last executing test programs: 2m37.766562235s ago: executing program 4 (id=277): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="02"], 0x10) socket$inet_sctp(0x2, 0x5, 0x84) socketpair(0x2, 0x1, 0x100, &(0x7f0000002b40)) 2m37.371551977s ago: executing program 4 (id=281): r0 = socket$inet_udplite(0x2, 0x2, 0x88) (async) r1 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00', 0x0}) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e44", 0x4}], 0x2}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/3, 0x3}, {&(0x7f0000000840)=""/76, 0x4c}], 0x2}, 0x40000000) r5 = socket$packet(0x11, 0x3, 0x300) socket$inet6_udp(0xa, 0x2, 0x0) (async) setsockopt$packet_add_memb(r5, 0x107, 0x18, &(0x7f0000000800)={r2, 0x1, 0x6}, 0x10) sendto$packet(r5, &(0x7f0000000040)="02030007ffff0000000045", 0xff4b, 0x4000050, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000000c0)={'tunl0\x00', &(0x7f00000006c0)={'tunl0\x00', r2, 0x10, 0x80, 0x80000000, 0x100, {{0x29, 0x4, 0x3, 0x33, 0xa4, 0x64, 0x6, 0x8, 0x29, 0x0, @local, @rand_addr=0x64010101, {[@ra={0x94, 0x4}, @cipso={0x86, 0x14, 0x1, [{0x1, 0x5, "f69650"}, {0xd5bdba18351fe4a4, 0x9, "fcf611b0840c87"}]}, @timestamp={0x44, 0x10, 0xd, 0x0, 0xd, [0x4, 0x6, 0xd]}, @lsrr={0x83, 0xf, 0x27, [@local, @local, @rand_addr=0x64010102]}, @ssrr={0x89, 0x7, 0x14, [@private=0xa010102]}, @timestamp_prespec={0x44, 0x34, 0x66, 0x3, 0x6, [{@loopback, 0x5}, {@private=0xa010100, 0x6}, {@broadcast, 0x40}, {@broadcast, 0xffffffff}, {@loopback, 0x9}, {@rand_addr=0x64010102, 0x338eb6b8}]}, @cipso={0x86, 0x6, 0x3}, @timestamp={0x44, 0x18, 0x85, 0x0, 0x2, [0xfac, 0x1, 0x1, 0x8, 0x3]}]}}}}}) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1eae8f721276f1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r7 = socket$phonet(0x23, 0x2, 0x1) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), r8) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r8}, 0x8) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x15, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020692500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000650000000600000085100000010000009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000012c0)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_GET_STATION(r8, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES64=r4, @ANYBLOB="01002ad3ed5a3cd6cfd68e00000008000300", @ANYRESHEX=r2], 0x28}, 0x1, 0x0, 0x0, 0x81}, 0x8880) 2m36.987871244s ago: executing program 4 (id=286): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {0x3, 0x3, 0x6, 0xa, 0x5, 0xfe00, 0xa1}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0xcc03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000080)=0x80000000) 2m24.440688819s ago: executing program 4 (id=286): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {0x3, 0x3, 0x6, 0xa, 0x5, 0xfe00, 0xa1}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0xcc03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000080)=0x80000000) 2m12.489857675s ago: executing program 4 (id=286): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {0x3, 0x3, 0x6, 0xa, 0x5, 0xfe00, 0xa1}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0xcc03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000080)=0x80000000) 2m7.376279458s ago: executing program 1 (id=534): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SIGNAL_INFO(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f2, 0x400, 0x70bd2a, 0x25dfdbfd, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x54090) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r1, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x18}, 0x8000007}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0x7d, &(0x7f0000000340)={0x8, 0x77, 0x6, 0x10, 0x39c1, 0x4, 0x4}, &(0x7f0000000840)=0x20) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0xf34) recvfrom$inet6(r1, &(0x7f00000004c0)=""/209, 0xd1, 0x100, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0) 2m7.221293853s ago: executing program 1 (id=535): r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @remote}, &(0x7f0000000080)=0x80) sendmsg$802154_dgram(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0002}}}, 0x14, &(0x7f00000001c0)={&(0x7f0000000100)="2b141b4aafc9527a22a02785823f6308e3d7aacb8c81963d8ad53dbd2fafb018a70076cd757bd2cd74f845dfc3f92d1fc819530152f7f2fa0db421a0984b9dadb0f303a9eaf42e431d3962045d092b91851ff984ed1bd913ec73595dbf0018a311a000a95382fc012fe43941f54d1fbd71ce91b70aac2d2a6b2898b6de73834dc5", 0x81}, 0x1, 