0x2, 0x7, 0xc}, {0x800, 0x4, 0xffffffff, 0x100, 0x3c83, 0x7f}, {0x5, 0x2c0, 0x3, 0x9, 0xfffffff8, 0xfffffffd}, {0xb69, 0x1, 0x5, 0xfffffff9, 0x80, 0xa80000}, {0x4, 0xfffffffd, 0xfffffffe, 0xc, 0x3, 0x9}, {0x4e78, 0x7, 0x9, 0x2, 0x6, 0x4}, {0xcc8, 0x6, 0x5, 0x9, 0x1, 0x2}, {0x5, 0x3, 0x5, 0x6, 0x7, 0x3}, {0xd0, 0x5, 0xca9, 0x6, 0xfff, 0x28}, {0x1, 0x8, 0xccf5, 0x5, 0x3, 0x7ff}, {0x80000001, 0x4, 0x9, 0x10000, 0x4, 0x4}, {0x0, 0x7, 0x4, 0x6, 0xc, 0x10}, {0x800, 0x3, 0xa, 0x7, 0x1ff, 0x4d}, {0x0, 0xffffffff, 0x6, 0x40000, 0x3, 0x100}, {0x1f, 0x1, 0x0, 0x7fffffff, 0x1, 0x7}, {0x3, 0x346, 0x3, 0x613, 0xfd11}, {0x800, 0x1, 0x3, 0x7fffffff, 0x7fff, 0x8}, {0x4, 0x1, 0x0, 0x8, 0x0, 0x6}, {0x2, 0x500f, 0x80000001, 0x3, 0x1, 0xfffff668}, {0xd5b4, 0xc8, 0x4, 0x9e, 0x4, 0xf}, {0x1, 0xd0d8, 0x79, 0x7, 0x1, 0x1}, {0xe84, 0x6, 0xf, 0x0, 0xfff, 0x2}, {0x0, 0xff, 0x9, 0x1756, 0xe4d, 0xe5}, {0xf, 0x7, 0x9, 0x8, 0x391, 0x7dd}, {0x5, 0x9, 0x3, 0x1, 0xff, 0x4}, {0x7b, 0x7ff, 0x4, 0xfffffff7, 0x1}, {0x3633abcc, 0x2, 0x0, 0x4, 0x8000, 0xffffff81}, {0x4, 0x2, 0x8, 0x6, 0x401, 0x8000}, {0x3, 0xffffe1b5, 0x80000000, 0x7, 0x8, 0x80}, {0x5, 0x7fff, 0x1, 0x10000, 0x0, 0x7f}, {0x8, 0x20000000, 0x9, 0x9, 0x0, 0x2}], [{0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x3}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x4}, {0x6}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x2, 0xd68435da766cef8f}, {0x5}, {0x0, 0x1}, {0x2, 0x1}, {0x5f98065277757cca}, {0x4}, {0x1, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x2, 0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x5, 0x1}, {0x2}, {0x4, 0x1}, {}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x2}, {}, {0x1}, {0x4, 0x1}, {0x6, 0x1}, {0x1}, {0x5}, {}, {0x1}, {}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x3}, {0x2}, {0x2}, {0x1, 0x1}, {}, {0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x7, 0x1}, {0x5}, {0x3, 0x1}, {}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {0x1}, {0x5}, {0x5}, {}, {0x3, 0x1}, {0x1}, {0x5}, {0x2}, {0x5, 0x1}, {0x4}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x3}, {0x1}, {0x2}, {0x1, 0x1}, {0x5}, {0x2}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}, {}, {0x3}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x5}, {0x1}], 0x1}}, @TCA_PEDIT_PARMS={0xe38, 0x2, {{{0x2, 0x5, 0x3, 0x4, 0x9}, 0x10, 0x2, [{0x0, 0x0, 0x1, 0x4a, 0x7ff, 0x2}]}, [{0x5, 0xfffffffd, 0x2, 0xf3, 0x6f0, 0xfff}, {0x1, 0x3, 0x74, 0x1, 0x0, 0x1}, {0x2, 0x4, 0xc9, 0x3, 0xa, 0x76f}, {0x8001, 0x1, 0x100, 0x7ff, 0x93, 0x100}, {0x1, 0xcaf2, 0x7fff, 0x2, 0x1, 0x7}, {0x1, 0x4, 0xfffffff8, 0x3, 0x80000001, 0xb36}, {0x1, 0x3, 0x8, 0x0, 0x5, 0x8}, {0xfffff62e, 0x6ab, 0x3, 0xffffee72, 0x40, 0x371f}, {0x1, 0x2, 0xbe6, 0x44a, 0x8000, 0x68a84038}, {0x8, 0xf83, 0x9, 0x8, 0x75d, 0x7}, {0xfff, 0x7, 0x0, 0x7, 0x8, 0x47}, {0x8, 0x0, 0x8, 0xfff, 0x1, 0x9}, {0x9, 0x3ff, 0x10001, 0x101, 0x0, 0x7fffffff}, {0xb889, 0x4, 0x47d0f8aa, 0x51, 0x5, 0x8}, {0x4, 0x8, 0x6, 0x3, 0x226, 0x80000000}, {0x1, 0x7, 0xc, 0x1000, 0xddc, 0x3492}, {0x7ff, 0xfffffeea, 0xb08, 0x7179cc60, 0x8, 0x80000001}, {0x8, 0x8, 0xa, 0x81, 0x8, 0x4d0c}, {0x1, 0x4, 0x8, 0x1, 0x5, 0x81}, {0xbf, 0x3a, 0x6, 0x1, 0x6, 0x1}, {0x200, 0x3, 0x2, 0xeb6f, 0x3, 0x7ff}, {0x3b40, 0x6, 0x8, 0x0, 0x4, 0xff}, {0x2, 0x5, 0xac02, 0x3, 0xda1, 0xa48}, {0x3119bc29, 0xc, 0x8, 0x2c55645f, 0x0, 0x9}, {0x5, 0x0, 0x50b99943, 0x1, 0x2, 0x1}, {0x8, 0x0, 0xfffffffa, 0x7, 0x6, 0x5}, {0x7, 0x2, 0x3, 0x2, 0x3ff}, {0x400, 0x5, 0xe4, 0x7, 0x800, 0x401}, {0x1, 0x1c, 0xd4, 0xfffffffe}, {0x2cd, 0x3, 0x400, 0x7, 0x1, 0x2}, {0x81, 0x9, 0x400, 0x7f, 0x1, 0xffffffff}, {0x3b, 0x9, 0x2dc, 0x7, 0x8ea4, 0x7}, {0x4, 0x3, 0x3, 0x8, 0x8, 0x10001}, {0xfffffffa, 0x9, 0x6, 0xf, 0x507, 0x7ff}, {0x80, 0x4, 0x6, 0x5, 0x401, 0x40}, {0x7, 0xfffffffb, 0xa, 0x834d, 0xfff, 0x6}, {0x1, 0x655aea90, 0xc128, 0x7, 0x5, 0xffffffd5}, {0x3, 0x8001, 0x3, 0xb, 0x7, 0x3}, {0x2, 0x5, 0x3, 0x8, 0xe, 0x40}, {0xfff, 0x7f4c, 0x905, 0x3, 0x7, 0x8d48}, {0x9, 0x8001, 0x8e42, 0x3, 0x5, 0xff}, {0x10000, 0x1, 0x2, 0x1, 0x8, 0x6}, {0x3, 0xfffffc7a, 0x6, 0x4, 0x2, 0x6}, {0x8, 0x200000, 0x3, 0xc, 0x1, 0x8}, {0xffff, 0x6, 0x4, 0xa, 0x7, 0x7fff}, {0x3, 0xde4, 0x8, 0x3, 0x8, 0x800}, {0x4, 0x3, 0x0, 0x8, 0x4, 0x2}, {0x4, 0x7, 0x1, 0x688, 0x5}, {0x1, 0x200, 0xfb, 0x7, 0xff, 0xeb1d}, {0xe, 0x9, 0x8, 0x8, 0x3, 0x8}, {0x4, 0x7fff, 0x1ff, 0x3, 0xff, 0x4}, {0x8, 0x1, 0x1ff, 0x400, 0xfff, 0x40}, {0x4, 0x4, 0x0, 0x4, 0x7c, 0x8}, {0x0, 0x7, 0x2, 0x39c, 0xfffffffa, 0x3}, {0x0, 0x2, 0x1, 0x2, 0x1, 0x2}, {0x9, 0x7, 0x5, 0x1, 0x2, 0x9f}, {0x0, 0x2, 0xf2, 0x7, 0xfffffffb, 0x400}, {0x7, 0x4, 0x81, 0xfffffffa, 0xffffffff, 0x8}, {0xa3a, 0x1000, 0x7, 0x5, 0x40, 0x1}, {0x7, 0x6, 0xfffffff9, 0x9c8, 0x8, 0x665667a5}, {0x9, 0x9, 0x0, 0xe9b4, 0x6, 0x70000000}, {0xf, 0x3, 0x40, 0xa8c8, 0x114f}, {0x7, 0xff, 0x8a1, 0x9, 0xfffffff7, 0x7ff}, {0x3, 0xfffffbff, 0xe3, 0x47be, 0x4, 0xbf5d}, {0x6, 0x2, 0x0, 0xfff, 0x2, 0x6}, {0x4, 0x8001, 0x9, 0x2cf, 0x1, 0x9}, {0x10, 0x4000000, 0x8, 0x9, 0x8, 0xa39c}, {0x7, 0x80000001, 0x1, 0x400, 0x1, 0x93}, {0x7, 0x43, 0x1, 0x5, 0x597b, 0x5}, {0x5cd, 0x1, 0x8, 0x1, 0x5}, {0x8, 0x80000000, 0x3, 0x40f4, 0x39b0, 0x3}, {0x3, 0x69ef, 0x1, 0x9, 0x4, 0xff}, {0x1, 0x9, 0x8, 0x2, 0x10000, 0x6}, {0x8ee, 0x5, 0x53, 0xa000, 0xffff, 0x8}, {0xff, 0x0, 0x3, 0x3, 0x200, 0x1}, {0x4, 0x97e, 0x3, 0xa, 0x0, 0xa00000}, {0x10001, 0x2, 0x80000000, 0x40, 0x8, 0x316b}, {0xa, 0x0, 0x10000, 0x3b5, 0x3, 0x5}, {0x5, 0x9, 0x2, 0x9a21, 0x5, 0x800}, {0x8, 0x8647, 0x6, 0x8, 0xfffffffd, 0x58b}, {0x9, 0x3, 0x8c, 0xfffffffb, 0x8, 0x5}, {0x8, 0x6, 0x80000000, 0x8, 0x6, 0x4}, {0x6, 0x8, 0x7, 0x3, 0x1, 0x8}, {0x3, 0x1fc00, 0x80000000, 0xb07, 0x4, 0x6}, {0x2, 0x7c9, 0xffffffff, 0x1, 0x7, 0x5a}, {0x7f, 0x6c, 0xfff, 0xb5, 0xfff, 0xa16}, {0x6, 0x1, 0xd03, 0xb, 0x6, 0x9}, {0xa9988195, 0x6, 0x10001, 0x1, 0x7, 0x6}, {0x6, 0x81, 0xffffffff, 0x4149, 0x6, 0x8}, {0x0, 0xffffffff, 0x3, 0x6, 0x9, 0x401}, {0x800, 0x3, 0x3, 0x3, 0x8, 0x5}, {0x9, 0x1f1845be, 0x10000, 0x40, 0x9}, {0xf0bc, 0x9, 0xd5c7, 0x10, 0x4, 0x6}, {0x49e, 0x8, 0x3, 0x6, 0x5, 0xffffffaf}, {0xffff, 0x8, 0x3, 0x8, 0x17f9, 0x5}, {0x4, 0x1, 0x8, 0x4, 0x1, 0x1}, {0x5, 0x5, 0xf, 0x1, 0xfffffff9}, {0x2, 0x6, 0x40, 0x6b, 0x0, 0x6}, {0xe49, 0x3, 0xd, 0xec, 0x5}, {0x400, 0x2, 0x4, 0xfffffff7, 0x7, 0x8}, {0xfffffff6, 0xe9bd, 0x3, 0xd, 0xfaf1, 0x8001}, {0x6, 0x0, 0x800, 0x0, 0x4, 0x4}, {0x8, 0x8, 0x1, 0x0, 0x3}, {0x80000000, 0x5ccd, 0x5, 0x5, 0x200, 0xfffffff8}, {0x9, 0x3, 0x7, 0x5aca, 0x7f, 0xf}, {0x3, 0x1, 0x1, 0x7ff, 0x8, 0x1}, {0xffff8001, 0x3, 0x5, 0xff, 0x0, 0x80}, {0x6, 0x5, 0x5, 0x4, 0xe93, 0x5}, {0x5e, 0xfffffffd, 0x81, 0x7f, 0xe, 0x5}, {0x40, 0x3, 0x7fffffff, 0xf918, 0x0, 0x1ff}, {0x7fff, 0x6, 0x0, 0x9, 0x8, 0xfffffff9}, {0x8001, 0xbd4, 0x7, 0xf0, 0x5}, {0x0, 0x5, 0x0, 0x400, 0xc9, 0x2ce8c146}, {0x93fb, 0xe4, 0x7, 0x1, 0xd422, 0x5c5a}, {0x0, 0x4, 0x3, 0xb1a, 0x3, 0x1}, {0x2, 0x7fff, 0x6, 0x2, 0x7, 0x1}, {0x56, 0x400, 0x54, 0xba, 0xffff7fff, 0x19daf706}, {0x101, 0xb, 0x0, 0x6, 0x27c53ab6, 0x7}, {0x6, 0x7, 0x101, 0x1, 0xac, 0x7}, {0x1, 0x2, 0x8000, 0x9, 0xfa}, {0x3, 0x3493, 0xae35, 0x8cea, 0xc884, 0x7}, {0x0, 0x81, 0x7, 0x2e, 0x2, 0xfffffff9}, {0x0, 0x8, 0x6, 0x3ff, 0xff, 0xace}, {0x56d42747, 0x81, 0x1, 0x5, 0x0, 0xbc}, {0xe008, 0x1, 0x3, 0x0, 0x7, 0x7}, {0x4, 0xccd, 0x80, 0x1, 0x2}, {0x9, 0x5, 0xffffffff, 0x7, 0x8001, 0x7}, {0x3ff, 0xe8, 0x9, 0xe, 0xd2, 0x3}], [{0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2}, {0x5, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x5}, {0x3}, {0x4, 0x1}, {}, {0x2}, {0x4}, {0x5}, {0x4, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {}, {0x4}, {0x5}, {}, {0x2, 0x1}, {0x4}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5}, {0x1, 0x1}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x4}, {0x5}, {}, {0x5}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {}, {0x5}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x7724cf4074de1d62, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x4}, {0x3}, {0x4}, {0x2, 0x1}, {0x5}, {0x5}, {0x2, 0x1}, {0x1}, {0x0, 0x1}, {}, {0x2}, {0x2}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x1}, {0x2, 0x1}, {0x4a98d8af3f2f4578}, {}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x1}, {0x2, 0x210e3f3820f095a3}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x3}, {0x4, 0x1}, {0x4, 0x1}, {0xcf585c81c6bf16c3, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x80, 0x5, 0x0, 0x1, [{0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}]}, {0xf, 0x6, "25a695458de9e39fb0eac5"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_csum={0x128, 0x10, 0x0, 0x0, {{0x9}, {0x90, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0xe, 0x8, 0x2, 0x3}, 0x56}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x1, 0x20000000, 0xb, 0x10}, 0x1a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x80000000, 0x5d, 0x8, 0x9, 0x1}, 0x3d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x0, 0xd66bc15945a02092, 0x7, 0xe}, 0x68}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x400, 0x401, 0x1, 0x2, 0x5}, 0x4d}}]}, {0x6e, 0x6, "ee4cec8c89636ded22101c3cf67af24eccf181e3f65078c147685bdbd0e2397f853dd2a0edfb7686f850d2ee85c07f510b85e7a0801cdc93c01caf110774f66167ebbf484ae494c7365081f760148e754d1a73d87d6e2885f8219bfe46fee2871f42708b251dd112191f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x3d78}}, 0x20004084) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.871352965s ago: executing program 4 (id=11724): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x864, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404}], [@TCA_POLICE_RATE={0x404}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000100)={'tunl0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000040)={&(0x7f00000010c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELOBJ={0xec, 0x14, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_OBJ_USERDATA={0x42, 0x8, "2a0ab5a8d3c7d092969d74ab974f759175d29373dead4fd3e7de5c43b7ba52d6af198076e8d8e21f381b070075e48a7e4388230d0d3cc44ae6c2a0613426"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_USERDATA={0x5b, 0x8, "9646bdd394578fb27b0200a401f1ede42edce101a726aaf059ddda3613a4d625d3b4733c04d95c2b4a2fb09512dacf42cb3b0ae91d0ab11e15450a72564b1f6ec7781d11d512a17f9394332db8cbaa13c8e88e2cd83acb"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}]}, @NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_ID={0x8}]}, @NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT={0x2c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x29}]}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x32}]}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_FLAGS={0x8}]}]}, @NFT_MSG_DELCHAIN={0x64, 0x5, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_CHAIN_HOOK={0x30, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x764485}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_to_hsr\x00'}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}}, @NFT_MSG_DELFLOWTABLE={0x258, 0x18, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x218, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'gretap0\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xcc, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_bridge\x00'}, {0x14, 0x1, 'lo\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'ip6tnl0\x00'}, {0x14}, {0x14, 0x1, 'ip6gre0\x00'}, {0x14, 0x1, 'xfrm0\x00'}, {0x14, 0x1, 'dvmrp0\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'netpci0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0xcc, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bridge0\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'syz_tun\x00'}, {0x14, 0x1, 'wg1\x00'}, {0x14, 0x1, 'macvtap0\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}, {0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'wg0\x00'}, {0x14, 0x1, 'erspan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'batadv0\x00'}, {0x14, 0x1, 'macvtap0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x488}, 0x1, 0x0, 0x0, 0x41}, 0x4000804) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}]}, 0x54}}, 0x0) 1.494216359s ago: executing program 0 (id=11728): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1e, 0x1, 0x0) r2 = socket$kcm(0x29, 0x7, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000500)={r0}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$igmp(0x2, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffc00, 0x0, 0x0, 0x0, 0x3}, [@alu={0x4, 0x1, 0x9, 0x0, 0x0, 0xfffffffffffffffc}]}, 0x0, 0x2}, 0x94) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r6, 0x112, 0x9, &(0x7f00000008c0)=0x6, 0x1) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c0100001000130700000000ffdbdf25e0000001000000000000000000000000ff020000000000000000000000000001000400004e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r5], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8}]}, 0x20}}, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x86, &(0x7f0000000440), 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002fc0), 0xffffffffffffffff) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000c00)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MPATH(r10, &(0x7f0000000d80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000c80)={0x98, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x80000001, 0xd}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000000}, 0x40800) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000000075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xec}}, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r11, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r11, 0x0) write$tun(r11, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x4c1) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000001240)={0x47c, r12, 0x30, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x370, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x88, 0x5, "9f1ff9a6ee4a69c3dc56d504b9a9b22ceb39247f805bfe7fe7183a7c28a36bfd6ac34311c8bfbfd1e21f4a0c3c501502a7290bbc6af036bd2841969cb3c4a3c4fc597e4a4be187cd1d9b3fac38d46ebc63e7f25f1def61ebc8693d77bb9a84e7a4dc3a1d63ef5e5ac918e7077cc2c371b6e5bb74339cc72d34aae84e2eaadfb4738ffee0"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xa4, 0x4, "b41ca52a4efe7d72d10f823cfb867f5a9e7d8f069f1e957121dd6648a2a512d9b3588d72b94bf06a6d0f351d8ef18d5ba3fb590098ce20aa3b5e6522e4e51497be392a36156d4cb49e7d019051abc2cde3b2801ed3cb2f61aff6c22abce7d9f5499e3b6efdd0218439a081eacd9f3f666ee01cbc5de8c42a47e8b83868b3c11af02dd44ab11265c46b69c2983ed69db36c28bf9ae072b52e1078a8ecf6515cda"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0xf4, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '}$\xfd\xf0\\\x00'}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '{)$!!!/!@.\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'IPVS\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0xffffffffffffffcf, 0x2, ')\xc4-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x0, 0x1, 0x1ff}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '),\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x83}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_VALUE={0x12a, 0x4, "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"}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xf8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xdf, 0x4, "3a8564e93004fde87fd63e884b5d06ecfb2d7f86cfd708f76db472562635778e86fa678383bf404b465f98b8d409624e42522977f34d4d538763c60a3e1cfbe24752230008c48865adce7dd1dd95d3ba5052e608a2b1c321fc4a026d99375c2ba6cd6cdb858452d3ef976181c5890c9030692d1eb66b41b171c86e1aff841c9e47e13b9934292a18359df2b1f70f546fa148f101d6ad1ef54d0d47b7dcae5da1f2b98adf32275e23519e305a3de0624ee766d3ed4b5d1a330d36d8207d7a8240ca30a6ae594274659de2b71f0071f81379adb5b8c28797d41840da"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_BITS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}]}, 0x47c}}, 0x8895) mmap$xdp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x4000010, r0, 0x180000000) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000540)=ANY=[@ANYBLOB="940000047d876175c3f9e310a593218d7a306872d96ff54fd1b731a24639024c", @ANYRES16=r8, @ANYBLOB="010000000000000000000d000000"], 0x14}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000a80)={r11, 0x3, 0x1, 0x6}) sendmsg$L2TP_CMD_SESSION_MODIFY(r13, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x54, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x10}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xfffffffffffffffa}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x489}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x2}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x4000014) 1.493622687s ago: executing program 4 (id=11729): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], 0x0}, 0x94) bpf$ITER_CREATE(0xb, 0x0, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$LINK_DETACH(0x22, 0x0, 0x0) close(r2) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x61f0, 0x0) close(0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000400)="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", 0x101) sendto(r5, 0x0, 0x0, 0x10000, &(0x7f0000000040)=@nl=@unspec, 0x80) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x14e22, 0x2, @loopback}, 0x1c) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="100000001b1401"], 0x10}}, 0x0) 1.218971293s ago: executing program 0 (id=11736): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x12, 0x0, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0xfffff801, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r2}, &(0x7f00000002c0), &(0x7f0000000440)=r0}, 0x20) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @multicast2}, 0x2, 0x0, 0x3}}, 0x26) 1.093224537s ago: executing program 0 (id=11738): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r4, @ANYBLOB="05"], 0x6c}, 0x1, 0x0, 0x0, 0x14044085}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r2, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) getsockopt$sock_buf(r6, 0x1, 0x3b, &(0x7f0000000000)=""/4096, &(0x7f0000001000)=0x1000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) 1.021739485s ago: executing program 5 (id=11739): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, 0x0) close(r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'erspan0\x00', 0x100}) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 929.455188ms ago: executing program 1 (id=11742): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r3, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x6, 0x3}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x20000010) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040001}, 0x800) 861.281374ms ago: executing program 5 (id=11743): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x29, 0x0, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x5, 0xbf, 0x7, 0x946, 0x4, 0x1, 0x9, 0x1ff, 0x8001}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r8, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x3d1, 0x3, 0x8, 0x6, 0x6}, 0x76}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}}, 0x2) close(r6) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a80000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000580)=r11, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r10, 0x42}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000200)="27030200000314000e00003c002400090000ff8800000000000000000000000000000000000085dc9d9839dc1336", 0x2e}], 0x1}, 0x4005) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x2c, 0x107, 0x70bd2b, 0x25dfdbff, {0x5, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x16, 0x0, 0x0, @fd=r12}]}, @nested={0x8, 0x3, 0x0, 0x1, [@nested={0x4, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r13 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="05000000000000006b113600000000008510000002000000850000000500000095000000000000009500a50500000000719837a62ecba6b4aca926e6c8a1e509afe04e27090b613f59968cc4b88b4ecb814f46ebe3d5e393478f148c05cb001274b4a292d599"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffdcf}, 0x70) sendmsg$nl_route_sched(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x9383, 0x4}, 0x4}}, @TCA_MPLS_TC={0x5}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x6c}}, 0x0) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r14, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x85}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xffffffff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x40}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x4891}, 0x841) 777.845837ms ago: executing program 2 (id=11744): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000400a20000000000a01030000000000000000010000000900010073797a310000000054000000030a010200000000000000000100ffff0900030073797a320000000028000480080002400000000008000140000000051400030076657468315f746f5f687372000000000900010073797a31000000004c000000050a05000000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d616376746107000000080001400000000514"], 0xe8}}, 0x0) 736.715558ms ago: executing program 1 (id=11745): r0 = socket(0x10, 0x3, 0x0) (async) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000000)=0x1662cd33, 0x4) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000040)=0x100000001, 0x4) (async) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x15, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000018c0)={{r4, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f00000006c0)='%pB \x00'}, 0x20) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000340), &(0x7f00000003c0)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={r5, 0xffffffffffffffff}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r7, 0x0, 0xe, 0x0, &(0x7f0000000000)="40f0538ef047b21fb60068305500", 0x0, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r3, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) (async) r8 = accept4$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x0}, 0x10, 0x80000) (async) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x76}}, 0x8df, 0x54, 0x8, 0x0, 0x4}, &(0x7f00000001c0)=0x98) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000340)={r9, 0x3ff, 0x7}, 0x8) (async) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000180), 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async, rerun: 64) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) (async, rerun: 64) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000009800)=ANY=[], 0x1c}}, 0x4005) 629.599249ms ago: executing program 0 (id=11746): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600}}, 0x20) bpf$LINK_DETACH(0x22, &(0x7f00000000c0)=r2, 0x4) r3 = socket$kcm(0xa, 0x1, 0x106) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x21b4b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x3b}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) sendmsg$kcm(r3, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) recvmsg$kcm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000ac0)=""/4096, 0x1000}], 0x1}, 0x40010141) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r7, 0x84, 0x6d, &(0x7f0000000200)={r9}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000140)={r9, 0x1, 0x1da, 0x2}, &(0x7f0000000180)=0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848160000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x80054) 621.885453ms ago: executing program 1 (id=11747): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400126f6e64000000001400028005000100030000000800150000000000"], 0x44}}, 0x0) 586.303708ms ago: executing program 2 (id=11748): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r1 = syz_genetlink_get_family_id$gtp(&(0x7f00000002c0), r0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x64f2b3277155f64}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000001dc0)=@deltfilter={0x2cec, 