last executing test programs: 1m22.192561616s ago: executing program 0 (id=1633): r0 = socket$key(0xf, 0x3, 0x2) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) (async) socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000040)=0x4d, 0x4) socket$key(0xf, 0x3, 0x2) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000600), r3) sendmsg$IEEE802154_ASSOCIATE_RESP(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x1c, r4, 0x400, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0x5}]}, 0x1c}}, 0x4040001) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000c000000200001801400020073797a5f74756e0000000000000000000800030003f161b621dc00000014000380100003800c000180cdff010000000000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r2, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f00000000c0)={0x14, r4, 0x400, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", ""]}, 0x14}}, 0x11) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x9, 0x2, 0x3, 0x8, 0x4}, 0x0) (async) r7 = socket$alg(0x26, 0x5, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x2c, 0x0, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x2c}}, 0xc800) (async) sendmsg$SMC_PNETID_ADD(r5, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x6}, 0x2004c808) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r8 = accept4(r7, 0x0, 0x0, 0x0) sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f0000000800)={0xfffffffffffffffd, 0x0, &(0x7f0000000740)={&(0x7f00000012c0)=ANY=[], 0x174c}, 0x1, 0x0, 0x0, 0x84}, 0x400c080) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r8) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r9, 0x400452c8, &(0x7f0000000100)) (async) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) (async) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {0xfffffffffffffffc}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in=@empty, 0x0, 0x33}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x6b, 0xffffffff}}, 0xe8) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000049a146d6a84c6ccf0b650000180002800a0014000180c21b7a430679ee9766b4336d12154e9e613790a8b2bb2a5afdaf8a0a805d41aa17df4645ed26b548be4f1d8a679f537026daa7296cc038e9bb3b762a5f00cd4cb3c8c83a8fce81cfbaeef34c7a3100000000000000000000000000afdde0670ccec884b32aa33c7bbf8a23e555f4e3e1b4d6cd70b78f5e7ef839986e95fa57df2527e073663af85506a8150ec1ab4df2ddef5917c167c2f5859ccca19a60fd111999eea82806ffb33e008f5812f34f3d407bd115351ef726743855597962070b69a3863cf86d455ea05539871c64e5ae47430d4b89aee0b88afbb76f93"], 0x48}}, 0x0) 1m21.957069484s ago: executing program 0 (id=1634): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x50, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5}, {0x5, 0x3, 0x80}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x50}}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d80000001c0081044e81f782db44b904021d0802010000001c7e12a118000c000600142603600e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c13223e3f52a98516277ce06bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x700) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x3, 0x0, 0xd410, 0xf69aa1672a50ebb1}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4, 0xe}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40881}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x82420102}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x54, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x200040c0}, 0x40804) 1m21.751981941s ago: executing program 0 (id=1635): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000403000000000000000000000b0c"], 0x0, 0x56, 0x0, 0x0, 0x4}, 0x20) 1m21.523471757s ago: executing program 0 (id=1637): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000000c0)={0x40, 0x12, 0x3}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, r2, 0x1, 0x8, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0xffff8000, 0x4}}}}, 0x30}, 0x1, 0x0, 0x0, 0xffffffa6}, 0x2c040090) 1m21.333377204s ago: executing program 0 (id=1640): unshare(0x26020480) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x2, 0x402}}}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x100000c, 0x4031, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r1, &(0x7f0000000000)={0x24, @none={0x0, 0x1}}, 0x14) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="540000001200010300"/56, @ANYRES32=0x0, @ANYBLOB="00000000000000008000000000000000080003"], 0x54}}, 0x0) r3 = socket(0xa, 0x3, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r4) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xa, 0x0, 0x300, 0xfffffffe, 0x10, 0x1, 0x2, 0xfffffffd, 0x4}}) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r3, 0x111, 0x4, 0x0, 0x4) unshare(0x26020480) (async) socket$tipc(0x1e, 0x5, 0x0) (async) bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x2, 0x402}}}, 0x10) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x100000c, 0x4031, 0xffffffffffffffff, 0x0) (async) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) connect$802154_dgram(r1, &(0x7f0000000000)={0x24, @none={0x0, 0x1}}, 0x14) (async) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="540000001200010300"/56, @ANYRES32=0x0, @ANYBLOB="00000000000000008000000000000000080003"], 0x54}}, 0x0) (async) socket(0xa, 0x3, 0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r4) (async) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xa, 0x0, 0x300, 0xfffffffe, 0x10, 0x1, 0x2, 0xfffffffd, 0x4}}) (async) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r3, 0x111, 0x4, 0x0, 0x4) (async) 1m21.149990567s ago: executing program 0 (id=1644): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@migrate={0xac, 0x21, 0x1, 0x0, 0x1, {{@in6=@remote, @in6=@remote}}, [@migrate={0x50, 0x11, [{@in=@multicast1, @in=@local, @in=@local, @in=@broadcast, 0x3c, 0x4, 0x0, 0x3505, 0xa, 0x2}]}, @policy_type={0xa}]}, 0xac}}, 0x0) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010027bd7000fbdbdf250f00000005002f000100000005002a0001000000050029000100000008000300", @ANYRES32=r3], 0x54}, 0x1, 0x0, 0x0, 0x24004040}, 0x24008824) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r0, 0x0, 0xf69}, 0x18) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r7) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r8, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xb}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r9}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xb13e728}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x911f}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000001}, 0x40040400) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000100)={0x4c, r8, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xfffffffd}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x101}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008800}, 0x4000091) socket$inet6_udplite(0xa, 0x2, 0x88) pselect6(0x0, 0x0, &(0x7f00000002c0)={0x380, 0x10000, 0x9, 0x7fff, 0x200, 0xc1, 0x22a12b40, 0x4}, &(0x7f0000000300)={0x5, 0x7, 0x9cfa, 0x9, 0x9, 0x7fffffff, 0x3, 0x81}, &(0x7f0000000340)={0x77359400}, &(0x7f0000000400)={&(0x7f0000000380)={[0x7fffffff]}, 0x8}) 1m8.323705954s ago: executing program 3 (id=1723): socket$nl_generic(0x10, 0x3, 0x10) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) (async) r1 = accept(r0, 0x0, &(0x7f0000000000)) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000000c0), 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002240), r2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_UPDATE_FT_IES(r2, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000002340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="81aa1eb75b020e347545da3d6b7d2b2a4be920304ce9f8b9428769e73e66d0f581148993ac24ba87008391a1ea709f0756e28fa3397cc1741bfd59aef1138e75c13ea10a4410960ded338203981017f1a1c2b139a3fcf5c0ad4c3e59a4f7d9b853266d1452e4bce4993b4fbcf77f1430f0a338b289566e77372d456a8d23b3d298fed04d5ed02f9e5ee391000000000000000000", @ANYRES16=r3, @ANYBLOB="100025bd7000fedbdf256000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900060000006b0000002a002a00040604f602000100060200007e15100907080211000001963a00007a000000090000003e010000000600b10008000000"], 0x5c}, 0x1, 0x0, 0x0, 0x40640d0}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socket$alg(0x26, 0x5, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x15, 0x5, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 1m8.12097613s ago: executing program 3 (id=1725): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b00)={'batadv0\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=@ipv6_newnexthop={0x2c, 0x68, 0x1, 0x70bd2b, 0x25dfdbfd, {0xa, 0x0, 0x4ced03d159225c94}, [@NHA_ID={0x8}, @NHA_FDB={0x4}, @NHA_OIF={0x8}]}, 0x2c}}, 0x80) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c000000190a01040000000000000000020000000900020073797a32eaff00000900010073797a3000"], 0x2c}}, 0x8004) ioctl$FS_IOC_RESVSP(r3, 0x40305828, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r6, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) sendmmsg$inet6(r6, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000c80)="0b0ec2a1e3fc84788972f461fec29e0fe5be85ea822a7348bd54a57f68a85a2284ad43c367bae5f7bd6c1e1d9017109e232e5bb561d280b32fa2b07a0cd31f1b8b9acdc89d4d5725350a9ec9303e53def89bcb6bb6ea83324927b43749f25be60c4f8707382b8e3062032c28dcccb784fdcfe6f2febd55e05bf1ccb63237c1d1bea4db828a5be79e518cf55a88e130609528b8aff64359e76eee93584aad3f751172c449fb", 0xa5}, {&(0x7f0000000680)="5f62f632763c84825847145170282f67ba6d5dadf0baf135d503e93a17ee560409202f4c5f0de32b0e53e4d26d04c825d923318fd574b1924b09ebb91d5be30b532a2fb95030c6be2a14ccfbce6eef05ea88d2413dc3fc0ae8a2e071f8764a4843611ae28b34d2ffddefd03d8799429f33741886bd6c4065bba5005d74f67508dc3434165b51bf8f73bf1a7c15de8905e518e8c72584d2007c26fcbf6f548de70f8b", 0xa2}, {&(0x7f0000000740)="dfd1db04f5eef4b5714a69f5392e27d1b79a961a16fbdc4f01a9e38a1f95f939a209f049ad8d4f9447506fd73cec26b8246758f684013c99b717e119d15432e9d46da8a0c25e7e3771b0b146e56d2fcf8107332acc1c56948171260ed44c97919f70210c914c1098c9ac622d46f0ffae373480c9d8e590395ea4365569b8ea75ea1a9a181cfa88541804ec97980211c9b7eb2235d6f0b644fd31dda9bc2cc99434e0df4934d0", 0xa6}, {&(0x7f0000000c40)="a405df87c6e89abd7ae7e6b8550f9923917c9d38e14a4e9ace3100b34d0056282b7ed43e9c", 0x25}, {&(0x7f0000000800)="f76c72c4066a174e1300da0da7d191a618fc5793ff23c6328c6d61df0a2fb72441d4ded25cf7b5f31eb5d65e412665a6177f09ca3ac5cfd751577dec547711dc43b694a601fcb6575547ee6ec2a01c32b65d3429fbb9623a83d457d3ddea9eb90ab14b6b323a9358af0b55cff95844d5b47f6994a72f984e19e961cc00f6e364e141c8", 0x83}, {&(0x7f00000008c0)="4b000ffd096c1b77cd99b1458609c4b82100375ca9411e734cc8e9627df29e9b97a002d7f15ea9f42bd71401384ed6b5772b5c618c35c4aab72b1d515ceada9e64d7a35fd435e98f06243fcd53966c196ff3f47537912a1a5dec7e8e1fbf4543d1a6c80467d6ba3d241e3fd22efa09c638c98b4ce9fbe6d2053fcfa334eaee64efad2d349f048afb2635ae06c05697746fe073ed230c9c7c4643396305424c1c7eaa3ee09891995a607de26be9abcd2b65a4f9093da8a07eea61b1ff21ea3b323b191f95b997cfdface3dc21a664e38896f9f689bc06f4800d5c977102358770b0d8425f098be9383b5e487e7165e847191d5e95233e971edd", 0xf9}, {&(0x7f0000002380)="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", 0xc72}], 0x7}}], 0x1, 0x8800) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff29}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff78, 0x0, 0x0}, &(0x7f0000000340)=0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELCHAIN={0xa8, 0x5, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_CHAIN_HOOK={0x54, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x15d7b8fc}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_DEV={0x14, 0x3, 'bridge_slave_1\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xc9ef45b}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_virt_wifi\x00'}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_USERDATA={0x17, 0xc, "0c3e305a0ba7281aa6bfbf1d58917d3d325928"}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}]}], {0x14}}, 0xd0}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(r7, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x1c, r8, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x20008840) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000100)={'ip6tnl0\x00', r2, 0x3d, 0xb, 0x4, 0x2, 0x42, @loopback, @local, 0x8000, 0x8, 0x3, 0x7f}}) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r10 = accept4$alg(r9, 0x0, 0x0, 0x0) sendmmsg$sock(r10, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000006c0)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4b9a01fb336bef1be8a68a628452b83a7404087d4bcb64f6ecad05459d12595d5b8b2657f2f29656a15e5a18e3168946dcb5faa59f7b404bad393ba06734d170b0513aeb0d051", 0xd5}, {&(0x7f00000004c0)="62c99e05d98775ed1beb5d67431ead896f7060f03e5b8671b283168d0df1573bef271f3a22b9cac06e27c7e87b34a19188d3e10e670bc070f0d3eb88d2f891d242747e0deec4a10609b12d4058b0fbff28bb01e6e49b533b03b11288ff4da1ab3226a2e3ba5fc47969142f1a1a0ca9ba4cece2ac9a5fcd89343de7e57dfcbb6216499555bd04f2fcb91c3c6c72868a3797ec63f8138ab74b5034878812df8b0445704cb33f81bffed93c3e645a206db134f626a59f4fac53fbf23489cf2f45d05d735e64033376671da045df97bcb989bda1d17ba14afbfd19e32a8222ebf934c17fed237b86aef2e830", 0xea}, {&(0x7f00000005c0)="f2b314c96d500b66f7fd46493862d9eb11d188464208592330ac482436286448", 0x20}], 0x3}}], 0xaa, 0x4000010) 1m7.73339293s ago: executing program 3 (id=1729): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) r2 = socket(0x10, 0x80003, 0x0) write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) close(r3) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4004040) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f00000000c0)={0x18, 0x0, {0x0, @local, 'vlan1\x00'}}) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000140)={0x89e9, 0xfffe, 0x800a, 0x8, 0xffff, 0x5, 0x3, 0x6, 0x0}, &(0x7f0000000180)=0x20) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f00000001c0)={r6, 0x7}, 0x8) unshare(0x8040600) r7 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000080)={'veth0_macvtap\x00'}) connect$qrtr(r7, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='+\x00'/12, @ANYRES32=0x0, @ANYBLOB="1c"], 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004a40)=ANY=[@ANYBLOB="c0260000410007010000000007000000027c00000400fc80a72601"], 0x26c0}}, 0x4010) 1m7.555630888s ago: executing program 3 (id=1731): openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000000101010000000000000000000a0000000c00198008000100ad0400003c0001802c0001801400030000000000000000000000ffff7f00000114000400fc00000000000000000000000000f0010c000280"], 0x5c}, 0x1, 0x0, 0x0, 0x8000850}, 0x24008840) 1m7.431657853s ago: executing program 3 (id=1734): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r0, 0x104, 0x2, 0x0, &(0x7f0000000880)) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(r3) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000002000000008d080000711209000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x60, 0x0, 0x1, 0x70bd26, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}]}, 0x60}}, 0x40000) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300), 0x4) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', 0x0, r4, 0x0, 0x3}, 0x50) write$cgroup_devices(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="1e000300008c71ef28ff4b"], 0xffdd) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r8, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x7, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000182e0000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r7, 0x0, 0x2}, 0x18) r10 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_ADD_RULE(r10, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000540)=ANY=[@ANYRES32=r5], 0x420}, 0x1, 0x0, 0x0, 0x24000081}, 0x4001c) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x3, 0x80}]}, 0x10) r11 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r11, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) sendmmsg$inet(r11, &(0x7f0000001480)=[{{&(0x7f0000000100)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r11, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) 1m7.050791806s ago: executing program 3 (id=1735): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x8, @empty}, @in6={0xa, 0x0, 0x0, @private0}], 0x2c) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast1}]}}}]}, 0x48}}, 0x0) bind$inet(r2, &(0x7f0000001480)={0x2, 0x4e22, @remote}, 0x10) readv(r0, &(0x7f0000001340)=[{&(0x7f0000000080)=""/187, 0xbb}, {&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000001140)=""/38, 0x26}, {&(0x7f0000001180)=""/158, 0x9e}, {&(0x7f0000001240)=""/228, 0xe4}], 0x5) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f00000013c0)="44939d4b2ea5d6282ab2ef8cdb6e5a66eec5a36c7b6ca9102d57b669fbe4df25d4194a31597c4054894741eaf8d06fad4ccf75a6fd27a0fd86b732f0a8873683f4d3ea2e10c81728fb3b4b17d712aef7ad779cf47f4151a14277c5b9285d4bac120d3faaf8079c601d1481a8e9375bd7cafc3c15953542", 0x77, 0x40c4, &(0x7f0000001440)={0x11, 0x19, 0x0, 0x1, 0xea, 0x6, @multicast}, 0x14) 1m5.646329089s ago: executing program 32 (id=1644): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@migrate={0xac, 0x21, 0x1, 0x0, 0x1, {{@in6=@remote, @in6=@remote}}, [@migrate={0x50, 0x11, [{@in=@multicast1, @in=@local, @in=@local, @in=@broadcast, 0x3c, 0x4, 0x0, 0x3505, 0xa, 0x2}]}, @policy_type={0xa}]}, 0xac}}, 0x0) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010027bd7000fbdbdf250f00000005002f000100000005002a0001000000050029000100000008000300", @ANYRES32=r3], 0x54}, 0x1, 0x0, 0x0, 0x24004040}, 0x24008824) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r0, 0x0, 0xf69}, 0x18) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r7) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r8, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xb}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r9}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xb13e728}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x911f}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000001}, 0x40040400) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000100)={0x4c, r8, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xfffffffd}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x101}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008800}, 0x4000091) socket$inet6_udplite(0xa, 0x2, 0x88) pselect6(0x0, 0x0, &(0x7f00000002c0)={0x380, 0x10000, 0x9, 0x7fff, 0x200, 0xc1, 0x22a12b40, 0x4}, &(0x7f0000000300)={0x5, 0x7, 0x9cfa, 0x9, 0x9, 0x7fffffff, 0x3, 0x81}, &(0x7f0000000340)={0x77359400}, &(0x7f0000000400)={&(0x7f0000000380)={[0x7fffffff]}, 0x8}) 51.853019409s ago: executing program 33 (id=1735): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x8, @empty}, @in6={0xa, 0x0, 0x0, @private0}], 0x2c) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast1}]}}}]}, 0x48}}, 0x0) bind$inet(r2, &(0x7f0000001480)={0x2, 0x4e22, @remote}, 0x10) readv(r0, &(0x7f0000001340)=[{&(0x7f0000000080)=""/187, 0xbb}, {&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000001140)=""/38, 0x26}, {&(0x7f0000001180)=""/158, 0x9e}, {&(0x7f0000001240)=""/228, 0xe4}], 0x5) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f00000013c0)="44939d4b2ea5d6282ab2ef8cdb6e5a66eec5a36c7b6ca9102d57b669fbe4df25d4194a31597c4054894741eaf8d06fad4ccf75a6fd27a0fd86b732f0a8873683f4d3ea2e10c81728fb3b4b17d712aef7ad779cf47f4151a14277c5b9285d4bac120d3faaf8079c601d1481a8e9375bd7cafc3c15953542", 0x77, 0x40c4, &(0x7f0000001440)={0x11, 0x19, 0x0, 0x1, 0xea, 0x6, @multicast}, 0x14) 43.308640101s ago: executing program 4 (id=1887): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001840)=@newtfilter={0x3060, 0x28, 0xd27, 0x1003ffd, 0x0, {0x0, 0x0, 0x0, r1, {0xfff3, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x44, 0x2, [@TCA_BPF_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x7b49, 0x20000000, 0x1, 0x2, 0xcd69, {0x92, 0x2, 0x2, 0x0, 0x7, 0x8}, {0x7, 0x1, 0xffff, 0x7, 0x1004, 0x10}, 0x4, 0x0, 0x8101}}]}]}}, @filter_kind_options=@f_cgroup={{0xb}, {0x2fe4, 0x2, [@TCA_CGROUP_ACT={0x2fbc, 0x1, [@m_pedit={0x2d24, 0x5, 0x0, 0x0, {{0xa}, {0x2bfc, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xec8, 0x4, {{{0x5, 0x80000001, 0xffffffffffffffff, 0x6b, 0x8}, 0x8, 0xd, [{0x9b7, 0x3, 0x10001, 0x400, 0xff, 0xb}, {0x5, 0xfffeffff, 0x4, 0x9, 0x8001, 0x7}, {0x2, 0x0, 0x4, 0xffff, 0xa00000, 0x3}, {0x2, 0x7, 0x9, 0x8, 0x30, 0x10}, {0x8, 0x44, 0xc, 0xffffbf4d, 0x2, 0x8}, {0x1, 0x0, 0x1, 0x1000, 0x7, 0x4f}, {0x101, 0x1eb165b7, 0x10001, 0x4, 0xd68, 0xffffc74b}]}, [{0x4, 0x6d5, 0x40, 0x5, 0x9, 0x65681aa5}, {0x9, 0x9, 0x8, 0x580, 0x7, 0x3}, {0x7, 0x3, 0x7, 0x7, 0xffffffff, 0x6}, {0x979, 0xffffffff, 0xe, 0x849, 0x3, 0x6}, {0x80000000, 0xbc, 0x3, 0x10, 0x4, 0xfffffde4}, {0x7, 0x8000, 0x4, 0x9, 0x1ff, 0x5}, {0x5, 0x2, 0x0, 0x3fe0000, 0x4, 0x1}, {0x1ff, 0x8, 0x3000000, 0xb, 0xe9c, 0x200}, {0x5, 0x6, 0x7, 0x9, 0x9, 0x9}, {0x3, 0x1, 0x9, 0x5, 0xc9a, 0x4}, {0x2, 0xb6, 0x4, 0x7, 0x3, 0x3cef4000}, {0x9, 0x4, 0xa1, 0x344, 0x9, 0x57}, {0x2, 0x8, 0x8, 0x9, 0x7f, 0x8}, {0x8, 0x4, 0x40, 0x5, 0x4, 0x8}, {0x5c, 0x6, 0x9, 0x3, 0xa5, 0x4}, {0x109, 0x5, 0x9, 0x1260, 0x6, 0x2b9}, {0x8, 0x0, 0x5, 0x829, 0x9, 0xb}, {0x200, 0xa24d, 0x1, 0x21a2, 0x2, 0x9}, {0x3, 0x80, 0xa29, 0x0, 0x9, 0x8}, {0xffffffff, 0x6, 0x7, 0x8100000, 0x401, 0x1ff}, {0x0, 0x1, 0x8, 0x6, 0x7, 0xef8}, {0x59, 0xe1, 0x5, 0x1, 0x6, 0x5}, {0x80, 0x9, 0x1000, 0x3, 0x5, 0xb}, {0x7, 0x1, 0x4, 0x42, 0xb9e, 0xfff}, {0x6, 0x7, 0xfff, 0x7, 0x0, 0x2c1}, {0x5, 0x3, 0x5, 0xfff, 0x1, 0x428040f0}, {0x0, 0x5, 0x7, 0xc0, 0x3ff, 0x1}, {0x4, 0x80000001, 0x4, 0x0, 0x2, 0x5}, {0x5, 0x3, 0xc1, 0x5256, 0x5, 0x7}, {0x3, 0x921, 0x0, 0x7fff, 0xffff, 0x2}, {0x3, 0xff, 0x9, 0x7f, 0x0, 0x4}, {0x8001, 0x5, 0x6, 0x7, 0x800, 0x6}, {0x6, 0x2, 0x40, 0x64, 0xffff, 0x4}, {0x4, 0x3, 0x100, 0x7ff, 0x91, 0x35e4}, {0x8, 0xa, 0x9, 0x2, 0x200, 0x200}, {0x10, 0x1, 0x4, 0x7, 0x8, 0x8}, {0x800, 0x8f92, 0x3f3, 0x1, 0x5, 0x6}, {0x6, 0xb8b, 0x1, 0x5, 0x6, 0x9}, {0x400, 0x2, 0x3, 0x9, 0x9, 0xfffffff5}, {0x7fffffff, 0x9, 0x8, 0x3ff, 0x4, 0xe}, {0x40, 0xe7, 0xfffff89a, 0x9, 0x2, 0xf7}, {0xac4d, 0x1, 0xe45c, 0x0, 0x3a0d, 0x7}, {0x4, 0x2, 0xde2, 0x7fffffff, 0x1, 0x8f87}, {0xf, 0xf3c, 0x9, 0x2, 0x5, 0xcdc6}, {0x8a, 0x7, 0x3e89, 0x7fff, 0xf4, 0x6}, {0x7b9, 0x1, 0x5874, 0x0, 0x400, 0x1}, {0x9, 0x4, 0xf7e, 0x7fff, 0x8, 0x100000}, {0x8, 0x1, 0x4, 0xd6c, 0x9, 0x140}, {0x71, 0x1, 0x4, 0x7fff, 0x0, 0x3}, {0x3, 0x80000, 0x9b, 0x1, 0x6, 0xffff}, {0x9, 0x7, 0x5, 0xffffff49, 0x0, 0x101}, {0x3, 0x7, 0x0, 0x4, 0x6, 0x4}, {0x1, 0x5, 0x4, 0xfffffffa, 0x80000001, 0xf}, {0x2, 0x6ef9, 0x5, 0x5, 0x109d, 0xffff}, {0x3ff, 0x1, 0x40, 0x80, 0x6, 0x2}, {0x8, 0x0, 0x4, 0x52, 0x1eb9, 0x6}, {0x2, 0x0, 0xfffffff8, 0xa6, 0x1, 0x4}, {0x2, 0x3, 0xfffffffa, 0x10, 0x3, 0x9}, {0x6, 0x0, 0x3ff, 0x4, 0x3, 0x80}, {0x5, 0x9, 0x2, 0x2, 0x6, 0x80}, {0x2, 0x0, 0xf3, 0x8, 0x8, 0xd3}, {0xb9, 0xc, 0x2, 0x4}, {0x2, 0x5, 0xfff, 0x65e3, 0x86e, 0xc60b}, {0x64c496a8, 0x2, 0x40, 0x200, 0xba, 0x40000}, {0x7, 0x7, 0x5c7ea5af, 0x67, 0x3, 0x6e4}, {0x2b529e7f, 0x3, 0x8, 0x4, 0x9a, 0x7}, {0x7, 0xc, 0x1, 0x2, 0x8, 0x1}, {0x5, 0x401, 0x8, 0x4ea5, 0x1, 0x81}, {0xdc65, 0x1, 0x2, 0x7fffffff, 0x9bfa, 0x8}, {0x100, 0x7f, 0x6, 0x3, 0x800, 0x6faf}, {0x4, 0x3, 0xd1, 0xcbb, 0xba, 0x4}, {0x5, 0x8000, 0x5, 0x8eb2, 0x0, 0xc}, {0xfffff361, 0x9, 0x4, 0x800, 0x400, 0x6}, {0x548, 0x3, 0x9a, 0x9, 0x6, 0x7ff}, {0x8001, 0x4, 0x400, 0xd, 0x3, 0x8000}, {0x0, 0xfffffffc, 0xffffffff, 0x3, 0x6c, 0x7f}, {0x6, 0x77, 0x6, 0x4f, 0x3, 0x6ab}, {0x1, 0x9, 0xfffffff9, 0x7, 0xfff, 0x5}, {0x7, 0x7ef, 0x4, 0x1, 0x2, 0xa9}, {0x7, 0x8, 0x6, 0x5, 0x5, 0x9}, {0x4, 0x1, 0x1b0, 0x4, 0x9, 0x7}, {0xfffffffb, 0xf, 0x8000, 0x7, 0x8, 0x1}, {0x8, 0x7, 0x101, 0x7, 0x1c, 0x4}, {0x5, 0x3, 0xfffffff9, 0x6, 0x81, 0x6}, {0x8, 0x8, 0x6, 0x9, 0x6, 0x400}, {0x3, 0x8, 0x3b19, 0x6, 0x3, 0x3}, {0x9, 0x3, 0xf52e, 0x8001, 0x2, 0x9}, {0x9, 0x1, 0xc1, 0x4, 0x5}, {0x88, 0x9, 0xfffffff8, 0x9, 0x3}, {0x0, 0x4, 0x4, 0x8, 0x5, 0x10000}, {0x1, 0x0, 0x7, 0x3, 0x5, 0x9}, {0xb8c, 0x7, 0x0, 0x1000, 0x8000}, {0x6, 0x5, 0x0, 0x8, 0x5, 0x8}, {0x3, 0x3, 0x9, 0x8, 0xffffffff, 0x4}, {0x4, 0x800, 0x8e6, 0x80000000, 0x100, 0x3}, {0x40, 0x2, 0x4, 0x6, 0x7b6a, 0x401}, {0x1, 0x7, 0x1, 0x38, 0x1, 0x3}, {0x1, 0xec3, 0x6, 0x4, 0x5, 0x1}, {0x401, 0xe, 0x8000, 0x1, 0x80000000, 0x3}, {0x9, 0xb44, 0xff, 0x9b6, 0x1, 0x3}, {0x7f, 0x5, 0xfffffffd, 0x1ff, 0x7, 0x3}, {0xea, 0x8, 0xffffffff, 0x9, 0xb, 0x6}, {0xc, 0x2, 0x7ff, 0x7, 0x1, 0x8001}, {0x3, 0x1, 0x8, 0x6, 0x4, 0x8}, {0xffff, 0x8, 0x9, 0x4, 0x2, 0x5}, {0x3, 0x4, 0x101, 0x9, 0x8, 0xedf}, {0x7, 0x3, 0x80000001, 0x5, 0xd772, 0xffff21f9}, {0x7, 0x8, 0xbfd3, 0x4, 0x9, 0x9}, {0x3, 0x4, 0x3, 0xa457, 0x100, 0xbc8d}, {0x3, 0x5, 0xffff, 0x1, 0xffffff01, 0xa26}, {0xfffffff7, 0x7fff, 0x0, 0x4, 0x9, 0xc5db}, {0x1, 0x1, 0x40, 0x1, 0xccd, 0xf}, {0xffffff0f, 0x7f, 0x8, 0x1, 0x80, 0x4}, {0x3, 0xb4, 0x4, 0x401, 0x0, 0x6}, {0x5, 0x4, 0x8000, 0x0, 0x2, 0x7}, {0x1, 0x4, 0x80, 0x8, 0x5, 0xc}, {0xf, 0x8, 0x7, 0x200, 0x8, 0x8}, {0xd, 0x2, 0x2, 0x4, 0x1, 0x79b}, {0x100, 0x7, 0xa52, 0x20004000, 0x200, 0x3da}, {0xf8, 0x9, 0x0, 0x4, 0x3ff, 0x7}, {0x4, 0xa, 0x0, 0x4, 0x70, 0x80000001}, {0x1, 0x3, 0x8, 0x7, 0x4, 0x42}, {0xa748, 0x5, 0x11f1, 0x0, 0xc21e, 0x10}, {0xff, 0x4, 0x5, 0x9, 0x2, 0x3}, {0x0, 0x3, 0x8, 0x2daf9e40, 0x6, 0x5}, {0x4e0f, 0xddda, 0x8, 0x8, 0x9, 0xa7}, {0xfffffffe, 0x7, 0x2, 0xd53, 0x8da0, 0x7ff}, {0xfffffff9, 0x0, 0x2, 0x4, 0x3, 0x8}], [{0x6, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0xe2f661a5841d7b2a, 0x1}, {0x5}, {0x2, 0x1}, {0x5, 0x1}, {0x2}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x5}, {0x2}, {}, {0x3, 0x1}, {}, {0x2}, {0x1}, {0x1}, {0x5}, {0x1, 0x1}, {0x0, 0x1}, {0x5}, {0x7}, {0x3, 0x1}, {0x4}, {0x3, 0x14f62eb06ccd2623}, {0x5, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x2, 0x1}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x2}, {0x1}, {0x2}, {0x5}, {0x5}, {0x2}, {0x5}, {0x5, 0x1}, {}, {0x4}, {0x5, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x5, 0xc0ac104ebbe85d62}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x1}, {0x3}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {0x3}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {}, {}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x5}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {}, {0x4}, {0x3}, {0x3}, {}, {0x5, 0x1}], 0x1}}, @TCA_PEDIT_PARMS_EX={0xe68, 0x4, {{{0xca42, 0x8e7, 0x3, 0x6f4, 0x8}, 0xc, 0x4, [{0x5, 0x1, 0xfffffffc, 0x2, 0x2, 0x1}, {0x1, 0x80000000, 0x88b0, 0x1791, 0x2, 0x61c6}, {0x9, 0x2cf917db, 0x4, 0x8, 0x4, 0x5}]}, [{0xffff, 0x7, 0x6, 0x1ff, 0x0, 0xea2}, {0x4, 0x9, 0x100, 0x3, 0x7fffffff, 0x8}, {0x5, 0xc358, 0x2, 0xe07b, 0x6, 0x80000001}, {0x1ff, 0xd5, 0x0, 0x5, 0x1, 0x80000000}, {0x6, 0x7, 0x5, 0x1, 0x2, 0x10000}, {0x4b, 0xff, 0x9, 0x8, 0x87, 0x6}, {0x1000, 0x6, 0x8, 0x2, 0x200, 0xd}, {0x5, 0x4, 0x7fffffff, 0x0, 0xffffff7f, 0x5}, {0x80000000, 0xe5, 0xc, 0x0, 0xffff, 0x7}, {0x6, 0x8, 0x1dd, 0xff, 0x723e, 0x5}, {0x1c, 0xc, 0x8, 0x7, 0x9, 0x9f8c}, {0x3, 0x7, 0x568b, 0xb004, 0x4, 0xa54}, {0x2, 0x0, 0x80, 0x1, 0x5, 0xd23}, {0x1, 0x5, 0x9, 0x800, 0x5, 0xfa92}, {0x1, 0x1, 0x101, 0x8001, 0x9, 0x2}, {0x9960, 0x5, 0x387, 0xf0f, 0x100, 0x401}, {0x1, 0x0, 0x80, 0x0, 0x6, 0x7fff}, {0xf75, 0xa3d8, 0x7ff, 0x9d, 0xfffffff8, 0x7}, {0x7, 0x1400000, 0x3, 0x0, 0x5, 0xd}, {0x4, 0x4, 0x5, 0x5, 0xf, 0xea6}, {0xfff, 0x10, 0x6, 0x0, 0x84, 0x81}, {0x9, 0x9, 0x5, 0x5, 0x5, 0x7}, {0x3ff, 0x68, 0x9, 0x9, 0x1ff}, {0x5, 0x8, 0xe, 0x3, 0x2, 0x93c1}, {0x1, 0xabb971e, 0x7fff, 0x9, 0xffffffff, 0xb02c}, {0x8, 0x9, 0x9, 0xa34a, 0x6, 0x5}, {0x6, 0x7, 0x2, 0xffff, 0x6, 0x5}, {0xfff, 0x4, 0x7, 0x1ff, 0x5}, {0xffff0000, 0x1, 0x6, 0x0, 0x180, 0x1000}, {0x40, 0x4, 0x7f, 0xfff, 0xffff, 0xceb}, {0x709a, 0xffffffff, 0x6, 0x4, 0x1000, 0x5}, {0x9, 0x10, 0x369, 0x5, 0xd, 0x8}, {0x5, 0x10, 0x38, 0x10, 0x8, 0xc6}, {0x1, 0x7fffffff, 0x6, 0x1, 0x7, 0x1}, {0xab, 0x9, 0x1, 0x9, 0x5, 0x2}, {0xec, 0x2, 0xea, 0x5, 0xc, 0xa3}, {0x4, 0x80000000, 0x1, 0x8, 0x0, 0x81}, {0xe8b, 0x8, 0x7ff, 0x4, 0x50, 0x6b44cd6c}, {0x0, 0xfffffffe, 0x1b7a, 0xe965, 0x63, 0x7}, {0x4, 0xffffffff, 0xa1, 0x8, 0xea, 0xffff}, {0x0, 0x1, 0x81, 0x0, 0x6, 0x826}, {0x8, 0x81, 0x480, 0xe00000, 0xd816, 0xc}, {0x2, 0x3, 0x9, 0x10, 0x7fffffff, 0x1}, {0x5d, 0x80000001, 0x4, 0xffff, 0x9, 0x5}, {0x10000, 0x1, 0x1a6, 0xb, 0x2, 0x3e}, {0xcd, 0x10001, 0x7, 0x5, 0x8001, 0x69a}, {0x8, 0x7, 0x7ff, 0x7d5318c0, 0xf6, 