0x0, 0x0, 0x50}, 0x80) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000240)={0x7, 0x4}, 0x2) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xa0, 0x9, 0x6, 0x0, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x3c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x3}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8001}, @IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_ETHER={0xa, 0x11, @remote}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000800}, 0x8080) listen(r1, 0xa000000) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xf, 0x80010, r0, 0x26117000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000440)={0x3, &(0x7f0000000400)=[{0xc, 0x9, 0x6, 0x6}, {0x0, 0x8, 0x7}, {0x5800, 0x6, 0xff, 0x3d7}]}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0x1, &(0x7f0000000480)="96f297ce48c2576fc9bf4457624bc45320fd2b2a63e882a8082b", &(0x7f00000004c0)=""/165}, 0x20) sendmsg$alg(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000005c0)="1d4e94acd277f3c05f46d6d934cb8d8d2cd0811c98f8d5618d9a857038ad309f", 0x20}, {&(0x7f0000000600)="9532a77f8daf7098bfbe62cc58371b4223fbccb8bdd598084ce7e1428bb714e6452a19b194a2cc1cae1cffeaeec14f9d6e357a147e4b13c804dc038efd7f773cc78eb51e7103c5dc1355b98555dd2e6fda88a2028305bf24ba428b54e15c3baa4bdd", 0x62}], 0x2, &(0x7f00000006c0)=[@op={0x18, 0x117, 0x3, 0x1}, @iv={0x40, 0x117, 0x2, 0x27, "af83522c730333f9815778c893539b6366f5bf572566375e8c46a3a6608a699f1d1da7307c88f5"}, @assoc={0x18}, @assoc={0x18, 0x117, 0x4, 0x6}, @op={0x18}], 0xa0, 0x40044}, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000880)={'batadv_slave_0\x00', 0x0}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000008c0)={0x0, @broadcast, @multicast1}, &(0x7f0000000900)=0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000940)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000a40)={'syztnl0\x00', &(0x7f0000000980)={'syztnl0\x00', 0x0, 0x20, 0x0, 0x101, 0x10000, {{0x1b, 0x4, 0x2, 0x9, 0x6c, 0x67, 0x0, 0x81, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}, @rand_addr=0x64010102, {[@end, @ssrr={0x89, 0x17, 0x12, [@multicast2, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @local]}, @timestamp_prespec={0x44, 0x24, 0xa5, 0x3, 0x5, [{@loopback, 0x2}, {@dev={0xac, 0x14, 0x14, 0x20}, 0x4}, {@multicast1, 0x4}, {@local, 0x5}]}, @timestamp_addr={0x44, 0x1c, 0x7, 0x1, 0x7, [{@dev={0xac, 0x14, 0x14, 0x19}, 0x3}, {@remote, 0x2}, {@multicast2, 0xd}]}]}}}}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f00000021c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002180)={&(0x7f0000000a80)={0x16c4, r2, 0x202, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x1150, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x80, 0x4, "d08e73fbcafc79fdf8afc69ab9a1446bf7c50c21c7afd8f2a153d2b440335e3f1caee7a67dc71cdb8b907b4123601b4f6097285e7a617262e28a5cc6f1d63e0ccd58fc9cc28f79a78cabe8a5ca68fe4b15dc33fc12bce00134f0ac8d1ded216c92bfbf31ae1e051fa1e029dade49f5318bff17e755fc838462a0b716"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x200}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xb3, 0x5, "e56a11996a92ef3cc72f11c002eafb6a2c2056d8b1e5ce728357307b5febe3a7a9ca55819f5bd44fe78193987298416cdd9f02b72b9bd3627da9e61cf45ec59cc84878cbcc4172876f904e2cdc431c6a35a213e866b9fc03609f293f0c1dba762d6fa083e70cf2d7a8e9c2ebb213cd8c400c7bb73473ba089fd8c5c279f4c34ed341a1d6adc9853df26a3abddd64cc279abb4c2011a0d2f2e662a2c991e69c3c97161587da3e57e9b35d6684171b18"}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x3c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x38, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xaa\xaa\xaa\xaa\xaa'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x45c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x42, 0x5, "d194b3f5415d44e46c5070f3585db75b60a698b2f01e392b0061ae857beb49a93ba4f4b7f97583b0a0897afb03e13d3e5ccf8fd1ea789759e87d46ae7163"}, @ETHTOOL_A_BITSET_VALUE={0xe5, 0x4, "761458bd9c433e7a30a19b62eab6509fa44552d391754d7a0542613998865c8ec1c1acd1e37d773c07d282d96000dd2524e120e357cd0e4eff78079a371fa6fc9e8d833196f10ac515626efe7f73655467d0ad94b2282ee461747fe2dc6e03baad9ddd02a22bb783c86675f8a5903b82d9793067af564aad077741f128d5ae1f2c36e2e7fceceae129b3aafb93e7e96e9a17527fe8889cb175b6974c8086d56f3309d5d00ce49e69244bf43d1a8f72c67200e59b00ec1ea5b8387cc143659edd5fd7453e687e09be9298b7db038f9d52af5777a201196ad968c6251c7193b9e033"}, @ETHTOOL_A_BITSET_VALUE={0x54, 