0x2d, 0x100, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xb, 0x7}, {0x5, 0xffe0}, {0x1, 0x2}}, [@TCA_CHAIN={0x8, 0xb, 0x10000}, @filter_kind_options=@f_flower={{0xb}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x5}}, @TCA_CHAIN={0x8, 0xb, 0x3}, @filter_kind_options=@f_fw={{0x7}, {0x2c98, 0x2, [@TCA_FW_ACT={0x1788, 0x4, [@m_skbedit={0xc0, 0xf, 0x0, 0x0, {{0xc}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x1}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x5}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x2}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x7}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xc, 0x7}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6}]}, {0x59, 0x6, "01dad64a77d0bf890848283ae5a7431c12ba1b9301dd508f506dfe24c84e5f809610fb818fe355aad7328fc62d0b7f5a166b79b66036e4ce427d11a428657f59d781b7c149d6dea946ae31980b24581f03286e0865"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_police={0x1530, 0xa, 0x0, 0x0, {{0xb}, {0x14f4, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_RATE={0x404, 0x2, [0xc751, 0x8, 0x0, 0x5, 0x101, 0x5, 0x5, 0x2f58fd7a, 0x3, 0x6, 0x4, 0x4, 0x9a, 0x4, 0x3, 0x7fff, 0x3067, 0x8, 0x7fff, 0x5f5, 0x5, 0xac8, 0x2eeff5b2, 0xfffffffd, 0xe6f, 0x10000, 0x6, 0x5, 0xfff, 0x1, 0xfff, 0x6, 0x800, 0x1800, 0x6, 0x2, 0x5, 0x100, 0x9, 0x2, 0xfffffffb, 0x4, 0x6, 0x7d6a, 0x400, 0x80000000, 0x10001, 0x5, 0x6, 0x7, 0x1, 0x1, 0x4, 0xb6, 0x2, 0x7fff, 0x7, 0x4, 0x5b, 0x6, 0xfffffff7, 0xfffffffc, 0xfffffff7, 0x6, 0xff, 0x7fffffff, 0x3, 0x1, 0xcfc, 0x8, 0x1, 0x9, 0x4, 0x1800, 0xffff2eba, 0xf, 0x8, 0x9, 0x7, 0x2, 0xc153, 0xffffffff, 0x8, 0x7, 0xad84, 0x4, 0x8, 0x7, 0x9, 0x5, 0x1, 0x9, 0x5, 0x7fffffff, 0x1, 0xa, 0x2, 0x4, 0x0, 0x0, 0x128, 0x1, 0x1, 0x7, 0x3, 0x3, 0xeb60, 0x9, 0x2, 0x2, 0x3, 0x5, 0x1, 0x5, 0x3, 0x6, 0x6, 0x2, 0x8009, 0x3, 0x1, 0x8000, 0x6, 0xfffffffd, 0x1, 0x7, 0xb54e, 0x2, 0x7d8e, 0x7874249d, 0x1, 0x613, 0x1, 0x8, 0x0, 0xf, 0x6, 0x100, 0x4, 0xc4, 0x2, 0x6, 0x7ef7, 0x1, 0x3, 0x459, 0x200, 0x8, 0xf, 0x0, 0x0, 0x400, 0x4, 0x2000000, 0x20, 0x1, 0x80000000, 0x2, 0x7f, 0x3, 0x0, 0x8, 0x50, 0x3, 0x1, 0x4, 0xffffffff, 0xab, 0x1, 0x2, 0x4, 0x1, 0xc93e, 0x7fff, 0x6, 0xfff, 0x7fff, 0x3, 0x5, 0x10, 0xc88, 0x3, 0x7, 0x8, 0x6, 0x5, 0x3, 0xc, 0x7, 0x8, 0x5, 0x69e, 0x8, 0xf, 0x0, 0x6, 0x10, 0xfffffffb, 0x658, 0x8, 0x19, 0x1, 0x9, 0x6a0a, 0xf, 0x7, 0x80, 0x5, 0x33c, 0x6, 0x3, 0x2, 0x5, 0x8, 0x0, 0x6, 0x5, 0x5, 0x6, 0xc93, 0xeae0, 0x2, 0x4, 0x5, 0x2, 0x2, 0x9, 0x7, 0x2, 0x4, 0x8001, 0x4, 0x2000000, 0x8, 0x0, 0x800, 0xfffffff8, 0xfab, 0x64, 0x400, 0x4, 0x6, 0x9, 0x4, 0x81, 0x0, 0x9338, 0x9, 0x5, 0x4f65, 0x6, 0x1, 0x0, 0xe, 0x1, 0x9]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x1, 0x8001, 0x5e7, 0xb7c, 0x5, 0x5, 0x9, 0x4850, 0xfa0f, 0xffffffff, 0x7c5, 0x9, 0x5, 0x8, 0x7ff, 0x7, 0xffff8000, 0x100, 0xf62, 0xfffffff7, 0x7fff, 0x6f, 0xb, 0xfff, 0xd26, 0x10001, 0x3ff, 0x3, 0x4, 0xf86, 0x0, 0x7, 0x5, 0x1, 0x2, 0xc6a8, 0xef4b, 0x3, 0xe, 0x3, 0x7f, 0xdf0c, 0x9, 0xd, 0xc, 0x9, 0x6, 0xfffffff7, 0xd, 0x1, 0x9, 0x3, 0x4, 0x8, 0x0, 0x5f9, 0xffffffff, 0x7, 0x3, 0x9, 0x8, 0x8, 0x8, 0x8, 0x64d000, 0x5, 0x9, 0x6, 0x6, 0xfffffe00, 0xc7ab, 0x7ff, 0x5, 0x7, 0x40, 0x6, 0x5, 0x1000, 0x3ee3, 0x800, 0x3613, 0x2, 0x7, 0x10001, 0x9, 0xff, 0xffffff5d, 0x101, 0x6a, 0x6, 0x6, 0x0, 0x0, 0x40, 0x8, 0xfffffffd, 0x4, 0x423, 0xfffeffff, 0x0, 0x3, 0x10000, 0xc3, 0x8, 0x9, 0x7, 0x5, 0x4, 0x10, 0x1ff, 0x3, 0x3, 0x2, 0x0, 0x5, 0xffffff96, 0x800, 0xc01a, 0xfffffffd, 0x3ff, 0x3, 0x5, 0xfffffff7, 0x2, 0x40, 0x9, 0x4, 0xc, 0x5, 0xb9c, 0xde, 0x8001, 0x3, 0x1, 0x40, 0x100, 0x9c2, 0x8, 0x2, 0x3, 0x2, 0x81, 0x5, 0x4, 0x1ff, 0x8, 0xff, 0xab, 0x2, 0x9, 0x8, 0x17f, 0x1, 0x8, 0x7, 0x1, 0x5, 0x5, 0x6ba, 0x9, 0x4, 0x6, 0x0, 0x2, 0x9, 0x5, 0x10000, 0x0, 0x2, 0x7f, 0x3, 0x0, 0x7de3, 0xf81b, 0x5, 0x9, 0x0, 0xfffffffc, 0x55, 0x48000000, 0xa, 0xff, 0x1, 0x401, 0x7, 0x7fff, 0x5, 0x0, 0xfffffff2, 0x7, 0x2, 0x7d, 0x8c, 0x7, 0x1, 0x0, 0x2, 0x0, 0x400, 0x8, 0x5, 0x3, 0x9, 0xc9, 0xcf3, 0x6177e439, 0x7ff, 0x9, 0x80, 0x8000, 0xfffffffd, 0xb, 0x3, 0xe, 0xa487, 0x8, 0x7, 0x9, 0x6, 0x1000, 0x1, 0x10000, 0xaf00, 0x3, 0x31c4, 0x4, 0x6, 0xf, 0x8, 0x1, 0x5, 0x6, 0x3, 0x1, 0xfff, 0x800, 0x8, 0x1, 0x80000000, 0x9, 0x3, 0x200, 0x1ff, 0x9, 0xe, 0x4, 0x9, 0xa0000000, 0xff, 0x8, 0x80000, 0x6, 0x250, 0x3, 0x1ff]}, @TCA_POLICE_RATE={0x404, 0x2, [0x8d2, 0x3, 0x29c, 0xe9, 0x7, 0x6, 0x6, 0x5, 0x1, 0x80000001, 0x4, 0x96, 0x0, 0x5, 0x2, 0x9, 0x6, 0x0, 0xf, 0x1, 0x1, 0x7, 0x8, 0x8, 0x1, 0x0, 0x5, 0x1, 0x5, 0x2, 0x80000001, 0x7, 0x6, 0x74c3, 0x5, 0xfffffff9, 0x1, 0x0, 0x489c, 0x7, 0x3, 0x7, 0x9, 0x28000000, 0x9, 0x1, 0x10, 0x80000001, 0x6, 0xfffffffe, 0x1, 0xd7, 0x1, 0x7, 0x0, 0x8000, 0x4, 0x400, 0x1, 0x9, 0x7ff, 0x0, 0x8, 0xc5ae, 0x7fffffff, 0x1, 0x3, 0x4, 0x9, 0x60000, 0x9, 0xffff7fff, 0x1ff, 0x0, 0x800, 0x40f, 0x6, 0xffff, 0x100, 0x1, 0x1, 0xfffffff9, 0x8, 0x1, 0x3, 0x3, 0x223, 0x7, 0x1000000, 0x400, 0x211f, 0x7, 0x8, 0x1, 0x4, 0x1, 0x9, 0x1000, 0x6, 0x5, 0xfffffff5, 0x3, 0x200, 0x1, 0x80, 0x2c, 0x7, 0x9, 0x7fff, 0xfffffffc, 0x2, 0x4, 0x0, 0x3, 0x967e, 0x6, 0x920, 0x10000, 0x7, 0xb, 0x40, 0x0, 0x0, 0x4, 0x0, 0x10001, 0x4, 0x0, 0x2, 0x4, 0x6cfa5325, 0xd1b2, 0x6, 0x1, 0xfffffffb, 0x60, 0x200, 0x7, 0xca, 0x3, 0xa2, 0x262d, 0xc, 0x80000001, 0x7, 0x80, 0x9, 0x401, 0x725, 0xd51, 0x2, 0x3, 0x80000, 0x3, 0x4, 0x1, 0x1, 0x1, 0x1, 0x3, 0xbc, 0xdcc, 0x351, 0xf1f0, 0xee7, 0x9, 0x1, 0x5, 0x6, 0x2, 0x2, 0x59ff157c, 0x87, 0x77, 0xfff, 0xf, 0x5, 0x274, 0x101, 0x0, 0x3, 0x8001, 0x6, 0x3ff, 0x0, 0xffffffff, 0xfffffff9, 0x9, 0x2, 0x0, 0x1, 0xcb4, 0x9, 0x0, 0x6, 0x9, 0x10001, 0x3, 0x27, 0x7, 0x4, 0x8, 0x10, 0x4, 0xff, 0xc, 0x8, 0x0, 0xff, 0x0, 0x8, 0x9, 0x10001, 0xff, 0x0, 0xb, 0x7, 0x5, 0xb44a, 0x595, 0x3025, 0x1ff, 0x1, 0x1, 0x2, 0x3, 0x401, 0x5, 0x598, 0x7, 0x1, 0x6, 0xacc, 0x71c, 0x9, 0x3ff, 0x9, 0x7, 0x10000, 0xfffffffe, 0x7, 0x200, 0xc, 0x8, 0xfffffffc, 0x4, 0x0, 0x6cd, 0x1, 0x2, 0x8001, 0x1, 0x3, 0xfffffffe, 0xda0, 0xfffffffe]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x19a6}, @TCA_POLICE_TBF={0x3c, 0x1, {0x81a7, 0x5, 0x0, 0x4, 0x7ff, {0x1, 0x1, 0x1, 0x4, 0x2, 0x9}, {0x6, 0x2, 0x1, 0x1, 0x3ff, 0x8}, 0x6, 0x0, 0xfff}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3ff}], [@TCA_POLICE_RATE={0x404, 0x2, [0x40, 0x3, 0x10, 0x3, 0xf6, 0x8, 0x400, 0x4, 0x9, 0xdf, 0x5, 0x9, 0x0, 0x101, 0xc96, 0x5, 0x8, 0x2, 0x7ff, 0x6, 0x1, 0x79bf, 0xffffffff, 0x2, 0xbbef, 0x6, 0x101, 0x4e, 0x5, 0x5, 0xbe7, 0xf66, 0x1, 0x8bc, 0x2, 0x400, 0x44b, 0xcce, 0x0, 0x8, 0x2408b917, 0x6, 0x7, 0x5, 0x3, 0x0, 0x0, 0x8, 0x6, 0x8, 0x5, 0xffff, 0x91, 0x9, 0x6, 0xc0000000, 0x7, 0x3, 0x6, 0xfffffffa, 0x0, 0x1ff, 0xe36a6505, 0xe73, 0x3, 0x6, 0xffff, 0x400, 0x2, 0x0, 0xe, 0x4, 0x40, 0x2400, 0xffff469f, 0x10, 0x26, 0xfffffffd, 0x7, 0x200000, 0x9, 0x101, 0x0, 0x4, 0x1ff, 0xffffff81, 0x2, 0x7, 0x200, 0x2, 0x1, 0xffffff01, 0x10000, 0x7, 0x400, 0x7, 0xc8, 0x200, 0xfffffff9, 0x10001, 0x20000000, 0xfffffffe, 0xb, 0x5, 0x9, 0x6, 0x2, 0x3, 0x6, 0xe, 0xc2, 0x4, 0xfffffffd, 0x1ff, 0x2, 0x1, 0x0, 0xfff, 0x7, 0xb045, 0xc, 0x1, 0x13ae, 0xd, 0x7, 0x4, 0x2, 0x17e, 0xa, 0x9, 0x400, 0x6, 0x4, 0x3, 0x2, 0x4, 0x0, 0xa2, 0x5, 0x9, 0x1, 0x9, 0x3, 0xe, 0x1, 0x6, 0x1, 0x2, 0x84, 0x6, 0x1, 0x0, 0x0, 0xe0000, 0xffffffff, 0x800, 0x5, 0x100, 0x6, 0x3, 0x800, 0x8, 0x9, 0xefd, 0x2, 0xd, 0x3, 0x4, 0x6, 0x7d27, 0x0, 0x1, 0x23b, 0x3, 0x4, 0x0, 0x80000001, 0xb, 0xffffffce, 0x0, 0x4, 0x0, 0x0, 0x8e14, 0x18d, 0xf, 0x5, 0xfffffff8, 0x10001, 0xfffffff2, 0x9, 0x0, 0x2, 0x2, 0x5, 0x1, 0x9, 0x8, 0x8000, 0x6, 0x4, 0x2, 0xff, 0x9, 0x3, 0x8001, 0x7, 0xa, 0x3, 0x8, 0x10, 0x1000, 0x74, 0x6, 0x446c, 0x800, 0x8b, 0xe, 0xd, 0xf7, 0xd, 0x7, 0x5, 0x0, 0x7, 0x5, 0x3, 0x93, 0xffff2996, 0x5, 0x5, 0x9, 0x6, 0x1, 0x1, 0xffc, 0x1, 0x5, 0xd, 0x889a, 0x1, 0xffffffff, 0x2, 0x4, 0xffff, 0xf37, 0x8, 0x5, 0x6, 0x8, 0x14a0, 0x0, 0x8000, 0x729, 0x4, 0x10]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x3, 0x0, 0x608a, 0x8, {0x6, 0x1, 0x7, 0x9, 0xff}, {0x5, 0x2, 0xff81, 0x1000, 0x7, 0x4}, 0xf, 0x5, 0x4}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1000}], [@TCA_POLICE_RATE={0x404, 0x2, [0x7ff, 0x7, 0x0, 0xcf, 0xff, 0x0, 0x1, 0x80000000, 0x2, 0x10001, 0x7, 0x8, 0xd, 0x5, 0x3, 0x4, 0x0, 0xd27e, 0x6, 0x5, 0x4, 0x80000001, 0x6, 0x401, 0x2, 0x0, 0x484, 0x4, 0x8, 0x9, 0x8, 0x0, 0x8, 0x8, 0x2, 0x1ff, 0xf, 0x0, 0x81, 0x7fff, 0x6, 0x275e, 0x1, 0x6, 0x2, 0x4104, 0x7, 0xfffffffd, 0xfffffff6, 0x3, 0x2, 0x9, 0xb, 0x7, 0x3, 0x365600f9, 0xff, 0x80000001, 0x2, 0x7fff, 0xfffffff9, 0x7, 0x1, 0x400, 0x9, 0x7, 0x4, 0x8001, 0x7, 0x4, 0x6, 0x1, 0x40, 0x3, 0xff, 0xf, 0x4, 0x1, 0x7, 0xb, 0x6, 0x1, 0xe35, 0xc146, 0x8ac4, 0x9, 0x0, 0x5, 0x5, 0x2, 0x6926, 0x7, 0xc85, 0xf143000, 0xffffffff, 0x4, 0x2, 0x1, 0xeb9, 0xf, 0x3, 0x6, 0x7c3, 0xc58b, 0x6c9efd49, 0x7, 0x8, 0xbf9, 0xdb, 0x2, 0x9, 0x1000, 0x1000000, 0x9, 0xd0, 0x80000000, 0x10, 0x8, 0x0, 0x1512, 0x6, 0x9, 0x3, 0x4, 0xff, 0x7a5, 0xb, 0x9, 0x6, 0x5, 0x0, 0x1, 0x5, 0x10000, 0xac, 0x97a, 0x8000, 0x1c8, 0x9, 0x4, 0x0, 0x1, 0xdc0e, 0x0, 0x9, 0x5, 0xd53b, 0x4ea, 0x7, 0x8, 0x6, 0x0, 0x1, 0x6, 0x3, 0x100, 0x7, 0xfffffffa, 0xfffffeff, 0x80000001, 0xe, 0x1, 0x0, 0xb707, 0x4, 0x1, 0x5, 0x7, 0x2, 0x2, 0x7, 0x9, 0xfffffffd, 0x5e3, 0x100, 0x1000, 0x5, 0x84, 0x0, 0x1, 0x8000, 0x2, 0xe2bd, 0xa307, 0x10001, 0x5, 0x3, 0x0, 0x48, 0xe, 0x1, 0x2, 0x401, 0xffffffff, 0x1, 0x3, 0x8c, 0x4, 0x6, 0x0, 0x63, 0x400, 0x9, 0x0, 0x8e6e, 0xfff0000, 0x4, 0x1, 0xfffffffe, 0xe, 0x10000, 0xe, 0xff, 0xff, 0xf1, 0xf129, 0x7f, 0x6, 0x0, 0x6, 0xf48, 0x200, 0x80000000, 0xe20e, 0x61, 0x3, 0x0, 0x56c1, 0xc, 0xd9eb, 0x9, 0x3, 0x3, 0x8, 0x8, 0x30a, 0x9, 0x3, 0x1, 0x1, 0x5, 0x100, 0x3, 0x7, 0x0, 0xfff, 0xfffffffe, 0x6, 0xf22, 0xe000, 0x7, 0x200, 0xfa8e, 0xffffffff, 0x5, 0xea]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7fffffff}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_RESULT={0x8, 0x5, 0x32dafdeb}]]}, {0x12, 0x6, "225562827d58db53d9d3d60e14f7"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_connmark={0xd4, 0xf, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xffffffff, 0x9, 0x20000007, 0x38, 0x9975}, 0x80}}]}, {0x85, 0x6, "88ec08ac8bc443757940f442ed224e0f71021b54aefadc445f31c935778def9a832b617f9ec7114294bd1f124f6a97dc00661d97ad379372dff249b77b3af831eeb268e797d101cbf31e518e5d19af790914d61d7317d0a59636cf6a2b5b736a7691d24a068d33ff33c4c8fd6ad4b72eb0d3e2ce000ba8bf58ab0ae9c3edca751b"}, {0xc}, {0xc, 0x8, {0x3, 0x4}}}}, @m_gact={0xc0, 0x12, 0x0, 0x0, {{0x9}, {0x10, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d39, 0x2}}]}, {0x86, 0x6, "cd4c0407ef57a455b1284d1795d2e4a0fd1ef42faad7eee21f297d5f957dc64ce8806be2c90959456b49138a01df3692bd33a259d6bfa7ca4d9202cc405190eb11890b88cea8218c254a741af140f1397624820398575ba56f19745fad1b72958ac7f133999be1790353259555db777be2be2c3464727865df6fcb4831e0eecb47b8"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_FW_MASK={0x8, 0x5, 0xffffffff}, @TCA_FW_POLICE={0x484, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_RATE={0x404, 0x2, [0xd, 0x3, 0xc0dc, 0x3, 0x6, 0xfff, 0xbf0d, 0x6, 0x2000000, 0x6, 0x3, 0x0, 0x300, 0x8, 0xa8d, 0x40, 0x5, 0x7d, 0x2, 0x5, 0x6a49, 0x8, 0x97, 0x1, 0x0, 0x4, 0x9, 0x0, 0x7, 0x4, 0x4, 0x0, 0x6, 0x5, 0x10, 0x6, 0x9, 0x21f, 0x4, 0x9, 0x6292a319, 0x200, 0x57a, 0x3ff, 0x3, 0x7, 0x9, 0x14, 0x80, 0x6, 0x3, 0xf, 0x6, 0x7dd6, 0x2, 0x31, 0xe57, 0x3, 0x3, 0x400, 0x0, 0x8, 0x80000001, 0x4, 0x949b, 0x100, 0x5, 0x0, 0xb8, 0x36e63635, 0xfffffffb, 0xfffffff8, 0x7, 0x5, 0x4, 0x1ff, 0x1f, 0x2443, 0xb, 0x8, 0xff, 0x7, 0x0, 0x7, 0x8, 0xfffffff9, 0xc71, 0x1436, 0x101, 0x8, 0x3, 0x2, 0x6, 0x8, 0x3, 0x4, 0x6, 0x3, 0xd, 0x0, 0x7, 0x7, 0x7, 0x3, 0x2, 0x7c56, 0x8001, 0x9, 0x7, 0x4, 0x3, 0x2, 0xc, 0x1, 0x9faf, 0x3, 0x3, 0x3, 0x8, 0x9, 0x4, 0x8, 0xf115, 0x3, 0x8000, 0xfffffffd, 0x4, 0x0, 0x3, 0x7, 0x4, 0x2, 0x10001, 0x1, 0x0, 0x3, 0xf, 0x6, 0x401, 0x5f17e1e2, 0xdc35, 0x6, 0x7, 0x7ff, 0x0, 0x7f, 0x3, 0x9cb0, 0x814, 0x542b, 0x1000, 0xb20, 0x1, 0x12a9, 0x5, 0x7fff, 0x8, 0x7, 0x9, 0x4, 0xd4, 0x3, 0xe, 0xc5, 0x0, 0xfff, 0x3, 0x2, 0x200, 0x1, 0x3, 0x4, 0x73, 0x1, 0x1, 0x682, 0x3, 0xfffffffe, 0x7, 0x8614, 0x64900869, 0x2, 0x10, 0x6, 0xd4fb, 0x7, 0x7, 0xcb, 0xd6a7, 0xc, 0x1, 0x45, 0x40, 0x5, 0x0, 0x800, 0x5, 0x5, 0x2, 0x6, 0x6, 0xa, 0x1, 0x7d30d917, 0x1, 0x4, 0x1, 0x1, 0x2, 0xff, 0x8, 0x2, 0x8, 0x8, 0x7, 0x40, 0x1, 0x3, 0x9, 0x7f, 0x8001, 0x3, 0xf9b2, 0x7, 0xe, 0x800, 0x7ff, 0x1134, 0x6, 0x9, 0x5, 0x1, 0x1ff, 0xd, 0xb, 0x3, 0xcf5f, 0x67f, 0x0, 0x44b, 0x84c, 0x47, 0x8, 0x4, 0x6, 0x5e44, 0x4, 0x4, 0x8, 0x4, 0x7, 0x7ff, 0x5, 0x8, 0x1, 0x8]}, @TCA_POLICE_RATE64={0xc, 0x8, 0xe}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7fffffffffffffff}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2f1a}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfa}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x20000000, 0x6, 0x6, 0xffff, {0x8, 0x2, 0x9, 0x7, 0x1, 0x5}, {0xdc, 0x1, 0xa, 0x3, 0x9, 0xfffffff8}, 0x8, 0x1, 0x6}}]}, @TCA_FW_POLICE={0x106c, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x8d66}, @TCA_POLICE_RATE={0x404, 0x2, [0xa, 0x4, 0xfffff559, 0x800, 0x0, 0x9, 0x9a84, 0x3, 0x5, 0x1, 0xa, 0xffffffff, 0x4, 0x3, 0x4, 0x9, 0x3b, 0xe6cc, 0xffff, 0x5, 0x7f, 0xc76d, 0x100, 0xb4, 0x1ff, 0x120, 0x8001, 0x3e808cc8, 0x7fffffff, 0x3, 0xfffffffd, 0x4b4e3d30, 0x10, 0x3, 0x3, 0x3, 0x6, 0x8001, 0xc70c, 0xffff, 0x1, 0x7, 0x1, 0x401, 0x80000001, 0x4, 0x2004, 0x6, 0x401, 0x2, 0x8, 0x1, 0x0, 0x2, 0x83, 0x2, 0x7, 0x101, 0x7, 0x9009, 0xf4, 0x6, 0x4, 0x1398cb9d, 0xa, 0x88, 0xa, 0x7511, 0x0, 0x4, 0x0, 0x7f, 0x3fe0000, 0x5, 0x800, 0x7, 0xfffff4f9, 0x7c, 0x84, 0x6, 0x2, 0x3, 0x800, 0x100, 0x3, 0x1, 0x4067, 0x7f, 0x3, 0x3, 0xff, 0x3be, 0x0, 0x0, 0x2, 0xcade, 0x6, 0x4, 0xffffffff, 0x9, 0x8b5, 0x0, 0x7f, 0x2, 0x80000001, 0x5, 0x1000, 0x6, 0xf, 0xfffffff7, 0x2, 0x2, 0x2, 0x4, 0x3, 0x1, 0x2, 0x3, 0x1, 0x1ff, 0x81, 0x926a, 0x9, 0x6, 0xc5d, 0xfffffffd, 0xff, 0x4, 0x100, 0x1, 0x41ff, 0x7, 0x10001, 0x0, 0x2, 0x8, 0x9, 0x101, 0x5, 0x10001, 0x63e4, 0xcb, 0x6, 0x400, 0x4, 0xfffffffb, 0x5cd800ea, 0x7, 0xf93, 0x4, 0x66a888ed, 0x1000, 0x2, 0x7fffffff, 0xe, 0x5, 0x2, 0x1, 0x0, 0x6, 0x52d8, 0x9e, 0x9, 0x3, 0x9, 0xa2, 0x4, 0x3, 0x6, 0xe, 0x4, 0x8, 0x4, 0x10, 0xfffffff8, 0x2, 0x3, 0x5, 0x9, 0x1000, 0x4, 0xf611, 0x0, 0x9, 0x9, 0x0, 0x7, 0x2, 0x2, 0x4, 0xd05, 0x0, 0x7ff, 0x4, 0x2, 0xfffffffc, 0x5, 0xbc9, 0x7f, 0x8000, 0x2, 0xfff, 0x4, 0x4, 0xfffffff8, 0x133, 0x3, 0x9, 0xffff, 0x1, 0x7, 0x200000, 0x10001, 0xffffffff, 0x8, 0xa3, 0x8, 0x10, 0x1ff, 0x7, 0x1, 0xe4, 0x3, 0x1, 0x2, 0x8, 0x1, 0x3, 0x5, 0x4, 0x60000, 0x2, 0x1, 0x200, 0x8, 0x7ff, 0x200, 0x6cb7, 0x1d6, 0xfffffffd, 0x9, 0x2, 0x5, 0x1, 0x2, 0x9, 0x4, 0x9, 0x6, 0x9, 0x3, 0x7, 0x8, 0x2, 0x4, 0x18f]}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x8, 0x80, 0xd, 0x1, 0x4, 0x101, 0x68, 0x6, 0x0, 0x9, 0xfffffff7, 0x7fffffff, 0x80000001, 0x9, 0x80, 0xc9da, 0x4, 0x1d, 0xfffffeff, 0x6b, 0x1, 0x1000, 0x6, 0x3, 0x3, 0x8001, 0x5, 0xf1, 0x5, 0xe3, 0x7fffffff, 0x1, 0xb89, 0x101, 0x0, 0x85d4, 0x6a, 0x7, 0x8001, 0x6, 0x5, 0x5, 0x80000001, 0x4, 0x6, 0x7ff, 0x8001, 0x3, 0x3ce23be6, 0x2, 0xcdee8000, 0x20, 0x0, 0x9d59, 0x200, 0x9, 0x9, 0x7, 0x1, 0x100, 0x3, 0xfffffffe, 0x9, 0x5, 0x5, 0x2, 0x9, 0x5, 0x3, 0x2a4, 0x9, 0x40000000, 0x6, 0x50, 0x0, 0x8, 0x9da, 0x4, 0x5, 0x985, 0x101, 0x8, 0x0, 0x3, 0xf9a, 0x757, 0x2, 0x2, 0x7, 0x3, 0x2262b371, 0x6041, 0x6, 0x401, 0xc, 0x10000, 0x0, 0x7, 0x5, 0x4, 0x0, 0x9, 0x4cfe, 0x401, 0x80000001, 0x2, 0x6, 0x9638, 0xb05, 0x2, 0x9b, 0x36, 0xa, 0x7, 0x1, 0x7, 0xffffffff, 0xfff, 0x4, 0x76, 0x2, 0x6, 0xc, 0x30, 0x8, 0x38a, 0x6, 0x40, 0x8, 0x9, 0xd, 0x2, 0x1, 0xfffffff4, 0x5, 0x3, 0x6, 0x400, 0x0, 0x14088acd, 0xfffffeff, 0x9, 0x76, 0x2, 0x6, 0x4, 0xb, 0x9, 0x2, 0x7, 0xded7, 0x0, 0x1000, 0x6, 0x100, 0xa, 0x3, 0x5, 0x0, 0x0, 0x1, 0x7fff, 0x3, 0x2, 0x7, 0x7, 0x7, 0x35f7, 0x80, 0x5, 0x6, 0x8001, 0x3, 0x3, 0x1, 0x0, 0x4, 0x4661, 0x5, 0x1ff, 0xc4, 0xc, 0x200, 0x3, 0x1, 0x4, 0xfffffffb, 0x7, 0xa899, 0x80, 0x8, 0x0, 0xfb8, 0x3, 0xfffffffb, 0x8, 0xc, 0x6, 0x10001, 0x6, 0x8, 0xffffffff, 0x200, 0x6, 0xe46041ac, 0x80, 0x6, 0xc, 0x5, 0x5, 0x6, 0x0, 0x351, 0x1, 0x400, 0xfb43, 0x2, 0x57, 0xfffffffe, 0x6, 0x7fff, 0x81, 0xd, 0xa5fc, 0x1, 0x5c35, 0x8, 0x7, 0x7, 0x7fff, 0x2, 0x800, 0xd, 0x5, 0x2, 0xfffffffd, 0x63, 0x0, 0x2, 0x2e08, 0xffffe556, 0xc17, 0xffff, 0xe0, 0x3, 0xf618, 0x3, 0x4, 0xfff, 0x1c0, 0x0, 0x6, 0x7d2, 0x7, 0x8]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfce5}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x2, 0x6, 0x7, 0xfffffff8, {0x0, 0x1, 0x5, 0x8, 0x20b, 0x7}, {0x3, 0x0, 0x8, 0x6, 0x9, 0x800}, 0x6, 0xa1, 0x3}}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7c, 0x2a, 0x3, 0x5, 0xf, 0x2, 0xc, 0x7fffffff, 0x4, 0x3, 0x3, 0x0, 0x1956f5f8, 0x0, 0x0, 0x3f, 0x4, 0x578, 0x1ff, 0xa61d, 0x2, 0x5, 0x2, 0x3, 0x2, 0x2, 0x400, 0x7, 0xe, 0xe7c, 0xa4a3, 0x6, 0x101, 0x8, 0xfffffff4, 0x8, 0x5, 0x116d48d1, 0x8, 0x7fffffff, 0x1, 0x100, 0x9, 0x2, 0x8, 0x2, 0x5, 0x400, 0xfffffffc, 0x8a, 0x3ff, 0xffff, 0x7, 0x9, 0x3d, 0x0, 0x3, 0xd5, 0x800, 0x5cc, 0x40, 0x6c, 0x3, 0x4, 0x7, 0x39, 0xadff, 0x8, 0x6, 0x4, 0x4, 0x110a6c3, 0x7, 0x8, 0x8, 0x0, 0x4, 0x8, 0x1000, 0x1, 0x1, 0x0, 0x0, 0x585, 0x0, 0x3, 0x72, 0x6, 0xd, 0x7, 0x2, 0x4, 0x1b7e07db, 0x2ef, 0x2, 0x3, 0x10000, 0x56ee, 0x2, 0xa, 0x3, 0x1, 0x5, 0x6, 0x7, 0x101, 0x4, 0x5, 0x95, 0x114, 0x966, 0xd, 0xb, 0x94, 0x81, 0x2cc, 0x6, 0x9, 0x0, 0x4, 0xfffffffa, 0x1, 0x9, 0x5, 0x8, 0x4, 0x4, 0x10001, 0xaf, 0x9, 0xc, 0x4, 0x2, 0x950, 0xc, 0x8, 0x1, 0x3, 0x200, 0x100, 0x8, 0xff, 0x6, 0x10, 0x9, 0x6, 0x1d45, 0x1, 0x80, 0x57, 0x3, 0xffffff68, 0x0, 0x4, 0x1, 0xc435, 0x4, 0x50e9, 0x2, 0x9, 0x0, 0x1, 0x7ff, 0x3, 0xe8, 0x1, 0x0, 0xffffffff, 0x9, 0x2, 0x8, 0x1fe000, 0x8, 0x9, 0x0, 0xb0, 0x3, 0x4, 0x4, 0x10, 0x9, 0x2, 0x0, 0x0, 0x1f, 0x5, 0xf, 0x0, 0x0, 0xa, 0x8, 0x417f, 0x8694, 0x0, 0x4, 0x7, 0x5, 0x7, 0x0, 0x4, 0x5, 0x200, 0xffffffff, 0x5ad3, 0xfffffffe, 0x5, 0xff, 0x7, 0x8, 0x7, 0x2, 0x8, 0x3618, 0x2, 0x3, 0x9647, 0x7fffffff, 0xd0e, 0x3, 0x6, 0x7fffffff, 0x30, 0x3, 0x8, 0x7, 0x50, 0x8, 0x7fff, 0x0, 0x40, 0x5, 0xb, 0x7, 0x6, 0xffff8aa8, 0x0, 0x2, 0x2, 0x9, 0x8, 0x3, 0x401, 0x6, 0x4, 0x6eb, 0x4, 0xcc15, 0x8001, 0x2, 0x4, 0x0, 0x80000001, 0x10, 0x5, 0xfffffeff, 0x44a9c87e]}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x3, 0x6, 0x1ce, 0x7, 0x4, 0x0, 0x3, 0x8, 0x2, 0xffffffff, 0x1, 0x8, 0x2, 0xe7c, 0x1bc, 0x0, 0x7, 0x800, 0x6, 0x7fff, 0x0, 0x1, 0x2, 0x3, 0x0, 0xe56, 0x8, 0x3, 0x2c, 0x2, 0x1f6b, 0x9fd6, 0x7, 0x8, 0x9, 0x253, 0x9, 0x6, 0x1, 0x8, 0x0, 0x2, 0x3, 0x6, 0xfffffffb, 0x6, 0x2, 0x14, 0xa, 0x4, 0x9f94, 0x6, 0x1000, 0x9, 0x0, 0xfffffff7, 0x8, 0x3, 0x8a8, 0x0, 0x87ef, 0x5, 0xc, 0xe, 0xdbca, 0x0, 0x1, 0x3, 0x7, 0x200, 0x7fffffff, 0x6, 0x5, 0x1, 0x3, 0x4, 0x1, 0x8000, 0x1, 0x6, 0x800, 0xc, 0x400, 0x8000, 0x8, 0x9, 0x40, 0x34e8, 0x7, 0x5, 0xef, 0xfffffffe, 0x2, 0xfffffffd, 0x2, 0xe, 0x6, 0x8, 0x7, 0x7, 0x1, 0x2e, 0x7f, 0x1, 0x61, 0x2, 0xfffffffa, 0x1, 0xd, 0x400, 0x0, 0x6, 0xa29, 0x4, 0x6, 0x1000, 0x8, 0x0, 0x4, 0x7, 0x1000, 0x0, 0xffff20c9, 0x489, 0xb6e, 0xaf99, 0xffff785f, 0x5c, 0x4412, 0x3, 0xbfc4, 0x6, 0x6, 0x9, 0x3, 0xfe1, 0x2, 0x92, 0x7, 0x23d2, 0x7, 0x5, 0x18c1491e, 0x0, 0x6, 0x6, 0x2, 0x1, 0x9, 0x6, 0x80000001, 0x200, 0x100, 0x1, 0x692, 0x3, 0x51, 0x7, 0x5, 0x15f, 0x2, 0x5, 0xfffffffb, 0x8, 0x2, 0x8, 0xff, 0x5a5c, 0x3, 0xf2d4, 0x9, 0x0, 0x800, 0xffff7fff, 0x35d, 0x5, 0x3, 0x1, 0x100, 0x6, 0x2, 0x81, 0x2, 0x3ff, 0x0, 0x2, 0x3bbb2c03, 0xfff, 0x2, 0x782131fe, 0xfffffffa, 0xb3b8, 0x4, 0xffffff00, 0x100, 0x8, 0x40, 0x80000001, 0x22, 0x401, 0x1, 0x2, 0x101, 0x3, 0x0, 0x4, 0x4, 0x3, 0x81, 0x7, 0x9, 0x3, 0x2, 0x7, 0x3ff, 0xfffffff6, 0x1, 0x80000000, 0x7, 0x492, 0x7, 0x8, 0x401, 0x4, 0xab3, 0xf8b, 0x4, 0x7, 0xffffffff, 0x6, 0xc4ec, 0xba46964, 0xe7, 0xa, 0x2, 0xf, 0x5, 0x7, 0x1888, 0x4, 0x2, 0x2, 0x7, 0x0, 0xea0, 0xfff, 0x100, 0xfffffc00, 0x8, 0x8000, 0xfffffff9, 0x9, 0x2, 0x4, 0xd87]}]}, @TCA_FW_INDEV={0x14, 0x3, 'veth0_macvtap\x00'}]}}]}, 0x2cec}, 0x1, 0x0, 0x0, 0x404c000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newqdisc={0x90, 0x24, 0x4ee4e6a52ff56541, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x60, 0x2, {{}, [@TCA_NETEM_LOSS={0x4, 0xd, 0x0, 0x1, [@NETEM_LOSS_GI={0xd}, @NETEM_LOSS_GE={0x14}, @NETEM_LOSS_GI={0x0, 0x1, {0x4, 0x9, 0x8de3, 0x56b, 0x3}}]}]}}}]}, 0x90}}, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)={0x60, r1, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_LINK={0x8, 0x1, r4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_MS_ADDR6={0x14, 0xc, @empty}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_LINK={0x8, 0x1, r7}]}, 0x60}, 0x1, 0x0, 0x0, 0x4010000}, 0x408c0) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe}, 0x48) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000006d00000095"], &(0x7f0000000500)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r8, &(0x7f0000000540)={0x0, 0x1f, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r8], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 481.352375ms ago: executing program 4 (id=11749): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x14}]}, &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x21}, 0x90) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async, rerun: 64) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (rerun: 64) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x10}) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f00000000c0)=0x5) 479.106055ms ago: executing program 1 (id=11750): socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x15, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffe49}, 0x42) 433.719577ms ago: executing program 5 (id=11751): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async, rerun: 64) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x8c}}]}, &(0x7f0000001840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x4c11a, 0x1006}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x40440a0) (rerun: 64) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f00000001c0)={0x1, 0x8000000000000001, 0x1, 0x0, 0x0, [{{r0}, 0xddd7}]}) (async) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) r5 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000140)={@dev, @loopback}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newlink={0x2b0, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_VF_PORTS={0x280, 0x18, 0x0, 0x1, [{0x5c, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "7b6d2e47eb3a96f75ef938e073c7ad6e"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xd}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x5}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "c2fc5c38fc53170953f9e1343d50aa70"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "b2e3830837e19e3b060fe5b743420ecf"}]}, {0x74, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "4d7d3b6c12fbe0bd3162eab037f5b247"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "710cb26b4cafaa5f3446a1b1ff929607"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x81}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x9}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "66418d008c9f985590054122f3931f36"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "7ca90407a9b3ec53898e59402517c837"}, @IFLA_PORT_PROFILE={0xe, 0x2, '.