0xffffffff}, {0x8, 0x7, 0x9, 0x6, 0x6, 0x9}, {0x9, 0x6, 0xb3, 0x8, 0x6, 0x60f}, {0x401, 0x0, 0x9, 0x3, 0x7, 0x9}, {0x7, 0x9, 0x2, 0xffffff80, 0x9, 0xa}, {0xf, 0x4, 0x1, 0x800, 0xfffffff7, 0x5}, {0x6, 0x9, 0x7b96, 0x51e3, 0xff, 0x4}, {0x1ff, 0x4000000, 0x101, 0x0, 0x76, 0x100}, {0x5, 0x81, 0x6, 0x2, 0x3ff, 0x5}, {0x9, 0x5, 0x5, 0x7, 0x4, 0xffffff7f}, {0x2, 0x8, 0x80000001, 0xfffffffa, 0x8001, 0x607}, {0x1, 0xb, 0x8a, 0x8001, 0x1, 0x1}, {0xd, 0xe68, 0x9, 0x80, 0xc, 0x9}, {0x7, 0x725, 0x96f, 0xf, 0x9, 0x3}, {0x7, 0x3, 0x6, 0xff, 0x2fb, 0x6}, {0xcbce, 0x4, 0x50d5b29, 0x3, 0x1, 0x3}, {0x5, 0x3, 0xc, 0x80, 0x8, 0x1ef65f35}, {0x2, 0x6, 0x1, 0x5, 0x8001, 0x8}, {0x32000000, 0x9, 0x81, 0x8, 0x1, 0xe}, {0x200, 0x0, 0x80, 0x7e3e, 0x6, 0x7}, {0x9, 0x3, 0x6, 0x4, 0xfffffff8, 0x6}, {0x8, 0x101, 0x21c4, 0x8, 0x2, 0x10001}, {0x3, 0x4, 0x194, 0x6, 0x7f, 0x5}, {0xfffffffc, 0x3, 0x0, 0x3, 0x8, 0x86}, {0x80, 0xffff, 0x7ff, 0x8, 0x1, 0x6}, {0xb, 0x7fffffff, 0x1000, 0xfffffff6, 0x2, 0x1}, {0x1, 0x8001, 0xfffffff7, 0x4, 0x1ff, 0x100}, {0x4, 0x43d, 0x4, 0x3ff, 0x3, 0xa90}, {0x919, 0x6, 0x5, 0x7, 0x8, 0x6}, {0x8, 0x4, 0x2, 0x7, 0x2, 0x401}, {0x9, 0x4, 0x8, 0x2, 0x5f7, 0x5}, {0x3, 0x1, 0x7ff, 0x81, 0x6, 0x6ab3}, {0x40, 0xe3ae, 0x7, 0x2, 0x4, 0x9}, {0x98000000, 0xf, 0x9, 0x627, 0x9, 0x3eaf2086}, {0x4, 0x2, 0x81, 0xfff, 0x7, 0x10000}, {0x4, 0x5, 0x2, 0x7, 0xfffffff1, 0x5}, {0x3, 0x9, 0x7fffffff, 0x2, 0x4, 0x4}, {0x63, 0x9, 0x1, 0x80000000, 0x7fffffff, 0x7a2d}, {0x0, 0x81, 0x3, 0x6, 0x1, 0x2}, {0xf, 0x0, 0xe1f, 0x9, 0x2, 0x80000001}, {0xfe4, 0x2, 0x200, 0x9, 0x0, 0x8}, {0xf, 0x7, 0x5, 0x7, 0xdc0, 0x7ff}, {0xd, 0x4, 0x0, 0xffffff01, 0x5, 0x5}, {0x7, 0x81, 0x2, 0x7, 0x8, 0x3}, {0x7963, 0x9, 0x1, 0x6, 0xffffd145, 0x3}, {0x2, 0x1, 0x0, 0x4005338a, 0x7, 0x93}, {0x1, 0x0, 0x4, 0x9, 0x136, 0x1}, {0x9, 0x5, 0x4, 0x5, 0x3, 0x4}, {0x7, 0x1, 0x8, 0x8001, 0x6, 0x3a5a51c1}, {0xfff, 0x81, 0x8, 0x5, 0x4, 0x3}, {0xa, 0x3, 0x800, 0x964f, 0x8000, 0x7}, {0xffff, 0x5, 0xfffffff2, 0x5, 0x14, 0x4}, {0x4, 0x1e2, 0x0, 0x4, 0x8, 0x8}, {0x2, 0x1, 0x1, 0x2, 0x9}, {0xfffffe01, 0x9, 0x3, 0x0, 0x1, 0x7}, {0x9, 0x1000000, 0x8, 0x400, 0x1, 0x8}, {0x3, 0x6, 0xca, 0x4, 0x5, 0x1}, {0x157b0000, 0x9, 0x7, 0x2, 0xfd, 0x5}, {0x1000, 0x0, 0x0, 0x7fffffff, 0x7}, {0x2, 0x4, 0x0, 0x1ff, 0x6, 0xfffff297}, {0x9, 0x7, 0xcd, 0x4, 0x1, 0xd31}, {0x5, 0x873, 0x6f, 0x10001, 0xf, 0xfffffffe}, {0x7, 0x4, 0x3, 0x2d8, 0xb, 0x234}, {0xc, 0x847, 0x2, 0xc7, 0x0, 0x1}, {0x6, 0xbb99, 0x0, 0x4, 0x2, 0x20}, {0x0, 0x0, 0x4, 0xff, 0x1, 0x5}, {0x4, 0x400, 0x80000001, 0x2, 0x101, 0xa}, {0x7, 0xffff, 0x1, 0x8000, 0x9a9, 0x6b}, {0x7f6, 0x5, 0x3, 0x80, 0xcf, 0x200}, {0x4, 0x8, 0x0, 0xba2, 0x40, 0x3}, {0xe4b92bd7, 0x33, 0x80, 0xa1a0, 0x7, 0x80000001}, {0xcb, 0x0, 0x699, 0x32593802, 0x3}, {0x1ff, 0x3, 0x10001, 0x4, 0x9f4, 0x2}, {0x80000001, 0x2, 0x3, 0x1000, 0x1000, 0x1}, {0x9, 0x94, 0x5, 0x8, 0x5, 0x6}, {0x9, 0x9, 0x2, 0x90000000, 0x9, 0x1ff}, {0x1, 0x800, 0xffffff01, 0x6, 0x3}, {0x2, 0xaa, 0x2, 0x52bd, 0x8, 0x3}, {0x3, 0x5, 0xa, 0x10, 0x871, 0xb}, {0x3, 0x6, 0x7, 0x0, 0xfff, 0x3ff}, {0x4, 0x2, 0x0, 0x3, 0x4, 0xb}, {0x3cc444d1, 0x6, 0x40, 0x28, 0x100, 0x1}], [{0x4}, {0x1}, {0x1, 0x1}, {}, {0x1, 0x1}, {}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {0x4}, {0x1, 0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x0, 0x42a1038c8c43a84}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {}, {0x0, 0x1}, {}, {0x4}, {0x4, 0x1}, {0x3, 0x1}, {0x7f833acbad44bed1}, {}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x1}, {}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x7, 0x1}, {0x3, 0x1}, {0x2}, {0x3, 0x1}, {0x3}, {0x2}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x2}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {0x2}, {0x3, 0x3}, {0x1}, {0x7}, {0x4}, {0x1}, {0x5}, {0x2}, {0x5, 0x1}, {}, {0x3}, {0x1, 0x1}, {0x4}, {0x5}, {0x1}, {0x1}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {}, {0x0, 0x1}, {}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x1}, {0x5}, {0x0, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {}, {0x5, 0x1}, {0x1}, {0x5}, {0x5, 0x3}, {0x4}, {0x2}, {0x5, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {}, {0x1, 0x1}, {0x4}, {}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x1}], 0x1}}, @TCA_PEDIT_PARMS_EX={0xe80, 0x4, {{{0x0, 0x2, 0x3, 0x2, 0x2}, 0x8, 0x8, [{0x0, 0x9, 0x77ee3f81, 0xfc7b, 0x6}, {0x10000, 0x8, 0x7f, 0x4, 0x7, 0x2}, {0x4ddb, 0x10, 0xb, 0x7fffffff, 0x0, 0x3}, {0xbe, 0x0, 0xffffffff, 0x9, 0x7, 0x4}]}, [{0x1, 0x5c, 0x4, 0xee, 0x0, 0x5}, {0x0, 0x9, 0xfff, 0x30f8, 0x4, 0x5586}, {0x0, 0xfffffffe, 0x7ff, 0x0, 0x1, 0x1b36}, {0x1bf1, 0x9, 0x1, 0x1, 0x80, 0x7ff}, {0x7929, 0x8, 0xe, 0x4, 0xb, 0x2}, {0x1, 0x2, 0x7ff, 0x80000001, 0x2, 0x6}, {0x5, 0x0, 0x7, 0x9, 0xfffffffc, 0xaceb}, {0x8, 0x0, 0xa4a3, 0x5, 0x7, 0xfffffffc}, {0x9, 0x3, 0x2, 0x4, 0x1000, 0x6}, {0x1, 0x4, 0x0, 0x80000001, 0xfffffff8, 0x6}, {0x2, 0x7f, 0x4, 0xff, 0x4, 0x80}, {0x10000, 0x1, 0x5, 0x5, 0x7, 0x8}, {0x6, 0x8, 0x8, 0x6, 0x1ff, 0x9}, {0xfffffff8, 0x4, 0x9, 0xffff0000, 0x5, 0x90}, {0xfffffffd, 0xc9, 0xf694, 0x4, 0xc316, 0x9}, {0xfffffffa, 0x1, 0x0, 0x8000, 0x7fff, 0x3}, {0xc, 0x6, 0x222, 0x96b5, 0x3, 0x101}, {0x7, 0x10000, 0x2, 0x5, 0x5, 0x8}, {0x7ff, 0x6, 0x1ff, 0xffffd7e1, 0x6, 0x81}, {0x5, 0xc, 0x9, 0x8, 0x4, 0x3}, {0x2, 0x9, 0x7, 0x1, 0x6, 0x6}, {0x4, 0x3ff, 0x101, 0x0, 0x8000, 0x1}, {0x101, 0x1, 0x745f, 0x4, 0x56, 0x5}, {0x3, 0x1, 0xfff00000, 0x7, 0x72b0, 0x4}, {0x3b7f, 0x5, 0xf, 0xffffbf74, 0x1, 0x10001}, {0x6, 0x2, 0xe, 0x3ff, 0x64, 0x8000}, {0x7, 0xffff1211, 0x10, 0x7, 0x0, 0x4}, {0x80000000, 0x3845, 0x10000, 0x200, 0x80000000, 0x8}, {0xf20, 0x10001, 0x2, 0x4, 0x7, 0x4}, {0x7, 0x36b9, 0x0, 0x9b24, 0x4, 0xc53d}, {0xd3a, 0x815c, 0x5, 0x5, 0x44, 0x6}, {0x7, 0xfffffffb, 0x10, 0xefe, 0x4, 0x6}, {0x704, 0x1, 0x8, 0x6, 0x6}, {0x9, 0x1, 0x6, 0x7fffffff, 0xb79a, 0x5}, {0x6, 0x9, 0xbc4b, 0x7379, 0x6, 0x200}, {0x1ff, 0x5, 0xc, 0x200, 0x80000001, 0x480b}, {0x7, 0xa, 0x3, 0x2, 0x3, 0x2492}, {0x8000000, 0x8, 0x7, 0x8, 0x27, 0x9}, {0x3a, 0x40, 0x31c, 0x4d2, 0x5, 0x4}, {0x7, 0xff, 0x4, 0x3, 0x7}, {0xc487563, 0x7, 0xaa, 0x8, 0x0, 0x6b}, {0x8001, 0x6, 0x1, 0x2, 0x66c9, 0x9}, {0xdb1, 0x1, 0xe5, 0x2, 0xf1f8}, {0x4f43, 0x6, 0x4, 0x4, 0x2, 0x7}, {0x7fff, 0x250e, 0x4, 0x4, 0x6, 0xf}, {0x2, 0x7, 0x3, 0x7, 0x20, 0x1}, {0xffff5556, 0x6, 0xa9, 0x9, 0x3, 0x3}, {0xd0c, 0xe9, 0x2, 0x8, 0xedd9, 0xa}, {0x6, 0x9, 0x9, 0x4, 0x5, 0x3}, {0x32e, 0x0, 0x5, 0x2, 0x9, 0x4}, {0x1, 0xef60f23, 0x8, 0x5, 0x2, 0x3}, {0x1000, 0x8, 0x3, 0x3, 0x8000, 0xc}, {0x6, 0x8, 0x100, 0x6, 0x9a7d, 0x1000}, {0x7900, 0x5, 0x2, 0x8, 0x80, 0x292}, {0x400, 0x7, 0x3, 0x6, 0x10, 0x278}, {0x0, 0x200, 0x7, 0x80000000, 0xfffffffc, 0x77}, {0x3, 0xe48, 0x4, 0x9, 0x6, 0x100}, {0x10001, 0x4e2, 0x3250000, 0x6, 0x1bd, 0x1}, {0x9, 0x0, 0x100, 0xd25, 0x5c9c, 0x1}, {0x3, 0x3, 0x2, 0x4, 0x3, 0x5}, {0x400, 0x217, 0x5, 0xd16, 0x6, 0x7}, {0x5, 0x5, 0x4, 0x8, 0x2, 0xa6}, {0x5, 0xb3, 0x4, 0x8, 0x9, 0x1}, {0x1, 0x8000, 0x4, 0x6, 0x3, 0x3}, {0x2, 0x777, 0x6, 0x4, 0x5, 0xf}, {0xe47, 0x3, 0x1, 0x8000, 0xc86, 0xffff}, {0x3, 0x100, 0x4, 0x391, 0x80, 0x6}, {0x7, 0x8, 0x8, 0x9, 0x1}, {0xffffffff, 0x3, 0x2, 0x1, 0xfffffffa, 0x10}, {0x3, 0xaa1, 0xffffffff, 0x7fff, 0x5, 0x7ff}, {0x560f, 0x0, 0x8, 0x9, 0x3, 0x5}, {0x9, 0x7, 0x2ae0, 0x0, 0xa9, 0xce6}, {0x4, 0x2, 0x1, 0xa2, 0x0, 0x6831}, {0x3, 0x53b8, 0x1, 0x0, 0x4, 0x4}, {0xe, 0xb5, 0x8, 0xbca, 0x4, 0xff}, {0x0, 0x7d0, 0x5, 0x38, 0x3, 0x7}, {0x6, 0xffff, 0x4, 0xfe, 0x80, 0x89}, {0x2, 0x7, 0x7, 0x3714, 0xfffffc01, 0x7fffffff}, {0x800, 0x1, 0x10000000, 0x2, 0x5, 0x3}, {0x9, 0xdf, 0x4, 0xff, 0x5, 0x5}, {0x800, 0x3, 0x6171ed51, 0x8001, 0x9}, {0x10001, 0x8, 0x6, 0x80, 0x0, 0xfffffffb}, {0x5, 0x7, 0x6, 0x3, 0xaa, 0xffffffff}, {0x8c7, 0xfffffff6, 0x1, 0x3, 0x0, 0x3}, {0x6b, 0x200, 0x0, 0xe, 0x1, 0x8}, {0xb15c, 0x8000, 0x6, 0x5, 0x80, 0x6}, {0xb1ab, 0x200, 0x25, 0x6, 0x80, 0x8}, {0x1, 0x2, 0x6, 0x9, 0x6, 0x5}, {0x2b2, 0x9, 0x401, 0x1ff, 0x7, 0x1ff}, {0x3ff, 0x3, 0x3, 0x3, 0x6a1aea34, 0x4}, {0x3, 0x8000, 0x3, 0x78, 0x8000, 0x3}, {0xd, 0x6, 0x5, 0x4, 0x0, 0xb}, {0x5, 0x1, 0x81, 0x7f5, 0x5, 0x13}, {0x80000000, 0x23e, 0x9, 0xa, 0x2, 0x2}, {0x8, 0x1, 0x1, 0x4b, 0x8, 0x4}, {0x47b6, 0x8, 0x3, 0x5, 0x9}, {0x1, 0x2, 0x0, 0xfff, 0x3, 0x8}, {0x9eed, 0x0, 0x6, 0x8, 0x2, 0x1}, {0xff, 0x80000000, 0xbc, 0x200, 0x1ff}, {0x31b, 0x9, 0x7fff, 0x8, 0x17f2f3da, 0x800}, {0x4, 0x3, 0x3, 0xd44, 0x240, 0x6}, {0x85, 0x1ff, 0x401, 0xb9, 0x7fff, 0x2}, {0xd, 0x671, 0x2, 0x4, 0x7, 0x6}, {0x7fed, 0x225, 0x1ab9f9d5, 0x9, 0x4, 0x4}, {0x4, 0x200, 0x7, 0x890, 0x3, 0xefdb}, {0xffffff50, 0x0, 0x8, 0x8001, 0x6, 0xf2d451c}, {0x6d33, 0xbaa3, 0x1, 0x10000, 0x6, 0x8}, {0x8, 0x80000001, 0x9, 0x3, 0xc, 0x6}, {0x0, 0x2, 0x4, 0x8, 0x45a, 0x4}, {0x9, 0xfffffff9, 0x1ff, 0x0, 0x7, 0x101}, {0x53, 0xf, 0x4, 0xe, 0x9, 0xf}, {0x81, 0x80000001, 0x0, 0x1, 0x80, 0x7}, {0x8, 0x356c, 0x9, 0x3, 0x200, 0x7}, {0x101, 0xa, 0x89, 0x9, 0x3, 0xfffffcf4}, {0x7, 0xe, 0x4, 0x6, 0x9, 0xf3c9}, {0x9, 0x0, 0xac1a, 0x9, 0x1, 0x8}, {0x7fff, 0x8, 0x6, 0x8001, 0x7ff, 0xc}, {0x6, 0x4, 0xfffffff8, 0x7, 0x6, 0xc21}, {0x9, 0x0, 0x6, 0x6, 0x1000, 0x1}, {0xc9000, 0x80000000, 0x0, 0xfffffff7, 0x40}, {0x9, 0x8, 0x5, 0x2, 0x5, 0x8}, {0x7fff, 0x7fff, 0x5, 0x7ed1, 0xa6, 0x5}, {0x1, 0xfffffffd, 0x9, 0x400, 0x8, 0xffffffff}, {0x0, 0x80000000, 0x4, 0xa8d, 0x4, 0xc}, {0xc, 0x80000000, 0x6, 0x0, 0x6, 0x1ff}, {0x9, 0x101, 0x6, 0xfffffffc, 0x0, 0x4}, {0x7, 0x83c, 0x1ff, 0x4, 0x7, 0x8}, {0x7, 0x9, 0x6, 0x4, 0x2, 0x8}], [{0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {0x5}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {}, {0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x1}, {0x6}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x4, 0x3}, {0x5}, {0x0, 0x1}, {0x5}, {0x1}, {}, {0x2, 0x1}, {0x1}, {0x5, 0x1}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {}, {0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {}, {0x3}, {0x5, 0x1}, {0x6}, {0x0, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {}, {}, {0x2}, {0x3, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x7, 0x1}, {0x2}, {0x5}, {0x5, 0x1}, {}, {0x3, 0x1}, {0x3}, {0x5}, {0x3, 0xe2216ec6688df74f}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x4}, {0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x2}, {0x2, 0x1}, {0x3, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x48, 0x5, 0x0, 0x1, [{0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}]}, {0xfe, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_mpls={0x18c, 0x12, 0x0, 0x0, {{0x9}, {0x70, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x53a298ce, 0x1, 0x7, 0x5, 0x9}, 0x2}}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x1, 0x400, 0x8, 0x80, 0x2}}}, @TCA_MPLS_LABEL={0x8, 0x5, 0x6dd44}, @TCA_MPLS_PROTO={0x6, 0x4, 0x88be}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x80000, 0x46e, 0x6, 0x2, 0x5b70000}, 0x3}}, @TCA_MPLS_TTL={0x5, 0x7, 0x9}]}, {0xf4, 0x6, "72c3e6fb18b89259b4ea6f6c576eeee20477a15a476a7082d91a2d46204c5c82773b0d73f0af54b10a5ce6e70a970f9e2402c0a18d4ab92096b165a668614fc235c00cdccaaee6667fc85dca079234f77bff9120cd14c27fb6cfd4b74e74d13c3a4109daf93ebe0c57d416c6ccb3575f38dbea0cf008d498ecd63a105e6dce5e9044dfbe1d345c22a616d26535028c24b6518c1dc9937e750a9679fa8fc15e4bedbdb8148598502c32d1154ed509667b95baacedca455d00890414aa809ec97de9778fd3229387d78b12c348e9691adf3d87db76e4236a9a1310ef8b23f885f461aeb54baafafff8257542bc278cc6c7"}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_tunnel_key={0x108, 0xc, 0x0, 0x0, {{0xf}, {0x3c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast1}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @local}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x8, 0x8, 0x3, 0xee8e, 0x7f}, 0x2}}]}, {0xa0, 0x6, "94b022e803a6a1145d6dde477185a0ecf87b2fd7fab6beee77c78835aef707e5fa37a1a10c42bfed1b02506e4f73c620d8367524e3c89d4da124698a73cd648f149b93acf8e7c258762846731302517302bd67e02ee4332dd250ae85f68c117c8e7296ae44e1d67a14f715b83d16564dd4dad4a2376c0c0f8910d55e80f650e6a623a62b7ef3291e6379c8d6ca1b6e2a53a33ce88e7f6c77d4a5f44f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_CGROUP_EMATCHES={0x24, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x14, 0x1, 0x0, 0x0, {{0x901, 0x9, 0xde}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}]}}]}, @TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x3060}, 0x1, 0x0, 0x0, 0x20000890}, 0x8c4) r4 = socket(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x0) 43.03385079s ago: executing program 4 (id=1889): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0xfffffc1d, 0x70bd27, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PMTUDISC={0x5}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_TTL={0x5, 0x4, 0x9}]}}}]}, 0x48}}, 0x24008080) 42.805391628s ago: executing program 4 (id=1892): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x80}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x40}}, 0x0) (fail_nth: 4) 42.38625499s ago: executing program 4 (id=1894): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3e7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00121000a6400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipmr_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x80, 0x0, 0x0, 0x3, 0x0, 0x5}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0xcb47f0b37d3315eb) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES32=r2], 0x110}, 0x1, 0x0, 0x0, 0x90}, 0x20004000) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MFC_PROXY(r5, 0x29, 0xd2, &(0x7f0000000140)={{0xa, 0x4e24, 0x7fff, @remote, 0xfffffbff}, {0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, '\x00', 0x10}, 0xf}, 0x0, {[0x3, 0xfffffffe, 0x5d, 0x5, 0x3, 0x4, 0x200, 0x3]}}, 0x5c) 42.069955328s ago: executing program 4 (id=1897): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002600)={&(0x7f00000025c0)=ANY=[@ANYBLOB="14000000010205"], 0x14}, 0x1, 0x0, 0x0, 0x14800}, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000005c0)=ANY=[@ANYRESHEX=0x0, @ANYRES16=r8, @ANYRES64=r0, @ANYRESDEC=r3, @ANYRES32=r6, @ANYRES8=r4, @ANYRESDEC=r8], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r9) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x45}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000280)='tegra_dma_isr\x00', r10}, 0x18) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x2c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x101}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x3ff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x20040000) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000740)={'dummy0\x00', 0x0}) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r13, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="24000000040600008570b12251dbe6812e9efcea33cb051f0000029b1f000000000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x400c080) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r12], 0x20}}, 0x0) r14 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x1, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1e, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r14, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 41.115739955s ago: executing program 4 (id=1903): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000340)={&(0x7f0000000a80)={0x1f4, r7, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x2, 0x60}}}}, [@NL80211_ATTR_REKEY_DATA={0x20, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="9d1c35e9e9af5cb8337ed52d106520c226d71641ba2abd33"}]}, @NL80211_ATTR_REKEY_DATA={0x5c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="49cef9dbb5176309379287227fbf34c1"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="876466712970dcdb2498350471b1766f"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "ac5ad0181b859500"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="107a5867e5669f8ba070ef52abb674a8c0ee83e9cee1b728"}]}, @NL80211_ATTR_REKEY_DATA={0x58, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="cdf82065ffa02d52aed95680b88bb709b1300e355e562256d054fcff034cf1f6"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="a97f21ba144783155fbae3b9b381a4858e26b38e0a3d36cc"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="15ccbbd911c03855d3a2911f1ca028b2"}]}, @NL80211_ATTR_REKEY_DATA={0x88, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="150d648801336dc9947da9836d926139a93d7a8ad4ec0e518323847999cc2af8"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="528f00b0d95dc8c8f3daa7cb73589f12de4d5f1d302a9022a4b96f25af142d0c"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="fcbb993c8345ff19c6fc8d651599fb474b3b9ec3d766f177"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "e470766ae526ed46"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="57091338816b0e831ee788f63ca91ae7"}]}, @NL80211_ATTR_REKEY_DATA={0x3c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xffff}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="9fdd1f3245070f7003c77050d79fce655618f4d5417e0d1204de69f9111d95e8"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "8a07c04afd9141ff"}]}, @NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="9184e5591610ed28ee3047c211d7ed10024e87e12567ed86"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="682373a7a40d9255659f53ba6aec5531"}]}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x75dde5316214b936}, 0x20000040) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000800)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x3, 0x6, 0x6361, 0x5, 0x1, 0x6}, [@TCA_NETEM_DELAY_DIST={0x8, 0x2, "6ad2a3a4"}, @TCA_NETEM_CORR={0x10, 0x1, {0x5, 0x5, 0x9}}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x3ff0000, 0x5}}]}}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r10, 0x0, 0xb9b}, 0x18) r11 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)={{0x14, 0x3ea}, [], {0x14, 0x3f4, 0x1, 0x0, 0x0, {0x2}}}, 0x28}}, 0x0) r12 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r12, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 26.039658158s ago: executing program 34 (id=1903): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000340)={&(0x7f0000000a80)={0x1f4, r7, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x2, 0x60}}}}, [@NL80211_ATTR_REKEY_DATA={0x20, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="9d1c35e9e9af5cb8337ed52d106520c226d71641ba2abd33"}]}, @NL80211_ATTR_REKEY_DATA={0x5c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="49cef9dbb5176309379287227fbf34c1"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="876466712970dcdb2498350471b1766f"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "ac5ad0181b859500"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="107a5867e5669f8ba070ef52abb674a8c0ee83e9cee1b728"}]}, @NL80211_ATTR_REKEY_DATA={0x58, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="cdf82065ffa02d52aed95680b88bb709b1300e355e562256d054fcff034cf1f6"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="a97f21ba144783155fbae3b9b381a4858e26b38e0a3d36cc"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="15ccbbd911c03855d3a2911f1ca028b2"}]}, @NL80211_ATTR_REKEY_DATA={0x88, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="150d648801336dc9947da9836d926139a93d7a8ad4ec0e518323847999cc2af8"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="528f00b0d95dc8c8f3daa7cb73589f12de4d5f1d302a9022a4b96f25af142d0c"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="fcbb993c8345ff19c6fc8d651599fb474b3b9ec3d766f177"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "e470766ae526ed46"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="57091338816b0e831ee788f63ca91ae7"}]}, @NL80211_ATTR_REKEY_DATA={0x3c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xffff}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="9fdd1f3245070f7003c77050d79fce655618f4d5417e0d1204de69f9111d95e8"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "8a07c04afd9141ff"}]}, @NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="9184e5591610ed28ee3047c211d7ed10024e87e12567ed86"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="682373a7a40d9255659f53ba6aec5531"}]}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x75dde5316214b936}, 0x20000040) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000800)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x3, 0x6, 0x6361, 0x5, 0x1, 0x6}, [@TCA_NETEM_DELAY_DIST={0x8, 0x2, "6ad2a3a4"}, @TCA_NETEM_CORR={0x10, 0x1, {0x5, 0x5, 0x9}}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x3ff0000, 0x5}}]}}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r10, 0x0, 0xb9b}, 0x18) r11 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)={{0x14, 0x3ea}, [], {0x14, 0x3f4, 0x1, 0x0, 0x0, {0x2}}}, 0x28}}, 0x0) r12 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r12, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 4.705314838s ago: executing program 1 (id=2155): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b00000009500"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = socket(0x1, 0x3, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000040)={0x77359400}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r1}, 0x20) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001f00)=""/169, 0xa9}], 0x1}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x40) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000390427bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="01980000000005000000000000000100670e6e65766500001400028005000000000000000000000000deff00"], 0x44}, 0x1, 0x0, 0x0, 0x48105}, 0x6044850) 4.4236441s ago: executing program 1 (id=2159): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001300)=ANY=[@ANYBLOB="500100001000130700000000fcdbdf252001000000000000000000000000000120010000000000000000000000000000000000004e2100020a0000003b000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc010000000000000000000000000000000000fe32000000fe80000000000000000000000000001b000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000190043050000000000000400000000000000fffffffffffff17f0000000000000000000000000000000000000000000000000000000000000000003500000a000400000000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000060"], 0x150}, 0x1, 0x0, 0x0, 0x880}, 0x0) 4.185321311s ago: executing program 1 (id=2164): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x7, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000001000000000000000063aaecb90001000000000095"], &(0x7f00000005c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x20800}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x9) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_DEL(r2, 0x0, 0x484, &(0x7f0000000000)={0x73, @private=0xa010100, 0x4e22, 0x4, 'rr\x00', 0x24, 0x8e08, 0x49}, 0x2c) 4.115151023s ago: executing program 1 (id=2166): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000003000000000085100000fcffffff250000000000000005152b85100000fafffffffccdff03bea0bacc3668b7bedda486b1b3f3367f"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6ff}, 0x94) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') socket$kcm(0x10, 0x2, 0x4) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) close(0x3) close(0x4) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) close(0x4) 4.003378184s ago: executing program 1 (id=2167): r0 = socket$netlink(0x10, 0x3, 0x10) getsockopt$sock_int(r0, 0x1, 0x22, 0x0, &(0x7f0000000180)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) 3.793293454s ago: executing program 1 (id=2171): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000003b810000850000007d000000850000005000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000100)='sys_exit\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='svc_unregister\x00', r3}, 0x18) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r4, 0x6, 0x9, 0x0, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind$packet(r5, &(0x7f00000000c0)={0x11, 0x18, r7, 0x1, 0x81}, 0x14) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 2.640251805s ago: executing program 5 (id=2185): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) mmap(&(0x7f0000868000/0x3000)=nil, 0x3000, 0x100000c, 0x13, r0, 0x5450b000) mmap(&(0x7f0000867000/0x3000)=nil, 0x3000, 0x4, 0x1010, r0, 0xe9e28000) 2.44844571s ago: executing program 5 (id=2188): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)="a2", 0x1}], 0x1}, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r4}, 0x10) write(r3, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r5 = socket$inet_udp(0x2, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0xffffffffffff8000, 0x0) close(0xffffffffffffffff) close(r5) socket$nl_netfilter(0x10, 0x3, 0xc) splice(r2, 0x0, r5, 0x0, 0x1100000000f336, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040885) r6 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg(r6, &(0x7f0000007900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000) bind$inet(r6, &(0x7f0000000100)={0x2, 0x1, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x10) 2.104666116s ago: executing program 5 (id=2191): ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x10000, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xfffffdb6, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4844}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x1ec}}, 0x0) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0xffff, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01080000000000000000030000000900010073797a310000000022000000020a010400000000000000080000000034000000140a03000000000000000000030000000800e19b2ef000090000000000000031000000000900020073797a3000000000140000001100010000000000000000000000000a338c03f24f0f9cff363289f93c8eb93ab6170ca8f621224e96b662da9f8a9fe4629d7357009fa4a8c91ba61a53d5e834c448931d18ff3d5ddf207f47e91be8deaada6aa92f36a2b18ea4056453580fdb6f253d69deaa7ae7358e9d3af444"], 0x90}}, 0x0) 1.877295137s ago: executing program 5 (id=2195): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x40000000) 1.814800772s ago: executing program 6 (id=2197): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x1000, 0xffffffff, {}, [@IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_BRIDGE={0x4}]}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_icmp(0xa, 0x2, 0x3a) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x3) sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r5, @ANYBLOB="05005b"], 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r1, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x9, 0x4, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @cgroup_sock=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.548684791s ago: executing program 7 (id=2199): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x80}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x40}, 0xffffff80}, 0x0) 1.495930704s ago: executing program 6 (id=2200): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000"], 0x7c}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000071000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r2, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="3190000008000000e0f7011c715572564ec4ee34858ba356875bca68"], 0x20}, 0x1, 0x0, 0x0, 0x2}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYRES32=r0, @ANYRES64=r1, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x20, 0x18, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @u32}, @nested={0x4, 0x9}]}, 0x20}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r5, &(0x7f0000000340)=ANY=[], 0x141) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rtc_alarm_irq_enable\x00', r5, 0x0, 0x7}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r7, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r7], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) connect$can_bcm(r5, &(0x7f0000000140)={0x1d, r7}, 0x10) socket$igmp6(0xa, 0x3, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) close(0x3) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001000000", @ANYRES32, @ANYBLOB="fce9ffffff00000000000000000000008195db8f", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) unshare(0x28000600) r10 = socket$inet(0x2, 0x3, 0x4) setsockopt$IP_VS_SO_SET_TIMEOUT(r10, 0x0, 0x48a, &(0x7f0000000040)={0x5, 0xa, 0xfffffff9}, 0xc) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r9}, 0x38) 1.317367118s ago: executing program 7 (id=2201): sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)={0x20, 0x0, 0x9, 0x3, 0x0, 