0x4, "81878e13776af38a62c9b5a77054f76ab425530fd5d24f949c73127ecc32ef7ac63d46f35f18e645259fd38aadf150d6cba4def3a39c8712d2d9948a693a14fbdb87cd943b77eb5e3bb3c7a6ebed55b4"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x1c8, 0x3, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ',\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '%{-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4fdc}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xaa\xaa\xaa\xaa\xaa'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '}]\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xaa\xaa\xaa\xaa\xaa'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ',\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ']\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '^{#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '*\x00'}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '+\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xaa\xaa\xaa\xaa\xaa'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9a}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ':%+\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\\\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc}]}]}, @ETHTOOL_A_BITSET_BITS={0x10c, 0x3, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\\/\'\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\'}\'(\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz1\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '*[\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffc7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000001}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfb92}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xaa\xaa\xaa\xaa\xaa'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}]}, 0x16c4}, 0x1, 0x0, 0x0, 0x8040}, 0x20000000) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000002200)={0x0, 0x6, 0x9}, &(0x7f0000002240)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000002280)={r7, 0x10001}, 0x8) syz_emit_ethernet(0x11c, &(0x7f00000022c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv4={0x800, @igmp={{0x21, 0x4, 0x0, 0x9, 0x10e, 0x66, 0x0, 0xfc, 0x2, 0x0, @remote, @loopback, {[@noop, @generic={0x83, 0xd, "68a0f07446adb4b28f6fc9"}, @timestamp_addr={0x44, 0x24, 0x5d, 0x1, 0x5, [{@multicast1, 0x8}, {@private=0xa010101, 0x7}, {@dev={0xac, 0x14, 0x14, 0x3a}, 0x4}, {@remote, 0x5}]}, @lsrr={0x83, 0xf, 0xbb, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @remote]}, @timestamp={0x44, 0x24, 0x34, 0x0, 0x0, [0xe63, 0x2, 0x1, 0x5, 0xe, 0x6, 0x6, 0x8]}, @rr={0x7, 0xb, 0x5e, [@remote, @multicast2]}]}}, {0x16, 0x2b, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}, "341f25da1598b4b84c38f30ab77ea79a3f8975cd39784dd4d145a2cb95afe9737e571391e91f9cf56065ab6b0579a544f1c7e961830dc7250dcd3f95807dcc1861f60a56fd9a02c0d772374ed9de36ad9d388882d3d1d42bb3dd8625ba10f2bbd113d3a41d91ed957bf888891067170e70cdcbec11ca07951148911a2bf478da4f5d"}}}}}, &(0x7f0000002400)={0x1, 0x3, [0x662, 0xe4e, 0x49b, 0x60]}) r8 = ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000e, 0x50, r8, 0x2befe000) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) r9 = socket(0xf, 0x6, 0x3) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000002440)={r9, 0x0, 0x1, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000035c0)={r10, 0x0, 0xba, 0x23, &(0x7f0000002480)="5d907529b2826b3903e5cc566871b2195b61f4092e644a2f3e2b711ca8d822a23445dee6933f652c987030176ef45fcdeca5e9ddf496d268197b31af83772f09fa3fd76eb844713edb43818d83dc53e2802e0221ce7e5481070d3fc27980e92c265c9fd245282498cc7e16bf36ab3611c73131e33eb2c46e3f1459dbe5e328934d6b349db128ef354c42da91ecd828bc9b447464aa95ef0fbea89d1f3ecda7b645902579638b261d28345f1f50048162d2a304a369739d4e1cb5", &(0x7f0000002540)=""/35, 0x40, 0x0, 0x1000, 0x11, &(0x7f0000002580)="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", &(0x7f0000003580)="c05151b6a46bb0e7802c69ec89ad081582", 0x2, 0x0, 0x4}, 0x50) sendmmsg$alg(r9, &(0x7f0000007040)=[{0x0, 0x0, &(0x7f0000004980)=[{&(0x7f0000003640)="1ea7a1edcf887ad5f0f90096ccf8d235", 0x10}, {&(0x7f0000003680)="beef2115064122b35431174daad8cd0bf59630c3ed6bfb463c9e11e2b30c2ebada9c27fda6dc8bf77356bd59281ba6b7ade5c03bd2246d8743a18d2e53d2681eeea9e6c5a919d0e6ce0039265a7a9daf5417818bee29f4612a7fad3fef959cb3209e2257f3785ceaf49ce6e53a0fbdc634c5da98863ba5095ebcafc63be7908dcc6db36338cf728441e603471653acd6bef50d7688c387e912f6a5b40ae72b27b38b9e1be6d47a2943dec85654c4724e3718afdf1fa287959449a1fa26dc657e5887", 0xc2}, {&(0x7f0000003780)="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", 