%{))+*\a%\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x60}]}, {0x38, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x6bc}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "45c3f1adaa313fa84e7d28d47a109bdb"}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}]}, {0x60, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "310cf3dc23df76cdc5a950a1fe4525ce"}, @IFLA_PORT_PROFILE={0x8, 0x2, '\xd5[}\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "41f9bc9eba78d8eeee8a4d91a7896f01"}, @IFLA_PORT_PROFILE={0x8, 0x2, 'GPL\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x3c}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "d774738574ab3171d375f24c6115556f"}]}, {0x14, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x8, 0x2, 'GPL\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x85}]}, {0x28, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x6c}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "37b637082810f7d2a851553f9ae325ea"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x9}]}, {0x50, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x4}, @IFLA_PORT_VF={0x8, 0x1, 0xbce}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "de6c09a8cb5bd803ad94d67c4d8268da"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "885db8dbd3ce044ae19cd967c2c66bad"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "bc23d663e8c648edf93a6f87be78b44f"}]}, {0x7c, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x4}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "0b80dda73daed4a2a03c4d22154db2e8"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "fff50e076efa627fdc8169a289cbffe5"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x3}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xf6}, @IFLA_PORT_PROFILE={0x7, 0x2, ':]\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "bbf87cbc55496d78e25ba990a42324d8"}, @IFLA_PORT_VF={0x8, 0x1, 0x2}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "5fd6c476e0ba6aa374c8c7adc5233bef"}]}]}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x2b0}}, 0x884) 392.556709ms ago: executing program 0 (id=11752): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)={@multicast1, @local, 0x0}, &(0x7f0000000040)=0xc) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB="10010000100007000000000000000000ff020000000000000000000000000001e00000020000000000000000000000006e200000000000000200000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc01000000000000000000002fb6f20e163a7961b8edfcc755687600000000000004d65f000000fc00000000000000000000000000000010000b0000000000ff0300000000020000000000000000000000000000000000001000000000060000000000000000000000000000000000f0ffffffffffffff0800000000006af30000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a00020074000000000000000b000e00fe800000000000a8fc0f2412d84d1ddf5617bc8b4e96e3f617d4ba37d37746c6f1dc21f88b0f1c6d33b827e5791e2c7ec0da6497730e617b3b9f881e624ecec7e72a21b313a3e26998e6a1573031b8cf5e06eb9966a20cd06e3e194fd57cec460493bcec414353d989ef4be0cf0c406b588c3de0532eed801932dfe12ba8ea621b7e6a355ca8ec52a7957cae5bd1fd098da6b3493b57121e39e1ba6a0bcbcb1321f5b77c9bf073cbaefd21533ac201420d57901214df7ccfb9594c402ee941ea393475ad70f9f0c8d66a8e1c5654a76be6f97f54ac6653a1a6562f106b26ca698bf8d3ce54bfa06daa269a28b074a6006c9d76390c2c329618cb83abadf9e5f2428284711bc76b566f8ec5b658572e656a8b64594f4bcbe191e320712da41e2f8de01f1b2aa110932209e69ca406c2b2aa814b4db0ec4b9960f3eb827973a38ac05e56d423015f2c2233e14c77c91f94ac2d7cf2be3a84a3760a0ee4dd6cd8a8784e37fd3b423340d1b390fd86548055a8b844101a7456491e245e6cf8dd0740acce6a3156ff6d219395c8", @ANYRES32=r1, @ANYBLOB="01000000"], 0x110}}, 0x20000800) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r2) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r4, 0x48212b8952c3aff5, 0x70bd25, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x700) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r4, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4b}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8040}, 0x4000000) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000280)={{0x0, 0x4, 0x3, 0x1000, 0x1, 0x7, 0x10000, 0x9, 0x8, 0xa9, 0x60, 0x200, 0x3, 0xffffffff, 0x4}, 0x18, [0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000000400)={{r5, 0xfffffffffffffffb, 0x8be, 0x6, 0x7, 0x4, 0x8, 0x9, 0x1, 0x2, 0x1134f0e3, 0x7363c9f6, 0x8, 0xffffffffffff8001, 0x5}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000080)) 325.554248ms ago: executing program 1 (id=11753): r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f00000001c0)="010000000200060000071a80010061cc", 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r3, 0xff09, 0x110c2300fe) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000100)={r0, &(0x7f0000000000)=']^\x00', 0x22202, &(0x7f0000000040)={@align=0x5, {0x0, 0x2, 0x6, 0x5}}, 0x2b54, &(0x7f0000000080), &(0x7f00000000c0)=0x1}) write$rfkill(r4, &(0x7f0000000140)={0x400, 0x0, 0x1, 0x0, 0x1}, 0x8) close(r0) preadv(r0, &(0x7f0000000280)=[{&(0x7f0000000200)=""/92, 0x5c}, {&(0x7f0000000440)=""/209, 0xd1}], 0x2, 0x8, 0x5) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast1, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000180)=0xe8) ioctl$SIOCAX25DELUID(r4, 0x89e2, &(0x7f0000000300)={0x3, @bcast, r5}) 324.271353ms ago: executing program 2 (id=11754): r0 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xffeffffe}, {0x16, 0x0, 0x0, 0xfffffffc}]}, 0x10) sendto$inet6(r0, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 273.549074ms ago: executing program 5 (id=11755): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@empty, 0x0, 0x56, 0x4e23, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x100000002, 0xfffffffffffffff6, 0x2000000, 0x1, 0x8}, {0x7, 0x0, 0x4}, 0x932, 0x0, 0x1, 0x0, 0x3}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d4, 0x6c}, 0xa, @in=@empty, 0x2, 0x4, 0x0, 0x0, 0xfffffffc, 0x8, 0x4}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000900)={&(0x7f0000000740), 0xc, &(0x7f00000008c0)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}}, @NFT_MSG_DELSET={0xe4, 0xb, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x8}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x46}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3e}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_EXPRESSIONS={0xa8, 0x12, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}, {0x54, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x6}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_XFRM_SPNUM={0x8}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x6}, @NFTA_XFRM_KEY={0x8}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}, {0x24, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x25}]}}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}]}]}, @NFT_MSG_DELTABLE={0x1c, 0x2, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0x13c}, 0x1, 0x0, 0x0, 0x48c0}, 0x4000000) connect$bt_l2cap(r0, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x2, 0x0, 0x0, {[@sack_perm={0x4, 0x2}]}}}}}}}}, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000dc0), r4) sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x20, r5, 0x1, 0x70b92c, 0x25dfdbfa, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x44051}, 0x20000014) setsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000000)={0x0, 0xa, 0x4, 0x9}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x1d, 0x11, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x699, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_val={0x18, 0x9, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='syzkaller\x00', 0x800, 0x49, &(0x7f0000000280)=""/73, 0x1e00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000300)={0x3, 0xa, 0x6, 0x6}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000340)=[{0x4, 0x1, 0x3, 0x1}, {0x4, 0x5, 0x6, 0x1}], 0x10, 0x20000000}, 0x94) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000580)={0xffffffffffffffff}, 0x4) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f00000006c0)={r7, &(0x7f00000005c0)='-\x00', 0x400, &(0x7f0000000600)={@align=0xef2, {0x6, 0x3, 0x7, 0x1}}, 0xfff, &(0x7f0000000640), &(0x7f0000000680)=0x75a}) r9 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000700)='tasks\x00', 0x2, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000004c0)=@o_path={&(0x7f0000000540)='./file0/file0\x00', r8, 0x4000, r9}, 0x18) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a000100000000000000000081008000000000000000000019169fa4c6bbf0f09f2514000200000000000000"], 0x30}}, 0x0) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000040000701feffffff00000000017c0000040042801400018006000600800a000008001400", @ANYRES32=0x0, @ANYBLOB="040002"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r12 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000001200), 0x2, 0x0) write$6lowpan_control(r12, &(0x7f00000012c0)='connect aa:aa:aa:aa:aa:11 2', 0x1b) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c00000002060102000000000000000000000000095f6c93795d502fbdb7adc8e59c9d501800020073797a310000000005000100071f9a00000005000500110000000c00078008001240ffffffff"], 0x4c}}, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000500)=0x9) 251.706896ms ago: executing program 0 (id=11756): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000001c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100ffffffff0000000001000000100007800c00018008000100", @ANYRES32=r2, @ANYBLOB="0c0005006c010000000000000c000200ff7f000000000000400007800c00018008000100", @ANYRES32=r2, @ANYBLOB="0c00018008000100", @ANYRES32=r2], 0x7c}}, 0x20000000) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x48814}, 0x14000012) sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg$unix(r4, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002a00)=""/4100, 0x1004}], 0x1}}], 0x1, 0x10000, 0x0) 185.561677ms ago: executing program 4 (id=11757): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000800), r0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000300)={0x1f, 0x3, 0x3}, 0x6) close(0xffffffffffffffff) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x1}, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, 0x0, 0x0) write(r3, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x5, 0x0, 0x0, 0x2}, 0x10}, 0x1, 0x7}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000ff0f01040001008000000040b0000000", @ANYRES32=0x0, @ANYBLOB="0003000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x884) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r3) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, r1, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x800) socket$igmp6(0xa, 0x3, 0x2) 179.629194ms ago: executing program 2 (id=11758): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400000010000100000000fffffffffffffff50a20000000000a01030000000000000000010000000900010073797a310000000054000000030a010200000000000000000100ffff0900030073797a320000000028000480080002400000000008000140000000051400030076657468315f746f5f687372000000000900010073797a31000000004c000000050a05000000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d616376746107000000080001400000000514"], 0xe8}}, 0x0) 178.954266ms ago: executing program 1 (id=11759): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0xfffffffe, 0x25dfdc01, {0x2, 0x0, 0x0, 0x36, r5}, [@IFA_BROADCAST={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x4}, @IFA_RT_PRIORITY={0x8, 0x9, 0x6}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x1}, @IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3e}}, @IFA_RT_PRIORITY={0x8, 0x9, 0x103}]}, 0x48}, 0x1, 0x0, 0x0, 0x40020}, 0x20004000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$CAIFSO_REQ_PARAM(r6, 0x116, 0x80, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r6, 0x8983, &(0x7f00000000c0)) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket(0x400000000010, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newtfilter={0x88, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0xb, 0xfff3}, {}, {0x8, 0xfff1}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x2, 0x3, 0x6, 0x2}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x80) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x4) sendmsg$kcm(r8, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000780)="f058050000007f8f", 0x300}], 0x2}, 0x5) syz_emit_ethernet(0x126, &(0x7f0000000880)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="7002000090780000fe08f9893b2e3b53"], 0x0) 141.422655ms ago: executing program 5 (id=11760): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000140)) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r1, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r2, 0x4) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xc9, '\x00', 0x0, r1, 0x0, 0x4}, 0x50) r4 = socket(0x2, 0x2, 0x1) bind$alg(r4, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-neonbs\x00'}, 0x58) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000500)={0x0, @in6={{0xa, 0x4e22, 0xd, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}}, [0x81, 0x6, 0x3, 0x3ff, 0x2, 0x3b800000000, 0xfffffffff0000000, 0xfccc, 0x33a59937, 0x9, 0x100000000, 0x4, 0x0, 0x8, 0x5]}, &(0x7f0000000000)=0x100) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f00000000c0)={r5, 0x4}, &(0x7f00000003c0)=0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x7, &(0x7f0000000040)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xb7, 0x40000}, [@map_fd={0x18, 0x5, 0x1, 0x0, r3}, @call={0x85, 0x0, 0x0, 0x2b}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xca, &(0x7f0000000180)=""/202, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, r2}, 0x94) 69.771048ms ago: executing program 2 (id=11761): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x36}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x70) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendto(r1, 0x0, 0x0, 0x2, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000068000100030000000000008000000000000000000e0002"], 0x28}}, 0x40000) 17.126503ms ago: executing program 5 (id=11762): r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04", 0x13}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) sendto$inet6(r0, &(0x7f0000000000)='.', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 0s ago: executing program 2 (id=11763): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x0, @any, 0x4}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000280)={0x3, 0x9, 0xfffd, 0x4}, 0xc) syz_emit_ethernet(0xa8, &(0x7f0000000140)={@local, @multicast, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "dd69bf", 0x72, 0x2b, 0x0, @private0, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8100, 0x0, 0x0, [0x7]}, {}, {}, {}, {}, {0x8, 0x6558, 0x0, "3bc513a126566a793b9e0800000001d27b39d7a03caaff6573f0b04c6a2e00000000000000fcffffff001720"}}}}}}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(r2, 0x28, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="800002010800000008001b000000000008000d"], 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x20004000) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r5, {0xffff}, {}, {0x2, 0x6}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x81, '\x00', 0xfffff000, 0x2f, 0x3, 0x581}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x40054) kernel console output (not intermixed with test programs): 74] erspan0: entered promiscuous mode [ 825.844533][T10574] macvtap1: entered promiscuous mode [ 825.849963][T10574] macvtap1: entered allmulticast mode [ 825.865939][T10574] erspan0: entered allmulticast mode [ 825.887657][T10578] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 825.896565][T10578] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 825.914860][ T5826] Bluetooth: hci3: command 0x0405 tx timeout [ 826.040561][T10586] gretap0: left allmulticast mode [ 826.060021][T10586] gretap0: left promiscuous mode [ 826.073474][T10586] bridge0: port 3(gretap0) entered disabled state [ 826.085649][T10586] bridge_slave_1: left allmulticast mode [ 826.091533][T10586] bridge_slave_1: left promiscuous mode [ 826.117490][T10586] bridge0: port 2(bridge_slave_1) entered disabled state [ 826.147597][T10586] bridge_slave_0: left allmulticast mode [ 826.161087][T10586] bridge_slave_0: left promiscuous mode [ 826.172642][T10591] netlink: set zone limit has 4 unknown bytes [ 826.197079][T10586] bridge0: port 1(bridge_slave_0) entered disabled state [ 826.255809][T10597] netlink: 'syz.5.10027': attribute type 29 has an invalid length. [ 826.298198][T10594] netlink: 'syz.5.10027': attribute type 29 has an invalid length. [ 826.330214][T10599] netlink: 'syz.2.10028': attribute type 4 has an invalid length. [ 826.456570][T10603] netlink: 'syz.5.10029': attribute type 10 has an invalid length. [ 826.475804][T10606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.511368][T10603] netlink: 'syz.5.10029': attribute type 16 has an invalid length. [ 826.526193][T10606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.527933][T10612] bond3: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 826.548905][T10603] netlink: 'syz.5.10029': attribute type 17 has an invalid length. [ 826.563829][T10606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.575457][T10612] bond3 (unregistering): Released all slaves [ 826.868867][T10603] syz_tun: left promiscuous mode [ 826.895846][T10603] bridge0: port 2(bridge_slave_1) entered disabled state [ 826.903473][T10603] bridge0: port 1(bridge_slave_0) entered disabled state [ 826.944926][ T7802] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 827.230831][T10603] tipc: Resetting bearer [ 827.359707][T10603] veth0_vlan: left promiscuous mode [ 827.486682][T10603] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 827.588232][T10603] vlan2: left promiscuous mode [ 827.597322][T10603] geneve1: left promiscuous mode [ 827.602865][T10603] vlan2: left allmulticast mode [ 827.617206][T10603] geneve1: left allmulticast mode [ 827.622874][T10603] bond2: left promiscuous mode [ 827.675480][T10603] geneve2: left promiscuous mode [ 827.684418][T10603] geneve2: left allmulticast mode [ 827.702136][T10603] veth3: left promiscuous mode [ 827.711355][T10603] veth5: left promiscuous mode [ 827.718152][T10603] vlan3: left allmulticast mode [ 827.723089][T10603] bond0: left allmulticast mode [ 827.729735][T10603] bond_slave_0: left allmulticast mode [ 827.737975][T10603] bond_slave_1: left allmulticast mode [ 827.743562][T10603] syz_tun: left allmulticast mode [ 827.844248][ T8702] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 827.872044][ T8702] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 827.913632][ T8702] netdevsim netdevsim5 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 827.949649][ T8702] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 827.966162][ T8702] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 827.996043][T10661] netlink: 'syz.5.10038': attribute type 1 has an invalid length. [ 828.002030][ T8702] netdevsim netdevsim5 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 828.048524][T10649] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 828.052535][ T8702] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 828.094603][T23525] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 828.134220][ T8702] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 828.143136][ T8702] netdevsim netdevsim5 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 828.254643][ T8702] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 828.265675][ T8702] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 828.276570][ T8702] netdevsim netdevsim5 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 828.289158][T10674] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 828.553595][T10696] __nla_validate_parse: 13 callbacks suppressed [ 828.553614][T10696] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10051'. [ 828.632179][T10698] netlink: 'syz.1.10052': attribute type 7 has an invalid length. [ 828.667461][T10696] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10051'. [ 828.886070][T10718] netlink: 'syz.5.10056': attribute type 1 has an invalid length. [ 828.894339][T10720] netlink: 104 bytes leftover after parsing attributes in process `syz.1.10055'. [ 829.022185][T10718] 8021q: adding VLAN 0 to HW filter on device bond7 [ 829.055347][T10718] netlink: 'syz.5.10056': attribute type 1 has an invalid length. [ 829.063268][T10718] netlink: 'syz.5.10056': attribute type 2 has an invalid length. [ 829.128288][T10722] bond7: (slave veth7): Enslaving as an active interface with a down link [ 829.237279][ T36] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 829.437050][T10739] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10060'. [ 829.908489][ T404] net_ratelimit: 15 callbacks suppressed [ 829.908534][ T404] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 829.959124][T10763] netlink: 'syz.1.10064': attribute type 1 has an invalid length. [ 829.978451][T10763] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10064'. [ 829.998945][T10765] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 830.075535][T10772] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 830.110904][T10772] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 830.189066][T10779] RDS: rds_bind could not find a transport for fc00::, load rds_tcp or rds_rdma? [ 830.208848][T10782] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 830.225576][ T409] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 830.256216][T10779] netlink: 256 bytes leftover after parsing attributes in process `syz.1.10068'. [ 830.376073][ T8708] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 830.553137][T10804] IPv6: NLM_F_CREATE should be specified when creating new route [ 830.585130][T10804] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 830.592399][T10804] IPv6: NLM_F_CREATE should be set when creating new route [ 830.733206][T10816] IPv6: sit1: Disabled Multicast RS [ 830.945628][ T404] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 830.979097][T10829] netlink: 52 bytes leftover after parsing attributes in process `syz.2.10081'. [ 831.110517][T10842] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.10086'. [ 831.370109][T10850] netlink: 'syz.1.10087': attribute type 1 has an invalid length. [ 831.379075][T10850] netlink: 228 bytes leftover after parsing attributes in process `syz.1.10087'. [ 831.406741][T10857] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 831.421736][T10850] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10087'. [ 831.423763][T10857] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 831.471302][T10857] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 831.481433][T10868] bond2: option mode: invalid value (133) [ 831.497603][T10868] bond2 (unregistering): Released all slaves [ 831.515590][ T408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 831.524156][ T8702] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 831.670002][T10881] dvmrp0: entered allmulticast mode [ 831.682611][T10885] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 831.792332][T10893] netlink: 'syz.0.10099': attribute type 61 has an invalid length. [ 831.987833][ T404] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.065404][T10908] bond3: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 832.096930][T10908] bond3: entered promiscuous mode [ 832.101983][T10908] bond3: entered allmulticast mode [ 832.117071][T10908] 8021q: adding VLAN 0 to HW filter on device bond3 [ 832.206199][T10913] netlink: 'syz.5.10105': attribute type 12 has an invalid length. [ 832.290807][T10913] bond8: option primary_reselect: invalid value (255) [ 832.353522][T10913] bond8 (unregistering): Released all slaves [ 832.402093][T10928] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 832.424776][T10928] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 832.457616][T10920] syzkaller1: entered promiscuous mode [ 832.463313][T10920] syzkaller1: entered allmulticast mode [ 832.646111][ T8706] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 832.786225][ T408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.812498][T10961] syzkaller0: entered promiscuous mode [ 832.847408][T10961] syzkaller0: entered allmulticast mode [ 833.024987][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 833.081167][T10970] bridge3: port 1(veth5) entered blocking state [ 