0x0, {0x7}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040884}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x20, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x4}]}, 0x20}}, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x800000000000, 0x0, 0x0, 0x751, 0x7, 0x200000000080], 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000200000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x108) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000340)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000080], 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000007fffffe000000000000000000001fb195d574202b200000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x108) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, 0x0, 0x0) 1.315814997s ago: executing program 6 (id=2202): r0 = socket(0x10, 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a1400000100000000000000000000000002000003140000001100010000000000000000000100000a45ce8a74ecac9d055a1c3b1ed3ffc53b3f980ab0b0fc1e26ba95ce71e5017b959b2b1716bcf09483d2e48ba493235067bf8d9558615b2a57254e98489c266e8d252699515b60b52551e643cddbf83279eadf206b8a16123ace8fb664f5a4fa09908efe43a9ac337ca44e0000000000000081f4c36314bc62e29c9ca6473e859e65d29f6df883ded2f695de246e8b"], 0x3c}}, 0x4044804) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 64) r3 = socket$kcm(0x2, 0x3, 0x2) (rerun: 64) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=@updpolicy={0xec, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x10}}, 0x0, 0x3, 0x4, 0x40, 0x2, 0x80, 0x0, 0x73}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, {0xfb, 0xb7f2, 0x200000000000}, 0x0, 0x0, 0x1}, [@policy_type={0xa}, @address_filter={0x28, 0x1a, {@in=@multicast1, @in6=@remote, 0x2, 0x5, 0x1}}]}, 0xec}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) (async, rerun: 32) sendmsg$inet(r3, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x4e24, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1}}}], 0x20}, 0x20002880) (async, rerun: 32) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000004c0)=@l2tp={0x2, 0x0, @empty, 0x4}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000080)="63c7e4df04e067406562b551fb77e58aab3a4f76446b2797175ab2330a1231807dfbd440", 0x24}, {&(0x7f0000000600)="f88150bf0b7bb2ed297bbd20e08821f7c9b4cfd47d282fce788324aa01a08f69b9adbd9faeeac9b5afd7e3b5b52924f1dd8305e576d0e7fff89536a95024ed6c7f663b176e081ff6f04d2639c01db676a162305267994cb729fee526de186e831534f5508baf47fb93dbe1654e74972ff6ec95dc2456e98c5a", 0x79}, {&(0x7f00000006c0)="b5e133cbf5d8e812239358cffa6896d019e23664a3f8179c24b97035f57eb51c094035f5ef2aba90a65709726bda03f6f131ce7d2dee04701199099d66a7faff1897ee9b2cfa6eb0d99979", 0x4b}], 0x3, &(0x7f0000000740)=[@txtime={{0x18, 0x1, 0x3d, 0x1}}], 0x18}, 0x20008004) (async) r5 = socket(0xf, 0x1, 0x7) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000200)={0x0, 0x7}, 0xc) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bea100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x12, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="b60a00000000000063112c000000000018feffffff00000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r6) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRESOCT=r7, @ANYRESHEX=r6], 0x37a0}, 0x1, 0x0, 0x0, 0x4000d}, 0x20040050) (async) sendmsg$IEEE802154_LIST_IFACE(r6, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x14, r7, 0x50be6fea6f3bdfbb, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) (async, rerun: 64) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_MSG_GETSETELEM(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2c0000000d0a010e0000000000000000010000000900010073797a30000000000900020073797a3200000002"], 0x2c}}, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x3, 0xb, 0x7, 0x2}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) (async, rerun: 64) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x11, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a603f00000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r2], 0x4c}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x22020600) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) mmap(&(0x7f00002ad000/0xc00000)=nil, 0xc00000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x275a, 0x0) (async) getsockopt$netlink(r10, 0x10e, 0x6, &(0x7f00000002c0)=""/181, &(0x7f0000000100)=0xb5) socketpair$unix(0x1, 0x5, 0x0, 0x0) 1.225295717s ago: executing program 7 (id=2203): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r4, {0xb, 0x8}, {0xfff1, 0xffff}, {0x0, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x24064000}, 0x3000c81c) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x100007, 0x4, 0x25, 0x1, 0xffffffffffffffff, 0x400000}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r6}, 0x38) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000000, 0x12, r6, 0xfff25000) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="e03f030025"], 0x33fe0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000000010001cc214d1001280096c616e000000000c00028006000100fe0f000008", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB], 0x4c}, 0x1, 0xba01}, 0x0) 1.1465949s ago: executing program 6 (id=2204): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000040)=0xd, 0x7) (async) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) recvmmsg(r1, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}, 0xffff}], 0x1, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x46, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0xa, 0x4e20, 0x2, @mcast1}, 0x1c) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x9, 0x0, 0x10, 0x80, 0x0, 0x0, 0x9}, 0xe) (async) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000180)={r4, 0x400}, 0x8) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x50, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x9c, 0x10, 0x801, 0xfffffffd, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x74, 0x1a, 0x0, 0x1, [@AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8, 0x1c, 0x0, 0x0, 0x1a2c3ea1}, {0x8, 0x1d, 0x0, 0x0, 0x5}, {0x8, 0x1c, 0x0, 0x0, 0x8}, {0x8, 0x1f, 0x0, 0x0, 0x6}]}}, @AF_INET6={0x48, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_ADDR_GEN_MODE={0x4, 0x8, 0xb}, @IFLA_INET6_TOKEN={0x14, 0x7, @local}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}]}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) getsockname(r0, 0x0, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r5) sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r6, 0x301, 0x0, 0x3, {}, [@WGDEVICE_A_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24044800) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711213000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 985.539664ms ago: executing program 7 (id=2205): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff00000000030000000000000000000000020000000000000000000000000000040300000000000000000000180c"], 0x0, 0x56, 0x0, 0x0, 0x4}, 0x20) 956.136514ms ago: executing program 6 (id=2206): ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x10000, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xfffffdb6, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4844}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x1ec}}, 0x0) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0xffff, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01080000000000000000030000000900010073797a31000000005c000000020a010400000000000000080000000034000000140a03000000000000000000030000000800e19b2ef000090000000000000031000000000900020073797a3000000000140000001100010000000000000000000000000a338c03f24f0f9cff363289f93c8eb93ab6170ca8f621224e96b662da9f8a9fe4629d7357009fa4a8c91ba61a53d5e834c448931d18ff3d5ddf207f47e91be8deaada6aa92f36a2b18ea4056453580fdb6f253d69deaa7ae7358e9d3af444"], 0x90}}, 0x0) 913.198254ms ago: executing program 7 (id=2207): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001300)=ANY=[@ANYBLOB="500100001000130700000000fcdbdf252001000000000000000000000000000120010000000000000000000000000000000000004e2100020a0000003b000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc010000000000000000000000000000000000fe32000000fe80000000000000000000000000001b00000000000000000000000000000000000000000000000009000000000000000000000000000000000000000000000000000000000080ff43050000000000000400000000000000fffffffffffff17f0000000000000000000000000000000000000000000000000000000000000000003500000a000400000000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000060"], 0x150}, 0x1, 0x0, 0x0, 0x880}, 0x0) 809.306314ms ago: executing program 6 (id=2208): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) mmap(&(0x7f0000d30000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000f6e000/0x1000)=nil, 0x1000, 0x3000006, 0x12, r0, 0x5c2a7000) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.current\x00', 0x275a, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000003, 0x28011, r2, 0xac9d4000) ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0xf507, 0x0) socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x4aa4) r4 = socket$pppoe(0x18, 0x1, 0x0) r5 = socket$qrtr(0x2a, 0x2, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r6, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) listen(r6, 0x2) accept4(r6, 0x0, 0x0, 0x80800) sendmsg$inet(r6, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x8081) bind$qrtr(r5, &(0x7f0000000040)={0x2a, 0x0, 0x4001}, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x48) unshare(0x26020480) bpf$MAP_GET_NEXT_KEY(0x15, 0x0, 0x0) r7 = socket(0x2a, 0x2, 0x0) getsockname$packet(r7, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x4}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x408dc}, 0x4000080) connect$pppoe(r4, &(0x7f0000000040)={0x18, 0x0, {0x4, @random="bb7fb37b9489", 'bond0\x00'}}, 0x1e) sendmmsg(r4, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) 730.692215ms ago: executing program 2 (id=2209): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000100000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="b7020000b02300ffbfa30000000000000703000000feffff7a0af0ff2300000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000011000000b7030000000000006a0a00fe000000008500000032000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb450063dedba767ade51f7f1f66acd19100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb4e4d0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e85cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bc0b80e80eae8f5e64be2c9d2d29db3d36dd0cf8f79a015c7bd3f15aa6aadbeab2a01685108e61aa00000000000000000000000000c67c6c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f10800000000000000826151e3b42bcae95239ef5ca2a730a00c87c493db0300e63fda97a296820000000001000000eecc952a3fd2c46f3c1cde71a19d1a2982492a210e00d2bfea3b8d188df2eff8d56aaae7d32a2e180022537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d3f00000000000000665c8b7e89eddfc3783f6c9129a7c5f8ee5f50579e2f638f7eb12f63be72a3d81ab324d6e417b1c2cbfdcada0a16e31790e26cf19588a7e0496ee2782224cf30f810da86cf1a3204f4c9404f5d7321a4fefc4d1c9139ca4b65b99909950000006b42077ca60fdecb2717e21f8f187b1866108b6e8c71e2603217606637ece1fa89917e131f4034a8383e99c3568fd04201b37cd92ca6ebf94a2d8310f7032775cfd75652f87b039d5430b3c6643e9146d2478ce31344b554aca7670000000000000010c65608fda6ed5d08e7a796042aa127d874105787d0347aa37801faff5b9050803a19ff6205aa5c263e407a2f7de56f7a0000e094fa4e3f05528caab5a430c08dd810bc97204b767dd969721a26aa740000000000bc433fe2d0a6ef2a8a91cd3cb305aa80dadef8b0caca780000000000000000863e21db415a222bb1a7ab94bfe4a74157d794f9d0430c2c0eb563350559829865a3dd08fb31bd0801e09aa3ee45e61a56fc83076451cff7632e49a41eadb5044a0d5f73d6932161ae5e9ce218a35cd8e7b747887b1a74798982d0b492c3f0ff53189d80733eb04f8124877b648ff438f7d66c7efcc09a8f3330b6c22d14e80db8e5608bdeab9388b758a15f4ce70390c214bc6838798f5b9b0b500d4e8b5174f329b8501c6feb7a6982bcea74a0f2ced7fa2059234a8d10b7f0597151d5c9067d57d85f4ae933eaf5174ba122f3f702ef8695578d3c08562c9fc185f0f65d11b4c58ae52500cbe99cde3758a5cbe6093dd328ac820e2de309d25a324647aadffcecf0f3bbaeda7af4436d9ffbce1b240a2f5e346eba8812e6329e01b087bde7da4a6448f478102e90c8134f531de08d4cf4f6f35b15a202544c0ced0c1715fd3a90099f785a13a2412bedba2981dd22bd9d736c00000000000000000000000000000000eb6fec8d7d2f77f4d470a9caa5b1bfc00cd1d40830ac35f229f8ffe1c02a63d3c2d9"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xffffffff}, 0x10}, 0x94) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x40}, {0x6, 0x0, 0x6c}]}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @private=0xa010100, {[@generic={0x83, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r3, 0x702, 0xe, 0x0, &(0x7f0000000580)="e460334470d8d400eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff003, 0x4, 0x7f, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r5, &(0x7f0000000bc0), 0x0}, 0x20) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r6, 0x10c, 0x9, 0x0, &(0x7f0000000240)) r7 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x401}, 0x1c) 725.749523ms ago: executing program 7 (id=2210): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt(0xffffffffffffffff, 0xff, 0x2, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x3}, 0x8, 0x10, &(0x7f00000002c0), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='rcu_utilization\x00', r3, 0x0, 0x2}, 0x18) r4 = socket$netlink(0x10, 0x3, 0x400000000000004) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f00000001c0)=0x100000, 0x4) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000480)=0x88, 0x4) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1) sendmsg$nl_generic(r4, &(0x7f0000000a80)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000740)={0x2e0, 0x32, 0x8, 0x70bd2a, 0x25dfdbfd, {0x2}, [@nested={0xa0, 0x14e, 0x0, 0x1, [@generic="0a7130fd3a2094f66ab516a74da96df07487d7fbcef1ca785eff52fe44c6dc606cca04388c2220f8305b9c1de7942581db96029dcf28c52a68c60ba7c4d7a17ba3e014601d8ffcd55fb980e15fdb6d20817c9ae706b5f5f665473ba427dd53f738882a0326aa8a60a39be17f55b89bfcad069af6353f40878e393affdddd7a38443a966e8ac205c0a12348ffad54df8d", @typed={0x8, 0xd3, 0x0, 0x0, @u32=0xb8b}, @nested={0x4, 0xfd}]}, @typed={0x8, 0xb9, 0x0, 0x0, @fd=r2}, @generic="ad370d8ff32697c23c532981eab158a9031619155e256d2f5ff224e0f8520da3b16603843bd1effee0bfbb73590da8576cbf4517ea3da59416e9e6d032c919e776ad0e3c01d59e56771f417597d8", @nested={0x19a, 0x47, 0x0, 0x1, [@typed={0x4, 0x9}, @generic="277ca548afe7774ccbe0f50cf5cf1fe595db1146e6d46dc092ee7890abe740d4e351b6f92948ff563389b8d18b2f8ff413d6c02b7a78e6412c342f988e3cc5e757a904525696380bc88716648479710661ed9f340381591074a13be719b294f5de719322420aa95f2aa2d44d3af3d939", @typed={0x8, 0xb, 0x0, 0x0, @ipv4=@multicast2}, @typed={0x8, 0x8, 0x0, 0x0, @uid}, @typed={0x8, 0xcf, 0x0, 0x0, @fd=r1}, @typed={0xa, 0xe4, 0x0, 0x0, @str='\\\xd6-*-\x00'}, @generic="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"]}, @generic="3919ee15fc1453c7ae603090ea29676796882a6891ad5274d596b98140bd4bffd7f195505f037ccd07d2ea3c6c0a2676af", @typed={0x8, 0xfb, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x3b}}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x44004}, 0x4010) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f0000000040), 0x4) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) sendmsg$nl_route(r4, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c000000520000042dbd7000fddbdf251c0800060006000000080006000800000008000100", @ANYRES32=0x0, @ANYBLOB="00000012dc4913eddc052ea7a789af24238980b874a117c7b924001132d2fd84a1b3df"], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x40a0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1200000004000000040000000100000008000000", @ANYRES32, @ANYBLOB="00000000005b15881e00000000ddff0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lblcr\x00', 0x10, 0x8, 0x11}, 0x2c) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="50000000090601020000000000000000030000000900020073797a3100000000050001"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000050401010000000000000000000000010a000200000000040300000005000100010000000800044000000008"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000004) socket$inet6_udplite(0xa, 0x2, 0x88) socket$unix(0x1, 0x5, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000080)=ANY=[@ANYRES8], 0x0) 513.207024ms ago: executing program 5 (id=2211): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001840)=@newtfilter={0x3060, 0x28, 0xd27, 0x1003ffd, 0x0, {0x0, 0x0, 0x0, r1, {0xfff3, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x44, 0x2, [@TCA_BPF_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x7b49, 0x20000000, 0x1, 0x2, 0xcd69, {0x92, 0x2, 0x2, 0x0, 0x7, 0x8}, {0x7, 0x1, 0xffff, 0x7, 0x1004, 0x10}, 0x4, 0x0, 0x8101}}]}]}}, @filter_kind_options=@f_cgroup={{0xb}, {0x2fe4, 0x2, [@TCA_CGROUP_ACT={0x2fbc, 0x1, [@m_pedit={0x2d24, 0x5, 0x0, 0x0, {{0xa}, {0x2bfc, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xec8, 0x4, {{{0x5, 0x80000001, 0xffffffffffffffff, 0x6b, 0x8}, 0x8, 0xd, [{0x9b7, 0x3, 0x10001, 0x400, 0xff, 0xb}, {0x5, 0xfffeffff, 0x4, 0x9, 0x8001, 0x7}, {0x2, 0x0, 0x4, 0xffff, 0xa00000, 0x3}, {0x2, 0x7, 0x9, 0x8, 0x30, 0x10}, {0x8, 0x44, 0xc, 0xffffbf4d, 0x2, 0x8}, {0x1, 0x0, 0x1, 0x1000, 0x7, 0x4f}, {0x101, 0x1eb165b7, 0x10001, 0x4, 0xd68, 0xffffc74b}]}, [{0x4, 0x6d5, 0x40, 0x5, 0x9, 0x65681aa5}, {0x9, 0x9, 0x8, 0x580, 0x7, 0x3}, {0x7, 0x3, 0x7, 0x7, 0xffffffff, 0x6}, {0x979, 0xffffffff, 0xe, 0x849, 0x3, 0x6}, {0x80000000, 0xbc, 0x3, 0x10, 0x4, 0xfffffde4}, {0x7, 0x8000, 0x4, 0x9, 0x1ff, 0x5}, {0x5, 0x2, 0x0, 0x3fe0000, 0x4, 0x1}, {0x1ff, 0x8, 0x3000000, 0xb, 0xe9c, 0x200}, {0x5, 0x6, 0x7, 0x9, 0x9, 0x9}, {0x3, 0x1, 0x9, 0x5, 0xc9a, 0x4}, {0x2, 0xb6, 0x4, 0x7, 0x3, 0x3cef4000}, {0x9, 0x4, 0xa1, 0x344, 0x9, 0x57}, {0x2, 0x8, 0x8, 0x9, 0x7f, 0x8}, {0x8, 0x4, 0x40, 0x5, 0x4, 0x8}, {0x5c, 0x6, 0x9, 0x3, 0xa5, 0x4}, {0x109, 0x5, 0x9, 0x1260, 0x6, 0x2b9}, {0x8, 0x0, 0x5, 0x829, 0x9, 0xb}, {0x200, 0xa24d, 0x1, 0x21a2, 0x2, 0x9}, {0x3, 0x80, 0xa29, 0x0, 0x9, 0x8}, {0xffffffff, 0x6, 0x7, 0x8100000, 0x401, 0x1ff}, {0x0, 0x1, 0x8, 0x6, 0x7, 0xef8}, {0x59, 0xe1, 0x5, 0x1, 0x6, 0x5}, {0x80, 0x9, 0x1000, 0x3, 0x5, 0xb}, {0x7, 0x1, 0x4, 0x42, 0xb9e, 0xfff}, {0x6, 0x7, 0xfff, 0x7, 0x0, 0x2c1}, {0x5, 0x3, 0x5, 0xfff, 0x1, 0x428040f0}, {0x0, 0x5, 0x7, 0xc0, 0x3ff, 0x1}, {0x4, 0x80000001, 0x4, 0x0, 0x2, 0x5}, {0x5, 0x3, 0xc1, 0x5256, 0x5, 0x7}, {0x3, 0x921, 0x0, 0x7fff, 0xffff, 0x2}, {0x3, 0xff, 0x9, 0x7f, 0x0, 0x4}, {0x8001, 0x5, 0x6, 0x7, 0x800, 0x6}, {0x6, 0x2, 0x40, 0x64, 0xffff, 0x4}, {0x4, 0x3, 0x100, 0x7ff, 0x91, 0x35e4}, {0x8, 0xa, 0x9, 0x2, 0x200, 0x200}, {0x10, 0x1, 0x4, 0x7, 0x8, 0x8}, {0x800, 0x8f92, 0x3f3, 0x1, 0x5, 0x6}, {0x6, 0xb8b, 0x1, 0x5, 0x6, 0x9}, {0x400, 0x2, 0x3, 0x9, 0x9, 0xfffffff5}, {0x7fffffff, 0x9, 0x8, 0x3ff, 0x4, 0xe}, {0x40, 0xe7, 0xfffff89a, 0x9, 0x2, 0xf7}, {0xac4d, 0x1, 0xe45c, 0x0, 0x3a0d, 0x7}, {0x4, 0x2, 0xde2, 0x7fffffff, 0x1, 0x8f87}, {0xf, 0xf3c, 0x9, 0x2, 0x5, 0xcdc6}, {0x8a, 0x7, 0x3e89, 0x7fff, 0xf4, 0x6}, {0x7b9, 0x1, 0x5874, 0x0, 0x400, 0x1}, {0x9, 0x4, 0xf7e, 0x7fff, 0x8, 0x100000}, {0x8, 0x1, 0x4, 0xd6c, 0x9, 0x140}, {0x71, 0x1, 0x4, 0x7fff, 0x0, 0x3}, {0x3, 0x80000, 0x9b, 0x1, 0x6, 0xffff}, {0x9, 0x7, 0x5, 0xffffff49, 0x0, 0x101}, {0x3, 0x7, 0x0, 0x4, 0x6, 0x4}, {0x1, 0x5, 0x4, 0xfffffffa, 0x80000001, 0xf}, {0x2, 0x6ef9, 0x5, 0x5, 0x109d, 0xffff}, {0x3ff, 0x1, 0x40, 0x80, 0x6, 0x2}, {0x8, 0x0, 0x4, 0x52, 0x1eb9, 0x6}, {0x2, 0x0, 0xfffffff8, 0xa6, 0x1, 0x4}, {0x2, 0x3, 0xfffffffa, 0x10, 0x3, 0x9}, {0x6, 0x0, 0x3ff, 0x4, 0x3, 0x80}, {0x5, 0x9, 0x2, 0x2, 0x6, 0x80}, {0x2, 0x0, 0xf3, 0x8, 0x8, 0xd3}, {0xb9, 0xc, 0x2, 0x4}, {0x2, 0x5, 0xfff, 0x65e3, 0x86e, 0xc60b}, {0x64c496a8, 0x2, 0x40, 0x200, 0xba, 0x40000}, {0x7, 0x7, 0x5c7ea5af, 0x67, 0x3, 0x6e4}, {0x2b529e7f, 0x3, 0x8, 0x4, 0x9a, 0x7}, {0x7, 0xc, 0x1, 0x2, 0x8, 0x1}, {0x5, 0x401, 0x8, 0x4ea5, 0x1, 0x81}, {0xdc65, 0x1, 0x2, 0x7fffffff, 0x9bfa, 0x8}, {0x100, 0x7f, 0x6, 0x3, 0x800, 0x6faf}, {0x4, 0x3, 0xd1, 0xcbb, 0xba, 0x4}, {0x5, 0x8000, 0x5, 0x8eb2, 0x0, 0xc}, {0xfffff361, 0x9, 0x4, 0x800, 0x400, 0x6}, {0x548, 0x3, 0x9a, 0x9, 0x6, 0x7ff}, {0x8001, 0x4, 0x400, 0xd, 0x3, 0x8000}, {0x0, 0xfffffffc, 0xffffffff, 0x3, 0x6c, 0x7f}, {0x6, 0x77, 0x6, 0x4f, 0x3, 0x6ab}, {0x1, 0x9, 0xfffffff9, 0x7, 0xfff, 0x5}, {0x7, 0x7ef, 0x4, 0x1, 0x2, 0xa9}, {0x7, 0x8, 0x6, 0x5, 0x5, 0x9}, {0x4, 0x1, 0x1b0, 0x4, 0x9, 0x7}, {0xfffffffb, 0xf, 0x8000, 0x7, 0x8, 0x1}, {0x8, 0x7, 0x101, 0x7, 0x1c, 0x4}, {0x5, 0x3, 0xfffffff9, 0x6, 0x81, 0x6}, {0x8, 0x8, 0x6, 0x9, 0x6, 0x400}, {0x3, 0x8, 0x3b19, 0x6, 0x3, 0x3}, {0x9, 0x3, 0xf52e, 0x8001, 0x2, 0x9}, {0x9, 0x1, 0xc1, 0x4, 0x5}, {0x88, 0x9, 0xfffffff8, 0x9, 0x3}, {0x0, 0x4, 0x4, 0x8, 0x5, 0x10000}, {0x1, 0x0, 0x7, 0x3, 0x5, 0x9}, {0xb8c, 0x7, 0x0, 0x1000, 0x8000}, {0x6, 0x5, 0x0, 0x8, 0x5, 0x8}, {0x3, 0x3, 0x9, 0x8, 0xffffffff, 0x4}, {0x4, 0x800, 0x8e6, 0x80000000, 0x100, 0x3}, {0x40, 0x2, 0x4, 0x6, 0x7b6a, 0x401}, {0x1, 0x7, 0x1, 0x38, 0x1, 0x3}, {0x1, 0xec3, 0x6, 0x4, 0x5, 0x1}, {0x401, 0xe, 0x8000, 0x1, 0x80000000, 0x3}, {0x9, 0xb44, 0xff, 0x9b6, 0x1, 0x3}, {0x7f, 0x5, 0xfffffffd, 0x1ff, 0x7, 0x3}, {0xea, 0x8, 0xffffffff, 0x9, 0xb, 0x6}, {0xc, 0x2, 0x7ff, 0x7, 0x1, 0x8001}, {0x3, 0x1, 0x8, 0x6, 0x4, 0x8}, {0xffff, 0x8, 0x9, 0x4, 0x2, 0x5}, {0x3, 0x4, 0x101, 0x9, 0x8, 0xedf}, {0x7, 0x3, 0x80000001, 0x5, 0xd772, 0xffff21f9}, {0x7, 0x8, 0xbfd3, 0x4, 0x9, 0x9}, {0x3, 0x4, 0x3, 0xa457, 0x100, 0xbc8d}, {0x3, 0x5, 0xffff, 0x1, 0xffffff01, 0xa26}, {0xfffffff7, 0x7fff, 0x0, 0x4, 0x9, 0xc5db}, {0x1, 0x1, 0x40, 0x1, 0xccd, 0xf}, {0xffffff0f, 0x7f, 0x8, 0x1, 0x80, 0x4}, {0x3, 0xb4, 0x4, 0x401, 0x0, 0x6}, {0x5, 0x4, 0x8000, 0x0, 0x2, 0x7}, {0x1, 0x4, 0x80, 0x8, 0x5, 0xc}, {0xf, 0x8, 0x7, 0x200, 0x8, 0x8}, {0xd, 0x2, 0x2, 0x4, 0x1, 0x79b}, {0x100, 0x7, 0xa52, 0x20004000, 0x200, 0x3da}, {0xf8, 0x9, 0x0, 0x4, 0x3ff, 0x7}, {0x4, 0xa, 0x0, 0x4, 0x70, 0x80000001}, {0x1, 0x3, 0x8, 0x7, 0x4, 0x42}, {0xa748, 0x5, 0x11f1, 0x0, 0xc21e, 0x10}, {0xff, 0x4, 0x5, 0x9, 0x2, 0x3}, {0x0, 0x3, 0x8, 0x2daf9e40, 0x6, 0x5}, {0x4e0f, 0xddda, 0x8, 0x8, 0x9, 0xa7}, {0xfffffffe, 0x7, 0x2, 0xd53, 0x8da0, 0x7ff}, {0xfffffff9, 0x0, 0x2, 0x4, 0x3, 0x8}], [{0x6, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0xe2f661a5841d7b2a, 0x1}, {0x5}, {0x2, 0x1}, {0x5, 0x1}, {0x2}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x5}, {0x2}, {}, {0x3, 0x1}, {}, {0x2}, {0x1}, {0x1}, {0x5}, {0x1, 0x1}, {0x0, 0x1}, {0x5}, {0x7}, {0x3, 0x1}, {0x4}, {0x3, 0x14f62eb06ccd2623}, {0x5, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x2, 0x1}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x2}, {0x1}, {0x2}, {0x5}, {0x5}, {0x2}, {0x5}, {0x5, 0x1}, {}, {0x4}, {0x5, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x5, 0xc0ac104ebbe85d62}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x1}, {0x3}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {0x3}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {}, {}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x5}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {}, {0x4}, {0x3}, {0x3}, {}, {0x5, 0x1}], 0x1}}, @TCA_PEDIT_PARMS_EX={0xe68, 0x4, {{{0xca42, 0x8e7, 0x3, 0x6f4, 0x8}, 0xc, 0x4, [{0x5, 0x1, 0xfffffffc, 0x2, 0x2, 0x1}, {0x1, 0x80000000, 0x88b0, 0x1791, 0x2, 0x61c6}, {0x9, 0x2cf917db, 0x4, 0x8, 0x4, 0x5}]}, [{0xffff, 0x7, 0x6, 0x1ff, 0x0, 0xea2}, {0x4, 0x9, 0x100, 0x3, 0x7fffffff, 0x8}, {0x5, 0xc358, 0x2, 0xe07b, 0x6, 0x80000001}, {0x1ff, 0xd5, 0x0, 0x5, 0x1, 0x80000000}, {0x6, 0x7, 0x5, 0x1, 0x2, 0x10000}, {0x4b, 0xff, 0x9, 0x8, 0x87, 0x6}, {0x1000, 0x6, 0x8, 0x2, 0x200, 0xd}, {0x5, 0x4, 0x7fffffff, 0x0, 0xffffff7f, 0x5}, {0x80000000, 0xe5, 0xc, 0x0, 0xffff, 0x7}, {0x6, 0x8, 0x1dd, 0xff, 0x723e, 0x5}, {0x1c, 0xc, 0x8, 0x7, 0x9, 0x9f8c}, {0x3, 0x7, 0x568b, 0xb004, 0x4, 0xa54}, {0x2, 0x0, 0x80, 0x1, 0x5, 0xd23}, {0x1, 0x5, 0x9, 0x800, 0x5, 0xfa92}, {0x1, 0x1, 0x101, 0x8001, 0x9, 0x2}, {0x9960, 0x5, 0x387, 0xf0f, 0x100, 0x401}, {0x1, 0x0, 0x80, 0x0, 0x6, 0x7fff}, {0xf75, 0xa3d8, 0x7ff, 0x9d, 0xfffffff8, 0x7}, {0x7, 0x1400000, 0x3, 0x0, 0x5, 0xd}, {0x4, 0x4, 0x5, 0x5, 0xf, 0xea6}, {0xfff, 0x10, 0x6, 0x0, 0x84, 0x81}, {0x9, 0x9, 0x5, 0x5, 0x5, 0x7}, {0x3ff, 0x68, 0x9, 0x9, 0x1ff}, {0x5, 0x8, 0xe, 0x3, 0x2, 0x93c1}, {0x1, 0xabb971e, 0x7fff, 0x9, 0xffffffff, 0xb02c}, {0x8, 0x9, 0x9, 0xa34a, 0x6, 0x5}, {0x6, 0x7, 0x2, 0xffff, 0x6, 0x5}, {0xfff, 0x4, 0x7, 0x1ff, 0x5}, {0xffff0000, 0x1, 0x6, 0x0, 0x180, 0x1000}, {0x40, 0x4, 0x7f, 0xfff, 0xffff, 0xceb}, {0x709a, 0xffffffff, 0x6, 0x4, 0x1000, 0x5}, {0x9, 0x10, 0x369, 0x5, 0xd, 0x8}, {0x5, 0x10, 0x38, 0x10, 0x8, 0xc6}, {0x1, 0x7fffffff, 0x6, 0x1, 0x7, 0x1}, {0xab, 0x9, 0x1, 0x9, 0x5, 0x2}, {0xec, 0x2, 0xea, 0x5, 0xc, 0xa3}, {0x4, 0x80000000, 0x1, 0x8, 0x0, 0x81}, {0xe8b, 0x8, 0x7ff, 0x4, 0x50, 0x6b44cd6c}, {0x0, 0xfffffffe, 0x1b7a, 0xe965, 0x63, 0x7}, {0x4, 0xffffffff, 0xa1, 0x8, 0xea, 0xffff}, {0x0, 0x1, 0x81, 0x0, 0x6, 0x826}, {0x8, 0x81, 0x480, 0xe00000, 0xd816, 0xc}, {0x2, 0x3, 0x9, 0x10, 0x7fffffff, 0x1}, {0x5d, 0x80000001, 0x4, 0xffff, 0x9, 0x5}, {0x10000, 0x1, 0x1a6, 0xb, 0x2, 0x3e}, {0xcd, 0x10001, 0x7, 0x5, 0x8001, 0x69a}, {0x8, 0x7, 0x7ff, 0x7d5318c0, 0xf6, 0xffffffff}, {0x8, 0x7, 0x9, 0x6, 0x6, 0x9}, {0x9, 0x6, 0xb3, 0x8, 0x6, 0x60f}, {0x401, 0x0, 0x9, 0x3, 0x7, 0x9}, {0x7, 0x9, 0x2, 0xffffff80, 0x9, 0xa}, {0xf, 0x4, 0x1, 0x800, 0xfffffff7, 0x5}, {0x6, 0x9, 0x7b96, 0x51e3, 0xff, 0x4}, {0x1ff, 0x4000000, 0x101, 0x0, 0x76, 0x100}, {0x5, 0x81, 0x6, 0x2, 0x3ff, 0x5}, {0x9, 0x5, 0x5, 0x7, 0x4, 0xffffff7f}, {0x2, 0x8, 0x80000001, 0xfffffffa, 0x8001, 0x607}, {0x1, 0xb, 0x8a, 0x8001, 0x1, 0x1}, {0xd, 0xe68, 0x9, 0x80, 0xc, 0x9}, {0x7, 0x725, 0x96f, 0xf, 0x9, 0x3}, {0x7, 0x3, 0x6, 0xff, 0x2fb, 0x6}, {0xcbce, 0x4, 0x50d5b29, 0x3, 0x1, 0x3}, {0x5, 0x3, 0xc, 0x80, 0x8, 0x1ef65f35}, {0x2, 0x6, 0x1, 0x5, 0x8001, 0x8}, {0x32000000, 0x9, 0x81, 0x8, 0x1, 0xe}, {0x200, 0x0, 0x80, 0x7e3e, 0x6, 0x7}, {0x9, 0x3, 0x6, 0x4, 0xfffffff8, 0x6}, {0x8, 0x101, 0x21c4, 0x8, 0x2, 0x10001}, {0x3, 0x4, 0x194, 0x6, 0x7f, 0x5}, {0xfffffffc, 0x3, 0x0, 0x3, 0x8, 0x86}, {0x80, 0xffff, 0x7ff, 0x8, 0x1, 0x6}, {0xb, 0x7fffffff, 0x1000, 0xfffffff6, 0x2, 0x1}, {0x1, 0x8001, 0xfffffff7, 0x4, 0x1ff, 0x100}, {0x4, 0x43d, 0x4, 0x3ff, 0x3, 0xa90}, {0x919, 0x6, 0x5, 0x7, 0x8, 0x6}, {0x8, 0x4, 0x2, 0x7, 0x2, 0x401}, {0x9, 0x4, 0x8, 0x2, 0x5f7, 0x5}, {0x3, 0x1, 0x7ff, 0x81, 0x6, 0x6ab3}, {0x40, 0xe3ae, 0x7, 0x2, 0x4, 0x9}, {0x98000000, 0xf, 0x9, 0x627, 0x9, 0x3eaf2086}, {0x4, 0x2, 0x81, 0xfff, 0x7, 0x10000}, {0x4, 0x5, 0x2, 0x7, 0xfffffff1, 0x5}, {0x3, 0x9, 0x7fffffff, 0x2, 0x4, 0x4}, {0x63, 0x9, 0x1, 0x80000000, 0x7fffffff, 0x7a2d}, {0x0, 0x81, 0x3, 0x6, 0x1, 0x2}, {0xf, 0x0, 0xe1f, 0x9, 0x2, 0x80000001}, {0xfe4, 0x2, 0x200, 0x9, 0x0, 0x8}, {0xf, 0x7, 0x5, 0x7, 0xdc0, 0x7ff}, {0xd, 0x4, 0x0, 0xffffff01, 0x5, 0x5}, {0x7, 0x81, 0x2, 0x7, 0x8, 0x3}, {0x7963, 0x9, 0x1, 0x6, 0xffffd145, 0x3}, {0x2, 0x1, 0x0, 0x4005338a, 0x7, 0x93}, {0x1, 0x0, 0x4, 0x9, 0x136, 0x1}, {0x9, 0x5, 0x4, 0x5, 0x3, 0x4}, {0x7, 0x1, 0x8, 0x8001, 0x6, 0x3a5a51c1}, {0xfff, 0x81, 0x8, 0x5, 0x4, 0x3}, {0xa, 0x3, 0x800, 0x964f, 0x8000, 0x7}, {0xffff, 0x5, 0xfffffff2, 0x5, 0x14, 0x4}, {0x4, 0x1e2, 0x0, 0x4, 0x8, 0x8}, {0x2, 0x1, 0x1, 0x2, 0x9}, {0xfffffe01, 0x9, 0x3, 0x0, 0x1, 0x7}, {0x9, 0x1000000, 0x8, 0x400, 0x1, 0x8}, {0x3, 0x6, 0xca, 0x4, 0x5, 0x1}, {0x157b0000, 0x9, 0x7, 0x2, 0xfd, 0x5}, {0x1000, 0x0, 0x0, 0x7fffffff, 0x7}, {0x2, 0x4, 0x0, 0x1ff, 0x6, 0xfffff297}, {0x9, 0x7, 0xcd, 0x4, 0x1, 0xd31}, {0x5, 0x873, 0x6f, 0x10001, 0xf, 0xfffffffe}, {0x7, 0x4, 0x3, 0x2d8, 0xb, 0x234}, {0xc, 0x847, 0x2, 0xc7, 0x0, 0x1}, {0x6, 0xbb99, 0x0, 0x4, 0x2, 0x20}, {0x0, 0x0, 0x4, 0xff, 0x1, 0x5}, {0x4, 0x400, 0x80000001, 0x2, 0x101, 0xa}, {0x7, 0xffff, 0x1, 0x8000, 0x9a9, 0x6b}, {0x7f6, 0x5, 0x3, 0x80, 0xcf, 0x200}, {0x4, 0x8, 0x0, 0xba2, 0x40, 0x3}, {0xe4b92bd7, 0x33, 0x80, 0xa1a0, 0x7, 0x80000001}, {0xcb, 0x0, 0x699, 0x32593802, 0x3}, {0x1ff, 0x3, 0x10001, 0x4, 0x9f4, 0x2}, {0x80000001, 0x2, 0x3, 0x1000, 0x1000, 0x1}, {0x9, 0x94, 0x5, 0x8, 0x5, 0x6}, {0x9, 0x9, 0x2, 0x90000000, 0x9, 0x1ff}, {0x1, 0x800, 0xffffff01, 0x6, 0x3}, {0x2, 0xaa, 0x2, 0x52bd, 0x8, 0x3}, {0x3, 0x5, 0xa, 0x10, 0x871, 0xb}, {0x3, 0x6, 0x7, 0x0, 0xfff, 0x3ff}, {0x4, 0x2, 0x0, 0x3, 0x4, 0xb}, {0x3cc444d1, 0x6, 0x40, 0x28, 0x100, 0x1}], [{0x4}, {0x1}, {0x1, 0x1}, {}, {0x1, 0x1}, {}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {0x4}, {0x1, 