0x1000}, {&(0x7f0000004780)}, {&(0x7f00000047c0)="dbd6da372056f64b20052f346b9c1971740a06674f91a28e6d8471be93e0a29eda36a6ed974b6320efdae282a2bd3f629a8c8f949c0593cbde49e78423e6f44635d6e6318092577c2dab1bb1518939baad1938827922742d4ebaca4ab01c67610714cc01ae70af0cae59fc740277a8c323e8ca09f54a4fa834f529043b99a07a0bf252e5a38ad1247de2966a", 0x8c}, {&(0x7f0000004880)="b8526d4b468b1822d1e697d4a51904ea16ae35eb4b734412a647aeed864868c3c76b50748ff2188c96d766322962a2bb1a715cdb1ef2cb7e044dd6567fcef0c0657f8e0d4860eb9962dcff1a1ddcb6073dd51cf377e88c54a0376e394b33145f5328b6421b64f9bad3dd06f7686db1fe", 0x70}, {&(0x7f0000004900)="be1773ff9d2588976fa8d896071af125793d1590e9600a0e95f9538ff4ec81aef2b0c827ef5be3400b3f4f5e705b9e0fa725f0aa052627498af818fba8c44ccd0023910e8c23e7c42c6f7169e34429fc7a48189c31c8713c4a7719ccd47a2aa90debc859fdc822ad9c8bcf6f2c", 0x6d}], 0x7, &(0x7f0000004a00)=[@iv={0x80, 0x117, 0x2, 0x6a, "657dd84b96e70fd105fad799f9ec197fc0593adabf12e1b13994cc25b02c7a03cc21ea389c34e7c5462af8df418ad75a606c331a92cd888b55972f766da85a642bd1318fc9cab5b689ff4db482b5e1ba19856094a56b805841a7e3d3dfcb979a81890d83aae98026ab45"}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x5}, @assoc={0x18, 0x117, 0x4, 0x2}, @assoc={0x18, 0x117, 0x4, 0x5}], 0xe0, 0x40804}, {0x0, 0x0, &(0x7f0000004bc0)=[{&(0x7f0000004b00)="b11c29537e4134988ee49e76d3876f8d0ea8ae98b10550a4b3dec6cef43238108a5def333d5e01916009d7fb341600a857968fe8891084b210dbf45b95d868ec7018bea921b0c11ac0ae26792fd032183c8edfda058a98f65a61f5be1a03349a9e0ee852cda171b614333e498531115c7d6be76b4c936b2f6c710d077c2f77a0accd856db32d188acd10679563298d891e128c3783c24335c8a680c9a30be2ad0d5b484e95534e8570ff00d81118c403face8dba", 0xb4}], 0x1, &(0x7f0000004c00)=[@assoc={0x18, 0x117, 0x4, 0x3}, @assoc={0x18, 0x117, 0x4, 0xd}, @iv={0xa0, 0x117, 0x2, 0x8b, "3dcd2d5f4d23357f8cab2b0ac2ba55bea9a71af9bbb3d526c46e226ca607ef1915d11a96649822e45437ff7b6392b762bf3433b409d7bd75718fd2efbf586ed37f5b985e64812f6a35f8cd3db301b9b06b963a49fe10d2aea662588dacfc6e08841f947443465d027b99fb24c0cb33587bdd486746ad18288de935ac37c756c25bb7c7702f1d12d8f3cde5"}, @assoc={0x18, 0x117, 0x4, 0x4}, @iv={0xe0, 0x117, 0x2, 0xcc, "be9d9de6eee7a617d9b468717533718c617be7e494414a2b886ff360639ac445081fbff777e2d9836cc6caab58d3bb8dddcdab162354674bb1f4adb73d26318575d5b363644c1e97ab3673fcb032b59fabeaa9c61d53fa4a3f23b98be0ca685145792b811e048c5df896af688a70acecd23740284da3d8bc47ed8316739b0fd22836e61c21980c6b85449c79679f5be0aec6e06402a0c83b4357dea42300db17458e43daadbbae986bae7d2484eb4a8acae3804466d0d6bba4204e21398935e498ab1904e44bf012539e47a6"}, @iv={0xd8, 0x117, 0x2, 0xc4, "d7e22dd2ef9d4641e3e29a2fa75788abcbda29db5409ead42aa7444ee54e8745d071f0d1d334b76a01466b1ec069f2f655dc4f25c4188ca4e90f7e6adde4b1a6146b347025557bf64ec672666dc219e64f5330701a1da5cba71abbad5161f5facd1d0454d5f820397013554fda300ae497813862847f0fc580095b165d7858e6dfacee0584967d89ad77853cfd95a68c16956905adfbb8f2093291f05afc96de9c8f8efe5d927b81f74464e343d4b9dc1efad9b36f9fee50a641b4a0b02ffd681f39bd99"}], 0x2a0, 0x20040815}, {0x0, 0x0, &(0x7f00000064c0)=[{&(0x7f0000004ec0)="7c25269c610102913d416927c2b3bd9aeaf225abda5f06b69431bbe198909076fad40df3054fcc4cbd939502f8b40c69ae8ae98949bc29a3412f734bbfa841e94f8d3afbb1a583baf9da48ad4745c38959c19ed9f240c48b55ba5d7e8ff9115ae29d10381a497bebf0127c071fccb8d483fbc2e16ef2e1ae5b92998d7296b6a1f068e6ef05cd3f3d6214ca1d7d63e155e6a8dbab1235e8d154c79f4b3b784cf5f06ca60b2f76a824a57c49d5f36c3c956361dff7b130", 0xb6}, {&(0x7f0000004f80)="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", 0x1000}, {&(0x7f0000005f80)="555c506545024e6d9590bb2f9ae68b90373fbd810ee6649c76619b9588c67c3e3a0fc2b8c4cc8332c7b89f7000bf96a3b50dea31b24c6696d4ef066383d95715a6660ba7155d2bce05dbc2b64944db0eca640ac53297f0a7ea41936d212c51129800135cc12581a84947cd3d7c92b83b4d89d2bcb7dab627de3f5cd1dd4b1f7ab2c49534de35b41b8f1161cdc0910d928f9ec582df", 0x95}, {&(0x7f0000006040)="fda156747454a2ab10c30ab648ae866b26be65939257e40b", 0x18}, {&(0x7f0000006080)="1b886664695ffab85130ab2312f33691985965decef5fa352794822b710469c4270ef228a66877d63d664c6c250e619231d260fbab2e274433ed243f58919bbecc2fd6e99130c1885d54c5710065e888d2d8bbc2330d5a7c8dd797d7d1575df49366c32dfae7a9610e965524b8b512ff8bb3bd804f8084d1b7acd6b4514dbd9f34c5b0e4bfe6ca", 0x87}, {&(0x7f0000006140)="ff352152d4b33316af90693a19cbcc55c9e3ad5f40d9763f02fd30cdbab376bbf0e0e754cb16e06a682698f7026d43c4c8e7c2b6e6b681cbc989017b0d711bdca68e8673f9dfe970e2c9718ed865074d915e7e0dfe0209164f1f52c3e39cfa8396b3d38c62f0511d69c9853c5c40bc689458e35b13be6c7948fb9e4fd08e967cbc50522bf0f2ce43f304ee8ef1b7ab10fe54cd9aa13d40c7b196004513ba9c5ab0817d55a54649470f110c3613ec4e52ccd375abc837d566742227e050e9e6878c", 