833.102969][T10970] bridge3: port 1(veth5) entered disabled state [ 833.119058][T10970] veth5: entered allmulticast mode [ 833.156342][T10970] veth5: entered promiscuous mode [ 833.211772][T10976] bridge3: port 2(veth0_to_bond) entered blocking state [ 833.220209][T10976] bridge3: port 2(veth0_to_bond) entered disabled state [ 833.220540][T10991] netlink: 'syz.0.10127': attribute type 1 has an invalid length. [ 833.236078][T10976] veth0_to_bond: entered allmulticast mode [ 833.285155][T10976] veth0_to_bond: entered promiscuous mode [ 833.387266][T11002] netlink: 'syz.2.10129': attribute type 21 has an invalid length. [ 833.475695][T11002] x_tables: duplicate underflow at hook 4 [ 833.498369][T11013] bond4: (slave gretap2): making interface the new active one [ 833.507854][T11013] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 833.518760][T11007] veth1: Caught tx_queue_len zero misconfig [ 833.551561][T11007] : entered promiscuous mode [ 833.560880][T11012] syzkaller0: entered promiscuous mode [ 833.566666][T11012] syzkaller0: entered allmulticast mode [ 833.580905][T11012] dvmrp6: entered allmulticast mode [ 833.698596][T11025] __nla_validate_parse: 10 callbacks suppressed [ 833.698613][T11025] netlink: 108 bytes leftover after parsing attributes in process `syz.5.10138'. [ 833.784440][ T8708] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 834.064299][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 834.120720][ T36] gretap0: left allmulticast mode [ 834.127765][ T36] gretap0: left promiscuous mode [ 834.132948][ T36] bridge0: port 3(gretap0) entered disabled state [ 834.164165][T11062] validate_nla: 4 callbacks suppressed [ 834.164181][T11062] netlink: 'syz.1.10147': attribute type 1 has an invalid length. [ 834.187231][ T36] bridge_slave_1: left allmulticast mode [ 834.192892][ T36] bridge_slave_1: left promiscuous mode [ 834.207911][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 834.220750][ T36] bridge_slave_0: left allmulticast mode [ 834.221421][T11067] netlink: 'syz.5.10149': attribute type 3 has an invalid length. [ 834.237851][T11067] netlink: 'syz.5.10149': attribute type 3 has an invalid length. [ 834.245721][ T36] bridge_slave_0: left promiscuous mode [ 834.246340][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 834.277753][T11067] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10149'. [ 834.297411][T11073] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10146'. [ 834.499564][ T8708] smc: removing ib device syz2 [ 834.583500][ T36] bond7 (unregistering): (slave gretap1): Releasing active interface [ 834.806231][ T36] bond1 (unregistering): (slave bridge1): Releasing active interface [ 834.881955][T11086] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10152'. [ 834.916365][ T3004] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 835.153533][ T36] bond2 (unregistering): (slave bridge6): Removing an active aggregator [ 835.165807][ T36] bond2 (unregistering): (slave bridge6): Releasing backup interface [ 835.222388][ T36] bond3 (unregistering): (slave bridge7): Removing an active aggregator [ 835.248284][ T36] bond3 (unregistering): (slave bridge7): Releasing backup interface [ 835.625961][ T36] bond1 (unregistering): Released all slaves [ 835.701289][ T36] bond0 (unregistering): Released all slaves [ 835.731569][ T36] bond2 (unregistering): Released all slaves [ 835.782741][ T36] bond3 (unregistering): Released all slaves [ 835.809304][ T36] bond4 (unregistering): Released all slaves [ 835.853543][ T36] bond5 (unregistering): Released all slaves [ 835.882502][ T36] bond6 (unregistering): Released all slaves [ 835.903857][ T5826] Bluetooth: hci1: command 0x0405 tx timeout [ 835.910010][ T36] bond7 (unregistering): Released all slaves [ 835.946817][ T36] bond8 (unregistering): Released all slaves [ 835.991299][ T36] bond9 (unregistering): Released all slaves [ 836.045320][T20099] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 836.152769][T11066] bond5: (slave bridge0): making interface the new active one [ 836.181259][T11066] bond5: (slave bridge0): Enslaving as an active interface with an up link [ 836.852634][T11114] netlink: 'syz.2.10160': attribute type 1 has an invalid length. [ 837.131498][T11139] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10166'. [ 837.165379][ T8702] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 837.235599][ T36] : left promiscuous mode [ 837.353999][ T36] tipc: Left network mode [ 837.360763][T11152] netlink: 64 bytes leftover after parsing attributes in process `syz.5.10171'. [ 837.490113][T11157] tipc: Enabling of bearer rejected, failed to enable media [ 837.681570][T11174] netlink: 144 bytes leftover after parsing attributes in process `syz.4.10179'. [ 837.701560][T11175] netlink: 144 bytes leftover after parsing attributes in process `syz.4.10179'. [ 837.720753][T11158] syzkaller0: entered promiscuous mode [ 837.730392][T11158] syzkaller0: entered allmulticast mode [ 837.739197][T11169] netlink: 'syz.5.10178': attribute type 4 has an invalid length. [ 838.070858][T11191] xt_TPROXY: Can be used only with -p tcp or -p udp [ 838.254029][T11195] netlink: 'syz.2.10185': attribute type 1 has an invalid length. [ 838.305929][T23525] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 839.425809][T18563] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 839.465142][T11181] vlan2: entered allmulticast mode [ 839.470318][T11181] dummy0: entered allmulticast mode [ 839.486662][T11193] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component [ 839.499447][T11196] netlink: 'syz.2.10185': attribute type 1 has an invalid length. [ 839.522183][T11201] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10187'. [ 839.686279][T11214] siw: device registration error -23 [ 839.845261][T11220] openvswitch: netlink: IP tunnel dst address not specified [ 839.878000][T11219] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 839.902849][T11224] netlink: 'syz.4.10194': attribute type 12 has an invalid length. [ 839.925456][T11224] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10194'. [ 840.014083][T11226] bond6: option resend_igmp: invalid value (32767) [ 840.020797][T11226] bond6: option resend_igmp: allowed values 0 - 255 [ 840.030589][T11236] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10197'. [ 840.067061][T11226] bond6 (unregistering): Released all slaves [ 840.111384][ T36] hsr_slave_0: left promiscuous mode [ 840.119018][ T36] hsr_slave_1: left promiscuous mode [ 840.147233][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 840.170216][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 840.196322][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 840.215166][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 840.237756][ T36] veth1_vlan: left allmulticast mode [ 840.249791][ T36] veth1_vlan: left promiscuous mode [ 840.324208][T11256] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10201'. [ 840.547111][ T3004] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 840.702982][T11275] xt_CT: You must specify a L4 protocol and not use inversions on it [ 840.744867][T11278] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10206'. [ 840.766308][T11278] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 840.970475][ T36] team0 (unregistering): Port device team_slave_1 removed [ 840.984235][ T36] team0 (unregistering): Port device team_slave_0 removed [ 840.985777][T11283] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 840.999369][T11283] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 841.007299][T11283] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 841.015225][T11283] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 841.023109][T11283] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 841.031052][T11283] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 841.038969][T11283] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 841.199697][T11275] 8021q: VLANs not supported on ip6gre0 [ 841.389306][T11298] netlink: 'syz.1.10210': attribute type 16 has an invalid length. [ 841.403370][T11296] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10211'. [ 841.430685][T11298] netlink: 'syz.1.10210': attribute type 17 has an invalid length. [ 841.449689][T11300] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10214'. [ 841.500902][T11296] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10211'. [ 841.630273][T11312] netlink: 48 bytes leftover after parsing attributes in process `syz.5.10212'. [ 841.729036][ T7802] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 842.630203][T11342] xt_TPROXY: Can be used only with -p tcp or -p udp [ 842.742348][ T36] IPVS: stop unused estimator thread 0... [ 842.837997][T23525] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 843.097398][T11378] netlink: 182632 bytes leftover after parsing attributes in process `syz.2.10228'. [ 843.355234][ T30] audit: type=1800 audit(1773746728.228:13): pid=11393 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.10234" name="memory.events" dev="tmpfs" ino=1360 res=0 errno=0 [ 844.004625][ T8708] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 844.044464][T11432] syzkaller0: entered promiscuous mode [ 844.057445][T11432] syzkaller0: entered allmulticast mode [ 844.087563][T11438] netlink: 'syz.2.10243': attribute type 9 has an invalid length. [ 844.305031][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 844.530403][T11469] FAULT_INJECTION: forcing a failure. [ 844.530403][T11469] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 844.563510][T11469] CPU: 1 UID: 0 PID: 11469 Comm: syz.1.10255 Not tainted syzkaller #0 PREEMPT(full) [ 844.563534][T11469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 844.563546][T11469] Call Trace: [ 844.563554][T11469] [ 844.563562][T11469] dump_stack_lvl+0xe8/0x150 [ 844.563593][T11469] should_fail_ex+0x412/0x560 [ 844.563628][T11469] _copy_from_user+0x2d/0xb0 [ 844.563656][T11469] sock_do_ioctl+0x195/0x320 [ 844.563681][T11469] ? __pfx_sock_do_ioctl+0x10/0x10 [ 844.563700][T11469] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 844.563734][T11469] sock_ioctl+0x5c6/0x7f0 [ 844.563755][T11469] ? __pfx_sock_ioctl+0x10/0x10 [ 844.563778][T11469] ? __fget_files+0x2a/0x420 [ 844.563800][T11469] ? __fget_files+0x3a0/0x420 [ 844.563822][T11469] ? __fget_files+0x2a/0x420 [ 844.563848][T11469] ? bpf_lsm_file_ioctl+0x9/0x20 [ 844.563871][T11469] ? __pfx_sock_ioctl+0x10/0x10 [ 844.563891][T11469] __se_sys_ioctl+0xfc/0x170 [ 844.563944][T11469] do_syscall_64+0x14d/0xf80 [ 844.563961][T11469] ? trace_irq_disable+0x3b/0x150 [ 844.563984][T11469] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 844.564002][T11469] ? clear_bhb_loop+0x40/0x90 [ 844.564023][T11469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 844.564041][T11469] RIP: 0033:0x7f2c6a39c799 [ 844.564058][T11469] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 844.564090][T11469] RSP: 002b:00007f2c6b311028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 844.564109][T11469] RAX: ffffffffffffffda RBX: 00007f2c6a615fa0 RCX: 00007f2c6a39c799 [ 844.564122][T11469] RDX: 00002000000000c0 RSI: 0000000000008946 RDI: 0000000000000004 [ 844.564134][T11469] RBP: 00007f2c6b311090 R08: 0000000000000000 R09: 0000000000000000 [ 844.564145][T11469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 844.564156][T11469] R13: 00007f2c6a616038 R14: 00007f2c6a615fa0 R15: 00007ffddb943e68 [ 844.564199][T11469] [ 844.931391][T11473] team0: Cannot enslave team device to itself [ 844.954649][T11475] netlink: 'syz.1.10258': attribute type 1 has an invalid length. [ 844.964903][T11475] __nla_validate_parse: 1 callbacks suppressed [ 844.964919][T11475] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10258'. [ 844.987462][T11479] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10261'. [ 845.048516][T11482] netlink: 'syz.2.10259': attribute type 1 has an invalid length. [ 845.167607][T11493] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10263'. [ 845.196055][T18563] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 845.619610][T11519] syzkaller0: entered promiscuous mode [ 845.626854][T11519] syzkaller0: entered allmulticast mode [ 845.629852][T11526] netlink: 'syz.4.10274': attribute type 32 has an invalid length. [ 845.637162][T11519] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10271'. [ 845.671718][T11526] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10274'. [ 845.752903][T11536] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input7 [ 845.848813][T11526] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 845.937350][T11552] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10278'. [ 846.071267][T11564] netlink: 44 bytes leftover after parsing attributes in process `syz.5.10280'. [ 846.100748][T11565] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10281'. [ 846.330100][T23525] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 846.382994][T11581] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.10287'. [ 846.517309][T11592] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10290'. [ 846.741728][T11619] bridge_slave_0: invalid flags given to default FDB implementation [ 847.447860][ T7802] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 848.565134][T23525] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 849.522222][T11594] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 849.684921][ T8708] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 850.261567][T11778] netlink: 'syz.5.10306': attribute type 1 has an invalid length. [ 850.299572][T11778] bond8: entered promiscuous mode [ 850.307107][T11778] 8021q: adding VLAN 0 to HW filter on device bond8 [ 850.354401][T11778] __nla_validate_parse: 3 callbacks suppressed [ 850.354418][T11778] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10306'. [ 850.391121][T11778] bond8: entered allmulticast mode [ 850.407901][T11785] netlink: 88 bytes leftover after parsing attributes in process `syz.1.10310'. [ 850.528698][T11789] bond8: (slave bridge7): making interface the new active one [ 850.579580][T11789] bridge7: entered promiscuous mode [ 850.588830][T11789] bridge7: entered allmulticast mode [ 850.614305][T11789] bond8: (slave bridge7): Enslaving as an active interface with an up link [ 850.784967][ T36] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 850.800118][T11805] veth0: entered promiscuous mode [ 850.810161][T11804] veth0: left promiscuous mode [ 850.835848][T11815] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10320'. [ 850.867402][T11817] netdevsim netdevsim0 : renamed from netdevsim0 (while UP) [ 850.976476][T11822] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10322'. [ 851.019724][T11828] net_ratelimit: 49 callbacks suppressed [ 851.019742][T11828] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 851.125085][T11836] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 851.269017][T11844] 8021q: adding VLAN 0 to HW filter on device bond2 [ 851.286611][T11845] netlink: 'syz.1.10331': attribute type 7 has an invalid length. [ 851.314876][T11845] netlink: 140 bytes leftover after parsing attributes in process `syz.1.10331'. [ 851.436792][T11855] openvswitch: netlink: Multiple metadata blocks provided [ 851.475320][T11859] openvswitch: netlink: Multiple metadata blocks provided [ 851.550618][T11863] netlink: 'syz.0.10338': attribute type 1 has an invalid length. [ 851.619134][T11863] 8021q: adding VLAN 0 to HW filter on device bond5 [ 851.650145][T11867] bond5: (slave veth5): Enslaving as an active interface with a down link [ 851.693464][T11872] netlink: 'syz.1.10339': attribute type 17 has an invalid length. [ 851.706148][T11872] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10339'. [ 851.717679][T11872] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10339'. [ 851.754042][T11867] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.10338'. [ 851.756235][T11863] bond5: (slave veth0_to_bond): making interface the new active one [ 851.776757][T11863] veth0_to_bond: entered promiscuous mode [ 851.782729][T11863] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 851.911069][ T8708] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 851.919662][T11883] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10346'. [ 851.935055][T11883] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10346'. [ 851.958259][T11885] netlink: 'syz.0.10345': attribute type 1 has an invalid length. [ 851.980378][T11885] netlink: 'syz.0.10345': attribute type 7 has an invalid length. [ 852.034456][T11885] netlink: 'syz.0.10345': attribute type 8 has an invalid length. [ 852.042891][T11885] NCSI netlink: No device for ifindex 65584 [ 852.073007][ T5834] block nbd7: Receive control failed (result -107) [ 852.308887][T11904] netlink: 'syz.1.10344': attribute type 1 has an invalid length. [ 852.617827][T11909] netlink: 'syz.2.10347': attribute type 1 has an invalid length. [ 853.014139][ T8702] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 854.114216][ T8702] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 854.925901][T11885] nbd7: detected capacity change from 0 to 133590662774783 [ 855.016277][T11886] syzkaller1: entered promiscuous mode [ 855.029639][T11886] syzkaller1: entered allmulticast mode [ 855.151820][T10742] block nbd7: Dead connection, failed to find a fallback [ 855.166047][T11909] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 855.176329][T10742] block nbd7: shutting down sockets [ 855.220360][T10742] blk_print_req_error: 138 callbacks suppressed [ 855.220376][T10742] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 855.227057][T18563] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 855.274715][T10742] buffer_io_error: 138 callbacks suppressed [ 855.274732][T10742] Buffer I/O error on dev nbd7, logical block 0, async page read [ 855.297820][T10742] I/O error, dev nbd7, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 855.298708][T11912] netlink: 'syz.0.10348': attribute type 7 has an invalid length. [ 855.312837][T10742] Buffer I/O error on dev nbd7, logical block 1, async page read [ 855.325900][T10742] I/O error, dev nbd7, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 855.341461][T10742] Buffer I/O error on dev nbd7, logical block 2, async page read [ 855.351875][T10742] I/O error, dev nbd7, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 855.362614][T10742] Buffer I/O error on dev nbd7, logical block 3, async page read [ 855.371685][T10742] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 855.382880][T10742] Buffer I/O error on dev nbd7, logical block 0, async page read [ 855.397217][T10742] I/O error, dev nbd7, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 855.408795][T10742] Buffer I/O error on dev nbd7, logical block 1, async page read [ 855.430741][T10742] I/O error, dev nbd7, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 855.445633][T10742] Buffer I/O error on dev nbd7, logical block 2, async page read [ 855.453623][T10742] I/O error, dev nbd7, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 855.466160][T10742] Buffer I/O error on dev nbd7, logical block 3, async page read [ 855.491538][T11924] __nla_validate_parse: 3 callbacks suppressed [ 855.491554][T11924] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10352'. [ 855.505197][T10742] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 855.572395][T10742] Buffer I/O error on dev nbd7, logical block 0, async page read [ 855.601175][T11924] bond3: Invalid ad_actor_system MAC address. [ 855.607424][T11924] bond3: option ad_actor_system: invalid value (1) [ 855.626030][T10742] I/O error, dev nbd7, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 855.635729][T10742] Buffer I/O error on dev nbd7, logical block 1, async page read [ 855.646739][T11922] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10352'. [ 855.656638][T10742] ldm_validate_partition_table(): Disk read failed. [ 855.666682][T11924] bond3 (unregistering): Released all slaves [ 855.680846][T10742] Dev nbd7: unable to read RDB block 0 [ 855.681294][ T410] IPVS: starting estimator thread 0... [ 855.694356][T10742] nbd7: unable to read partition table [ 855.710231][T10742] ldm_validate_partition_table(): Disk read failed. [ 855.719414][T10742] Dev nbd7: unable to read RDB block 0 [ 855.745772][T11934] lo speed is unknown, defaulting to 1000 [ 855.770725][T10742] nbd7: unable to read partition table [ 855.876553][T11936] IPVS: using max 35 ests per chain, 84000 per kthread [ 855.950029][T11952] netlink: 68 bytes leftover after parsing attributes in process `syz.2.10359'. [ 856.160452][T11963] netlink: 'syz.1.10363': attribute type 1 has an invalid length. [ 856.207460][T11963] bond6: entered promiscuous mode [ 856.213199][T11963] 8021q: adding VLAN 0 to HW filter on device bond6 [ 856.229992][T11963] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10363'. [ 856.292322][T11963] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10363'. [ 856.374895][ T8702] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 856.388155][T11972] bond6: (slave bridge2): making interface the new active one [ 856.430251][T11972] bridge2: entered promiscuous mode [ 856.441252][T11972] bond6: (slave bridge2): Enslaving as an active interface with an up link [ 856.869395][T12008] bond6: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 856.936212][T12008] bond6 (unregistering): Released all slaves [ 856.962516][T12006] netlink: 'syz.1.10372': attribute type 1 has an invalid length. [ 856.969462][T12024] sctp: [Deprecated]: syz.2.10377 (pid 12024) Use of int in maxseg socket option. [ 856.969462][T12024] Use struct sctp_assoc_value instead [ 856.980040][T12006] netlink: 'syz.1.10372': attribute type 2 has an invalid length. [ 857.120349][T12024] lo speed is unknown, defaulting to 1000 [ 857.247965][T12039] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10381'. [ 857.348417][T12044] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10382'. [ 857.505685][ T8702] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 857.755315][ T8702] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 857.903226][T12025] lec:lec_atm_close: lec0: Shut down! [ 858.078293][T12082] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10390'. [ 858.210956][T12088] netlink: 80 bytes leftover after parsing attributes in process `syz.0.10392'. [ 858.309062][T12090] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10393'. [ 858.321791][T12092] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 858.336718][T12090] hsr_slave_0: left promiscuous mode [ 858.375123][T12090] hsr_slave_1: left promiscuous mode [ 858.497913][T12099] netlink: 'syz.0.10397': attribute type 2 has an invalid length. [ 858.527447][ T5834] block nbd8: Receive control failed (result -107) [ 858.565460][T12101] nbd8: detected capacity change from 0 to 127 [ 858.586115][T10742] block nbd8: Dead connection, failed to find a fallback [ 858.615855][T10742] block nbd8: shutting down sockets [ 858.621891][T10742] ldm_validate_partition_table(): Disk read failed. [ 858.652582][ T7802] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 858.662505][T10742] Dev nbd8: unable to read RDB block 0 [ 858.689266][T10742] nbd8: unable to read partition table [ 858.725848][T10742] ldm_validate_partition_table(): Disk read failed. [ 858.753190][T10742] Dev nbd8: unable to read RDB block 0 [ 858.773519][T10742] nbd8: unable to read partition table [ 858.787736][T12119] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 858.817151][T12117] : entered promiscuous mode [ 858.847677][T12119] syzkaller1: entered promiscuous mode [ 858.853314][T12119] syzkaller1: entered