0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x0, 0x42a1038c8c43a84}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {}, {0x0, 0x1}, {}, {0x4}, {0x4, 0x1}, {0x3, 0x1}, {0x7f833acbad44bed1}, {}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x1}, {}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x7, 0x1}, {0x3, 0x1}, {0x2}, {0x3, 0x1}, {0x3}, {0x2}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x2}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {0x2}, {0x3, 0x3}, {0x1}, {0x7}, {0x4}, {0x1}, {0x5}, {0x2}, {0x5, 0x1}, {}, {0x3}, {0x1, 0x1}, {0x4}, {0x5}, {0x1}, {0x1}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {}, {0x0, 0x1}, {}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x1}, {0x5}, {0x0, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {}, {0x5, 0x1}, {0x1}, {0x5}, {0x5, 0x3}, {0x4}, {0x2}, {0x5, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {}, {0x1, 0x1}, {0x4}, {}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x1}], 0x1}}, @TCA_PEDIT_PARMS_EX={0xe80, 0x4, {{{0x0, 0x2, 0x3, 0x2, 0x2}, 0x8, 0x8, [{0x0, 0x9, 0x77ee3f81, 0xfc7b, 0x6}, {0x10000, 0x8, 0x7f, 0x4, 0x7, 0x2}, {0x4ddb, 0x10, 0xb, 0x7fffffff, 0x0, 0x3}, {0xbe, 0x0, 0xffffffff, 0x9, 0x7, 0x4}]}, [{0x1, 0x5c, 0x4, 0xee, 0x0, 0x5}, {0x0, 0x9, 0xfff, 0x30f8, 0x4, 0x5586}, {0x0, 0xfffffffe, 0x7ff, 0x0, 0x1, 0x1b36}, {0x1bf1, 0x9, 0x1, 0x1, 0x80, 0x7ff}, {0x7929, 0x8, 0xe, 0x4, 0xb, 0x2}, {0x1, 0x2, 0x7ff, 0x80000001, 0x2, 0x6}, {0x5, 0x0, 0x7, 0x9, 0xfffffffc, 0xaceb}, {0x8, 0x0, 0xa4a3, 0x5, 0x7, 0xfffffffc}, {0x9, 0x3, 0x2, 0x4, 0x1000, 0x6}, {0x1, 0x4, 0x0, 0x80000001, 0xfffffff8, 0x6}, {0x2, 0x7f, 0x4, 0xff, 0x4, 0x80}, {0x10000, 0x1, 0x5, 0x5, 0x7, 0x8}, {0x6, 0x8, 0x8, 0x6, 0x1ff, 0x9}, {0xfffffff8, 0x4, 0x9, 0xffff0000, 0x5, 0x90}, {0xfffffffd, 0xc9, 0xf694, 0x4, 0xc316, 0x9}, {0xfffffffa, 0x1, 0x0, 0x8000, 0x7fff, 0x3}, {0xc, 0x6, 0x222, 0x96b5, 0x3, 0x101}, {0x7, 0x10000, 0x2, 0x5, 0x5, 0x8}, {0x7ff, 0x6, 0x1ff, 0xffffd7e1, 0x6, 0x81}, {0x5, 0xc, 0x9, 0x8, 0x4, 0x3}, {0x2, 0x9, 0x7, 0x1, 0x6, 0x6}, {0x4, 0x3ff, 0x101, 0x0, 0x8000, 0x1}, {0x101, 0x1, 0x745f, 0x4, 0x56, 0x5}, {0x3, 0x1, 0xfff00000, 0x7, 0x72b0, 0x4}, {0x3b7f, 0x5, 0xf, 0xffffbf74, 0x1, 0x10001}, {0x6, 0x2, 0xe, 0x3ff, 0x64, 0x8000}, {0x7, 0xffff1211, 0x10, 0x7, 0x0, 0x4}, {0x80000000, 0x3845, 0x10000, 0x200, 0x80000000, 0x8}, {0xf20, 0x10001, 0x2, 0x4, 0x7, 0x4}, {0x7, 0x36b9, 0x0, 0x9b24, 0x4, 0xc53d}, {0xd3a, 0x815c, 0x5, 0x5, 0x44, 0x6}, {0x7, 0xfffffffb, 0x10, 0xefe, 0x4, 0x6}, {0x704, 0x1, 0x8, 0x6, 0x6}, {0x9, 0x1, 0x6, 0x7fffffff, 0xb79a, 0x5}, {0x6, 0x9, 0xbc4b, 0x7379, 0x6, 0x200}, {0x1ff, 0x5, 0xc, 0x200, 0x80000001, 0x480b}, {0x7, 0xa, 0x3, 0x2, 0x3, 0x2492}, {0x8000000, 0x8, 0x7, 0x8, 0x27, 0x9}, {0x3a, 0x40, 0x31c, 0x4d2, 0x5, 0x4}, {0x7, 0xff, 0x4, 0x3, 0x7}, {0xc487563, 0x7, 0xaa, 0x8, 0x0, 0x6b}, {0x8001, 0x6, 0x1, 0x2, 0x66c9, 0x9}, {0xdb1, 0x1, 0xe5, 0x2, 0xf1f8}, {0x4f43, 0x6, 0x4, 0x4, 0x2, 0x7}, {0x7fff, 0x250e, 0x4, 0x4, 0x6, 0xf}, {0x2, 0x7, 0x3, 0x7, 0x20, 0x1}, {0xffff5556, 0x6, 0xa9, 0x9, 0x3, 0x3}, {0xd0c, 0xe9, 0x2, 0x8, 0xedd9, 0xa}, {0x6, 0x9, 0x9, 0x4, 0x5, 0x3}, {0x32e, 0x0, 0x5, 0x2, 0x9, 0x4}, {0x1, 0xef60f23, 0x8, 0x5, 0x2, 0x3}, {0x1000, 0x8, 0x3, 0x3, 0x8000, 0xc}, {0x6, 0x8, 0x100, 0x6, 0x9a7d, 0x1000}, {0x7900, 0x5, 0x2, 0x8, 0x80, 0x292}, {0x400, 0x7, 0x3, 0x6, 0x10, 0x278}, {0x0, 0x200, 0x7, 0x80000000, 0xfffffffc, 0x77}, {0x3, 0xe48, 0x4, 0x9, 0x6, 0x100}, {0x10001, 0x4e2, 0x3250000, 0x6, 0x1bd, 0x1}, {0x9, 0x0, 0x100, 0xd25, 0x5c9c, 0x1}, {0x3, 0x3, 0x2, 0x4, 0x3, 0x5}, {0x400, 0x217, 0x5, 0xd16, 0x6, 0x7}, {0x5, 0x5, 0x4, 0x8, 0x2, 0xa6}, {0x5, 0xb3, 0x4, 0x8, 0x9, 0x1}, {0x1, 0x8000, 0x4, 0x6, 0x3, 0x3}, {0x2, 0x777, 0x6, 0x4, 0x5, 0xf}, {0xe47, 0x3, 0x1, 0x8000, 0xc86, 0xffff}, {0x3, 0x100, 0x4, 0x391, 0x80, 0x6}, {0x7, 0x8, 0x8, 0x9, 0x1}, {0xffffffff, 0x3, 0x2, 0x1, 0xfffffffa, 0x10}, {0x3, 0xaa1, 0xffffffff, 0x7fff, 0x5, 0x7ff}, {0x560f, 0x0, 0x8, 0x9, 0x3, 0x5}, {0x9, 0x7, 0x2ae0, 0x0, 0xa9, 0xce6}, {0x4, 0x2, 0x1, 0xa2, 0x0, 0x6831}, {0x3, 0x53b8, 0x1, 0x0, 0x4, 0x4}, {0xe, 0xb5, 0x8, 0xbca, 0x4, 0xff}, {0x0, 0x7d0, 0x5, 0x38, 0x3, 0x7}, {0x6, 0xffff, 0x4, 0xfe, 0x80, 0x89}, {0x2, 0x7, 0x7, 0x3714, 0xfffffc01, 0x7fffffff}, {0x800, 0x1, 0x10000000, 0x2, 0x5, 0x3}, {0x9, 0xdf, 0x4, 0xff, 0x5, 0x5}, {0x800, 0x3, 0x6171ed51, 0x8001, 0x9}, {0x10001, 0x8, 0x6, 0x80, 0x0, 0xfffffffb}, {0x5, 0x7, 0x6, 0x3, 0xaa, 0xffffffff}, {0x8c7, 0xfffffff6, 0x1, 0x3, 0x0, 0x3}, {0x6b, 0x200, 0x0, 0xe, 0x1, 0x8}, {0xb15c, 0x8000, 0x6, 0x5, 0x80, 0x6}, {0xb1ab, 0x200, 0x25, 0x6, 0x80, 0x8}, {0x1, 0x2, 0x6, 0x9, 0x6, 0x5}, {0x2b2, 0x9, 0x401, 0x1ff, 0x7, 0x1ff}, {0x3ff, 0x3, 0x3, 0x3, 0x6a1aea34, 0x4}, {0x3, 0x8000, 0x3, 0x78, 0x8000, 0x3}, {0xd, 0x6, 0x5, 0x4, 0x0, 0xb}, {0x5, 0x1, 0x81, 0x7f5, 0x5, 0x13}, {0x80000000, 0x23e, 0x9, 0xa, 0x2, 0x2}, {0x8, 0x1, 0x1, 0x4b, 0x8, 0x4}, {0x47b6, 0x8, 0x3, 0x5, 0x9}, {0x1, 0x2, 0x0, 0xfff, 0x3, 0x8}, {0x9eed, 0x0, 0x6, 0x8, 0x2, 0x1}, {0xff, 0x80000000, 0xbc, 0x200, 0x1ff}, {0x31b, 0x9, 0x7fff, 0x8, 0x17f2f3da, 0x800}, {0x4, 0x3, 0x3, 0xd44, 0x240, 0x6}, {0x85, 0x1ff, 0x401, 0xb9, 0x7fff, 0x2}, {0xd, 0x671, 0x2, 0x4, 0x7, 0x6}, {0x7fed, 0x225, 0x1ab9f9d5, 0x9, 0x4, 0x4}, {0x4, 0x200, 0x7, 0x890, 0x3, 0xefdb}, {0xffffff50, 0x0, 0x8, 0x8001, 0x6, 0xf2d451c}, {0x6d33, 0xbaa3, 0x1, 0x10000, 0x6, 0x8}, {0x8, 0x80000001, 0x9, 0x3, 0xc, 0x6}, {0x0, 0x2, 0x4, 0x8, 0x45a, 0x4}, {0x9, 0xfffffff9, 0x1ff, 0x0, 0x7, 0x101}, {0x53, 0xf, 0x4, 0xe, 0x9, 0xf}, {0x81, 0x80000001, 0x0, 0x1, 0x80, 0x7}, {0x8, 0x356c, 0x9, 0x3, 0x200, 0x7}, {0x101, 0xa, 0x89, 0x9, 0x3, 0xfffffcf4}, {0x7, 0xe, 0x4, 0x6, 0x9, 0xf3c9}, {0x9, 0x0, 0xac1a, 0x9, 0x1, 0x8}, {0x7fff, 0x8, 0x6, 0x8001, 0x7ff, 0xc}, {0x6, 0x4, 0xfffffff8, 0x7, 0x6, 0xc21}, {0x9, 0x0, 0x6, 0x6, 0x1000, 0x1}, {0xc9000, 0x80000000, 0x0, 0xfffffff7, 0x40}, {0x9, 0x8, 0x5, 0x2, 0x5, 0x8}, {0x7fff, 0x7fff, 0x5, 0x7ed1, 0xa6, 0x5}, {0x1, 0xfffffffd, 0x9, 0x400, 0x8, 0xffffffff}, {0x0, 0x80000000, 0x4, 0xa8d, 0x4, 0xc}, {0xc, 0x80000000, 0x6, 0x0, 0x6, 0x1ff}, {0x9, 0x101, 0x6, 0xfffffffc, 0x0, 0x4}, {0x7, 0x83c, 0x1ff, 0x4, 0x7, 0x8}, {0x7, 0x9, 0x6, 0x4, 0x2, 0x8}], [{0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {0x5}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {}, {0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x1}, {0x6}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x4, 0x3}, {0x5}, {0x0, 0x1}, {0x5}, {0x1}, {}, {0x2, 0x1}, {0x1}, {0x5, 0x1}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {}, {0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {}, {0x3}, {0x5, 0x1}, {0x6}, {0x0, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {}, {}, {0x2}, {0x3, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x7, 0x1}, {0x2}, {0x5}, {0x5, 0x1}, {}, {0x3, 0x1}, {0x3}, {0x5}, {0x3, 0xe2216ec6688df74f}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x4}, {0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x2}, {0x2, 0x1}, {0x3, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x48, 0x5, 0x0, 0x1, [{0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}]}, {0xfe, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_mpls={0x18c, 0x12, 0x0, 0x0, {{0x9}, {0x70, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x53a298ce, 0x1, 0x7, 0x5, 0x9}, 0x2}}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x1, 0x400, 0x8, 0x80, 0x2}}}, @TCA_MPLS_LABEL={0x8, 0x5, 0x6dd44}, @TCA_MPLS_PROTO={0x6, 0x4, 0x88be}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x80000, 0x46e, 0x6, 0x2, 0x5b70000}, 0x3}}, @TCA_MPLS_TTL={0x5, 0x7, 0x9}]}, {0xf4, 0x6, "72c3e6fb18b89259b4ea6f6c576eeee20477a15a476a7082d91a2d46204c5c82773b0d73f0af54b10a5ce6e70a970f9e2402c0a18d4ab92096b165a668614fc235c00cdccaaee6667fc85dca079234f77bff9120cd14c27fb6cfd4b74e74d13c3a4109daf93ebe0c57d416c6ccb3575f38dbea0cf008d498ecd63a105e6dce5e9044dfbe1d345c22a616d26535028c24b6518c1dc9937e750a9679fa8fc15e4bedbdb8148598502c32d1154ed509667b95baacedca455d00890414aa809ec97de9778fd3229387d78b12c348e9691adf3d87db76e4236a9a1310ef8b23f885f461aeb54baafafff8257542bc278cc6c7"}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_tunnel_key={0x108, 0xc, 0x0, 0x0, {{0xf}, {0x3c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast1}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @local}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x8, 0x8, 0x3, 0xee8e, 0x7f}, 0x2}}]}, {0xa0, 0x6, "94b022e803a6a1145d6dde477185a0ecf87b2fd7fab6beee77c78835aef707e5fa37a1a10c42bfed1b02506e4f73c620d8367524e3c89d4da124698a73cd648f149b93acf8e7c258762846731302517302bd67e02ee4332dd250ae85f68c117c8e7296ae44e1d67a14f715b83d16564dd4dad4a2376c0c0f8910d55e80f650e6a623a62b7ef3291e6379c8d6ca1b6e2a53a33ce88e7f6c77d4a5f44f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_CGROUP_EMATCHES={0x24, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x14, 0x1, 0x0, 0x0, {{0x901, 0x9, 0xde}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}]}}]}, @TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x3060}, 0x1, 0x0, 0x0, 0x20000890}, 0x8c4) r4 = socket(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x0) 416.50616ms ago: executing program 2 (id=2212): r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00f6e87b5040d44d1a735f9a75917df701000000000000"], &(0x7f0000001f80)=""/226, 0x18, 0x81, 0x2}, 0x20) (async) syz_emit_ethernet(0x13e, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/318], 0x0) 364.628012ms ago: executing program 2 (id=2213): sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)={0x20, 0x0, 0x9, 0x3, 0x0, 0x0, {0x7}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040884}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x20, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x4}]}, 0x20}}, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x800000000000, 0x0, 0x0, 0x751, 0x7, 0x200000000080], 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000200000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x108) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000340)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000080], 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000000000000000000010000000000001fb195d574202b200000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x108) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, 0x0, 0x0) 267.089659ms ago: executing program 2 (id=2214): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0xfc, 0x0}, 0x800, 0x0, 0x3, 0x1, 0x0, 0x4}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x12, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000005000000000000000200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000850000006d000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x380000, @empty, 0x40000000}, 0x1c) socket$inet6(0xa, 0x1, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0xfc, 0x0}, 0x800, 0x0, 0x3, 0x1, 0x0, 0x4}, 0x20) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x12, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000005000000000000000200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000850000006d000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) (async) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) (async) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x380000, @empty, 0x40000000}, 0x1c) (async) 145.200667ms ago: executing program 5 (id=2215): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="1400000016000b63d25a80648c2594f91124fc60", 0x14}], 0x1}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid\x00') pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000380)={0xa, 0x14e24, 0x0, @rand_addr, 0xfffffffc}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x5, 0x1}, 0x8}, 0x94) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r4, 0x6, 0xd, &(0x7f0000000000), 0x4) sendmsg$sock(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="50b115289c3b0999b3f8c3f16e6d7c9bc96939f2263351b8386209ad9849c383dc21e101718ef8210634c40eb40cbd4d113dc074201933ca1504c923d69d9cd768e8a1398cc4ca05f86795ca20cfc0f725cc414e6647cc7175", 0x59}], 0x1}, 0x48400) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r2, 0x58, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@deltclass={0x38, 0x29, 0x10, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xd}, {0x5, 0xa}, {0xc, 0xc}}, [@tclass_kind_options=@c_prio={0x9}, @TCA_RATE={0x6, 0x5, {0x0, 0x36}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000090}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0xf000) shutdown(r6, 0xf694cc8ec98bafe0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x14, 0x14, 0x1, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x260, 0xffffffff, 0x11a8, 0x11a8, 0x11a8, 0xffffffff, 0xffffffff, 0x1390, 0x1390, 0x1390, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00'}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_1\x00'}, 0x287, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@loopback, @broadcast, 0x0, 0x0, 'dvmrp1\x00', 'dummy0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000140)="a4ad4f", 0x3}], 0x1}}], 0x1, 0xc8040) socket$rds(0x15, 0x5, 0x0) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) splice(r3, 0x0, r2, 0x0, 0x7ffff000, 0x6) 73.420033ms ago: executing program 2 (id=2216): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000325bd7000fddb0400000000000000990002000000650000000800a400030000000c00810005000200060000001400810005000200040000000500020004000000060036000800000008001400", @ANYRES32=r3, @ANYBLOB="0500c200060000000800a40002000000"], 0x68}, 0x1, 0x0, 0x0, 0x4000881}, 0x44) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x1b, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1, 0x0, 0x2, 0xc, 0x0, 0x5e}, 0x20) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="40000000e69a604335aa55d56c9628fb7c155edd74639bd34facc9f964172e047a0af5920fe6ff835e8feb9742124204eecb936aac709863663fa1fcd36e95bd0da9bd0f79af117988dfc0ccd68be8b3ef94b4a1c6c8fa1ef6db0b4a006868644d470af169f2fc59c1cb937d7da9e08945bdfdeaec705a03ee7ae4", @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300a0d54e34fa66441abf1480", @ANYRES32=r4, @ANYBLOB="0c009985f2330fd547793c000800a0003a0900080500390104000000080026"], 0x40}}, 0x0) mkdirat$cgroup(r0, &(0x7f0000000a00)='syz0\x00', 0x1ff) socket$rds(0x15, 0x5, 0x0) 0s ago: executing program 2 (id=2217): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=ANY=[@ANYRES32=r1, @ANYRES16=r1, @ANYBLOB="01030000000000000b3e1f"], 0x30}, 0x1, 0x0, 0x0, 0x44005}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e0000000800000000001800038014000380100001"], 0x44}}, 0x20008000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=@newqdisc={0x468, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x43c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x9}}}, @TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, @TCA_TBF_RATE64={0xc}]}}]}, 0x468}}, 0x0) kernel console output (not intermixed with test programs): `syz.4.1060'. [ 206.579268][ T9494] lo speed is unknown, defaulting to 1000 [ 206.763823][ T9507] syzkaller1: entered promiscuous mode [ 206.770111][ T9507] syzkaller1: entered allmulticast mode [ 206.901243][ T9508] netlink: 'syz.4.1065': attribute type 20 has an invalid length. [ 207.073089][ T9511] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1066'. [ 207.158728][ T9478] vxcan1 speed is unknown, defaulting to 1000 [ 207.330699][ T9513] netlink: 'syz.3.1067': attribute type 4 has an invalid length. [ 207.395518][ T9519] netlink: 'syz.3.1067': attribute type 4 has an invalid length. [ 207.487175][ T9513] netlink: 6032 bytes leftover after parsing attributes in process `syz.3.1067'. [ 207.729864][ T9521] netlink: 'syz.4.1069': attribute type 1 has an invalid length. [ 207.755506][ T9527] netlink: 'syz.3.1070': attribute type 2 has an invalid length. [ 207.761545][ T9525] FAULT_INJECTION: forcing a failure. [ 207.761545][ T9525] name failslab, interval 1, probability 0, space 0, times 0 [ 207.764609][ T9527] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 207.776273][ T9525] CPU: 0 UID: 0 PID: 9525 Comm: syz.1.1071 Not tainted 6.16.0-rc6-syzkaller-01576-g4701ee5044fb #0 PREEMPT(full) [ 207.776305][ T9525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 207.776318][ T9525] Call Trace: [ 207.776328][ T9525] [ 207.776338][ T9525] dump_stack_lvl+0x189/0x250 [ 207.776368][ T9525] ? __pfx____ratelimit+0x10/0x10 [ 207.776398][ T9525] ? __pfx_dump_stack_lvl+0x10/0x10 [ 207.776422][ T9525] ? __pfx__printk+0x10/0x10 [ 207.776449][ T9525] ? is_bpf_text_address+0x26/0x2b0 [ 207.776489][ T9525] should_fail_ex+0x414/0x560 [ 207.776521][ T9525] should_failslab+0xa8/0x100 [ 207.776560][ T9525] kmem_cache_alloc_noprof+0x73/0x3c0 [ 207.776592][ T9525] ? skb_clone+0x212/0x3a0 [ 207.776618][ T9525] ? __pfx_skb_network_protocol+0x10/0x10 [ 207.776659][ T9525] skb_clone+0x212/0x3a0 [ 207.776685][ T9525] ? dev_queue_xmit_nit+0x25a/0xcc0 [ 207.776713][ T9525] dev_queue_xmit_nit+0x416/0xcc0 [ 207.776736][ T9525] ? dev_queue_xmit_nit+0x2d/0xcc0 [ 207.776776][ T9525] dev_hard_start_xmit+0x1be/0x830 [ 207.776825][ T9525] __dev_queue_xmit+0x1b8d/0x3b50 [ 207.776853][ T9525] ? do_syscall_64+0xfa/0x3b0 [ 207.776874][ T9525] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.776908][ T9525] ? __dev_queue_xmit+0x27b/0x3b50 [ 207.776959][ T9525] ? __pfx___dev_queue_xmit+0x10/0x10 [ 207.777005][ T9525] ? rcu_is_watching+0x15/0xb0 [ 207.777057][ T9525] ? pskb_expand_head+0xaa0/0x1150 [ 207.777087][ T9525] ? __bpf_redirect+0x56d/0xe40 [ 207.777128][ T9525] __bpf_tx_skb+0x18e/0x260 [ 207.777159][ T9525] bpf_clone_redirect+0x272/0x3d0 [ 207.777201][ T9525] ? bpf_test_run+0x197/0x7b0 [ 207.777237][ T9525] bpf_prog_64e505a7b7f97a05+0x5e/0x67 [ 207.777267][ T9525] ? ktime_get+0x3e/0x1f0 [ 207.777306][ T9525] ? seqcount_lockdep_reader_access+0x123/0x1c0 [ 207.777338][ T9525] ? lockdep_hardirqs_on+0x9c/0x150 [ 207.777373][ T9525] ? ktime_get+0x3e/0x1f0 [ 207.777398][ T9525] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 207.777435][ T9525] ? __local_bh_disable_ip+0xf1/0x190 [ 207.777462][ T9525] ? __pfx___cant_migrate+0x10/0x10 [ 207.777487][ T9525] ? __local_bh_enable_ip+0x12d/0x1c0 [ 207.777511][ T9525] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 207.777543][ T9525] ? bpf_test_timer_continue+0x136/0x350 [ 207.777571][ T9525] bpf_test_run+0x318/0x7b0 [ 207.777636][ T9525] ? __pfx_bpf_test_run+0x10/0x10 [ 207.777710][ T9525] ? bpf_prog_test_run_skb+0x6ac/0x1560 [ 207.777745][ T9525] ? convert___skb_to_skb+0x3d/0x590 [ 207.777782][ T9525] bpf_prog_test_run_skb+0xb30/0x1560 [ 207.777840][ T9525] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 207.777877][ T9525] bpf_prog_test_run+0x2c4/0x340 [ 207.777906][ T9525] __sys_bpf+0x4a4/0x860 [ 207.777946][ T9525] ? __pfx___sys_bpf+0x10/0x10 [ 207.778001][ T9525] ? ksys_write+0x22a/0x250 [ 207.778034][ T9525] ? __pfx_ksys_write+0x10/0x10 [ 207.778063][ T9525] ? rcu_is_watching+0x15/0xb0 [ 207.778099][ T9525] __x64_sys_bpf+0x7c/0x90 [ 207.778131][ T9525] do_syscall_64+0xfa/0x3b0 [ 207.778152][ T9525] ? lockdep_hardirqs_on+0x9c/0x150 [ 207.778186][ T9525] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.778209][ T9525] ? clear_bhb_loop+0x60/0xb0 [ 207.778237][ T9525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.778259][ T9525] RIP: 0033:0x7fe806f8e9a9 [ 207.778281][ T9525] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.778300][ T9525] RSP: 002b:00007fe807e2e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 207.778323][ T9525] RAX: ffffffffffffffda RBX: 00007fe8071b5fa0 RCX: 00007fe806f8e9a9 [ 207.778340][ T9525] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 000000000000000a [ 207.778355][ T9525] RBP: 00007fe807e2e090 R08: 0000000000000000 R09: 0000000000000000 [ 207.778368][ T9525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 207.778382][ T9525] R13: 0000000000000000 R14: 00007fe8071b5fa0 R15: 00007fffa837c478 [ 207.778418][ T9525] [ 208.208239][ T9494] vxcan1 speed is unknown, defaulting to 1000 [ 208.424813][ T9534] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 208.645998][ T9543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1076'. [ 209.028979][ T9549] lo speed is unknown, defaulting to 1000 [ 209.199186][ T9556] netlink: 'syz.4.1080': attribute type 20 has an invalid length. [ 209.881121][ T9571] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1085'. [ 209.933042][ T9571] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 210.082669][ T9551] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1078'. [ 210.162344][ T9573] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 210.176855][ T9579] netlink: 172 bytes leftover after parsing attributes in process `syz.3.1088'. [ 210.177743][ T9571] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 210.508989][ T9582] netlink: 'syz.4.1089': attribute type 2 has an invalid length. [ 210.678078][ T9582] þ: entered promiscuous mode [ 210.895558][ T9583] syzkaller0: entered promiscuous mode [ 210.923087][ T9583] syzkaller0: entered allmulticast mode [ 210.942761][ T9565] lo speed is unknown, defaulting to 1000 [ 211.149558][ T9580] netlink: 248 bytes leftover after parsing attributes in process `syz.3.1088'. [ 211.657581][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 211.661199][ T5168] Bluetooth: hci1: command 0x080f tx timeout [ 211.670011][ T5854] Bluetooth: hci2: command 0x0401 tx timeout [ 213.010132][ T9595] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1091'. [ 213.091382][ T9579] lo speed is unknown, defaulting to 1000 [ 213.101090][ T9565] vxcan1 speed is unknown, defaulting to 1000 [ 213.692813][ T9549] vxcan1 speed is unknown, defaulting to 1000 [ 214.421624][ T9612] xt_CT: No such helper "syz0" [ 214.698447][ T9579] vxcan1 speed is unknown, defaulting to 1000 [ 214.807993][ T9617] xt_CT: No such helper "syz0" [ 215.559025][ T9624] netlink: 'syz.4.1100': attribute type 10 has an invalid length. [ 215.575532][ T9624] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1100'. [ 215.629292][ T9629] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1100'. [ 215.652877][ T9629] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1100'. [ 215.765261][ T9627] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 215.829139][ T9624] team0: Port device geneve0 added [ 215.955943][ T9629] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 216.072520][ T3447] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.092272][ T6127] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.101189][ T6127] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.412173][ T3447] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.333383][ T9648] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1103'. [ 217.341705][ T9647] xt_HMARK: spi-set and port-set can't be combined [ 217.361754][ T9647] tipc: Enabled bearer , priority 0 [ 217.429263][ T9650] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 217.507270][ T9650] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 217.588801][ T9647] syzkaller0: entered promiscuous mode [ 217.598090][ T9647] syzkaller0: entered allmulticast mode [ 217.658366][ T9645] lo speed is unknown, defaulting to 1000 [ 217.802014][ T9647] tipc: Resetting bearer [ 217.884829][ T9646] tipc: Resetting bearer [ 217.976893][ T9646] tipc: Disabling bearer [ 218.376966][ T9668] netlink: 'syz.2.1108': attribute type 1 has an invalid length. [ 218.408928][ T9668] netlink: 236 bytes leftover after parsing attributes in process `syz.2.1108'. [ 218.753592][ T9676] netlink: 'syz.1.1111': attribute type 13 has an invalid length. [ 218.801625][ T9676] netlink: 'syz.1.1111': attribute type 17 has an invalid length. [ 218.886321][ T9680] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1112'. [ 219.045111][ T9684] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1112'. [ 219.067163][ T9676] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 219.103920][ T9684] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1112'. [ 219.225989][ T9645] vxcan1 speed is unknown, defaulting to 1000 [ 219.243824][ T9686] Illegal XDP return value 294024628 on prog (id 339) dev N/A, expect packet loss! [ 219.262912][ T9678] lo speed is unknown, defaulting to 1000 [ 219.310720][ T9688] netlink: del zone limit has 4 unknown bytes [ 219.945017][ T9699] syzkaller1: entered promiscuous mode [ 219.950555][ T9699] syzkaller1: entered allmulticast mode [ 220.117738][ T9678] vxcan1 speed is unknown, defaulting to 1000 [ 220.307882][ T9708] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1118'. [ 220.922077][ T9728] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1123'. [ 221.003764][ T9720] lo speed is unknown, defaulting to 1000 [ 221.462335][ T9737] netlink: 'syz.3.1127': attribute type 1 has an invalid length. [ 221.470390][ T9737] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1127'. [ 221.480055][ T9737] netlink: 'syz.3.1127': attribute type 1 has an invalid length. [ 221.490090][ T9737] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1127'. [ 221.499868][ T9737] netlink: 'syz.3.1127': attribute type 1 has an invalid length. [ 221.517031][ T9737] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1127'. [ 221.528029][ T9737] netlink: 'syz.3.1127': attribute type 1 has an invalid length. [ 221.536702][ T9737] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1127'. [ 221.546920][ T9737] netlink: 'syz.3.1127': attribute type 1 has an invalid length. [ 221.557440][ T9737] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1127'. [ 221.567337][ T9737] netlink: 'syz.3.1127': attribute type 1 has an invalid length. [ 221.575334][ T9737] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1127'. [ 221.585106][ T9737] netlink: 'syz.3.1127': attribute type 1 has an invalid length. [ 221.593059][ T9737] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1127'. [ 221.603779][ T9737] netlink: 'syz.3.1127': attribute type 1 has an invalid length. [ 221.612913][ T9737] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1127'. [ 221.622950][ T9737] netlink: 'syz.3.1127': attribute type 1 has an invalid length. [ 221.631082][ T9737] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1127'. [ 221.640781][ T9737] netlink: 'syz.3.1127': attribute type 1 has an invalid length. [ 222.073849][ T9720] vxcan1 speed is unknown, defaulting to 1000 [ 223.719208][ T9801] lo speed is unknown, defaulting to 1000 [ 223.940508][ T9813] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 225.402263][ T9845] dvmrp0: entered allmulticast mode [ 225.412134][ T9801] vxcan1 speed is unknown, defaulting to 1000 [ 225.456187][ T9855] lo speed is unknown, defaulting to 1000 [ 225.763202][ T9865] syzkaller0: entered promiscuous mode [ 225.768743][ T9865] syzkaller0: entered allmulticast mode [ 225.950420][ T9869] syzkaller0: entered promiscuous mode [ 225.991672][ T9869] syzkaller0: entered allmulticast mode [ 226.124645][ T9875] xt_CT: No such helper "syz0" [ 227.990882][ T9855] vxcan1 speed is unknown, defaulting to 1000 [ 228.170056][ T9896] __nla_validate_parse: 101 callbacks suppressed [ 228.170080][ T9896] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1169'. [ 228.221579][ T9896] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1169'. [ 228.230599][ T9896] netlink: 31 bytes leftover after parsing attributes in process `syz.2.1169'. [ 228.241988][ T9896] validate_nla: 85 callbacks suppressed [ 228.242008][ T9896] netlink: 'syz.2.1169': attribute type 3 has an invalid length. [ 228.276952][ T9898] batadv1: entered allmulticast mode [ 228.283747][ T9898] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 228.297261][ T9896] netlink: 'syz.2.1169': attribute type 2 has an invalid length. [ 228.308483][ T9896] netlink: 31 bytes leftover after parsing attributes in process `syz.2.1169'. [ 228.323630][ T9896] netlink: 'syz.2.1169': attribute type 2 has an invalid length. [ 228.391217][ T9902] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1169'. [ 228.718224][ T9912] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1176'. [ 228.951169][ T9916] xt_CT: No such helper "syz0" [ 229.308203][ T9926] netlink: 11 bytes leftover after parsing attributes in process `syz.2.1179'. [ 229.332718][ T9925] xt_hashlimit: size too large, truncated to 1048576 [ 229.369012][ T9926] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 229.933327][ T9936] netlink: 'syz.2.1184': attribute type 1 has an invalid length. [ 229.961582][ T9936] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1184'. [ 230.201651][ T9941] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 230.313036][ T9944] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1188'. [ 230.372463][ T9941] bond1: (slave erspan0): Releasing active interface [ 230.445815][ T9948] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1189'. [ 230.456130][ T9949] netlink: 'syz.2.1186': attribute type 10 has an invalid length. [ 230.488585][ T9948] netlink: 'syz.3.1189': attribute type 3 has an invalid length. [ 230.496905][ T9948] netlink: 'syz.3.1189': attribute type 2 has an invalid length. [ 230.523119][ T9941] bond0: (slave dummy0): Releasing backup interface [ 230.530927][ T9948] netlink: 'syz.3.1189': attribute type 2 has an invalid length. [ 230.558267][ T9941] bridge_slave_0: left allmulticast mode [ 230.564279][ T9941] bridge_slave_0: left promiscuous mode [ 230.570208][ T9941] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.605258][ T9941] bridge_slave_1: left allmulticast mode [ 230.619648][ T9941] bridge_slave_1: left promiscuous mode [ 230.625688][ T9941] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.641887][ T9941] bond0: (slave bond_slave_0): Releasing backup interface [ 230.663908][ T9941] bond0: (slave bond_slave_1): Releasing backup interface [ 230.674269][ T9941] team0: Port device team_slave_0 removed [ 230.682271][ T9941] team0: Port device team_slave_1 removed [ 230.688583][ T9941] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 230.700958][ T9941] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 230.710018][ T9941] bond1: (slave veth3): Releasing active interface [ 230.727612][ T9949] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 230.740262][ T9949] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 230.925441][ T9966] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 231.148606][ T9980] netlink: 'syz.0.1196': attribute type 39 has an invalid length. [ 231.158505][ T9964] xt_CT: No such helper "syz0" [ 232.035055][T10022] netlink: 'syz.3.1209': attribute type 3 has an invalid length. [ 232.236189][T10032] vxcan2: entered promiscuous mode [ 232.313114][T10033] lo speed is unknown, defaulting to 1000 [ 232.734365][T10049] xt_CT: No such helper "syz0" [ 233.244476][T10033] vxcan1 speed is unknown, defaulting to 1000 [ 233.702502][T10077] __nla_validate_parse: 14 callbacks suppressed [ 233.702524][T10077] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1229'. [ 233.890623][T10089] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1230'. [ 233.999875][T10093] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 234.037203][T10080] lo speed is unknown, defaulting to 1000 [ 234.132835][T10083] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 234.196334][T10101] xt_HMARK: spi-set and port-set can't be combined [ 234.272721][T10101] tipc: Enabled bearer , priority 0 [ 234.292625][T10101] syzkaller0: entered promiscuous mode [ 234.298169][T10101] syzkaller0: entered allmulticast mode [ 234.413109][T10102] xt_CT: No such helper "syz0" [ 234.519483][T10097] tipc: Resetting bearer [ 234.573309][T10097] tipc: Disabling bearer [ 235.282612][T10080] vxcan1 speed is unknown, defaulting to 1000 [ 235.537080][T10129] validate_nla: 2 callbacks suppressed [ 235.537099][T10129] netlink: 'syz.3.1246': attribute type 20 has an invalid length. [ 235.800427][T10136] xt_HMARK: spi-set and port-set can't be combined [ 235.861973][T10136] tipc: Enabled bearer , priority 0 [ 235.879504][T10136] syzkaller0: entered promiscuous mode [ 235.902735][T10136] syzkaller0: entered allmulticast mode [ 236.016993][T10136] tipc: Resetting bearer [ 236.028897][T10132] tipc: Resetting bearer [ 236.061834][T10134] netlink: 'syz.0.1250': attribute type 10 has an invalid length. [ 236.093356][T10132] tipc: Disabling bearer [ 236.561167][T10145] xt_CT: No such helper "syz0" [ 236.869278][T10149] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1253'. [ 237.055784][T10149] lo speed is unknown, defaulting to 1000 [ 237.102609][T10144] Cannot find set identified by id 0 to match [ 237.794831][T10173] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1259'. [ 237.978588][T10155] lo speed is unknown, defaulting to 1000 [ 238.119242][T10180] xt_HMARK: spi-set and port-set can't be combined [ 238.134821][T10180] tipc: Enabled bearer , priority 0 [ 238.152496][T10180] syzkaller0: entered promiscuous mode [ 238.158085][T10180] syzkaller0: entered allmulticast mode [ 238.280190][T10182] netlink: 1284 bytes leftover after parsing attributes in process `syz.3.1263'. [ 238.310202][T10180] tipc: Resetting bearer [ 238.351764][T10179] tipc: Resetting bearer [ 238.399020][T10179] tipc: Disabling bearer [ 238.468660][T10189] xt_HMARK: spi-set and port-set can't be combined [ 238.494793][T10189] tipc: Enabled bearer , priority 0 [ 238.520894][T10189] syzkaller0: entered promiscuous mode [ 238.547311][T10189] syzkaller0: entered allmulticast mode [ 238.619415][T10189] tipc: Resetting bearer [ 238.639887][T10188] tipc: Resetting bearer [ 238.655011][T10188] tipc: Disabling bearer [ 238.698476][T10149] vxcan1 speed is unknown, defaulting to 1000 [ 238.826045][T10192] xt_CT: No such helper "syz0" [ 239.186136][T10155] vxcan1 speed is unknown, defaulting to 1000 [ 239.236509][T10204] xt_hashlimit: size too large, truncated to 1048576 [ 239.308410][T10205] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1270'. [ 239.377444][T10207] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1270'. [ 239.583285][T10207] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1270'. [ 239.731101][T10207] hsr_slave_0: left promiscuous mode [ 239.756898][T10207] hsr_slave_1: left promiscuous mode [ 240.007555][T10222] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1274'. [ 240.026245][T10205] lo speed is unknown, defaulting to 1000 [ 240.529020][T10232] tipc: Disabling bearer [ 240.595497][T10232] veth0_virt_wifi: renamed from vlan0 [ 241.189696][T10247] xt_CT: No such helper "syz0" [ 241.618763][T10205] vxcan1 speed is unknown, defaulting to 1000 [ 241.876218][T10251] syzkaller0: entered promiscuous mode [ 241.900893][T10251] syzkaller0: entered allmulticast mode [ 242.551042][T10277] netlink: 652 bytes leftover after parsing attributes in process `syz.1.1291'. [ 243.089995][T10298] xt_CT: No such helper "syz0" [ 243.346588][T10310] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1298'. [ 244.180909][T10345] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1307'. [ 244.284189][T10349] netlink: 'syz.4.1308': attribute type 1 has an invalid length. [ 244.481045][T10349] 8021q: adding VLAN 0 to HW filter on device bond2 [ 244.635748][T10349] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1308'. [ 244.688888][T10354] bond2: (slave veth5): Enslaving as an active interface with a down link [ 244.714595][T10363] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1311'. [ 244.830879][T10363] lo speed is unknown, defaulting to 1000 [ 244.944806][T10361] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1310'. [ 245.387762][T10363] vxcan1 speed is unknown, defaulting to 1000 [ 245.532762][T10381] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 245.653826][T10386] tipc: Enabled bearer , priority 0 [ 245.662443][T10386] syzkaller0: entered promiscuous mode [ 245.667962][T10386] syzkaller0: entered allmulticast mode [ 245.741182][T10386] tipc: Resetting bearer [ 245.963026][T10401] netlink: 'syz.2.1323': attribute type 1 has an invalid length. [ 246.092889][T10409] tipc: Cannot configure node identity twice [ 246.168941][T10411] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1324'. [ 246.194908][T10416] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1326'. [ 246.228733][T10418] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 246.247054][T10407] lo speed is unknown, defaulting to 1000 [ 246.342766][T10418] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 246.448264][T10384] tipc: Resetting bearer [ 246.498136][T10384] tipc: Disabling bearer [ 246.652643][T10427] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1331'. [ 249.126903][T10407] vxcan1 speed is unknown, defaulting to 1000 [ 250.095348][T10496] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1350'. [ 250.106920][T10496] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1350'. [ 250.220739][T10499] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1351'. [ 250.320229][T10499] bond4: entered promiscuous mode [ 250.336202][T10499] 8021q: adding VLAN 0 to HW filter on device bond4 [ 250.350744][T10513] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1353'. [ 250.360459][T10513] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1353'. [ 250.373130][T10513] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1353'. [ 250.388298][T10513] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1353'. [ 250.407715][T10503] 8021q: adding VLAN 0 to HW filter on device bond4 [ 250.432244][T10503] bond4: (slave vcan1): The slave device specified does not support setting the MAC address [ 250.447868][T10503] bond4: (slave vcan1): Error -95 calling set_mac_address [ 250.463304][T10504] lo speed is unknown, defaulting to 1000 [ 250.884268][T10538] netlink: 212892 bytes leftover after parsing attributes in process `syz.0.1362'. [ 251.725971][T10504] vxcan1 speed is unknown, defaulting to 1000 [ 251.946434][T10560] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1371'. [ 252.177238][T10567] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1373'. [ 252.570141][T10578] netlink: 'syz.1.1376': attribute type 10 has an invalid length. [ 252.637346][T10578] bridge0: port 3(dummy0) entered disabled state [ 252.671893][T10578] dummy0: left allmulticast mode [ 252.677278][T10578] bridge0: port 3(dummy0) entered disabled state [ 252.722361][T10578] team0: Port device dummy0 added [ 253.133264][T10599] xt_HMARK: spi-set and port-set can't be combined [ 253.195038][T10591] tipc: Enabled bearer , priority 0 [ 253.224693][T10591] syzkaller0: entered promiscuous mode [ 253.239625][T10591] syzkaller0: entered allmulticast mode [ 253.353214][T10591] tipc: Resetting bearer [ 253.413241][T10590] tipc: Resetting bearer [ 253.546007][T10590] tipc: Disabling bearer [ 254.299263][T10641] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 254.692996][T10651] bond0: (slave wlan1): Releasing backup interface [ 254.843886][T10651] team0: Mode changed to "activebackup" [ 255.272367][T10679] xt_CT: No such helper "syz0" [ 255.337423][T10691] __nla_validate_parse: 5 callbacks suppressed [ 255.337445][T10691] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1418'. [ 255.619263][T10692] vlan2: entered allmulticast mode [ 255.661531][T10692] bond2: entered allmulticast mode [ 255.788796][T10705] sctp: [Deprecated]: syz.4.1419 (pid 10705) Use of struct sctp_assoc_value in delayed_ack socket option. [ 255.788796][T10705] Use struct sctp_sack_info instead [ 255.793772][T10700] tipc: Enabled bearer , priority 0 [ 255.867699][T10700] D: renamed from syzkaller0 [ 255.903311][T10700] tipc: Disabling bearer [ 255.911284][T10709] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1423'. [ 255.992204][T10705] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1419'. [ 256.032291][T10714] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1425'. [ 256.458197][T10725] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1427'. [ 258.619501][T10734] netlink: 'syz.4.1431': attribute type 1 has an invalid length. [ 259.302418][T10753] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1438'. [ 259.326347][T10753] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1438'. [ 259.417574][T10760] netlink: 'syz.2.1440': attribute type 1 has an invalid length. [ 259.426279][T10760] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1440'. [ 259.524340][T10765] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1442'. [ 259.555946][T10767] tun1: tun_chr_ioctl cmd 1074025677 [ 259.577339][T10767] tun1: linktype set to 804 [ 259.667165][T10774] netlink: 'syz.2.1447': attribute type 21 has an invalid length. [ 259.694359][T10774] netlink: 'syz.2.1447': attribute type 22 has an invalid length. [ 259.746590][T10774] netlink: 'syz.2.1447': attribute type 23 has an invalid length. [ 259.806026][T10774] netlink: 'syz.2.1447': attribute type 25 has an invalid length. [ 259.821702][T10774] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1447'. [ 260.318934][T10811] openvswitch: netlink: IPv4 tun info is not correct [ 260.348518][T10811] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1457'. [ 260.465549][T10815] vxcan1: entered promiscuous mode [ 260.470729][T10815] vxcan1: entered allmulticast mode [ 260.480812][ T5935] vxcan1 speed is unknown, defaulting to 1000 [ 260.815227][T10831] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 260.827516][T10833] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 261.048495][T10841] netlink: 'syz.1.1466': attribute type 21 has an invalid length. [ 261.081803][T10841] netlink: 'syz.1.1466': attribute type 1 has an invalid length. [ 261.093927][T10841] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1466'. [ 261.104135][T10843] netlink: 'syz.2.1467': attribute type 12 has an invalid length. [ 261.114384][T10843] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1467'. [ 261.720790][T10879] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1476'. [ 261.755257][T10879] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1476'. [ 261.767613][T10882] FAULT_INJECTION: forcing a failure. [ 261.767613][T10882] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 261.781866][T10882] CPU: 0 UID: 0 PID: 10882 Comm: syz.4.1477 Not tainted 6.16.0-rc6-syzkaller-01576-g4701ee5044fb #0 PREEMPT(full) [ 261.781896][T10882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 261.781932][T10882] Call Trace: [ 261.781941][T10882] [ 261.781950][T10882] dump_stack_lvl+0x189/0x250 [ 261.781994][T10882] ? __pfx____ratelimit+0x10/0x10 [ 261.782025][T10882] ? __pfx_dump_stack_lvl+0x10/0x10 [ 261.782050][T10882] ? __pfx__printk+0x10/0x10 [ 261.782077][T10882] ? __might_fault+0xb0/0x130 [ 261.782117][T10882] should_fail_ex+0x414/0x560 [ 261.782143][T10882] _copy_from_user+0x2d/0xb0 [ 261.782170][T10882] ___sys_sendmsg+0x158/0x2a0 [ 261.782197][T10882] ? __pfx____sys_sendmsg+0x10/0x10 [ 261.782257][T10882] ? __fget_files+0x2a/0x420 [ 261.782274][T10882] ? __fget_files+0x3a0/0x420 [ 261.782303][T10882] __x64_sys_sendmsg+0x19b/0x260 [ 261.782328][T10882] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 261.782361][T10882] ? __pfx_ksys_write+0x10/0x10 [ 261.782386][T10882] ? rcu_is_watching+0x15/0xb0 [ 261.782414][T10882] ? do_syscall_64+0xbe/0x3b0 [ 261.782438][T10882] do_syscall_64+0xfa/0x3b0 [ 261.782456][T10882] ? lockdep_hardirqs_on+0x9c/0x150 [ 261.782484][T10882] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.782503][T10882] ? clear_bhb_loop+0x60/0xb0 [ 261.782528][T10882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.782547][T10882] RIP: 0033:0x7f479698e9a9 [ 261.782564][T10882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 261.782582][T10882] RSP: 002b:00007f47977c6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 261.782604][T10882] RAX: ffffffffffffffda RBX: 00007f4796bb5fa0 RCX: 00007f479698e9a9 [ 261.782618][T10882] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 261.782630][T10882] RBP: 00007f47977c6090 R08: 0000000000000000 R09: 0000000000000000 [ 261.782642][T10882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 261.782653][T10882] R13: 0000000000000000 R14: 00007f4796bb5fa0 R15: 00007fff69cbef18 [ 261.782684][T10882] [ 262.083025][T10887] netlink: 'syz.4.1481': attribute type 12 has an invalid length. [ 262.091087][T10887] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1481'. [ 262.239688][T10891] lo speed is unknown, defaulting to 1000 [ 262.743741][T10891] vxcan1 speed is unknown, defaulting to 1000 [ 262.768313][T10914] FAULT_INJECTION: forcing a failure. [ 262.768313][T10914] name failslab, interval 1, probability 0, space 0, times 0 [ 262.789395][T10914] CPU: 0 UID: 0 PID: 10914 Comm: syz.4.1491 Not tainted 6.16.0-rc6-syzkaller-01576-g4701ee5044fb #0 PREEMPT(full) [ 262.789428][T10914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 262.789440][T10914] Call Trace: [ 262.789449][T10914] [ 262.789458][T10914] dump_stack_lvl+0x189/0x250 [ 262.789489][T10914] ? __pfx____ratelimit+0x10/0x10 [ 262.789522][T10914] ? __pfx_dump_stack_lvl+0x10/0x10 [ 262.789546][T10914] ? __pfx__printk+0x10/0x10 [ 262.789581][T10914] ? __pfx___might_resched+0x10/0x10 [ 262.789611][T10914] should_fail_ex+0x414/0x560 [ 262.789637][T10914] should_failslab+0xa8/0x100 [ 262.789670][T10914] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 262.789700][T10914] ? __alloc_skb+0x112/0x2d0 [ 262.789725][T10914] __alloc_skb+0x112/0x2d0 [ 262.789750][T10914] netlink_sendmsg+0x5c6/0xb30 [ 262.789781][T10914] ? __pfx_netlink_sendmsg+0x10/0x10 [ 262.789805][T10914] ? aa_sock_msg_perm+0x94/0x160 [ 262.789829][T10914] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 262.789851][T10914] ? __pfx_netlink_sendmsg+0x10/0x10 [ 262.789872][T10914] __sock_sendmsg+0x219/0x270 [ 262.789905][T10914] ____sys_sendmsg+0x505/0x830 [ 262.789935][T10914] ? __pfx_____sys_sendmsg+0x10/0x10 [ 262.789969][T10914] ? import_iovec+0x74/0xa0 [ 262.790013][T10914] ___sys_sendmsg+0x21f/0x2a0 [ 262.790038][T10914] ? __pfx____sys_sendmsg+0x10/0x10 [ 262.790100][T10914] ? __fget_files+0x2a/0x420 [ 262.790116][T10914] ? __fget_files+0x3a0/0x420 [ 262.790154][T10914] __x64_sys_sendmsg+0x19b/0x260 [ 262.790180][T10914] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 262.790214][T10914] ? __pfx_ksys_write+0x10/0x10 [ 262.790237][T10914] ? rcu_is_watching+0x15/0xb0 [ 262.790266][T10914] ? do_syscall_64+0xbe/0x3b0 [ 262.790289][T10914] do_syscall_64+0xfa/0x3b0 [ 262.790306][T10914] ? lockdep_hardirqs_on+0x9c/0x150 [ 262.790336][T10914] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.790360][T10914] ? clear_bhb_loop+0x60/0xb0 [ 262.790384][T10914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.790403][T10914] RIP: 0033:0x7f479698e9a9 [ 262.790421][T10914] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 262.790438][T10914] RSP: 002b:00007f47977c6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 262.790460][T10914] RAX: ffffffffffffffda RBX: 00007f4796bb5fa0 RCX: 00007f479698e9a9 [ 262.790475][T10914] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 262.790487][T10914] RBP: 00007f47977c6090 R08: 0000000000000000 R09: 0000000000000000 [ 262.790499][T10914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 262.790511][T10914] R13: 0000000000000000 R14: 00007f4796bb5fa0 R15: 00007fff69cbef18 [ 262.790542][T10914] [ 263.375220][T10929] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1495'. [ 263.493651][T10933] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1496'. [ 263.752268][T10947] syzkaller1: entered promiscuous mode [ 263.757819][T10947] syzkaller1: entered allmulticast mode [ 263.835786][T10950] netlink: 'syz.3.1502': attribute type 11 has an invalid length. [ 263.868502][T10950] netlink: 'syz.3.1502': attribute type 11 has an invalid length. [ 263.887605][T10950] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1502'. [ 264.163661][T10959] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1504'. [ 264.216786][T10959] lo speed is unknown, defaulting to 1000 [ 264.218018][T10962] x_tables: unsorted underflow at hook 2 [ 264.251026][T10962] tipc: Enabling of bearer rejected, failed to enable media [ 264.288271][T10965] validate_nla: 1 callbacks suppressed [ 264.288292][T10965] netlink: 'syz.4.1508': attribute type 12 has an invalid length. [ 264.773227][T10977] batadv_slave_0: entered promiscuous mode [ 264.781727][T10977] batadv_slave_0: entered allmulticast mode [ 265.088362][T10986] netlink: 'syz.3.1513': attribute type 20 has an invalid length. [ 265.389792][T10988] lo speed is unknown, defaulting to 1000 [ 265.429677][T10993] syzkaller1: entered promiscuous mode [ 265.453516][T10993] syzkaller1: entered allmulticast mode [ 265.888488][T11006] netlink: 'syz.4.1519': attribute type 12 has an invalid length. [ 265.901531][T11006] __nla_validate_parse: 1 callbacks suppressed [ 265.901551][T11006] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1519'. [ 266.134960][T10959] vxcan1 speed is unknown, defaulting to 1000 [ 266.135466][T11013] netlink: 'syz.3.1521': attribute type 1 has an invalid length. [ 266.193745][T11015] netlink: 'syz.1.1520': attribute type 10 has an invalid length. [ 266.352780][T11013] bond2: entered promiscuous mode [ 266.382556][T11013] 8021q: adding VLAN 0 to HW filter on device bond2 [ 266.488653][T11020] 8021q: adding VLAN 0 to HW filter on device bond2 [ 266.504424][T11020] bond2: (slave vcan0): The slave device specified does not support setting the MAC address [ 266.566178][T11020] bond2: (slave vcan0): Setting fail_over_mac to active for active-backup mode [ 266.631301][T11020] bond2: (slave vcan0): making interface the new active one [ 266.668966][T11020] vcan0: entered promiscuous mode [ 266.713453][T11020] bond2: (slave vcan0): Enslaving as an active interface with an up link [ 267.164414][T11040] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 267.811183][T11062] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 267.896734][T11067] netlink: 'syz.1.1530': attribute type 2 has an invalid length. [ 268.089686][T11073] netlink: 'syz.4.1532': attribute type 12 has an invalid length. [ 268.118420][T11073] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1532'. [ 268.300396][T11076] FAULT_INJECTION: forcing a failure. [ 268.300396][T11076] name failslab, interval 1, probability 0, space 0, times 0 [ 268.337825][T11076] CPU: 0 UID: 0 PID: 11076 Comm: syz.1.1533 Not tainted 6.16.0-rc6-syzkaller-01576-g4701ee5044fb #0 PREEMPT(full) [ 268.337856][T11076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 268.337868][T11076] Call Trace: [ 268.337876][T11076] [ 268.337885][T11076] dump_stack_lvl+0x189/0x250 [ 268.337914][T11076] ? __pfx____ratelimit+0x10/0x10 [ 268.337945][T11076] ? __pfx_dump_stack_lvl+0x10/0x10 [ 268.337970][T11076] ? __pfx__printk+0x10/0x10 [ 268.338001][T11076] ? __pfx___might_resched+0x10/0x10 [ 268.338026][T11076] ? fs_reclaim_acquire+0x7d/0x100 [ 268.338051][T11076] should_fail_ex+0x414/0x560 [ 268.338077][T11076] should_failslab+0xa8/0x100 [ 268.338111][T11076] __kmalloc_noprof+0xcb/0x4f0 [ 268.338138][T11076] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 268.338173][T11076] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 268.338208][T11076] genl_family_rcv_msg_doit+0xb8/0x300 [ 268.338243][T11076] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 268.338273][T11076] ? rcu_is_watching+0x15/0xb0 [ 268.338301][T11076] ? apparmor_capable+0x137/0x1b0 [ 268.338330][T11076] ? bpf_lsm_capable+0x9/0x20 [ 268.338357][T11076] ? security_capable+0x7e/0x2e0 [ 268.338385][T11076] genl_rcv_msg+0x60e/0x790 [ 268.338426][T11076] ? __pfx_genl_rcv_msg+0x10/0x10 [ 268.338462][T11076] ? __pfx_netlbl_cipsov4_add+0x10/0x10 [ 268.338504][T11076] netlink_rcv_skb+0x208/0x470 [ 268.338532][T11076] ? __lock_acquire+0xab9/0xd20 [ 268.338553][T11076] ? __pfx_genl_rcv_msg+0x10/0x10 [ 268.338579][T11076] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 268.338631][T11076] ? down_read+0x1ad/0x2e0 [ 268.338655][T11076] genl_rcv+0x28/0x40 [ 268.338677][T11076] netlink_unicast+0x82c/0x9e0 [ 268.338716][T11076] ? __pfx_netlink_unicast+0x10/0x10 [ 268.338746][T11076] ? netlink_sendmsg+0x642/0xb30 [ 268.338764][T11076] ? skb_put+0x11b/0x210 [ 268.338789][T11076] netlink_sendmsg+0x805/0xb30 [ 268.338819][T11076] ? __pfx_netlink_sendmsg+0x10/0x10 [ 268.338843][T11076] ? aa_sock_msg_perm+0x94/0x160 [ 268.338866][T11076] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 268.338886][T11076] ? __pfx_netlink_sendmsg+0x10/0x10 [ 268.338907][T11076] __sock_sendmsg+0x219/0x270 [ 268.338939][T11076] ____sys_sendmsg+0x505/0x830 [ 268.338969][T11076] ? __pfx_____sys_sendmsg+0x10/0x10 [ 268.339003][T11076] ? import_iovec+0x74/0xa0 [ 268.339035][T11076] ___sys_sendmsg+0x21f/0x2a0 [ 268.339061][T11076] ? __pfx____sys_sendmsg+0x10/0x10 [ 268.339125][T11076] ? __fget_files+0x2a/0x420 [ 268.339142][T11076] ? __fget_files+0x3a0/0x420 [ 268.339172][T11076] __x64_sys_sendmsg+0x19b/0x260 [ 268.339197][T11076] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 268.339265][T11076] ? __pfx_ksys_write+0x10/0x10 [ 268.339289][T11076] ? rcu_is_watching+0x15/0xb0 [ 268.339318][T11076] ? do_syscall_64+0xbe/0x3b0 [ 268.339343][T11076] do_syscall_64+0xfa/0x3b0 [ 268.339359][T11076] ? lockdep_hardirqs_on+0x9c/0x150 [ 268.339389][T11076] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.339454][T11076] ? clear_bhb_loop+0x60/0xb0 [ 268.339479][T11076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.339498][T11076] RIP: 0033:0x7fe806f8e9a9 [ 268.339517][T11076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 268.339535][T11076] RSP: 002b:00007fe807e2e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 268.339557][T11076] RAX: ffffffffffffffda RBX: 00007fe8071b5fa0 RCX: 00007fe806f8e9a9 [ 268.339571][T11076] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 268.339584][T11076] RBP: 00007fe807e2e090 R08: 0000000000000000 R09: 0000000000000000 [ 268.339596][T11076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 268.339608][T11076] R13: 0000000000000000 R14: 00007fe8071b5fa0 R15: 00007fffa837c478 [ 268.339641][T11076] [ 268.768478][T10988] vxcan1 speed is unknown, defaulting to 1000 [ 269.228290][T11090] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 269.459689][T11096] xt_HMARK: spi-set and port-set can't be combined [ 269.493731][T11096] tipc: Enabled bearer , priority 0 [ 269.527797][T11096] syzkaller0: entered promiscuous mode [ 269.535517][T11096] syzkaller0: entered allmulticast mode [ 269.601352][T11096] tipc: Resetting bearer [ 269.636147][T11094] tipc: Resetting bearer [ 269.660578][T11094] tipc: Disabling bearer [ 269.827557][T11106] netlink: 'syz.3.1545': attribute type 2 has an invalid length. [ 269.851271][T11102] xt_CT: No such helper "snmp" [ 269.857023][T11106] netlink: 1184 bytes leftover after parsing attributes in process `syz.3.1545'. [ 270.506872][T11122] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 270.708897][ T5858] Bluetooth: hci4: link tx timeout [ 270.717543][ T5858] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 270.727705][ T5858] Bluetooth: hci4: link tx timeout [ 270.733088][ T5858] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 270.740958][T11132] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1554'. [ 270.741859][ T5858] Bluetooth: hci4: link tx timeout [ 270.755389][ T5858] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 270.763168][ T5858] Bluetooth: hci4: link tx timeout [ 270.768317][ T5858] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 270.781532][ T5858] Bluetooth: hci4: link tx timeout [ 270.786707][ T5858] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 270.799059][T11125] lo speed is unknown, defaulting to 1000 [ 270.946662][T11133] syzkaller1: entered promiscuous mode [ 270.953113][T11133] syzkaller1: entered allmulticast mode [ 271.802592][T11155] FAULT_INJECTION: forcing a failure. [ 271.802592][T11155] name failslab, interval 1, probability 0, space 0, times 0 [ 271.880662][T11155] CPU: 0 UID: 0 PID: 11155 Comm: syz.0.1562 Not tainted 6.16.0-rc6-syzkaller-01576-g4701ee5044fb #0 PREEMPT(full) [ 271.880696][T11155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 271.880709][T11155] Call Trace: [ 271.880717][T11155] [ 271.880726][T11155] dump_stack_lvl+0x189/0x250 [ 271.880758][T11155] ? __pfx____ratelimit+0x10/0x10 [ 271.880789][T11155] ? __pfx_dump_stack_lvl+0x10/0x10 [ 271.880813][T11155] ? __pfx__printk+0x10/0x10 [ 271.880848][T11155] ? __pfx___might_resched+0x10/0x10 [ 