0xc1}, {&(0x7f0000006240)="4445ec77f5fec27508a263f97f06f1f935623f455b35dcac626553233848a5ac88f5493ecbd7b9066ae5212bf67392b8c844ad661cb69b33a000ebf3db3adc32c066f758fe5c71e4b1b4a63302210a8e94781615860cb0560fc93c3be75e3809b0a61f798e7092c188e94d5c47801727114c25c6cf059cf99397f509410721d2789e7a4e4ffc50b91b7e71da734a43945e2b9236d6799e61943be9e1a4a605e519", 0xa1}, {&(0x7f0000006300)="411e252e8699e63f5ea57e37962722e80e10b4c7d0ca61e9b9a6f1e36f6f8091fbf145e61d0e0a2935f79edcfdadaaa8f91be22debc295f73078079230d61b767ccc2612a6e07b2d6842111c1a27256427280ead8d8860a3f578e438b67f8084ece049e545e3", 0x66}, {&(0x7f0000006380)="973b7b295fcd52db5e5ebc2d5ad20e1d92f9278bcebca5232a2bd7e28af9d64ea94d0f70af043c66713f31dda74b6e971b82f44bfa170d61c7e4c278d3ed103334cc77f08c95ce428f8c336c0f096ba40386f3176751d2d8b9190ad29da0d312b8b696fd430de2a688573c23", 0x6c}, {&(0x7f0000006400)="8000362a279cffe3471e8520cb4b44ccbe9255df72ad642b330ee21b1aa23f710f949d1848914141c73fb3b72d6191b2c5510646be8fe51a6372ebdfe1fc55d61f46f9494e76928b0fa608b634138f2ad07c5dd799f03b4a1bfc6d525738eab1b7bb6a97bbe71d8c726ba9ba93f20f2656af86059439ec6b96cf8f09afa16412e13bce730c6b458e2dac646bee49f0f5fbd8d3f8f722f8c97f8b2f1a73db5f388ebec3", 0xa3}], 0xa, &(0x7f0000006580)=[@iv={0x70, 0x117, 0x2, 0x56, "c9ec4f74d96ad063ea2d9a65cb956d3b246f3f917ee5aa58ccfef355baf6134d72a7531d2bf918410cc64a2c21608c3089a735ac5e5b7a8674d610bcdc048acc050595d5d008887196fdbc5657acac07b5667c7026c0"}, @assoc={0x18, 0x117, 0x4, 0x40}, @iv={0xd0, 0x117, 0x2, 0xba, "5f8fc12144c2761613b8ff6ed4031b99e3522520b63e20079ac5154569066387a4f294cfc0d542921a2231915fa7c84d7795c381699c7811fe5ab6ecde08738af63373c82f589c57376d0b95733d6290aba09b4e2a1dd032f24ed676143f8a466bb688d0c9135dfcfb50c8c24d1ef30610cd3ef67cd3b3cd5b949fabad9f2e89bbfd16a395e1c3b75f73659b2f54549fe17434355033aa9becbb426777b4f3bbc4714c287e0494302c9ac1da17a09cdd39f7d71109d09b496a7d"}, @assoc={0x18, 0x117, 0x4, 0x8}, @assoc={0x18, 0x117, 0x4, 0x5}], 0x188}, {0x0, 0x0, &(0x7f0000006940)=[{&(0x7f0000006740)="7b1e1e3b5c2035db7eceee9026457dcaaca54d6c7a6fed18289dc7", 0x1b}, {&(0x7f0000006780)="ff6f8a2fdfe92bc232f0a8de251b6bbe888b12fcd0d7338c48076afc0f8269c8d5ee8f83e949f9906c686db25a91990704f985e264e37da5caf90ec77254d311b6a2db3749f314d85fa4d92b7a45190e3a99e231808267826860213caf30c89457faf9c0affce132560a49d2d99c8e6194a79556858015cc6be792f6db6387d1c184db3f72992987d02b0f3a22f29914985a048ee533b9c8fa9f882f9805d3a1532f91c703a0749ade12f86c0009b0a8c1dc2eba63faa797a848c57b0326f9c45433a3c1cff02917c9851330bc509bc455a8f7a4120886f48aca2130274ad07011965decd9e1ca6be6b8841f8c89bb", 0xef}, {&(0x7f0000006880)="60094bcba0c70f7fcc73cac7631e3d9fc27625d99c95e3c978612c85d6ef5df7124c85a9d67a360b5b79421048062454218038f447731ec6ec1454db815d1d8fe5a3d15cf14cae986286f46758e433255a1213ee8bb3522954894ee62ae3ce92a666044ef8aaae2fac629d1143d66491458f3935e8e4f28f21fb586895061f9f7cd27a0e", 0x84}], 0x3, &(0x7f0000006980)=[@op={0x18}, @iv={0xe8, 0x117, 0x2, 0xd0, "69abb1ef68d33bec2225b2fd75289d172a8a3ec7178cbe57910052cd3d15cba5f702ccdc5dc97c49643c0041965f8a8e31380552fad3e8630e6a95c33877bb3e3419904b0f9b43e6d36595adf575cf3a68722e083ba7b2e79398712db8a16487a3c7ebaa23d5c4ea069dd5fd82df701cbe358b7594dee00f7b9948d7ebfc207724d9b4a82d3fd5fd5fb2760fb782a586b454b632ea4ae8be61ce0d91582097c97498ae29bea0ad8c40dcf6c3ac8da577a59632ba9a2b5d932b713a00bdc39a7898ad03df2d7d27282c6751161bacd5ae"}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x70, 0x117, 0x2, 0x56, "0ed27d09d0cb61768d15676cc130eb5c8b317dc2306af4af22661c749ff80cc24e265182f45a87564b10946d0e9d34fbe99807d187de40f262d431dcefec6230bd7b98e64b4f658828824f43df31dd6ba0ec31092ab7"}, @op={0x18, 0x117, 0x3, 0x1}], 0x1a0, 0x10}, {0x0, 0x0, &(0x7f0000006d80)=[{&(0x7f0000006b40)="63d38b9e1161db062a78ca40", 0xc}, {&(0x7f0000006b80)="365315a8e5c731c278ddf7cdbb63c7cc39be8b31ac1e64ebd063723636dad12432a0ae86392bea2fbdf208e89a518794befda6df3daf50c5e81dc3dab69d087bd7d9297623a65b01146ed1928a5e2c1d7640c119aab6afb22a78ae710341941d9f3cd491701384061215184bfec3bc9ab81fd8a2f9ce80f58ca6f59f32187a39e9757057f0811a23404144dcf3a17200332166a5473025aa4736f5d050e3c60ff41f82f6c50aaedfe0f6d771e00cff1f4efada52f3c20dc14d906e48438daa66287fe2685ffe20", 