allmulticast mode [ 859.016733][ T8706] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 859.044566][ T8706] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 859.072901][ T8706] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 859.123568][ T8706] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 859.197735][T12144] netlink: 'syz.4.10412': attribute type 21 has an invalid length. [ 859.555900][ T10] IPVS: starting estimator thread 0... [ 859.575299][T12166] veth0: entered promiscuous mode [ 859.597702][T12164] veth0: left promiscuous mode [ 859.630111][T12170] tipc: Started in network mode [ 859.643966][T12167] IPVS: using max 27 ests per chain, 64800 per kthread [ 859.655484][T12170] tipc: Node identity d6dd8fbbe225, cluster identity 4711 [ 859.662766][T12170] tipc: Enabled bearer , priority 0 [ 859.705093][T12173] syzkaller0: entered promiscuous mode [ 859.720561][T12173] syzkaller0: entered allmulticast mode [ 859.741781][T12170] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 859.770393][T12170] tipc: Resetting bearer [ 859.817679][T23525] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 859.836163][T12170] tipc: Disabling bearer [ 860.246999][T18563] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 860.266653][T12208] netlink: 'syz.0.10435': attribute type 1 has an invalid length. [ 860.277883][T23525] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 860.367864][T12208] bond6: entered promiscuous mode [ 860.373711][T12208] 8021q: adding VLAN 0 to HW filter on device bond6 [ 860.384837][T23525] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 860.394891][ T36] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 860.489426][T12221] syzkaller0: entered allmulticast mode [ 860.537384][T12221] syzkaller0 (unregistering): left allmulticast mode [ 860.614060][T12224] syzkaller1: entered promiscuous mode [ 860.628440][T12224] syzkaller1: entered allmulticast mode [ 860.805184][T12248] __nla_validate_parse: 16 callbacks suppressed [ 860.805204][T12248] netlink: 36 bytes leftover after parsing attributes in process `syz.5.10446'. [ 860.825294][T12249] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10448'. [ 860.844272][T12249] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10448'. [ 860.936015][T23525] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 861.268103][T12277] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10458'. [ 861.356646][T12284] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10461'. [ 861.407872][T12284] ip6erspan1: entered promiscuous mode [ 861.627020][T12302] syzkaller1: entered allmulticast mode [ 861.790262][T12310] syzkaller0: entered promiscuous mode [ 861.823517][T12310] syzkaller0: entered allmulticast mode [ 861.839712][T12320] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10473'. [ 861.878833][T12320] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10473'. [ 862.093449][T18563] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 862.416468][T12355] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10482'. [ 863.209170][ T8708] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 863.649178][T12333] mac80211_hwsim hwsim105 syzkaller0: Caught tx_queue_len zero misconfig [ 863.663903][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5770 ms [ 863.671949][ C1] lec:lec_tx_timeout: lec0 [ 863.678207][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 863.707536][ T36] veth0_to_bond: left promiscuous mode [ 863.822526][T12365] netlink: 'syz.1.10486': attribute type 21 has an invalid length. [ 863.848854][T12365] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10486'. [ 864.158808][T12388] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10493'. [ 864.241891][T12398] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 864.314891][T23525] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 864.377059][T12403] syzkaller0: entered allmulticast mode [ 864.525045][T12402] syzkaller0: left allmulticast mode [ 864.890207][T12432] team_slave_1: Caught tx_queue_len zero misconfig [ 865.091398][T12447] xt_hashlimit: size too large, truncated to 1048576 [ 865.170643][T12453] –: renamed from vxcan1 (while UP) [ 865.425755][ T8702] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 865.448006][T12470] x_tables: duplicate underflow at hook 4 [ 865.448927][T12472] netlink: 'syz.5.10520': attribute type 27 has an invalid length. [ 865.749755][T12491] bond7: entered promiscuous mode [ 865.755763][T12491] bond7: entered allmulticast mode [ 865.761390][T12491] 8021q: adding VLAN 0 to HW filter on device bond7 [ 865.809828][T12502] netlink: 'syz.5.10531': attribute type 16 has an invalid length. [ 865.835773][T12502] netlink: 'syz.5.10531': attribute type 17 has an invalid length. [ 865.867387][T12504] xt_hashlimit: size too large, truncated to 1048576 [ 865.932787][T12502] 8021q: adding VLAN 0 to HW filter on device bond0 [ 865.948690][T12502] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 865.978522][T12505] erspan2: entered allmulticast mode [ 866.009630][T12507] __nla_validate_parse: 8 callbacks suppressed [ 866.009647][T12507] netlink: 92 bytes leftover after parsing attributes in process `syz.1.10532'. [ 866.047041][T12510] syzkaller0: entered promiscuous mode [ 866.052613][T12510] syzkaller0: entered allmulticast mode [ 866.201049][T12516] syzkaller0: entered promiscuous mode [ 866.209760][T12516] syzkaller0: entered allmulticast mode [ 866.237352][ T5834] Bluetooth: hci1: link tx timeout [ 866.243219][ T5834] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 866.253518][ T5834] Bluetooth: hci1: link tx timeout [ 866.259072][ T5834] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 866.273112][T12521] netlink: 84 bytes leftover after parsing attributes in process `syz.5.10537'. [ 866.556348][ T8708] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 866.580019][T12547] netlink: 'syz.2.10544': attribute type 26 has an invalid length. [ 866.630641][T12551] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10545'. [ 866.669028][T12553] syzkaller0: entered promiscuous mode [ 866.676235][T12553] syzkaller0: entered allmulticast mode [ 866.713190][T12551] lo speed is unknown, defaulting to 1000 [ 866.853042][T12559] netlink: 64 bytes leftover after parsing attributes in process `syz.0.10548'. [ 866.988033][T12561] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10549'. [ 867.207533][T12571] x_tables: duplicate underflow at hook 1 [ 867.359175][T12580] netlink: 'syz.1.10556': attribute type 29 has an invalid length. [ 867.378425][T12580] netlink: 'syz.1.10556': attribute type 29 has an invalid length. [ 867.625396][T12595] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10559'. [ 867.655021][T12596] netlink: 104 bytes leftover after parsing attributes in process `syz.1.10559'. [ 867.675413][ T8706] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 867.816685][T12607] netlink: 'syz.0.10561': attribute type 1 has an invalid length. [ 867.969394][T12607] bond7: entered promiscuous mode [ 867.975442][T12607] 8021q: adding VLAN 0 to HW filter on device bond7 [ 868.096879][T12607] bond7: (slave bridge3): making interface the new active one [ 868.130753][T12607] bridge3: entered promiscuous mode [ 868.161332][T12607] bond7: (slave bridge3): Enslaving as an active interface with an up link [ 868.240296][T12591] netlink: 'syz.4.10558': attribute type 10 has an invalid length. [ 868.269211][T12591] team0: Device ipvlan1 failed to register rx_handler [ 868.308356][ T5834] Bluetooth: hci1: command 0x0405 tx timeout [ 868.520749][T12621] netlink: 'syz.5.10563': attribute type 1 has an invalid length. [ 868.553301][T12621] netlink: 96 bytes leftover after parsing attributes in process `syz.5.10563'. [ 868.584169][T12621] netlink: 1 bytes leftover after parsing attributes in process `syz.5.10563'. [ 868.612889][T12626] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10563'. [ 868.694892][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 868.702981][ C1] lec:lec_tx_timeout: lec0 [ 868.828036][ T8702] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 868.839578][T12640] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 869.020346][T12659] netlink: 'syz.1.10571': attribute type 7 has an invalid length. [ 869.196814][T12659] netlink: 'syz.1.10571': attribute type 7 has an invalid length. [ 869.266713][T12667] IPv6: sit1: Disabled Multicast RS [ 869.273002][T12667] sit1: entered allmulticast mode [ 869.622593][T12684] syzkaller0: entered promiscuous mode [ 869.655593][T12684] syzkaller0: entered allmulticast mode [ 869.911673][ T1298] lec:lec_start_xmit: lec0:No lecd attached [ 869.945806][ T8702] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 869.971502][T12716] netlink: 'syz.2.10584': attribute type 9 has an invalid length. [ 870.386127][ T5834] Bluetooth: hci1: command 0x0405 tx timeout [ 871.055536][ T8706] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 871.456526][T12728] __nla_validate_parse: 8 callbacks suppressed [ 871.456543][T12728] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10588'. [ 871.505503][ T410] page_pool_release_retry() stalled pool shutdown: id 263, 1 inflight 60 sec [ 871.539234][T12728] bond8: entered promiscuous mode [ 871.548878][T12728] 8021q: adding VLAN 0 to HW filter on device bond8 [ 871.579663][T12736] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 871.597620][T12731] macvlan2: entered promiscuous mode [ 871.613164][T12731] macvlan2: entered allmulticast mode [ 871.635647][T12741] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 871.642337][T12731] bond8: (slave macvlan2): Opening slave failed [ 871.667957][T12745] Unsupported ieee802154 address type: 0 [ 871.841570][T12748] lo speed is unknown, defaulting to 1000 [ 871.937539][T12762] netlink: 'syz.2.10596': attribute type 2 has an invalid length. [ 871.951074][T12760] netlink: 'syz.4.10597': attribute type 29 has an invalid length. [ 872.012356][T12762] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10596'. [ 872.045569][T12762] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10596'. [ 872.156284][T23525] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 872.233087][T12786] syzkaller0: entered promiscuous mode [ 872.244057][T12786] syzkaller0: entered allmulticast mode [ 872.443193][T12804] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10603'. [ 872.465810][ T5834] Bluetooth: hci1: command 0x0405 tx timeout [ 873.295192][T18563] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 874.394207][ T36] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 875.083363][T12781] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 875.110521][T12811] netlink: 'syz.1.10607': attribute type 1 has an invalid length. [ 875.151109][T12811] netlink: 704 bytes leftover after parsing attributes in process `syz.1.10607'. [ 875.174111][T12811] netlink: 'syz.1.10607': attribute type 1 has an invalid length. [ 875.301011][T12823] IPVS: Error connecting to the multicast addr [ 875.329655][T12827] netlink: 'syz.0.10614': attribute type 1 has an invalid length. [ 875.353377][T12827] netlink: 'syz.0.10614': attribute type 4 has an invalid length. [ 875.371592][T12827] netlink: 9491 bytes leftover after parsing attributes in process `syz.0.10614'. [ 875.397254][T12825] netlink: 'syz.1.10613': attribute type 1 has an invalid length. [ 875.456105][T12833] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10613'. [ 875.515063][ T8708] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 875.570197][T12825] 8021q: adding VLAN 0 to HW filter on device bond9 [ 875.664080][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms [ 875.672147][ C1] lec:lec_tx_timeout: lec0 [ 875.766195][T12853] syzkaller1: entered promiscuous mode [ 875.786165][T12853] syzkaller1: entered allmulticast mode [ 876.458196][T12896] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 876.503287][T12895] netlink: 'syz.4.10634': attribute type 11 has an invalid length. [ 876.517395][T12895] netlink: 228 bytes leftover after parsing attributes in process `syz.4.10634'. [ 876.607421][T12904] netlink: 52 bytes leftover after parsing attributes in process `syz.5.10636'. [ 876.645940][T12883] netlink: 256 bytes leftover after parsing attributes in process `syz.2.10630'. [ 876.659576][ T36] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 876.671980][T12904] netlink: 830 bytes leftover after parsing attributes in process `syz.5.10636'. [ 876.731853][T12908] sctp: [Deprecated]: syz.5.10640 (pid 12908) Use of int in max_burst socket option. [ 876.731853][T12908] Use struct sctp_assoc_value instead [ 876.764405][T12909] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10638'. [ 876.931223][T12924] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10644'. [ 876.931226][T12923] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10644'. [ 876.950035][T12924] vlan4: entered allmulticast mode [ 876.951746][T12926] netlink: 76 bytes leftover after parsing attributes in process `syz.1.10645'. [ 876.972266][T12921] netlink: 'syz.4.10643': attribute type 1 has an invalid length. [ 877.023566][T12932] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10643'. [ 877.036896][T12923] vlan4: entered allmulticast mode [ 877.109069][T12934] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 877.136763][T12934] netlink: 'syz.1.10647': attribute type 1 has an invalid length. [ 877.148621][T12934] netlink: 'syz.1.10647': attribute type 3 has an invalid length. [ 877.162789][T12934] netlink: 'syz.1.10647': attribute type 7 has an invalid length. [ 877.177346][T12939] xt_cgroup: path and classid specified [ 877.183248][T12934] netlink: 'syz.1.10647': attribute type 8 has an invalid length. [ 877.186349][T12937] netlink: 52 bytes leftover after parsing attributes in process `syz.4.10648'. [ 877.192404][T12934] NCSI netlink: No device for ifindex 131092 [ 877.362212][T12953] bond0: Caught tx_queue_len zero misconfig [ 877.628177][T12965] vlan4: entered allmulticast mode [ 877.633339][T12965] bridge8: entered allmulticast mode [ 877.814112][T12982] bond3: entered promiscuous mode [ 877.819299][T12982] bond3: entered allmulticast mode [ 877.825471][T12982] 8021q: adding VLAN 0 to HW filter on device bond3 [ 877.882726][T18563] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 877.919912][T12989] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 878.660579][T13012] openvswitch: netlink: Unexpected mask (mask=201040, allowed=10048) [ 878.796767][T13003] syzkaller1: entered promiscuous mode [ 878.802275][T13003] syzkaller1: entered allmulticast mode [ 878.985341][T23525] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 879.026124][T13026] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 879.045897][T13026] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 879.070807][T13026] bond0 (unregistering): Released all slaves [ 879.123577][T13042] macvtap0: entered promiscuous mode [ 879.152792][T13042] macvtap0: left promiscuous mode [ 879.318682][T13057] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 879.610087][T13086] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 880.004874][T13092] veth0: entered promiscuous mode [ 880.015364][T18563] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 880.025069][T18563] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 880.035956][T18563] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 880.058538][T18563] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 880.070608][T13091] veth0: left promiscuous mode [ 880.082378][T13097] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 880.095530][T18563] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 880.110534][T13097] bond0: (slave gre0): Error -95 calling set_mac_address [ 880.712173][T13144] syzkaller0: entered promiscuous mode [ 880.725248][T13144] syzkaller0: entered allmulticast mode [ 880.745142][T13144] 0: reclassify loop, rule prio 0, protocol 800 [ 881.077790][T13162] validate_nla: 3 callbacks suppressed [ 881.077808][T13162] netlink: 'syz.1.10715': attribute type 18 has an invalid length. [ 881.207020][ T8706] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 881.945175][T13219] __nla_validate_parse: 14 callbacks suppressed [ 881.945194][T13219] netlink: 104 bytes leftover after parsing attributes in process `syz.1.10733'. [ 882.059724][T13234] netlink: 'syz.5.10736': attribute type 25 has an invalid length. [ 882.143234][T13231] netlink: 'syz.0.10734': attribute type 6 has an invalid length. [ 882.165875][T13231] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10734'. [ 882.235583][ T5826] Bluetooth: hci5: command 0x0406 tx timeout [ 882.356327][T18563] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 882.745811][T13241] tipc: Resetting bearer [ 882.801427][T13241] tipc: Resetting bearer [ 882.979317][T13241] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 883.001925][T13241] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 883.127152][T13241] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 883.133086][T13241] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 883.165425][T13279] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10746'. [ 883.213320][T13283] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10747'. [ 883.239303][T13241] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 883.267552][T13241] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 883.269442][T13283] netlink: 32 bytes leftover after parsing attributes in process `syz.4.10747'. [ 883.336076][T13241] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 883.342003][T13241] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 883.468197][T18563] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 883.501627][T13241] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 883.514894][T13241] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 883.636923][T13302] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10750'. [ 883.701685][T13302] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10750'. [ 884.271228][T13343] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10759'. [ 884.305873][T13343] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10759'. [ 884.520125][T13352] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 884.632082][T23525] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 884.655794][T13360] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10763'. [ 884.719313][T13363] IPv6: NLM_F_CREATE should be specified when creating new route [ 884.759354][ T5826] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 884.771858][ T5826] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 884.786508][ T5826] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 884.796403][ T5826] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 884.816012][ T5826] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 885.008278][T13378] syzkaller0: entered promiscuous mode [ 885.021505][T13378] syzkaller0: entered allmulticast mode [ 885.037630][ T5824] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 885.060606][ T5824] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 885.075249][ T5824] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 885.104905][ T5824] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 885.137769][ T5824] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 885.280507][ T2621] bond0: (slave syz_tun): Releasing backup interface [ 885.602038][T13398] lo speed is unknown, defaulting to 1000 [ 885.656148][T13365] lo speed is unknown, defaulting to 1000 [ 885.722739][T13421] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 885.754881][T23525] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 886.108669][T13365] chnl_net:caif_netlink_parms(): no params data found [ 886.444870][T13443] syzkaller0: entered promiscuous mode [ 886.452610][T13443] syzkaller0: entered allmulticast mode [ 886.492185][T13365] bridge0: port 1(bridge_slave_0) entered blocking state [ 886.521872][T13365] bridge0: port 1(bridge_slave_0) entered disabled state [ 886.541558][T13365] bridge_slave_0: entered allmulticast mode [ 886.571411][T13365] bridge_slave_0: entered promiscuous mode [ 886.861335][T13365] bridge0: port 2(bridge_slave_1) entered blocking state [ 886.871305][T13365] bridge0: port 2(bridge_slave_1) entered disabled state [ 886.879408][T13365] bridge_slave_1: entered allmulticast mode [ 886.888099][ T8702] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 886.909938][T13365] bridge_slave_1: entered promiscuous mode [ 887.062793][T13484] syzkaller1: entered promiscuous mode [ 887.069812][T13484] syzkaller1: entered allmulticast mode [ 887.185139][ T5826] Bluetooth: hci0: command tx timeout [ 887.243454][T13508] __nla_validate_parse: 9 callbacks suppressed [ 887.243473][T13508] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.10791'. [ 887.281451][T13365] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 887.328657][T13365] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 887.461225][T13365] team0: Port device team_slave_0 added [ 887.530470][T13365] team0: Port device team_slave_1 added [ 887.716454][T13524] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10794'. [ 887.731315][T13365] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 887.740004][T13365] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 887.775223][T13365] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 887.816320][T13365] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 887.835715][T13529] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 887.852089][T13365] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 887.944151][T13365] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 888.011510][T13529] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10795'. [ 888.034374][ T7802] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 888.198337][T13541] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10800'. [ 888.230959][T13365] hsr_slave_0: entered promiscuous mode [ 888.247289][T13365] hsr_slave_1: entered promiscuous mode [ 888.578140][T13570] netlink: 'syz.2.10804': attribute type 2 has an invalid length. [ 888.603978][T13570] netlink: 'syz.2.10804': attribute type 1 has an invalid length. [ 888.863090][T13587] netlink: 'syz.1.10809': attribute type 1 has an invalid length. [ 889.025612][T13591] tipc: Resetting bearer [ 889.168340][T13604] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10813'. [ 889.197747][ T36] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 889.265469][ T5826] Bluetooth: hci0: command tx timeout [ 889.470729][ C1] vcan0: j1939_tp_rxtimer: 0xffff888079cda800: rx timeout, send abort [ 889.490688][T13617] netlink: 'syz.1.10816': attribute type 1 has an invalid length. [ 889.572598][T13617] 8021q: adding VLAN 0 to HW filter on device bond11 [ 889.625552][T13617] netlink: 44 bytes leftover after parsing attributes in process `syz.1.10816'. [ 889.647209][T13617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 889.657518][T13617] bond11: (slave batadv0): making interface the new active one [ 889.669979][T13617] bond11: (slave batadv0): Enslaving as an active interface with an up link [ 889.717065][T13591] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 889.723070][T13591] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 889.746563][T13621] vlan5: entered promiscuous mode [ 889.754450][T13621] bond11: entered promiscuous mode [ 889.759757][T13621] batadv0: entered promiscuous mode [ 889.771136][T13621] vlan5: entered allmulticast mode [ 889.777078][T13621] bond11: entered allmulticast mode [ 889.782467][T13621] batadv0: entered allmulticast mode [ 