271.880871][T11155] ? fs_reclaim_acquire+0x7d/0x100 [ 271.880897][T11155] should_fail_ex+0x414/0x560 [ 271.880924][T11155] should_failslab+0xa8/0x100 [ 271.880956][T11155] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 271.880985][T11155] ? __alloc_skb+0x112/0x2d0 [ 271.881010][T11155] __alloc_skb+0x112/0x2d0 [ 271.881035][T11155] netlink_ack+0x146/0xa50 [ 271.881065][T11155] ? __pfx_genl_rcv_msg+0x10/0x10 [ 271.881111][T11155] netlink_rcv_skb+0x28c/0x470 [ 271.881141][T11155] ? __lock_acquire+0xab9/0xd20 [ 271.881162][T11155] ? __pfx_genl_rcv_msg+0x10/0x10 [ 271.881190][T11155] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 271.881243][T11155] ? down_read+0x1ad/0x2e0 [ 271.881268][T11155] genl_rcv+0x28/0x40 [ 271.881290][T11155] netlink_unicast+0x82c/0x9e0 [ 271.881347][T11155] ? __pfx_netlink_unicast+0x10/0x10 [ 271.881381][T11155] ? netlink_sendmsg+0x642/0xb30 [ 271.881396][T11155] ? skb_put+0x11b/0x210 [ 271.881418][T11155] netlink_sendmsg+0x805/0xb30 [ 271.881447][T11155] ? __pfx_netlink_sendmsg+0x10/0x10 [ 271.881469][T11155] ? aa_sock_msg_perm+0x94/0x160 [ 271.881493][T11155] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 271.881513][T11155] ? __pfx_netlink_sendmsg+0x10/0x10 [ 271.881533][T11155] __sock_sendmsg+0x219/0x270 [ 271.881564][T11155] ____sys_sendmsg+0x505/0x830 [ 271.881594][T11155] ? __pfx_____sys_sendmsg+0x10/0x10 [ 271.881627][T11155] ? import_iovec+0x74/0xa0 [ 271.881659][T11155] ___sys_sendmsg+0x21f/0x2a0 [ 271.881684][T11155] ? __pfx____sys_sendmsg+0x10/0x10 [ 271.881744][T11155] ? __fget_files+0x2a/0x420 [ 271.881760][T11155] ? __fget_files+0x3a0/0x420 [ 271.881789][T11155] __x64_sys_sendmsg+0x19b/0x260 [ 271.881815][T11155] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 271.881850][T11155] ? rcu_is_watching+0x15/0xb0 [ 271.881879][T11155] ? do_syscall_64+0xbe/0x3b0 [ 271.881903][T11155] do_syscall_64+0xfa/0x3b0 [ 271.881921][T11155] ? lockdep_hardirqs_on+0x9c/0x150 [ 271.881950][T11155] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.881970][T11155] ? clear_bhb_loop+0x60/0xb0 [ 271.881994][T11155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.882013][T11155] RIP: 0033:0x7ff74198e9a9 [ 271.882031][T11155] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 271.882047][T11155] RSP: 002b:00007ff7427b4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 271.882068][T11155] RAX: ffffffffffffffda RBX: 00007ff741bb5fa0 RCX: 00007ff74198e9a9 [ 271.882082][T11155] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 271.882095][T11155] RBP: 00007ff7427b4090 R08: 0000000000000000 R09: 0000000000000000 [ 271.882107][T11155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 271.882117][T11155] R13: 0000000000000000 R14: 00007ff741bb5fa0 R15: 00007ffc96eda998 [ 271.882150][T11155] [ 272.396061][T11162] geneve3: entered promiscuous mode [ 272.429986][ T6127] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.450114][ T6127] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.463386][ T6127] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.465915][T11174] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1567'. [ 272.511500][T11174] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1567'. [ 272.551520][ T6127] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.602984][T11174] netlink: 31 bytes leftover after parsing attributes in process `syz.2.1567'. [ 272.642037][T11174] netlink: 'syz.2.1567': attribute type 3 has an invalid length. [ 272.671241][T11183] netlink: 'syz.0.1566': attribute type 20 has an invalid length. [ 272.680334][T11174] netlink: 'syz.2.1567': attribute type 2 has an invalid length. [ 272.702612][T11182] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1568'. [ 272.711766][T11174] netlink: 31 bytes leftover after parsing attributes in process `syz.2.1567'. [ 272.720770][T11174] netlink: 'syz.2.1567': attribute type 2 has an invalid length. [ 272.745658][T11182] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1568'. [ 272.746238][T11185] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 272.779935][ T5858] Bluetooth: hci4: command 0x0405 tx timeout [ 272.846700][T11174] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1567'. [ 272.903719][T11125] vxcan1 speed is unknown, defaulting to 1000 [ 272.923587][T11189] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1570'. [ 273.475839][T11207] FAULT_INJECTION: forcing a failure. [ 273.475839][T11207] name failslab, interval 1, probability 0, space 0, times 0 [ 273.506189][T11212] netlink: 'syz.3.1574': attribute type 12 has an invalid length. [ 273.517533][T11207] CPU: 1 UID: 0 PID: 11207 Comm: syz.2.1575 Not tainted 6.16.0-rc6-syzkaller-01576-g4701ee5044fb #0 PREEMPT(full) [ 273.517564][T11207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 273.517575][T11207] Call Trace: [ 273.517583][T11207] [ 273.517591][T11207] dump_stack_lvl+0x189/0x250 [ 273.517622][T11207] ? __pfx____ratelimit+0x10/0x10 [ 273.517654][T11207] ? __pfx_dump_stack_lvl+0x10/0x10 [ 273.517679][T11207] ? __pfx__printk+0x10/0x10 [ 273.517713][T11207] ? __pfx___might_resched+0x10/0x10 [ 273.517737][T11207] ? fs_reclaim_acquire+0x7d/0x100 [ 273.517762][T11207] should_fail_ex+0x414/0x560 [ 273.517789][T11207] should_failslab+0xa8/0x100 [ 273.517822][T11207] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 273.517852][T11207] ? __alloc_skb+0x112/0x2d0 [ 273.517878][T11207] __alloc_skb+0x112/0x2d0 [ 273.517903][T11207] netlink_ack+0x146/0xa50 [ 273.517932][T11207] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 273.517992][T11207] netlink_rcv_skb+0x28c/0x470 [ 273.518022][T11207] ? __lock_acquire+0xab9/0xd20 [ 273.518043][T11207] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 273.518078][T11207] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 273.518121][T11207] ? netlink_deliver_tap+0x2e/0x1b0 [ 273.518148][T11207] netlink_unicast+0x82c/0x9e0 [ 273.518186][T11207] ? __pfx_netlink_unicast+0x10/0x10 [ 273.518218][T11207] ? netlink_sendmsg+0x642/0xb30 [ 273.518235][T11207] ? skb_put+0x11b/0x210 [ 273.518260][T11207] netlink_sendmsg+0x805/0xb30 [ 273.518291][T11207] ? __pfx_netlink_sendmsg+0x10/0x10 [ 273.518314][T11207] ? aa_sock_msg_perm+0x94/0x160 [ 273.518338][T11207] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 273.518360][T11207] ? __pfx_netlink_sendmsg+0x10/0x10 [ 273.518381][T11207] __sock_sendmsg+0x219/0x270 [ 273.518414][T11207] ____sys_sendmsg+0x505/0x830 [ 273.518444][T11207] ? __pfx_____sys_sendmsg+0x10/0x10 [ 273.518479][T11207] ? import_iovec+0x74/0xa0 [ 273.518511][T11207] ___sys_sendmsg+0x21f/0x2a0 [ 273.518537][T11207] ? __pfx____sys_sendmsg+0x10/0x10 [ 273.518601][T11207] ? __fget_files+0x2a/0x420 [ 273.518618][T11207] ? __fget_files+0x3a0/0x420 [ 273.518648][T11207] __x64_sys_sendmsg+0x19b/0x260 [ 273.518675][T11207] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 273.518710][T11207] ? __pfx_ksys_write+0x10/0x10 [ 273.518734][T11207] ? rcu_is_watching+0x15/0xb0 [ 273.518761][T11207] ? do_syscall_64+0xbe/0x3b0 [ 273.518809][T11207] do_syscall_64+0xfa/0x3b0 [ 273.518825][T11207] ? lockdep_hardirqs_on+0x9c/0x150 [ 273.518853][T11207] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.518873][T11207] ? clear_bhb_loop+0x60/0xb0 [ 273.518898][T11207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.518918][T11207] RIP: 0033:0x7f2aea98e9a9 [ 273.518937][T11207] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 273.518955][T11207] RSP: 002b:00007f2aeb7fa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 273.518976][T11207] RAX: ffffffffffffffda RBX: 00007f2aeabb5fa0 RCX: 00007f2aea98e9a9 [ 273.518998][T11207] RDX: 0000000004000080 RSI: 0000200000000300 RDI: 0000000000000004 [ 273.519011][T11207] RBP: 00007f2aeb7fa090 R08: 0000000000000000 R09: 0000000000000000 [ 273.519024][T11207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 273.519037][T11207] R13: 0000000000000000 R14: 00007f2aeabb5fa0 R15: 00007ffdd4c7f588 [ 273.519068][T11207] [ 273.905129][T11212] netlink: 9472 bytes leftover after parsing attributes in process `syz.3.1574'. [ 274.058885][T11221] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1578'. [ 274.921149][T11251] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 3, id = 0 [ 274.952484][T11250] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 275.019224][T11249] netlink: 'syz.4.1586': attribute type 22 has an invalid length. [ 275.159910][T11254] netlink: 'syz.3.1588': attribute type 4 has an invalid length. [ 275.265243][T11256] netlink: 'syz.3.1588': attribute type 4 has an invalid length. [ 275.470140][T11268] syzkaller1: entered promiscuous mode [ 275.531987][T11268] syzkaller1: entered allmulticast mode [ 275.722437][T11283] netlink: 'syz.2.1596': attribute type 3 has an invalid length. [ 275.730488][T11283] netlink: 'syz.2.1596': attribute type 6 has an invalid length. [ 276.659725][T11293] 0ªî{X¹¦: renamed from gretap0 [ 276.754308][T11293] 0ªî{X¹¦: left promiscuous mode [ 276.759413][T11293] 0ªî{X¹¦: entered allmulticast mode [ 276.783461][T11293] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 276.826459][T11287] lo speed is unknown, defaulting to 1000 [ 278.394712][T11306] netlink: 'syz.2.1603': attribute type 1 has an invalid length. [ 278.505817][T11313] __nla_validate_parse: 7 callbacks suppressed [ 278.505838][T11313] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1603'. [ 278.522426][T11313] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1603'. [ 278.692607][T11320] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1609'. [ 278.734539][T11320] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1609'. [ 278.867227][T11287] vxcan1 speed is unknown, defaulting to 1000 [ 279.248010][T11347] gretap0: entered promiscuous mode [ 279.269002][T11347] team0: Port device gretap0 added [ 279.464258][T11351] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1617'. [ 279.591060][T11355] netlink: 'syz.0.1619': attribute type 12 has an invalid length. [ 279.618602][T11355] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1619'. [ 280.412640][T11387] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1630'. [ 280.764006][T11394] xt_hashlimit: max too large, truncated to 1048576 [ 280.771340][T11394] No such timeout policy "syz1" [ 280.874289][T11407] netlink: 'syz.0.1634': attribute type 12 has an invalid length. [ 280.887901][T11407] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1634'. [ 281.230669][T11412] syzkaller1: entered promiscuous mode [ 281.254270][T11412] syzkaller1: entered allmulticast mode [ 281.394153][T11418] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1639'. [ 281.408844][T11418] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1639'. [ 281.471310][T11420] tipc: Can't bind to reserved service type 2 [ 281.830644][T11441] netlink: 'syz.4.1645': attribute type 12 has an invalid length. [ 281.875988][T11433] lo speed is unknown, defaulting to 1000 [ 282.420236][T11430] syzkaller1: entered promiscuous mode [ 282.436245][T11430] syzkaller1: entered allmulticast mode [ 282.819906][T11433] vxcan1 speed is unknown, defaulting to 1000 [ 283.454576][T11480] netlink: 'syz.2.1657': attribute type 12 has an invalid length. [ 283.719716][T11483] xt_HMARK: spi-set and port-set can't be combined [ 283.768126][T11489] tipc: Enabled bearer , priority 0 [ 283.837557][T11483] syzkaller0: entered promiscuous mode [ 283.849470][T11483] syzkaller0: entered allmulticast mode [ 284.011069][T11483] tipc: Resetting bearer [ 284.075869][T11496] netlink: 'syz.1.1660': attribute type 13 has an invalid length. [ 284.084108][T11496] netlink: 'syz.1.1660': attribute type 17 has an invalid length. [ 284.122843][T11496] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 284.155065][T11482] tipc: Resetting bearer [ 284.205958][T11482] tipc: Disabling bearer [ 284.341718][T11496] __nla_validate_parse: 8 callbacks suppressed [ 284.341742][T11496] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1660'. [ 284.400444][T11507] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 284.489104][T11493] lo speed is unknown, defaulting to 1000 [ 284.539915][T11496] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 285.132845][T11525] Set syz0 is full, maxelem 0 reached [ 285.270327][T11493] vxcan1 speed is unknown, defaulting to 1000 [ 285.637349][T11536] netlink: 'syz.4.1669': attribute type 12 has an invalid length. [ 285.657113][T11536] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1669'. [ 285.760720][T11538] lo speed is unknown, defaulting to 1000 [ 285.804822][ T6127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.837327][ T6127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.906730][T11541] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 286.252775][T11538] vxcan1 speed is unknown, defaulting to 1000 [ 286.640581][T11549] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 286.799464][T11551] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 287.258991][T11564] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1678'. [ 287.580963][T11574] netlink: 'syz.3.1682': attribute type 12 has an invalid length. [ 287.597877][T11574] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1682'. [ 288.276943][T11592] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1688'. [ 288.368032][T11595] sctp: [Deprecated]: syz.3.1689 (pid 11595) Use of int in max_burst socket option. [ 288.368032][T11595] Use struct sctp_assoc_value instead [ 288.558566][T11599] lo speed is unknown, defaulting to 1000 [ 288.658705][T11607] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1691'. [ 288.719889][T11607] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 288.773413][T11611] tipc: Enabling of bearer rejected, failed to enable media [ 288.827814][T11603] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 289.000226][T11620] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1698'. [ 289.103411][T11623] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1697'. [ 289.173109][T11623] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 289.234148][T11611] lo speed is unknown, defaulting to 1000 [ 289.242461][T11626] tipc: Enabled bearer , priority 0 [ 289.263331][T11626] netlink: 'syz.4.1699': attribute type 1 has an invalid length. [ 289.272435][T11621] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 289.283084][T11626] netlink: 'syz.4.1699': attribute type 2 has an invalid length. [ 289.428235][T11628] tipc: Disabling bearer [ 289.773064][T11599] vxcan1 speed is unknown, defaulting to 1000 [ 289.870702][T11618] lo speed is unknown, defaulting to 1000 [ 290.360615][T11611] vxcan1 speed is unknown, defaulting to 1000 [ 290.737302][T11651] lo speed is unknown, defaulting to 1000 [ 291.295883][T11618] vxcan1 speed is unknown, defaulting to 1000 [ 291.894815][T11664] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1707'. [ 292.001804][T11651] vxcan1 speed is unknown, defaulting to 1000 [ 292.265881][T11670] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1709'. [ 292.674538][T11681] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1711'. [ 292.719074][T11681] 8021q: adding VLAN 0 to HW filter on device bond5 [ 292.749132][T11680] 8021q: adding VLAN 0 to HW filter on device bond5 [ 292.762635][T11680] bond5: (slave vti0): The slave device specified does not support setting the MAC address [ 292.779209][T11680] bond5: (slave vti0): Error -95 calling set_mac_address [ 293.551119][T11691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1714'. [ 293.700767][T11695] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1716'. [ 294.481249][T11710] lo speed is unknown, defaulting to 1000 [ 295.152090][T11736] netlink: 'syz.4.1728': attribute type 12 has an invalid length. [ 295.177784][T11736] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1728'. [ 295.297945][T11740] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1731'. [ 295.427474][T11746] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1733'. [ 295.521694][T11746] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1733'. [ 295.531236][T11710] vxcan1 speed is unknown, defaulting to 1000 [ 295.599037][T11746] syzkaller0: entered promiscuous mode [ 295.605463][T11746] syzkaller0: entered allmulticast mode [ 297.462963][T11756] tipc: Enabling of bearer rejected, failed to enable media [ 297.541307][ T5858] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 297.554395][ T5858] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 297.572351][ T5858] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 297.580412][ T5858] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 297.591647][ T5858] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 297.652194][T11766] lo speed is unknown, defaulting to 1000 [ 297.761287][T11770] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1739'. [ 297.840497][T11770] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1739'. [ 297.871574][T11770] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1739'. [ 297.890730][T11770] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1739'. [ 297.901721][T11770] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1739'. [ 297.911654][T11770] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1739'. [ 297.924077][T11770] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1739'. [ 297.942720][T11770] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1739'. [ 297.961610][T11770] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1739'. [ 298.003676][T11770] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1739'. [ 298.133685][T11778] lo speed is unknown, defaulting to 1000 [ 298.361811][T11788] netlink: 'syz.4.1742': attribute type 12 has an invalid length. [ 299.455699][T11766] vxcan1 speed is unknown, defaulting to 1000 [ 299.556554][T11811] lo speed is unknown, defaulting to 1000 [ 299.653016][ T5856] Bluetooth: hci5: command tx timeout [ 300.129859][T11778] vxcan1 speed is unknown, defaulting to 1000 [ 300.497069][T11766] chnl_net:caif_netlink_parms(): no params data found [ 300.937416][T11811] vxcan1 speed is unknown, defaulting to 1000 [ 300.959782][T11766] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.967803][T11766] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.975617][T11766] bridge_slave_0: entered allmulticast mode [ 300.984474][T11766] bridge_slave_0: entered promiscuous mode [ 301.077249][T11766] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.104360][T11766] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.112129][T11766] bridge_slave_1: entered allmulticast mode [ 301.119446][T11766] bridge_slave_1: entered promiscuous mode [ 301.263483][T11766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 301.285557][T11766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 301.519531][T11838] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 301.532129][T11766] team0: Port device team_slave_0 added [ 301.566363][T11766] team0: Port device team_slave_1 added [ 301.621104][T11838] netlink: 'syz.2.1754': attribute type 7 has an invalid length. [ 301.732359][ T5856] Bluetooth: hci5: command tx timeout [ 301.894462][T11766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 301.903212][T11766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.945211][T11766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 301.961346][T11766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 301.975903][T11766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.004892][T11766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 302.442900][T11766] hsr_slave_0: entered promiscuous mode [ 302.472634][T11766] hsr_slave_1: entered promiscuous mode [ 302.490266][T11766] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 302.500040][T11766] Cannot create hsr debugfs directory [ 302.812119][T11856] xt_HMARK: spi-set and port-set can't be combined [ 302.877090][T11855] tipc: Enabled bearer , priority 0 [ 302.885438][T11855] syzkaller0: entered promiscuous mode [ 302.890958][T11855] syzkaller0: entered allmulticast mode [ 303.120939][T11858] team0 (unregistering): Port device team_slave_0 removed [ 303.130041][T11858] team0 (unregistering): Port device team_slave_1 removed [ 303.138914][T11858] team0 (unregistering): Port device bond2 removed [ 303.152451][T11858] team0 (unregistering): Port device bridge4 removed [ 303.181986][T11858] team0 (unregistering): Port device dummy0 removed [ 303.246927][T11854] tipc: Resetting bearer [ 303.280034][T11854] tipc: Disabling bearer [ 303.304985][T11864] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20001 [ 303.312690][T11864] __nla_validate_parse: 80 callbacks suppressed [ 303.312716][T11864] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1760'. [ 303.440965][T11766] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 303.494392][T11766] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 303.543688][T11766] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 303.586206][T11766] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 303.813067][ T5856] Bluetooth: hci5: command tx timeout [ 303.818403][T11889] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1766'. [ 303.844951][T11887] block nbd1: server does not support multiple connections per device. [ 303.855581][T11887] block nbd1: shutting down sockets [ 303.883708][T11766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.915821][T11766] 8021q: adding VLAN 0 to HW filter on device team0 [ 303.932482][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.939725][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.958050][ T1137] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.965289][ T1137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.005230][T11893] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1767'. [ 304.134284][T11766] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 304.167818][T11898] xt_hashlimit: size too large, truncated to 1048576 [ 304.176070][T11899] xt_hashlimit: size too large, truncated to 1048576 [ 304.315835][T11908] veth0_to_bridge: entered promiscuous mode [ 304.711327][T11901] veth0_to_bridge: left promiscuous mode [ 304.746406][T11766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 304.899497][T11923] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 304.963056][T11927] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 304.983201][T11927] netlink: 'syz.4.1772': attribute type 4 has an invalid length. [ 305.435563][T11936] netlink: 304 bytes leftover after parsing attributes in process `syz.1.1777'. [ 305.727230][T11945] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 305.891578][ T5856] Bluetooth: hci5: command tx timeout [ 306.012999][T11766] veth0_vlan: entered promiscuous mode [ 306.044220][T11766] veth1_vlan: entered promiscuous mode [ 306.216314][T11766] veth0_macvtap: entered promiscuous mode [ 306.308852][T11957] syzkaller1: entered promiscuous mode [ 306.315141][T11957] syzkaller1: entered allmulticast mode [ 306.333872][T11766] veth1_macvtap: entered promiscuous mode [ 306.400333][T11766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 306.438836][T11766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 306.495303][ T6117] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.525267][ T6117] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.567692][ T6117] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.692022][T11966] netlink: 'syz.2.1781': attribute type 13 has an invalid length. [ 306.700093][T11966] netlink: 'syz.2.1781': attribute type 17 has an invalid length. [ 306.743414][ T6117] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.770417][T11966] erspan0: left allmulticast mode [ 306.825823][T11966] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.846125][T11966] 8021q: adding VLAN 0 to HW filter on device team0 [ 306.900381][T11966] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 306.970716][T11966] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 307.037173][T11966] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 307.045448][T11967] lo speed is unknown, defaulting to 1000 [ 307.153485][ T6117] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.172603][ T6117] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.226067][T11981] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1786'. [ 307.243645][T11966] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 307.254405][ T1137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.281863][ T1137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.500320][T11986] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1788'. [ 307.516180][T11987] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1789'. [ 307.765976][T11999] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1791'. [ 307.798844][T12003] sctp: [Deprecated]: syz.1.1790 (pid 12003) Use of struct sctp_assoc_value in delayed_ack socket option. [ 307.798844][T12003] Use struct sctp_sack_info instead [ 308.080640][T12012] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1794'. [ 308.171631][T12015] openvswitch: netlink: Actions may not be safe on all matching packets [ 308.238691][T12009] syzkaller1: entered promiscuous mode [ 308.245860][T12009] syzkaller1: entered allmulticast mode [ 308.303841][T11967] vxcan1 speed is unknown, defaulting to 1000 [ 308.309745][T12017] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 308.596865][T12030] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1801'. [ 308.635155][T12030] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1801'. [ 308.655129][T12030] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 308.776461][T12037] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1803'. [ 308.900027][T12042] xt_HMARK: spi-set and port-set can't be combined [ 308.908957][T12042] syzkaller0: entered promiscuous mode [ 308.917197][T12042] syzkaller0: entered allmulticast mode [ 309.019732][T12044] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1806'. [ 309.102007][T12045] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1806'. [ 309.134041][T12044] team_slave_0: entered promiscuous mode [ 309.140012][T12044] team_slave_1: entered promiscuous mode [ 309.197935][T12044] macsec1: entered promiscuous mode [ 309.208950][T12044] team0: entered promiscuous mode [ 309.215744][T12044] macsec1: entered allmulticast mode [ 309.221221][T12044] team0: entered allmulticast mode [ 309.232971][T12044] team_slave_0: entered allmulticast mode [ 309.238877][T12044] team_slave_1: entered allmulticast mode [ 309.267120][T12044] team0: Device macsec1 is already an upper device of the team interface [ 309.277194][T12047] netlink: 'syz.4.1807': attribute type 10 has an invalid length. [ 309.277777][T12048] netlink: 'syz.4.1807': attribute type 10 has an invalid length. [ 309.298160][T12044] team0: left allmulticast mode [ 309.307910][T12044] team_slave_0: left allmulticast mode [ 309.316179][T12044] team_slave_1: left allmulticast mode [ 309.339785][T12044] team0: left promiscuous mode [ 309.350567][T12044] team_slave_0: left promiscuous mode [ 309.356088][T12044] team_slave_1: left promiscuous mode [ 309.435766][T12047] team0: Port device netdevsim0 added [ 309.562993][T12054] raw_sendmsg: syz.1.1809 forgot to set AF_INET. Fix it! [ 309.636843][T12059] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 309.712789][T12060] syzkaller1: entered promiscuous mode [ 309.718312][T12060] syzkaller1: entered allmulticast mode [ 309.740535][T12063] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1812'. [ 309.763091][T12063] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 309.771886][T12063] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 310.078161][T12075] FAULT_INJECTION: forcing a failure. [ 310.078161][T12075] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 310.120739][T12075] CPU: 0 UID: 0 PID: 12075 Comm: syz.4.1816 Not tainted 6.16.0-rc6-syzkaller-01576-g4701ee5044fb #0 PREEMPT(full) [ 310.120768][T12075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 310.120779][T12075] Call Trace: [ 310.120804][T12075] [ 310.120812][T12075] dump_stack_lvl+0x189/0x250 [ 310.120854][T12075] ? __pfx____ratelimit+0x10/0x10 [ 310.120883][T12075] ? __pfx_dump_stack_lvl+0x10/0x10 [ 310.120905][T12075] ? __pfx__printk+0x10/0x10 [ 310.120960][T12075] should_fail_ex+0x414/0x560 [ 310.120999][T12075] _copy_to_user+0x31/0xb0 [ 310.121030][T12075] simple_read_from_buffer+0xe1/0x170 [ 310.121065][T12075] proc_fail_nth_read+0x1df/0x250 [ 310.121088][T12075] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 310.121111][T12075] ? rw_verify_area+0x258/0x650 [ 310.121136][T12075] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 310.121156][T12075] vfs_read+0x200/0x980 [ 310.121188][T12075] ? __pfx___mutex_lock+0x10/0x10 [ 310.121217][T12075] ? __pfx_vfs_read+0x10/0x10 [ 310.121244][T12075] ? __fget_files+0x2a/0x420 [ 310.121267][T12075] ? __fget_files+0x3a0/0x420 [ 310.121283][T12075] ? __fget_files+0x2a/0x420 [ 310.121311][T12075] ksys_read+0x145/0x250 [ 310.121339][T12075] ? __pfx_ksys_read+0x10/0x10 [ 310.121374][T12075] ? do_syscall_64+0xbe/0x3b0 [ 310.121397][T12075] do_syscall_64+0xfa/0x3b0 [ 310.121414][T12075] ? lockdep_hardirqs_on+0x9c/0x150 [ 310.121443][T12075] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.121463][T12075] ? clear_bhb_loop+0x60/0xb0 [ 310.121487][T12075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.121505][T12075] RIP: 0033:0x7f479698d3bc [ 310.121540][T12075] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 310.121557][T12075] RSP: 002b:00007f47977c6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 310.121592][T12075] RAX: ffffffffffffffda RBX: 00007f4796bb5fa0 RCX: 00007f479698d3bc [ 310.121606][T12075] RDX: 000000000000000f RSI: 00007f47977c60a0 RDI: 0000000000000004 [ 310.121619][T12075] RBP: 00007f47977c6090 R08: 0000000000000000 R09: 0000000000000000 [ 310.121630][T12075] R10: 0000000000012141 R11: 0000000000000246 R12: 0000000000000001 [ 310.121642][T12075] R13: 0000000000000000 R14: 00007f4796bb5fa0 R15: 00007fff69cbef18 [ 310.121674][T12075] [ 310.169466][T12077] xt_HMARK: spi-set and port-set can't be combined [ 310.344133][T12082] syzkaller0: entered promiscuous mode [ 310.381438][T12082] syzkaller0: entered allmulticast mode [ 310.624724][T12091] Bluetooth: MGMT ver 1.23 [ 310.642077][T12091] geneve2: entered promiscuous mode [ 310.670649][T12091] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1822'. [ 310.732802][T12095] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1823'. [ 311.206697][T12107] Set syz0 is full, maxelem 0 reached [ 311.207062][T12106] tipc: Enabled bearer , priority 0 [ 311.258033][T12106] syzkaller0: entered promiscuous mode [ 311.263853][T12106] syzkaller0: entered allmulticast mode [ 311.318648][T12106] tipc: Resetting bearer [ 311.362432][T12106] tipc: Resetting bearer [ 311.437731][T12106] tipc: Disabling bearer [ 311.633012][T12115] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1831'. [ 311.669882][ T5858] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 311.679243][ T5858] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 311.688937][ T5858] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 311.698678][ T5858] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 311.706808][ T5858] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 311.708393][T12116] xt_HMARK: spi-set and port-set can't be combined [ 311.754694][T12117] lo speed is unknown, defaulting to 1000 [ 311.766717][T12116] syzkaller0: entered promiscuous mode [ 311.875231][T12116] syzkaller0: entered allmulticast mode [ 312.107556][T12128] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1835'. [ 312.562382][T12147] lo speed is unknown, defaulting to 1000 [ 312.768586][T12155] nftables ruleset with unbound chain [ 312.973953][T12167] netlink: 'syz.2.1845': attribute type 1 has an invalid length. [ 312.982702][T12117] vxcan1 speed is unknown, defaulting to 1000 [ 313.348284][T12177] xt_HMARK: spi-set and port-set can't be combined [ 313.366912][T12177] syzkaller0: entered promiscuous mode [ 313.412077][T12177] syzkaller0: entered allmulticast mode [ 313.675778][T12147] vxcan1 speed is unknown, defaulting to 1000 [ 313.735563][ T5858] Bluetooth: hci6: command tx timeout [ 313.805638][T12193] sctp: [Deprecated]: syz.2.1855 (pid 12193) Use of int in max_burst socket option. [ 313.805638][T12193] Use struct sctp_assoc_value instead [ 314.649404][T12209] lo speed is unknown, defaulting to 1000 [ 314.738715][T12117] chnl_net:caif_netlink_parms(): no params data found [ 315.055241][T12234] __nla_validate_parse: 11 callbacks suppressed [ 315.055261][T12234] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1863'. [ 315.083130][T12234] netlink: 'syz.5.1863': attribute type 39 has an invalid length. [ 315.248625][T12117] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.257211][T12117] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.264532][T12117] bridge_slave_0: entered allmulticast mode [ 315.274380][T12117] bridge_slave_0: entered promiscuous mode [ 315.287538][T12117] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.295869][T12117] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.310095][T12117] bridge_slave_1: entered allmulticast mode [ 315.325017][T12117] bridge_slave_1: entered promiscuous mode [ 315.408411][T12117] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 315.428200][T12117] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 315.515233][T12117] team0: Port device team_slave_0 added [ 315.533500][T12209] vxcan1 speed is unknown, defaulting to 1000 [ 315.540622][T12117] team0: Port device team_slave_1 added [ 315.764638][T12117] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 315.779958][T12117] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.807851][T12117] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 315.820289][ T5858] Bluetooth: hci6: command tx timeout [ 315.851986][T12117] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 315.859067][T12117] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.873709][T12252] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1868'. [ 315.885616][T12117] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 315.999354][T12117] hsr_slave_0: entered promiscuous mode [ 316.021670][T12117] hsr_slave_1: entered promiscuous mode [ 316.035295][T12117] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 316.044911][T12117] Cannot create hsr debugfs directory [ 316.939036][T12274] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1874'. [ 316.980115][T12276] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 317.843659][T12117] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 317.894939][ T5858] Bluetooth: hci6: command tx timeout [ 317.922770][T12117] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 317.965262][T12117] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 318.024723][T12117] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 318.188664][T12296] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 318.393198][T12117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 318.460290][T12117] 8021q: adding VLAN 0 to HW filter on device team0 [ 318.543460][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.550621][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 318.579958][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.587175][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 318.748535][T12314] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1882'. [ 319.148154][T12322] vlan2: entered promiscuous mode [ 319.159379][T12322] team0: entered promiscuous mode [ 319.168304][T12322] geneve0: entered promiscuous mode [ 319.177893][T12322] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 319.215108][T12117] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 319.577022][T12332] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1887'. [ 319.614904][T12329] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma? [ 319.672247][T12329] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1886'. [ 319.794097][T12329] xt_l2tp: missing protocol rule (udp|l2tpip) [ 319.979268][T12117] veth0_vlan: entered promiscuous mode [ 319.982448][ T5858] Bluetooth: hci6: command tx timeout [ 320.019764][T12342] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 320.044274][T12344] FAULT_INJECTION: forcing a failure. [ 320.044274][T12344] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 320.082943][T12344] CPU: 0 UID: 0 PID: 12344 Comm: syz.4.1892 Not tainted 6.16.0-rc6-syzkaller-01576-g4701ee5044fb #0 PREEMPT(full) [ 320.082975][T12344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 320.082987][T12344] Call Trace: [ 320.082996][T12344] [ 320.083004][T12344] dump_stack_lvl+0x189/0x250 [ 320.083034][T12344] ? __pfx____ratelimit+0x10/0x10 [ 320.083064][T12344] ? __pfx_dump_stack_lvl+0x10/0x10 [ 320.083089][T12344] ? __pfx__printk+0x10/0x10 [ 320.083117][T12344] ? __might_fault+0xb0/0x130 [ 320.083157][T12344] should_fail_ex+0x414/0x560 [ 320.083184][T12344] _copy_from_iter+0x1db/0x16f0 [ 320.083214][T12344] ? rcu_is_watching+0x15/0xb0 [ 320.083240][T12344] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 320.083271][T12344] ? __pfx__copy_from_iter+0x10/0x10 [ 320.083298][T12344] ? __build_skb_around+0x257/0x3e0 [ 320.083323][T12344] ? netlink_sendmsg+0x642/0xb30 [ 320.083342][T12344] ? skb_put+0x11b/0x210 [ 320.083367][T12344] netlink_sendmsg+0x6b2/0xb30 [ 320.083405][T12344] ? __pfx_netlink_sendmsg+0x10/0x10 [ 320.083428][T12344] ? aa_sock_msg_perm+0x94/0x160 [ 320.083451][T12344] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 320.083472][T12344] ? __pfx_netlink_sendmsg+0x10/0x10 [ 320.083494][T12344] __sock_sendmsg+0x219/0x270 [ 320.083527][T12344] ____sys_sendmsg+0x505/0x830 [ 320.083557][T12344] ? __pfx_____sys_sendmsg+0x10/0x10 [ 320.083610][T12344] ? import_iovec+0x74/0xa0 [ 320.083642][T12344] ___sys_sendmsg+0x21f/0x2a0 [ 320.083669][T12344] ? __pfx____sys_sendmsg+0x10/0x10 [ 320.083733][T12344] ? __fget_files+0x2a/0x420 [ 320.083751][T12344] ? __fget_files+0x3a0/0x420 [ 320.083781][T12344] __x64_sys_sendmsg+0x19b/0x260 [ 320.083807][T12344] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 320.083843][T12344] ? __pfx_ksys_write+0x10/0x10 [ 320.083868][T12344] ? rcu_is_watching+0x15/0xb0 [ 320.083897][T12344] ? do_syscall_64+0xbe/0x3b0 [ 320.083922][T12344] do_syscall_64+0xfa/0x3b0 [ 320.083940][T12344] ? lockdep_hardirqs_on+0x9c/0x150 [ 320.083970][T12344] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.083991][T12344] ? clear_bhb_loop+0x60/0xb0 [ 320.084016][T12344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.084036][T12344] RIP: 0033:0x7f479698e9a9 [ 320.084055][T12344] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 320.084072][T12344] RSP: 002b:00007f47977c6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 320.084093][T12344] RAX: ffffffffffffffda RBX: 00007f4796bb5fa0 RCX: 00007f479698e9a9 [ 320.084108][T12344] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 320.084120][T12344] RBP: 00007f47977c6090 R08: 0000000000000000 R09: 0000000000000000 [ 320.084133][T12344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 320.084144][T12344] R13: 0000000000000000 R14: 00007f4796bb5fa0 R15: 00007fff69cbef18 [ 320.084177][T12344] [ 320.449431][T12117] veth1_vlan: entered promiscuous mode [ 320.599234][T12117] veth0_macvtap: entered promiscuous mode [ 320.619986][T12117] veth1_macvtap: entered promiscuous mode [ 320.643380][T12355] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1895'. [ 320.658753][T12117] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 320.672510][T12117] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 320.738487][ T3447] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.766924][T12362] xt_hashlimit: size too large, truncated to 1048576 [ 320.820418][T12355] dvmrp8: entered allmulticast mode [ 320.842879][ T3447] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.876315][ T3447] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.908258][T12364] : renamed from ipvlan0 [ 320.975458][ T3447] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.147366][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.187419][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.392989][T12350] dvmrp8: left allmulticast mode [ 321.473475][T12384] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1900'. [ 321.490216][ T6117] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.523224][ T6117] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.716230][T12387] netlink: 'syz.2.1901': attribute type 23 has an invalid length. [ 321.791336][T12393] tipc: Enabled bearer , priority 0 [ 321.826054][T12393] syzkaller0: entered promiscuous mode [ 321.842097][T12393] syzkaller0: entered allmulticast mode [ 321.867086][T12396] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1825'. [ 321.879545][T12396] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1825'. [ 322.074187][T12404] tipc: Resetting bearer [ 322.080757][T12403] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 322.424810][T12424] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1911'. [ 322.539880][T12426] mac80211_hwsim hwsim22 wlan1: entered allmulticast mode [ 322.561184][T12432] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1914'. [ 322.579118][T12390] tipc: Resetting bearer [ 322.607220][T12433] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1913'. [ 322.623100][T12437] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1914'. [ 322.638261][T12390] tipc: Disabling bearer [ 322.650354][T12439] netlink: 'syz.5.1912': attribute type 10 has an invalid length. [ 322.661061][T12433] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1913'. [ 322.695689][T12432] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 322.713982][T12442] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1913'. [ 322.751352][T12426] bridge_slave_0: left allmulticast mode [ 322.758431][T12426] bridge_slave_0: left promiscuous mode [ 322.765929][T12426] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.798555][T12426] bridge_slave_1: left allmulticast mode [ 322.805875][T12426] bridge_slave_1: left promiscuous mode [ 322.812638][T12426] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.828624][T12426] bond0: (slave bond_slave_0): Releasing backup interface [ 322.865657][T12426] bond0: (slave bond_slave_1): Releasing backup interface [ 322.880695][T12426] team0: Port device team_slave_0 removed [ 322.895348][T12426] team0: Port device team_slave_1 removed [ 322.902716][T12426] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 322.910125][T12426] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 322.939299][T12426] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 322.960417][T12426] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 323.002073][T12439] mac80211_hwsim hwsim22 wlan1: left allmulticast mode [ 323.043813][T12439] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.065520][T12439] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 323.430823][T12459] netlink: 'syz.5.1921': attribute type 30 has an invalid length. [ 324.060173][T12486] macvlan2: entered allmulticast mode [ 324.067056][T12486] veth1_vlan: entered allmulticast mode [ 324.128718][T12486] veth1_vlan: left allmulticast mode [ 324.257482][T12493] lo speed is unknown, defaulting to 1000 [ 324.692873][ T5856] Bluetooth: hci6: command 0x0405 tx timeout [ 324.926826][T12512] lo speed is unknown, defaulting to 1000 [ 325.651297][T12493] vxcan1 speed is unknown, defaulting to 1000 [ 326.307441][T12512] vxcan1 speed is unknown, defaulting to 1000 [ 327.565755][T12541] __nla_validate_parse: 4 callbacks suppressed [ 327.565773][T12541] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1945'. [ 327.592120][T12541] netlink: zone id is out of range [ 327.605746][T12541] netlink: zone id is out of range [ 327.616875][T12541] netlink: zone id is out of range [ 327.640524][T12541] netlink: zone id is out of range [ 327.679571][T12542] netlink: 216 bytes leftover after parsing attributes in process `syz.1.1945'. [ 327.689721][T12541] netlink: zone id is out of range [ 327.700125][T12541] netlink: zone id is out of range [ 327.712143][T12542] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1945'. [ 327.721123][T12542] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1945'. [ 327.744507][T12541] netlink: zone id is out of range [ 327.749677][T12541] netlink: zone id is out of range [ 327.768838][T12541] netlink: zone id is out of range [ 327.800261][T12541] netlink: zone id is out of range [ 328.975284][T12561] ..@ÿ: renamed from veth1_virt_wifi [ 329.213202][T12569] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1953'. [ 329.236065][T12569] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1953'. [ 329.258233][T12569] netlink: 31 bytes leftover after parsing attributes in process `syz.6.1953'. [ 329.267987][T12569] netlink: 'syz.6.1953': attribute type 3 has an invalid length. [ 329.277898][T12569] netlink: 'syz.6.1953': attribute type 2 has an invalid length. [ 329.291998][T12569] netlink: 31 bytes leftover after parsing attributes in process `syz.6.1953'. [ 329.303208][T12572] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1953'. [ 329.716881][T12585] siw: device registration error -23 [ 329.950615][T12596] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 330.234807][T12600] x_tables: duplicate underflow at hook 2 [ 330.256512][T12602] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1958'. [ 331.088146][T12636] tipc: Started in network mode [ 331.094322][T12636] tipc: Node identity a293593c24b3, cluster identity 4711 [ 331.112686][T12636] tipc: Enabled bearer , priority 0 [ 331.218258][T12636] syzkaller0: entered promiscuous mode [ 331.224654][T12636] syzkaller0: entered allmulticast mode [ 331.230854][T12636] tipc: Resetting bearer [ 331.253881][ T5858] Bluetooth: hci6: command 0x0405 tx timeout [ 331.346440][T12634] tipc: Resetting bearer [ 332.194122][ T7445] tipc: Node number set to 2250266940 [ 333.087666][T12634] tipc: Disabling bearer [ 333.100535][T12665] 8021q: VLANs not supported on bond0 [ 333.267094][T12667] lo speed is unknown, defaulting to 1000 [ 333.860860][T12667] vxcan1 speed is unknown, defaulting to 1000 [ 334.323102][T12687] __nla_validate_parse: 6 callbacks suppressed [ 334.323121][T12687] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1983'. [ 334.458973][T12687] netlink: 'syz.6.1983': attribute type 24 has an invalid length. [ 334.473564][T12695] netlink: 404 bytes leftover after parsing attributes in process `syz.2.1985'. [ 334.639707][T12702] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1986'. [ 334.745031][T12702] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1986'. [ 335.089195][T12710] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1989'. [ 335.141866][T12710] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1989'. [ 335.180522][T12710] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1989'. [ 335.226766][T12715] batadv_slave_1: entered promiscuous mode [ 335.238614][T12710] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1989'. [ 335.271412][T12710] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1989'. [ 335.301808][T12710] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1989'. [ 335.310832][T12715] batadv_slave_1: left promiscuous mode [ 335.439864][T12720] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 335.798261][T12732] netlink: 'syz.5.1997': attribute type 39 has an invalid length. [ 336.014412][T12743] FAULT_INJECTION: forcing a failure. [ 336.014412][T12743] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 336.028530][T12743] CPU: 0 UID: 0 PID: 12743 Comm: syz.6.1999 Not tainted 6.16.0-rc6-syzkaller-01576-g4701ee5044fb #0 PREEMPT(full) [ 336.028573][T12743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 336.028593][T12743] Call Trace: [ 336.028600][T12743] [ 336.028609][T12743] dump_stack_lvl+0x189/0x250 [ 336.028636][T12743] ? __pfx____ratelimit+0x10/0x10 [ 336.028665][T12743] ? __pfx_dump_stack_lvl+0x10/0x10 [ 336.028687][T12743] ? __pfx__printk+0x10/0x10 [ 336.028712][T12743] ? __might_fault+0xb0/0x130 [ 336.028748][T12743] should_fail_ex+0x414/0x560 [ 336.028772][T12743] _copy_from_user+0x2d/0xb0 [ 336.028815][T12743] ___sys_sendmsg+0x158/0x2a0 [ 336.028838][T12743] ? __pfx____sys_sendmsg+0x10/0x10 [ 336.028909][T12743] ? __fget_files+0x2a/0x420 [ 336.028925][T12743] ? __fget_files+0x3a0/0x420 [ 336.028951][T12743] __x64_sys_sendmsg+0x19b/0x260 [ 336.028976][T12743] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 336.029010][T12743] ? rcu_is_watching+0x15/0xb0 [ 336.029032][T12743] ? trace_sys_enter+0x25/0x120 [ 336.029056][T12743] do_syscall_64+0xfa/0x3b0 [ 336.029073][T12743] ? lockdep_hardirqs_on+0x9c/0x150 [ 336.029100][T12743] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.029119][T12743] ? clear_bhb_loop+0x60/0xb0 [ 336.029141][T12743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.029159][T12743] RIP: 0033:0x7f988118e9a9 [ 336.029174][T12743] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 336.029190][T12743] RSP: 002b:00007f9882061038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 336.029210][T12743] RAX: ffffffffffffffda RBX: 00007f98813b5fa0 RCX: 00007f988118e9a9 [ 336.029223][T12743] RDX: 0000000004000004 RSI: 0000200000000280 RDI: 0000000000000003 [ 336.029235][T12743] RBP: 00007f9882061090 R08: 0000000000000000 R09: 0000000000000000 [ 336.029246][T12743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 336.029256][T12743] R13: 0000000000000000 R14: 00007f98813b5fa0 R15: 00007fffe5bd4e18 [ 336.029285][T12743] [ 336.478636][T12754] netlink: 'syz.5.2004': attribute type 39 has an invalid length. [ 336.547375][T12756] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 336.827779][T12776] lo speed is unknown, defaulting to 1000 [ 336.918887][T12780] netlink: 'syz.2.2009': attribute type 10 has an invalid length. [ 337.797588][ T5856] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 337.812765][ T5856] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 337.820981][ T5856] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 337.831210][ T5856] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 337.840541][ T5856] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 337.915406][T12803] lo speed is unknown, defaulting to 1000 [ 338.025267][T12809] netlink: 'syz.5.2020': attribute type 13 has an invalid length. [ 338.041876][T12809] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (6) [ 338.155971][T12813] net_ratelimit: 74 callbacks suppressed [ 338.155990][T12813] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 338.279672][T12818] A link change request failed with some changes committed already. Interface veth1_to_batadv may have been left with an inconsistent configuration, please check. [ 338.328142][T12820] openvswitch: netlink: IP tunnel dst address not specified [ 338.640443][T12776] vxcan1 speed is unknown, defaulting to 1000 [ 338.990270][T12833] netlink: 'syz.5.2028': attribute type 12 has an invalid length. [ 339.247840][T12803] vxcan1 speed is unknown, defaulting to 1000 [ 339.270935][T12839] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 339.299758][ T7447] IPVS: starting estimator thread 0... [ 339.402049][T12841] IPVS: using max 26 ests per chain, 62400 per kthread [ 339.836260][T12857] __nla_validate_parse: 50 callbacks suppressed [ 339.836280][T12857] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2032'. [ 339.901904][ T5856] Bluetooth: hci7: command tx timeout [ 340.304285][T12864] netlink: zone id is out of range [ 340.348471][T12864] netlink: zone id is out of range [ 340.382965][T12864] netlink: zone id is out of range [ 340.388358][T12864] netlink: zone id is out of range [ 340.405734][T12864] netlink: zone id is out of range [ 340.411257][T12864] netlink: zone id is out of range [ 340.416797][T12864] netlink: zone id is out of range [ 340.896079][T12877] netlink: 'syz.5.2038': attribute type 12 has an invalid length. [ 340.911672][T12877] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2038'. [ 341.004466][T12883] pim6reg: entered allmulticast mode [ 341.060790][T12890] FAULT_INJECTION: forcing a failure. [ 341.060790][T12890] name failslab, interval 1, probability 0, space 0, times 0 [ 341.074498][T12890] CPU: 0 UID: 0 PID: 12890 Comm: syz.5.2042 Not tainted 6.16.0-rc6-syzkaller-01576-g4701ee5044fb #0 PREEMPT(full) [ 341.074528][T12890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 341.074540][T12890] Call Trace: [ 341.074549][T12890] [ 341.074558][T12890] dump_stack_lvl+0x189/0x250 [ 341.074587][T12890] ? __pfx____ratelimit+0x10/0x10 [ 341.074619][T12890] ? __pfx_dump_stack_lvl+0x10/0x10 [ 341.074643][T12890] ? __pfx__printk+0x10/0x10 [ 341.074677][T12890] ? __pfx___might_resched+0x10/0x10 [ 341.074706][T12890] should_fail_ex+0x414/0x560 [ 341.074732][T12890] should_failslab+0xa8/0x100 [ 341.074764][T12890] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 341.074804][T12890] ? __alloc_skb+0x112/0x2d0 [ 341.074848][T12890] __alloc_skb+0x112/0x2d0 [ 341.074869][T12890] netlink_sendmsg+0x5c6/0xb30 [ 341.074897][T12890] ? __pfx_netlink_sendmsg+0x10/0x10 [ 341.074918][T12890] ? aa_sock_msg_perm+0x94/0x160 [ 341.074958][T12890] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 341.074978][T12890] ? __pfx_netlink_sendmsg+0x10/0x10 [ 341.074998][T12890] __sock_sendmsg+0x219/0x270 [ 341.075030][T12890] ____sys_sendmsg+0x505/0x830 [ 341.075059][T12890] ? __pfx_____sys_sendmsg+0x10/0x10 [ 341.075104][T12890] ? import_iovec+0x74/0xa0 [ 341.075133][T12890] ___sys_sendmsg+0x21f/0x2a0 [ 341.075158][T12890] ? __pfx____sys_sendmsg+0x10/0x10 [ 341.075222][T12890] ? __fget_files+0x2a/0x420 [ 341.075245][T12890] ? __fget_files+0x3a0/0x420 [ 341.075272][T12890] __x64_sys_sendmsg+0x19b/0x260 [ 341.075297][T12890] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 341.075335][T12890] ? __pfx_ksys_write+0x10/0x10 [ 341.075359][T12890] ? rcu_is_watching+0x15/0xb0 [ 341.075386][T12890] ? do_syscall_64+0xbe/0x3b0 [ 341.075408][T12890] do_syscall_64+0xfa/0x3b0 [ 341.075425][T12890] ? lockdep_hardirqs_on+0x9c/0x150 [ 341.075452][T12890] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.075477][T12890] ? clear_bhb_loop+0x60/0xb0 [ 341.075502][T12890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.075519][T12890] RIP: 0033:0x7f2a3f18e9a9 [ 341.075536][T12890] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 341.075552][T12890] RSP: 002b:00007f2a3ff54038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 341.075572][T12890] RAX: ffffffffffffffda RBX: 00007f2a3f3b5fa0 RCX: 00007f2a3f18e9a9 [ 341.075585][T12890] RDX: 0000000004000004 RSI: 0000200000000280 RDI: 0000000000000003 [ 341.075597][T12890] RBP: 00007f2a3ff54090 R08: 0000000000000000 R09: 0000000000000000 [ 341.075607][T12890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 341.075618][T12890] R13: 0000000000000000 R14: 00007f2a3f3b5fa0 R15: 00007fffea94e738 [ 341.075647][T12890] [ 341.403613][T12885] lo speed is unknown, defaulting to 1000 [ 341.423220][T12803] chnl_net:caif_netlink_parms(): no params data found [ 341.760710][T12910] netlink: 1041 bytes leftover after parsing attributes in process `syz.5.2046'. [ 341.972345][T12803] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.982307][ T5856] Bluetooth: hci7: command tx timeout [ 341.998116][T12803] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.008512][T12803] bridge_slave_0: entered allmulticast mode [ 342.025760][T12803] bridge_slave_0: entered promiscuous mode [ 342.041084][T12803] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.058293][T12803] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.076592][T12803] bridge_slave_1: entered allmulticast mode [ 342.105038][T12803] bridge_slave_1: entered promiscuous mode [ 342.141164][T12885] vxcan1 speed is unknown, defaulting to 1000 [ 342.184624][T12803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 342.210921][T12803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 342.225192][T12918] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2049'. [ 342.389658][T12922] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2048'. [ 342.419157][T12803] team0: Port device team_slave_0 added [ 342.463123][T12924] netlink: 'syz.2.2051': attribute type 12 has an invalid length. [ 