0xc7}, {&(0x7f0000006c80)="8985377e32b55671e658662229869d1b0f925a8cdbbcafe0ab1862b73727d2c0ff66f954c6104a57015a6df68dd681c5bf6dca3186e06a760e847b07e49cc828502bc7b621d3de61de536ffd54ef1a09de4a9af878927231c0580e0ae7e13434a07378cd3a5bb364d8b3d833ffd293cb5d9dacd2c943d2f316362a4c4a93abbb825888ab12d8b6404c577f5f4e0de9a70642bf43ff90a41907acc4cd8c749d3115836e862004395e725f0604f264168eae6022e9c0dd12ddf88d4b260d55f3eb596cafe99b20c0", 0xc7}], 0x3, &(0x7f0000006dc0)=[@assoc={0x18, 0x117, 0x4, 0x8}], 0x18, 0x24000084}, {0x0, 0x0, &(0x7f0000006ec0)=[{&(0x7f0000006e00)="fd706c8699b6b5b060360b730c6812719dd09a98e7a7dd32213f34ea7af8c05f5e3a7f14084b8ae6ed5b98ecdb8ea52148545c08af336da796335421f42ae110645da61e266dc07fce7968122f4c30e4bb853105f9796776e19685e24414e6be4d25e068c1c11f19e81582d1c311e833983e0013d0c4b3844bed40524ac659e28144c7f8fb5a43a751ea18bea0d48ca482f8f2", 0x93}], 0x1, &(0x7f0000006f00)=[@iv={0x20, 0x117, 0x2, 0xc, "6029c640ada1cefe6dd6a6a5"}, @iv={0x60, 0x117, 0x2, 0x47, "8c2750be2385c351be73492bcbe8321fb022c6ebe075c1a5870f394f2f4bb4ca28b95cd810684c5e40ab53a5e7e4ab8bf134af561e7649b2aa7e7edab8bc363d9becf673b6c60f"}, @assoc={0x18, 0x117, 0x4, 0x9}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x5}, @iv={0x48, 0x117, 0x2, 0x2d, "281b10a85a2a26c9356748218b5766d52e3889b97089a1acb217cbdbdf1a2ad9da9824f5855f3b0c01109cda30"}], 0x128, 0x40040}], 0x6, 0x4044) r11 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r11, &(0x7f00000071c0)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f0000007200)={r9}) 2m7.201134286s ago: executing program 1 (id=537): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x2, 0xb, 0x2, 0x3, 0x2}, 0x10}}, 0x0) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) socket$inet_udp(0x2, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x2a, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x3d, &(0x7f0000000000)='cgroup\x00\x8d\f\xf3\xcd\xc6X$\x01n-Hg\x144-.\xe2\x053\xe2\xf4\xbf[\xe9\xdddU\x91\x9d,\t\x8d\xc3@\x86,\x7f\xe2Z\xe8L\x80\xdbe~c\xbc\x9b\xcf\x9b\x1cH\x95\xf3'}, 0x30) close(0xffffffffffffffff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r4, r5, 0x2, 0x2, 0x0, @void, @value}, 0x10) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup=r6, 0xffffffffffffffff, 0x2, 0x0, 0x4000, @void, @value}, 0x10) socket$inet6(0xa, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x4) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) socket$kcm(0x10, 0x2, 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000140)={{{@in=@local, @in6=@local, 0x4e20, 0x7, 0x4e24, 0x0, 0x2, 0x0, 0x40, 0x11, 0x0, 0xee01}, {0x2, 0x6, 0xc, 0xb, 0x977, 0x2, 0x8, 0x1ab1decd}, {0xa5, 0x2, 0x7f, 0x5}, 0x3, 0x6e6bb3, 0x2, 0x0, 0x2, 0x3}, {{@in6=@local, 0x4d4, 0x3c}, 0xa, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x8, 0x4, 0x3, 0x0, 0x6, 0xc, 0x5}}, 0xe8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x21, 0x2, 0x2) r7 = socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000540)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYBLOB="faa17e92f2af2b29894bedd077f1059a5cfd9c905f79b282b0b11f440f47571c96f516ac50c1c201271ca4fdc1dc11c9460e077ab165706bbf3b7ace515ba1d62d89630c77b8789fb694f130afe05add0ce79dd0abf2ea06b563d912b8356ac4c7d63edf79307a92a9bac4321e7f5a8eb484d4ebf2c2009e17316c82aeae8aa352bc9a0a032ac96b4a02a524b4d01a6c719608834b7d849f28e78e4e5d0e995e47bccf8771968cb78456cd22f432726e16c920c56555a1cdc7a0cc2b534056cf4bea4e2b99ecc335421722d48d05", @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000400000071108c000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)}, 0x0) 2m6.224109891s ago: executing program 1 (id=545): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448d4, &(0x7f0000000080)={0xfff8, 0x6, '|\x00|', 0x0, 0x40}) r2 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @private=0xa010501, 0x0, 0x0, 'none\x00'}, 0x2c) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r3 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000280)={{{@in=@loopback, @in6=@mcast2, 0x0, 0x2000, 0x0, 0x0, 0x2, 0x0, 0x100}, {0x0, 0x0, 0x0, 0x9, 0x40000000000005}, {0x0, 0x0, 0x3}, 0x801, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@empty, 0x0, 0x6c}, 0x2, @in6=@private0, 0x0, 0x1, 0x3, 0x0, 0x9075}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 2m5.802466858s ago: executing program 1 (id=551): r0 = socket$netlink(0x10, 0x3, 0x7) bind$netlink(r0, &(0x7f00000003c0)={0x10, 0x0, 0x1, 0x2ffffffff}, 0xc) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x3c}, 0x1, 0xba01, 0x0, 0x60000800}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000640)=0x17fd, 0x4) (async, rerun: 64) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000006f80)=ANY=[@ANYBLOB="a03700002d00010026bd7000fcdbdf250400000005000b00", @ANYRES32, @ANYBLOB="81120c"], 0x37a0}, 0x1, 0x0, 0x0, 0x4000d}, 0x40) (async, rerun: 64) r3 = epoll_create1(0x80000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000100)) (async, rerun: 64) r5 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000180)={0x2000200a}) (async) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f0000000140)={0x2000200b}) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000840)=@newqdisc={0xb8, 0x24, 0x20, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0xb}, {0xf, 0x1}, {0xd, 0xfff1}}, [@TCA_STAB={0x84, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x5, 0x9, 0x6, 0x1, 0x800, 0xce6, 0x3}}, {0xa, 0x2, [0x5d81, 0x4, 0x2]}}, {{0x1c, 0x1, {0x8, 0x2, 0x4, 0x3, 0x1, 0x5, 0x8, 0x7}}, {0x12, 0x2, [0x8, 0x400, 0x6, 0xe28, 0x6, 0x657, 0x0]}}, {{0x1c, 0x1, {0x85, 0x9, 0xfff, 0x800, 0x0, 0x2, 0x4, 0x4}}, {0xc, 0x2, [0x4, 0x5, 0x7, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xd}]}, 0xb8}}, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r8, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) (async) r9 = socket$tipc(0x1e, 0x5, 0x0) (async, rerun: 32) r10 = socket$key(0xf, 0x3, 0x2) (rerun: 32) recvmmsg(r10, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) (async) setsockopt$SO_TIMESTAMPING(r10, 0x1, 0x25, &(0x7f0000000600)=0x7a1e, 0x4) (async) sendmsg$key(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="0208000002"], 0x10}}, 0x0) (async, rerun: 32) sendmsg$tipc(r9, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000040)="e0", 0x1}], 0x1, 0x0, 0x0, 0x801}, 0x4000045) (rerun: 32) recvmsg(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000038c0)=[{&(0x7f00000002c0)=""/229, 0xe5}], 0x1}, 0x40000000) 1m54.265085911s ago: executing program 4 (id=286): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {0x3, 0x3, 0x6, 0xa, 0x5, 0xfe00, 0xa1}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0xcc03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000080)=0x80000000) 1m53.940974791s ago: executing program 32 (id=286): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {0x3, 0x3, 0x6, 0xa, 0x5, 0xfe00, 0xa1}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0xcc03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000080)=0x80000000) 1m53.910677506s ago: executing program 1 (id=551): r0 = socket$netlink(0x10, 0x3, 0x7) bind$netlink(r0, &(0x7f00000003c0)={0x10, 0x0, 0x1, 0x2ffffffff}, 0xc) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x3c}, 0x1, 0xba01, 0x0, 0x60000800}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000640)=0x17fd, 0x4) (async, rerun: 64) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000006f80)=ANY=[@ANYBLOB="a03700002d00010026bd7000fcdbdf250400000005000b00", @ANYRES32, @ANYBLOB="81120c"], 0x37a0}, 0x1, 0x0, 0x0, 0x4000d}, 0x40) (async, rerun: 64) r3 = epoll_create1(0x80000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000100)) (async, rerun: 64) r5 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000180)={0x2000200a}) (async) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f0000000140)={0x2000200b}) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000840)=@newqdisc={0xb8, 0x24, 0x20, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0xb}, {0xf, 0x1}, {0xd, 0xfff1}}, [@TCA_STAB={0x84, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x5, 0x9, 0x6, 0x1, 0x800, 0xce6, 0x3}}, {0xa, 0x2, [0x5d81, 0x4, 0x2]}}, {{0x1c, 0x1, {0x8, 0x2, 0x4, 0x3, 0x1, 0x5, 0x8, 0x7}}, {0x12, 0x2, [0x8, 0x400, 0x6, 0xe28, 0x6, 0x657, 0x0]}}, {{0x1c, 0x1, {0x85, 0x9, 0xfff, 0x800, 0x0, 0x2, 0x4, 0x4}}, {0xc, 0x2, [0x4, 0x5, 0x7, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xd}]}, 0xb8}}, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r8, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) (async) r9 = socket$tipc(0x1e, 0x5, 0x0) (async, rerun: 32) r10 = socket$key(0xf, 0x3, 0x2) (rerun: 32) recvmmsg(r10, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) (async) setsockopt$SO_TIMESTAMPING(r10, 0x1, 0x25, &(0x7f0000000600)=0x7a1e, 0x4) (async) sendmsg$key(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="0208000002"], 0x10}}, 0x0) (async, rerun: 32) sendmsg$tipc(r9, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000040)="e0", 0x1}], 0x1, 0x0, 0x0, 0x801}, 0x4000045) (rerun: 32) recvmsg(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000038c0)=[{&(0x7f00000002c0)=""/229, 0xe5}], 0x1}, 0x40000000) 