889.930705][T13365] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 889.968377][T13365] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 889.976807][ C1] vcan0: j1939_tp_rxtimer: 0xffff888079cd8000: rx timeout, send abort [ 889.986756][ C1] vcan0: j1939_tp_rxtimer: 0xffff888079cda800: abort rx timeout. Force session deactivation [ 890.071012][T13365] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 890.117000][T13365] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 890.184935][T13648] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10823'. [ 890.257806][T13648] Bluetooth: MGMT ver 1.23 [ 890.274790][T13661] netlink: 'syz.2.10824': attribute type 1 has an invalid length. [ 890.305401][T13661] netlink: 'syz.2.10824': attribute type 1 has an invalid length. [ 890.319898][T23525] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 890.347225][T13661] netlink: 9172 bytes leftover after parsing attributes in process `syz.2.10824'. [ 890.397410][T13365] 8021q: adding VLAN 0 to HW filter on device bond0 [ 890.421476][T13365] 8021q: adding VLAN 0 to HW filter on device team0 [ 890.476900][ C1] vcan0: j1939_tp_rxtimer: 0xffff888079cd8000: abort rx timeout. Force session deactivation [ 890.493332][ T7802] bridge0: port 1(bridge_slave_0) entered blocking state [ 890.500501][ T7802] bridge0: port 1(bridge_slave_0) entered forwarding state [ 890.532201][ T8702] bridge0: port 2(bridge_slave_1) entered blocking state [ 890.539369][ T8702] bridge0: port 2(bridge_slave_1) entered forwarding state [ 890.667286][T13679] netlink: 'syz.1.10826': attribute type 4 has an invalid length. [ 890.670262][T13365] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 890.697862][T13365] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 890.798006][T13684] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.10830'. [ 890.825026][T13684] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 891.102958][T13365] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 891.178167][T13707] netlink: 'syz.2.10834': attribute type 1 has an invalid length. [ 891.202129][T13707] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10834'. [ 891.438249][T13721] netlink: 'syz.0.10839': attribute type 1 has an invalid length. [ 891.454954][ T8702] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 891.609376][T13726] bond8: (slave bridge4): making interface the new active one [ 891.641967][T13726] bond8: (slave bridge4): Enslaving as an active interface with an up link [ 891.953000][T13365] veth0_vlan: entered promiscuous mode [ 891.967631][T13756] netlink: 'syz.0.10847': attribute type 1 has an invalid length. [ 891.986628][T13365] veth1_vlan: entered promiscuous mode [ 892.083157][T13756] bond9: entered promiscuous mode [ 892.090289][T13756] 8021q: adding VLAN 0 to HW filter on device bond9 [ 892.203236][T13365] veth0_macvtap: entered promiscuous mode [ 892.322279][T13365] veth1_macvtap: entered promiscuous mode [ 892.386469][T13365] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 892.419281][T13365] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 892.431292][T13784] nbd: must specify a device to reconfigure [ 892.512412][ T7802] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 892.557641][ T7802] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 892.567520][ T7802] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 892.591451][ T30] audit: type=1107 audit(1773746777.468:14): pid=13790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 892.591812][ T30] audit: type=1107 audit(1773746777.468:15): pid=13790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 892.604983][T20099] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 892.706443][ T7802] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 892.819335][ T30] audit: type=1107 audit(1773746777.468:16): pid=13790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 892.819687][ T30] audit: type=1107 audit(1773746777.468:17): pid=13790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 892.923356][ T30] audit: type=1107 audit(1773746777.468:18): pid=13790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 893.217957][ T30] audit: type=1107 audit(1773746777.468:19): pid=13790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 893.218329][ T30] audit: type=1107 audit(1773746777.468:20): pid=13790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 893.325828][ T30] audit: type=1107 audit(1773746777.468:21): pid=13790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 893.429361][ T30] audit: type=1107 audit(1773746777.468:22): pid=13790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 893.557387][ T30] audit: type=1107 audit(1773746777.468:23): pid=13790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 893.877501][ T8706] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 893.894365][ T8706] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 894.065006][ T8702] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 894.072951][ T8702] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 894.178941][T13838] __nla_validate_parse: 4 callbacks suppressed [ 894.178969][T13838] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10863'. [ 894.250227][ T8702] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 894.587168][T13879] netlink: 64 bytes leftover after parsing attributes in process `syz.2.10871'. [ 894.675216][T13867] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 894.976769][T13899] syzkaller1: entered promiscuous mode [ 895.038653][T13899] syzkaller1: entered allmulticast mode [ 895.177942][T13921] netlink: 'syz.4.10878': attribute type 11 has an invalid length. [ 895.273141][T13927] netlink: 112 bytes leftover after parsing attributes in process `syz.4.10878'. [ 895.292884][T13926] validate_nla: 1 callbacks suppressed [ 895.292908][T13926] netlink: 'syz.1.10880': attribute type 1 has an invalid length. [ 895.308976][T13929] netlink: 'syz.2.10879': attribute type 8 has an invalid length. [ 895.337875][T13926] netlink: 'syz.1.10880': attribute type 4 has an invalid length. [ 895.367037][T20099] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 895.387988][T13926] netlink: 9491 bytes leftover after parsing attributes in process `syz.1.10880'. [ 895.608277][T13943] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10883'. [ 895.688998][T13943] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10883'. [ 895.777547][ T8706] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 895.798029][ T8706] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 895.891916][ T8706] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 895.928528][ T8706] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 896.186784][T13981] netlink: 220 bytes leftover after parsing attributes in process `syz.5.10895'. [ 896.479198][ T7802] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 896.773263][T14025] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10909'. [ 896.860115][T14032] ip6t_REJECT: ECHOREPLY is not supported [ 896.941515][T14040] netlink: zone id is out of range [ 896.978621][T14035] netlink: set zone limit has 4 unknown bytes [ 896.982281][T14040] netlink: zone id is out of range [ 896.990940][T14040] netlink: zone id is out of range [ 897.058365][ T10] IPVS: starting estimator thread 0... [ 897.067402][T14040] netlink: zone id is out of range [ 897.096334][T14040] netlink: zone id is out of range [ 897.117378][T14040] netlink: zone id is out of range [ 897.139682][T14040] netlink: zone id is out of range [ 897.156424][T14048] IPVS: using max 37 ests per chain, 88800 per kthread [ 897.163681][T14040] netlink: zone id is out of range [ 897.186136][T14040] netlink: zone id is out of range [ 897.398624][T14076] netlink: 'syz.2.10921': attribute type 1 has an invalid length. [ 897.465233][T14079] netlink: 'syz.2.10921': attribute type 1 has an invalid length. [ 897.501819][T14088] netlink: 188 bytes leftover after parsing attributes in process `syz.1.10924'. [ 897.511837][T14076] 8021q: adding VLAN 0 to HW filter on device bond0 [ 897.563628][T14075] can: request_module (can-proto-0) failed. [ 897.634526][ T7802] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 897.899985][T14109] netlink: 'syz.1.10928': attribute type 10 has an invalid length. [ 897.980836][T14116] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10930'. [ 898.198738][T14132] netlink: 'syz.5.10933': attribute type 2 has an invalid length. [ 898.462924][T14146] bond3: (slave vcan1): The slave device specified does not support setting the MAC address [ 898.517139][ T408] IPVS: starting estimator thread 0... [ 898.558137][T14146] bond3: (slave vcan1): Error -95 calling set_mac_address [ 898.637056][T14161] IPVS: using max 30 ests per chain, 72000 per kthread [ 898.758142][ T8706] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 899.236565][T14211] xt_hashlimit: size too large, truncated to 1048576 [ 899.435648][T14225] syzkaller0: entered promiscuous mode [ 899.441732][T14225] syzkaller0: entered allmulticast mode [ 899.894972][ T7802] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 900.115682][T14261] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 900.136587][T14261] team0: Port device batadv1 added [ 900.155204][T14262] __nla_validate_parse: 7 callbacks suppressed [ 900.155220][T14262] netlink: 187476 bytes leftover after parsing attributes in process `syz.4.10964'. [ 900.651312][T14295] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 900.698471][T14307] netlink: 64 bytes leftover after parsing attributes in process `syz.0.10974'. [ 901.012584][T14324] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10979'. [ 901.066343][T20097] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 901.119279][T14324] macsec2: entered promiscuous mode [ 901.124690][T14324] bridge0: entered promiscuous mode [ 901.130862][T14324] macsec2: entered allmulticast mode [ 901.136718][T14324] bridge0: entered allmulticast mode [ 901.150164][T14324] bridge0: port 3(macsec2) entered blocking state [ 901.177776][T14324] bridge0: port 3(macsec2) entered disabled state [ 901.218172][T14324] bridge0: left allmulticast mode [ 901.229405][T14341] x_tables: duplicate underflow at hook 1 [ 901.236770][T14324] bridge0: left promiscuous mode [ 901.803675][T14388] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10994'. [ 902.226166][T14420] netlink: 36 bytes leftover after parsing attributes in process `syz.5.11001'. [ 902.244017][ T8702] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 902.346187][T14428] "syz.0.11003" (14428) uses obsolete ecb(arc4) skcipher [ 902.418355][T14433] netlink: 'syz.0.11004': attribute type 7 has an invalid length. [ 902.435538][T14433] netlink: 'syz.0.11004': attribute type 4 has an invalid length. [ 902.449193][T14433] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11004'. [ 902.486825][T14410] bridge_slave_0: left allmulticast mode [ 902.492616][T14410] bridge_slave_0: left promiscuous mode [ 902.501986][T14410] bridge0: port 1(bridge_slave_0) entered disabled state [ 902.526246][T14410] bridge_slave_1: left allmulticast mode [ 902.531961][T14410] bridge_slave_1: left promiscuous mode [ 902.539577][T14410] bridge0: port 2(bridge_slave_1) entered disabled state [ 902.552404][T14410] veth0_to_bond: left allmulticast mode [ 902.559910][T14410] veth0_to_bond: left promiscuous mode [ 902.567821][T14410] bridge3: port 2(veth0_to_bond) entered disabled state [ 902.581598][T14410] bond0: (slave bond_slave_0): Releasing backup interface [ 902.598674][T14410] bond0: (slave bond_slave_1): Releasing backup interface [ 902.618709][T14410] team0: Port device team_slave_0 removed [ 902.633317][T14410] team0: Port device team_slave_1 removed [ 902.646602][T14410] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 902.657963][T14410] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 902.670438][T14410] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 902.682541][T14410] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 902.701904][T14410] net_ratelimit: 2 callbacks suppressed [ 902.701918][T14410] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 902.750919][T14426] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11002'. [ 902.817005][T14432] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11002'. [ 903.051429][T14461] netlink: 'syz.0.11009': attribute type 64 has an invalid length. [ 903.068157][T14461] netlink: 5 bytes leftover after parsing attributes in process `syz.0.11009'. [ 903.085453][T14463] Bluetooth: MGMT ver 1.23 [ 903.139507][T14465] netlink: 'syz.2.11011': attribute type 1 has an invalid length. [ 903.190526][T14469] netlink: 176 bytes leftover after parsing attributes in process `syz.0.11013'. [ 903.206269][T14465] 8021q: adding VLAN 0 to HW filter on device bond4 [ 903.219402][T14467] netlink: 'syz.5.11012': attribute type 7 has an invalid length. [ 903.276980][T14467] netlink: 'syz.5.11012': attribute type 1 has an invalid length. [ 903.302955][T14465] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 903.332693][T14465] bond4: (slave batadv1): making interface the new active one [ 903.351211][T14465] bond4: (slave batadv1): Enslaving as an active interface with an up link [ 903.362246][ T8702] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 903.376385][T14479] netlink: 'syz.0.11016': attribute type 1 has an invalid length. [ 903.430658][T14467] 8021q: adding VLAN 0 to HW filter on device bond1 [ 903.454793][T14473] vlan2: entered promiscuous mode [ 903.459858][T14473] bond1: entered promiscuous mode [ 903.467466][T14473] vlan2: entered allmulticast mode [ 903.471675][T14486] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 903.472619][T14473] bond1: entered allmulticast mode [ 903.565106][T14492] netlink: 'syz.2.11018': attribute type 20 has an invalid length. [ 903.573267][T14492] IPv6: NLM_F_CREATE should be specified when creating new route [ 904.536381][ T3004] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 905.037766][T14479] bond10: entered promiscuous mode [ 905.047367][T14479] 8021q: adding VLAN 0 to HW filter on device bond10 [ 905.091418][T14502] netlink: 'syz.4.11020': attribute type 1 has an invalid length. [ 905.121833][T14504] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 905.261409][T14520] tipc: Resetting bearer [ 905.406617][T14525] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 905.438089][T14525] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 905.464845][T14527] __nla_validate_parse: 5 callbacks suppressed [ 905.464861][T14527] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11026'. [ 905.562077][T14526] syzkaller0: entered promiscuous mode [ 905.595450][T14526] syzkaller0: entered allmulticast mode [ 905.669389][ T36] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 905.678308][T14546] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.11032'. [ 906.070346][T14562] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11034'. [ 906.798800][ T8706] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 907.611633][T14570] netlink: 144 bytes leftover after parsing attributes in process `syz.2.11036'. [ 907.730089][T14579] sock: sock_set_timeout: `syz.2.11042' (pid 14579) tries to set negative timeout [ 907.812324][T14588] netlink: 'syz.2.11042': attribute type 21 has an invalid length. [ 907.906858][ T36] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 908.528990][T14648] xt_hashlimit: size too large, truncated to 1048576 [ 908.909876][T14661] bridge0: port 2(bridge_slave_1) entered disabled state [ 908.917529][T14661] bridge0: port 1(bridge_slave_0) entered disabled state [ 909.060748][T14661] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 909.078072][ T8706] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 909.122655][T14682] netlink: 'syz.2.11068': attribute type 1 has an invalid length. [ 909.140191][T14682] netlink: 88 bytes leftover after parsing attributes in process `syz.2.11068'. [ 909.161433][T14682] netlink: 1 bytes leftover after parsing attributes in process `syz.2.11068'. [ 909.178055][T14682] netlink: 'syz.2.11068': attribute type 1 has an invalid length. [ 909.187931][T14682] netlink: 'syz.2.11068': attribute type 8 has an invalid length. [ 909.199732][T14682] netlink: 606 bytes leftover after parsing attributes in process `syz.2.11068'. [ 909.280429][T14661] vlan2: left promiscuous mode [ 909.286292][T14661] bond1: left promiscuous mode [ 909.291207][T14661] vlan2: left allmulticast mode [ 909.298796][T14661] bond1: left allmulticast mode [ 909.310528][T14684] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.11072'. [ 909.325520][ T36] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 909.336909][ T36] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 909.369496][ T36] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 909.381496][ T36] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 909.419742][T14677] lo speed is unknown, defaulting to 1000 [ 909.426678][ T36] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 909.447357][ T36] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 909.476737][ T36] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 909.496987][ T36] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 909.517429][T14698] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11076'. [ 909.528604][T14698] netlink: 'syz.5.11076': attribute type 30 has an invalid length. [ 909.539929][T14698] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11076'. [ 909.877979][T14715] bond0: (slave rose0): Error: Device can not be enslaved while up [ 909.905599][T14720] syzkaller0: entered promiscuous mode [ 909.911285][T14720] syzkaller0: entered allmulticast mode [ 910.194488][ T36] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 910.276034][T14749] veth0_macvtap: left promiscuous mode [ 910.670930][T14775] nbd: must specify at least one socket [ 911.097874][T14797] __nla_validate_parse: 7 callbacks suppressed [ 911.097891][T14797] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11103'. [ 911.119668][T14804] netlink: 56 bytes leftover after parsing attributes in process `syz.0.11105'. [ 911.260542][T14814] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 911.304378][ T8702] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 911.371665][T14819] bond11: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 911.386063][T14819] bond11 (unregistering): Released all slaves [ 911.445252][T14835] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11115'. [ 911.524412][T14836] syzkaller0: create flow: hash 324083611 index 1 [ 911.683428][ T36] syzkaller0: tun_net_xmit 76 [ 911.690178][ T36] syzkaller0: tun_net_xmit 48 [ 911.704777][ T408] syzkaller0: tun_net_xmit 76 [ 911.722245][T14829] syzkaller0: tun_chr_ioctl cmd 3225442367 [ 911.739015][T14829] syzkaller0: delete flow: hash 324083611 index 1 [ 912.474370][ T8702] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 913.268052][T14842] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-": -EINTR [ 913.425008][T14867] netlink: 'syz.4.11121': attribute type 11 has an invalid length. [ 913.470869][T14867] netlink: 'syz.4.11121': attribute type 11 has an invalid length. [ 913.500108][T14867] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 913.518856][T14864] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11120'. [ 913.595654][ T3004] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 913.701338][T14886] : entered promiscuous mode [ 913.929066][T14900] mac80211_hwsim hwsim105 syzkaller0: left allmulticast mode [ 914.382786][T14941] netlink: 32 bytes leftover after parsing attributes in process `syz.4.11141'. [ 914.395066][T14939] nbd: socks must be embedded in a SOCK_ITEM attr [ 914.711357][T14964] netlink: 'syz.5.11149': attribute type 12 has an invalid length. [ 914.716669][ T7802] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 914.799673][T14964] bond2: option primary_reselect: invalid value (255) [ 914.841363][T14964] bond2 (unregistering): Released all slaves [ 914.908965][T14977] netlink: 'syz.2.11151': attribute type 10 has an invalid length. [ 915.267445][T15004] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11157'. [ 915.511861][T15016] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11159'. [ 915.522077][T15016] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11159'. [ 915.544561][T15021] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11161'. [ 915.646879][T15016] 8021q: adding VLAN 0 to HW filter on device bond11 [ 915.707111][T15020] netlink: 576 bytes leftover after parsing attributes in process `syz.2.11160'. [ 915.864725][ T3004] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 915.987221][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 916.118447][T15046] syzkaller1: entered promiscuous mode [ 916.132222][T15046] syzkaller1: entered allmulticast mode [ 916.276717][T15064] bond12: entered promiscuous mode [ 916.289629][T15065] macvlan2: entered promiscuous mode [ 916.296218][T15065] macvlan2: entered allmulticast mode [ 916.302647][T15065] bond12: (slave macvlan2): Opening slave failed [ 916.351842][T15072] FAULT_INJECTION: forcing a failure. [ 916.351842][T15072] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 916.353984][T15067] macvlan2: entered promiscuous mode [ 916.366772][T15072] CPU: 1 UID: 0 PID: 15072 Comm: syz.2.11172 Not tainted syzkaller #0 PREEMPT(full) [ 916.366795][T15072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 916.366805][T15072] Call Trace: [ 916.366813][T15072] [ 916.366821][T15072] dump_stack_lvl+0xe8/0x150 [ 916.366853][T15072] should_fail_ex+0x412/0x560 [ 916.366883][T15072] _copy_from_user+0x2d/0xb0 [ 916.366909][T15072] ___sys_sendmsg+0x1c6/0x360 [ 916.366935][T15072] ? __pfx____sys_sendmsg+0x10/0x10 [ 916.366983][T15072] ? __fget_files+0x2a/0x420 [ 916.367008][T15072] ? __fget_files+0x3a0/0x420 [ 916.367041][T15072] __x64_sys_sendmsg+0x1bd/0x2a0 [ 916.367060][T15072] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 916.367086][T15072] ? __pfx_ksys_write+0x10/0x10 [ 916.367115][T15072] do_syscall_64+0x14d/0xf80 [ 916.367133][T15072] ? trace_irq_disable+0x3b/0x150 [ 916.367157][T15072] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 916.367175][T15072] ? clear_bhb_loop+0x40/0x90 [ 916.367197][T15072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 916.367214][T15072] RIP: 0033:0x7ff09079c799 [ 916.367230][T15072] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 916.367244][T15072] RSP: 002b:00007ff091619028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 916.367263][T15072] RAX: ffffffffffffffda RBX: 00007ff090a15fa0 RCX: 00007ff09079c799 [ 916.367276][T15072] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 916.367287][T15072] RBP: 00007ff091619090 R08: 0000000000000000 R09: 0000000000000000 [ 916.367298][T15072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 916.367308][T15072] R13: 00007ff090a16038 R14: 00007ff090a15fa0 R15: 00007ffd6ae5f8d8 [ 916.367342][T15072] [ 916.469085][T15073] sctp: [Deprecated]: syz.4.11171 (pid 15073) Use of int in max_burst socket option. [ 916.469085][T15073] Use struct sctp_assoc_value instead [ 916.573060][T15067] macvlan2: entered allmulticast mode [ 916.588956][T15067] bond12: (slave macvlan2): Opening slave failed [ 916.609528][T15083] tipc: Started in network mode [ 916.620080][T15083] tipc: Node identity 7f000001, cluster identity 4711 [ 916.630360][T15083] tipc: Enabling of bearer rejected, failed to enable media [ 916.750300][T15085] __nla_validate_parse: 2 callbacks suppressed [ 916.750319][T15085] netlink: 112 bytes leftover after parsing attributes in process `syz.5.11176'. [ 916.871297][T15092] netlink: 72 bytes leftover