342.472214][T12924] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2051'. [ 342.491126][T12803] team0: Port device team_slave_1 added [ 342.622754][T12803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 342.629769][T12803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.724774][T12803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 342.842736][T12803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 342.860161][T12803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.914471][T12803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 342.938298][T12935] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2055'. [ 342.999524][T12926] lo speed is unknown, defaulting to 1000 [ 343.102552][T12803] hsr_slave_0: entered promiscuous mode [ 343.109322][T12803] hsr_slave_1: entered promiscuous mode [ 343.132849][T12803] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 343.140444][T12803] Cannot create hsr debugfs directory [ 343.582245][T12925] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 343.637204][T12803] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 343.657423][T12803] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 343.690198][T12803] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 343.722755][T12803] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 343.932990][T12803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 343.997138][T12803] 8021q: adding VLAN 0 to HW filter on device team0 [ 344.027774][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.035004][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 344.049641][T12961] netlink: 'syz.2.2063': attribute type 30 has an invalid length. [ 344.058165][ T5856] Bluetooth: hci7: command tx timeout [ 344.070111][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.077284][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 344.107873][T12961] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.2063'. [ 344.123795][T12803] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 344.135505][T12803] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 344.395407][T12926] vxcan1 speed is unknown, defaulting to 1000 [ 344.737175][T12981] netlink: 'syz.1.2067': attribute type 12 has an invalid length. [ 344.765717][T12981] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2067'. [ 344.981928][T12803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 345.260794][T12989] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2069'. [ 345.297800][T12989] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2069'. [ 345.340353][T12989] net_ratelimit: 7 callbacks suppressed [ 345.340371][T12989] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check. [ 345.566961][T12992] lo speed is unknown, defaulting to 1000 [ 346.134629][ T5856] Bluetooth: hci7: command tx timeout [ 346.156605][T13003] netlink: 'syz.2.2072': attribute type 10 has an invalid length. [ 346.209030][T12803] veth0_vlan: entered promiscuous mode [ 346.277787][T12803] veth1_vlan: entered promiscuous mode [ 346.367590][T12803] veth0_macvtap: entered promiscuous mode [ 346.396239][T12803] veth1_macvtap: entered promiscuous mode [ 346.461002][T13006] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2073'. [ 346.473053][T12803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 346.484760][T13006] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2073'. [ 346.496765][T12803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 346.635176][ T3502] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.646244][ T3502] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.656778][ T3502] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.742316][ T3502] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.884373][T13013] pim6reg1: entered promiscuous mode [ 346.889727][T13013] pim6reg1: entered allmulticast mode [ 346.922357][T13013] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2076'. [ 347.030658][ T3447] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.042334][ T3447] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.071848][T12992] vxcan1 speed is unknown, defaulting to 1000 [ 347.253405][ T1137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.261289][ T1137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.402637][T13019] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2077'. [ 347.421722][T13010] wireguard0: entered promiscuous mode [ 347.432247][T13010] wireguard0: entered allmulticast mode [ 347.553755][T13021] FAULT_INJECTION: forcing a failure. [ 347.553755][T13021] name failslab, interval 1, probability 0, space 0, times 0 [ 347.577056][T13021] CPU: 0 UID: 0 PID: 13021 Comm: syz.7.2012 Not tainted 6.16.0-rc6-syzkaller-01576-g4701ee5044fb #0 PREEMPT(full) [ 347.577085][T13021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 347.577097][T13021] Call Trace: [ 347.577105][T13021] [ 347.577114][T13021] dump_stack_lvl+0x189/0x250 [ 347.577143][T13021] ? __pfx____ratelimit+0x10/0x10 [ 347.577173][T13021] ? __pfx_dump_stack_lvl+0x10/0x10 [ 347.577196][T13021] ? __pfx__printk+0x10/0x10 [ 347.577228][T13021] ? __pfx___might_resched+0x10/0x10 [ 347.577257][T13021] should_fail_ex+0x414/0x560 [ 347.577284][T13021] should_failslab+0xa8/0x100 [ 347.577316][T13021] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 347.577344][T13021] ? __alloc_skb+0x112/0x2d0 [ 347.577369][T13021] __alloc_skb+0x112/0x2d0 [ 347.577392][T13021] netlink_sendmsg+0x5c6/0xb30 [ 347.577421][T13021] ? __pfx_netlink_sendmsg+0x10/0x10 [ 347.577444][T13021] ? aa_sock_msg_perm+0x94/0x160 [ 347.577467][T13021] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 347.577487][T13021] ? __pfx_netlink_sendmsg+0x10/0x10 [ 347.577507][T13021] __sock_sendmsg+0x219/0x270 [ 347.577537][T13021] ____sys_sendmsg+0x505/0x830 [ 347.577566][T13021] ? __pfx_____sys_sendmsg+0x10/0x10 [ 347.577603][T13021] ? import_iovec+0x74/0xa0 [ 347.577634][T13021] ___sys_sendmsg+0x21f/0x2a0 [ 347.577659][T13021] ? __pfx____sys_sendmsg+0x10/0x10 [ 347.577721][T13021] ? __fget_files+0x2a/0x420 [ 347.577737][T13021] ? __fget_files+0x3a0/0x420 [ 347.577766][T13021] __x64_sys_sendmsg+0x19b/0x260 [ 347.577792][T13021] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 347.577826][T13021] ? __pfx_ksys_write+0x10/0x10 [ 347.577858][T13021] ? rcu_is_watching+0x15/0xb0 [ 347.577897][T13021] ? do_syscall_64+0xbe/0x3b0 [ 347.577919][T13021] do_syscall_64+0xfa/0x3b0 [ 347.577934][T13021] ? lockdep_hardirqs_on+0x9c/0x150 [ 347.577961][T13021] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.577979][T13021] ? clear_bhb_loop+0x60/0xb0 [ 347.578020][T13021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.578038][T13021] RIP: 0033:0x7f29e8b8e9a9 [ 347.578055][T13021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 347.578073][T13021] RSP: 002b:00007f29e9a30038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 347.578094][T13021] RAX: ffffffffffffffda RBX: 00007f29e8db5fa0 RCX: 00007f29e8b8e9a9 [ 347.578109][T13021] RDX: 0000000004000004 RSI: 0000200000000280 RDI: 0000000000000003 [ 347.578121][T13021] RBP: 00007f29e9a30090 R08: 0000000000000000 R09: 0000000000000000 [ 347.578133][T13021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 347.578145][T13021] R13: 0000000000000000 R14: 00007f29e8db5fa0 R15: 00007ffcae8218d8 [ 347.578175][T13021] [ 347.581593][T13019] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2077'. [ 347.970097][T13028] netlink: 'syz.6.2080': attribute type 1 has an invalid length. [ 348.037812][T13031] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2079'. [ 348.190652][T13036] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2082'. [ 348.910411][T13058] tap0: tun_chr_ioctl cmd 1074025677 [ 348.930608][T13058] tap0: linktype set to 0 [ 349.183954][T13064] lo speed is unknown, defaulting to 1000 [ 349.372426][T13066] tipc: Enabled bearer , priority 0 [ 349.382443][T13066] syzkaller0: entered promiscuous mode [ 349.399256][T13066] syzkaller0: entered allmulticast mode [ 349.410857][T13070] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 349.461323][T13065] tipc: Resetting bearer [ 349.499925][T13065] tipc: Disabling bearer [ 349.692337][T13076] Cannot find set identified by id 0 to match [ 350.329267][T13079] lo speed is unknown, defaulting to 1000 [ 351.008510][T13089] lo speed is unknown, defaulting to 1000 [ 351.042845][T13064] vxcan1 speed is unknown, defaulting to 1000 [ 351.217547][T13105] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2103'. [ 351.732710][T13119] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2107'. [ 351.749037][T13120] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 351.759413][T13119] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2107'. [ 351.774440][T13119] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2107'. [ 351.814045][T13119] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2107'. [ 351.823262][T13079] vxcan1 speed is unknown, defaulting to 1000 [ 352.262648][T13128] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2109'. [ 352.292431][T13128] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2109'. [ 352.341512][T13128] netlink: 'syz.7.2109': attribute type 1 has an invalid length. [ 352.363755][T13128] netlink: 10 bytes leftover after parsing attributes in process `syz.7.2109'. [ 352.418466][T13131] sch_tbf: burst 1 is lower than device ip6tnl0 mtu (1452) ! [ 352.441951][T13128] nbd: socks must be embedded in a SOCK_ITEM attr [ 352.467375][T13128] block nbd1: shutting down sockets [ 352.896028][T13089] vxcan1 speed is unknown, defaulting to 1000 [ 352.960171][T13155] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2115'. [ 353.750283][T13176] FAULT_INJECTION: forcing a failure. [ 353.750283][T13176] name failslab, interval 1, probability 0, space 0, times 0 [ 353.763170][T13176] CPU: 0 UID: 0 PID: 13176 Comm: syz.6.2124 Not tainted 6.16.0-rc6-syzkaller-01576-g4701ee5044fb #0 PREEMPT(full) [ 353.763198][T13176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 353.763210][T13176] Call Trace: [ 353.763219][T13176] [ 353.763227][T13176] dump_stack_lvl+0x189/0x250 [ 353.763256][T13176] ? __pfx____ratelimit+0x10/0x10 [ 353.763288][T13176] ? __pfx_dump_stack_lvl+0x10/0x10 [ 353.763318][T13176] ? __pfx__printk+0x10/0x10 [ 353.763348][T13176] ? __lock_acquire+0xab9/0xd20 [ 353.763380][T13176] should_fail_ex+0x414/0x560 [ 353.763406][T13176] should_failslab+0xa8/0x100 [ 353.763438][T13176] __kmalloc_cache_noprof+0x70/0x3d0 [ 353.763466][T13176] ? nfulnl_recv_config+0xb62/0x1290 [ 353.763502][T13176] nfulnl_recv_config+0xb62/0x1290 [ 353.763544][T13176] nfnetlink_rcv_msg+0xb4d/0x1130 [ 353.763571][T13176] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 353.763636][T13176] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 353.763661][T13176] ? kasan_save_free_info+0x46/0x50 [ 353.763741][T13176] netlink_rcv_skb+0x208/0x470 [ 353.763775][T13176] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 353.763805][T13176] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 353.763851][T13176] ? bpf_lsm_capable+0x9/0x20 [ 353.763878][T13176] ? security_capable+0x7e/0x2e0 [ 353.763909][T13176] nfnetlink_rcv+0x26a/0x2520 [ 353.763940][T13176] ? __dev_queue_xmit+0x1d79/0x3b50 [ 353.763979][T13176] ? __dev_queue_xmit+0x27b/0x3b50 [ 353.764020][T13176] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 353.764047][T13176] ? __pfx___dev_queue_xmit+0x10/0x10 [ 353.764089][T13176] ? ref_tracker_free+0x63a/0x7d0 [ 353.764113][T13176] ? __asan_memcpy+0x40/0x70 [ 353.764136][T13176] ? __pfx_ref_tracker_free+0x10/0x10 [ 353.764179][T13176] ? skb_clone+0x246/0x3a0 [ 353.764208][T13176] ? __netlink_deliver_tap+0x807/0x850 [ 353.764227][T13176] ? netlink_deliver_tap+0x2e/0x1b0 [ 353.764254][T13176] ? netlink_deliver_tap+0x2e/0x1b0 [ 353.764284][T13176] netlink_unicast+0x82c/0x9e0 [ 353.764330][T13176] ? __pfx_netlink_unicast+0x10/0x10 [ 353.764362][T13176] ? netlink_sendmsg+0x642/0xb30 [ 353.764379][T13176] ? skb_put+0x11b/0x210 [ 353.764405][T13176] netlink_sendmsg+0x805/0xb30 [ 353.764436][T13176] ? __pfx_netlink_sendmsg+0x10/0x10 [ 353.764461][T13176] ? aa_sock_msg_perm+0x94/0x160 [ 353.764485][T13176] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 353.764506][T13176] ? __pfx_netlink_sendmsg+0x10/0x10 [ 353.764528][T13176] __sock_sendmsg+0x219/0x270 [ 353.764560][T13176] ____sys_sendmsg+0x505/0x830 [ 353.764591][T13176] ? __pfx_____sys_sendmsg+0x10/0x10 [ 353.764626][T13176] ? import_iovec+0x74/0xa0 [ 353.764659][T13176] ___sys_sendmsg+0x21f/0x2a0 [ 353.764686][T13176] ? __pfx____sys_sendmsg+0x10/0x10 [ 353.764764][T13176] ? __fget_files+0x2a/0x420 [ 353.764781][T13176] ? __fget_files+0x3a0/0x420 [ 353.764811][T13176] __x64_sys_sendmsg+0x19b/0x260 [ 353.764837][T13176] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 353.764872][T13176] ? __pfx_ksys_write+0x10/0x10 [ 353.764895][T13176] ? rcu_is_watching+0x15/0xb0 [ 353.764924][T13176] ? do_syscall_64+0xbe/0x3b0 [ 353.764948][T13176] do_syscall_64+0xfa/0x3b0 [ 353.764965][T13176] ? lockdep_hardirqs_on+0x9c/0x150 [ 353.765004][T13176] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.765022][T13176] ? clear_bhb_loop+0x60/0xb0 [ 353.765046][T13176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.765064][T13176] RIP: 0033:0x7f988118e9a9 [ 353.765080][T13176] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 353.765096][T13176] RSP: 002b:00007f9882061038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 353.765115][T13176] RAX: ffffffffffffffda RBX: 00007f98813b5fa0 RCX: 00007f988118e9a9 [ 353.765129][T13176] RDX: 0000000004000004 RSI: 0000200000000280 RDI: 0000000000000003 [ 353.765141][T13176] RBP: 00007f9882061090 R08: 0000000000000000 R09: 0000000000000000 [ 353.765153][T13176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 353.765164][T13176] R13: 0000000000000000 R14: 00007f98813b5fa0 R15: 00007fffe5bd4e18 [ 353.765194][T13176] [ 354.508658][T13179] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.572253][T13186] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2127'. [ 354.859945][T13179] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.129937][T13179] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.636593][T13179] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.768112][T13199] ipvlan2: entered promiscuous mode [ 355.780935][T13199] netlink: 'syz.1.2132': attribute type 4 has an invalid length. [ 355.863680][T13203] netlink: 'syz.1.2132': attribute type 4 has an invalid length. [ 355.980636][ T1137] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.155288][ T36] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.265329][T13179] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.428487][T13179] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.488329][T13215] __nla_validate_parse: 2 callbacks suppressed [ 356.488351][T13215] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2136'. [ 356.951965][T13223] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 357.562445][T13240] netlink: 'syz.2.2144': attribute type 11 has an invalid length. [ 357.780476][T13244] netlink: 108 bytes leftover after parsing attributes in process `syz.5.2148'. [ 357.887002][T13248] pim6reg1: entered promiscuous mode [ 357.907476][T13248] pim6reg1: entered allmulticast mode [ 358.057489][T13248] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2150'. [ 358.137810][T13248] 8021q: adding VLAN 0 to HW filter on device bond4 [ 358.150192][T13248] team0: Port device bond4 added [ 358.257357][T13270] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2155'. [ 358.608781][T13292] IPVS: set_ctl: invalid protocol: 115 10.1.1.0:20002 [ 358.867875][T13302] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2168'. [ 359.314700][T13320] netlink: 240 bytes leftover after parsing attributes in process `syz.6.2174'. [ 359.673143][T13330] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 360.218034][ T30] audit: type=1804 audit(1752968146.885:4): pid=13350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.2185" name="/newroot/96/cgroup.controllers" dev="tmpfs" ino=504 res=1 errno=0 [ 360.268036][ T30] audit: type=1800 audit(1752968146.885:5): pid=13350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2185" name="cgroup.controllers" dev="tmpfs" ino=504 res=0 errno=0 [ 360.290523][ T30] audit: type=1800 audit(1752968146.895:6): pid=13350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2185" name="cgroup.controllers" dev="tmpfs" ino=504 res=0 errno=0 [ 360.468092][T13363] veth0_vlan: entered allmulticast mode [ 360.580736][T13368] ªªªªªª: renamed from vlan0 [ 360.790150][T13373] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2191'. [ 361.673830][T13404] netlink: 212924 bytes leftover after parsing attributes in process `syz.7.2203'. [ 361.697575][T13404] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2203'. [ 361.765886][T13406] netlink: 'syz.6.2204': attribute type 8 has an invalid length. [ 362.027720][T13416] bridge_slave_0: left allmulticast mode [ 362.040761][T13416] bridge_slave_0: left promiscuous mode [ 362.079455][T13416] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.101019][T13416] bridge_slave_1: left allmulticast mode [ 362.118892][T13416] bridge_slave_1: left promiscuous mode [ 362.128577][T13416] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.159730][T13416] bond0: (slave bond_slave_0): Releasing backup interface [ 362.188425][T13419] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 362.240200][T13416] bond0: (slave bond_slave_1): Releasing backup interface [ 362.355464][T13416] team0: Port device team_slave_0 removed [ 362.415819][T13416] team0: Port device team_slave_1 removed [ 362.434455][T13416] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 362.469855][T13416] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 362.477487][T13416] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 362.489374][T13437] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2210'. Connection to 10.128.1.233 closed by remote host. [ 363.225262][ T6005] ================================================================== [ 363.233374][ T6005] BUG: KASAN: slab-use-after-free in __mutex_lock+0x738/0xe80 [ 363.240842][ T6005] Read of size 8 at addr ffff88807b69ab20 by task kworker/1:6/6005 [ 363.248740][ T6005] [ 363.251073][ T6005] CPU: 1 UID: 0 PID: 6005 Comm: kworker/1:6 Not tainted 6.16.0-rc6-syzkaller-01576-g4701ee5044fb #0 PREEMPT(full) [ 363.251093][ T6005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 363.251104][ T6005] Workqueue: events l2cap_chan_timeout [ 363.251127][ T6005] Call Trace: [ 363.251133][ T6005] [ 363.251140][ T6005] dump_stack_lvl+0x189/0x250 [ 363.251159][ T6005] ? __kasan_check_byte+0x12/0x40 [ 363.251181][ T6005] ? __pfx_dump_stack_lvl+0x10/0x10 [ 363.251199][ T6005] ? lock_release+0x4b/0x3e0 [ 363.251216][ T6005] ? __virt_addr_valid+0x4a5/0x5c0 [ 363.251237][ T6005] print_report+0xca/0x230 [ 363.251250][ T6005] ? __mutex_lock+0x738/0xe80 [ 363.251263][ T6005] kasan_report+0x118/0x150 [ 363.251303][ T6005] ? __mutex_lock+0x738/0xe80 [ 363.251321][ T6005] __mutex_lock+0x738/0xe80 [ 363.251336][ T6005] ? __mutex_lock+0x51b/0xe80 [ 363.251354][ T6005] ? l2cap_chan_timeout+0x63/0x390 [ 363.251391][ T6005] ? __pfx___mutex_lock+0x10/0x10 [ 363.251406][ T6005] ? process_scheduled_works+0x9ef/0x17b0 [ 363.251450][ T6005] ? lock_acquire+0x175/0x360 [ 363.251475][ T6005] l2cap_chan_timeout+0x63/0x390 [ 363.251498][ T6005] ? process_scheduled_works+0x9ef/0x17b0 [ 363.251521][ T6005] process_scheduled_works+0xae1/0x17b0 [ 363.251560][ T6005] ? __pfx_process_scheduled_works+0x10/0x10 [ 363.251592][ T6005] worker_thread+0x8a0/0xda0 [ 363.251630][ T6005] kthread+0x70e/0x8a0 [ 363.251659][ T6005] ? __pfx_worker_thread+0x10/0x10 [ 363.251682][ T6005] ? __pfx_kthread+0x10/0x10 [ 363.251711][ T6005] ? _raw_spin_unlock_irq+0x23/0x50 [ 363.251738][ T6005] ? lockdep_hardirqs_on+0x9c/0x150 [ 363.251767][ T6005] ? __pfx_kthread+0x10/0x10 [ 363.251795][ T6005] ret_from_fork+0x3fc/0x770 [ 363.251824][ T6005] ? __pfx_ret_from_fork+0x10/0x10 [ 363.251848][ T6005] ? __switch_to_asm+0x39/0x70 [ 363.251873][ T6005] ? __switch_to_asm+0x33/0x70 [ 363.251898][ T6005] ? __pfx_kthread+0x10/0x10 [ 363.251926][ T6005] ret_from_fork_asm+0x1a/0x30 [ 363.251962][ T6005] [ 363.251969][ T6005] [ 363.447212][ T6005] Allocated by task 12433: [ 363.451630][ T6005] kasan_save_track+0x3e/0x80 [ 363.456323][ T6005] __kasan_kmalloc+0x93/0xb0 [ 363.460916][ T6005] __kmalloc_cache_noprof+0x230/0x3d0 [ 363.466294][ T6005] l2cap_conn_add+0xaa/0x8d0 [ 363.470886][ T6005] l2cap_chan_connect+0x6c8/0xe30 [ 363.475921][ T6005] l2cap_sock_connect+0x5c8/0x7a0 [ 363.480940][ T6005] kernel_connect+0x116/0x180 [ 363.485617][ T6005] rfcomm_dlc_open+0x8fe/0xed0 [ 363.490378][ T6005] rfcomm_sock_connect+0x2f7/0x610 [ 363.495487][ T6005] __sys_connect+0x313/0x440 [ 363.500095][ T6005] __x64_sys_connect+0x7a/0x90 [ 363.504863][ T6005] do_syscall_64+0xfa/0x3b0 [ 363.509414][ T6005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.515306][ T6005] [ 363.517630][ T6005] Freed by task 12117: [ 363.521693][ T6005] kasan_save_track+0x3e/0x80 [ 363.526388][ T6005] kasan_save_free_info+0x46/0x50 [ 363.531421][ T6005] __kasan_slab_free+0x62/0x70 [ 363.536196][ T6005] kfree+0x18e/0x440 [ 363.540091][ T6005] hci_conn_hash_flush+0x10a/0x230 [ 363.545202][ T6005] hci_dev_close_sync+0xaef/0x1330 [ 363.550339][ T6005] hci_unregister_dev+0x21a/0x510 [ 363.555377][ T6005] vhci_release+0x80/0xd0 [ 363.559718][ T6005] __fput+0x44c/0xa70 [ 363.563709][ T6005] task_work_run+0x1d1/0x260 [ 363.568317][ T6005] do_exit+0x6b5/0x22e0 [ 363.572521][ T6005] do_group_exit+0x21c/0x2d0 [ 363.577132][ T6005] __x64_sys_exit_group+0x3f/0x40 [ 363.582163][ T6005] x64_sys_call+0x21ba/0x21c0 [ 363.586871][ T6005] do_syscall_64+0xfa/0x3b0 [ 363.591393][ T6005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.597291][ T6005] [ 363.599609][ T6005] The buggy address belongs to the object at ffff88807b69a800 [ 363.599609][ T6005] which belongs to the cache kmalloc-1k of size 1024 [ 363.613665][ T6005] The buggy address is located 800 bytes inside of [ 363.613665][ T6005] freed 1024-byte region [ffff88807b69a800, ffff88807b69ac00) [ 363.627558][ T6005] [ 363.629886][ T6005] The buggy address belongs to the physical page: [ 363.636311][ T6005] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7b698 [ 363.645070][ T6005] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 363.653573][ T6005] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 363.661139][ T6005] page_type: f5(slab) [ 363.665128][ T6005] raw: 00fff00000000040 ffff88801a441dc0 ffffea0000a08000 dead000000000002 [ 363.673743][ T6005] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 363.682341][ T6005] head: 00fff00000000040 ffff88801a441dc0 ffffea0000a08000 dead000000000002 [ 363.691007][ T6005] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 363.699784][ T6005] head: 00fff00000000003 ffffea0001eda601 00000000ffffffff 00000000ffffffff [ 363.708454][ T6005] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 363.717123][ T6005] page dumped because: kasan: bad access detected [ 363.723548][ T6005] page_owner tracks the page as allocated [ 363.729258][ T6005] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 3524, tgid 3524 (kworker/u8:9), ts 322594396300, free_ts 322563577196 [ 363.748711][ T6005] post_alloc_hook+0x240/0x2a0 [ 363.753535][ T6005] get_page_from_freelist+0x21e4/0x22c0 [ 363.759094][ T6005] __alloc_frozen_pages_noprof+0x181/0x370 [ 363.764903][ T6005] alloc_pages_mpol+0x232/0x4a0 [ 363.769776][ T6005] allocate_slab+0x8a/0x3b0 [ 363.774281][ T6005] ___slab_alloc+0xbfc/0x1480 [ 363.778968][ T6005] __kmalloc_noprof+0x305/0x4f0 [ 363.783834][ T6005] ieee802_11_parse_elems_full+0x152/0x2aa0 [ 363.789745][ T6005] ieee80211_inform_bss+0x10c/0x10a0 [ 363.795041][ T6005] cfg80211_inform_single_bss_data+0xd05/0x1ac0 [ 363.801293][ T6005] cfg80211_inform_bss_data+0x1fb/0x3b20 [ 363.807131][ T6005] cfg80211_inform_bss_frame_data+0x3d7/0x730 [ 363.813244][ T6005] ieee80211_bss_info_update+0x746/0x9e0 [ 363.818895][ T6005] ieee80211_ibss_rx_queued_mgmt+0xa36/0x2ae0 [ 363.824976][ T6005] ieee80211_iface_work+0x85f/0x12d0 [ 363.830298][ T6005] cfg80211_wiphy_work+0x2df/0x460 [ 363.835423][ T6005] page last free pid 5834 tgid 5834 stack trace: [ 363.841769][ T6005] __free_frozen_pages+0xc71/0xe70 [ 363.846902][ T6005] __folio_put+0x21b/0x2c0 [ 363.851337][ T6005] skb_release_data+0x49a/0x7c0 [ 363.856227][ T6005] skb_attempt_defer_free+0x422/0x5c0 [ 363.861607][ T6005] tcp_recvmsg_locked+0x249d/0x3660 [ 363.866836][ T6005] tcp_recvmsg+0x216/0x810 [ 363.871262][ T6005] inet_recvmsg+0x147/0x250 [ 363.875798][ T6005] sock_recvmsg+0x1a8/0x270 [ 363.880312][ T6005] sock_read_iter+0x231/0x2f0 [ 363.884998][ T6005] vfs_read+0x4cd/0x980 [ 363.889169][ T6005] ksys_read+0x145/0x250 [ 363.893409][ T6005] do_syscall_64+0xfa/0x3b0 [ 363.897907][ T6005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.903810][ T6005] [ 363.906130][ T6005] Memory state around the buggy address: [ 363.911764][ T6005] ffff88807b69aa00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 363.919876][ T6005] ffff88807b69aa80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 363.927941][ T6005] >ffff88807b69ab00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 363.935999][ T6005] ^ [ 363.941109][ T6005] ffff88807b69ab80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 363.949180][ T6005] ffff88807b69ac00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 363.957239][ T6005] ================================================================== [ 363.967528][ T6005] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 363.974761][ T6005] CPU: 1 UID: 0 PID: 6005 Comm: kworker/1:6 Not tainted 6.16.0-rc6-syzkaller-01576-g4701ee5044fb #0 PREEMPT(full) [ 363.986839][ T6005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 363.996902][ T6005] Workqueue: events l2cap_chan_timeout [ 364.002374][ T6005] Call Trace: [ 364.005654][ T6005] [ 364.008592][ T6005] dump_stack_lvl+0x99/0x250 [ 364.013201][ T6005] ? __asan_memcpy+0x40/0x70 [ 364.017790][ T6005] ? __pfx_dump_stack_lvl+0x10/0x10 [ 364.022998][ T6005] ? __pfx__printk+0x10/0x10 [ 364.027595][ T6005] panic+0x2db/0x790 [ 364.031496][ T6005] ? __pfx_panic+0x10/0x10 [ 364.035933][ T6005] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 364.041836][ T6005] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 364.047765][ T6005] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 364.054103][ T6005] ? print_memory_metadata+0x314/0x400 [ 364.059570][ T6005] ? __mutex_lock+0x738/0xe80 [ 364.064252][ T6005] check_panic_on_warn+0x89/0xb0 [ 364.069206][ T6005] ? __mutex_lock+0x738/0xe80 [ 364.073980][ T6005] end_report+0x78/0x160 [ 364.078254][ T6005] kasan_report+0x129/0x150 [ 364.082778][ T6005] ? __mutex_lock+0x738/0xe80 [ 364.087469][ T6005] __mutex_lock+0x738/0xe80 [ 364.092003][ T6005] ? __mutex_lock+0x51b/0xe80 [ 364.096705][ T6005] ? l2cap_chan_timeout+0x63/0x390 [ 364.101836][ T6005] ? __pfx___mutex_lock+0x10/0x10 [ 364.106879][ T6005] ? process_scheduled_works+0x9ef/0x17b0 [ 364.112613][ T6005] ? lock_acquire+0x175/0x360 [ 364.117302][ T6005] l2cap_chan_timeout+0x63/0x390 [ 364.122248][ T6005] ? process_scheduled_works+0x9ef/0x17b0 [ 364.127972][ T6005] process_scheduled_works+0xae1/0x17b0 [ 364.133536][ T6005] ? __pfx_process_scheduled_works+0x10/0x10 [ 364.139529][ T6005] worker_thread+0x8a0/0xda0 [ 364.144131][ T6005] kthread+0x70e/0x8a0 [ 364.148208][ T6005] ? __pfx_worker_thread+0x10/0x10 [ 364.153337][ T6005] ? __pfx_kthread+0x10/0x10 [ 364.157941][ T6005] ? _raw_spin_unlock_irq+0x23/0x50 [ 364.163161][ T6005] ? lockdep_hardirqs_on+0x9c/0x150 [ 364.168366][ T6005] ? __pfx_kthread+0x10/0x10 [ 364.172973][ T6005] ret_from_fork+0x3fc/0x770 [ 364.177560][ T6005] ? __pfx_ret_from_fork+0x10/0x10 [ 364.182672][ T6005] ? __switch_to_asm+0x39/0x70 [ 364.187484][ T6005] ? __switch_to_asm+0x33/0x70 [ 364.192259][ T6005] ? __pfx_kthread+0x10/0x10 [ 364.196856][ T6005] ret_from_fork_asm+0x1a/0x30 [ 364.201639][ T6005] [ 364.205087][ T6005] Kernel Offset: disabled [ 364.209407][ T6005] Rebooting in 86400 seconds..