after parsing attributes in process `syz.1.11178'. [ 916.960067][T15108] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11184'. [ 916.983081][T15108] bridge_slave_1: left allmulticast mode [ 916.999057][T15108] bridge_slave_1: left promiscuous mode [ 917.006541][T15108] bridge0: port 2(bridge_slave_1) entered disabled state [ 917.026618][ T36] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 917.046397][T15108] bridge_slave_0: left allmulticast mode [ 917.052226][T15108] bridge_slave_0: left promiscuous mode [ 917.064544][T15108] bridge0: port 1(bridge_slave_0) entered disabled state [ 917.083247][T15117] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11187'. [ 917.115166][T15117] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11187'. [ 917.152968][T15114] bond0: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 917.165979][T15114] bond0: (slave ip6tnl1): Error -95 calling set_mac_address [ 917.217426][T15124] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11189'. [ 917.229411][T15124] netlink: 'syz.2.11189': attribute type 1 has an invalid length. [ 917.292907][T15124] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11189'. [ 917.307723][T15125] syzkaller0: entered promiscuous mode [ 917.315893][T15125] syzkaller0: entered allmulticast mode [ 917.330958][T15124] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11189'. [ 917.376703][T15124] netlink: 'syz.2.11189': attribute type 2 has an invalid length. [ 917.398057][T15124] netlink: 'syz.2.11189': attribute type 2 has an invalid length. [ 917.406447][T15124] netlink: 'syz.2.11189': attribute type 2 has an invalid length. [ 917.414996][T15133] netlink: 'syz.4.11191': attribute type 4 has an invalid length. [ 917.423029][T15133] netlink: 224 bytes leftover after parsing attributes in process `syz.4.11191'. [ 917.503023][T15136] netlink: 256 bytes leftover after parsing attributes in process `syz.2.11192'. [ 918.184255][ T3004] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 919.102186][T15146] netlink: 'syz.2.11194': attribute type 11 has an invalid length. [ 919.112058][T15152] vlan3: entered promiscuous mode [ 919.118444][T15152] geneve1: entered promiscuous mode [ 919.125955][T15152] vlan3: entered allmulticast mode [ 919.131082][T15152] geneve1: entered allmulticast mode [ 919.272626][T15162] Cannot find del_set index 49151 as target [ 919.284868][ T36] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 919.308077][T15161] netlink: 'syz.1.11199': attribute type 1 has an invalid length. [ 919.471166][T15170] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 919.522916][T15174] 0·: renamed from hsr_slave_1 [ 919.543493][T15174] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 919.838844][T15187] mac80211_hwsim hwsim105 syzkaller0: entered allmulticast mode [ 919.885804][T15186] netlink: 'syz.4.11207': attribute type 2 has an invalid length. [ 920.058232][T15194] netlink: 'syz.0.11211': attribute type 33 has an invalid length. [ 920.119087][T15194] bond12: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 920.165111][T15194] bond12 (unregistering): Released all slaves [ 920.327394][T15211] netlink: 'syz.4.11216': attribute type 1 has an invalid length. [ 920.426284][ T36] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 920.491322][T15220] bond5: (slave vxcan2): The slave device specified does not support setting the MAC address [ 920.554806][T15220] bond5: (slave vxcan2): Setting fail_over_mac to active for active-backup mode [ 920.597875][T15220] bond5: (slave vxcan2): making interface the new active one [ 920.637081][T15220] bond5: (slave vxcan2): Enslaving as an active interface with an up link [ 921.358033][T15273] netlink: 'syz.2.11232': attribute type 1 has an invalid length. [ 921.586808][ T8702] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 921.655690][T15288] netlink: 'syz.0.11239': attribute type 5 has an invalid length. [ 922.092199][T15311] mac80211_hwsim hwsim105 syzkaller0: Caught tx_queue_len zero misconfig [ 922.109107][T15311] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 922.502422][T15292] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 922.523997][T15309] netlink: 'syz.5.11242': attribute type 10 has an invalid length. [ 922.546520][T15309] __nla_validate_parse: 10 callbacks suppressed [ 922.546536][T15309] netlink: 228 bytes leftover after parsing attributes in process `syz.5.11242'. [ 922.706693][T20097] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 922.737353][T15328] xt_hashlimit: size too large, truncated to 1048576 [ 922.797987][T15339] netlink: 'syz.2.11252': attribute type 7 has an invalid length. [ 922.822390][T15336] atomic_op ffff888036341198 conn xmit_atomic 0000000000000000 [ 923.349176][T15388] netlink: 14 bytes leftover after parsing attributes in process `syz.2.11261'. [ 923.553009][T15397] netlink: 'syz.2.11264': attribute type 1 has an invalid length. [ 923.791205][T15419] netlink: 44 bytes leftover after parsing attributes in process `syz.5.11269'. [ 923.811314][T15419] netlink: 43 bytes leftover after parsing attributes in process `syz.5.11269'. [ 923.858997][ T8702] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 923.863168][T15419] netlink: 'syz.5.11269': attribute type 5 has an invalid length. [ 923.935637][T15419] netlink: 43 bytes leftover after parsing attributes in process `syz.5.11269'. [ 923.968253][T15432] netlink: 'syz.0.11272': attribute type 11 has an invalid length. [ 924.128151][T15442] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11273'. [ 924.319882][T15458] netlink: 108 bytes leftover after parsing attributes in process `syz.1.11278'. [ 924.478257][T15465] xt_cgroup: xt_cgroup: no path or classid specified [ 924.518346][T15473] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11284'. [ 924.520002][T15472] netlink: 44 bytes leftover after parsing attributes in process `syz.2.11283'. [ 924.543184][T15473] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11284'. [ 925.017884][ T8702] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 925.288183][T15530] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 925.429642][T15537] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 925.590891][T15548] validate_nla: 2 callbacks suppressed [ 925.590908][T15548] netlink: 'syz.5.11307': attribute type 21 has an invalid length. [ 925.742457][T15548] netlink: 'syz.5.11307': attribute type 1 has an invalid length. [ 925.811270][T15554] bond13 (unregistering): Released all slaves [ 925.847923][T15553] bond2 (unregistering): Released all slaves [ 925.917513][T15555] lo speed is unknown, defaulting to 1000 [ 926.124967][T15564] syzkaller1: entered promiscuous mode [ 926.130711][T15564] syzkaller1: entered allmulticast mode [ 926.136467][ T3004] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 926.166104][T15579] netlink: 'syz.0.11315': attribute type 7 has an invalid length. [ 926.199318][T15579] netlink: 'syz.0.11315': attribute type 8 has an invalid length. [ 926.231301][T19766] lec:lec_start_xmit: lec0:No lecd attached [ 926.394376][T15593] netlink: 'syz.0.11315': attribute type 33 has an invalid length. [ 926.921311][T15616] vlan2: entered promiscuous mode [ 926.944684][T15616] bridge0: entered promiscuous mode [ 927.032915][T15627] syzkaller1: entered promiscuous mode [ 927.051658][T15627] syzkaller1: entered allmulticast mode [ 927.092683][T15627] veth0: entered promiscuous mode [ 927.109837][T15627] vlan6: entered promiscuous mode [ 927.117057][T15627] bridge0: entered promiscuous mode [ 927.238258][T15627] veth0: left promiscuous mode [ 927.261200][ T3004] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 927.528135][T15661] tap0: tun_chr_ioctl cmd 1074025672 [ 927.535512][T15661] tap0: ignored: set checksum disabled [ 927.647147][T15680] __nla_validate_parse: 70 callbacks suppressed [ 927.647168][T15680] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11340'. [ 927.776343][T15680] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11340'. [ 927.846564][T15699] tipc: Cannot configure node identity twice [ 927.943486][T15710] netlink: 152 bytes leftover after parsing attributes in process `syz.1.11348'. [ 928.061046][T15716] netlink: 64 bytes leftover after parsing attributes in process `syz.5.11350'. [ 928.299280][T15732] netlink: 'syz.2.11357': attribute type 1 has an invalid length. [ 928.376476][T15738] netlink: zone id is out of range [ 928.381638][T15738] netlink: zone id is out of range [ 928.406097][ T36] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 928.409232][T15738] netlink: zone id is out of range [ 928.421342][T15738] netlink: zone id is out of range [ 928.428316][T15733] bond7: entered promiscuous mode [ 928.433356][T15733] bond7: entered allmulticast mode [ 928.442340][T15738] netlink: zone id is out of range [ 928.445659][T15733] 8021q: adding VLAN 0 to HW filter on device bond7 [ 928.447895][T15738] netlink: zone id is out of range [ 928.459268][T15738] netlink: zone id is out of range [ 928.466300][T15738] netlink: zone id is out of range [ 928.471486][T15738] netlink: zone id is out of range [ 928.539986][T15745] netlink: 'syz.4.11361': attribute type 1 has an invalid length. [ 928.552409][T15745] netlink: 'syz.4.11361': attribute type 2 has an invalid length. [ 928.609894][T15751] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11362'. [ 928.615914][T15752] netlink: 'syz.5.11363': attribute type 21 has an invalid length. [ 928.621893][T15751] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11362'. [ 928.748396][T15760] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11366'. [ 928.758712][T15760] netlink: 176 bytes leftover after parsing attributes in process `syz.4.11366'. [ 928.808004][T15760] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11366'. [ 929.122588][T15787] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 929.385847][T15823] netlink: 176 bytes leftover after parsing attributes in process `syz.2.11379'. [ 929.394902][T15821] bond6: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 929.430830][T15821] bond6: (slave lo): Enslaving as an active interface with an up link [ 929.556061][ T3004] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 929.899942][T15850] bond5: (slave bridge0): Releasing active interface [ 929.979009][T15855] netlink: 'syz.4.11387': attribute type 2 has an invalid length. [ 930.147374][T15861] 8021q: adding VLAN 0 to HW filter on device bond13 [ 930.182144][T15861] bond13: (slave veth7): Enslaving as an active interface with a down link [ 930.182662][T15865] nbd: must specify a size in bytes for the device [ 930.212053][T15861] vlan2: entered allmulticast mode [ 930.218902][T15861] veth0_to_bond: entered allmulticast mode [ 930.227398][T15861] veth0_to_bond: entered promiscuous mode [ 930.233518][T15861] veth0_to_bond: left promiscuous mode [ 930.245863][T15861] bond13: (slave vlan2): making interface the new active one [ 930.255719][T15861] veth0_to_bond: entered promiscuous mode [ 930.262054][T15861] vlan2: entered promiscuous mode [ 930.268260][T15861] bond13: (slave vlan2): Enslaving as an active interface with an up link [ 930.602854][T15889] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 930.666140][ T36] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 930.969494][T15917] xt_CT: You must specify a L4 protocol and not use inversions on it [ 930.977386][T15919] 8021q: VLANs not supported on ip6tnl0 [ 931.060174][ T36] netdevsim netdevsim0 : set [0, 0] type 1 family 0 port 8472 - 0 [ 931.071553][ T36] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 931.115638][ T36] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 931.136735][ T36] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 931.256729][T15938] validate_nla: 2 callbacks suppressed [ 931.256748][T15938] netlink: 'syz.2.11414': attribute type 83 has an invalid length. [ 931.390098][T15945] veth0_to_bridge: vlans aren't supported yet for dev_uc|mc_add() [ 931.474379][T15951] netlink: 'syz.0.11419': attribute type 7 has an invalid length. [ 931.524956][T15953] netlink: 'syz.2.11422': attribute type 1 has an invalid length. [ 931.570777][T15953] 8021q: adding VLAN 0 to HW filter on device bond8 [ 931.579522][T15951] netlink: 'syz.0.11419': attribute type 7 has an invalid length. [ 931.619038][T15959] bond8: (slave gretap1): making interface the new active one [ 931.632880][T15959] bond8: (slave gretap1): Enslaving as an active interface with an up link [ 931.663971][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5430 ms [ 931.672001][ C1] lec:lec_tx_timeout: lec0 [ 931.678808][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 931.785154][ T8702] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 931.808754][T15970] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 931.872877][T15961] lo speed is unknown, defaulting to 1000 [ 932.007680][T15983] IPVS: set_ctl: invalid protocol: 41 224.0.0.1:20002 [ 932.095060][T15987] netlink: 'syz.1.11431': attribute type 5 has an invalid length. [ 932.513660][T16019] 8021q: VLANs not supported on ip6_vti0 [ 932.912940][T23525] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 933.031479][T16063] net_ratelimit: 52 callbacks suppressed [ 933.031496][T16063] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 933.107074][T16067] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 933.152754][T16070] __nla_validate_parse: 17 callbacks suppressed [ 933.152771][T16070] netlink: 36 bytes leftover after parsing attributes in process `syz.5.11454'. [ 933.170030][T16071] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11455'. [ 933.378460][T16084] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11460'. [ 933.532139][T16093] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11460'. [ 933.612656][T16096] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11462'. [ 933.718849][T16096] macvtap0: entered promiscuous mode [ 933.725888][T16096] vlan0: entered promiscuous mode [ 933.731401][T16096] macvtap0: entered allmulticast mode [ 933.738761][T16096] vlan0: entered allmulticast mode [ 933.748534][T16096] veth0_vlan: entered allmulticast mode [ 934.046145][ T7802] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 934.195256][T16103] netlink: 'syz.2.11464': attribute type 21 has an invalid length. [ 934.197691][T16106] netlink: 72 bytes leftover after parsing attributes in process `syz.2.11464'. [ 934.214955][T16106] netlink: 72 bytes leftover after parsing attributes in process `syz.2.11464'. [ 934.230585][T16103] netlink: 'syz.2.11464': attribute type 6 has an invalid length. [ 934.238655][T16103] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11464'. [ 934.308118][T16114] netlink: 'syz.0.11469': attribute type 1 has an invalid length. [ 934.321916][T16115] netlink: 'syz.0.11469': attribute type 1 has an invalid length. [ 934.335873][T16120] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11468'. [ 934.411624][T16120] macsec2: entered promiscuous mode [ 934.432608][T16120] macsec2: entered allmulticast mode [ 934.440576][T16129] nft_compat: unsupported protocol 0 [ 934.469423][T16129] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11471'. [ 934.480076][T16120] bridge0: entered allmulticast mode [ 934.488639][T16120] bridge0: port 1(macsec2) entered blocking state [ 934.505819][T16120] bridge0: port 1(macsec2) entered disabled state [ 934.530628][T16120] bridge0: left allmulticast mode [ 934.542354][T16136] sctp: [Deprecated]: syz.1.11473 (pid 16136) Use of struct sctp_assoc_value in delayed_ack socket option. [ 934.542354][T16136] Use struct sctp_sack_info instead [ 934.559653][T16137] sctp: [Deprecated]: syz.1.11473 (pid 16137) Use of struct sctp_assoc_value in delayed_ack socket option. [ 934.559653][T16137] Use struct sctp_sack_info instead [ 934.778388][T16159] "syz.5.11478" (16159) uses obsolete ecb(arc4) skcipher [ 935.056820][T16177] 8021q: adding VLAN 0 to HW filter on device bond7 [ 935.088001][T16189] netlink: 'syz.1.11487': attribute type 16 has an invalid length. [ 935.175696][ T36] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 935.219864][T16194] lo: entered promiscuous mode [ 935.226784][T16194] tunl0: entered promiscuous mode [ 935.232126][T16194] gre0: entered promiscuous mode [ 935.243525][T16194] gretap0: entered promiscuous mode [ 935.250313][T16194] ip_vti0: entered promiscuous mode [ 935.701005][T16226] syz_tun: entered allmulticast mode [ 935.761240][T16225] syz_tun: left allmulticast mode [ 936.302793][T16268] xt_TCPMSS: Only works on TCP SYN packets [ 936.305826][ T8706] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 936.694745][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 936.702813][ C1] lec:lec_tx_timeout: lec0 [ 937.390374][T16318] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 937.428329][T23525] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 937.728189][T16335] netlink: 'syz.2.11523': attribute type 10 has an invalid length. [ 937.926948][T16353] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 938.069619][T16368] netlink: 'syz.4.11533': attribute type 1 has an invalid length. [ 938.172170][T16376] __nla_validate_parse: 41 callbacks suppressed [ 938.172189][T16376] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11534'. [ 938.212853][T16368] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11533'. [ 938.239130][T16374] bond8: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 938.253116][T16374] bond8: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 938.256234][T16381] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11536'. [ 938.265400][T16374] bond8: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 938.308610][T16382] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11536'. [ 938.575446][ T8702] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 939.127253][T16400] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_bridge, syncid = 2, id = 0 [ 939.150891][T16399] bridge0: port 1(batadv2) entered blocking state [ 939.159399][T16399] bridge0: port 1(batadv2) entered disabled state [ 939.168832][T16399] batadv2: entered allmulticast mode [ 939.178885][T16399] batadv2: entered promiscuous mode [ 939.391233][ T3004] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 939.409257][ T3004] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 939.427850][T16417] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 939.464991][T16419] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 939.541095][T16431] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11547'. [ 939.575657][T16431] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11547'. [ 939.639940][T16437] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11551'. [ 939.651938][T16437] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11551'. [ 939.668212][ T3004] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 939.677535][ T3004] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 939.686658][T16439] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 939.694974][T16439] netlink: 80 bytes leftover after parsing attributes in process `syz.2.11553'. [ 939.708371][T16441] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11551'. [ 939.714737][T23525] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 939.731166][T16442] bridge0: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 939.771629][T16439] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 939.809537][T16447] xt_hashlimit: size too large, truncated to 1048576 [ 940.091971][T16462] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20000 [ 940.369082][T16482] netlink: 'syz.4.11567': attribute type 83 has an invalid length. [ 940.505867][T16492] openvswitch: netlink: Message has 4 unknown bytes. [ 940.572230][T16495] netlink: 'syz.1.11573': attribute type 11 has an invalid length. [ 940.708042][T16503] sctp: [Deprecated]: syz.5.11577 (pid 16503) Use of struct sctp_assoc_value in delayed_ack socket option. [ 940.708042][T16503] Use struct sctp_sack_info instead [ 940.799933][T16506] bond15: option mode: invalid value (133) [ 940.827115][T16506] bond15 (unregistering): Released all slaves [ 940.857879][ T36] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 941.006471][T16521] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 941.221674][T16537] ip6t_srh: unknown srh match flags 5F28 [ 941.308972][T16541] netlink: 'syz.1.11587': attribute type 10 has an invalid length. [ 941.333431][T16539] netlink: 'syz.5.11586': attribute type 10 has an invalid length. [ 941.351540][T16541] bond0: (slave wlan1): Enslaving as an active interface with a down link [ 941.370194][T16539] team0: Port device dummy0 added [ 941.405562][ T36] vlan2: left promiscuous mode [ 941.668483][ T7802] bond0: (slave wlan1): link status definitely up [ 941.680589][T16557] geneve2: entered promiscuous mode [ 941.693901][T16557] geneve2: entered allmulticast mode [ 941.752353][ T3004] bridge_slave_1: left allmulticast mode [ 941.761427][ T3004] bridge_slave_1: left promiscuous mode [ 941.773466][ T3004] bridge0: port 2(bridge_slave_1) entered disabled state [ 941.807082][ T3004] bridge_slave_0: left allmulticast mode [ 941.812746][ T3004] bridge_slave_0: left promiscuous mode [ 941.825270][ T3004] bridge0: port 1(bridge_slave_0) entered disabled state [ 941.994980][ T8702] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 942.183346][ T3004] bond6 (unregistering): (slave geneve4): Releasing active interface [ 942.647784][ T3004] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 942.659995][ T3004] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 942.669819][ T3004] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 942.678448][ T3004] bond0 (unregistering): Released all slaves [ 942.688099][ T3004] bond1 (unregistering): Released all slaves [ 942.701060][ T3004] bond2 (unregistering): Released all slaves [ 942.713702][ T3004] bond3 (unregistering): Released all slaves [ 942.726599][ T3004] bond4 (unregistering): Released all slaves [ 942.741989][ T3004] bond5 (unregistering): Released all slaves [ 942.760158][ T3004] bond6 (unregistering): Released all slaves [ 942.779470][ T3004] bond7 (unregistering): (slave veth0_to_bond): Releasing active interface [ 942.790052][ T3004] bond7 (unregistering): Released all slaves [ 942.957183][ T3004] : left promiscuous mode [ 943.116731][ T7802] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 943.170277][ T3004] tipc: Disabling bearer [ 943.192756][ T3004] tipc: Left network mode [ 943.211466][T16611] __nla_validate_parse: 15 callbacks suppressed [ 943.211482][T16611] netlink: 32 bytes leftover after parsing attributes in process `syz.1.11607'. [ 943.235299][T16609] syzkaller0: entered promiscuous mode [ 943.240784][T16609] syzkaller0: entered allmulticast mode [ 943.362048][T16616] netlink: 112 bytes leftover after parsing attributes in process `syz.2.11609'. [ 943.372082][T16616] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11609'. [ 943.381057][T16624] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 943.388313][T16616] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11609'. [ 943.392793][T16624] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 943.422354][T16616] tipc: MTU too low for tipc bearer [ 943.446045][T16616] netlink: 'syz.2.11609': attribute type 21 has an invalid length. [ 943.454203][T16616] netlink: 168 bytes leftover after parsing attributes in process `syz.2.11609'. [ 943.526639][T16628] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 943.664571][ T7802] wlan1: Trigger new scan to find an IBSS to join [ 943.752815][T16649] tipc: Enabled bearer , priority 0 [ 943.783126][T16637] tipc: Resetting bearer [ 943.902530][T16662] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11623'. [ 943.964946][T16637] tipc: Disabling bearer [ 944.009623][T16662] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 944.051459][T16662] netlink: 148 bytes leftover after parsing attributes in process `syz.4.11623'. [ 944.245663][T16688] netlink: 56 bytes leftover after parsing attributes in process `syz.0.11628'. [ 944.255010][T20097] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 944.649468][T16708] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11633'. [ 944.701081][T16709] netlink: 36 bytes leftover after parsing attributes in process `syz.5.11633'. [ 944.998753][ T3004] hsr_slave_0: left promiscuous mode [ 945.016578][ T3004] hsr_slave_1: left promiscuous mode [ 945.364123][T20095] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 945.637612][T16761] tunl0: entered promiscuous mode [ 945.662216][T16761] netlink: 'syz.2.11643': attribute type 3 has an invalid length. [ 945.802544][T16771] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 945.902603][T16770] IPv6: sit1: Disabled Multicast RS [ 945.991015][T16787] netlink: 'syz.1.11650': attribute type 15 has an invalid length. [ 946.096333][ T36] netdevsim netdevsim1 netdevsim0: set [0, 1] type 1 family 0 port 256 - 0 [ 946.125169][ T8702] netdevsim netdevsim1 netdevsim1: set [0, 1] type 1 family 0 port 256 - 0 [ 946.154677][ T8702] netdevsim netdevsim1 netdevsim2: set [0, 1] type 1 family 0 port 256 - 0 [ 946.163572][ T8702] netdevsim netdevsim1 netdevsim3: set [0, 1] type 1 family 0 port 256 - 0 [ 946.208919][T16802] syzkaller0: left promiscuous mode [ 946.214700][T16802] syzkaller0: left allmulticast mode [ 946.449568][ T3004] IPVS: stop unused estimator thread 0... [ 946.514023][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 946.628946][T20097] wlan1: Trigger new scan to find an IBSS to join [ 946.756193][T16853] xt_cgroup: path and classid specified [ 946.762954][ T409] IPVS: starting estimator thread 0... [ 946.812899][T16860] nbd: nbd64 already in use [ 946.855626][T16855] IPVS: using max 30 ests per chain, 72000 per kthread [ 947.018179][T16560] udevd[16560]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 947.081829][T16877] syzkaller0: entered promiscuous mode [ 947.107672][T16877] syzkaller0: entered allmulticast mode [ 947.125949][T16881] netlink: 'syz.5.11674': attribute type 29 has an invalid length. [ 947.136609][T16881] netlink: 'syz.5.11674': attribute type 29 has an invalid length. [ 947.148184][T16881] netlink: 'syz.5.11674': attribute type 29 has an invalid length. [ 947.157933][T16881] netlink: 'syz.5.11674': attribute type 29 has an invalid length. [ 947.171640][T16881] netlink: 'syz.5.11674': attribute type 29 has an invalid length. [ 947.181395][T16881] netlink: 'syz.5.11674': attribute type 29 has an invalid length. [ 947.190551][T16881] netlink: 'syz.5.11674': attribute type 29 has an invalid length. [ 947.208162][T16874] openvswitch: netlink: Missing valid actions attribute. [ 947.218272][T16884] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 947.232354][T16874] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 947.371943][T16892] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 947.519785][T16906] openvswitch: netlink: Message has 8 unknown bytes. [ 947.529100][T16906] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 947.551873][T16903] syzkaller0: entered promiscuous mode [ 947.577639][T16903] syzkaller0: entered allmulticast mode [ 947.648804][ T8702] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 947.776204][T16924] x_tables: duplicate underflow at hook 3 [ 947.929267][T16939] pim6reg: entered allmulticast mode [ 948.089649][T16953] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 948.094339][T16951] syzkaller0: entered promiscuous mode [ 948.110057][T16951] syzkaller0: entered allmulticast mode [ 948.526720][T16985] syzkaller1: entered allmulticast mode [ 948.617044][T16996] Cannot find set identified by id 3 to match [ 948.651485][T16997] validate_nla: 2 callbacks suppressed [ 948.651502][T16997] netlink: 'syz.0.11716': attribute type 1 has an invalid length. [ 948.667731][T16997] __nla_validate_parse: 26 callbacks suppressed [ 948.667748][T16997] netlink: 96 bytes leftover after parsing attributes in process `syz.0.11716'. [ 948.684664][T17003] delete_channel: no stack [ 948.702794][T17003] netlink: 116 bytes leftover after parsing attributes in process `syz.5.11719'. [ 948.782010][ T8702] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 948.853509][T17008] netlink: 20 bytes leftover after parsing attributes in process `syz.5.11721'. [ 949.728809][T17071] netlink: 108 bytes leftover after parsing attributes in process `syz.2.11737'. [ 949.831176][T17082] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11739'. [ 949.840677][T17082] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11739'. [ 949.888361][ T3004] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 949.989945][T17095] netlink: 52 bytes leftover after parsing attributes in process `syz.0.11738'. [ 950.057870][T17084] netlink: 76 bytes leftover after parsing attributes in process `syz.0.11738'. [ 950.090621][T17084] netlink: 52 bytes leftover after parsing attributes in process `syz.0.11738'. [ 950.101133][T17102] syzkaller0: entered promiscuous mode [ 950.108509][T17102] syzkaller0: entered allmulticast mode [ 950.142317][T17102] netlink: 'syz.5.11743': attribute type 1 has an invalid length. [ 950.153432][T17102] netlink: 'syz.5.11743': attribute type 1 has an invalid length. [ 950.309611][T17116] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11746'. [ 950.364861][T17116] netlink: 'syz.0.11746': attribute type 10 has an invalid length. [ 950.376517][T17118] netem: change failed [ 950.412326][T17118] netlink: 'syz.2.11748': attribute type 24 has an invalid length. [ 950.510412][T17125] bond2: entered promiscuous mode [ 950.519908][T17125] 8021q: adding VLAN 0 to HW filter on device bond2 [ 950.544448][T17126] bridge1: entered promiscuous mode [ 950.550396][T17126] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 950.575764][T17134] lo: entered allmulticast mode [ 950.605296][T17134] lo: left allmulticast mode [ 950.766995][T17146] syzkaller0: entered promiscuous mode [ 950.772686][T17146] syzkaller0: entered allmulticast mode [ 950.866343][T17143] [ 950.868708][T17143] ====================================================== [ 950.875722][T17143] WARNING: possible circular locking dependency detected [ 950.882752][T17143] syzkaller #0 Not tainted [ 950.887161][T17143] ------------------------------------------------------ [ 950.894171][T17143] syz.0.11756/17143 is trying to acquire lock: [ 950.900320][T17143] ffff88802674bed0 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1b3/0x450 [ 950.909815][T17143] [ 950.909815][T17143] but task is already holding lock: [ 950.917174][T17143] ffff88802674b990 (&q->q_usage_counter(io)#58){++++}-{0:0}, at: elevator_change+0x198/0x450 [ 950.927375][T17143] [ 950.927375][T17143] which lock already depends on the new lock. [ 950.927375][T17143] [ 950.937763][T17143] [ 950.937763][T17143] the existing dependency chain (in reverse order) is: [ 950.946754][T17143] [ 950.946754][T17143] -> #6 (&q->q_usage_counter(io)#58){++++}-{0:0}: [ 950.955351][T17143] blk_alloc_queue+0x546/0x680 [ 950.960697][T17143] __blk_mq_alloc_disk+0x197/0x390 [ 950.966347][T17143] nbd_dev_add+0x499/0xb50 [ 950.971328][T17143] nbd_init+0x168/0x1f0 [ 950.976074][T17143] do_one_initcall+0x250/0x8d0 [ 950.981353][T17143] do_initcall_level+0x104/0x190 [ 950.986821][T17143] do_initcalls+0x59/0xa0 [ 950.991658][T17143] kernel_init_freeable+0x2a6/0x3e0 [ 950.997364][T17143] kernel_init+0x1d/0x1d0 [ 951.002202][T17143] ret_from_fork+0x51e/0xb90 [ 951.007300][T17143] ret_from_fork_asm+0x1a/0x30 [ 951.012582][T17143] [ 951.012582][T17143] -> #5 (fs_reclaim){+.+.}-{0:0}: [ 951.019779][T17143] fs_reclaim_acquire+0x71/0x100 [ 951.025230][T17143] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 951.031541][T17143] __alloc_skb+0x1d0/0x7d0 [ 951.036468][T17143] tcp_stream_alloc_skb+0x3f/0x580 [ 951.042173][T17143] tcp_sendmsg_locked+0x1375/0x5490 [ 951.047874][T17143] tcp_sendmsg+0x2f/0x50 [ 951.052620][T17143] sock_write_iter+0x406/0x4f0 [ 951.057890][T17143] vfs_write+0x61d/0xb90 [ 951.062638][T17143] ksys_write+0x150/0x270 [ 951.067471][T17143] do_syscall_64+0x14d/0xf80 [ 951.072565][T17143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 951.078961][T17143] [ 951.078961][T17143] -> #4 (sk_lock-AF_INET){+.+.}-{0:0}: [ 951.086597][T17143] lock_sock_nested+0x48/0x100 [ 951.091869][T17143] inet_shutdown+0x6a/0x390 [ 951.096950][T17143] nbd_mark_nsock_dead+0x2e9/0x560 [ 951.102565][T17143] recv_work+0x1c7f/0x1d90 [ 951.107518][T17143] process_scheduled_works+0xb02/0x1830 [ 951.113574][T17143] worker_thread+0xa50/0xfc0 [ 951.118671][T17143] kthread+0x388/0x470 [ 951.123257][T17143] ret_from_fork+0x51e/0xb90 [ 951.128354][T17143] ret_from_fork_asm+0x1a/0x30 [ 951.133631][T17143] [ 951.133631][T17143] -> #3 (&nsock->tx_lock){+.+.}-{4:4}: [ 951.141260][T17143] __mutex_lock+0x19f/0x1300 [ 951.146357][T17143] nbd_queue_rq+0x37b/0x1100 [ 951.151460][T17143] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 951.157507][T17143] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 951.164402][T17143] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 951.170889][T17143] blk_mq_run_hw_queue+0x348/0x4f0 [ 951.176545][T17143] blk_mq_dispatch_list+0xd16/0xe10 [ 951.182252][T17143] blk_mq_flush_plug_list+0x48d/0x570 [ 951.188141][T17143] __blk_flush_plug+0x3ed/0x4d0 [ 951.193495][T17143] __submit_bio+0x28d/0x580 [ 951.198499][T17143] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 951.204632][T17143] block_read_full_folio+0x599/0x830 [ 951.210448][T17143] filemap_read_folio+0x137/0x3b0 [ 951.215976][T17143] do_read_cache_folio+0x358/0x590 [ 951.221594][T17143] read_part_sector+0xb6/0x2b0 [ 951.226902][T17143] adfspart_check_ICS+0xa5/0xa40 [ 951.232344][T17143] bdev_disk_changed+0x7ba/0x1550 [ 951.237867][T17143] blkdev_get_whole+0x380/0x510 [ 951.243258][T17143] bdev_open+0x31e/0xd30 [ 951.248003][T17143] blkdev_open+0x470/0x610 [ 951.252923][T17143] do_dentry_open+0x785/0x14e0 [ 951.258194][T17143] vfs_open+0x3b/0x340 [ 951.262770][T17143] path_openat+0x2e08/0x3860 [ 951.267867][T17143] do_file_open+0x23e/0x4a0 [ 951.272871][T17143] do_sys_openat2+0x113/0x200 [ 951.278058][T17143] __x64_sys_openat+0x138/0x170 [ 951.283419][T17143] do_syscall_64+0x14d/0xf80 [ 951.288514][T17143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 951.294908][T17143] [ 951.294908][T17143] -> #2 (&cmd->lock){+.+.}-{4:4}: [ 951.302102][T17143] __mutex_lock+0x19f/0x1300 [ 951.307193][T17143] nbd_queue_rq+0xc6/0x1100 [ 951.312208][T17143] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 951.318257][T17143] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 951.325101][T17143] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 951.331607][T17143] blk_mq_run_hw_queue+0x348/0x4f0 [ 951.337245][T17143] blk_mq_dispatch_list+0xd16/0xe10 [ 951.342959][T17143] blk_mq_flush_plug_list+0x48d/0x570 [ 951.348835][T17143] __blk_flush_plug+0x3ed/0x4d0 [ 951.354192][T17143] __submit_bio+0x28d/0x580 [ 951.359205][T17143] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 951.365345][T17143] block_read_full_folio+0x599/0x830 [ 951.371144][T17143] filemap_read_folio+0x137/0x3b0 [ 951.376681][T17143] do_read_cache_folio+0x358/0x590 [ 951.382318][T17143] read_part_sector+0xb6/0x2b0 [ 951.387591][T17143] adfspart_check_ICS+0xa5/0xa40 [ 951.393035][T17143] bdev_disk_changed+0x7ba/0x1550 [ 951.398561][T17143] blkdev_get_whole+0x380/0x510 [ 951.403916][T17143] bdev_open+0x31e/0xd30 [ 951.408661][T17143] blkdev_open+0x470/0x610 [ 951.413579][T17143] do_dentry_open+0x785/0x14e0 [ 951.418857][T17143] vfs_open+0x3b/0x340 [ 951.423446][T17143] path_openat+0x2e08/0x3860 [ 951.428544][T17143] do_file_open+0x23e/0x4a0 [ 951.433554][T17143] do_sys_openat2+0x113/0x200 [ 951.438746][T17143] __x64_sys_openat+0x138/0x170 [ 951.444125][T17143] do_syscall_64+0x14d/0xf80 [ 951.449221][T17143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 951.455620][T17143] [ 951.455620][T17143] -> #1 (set->srcu){.+.+}-{0:0}: [ 951.462731][T17143] __synchronize_srcu+0xca/0x3e0 [ 951.468181][T17143] elevator_switch+0x1e8/0x7a0 [ 951.473449][T17143] elevator_change+0x2cc/0x450 [ 951.478716][T17143] elevator_set_default+0x36c/0x430 [ 951.484423][T17143] blk_register_queue+0x366/0x430 [ 951.489951][T17143] __add_disk+0x677/0xd50 [ 951.494794][T17143] add_disk_fwnode+0xfb/0x480 [ 951.499991][T17143] nbd_dev_add+0x72c/0xb50 [ 951.504921][T17143] nbd_init+0x168/0x1f0 [ 951.509591][T17143] do_one_initcall+0x250/0x8d0 [ 951.514867][T17143] do_initcall_level+0x104/0x190 [ 951.520319][T17143] do_initcalls+0x59/0xa0 [ 951.525161][T17143] kernel_init_freeable+0x2a6/0x3e0 [ 951.530873][T17143] kernel_init+0x1d/0x1d0 [ 951.535709][T17143] ret_from_fork+0x51e/0xb90 [ 951.540806][T17143] ret_from_fork_asm+0x1a/0x30 [ 951.546082][T17143] [ 951.546082][T17143] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 951.553888][T17143] __lock_acquire+0x15a5/0x2cf0 [ 951.559246][T17143] lock_acquire+0xf0/0x2e0 [ 951.564177][T17143] __mutex_lock+0x19f/0x1300 [ 951.569273][T17143] elevator_change+0x1b3/0x450 [ 951.574538][T17143] elevator_set_none+0xb5/0x140 [ 951.579893][T17143] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 951.586206][T17143] nbd_start_device+0x17f/0xb10 [ 951.591585][T17143] nbd_genl_connect+0x165b/0x1cf0 [ 951.597121][T17143] genl_family_rcv_msg_doit+0x22a/0x330 [ 951.603171][T17143] genl_rcv_msg+0x61c/0x7a0 [ 951.608176][T17143] netlink_rcv_skb+0x232/0x4b0 [ 951.613445][T17143] genl_rcv+0x28/0x40 [ 951.617925][T17143] netlink_unicast+0x80f/0x9b0 [ 951.623195][T17143] netlink_sendmsg+0x813/0xb40 [ 951.628466][T17143] ____sys_sendmsg+0x972/0x9f0 [ 951.633738][T17143] ___sys_sendmsg+0x2a5/0x360 [ 951.638917][T17143] __x64_sys_sendmsg+0x1bd/0x2a0 [ 951.644355][T17143] do_syscall_64+0x14d/0xf80 [ 951.649447][T17143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 951.655841][T17143] [ 951.655841][T17143] other info that might help us debug this: [ 951.655841][T17143] [ 951.666049][T17143] Chain exists of: [ 951.666049][T17143] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#58 [ 951.666049][T17143] [ 951.679771][T17143] Possible unsafe locking scenario: [ 951.679771][T17143] [ 951.687201][T17143] CPU0 CPU1 [ 951.692546][T17143] ---- ---- [ 951.697889][T17143] lock(&q->q_usage_counter(io)#58); [ 951.703253][T17143] lock(fs_reclaim); [ 951.709738][T17143] lock(&q->q_usage_counter(io)#58); [ 951.717617][T17143] lock(&q->elevator_lock); [ 951.722191][T17143] [ 951.722191][T17143] *** DEADLOCK *** [ 951.722191][T17143] [ 951.730317][T17143] 6 locks held by syz.0.11756/17143: [ 951.735579][T17143] #0: ffffffff8fc3ad30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 951.743748][T17143] #1: ffffffff8fc3ab48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 951.752693][T17143] #2: ffff8880266da9d0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xad/0x1a60 [ 951.764076][T17143] #3: ffff8880266da8d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xc0/0x1a60 [ 951.775022][T17143] #4: ffff88802674b990 (&q->q_usage_counter(io)#58){++++}-{0:0}, at: elevator_change+0x198/0x450 [ 951.785626][T17143] #5: ffff88802674b9c8 (&q->q_usage_counter(queue)#42){+.+.}-{0:0}, at: elevator_change+0x198/0x450 [ 951.796490][T17143] [ 951.796490][T17143] stack backtrace: [ 951.802358][T17143] CPU: 1 UID: 0 PID: 17143 Comm: syz.0.11756 Not tainted syzkaller #0 PREEMPT(full) [ 951.802376][T17143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 951.802387][T17143] Call Trace: [ 951.802394][T17143] [ 951.802400][T17143] dump_stack_lvl+0xe8/0x150 [ 951.802423][T17143] print_circular_bug+0x2e1/0x300 [ 951.802448][T17143] check_noncircular+0x12e/0x150 [ 951.802473][T17143] __lock_acquire+0x15a5/0x2cf0 [ 951.802501][T17143] lock_acquire+0xf0/0x2e0 [ 951.802519][T17143] ? elevator_change+0x1b3/0x450 [ 951.802537][T17143] __mutex_lock+0x19f/0x1300 [ 951.802553][T17143] ? elevator_change+0x1b3/0x450 [ 951.802569][T17143] ? rcu_is_watching+0x15/0xb0 [ 951.802592][T17143] ? elevator_change+0x1b3/0x450 [ 951.802608][T17143] ? __pfx___mutex_lock+0x10/0x10 [ 951.802622][T17143] ? enable_work+0x17f/0x230 [ 951.802645][T17143] ? lockdep_hardirqs_on+0x7a/0x110 [ 951.802671][T17143] ? __cancel_work_sync+0xf7/0x110 [ 951.802694][T17143] ? blk_mq_cancel_work_sync+0xa5/0xe0 [ 951.802712][T17143] elevator_change+0x1b3/0x450 [ 951.802730][T17143] elevator_set_none+0xb5/0x140 [ 951.802745][T17143] ? __pfx_elevator_set_none+0x10/0x10 [ 951.802761][T17143] ? xa_load+0x1db/0x210 [ 951.802778][T17143] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 951.802802][T17143] ? kernfs_add_one+0x477/0x5c0 [ 951.802866][T17143] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 951.802888][T17143] ? sysfs_add_file_mode_ns+0x259/0x300 [ 951.802909][T17143] nbd_start_device+0x17f/0xb10 [ 951.802935][T17143] ? device_create_file+0xf4/0x1b0 [ 951.803005][T17143] nbd_genl_connect+0x165b/0x1cf0 [ 951.803032][T17143] ? __pfx_nbd_genl_connect+0x10/0x10 [ 951.803057][T17143] ? rcu_is_watching+0x15/0xb0 [ 951.803081][T17143] ? __nla_parse+0x40/0x60 [ 951.803104][T17143] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 951.803124][T17143] genl_family_rcv_msg_doit+0x22a/0x330 [ 951.803142][T17143] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 951.803163][T17143] ? __lock_acquire+0x6b5/0x2cf0 [ 951.803184][T17143] genl_rcv_msg+0x61c/0x7a0 [ 951.803201][T17143] ? __pfx_genl_rcv_msg+0x10/0x10 [ 951.803215][T17143] ? __pfx_nbd_genl_connect+0x10/0x10 [ 951.803242][T17143] ? __lock_acquire+0x6b5/0x2cf0 [ 951.803265][T17143] netlink_rcv_skb+0x232/0x4b0 [ 951.803286][T17143] ? __pfx_genl_rcv_msg+0x10/0x10 [ 951.803301][T17143] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 951.803326][T17143] ? down_read+0x272/0x2e0 [ 951.803342][T17143] ? genl_rcv+0xd/0x40 [ 951.803356][T17143] genl_rcv+0x28/0x40 [ 951.803369][T17143] netlink_unicast+0x80f/0x9b0 [ 951.803390][T17143] ? __pfx_netlink_unicast+0x10/0x10 [ 951.803409][T17143] ? netlink_sendmsg+0x650/0xb40 [ 951.803428][T17143] ? skb_put+0x11b/0x210 [ 951.803452][T17143] netlink_sendmsg+0x813/0xb40 [ 951.803475][T17143] ? __pfx_netlink_sendmsg+0x10/0x10 [ 951.803497][T17143] ? aa_sock_msg_perm+0xf1/0x1b0 [ 951.803519][T17143] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 951.803538][T17143] ____sys_sendmsg+0x972/0x9f0 [ 951.803552][T17143] ? futex_unqueue+0x211/0x240 [ 951.803573][T17143] ? __pfx_____sys_sendmsg+0x10/0x10 [ 951.803590][T17143] ? import_iovec+0x73/0xa0 [ 951.803615][T17143] ___sys_sendmsg+0x2a5/0x360 [ 951.803631][T17143] ? __pfx____sys_sendmsg+0x10/0x10 [ 951.803648][T17143] ? futex_wait+0x29a/0x380 [ 951.803678][T17143] ? __fget_files+0x2a/0x420 [ 951.803700][T17143] ? __fget_files+0x3a0/0x420 [ 951.803726][T17143] __x64_sys_sendmsg+0x1bd/0x2a0 [ 951.803745][T17143] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 951.803763][T17143] ? rcu_is_watching+0x15/0xb0 [ 951.803787][T17143] do_syscall_64+0x14d/0xf80 [ 951.803801][T17143] ? trace_irq_disable+0x3b/0x150 [ 951.803824][T17143] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 951.803840][T17143] ? clear_bhb_loop+0x40/0x90 [ 951.803857][T17143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 951.803872][T17143] RIP: 0033:0x7f84bf19c799 [ 951.803888][T17143] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 951.803902][T17143] RSP: 002b:00007f84bffea028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 951.803919][T17143] RAX: ffffffffffffffda RBX: 00007f84bf415fa0 RCX: 00007f84bf19c799 [ 951.803931][T17143] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000004 [ 951.803942][T17143] RBP: 00007f84bf232c99 R08: 0000000000000000 R09: 0000000000000000 [ 951.803952][T17143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 951.803962][T17143] R13: 00007f84bf416038 R14: 00007f84bf415fa0 R15: 00007ffd42fb76b8 [ 951.803980][T17143] [ 952.257813][T17155] netlink: 'syz.5.11762': attribute type 1 has an invalid length. [ 952.275280][T17155] netlink: 'syz.5.11762': attribute type 4 has an invalid length. [ 952.319240][ T5826] block nbd9: Receive control failed (result -32) [ 952.327217][ T5826] block nbd9: Receive control failed (result -32) [ 952.355476][T17159] syzkaller0: Caught tx_queue_len zero misconfig [ 952.371199][T17143] nbd9: detected capacity change from 0 to 63 [ 952.379203][T17159] netlink: 'syz.2.11763': attribute type 1 has an invalid length. [ 952.379599][T16864] block nbd9: Dead connection, failed to find a fallback [ 952.396228][T16864] block nbd9: shutting down sockets [ 952.401432][T16864] blk_print_req_error: 271 callbacks suppressed [ 952.401446][T16864] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 952.405266][T20097] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 952.408445][T16864] buffer_io_error: 270 callbacks suppressed [ 952.408457][T16864] Buffer I/O error on dev nbd9, logical block 0, async page read [ 952.440999][T16864] I/O error, dev nbd9, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 952.450945][T16864] Buffer I/O error on dev nbd9, logical block 1, async page read [ 952.459895][T16864] I/O error, dev nbd9, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 952.470491][T16864] Buffer I/O error on dev nbd9, logical block 2, async page read [ 952.479213][T16864] I/O error, dev nbd9, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 952.489301][T16864] Buffer I/O error on dev nbd9, logical block 3, async page read [ 952.497537][T16864] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 952.508964][T16864] Buffer I/O error on dev nbd9, logical block 0, async page read [ 952.517340][T16864] I/O error, dev nbd9, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 952.527083][T16864] Buffer I/O error on dev nbd9, logical block 1, async page read [ 952.536002][T16864] I/O error, dev nbd9, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 952.545531][T16864] Buffer I/O error on dev nbd9, logical block 2, async page read [ 952.553265][T16864] I/O error, dev nbd9, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 952.562785][T16864] Buffer I/O error on dev nbd9, logical block 3, async page read [ 952.570711][T16864] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 952.580376][T16864] Buffer I/O error on dev nbd9, logical block 0, async page read [ 952.588377][T16864] I/O error, dev nbd9, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 952.598361][T16864] Buffer I/O error on dev nbd9, logical block 1, async page read [ 952.606633][T16864] ldm_validate_partition_table(): Disk read failed. [ 952.613466][T16864] Dev nbd9: unable to read RDB block 0 [ 952.619437][T16864] nbd9: unable to read partition table [ 952.627812][T16864] ldm_validate_partition_table(): Disk read failed. [ 952.635098][T16864] Dev nbd9: unable to read RDB block 0 [ 952.640787][T16864] nbd9: unable to read partition table [ 953.573856][ T1208] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 954.684258][ T8708] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 955.804134][ T8708] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 956.933977][T18563] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 956.943928][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 958.064562][ T3004] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 959.204367][ T3004] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 960.304708][ T3004] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!