1m53.401525406s ago: executing program 33 (id=551): r0 = socket$netlink(0x10, 0x3, 0x7) bind$netlink(r0, &(0x7f00000003c0)={0x10, 0x0, 0x1, 0x2ffffffff}, 0xc) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x3c}, 0x1, 0xba01, 0x0, 0x60000800}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000640)=0x17fd, 0x4) (async, rerun: 64) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000006f80)=ANY=[@ANYBLOB="a03700002d00010026bd7000fcdbdf250400000005000b00", @ANYRES32, @ANYBLOB="81120c"], 0x37a0}, 0x1, 0x0, 0x0, 0x4000d}, 0x40) (async, rerun: 64) r3 = epoll_create1(0x80000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000100)) (async, rerun: 64) r5 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000180)={0x2000200a}) (async) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f0000000140)={0x2000200b}) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000840)=@newqdisc={0xb8, 0x24, 0x20, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0xb}, {0xf, 0x1}, {0xd, 0xfff1}}, [@TCA_STAB={0x84, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x5, 0x9, 0x6, 0x1, 0x800, 0xce6, 0x3}}, {0xa, 0x2, [0x5d81, 0x4, 0x2]}}, {{0x1c, 0x1, {0x8, 0x2, 0x4, 0x3, 0x1, 0x5, 0x8, 0x7}}, {0x12, 0x2, [0x8, 0x400, 0x6, 0xe28, 0x6, 0x657, 0x0]}}, {{0x1c, 0x1, {0x85, 0x9, 0xfff, 0x800, 0x0, 0x2, 0x4, 0x4}}, {0xc, 0x2, [0x4, 0x5, 0x7, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xd}]}, 0xb8}}, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r8, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) (async) r9 = socket$tipc(0x1e, 0x5, 0x0) (async, rerun: 32) r10 = socket$key(0xf, 0x3, 0x2) (rerun: 32) recvmmsg(r10, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) (async) setsockopt$SO_TIMESTAMPING(r10, 0x1, 0x25, &(0x7f0000000600)=0x7a1e, 0x4) (async) sendmsg$key(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="0208000002"], 0x10}}, 0x0) (async, rerun: 32) sendmsg$tipc(r9, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000040)="e0", 0x1}], 0x1, 0x0, 0x0, 0x801}, 0x4000045) (rerun: 32) recvmsg(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000038c0)=[{&(0x7f00000002c0)=""/229, 0xe5}], 0x1}, 0x40000000) 1m3.554198914s ago: executing program 3 (id=585): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000700000061114c000000000085000000cf00000095"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, &(0x7f0000000440)) 51.013075186s ago: executing program 3 (id=585): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000700000061114c000000000085000000cf00000095"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, &(0x7f0000000440)) 38.186091186s ago: executing program 3 (id=585): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000700000061114c000000000085000000cf00000095"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, &(0x7f0000000440)) 27.809327324s ago: executing program 3 (id=585): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000700000061114c000000000085000000cf00000095"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, &(0x7f0000000440)) 15.967199909s ago: executing program 3 (id=585): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000700000061114c000000000085000000cf00000095"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, &(0x7f0000000440)) 4.598816335s ago: executing program 6 (id=1366): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6, 0xe, 0x0, 0x800}]}, 0x10) sendmmsg$unix(r0, &(0x7f0000001640)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}], 0x1, 0x20000000) 4.563148617s ago: executing program 5 (id=1367): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0xc251}, {{0x0, 0x0, &(0x7f0000000180)=[{0x0}, {&(0x7f0000000340)=""/97, 0x61}, {&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000140)=""/47, 0x2f}], 0x4}, 0x44f}, {{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4096, 0x1000}], 0x1}, 0x8000}], 0x3, 0x10002, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r1) sendmsg$IEEE802154_START_REQ(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="34000000d9474770e8596a5c7265815d3bee513f8c421c0bcd56cc82", @ANYRES16=r2, @ANYBLOB="010000000000000000000d000000050007001200000005001800010000000600080000000000050017000000000006000a00ffff0000"], 0x3c}, 0x1, 0x0, 0x0, 0x18000}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@empty, 0x1ff, 0x0, 0x0, 0x3, 0x4, 0x3}, 0x20) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000900)={'wlan1\x00', &(0x7f0000000280)=@ethtool_cmd={0x19, 0x3, 0x12, 0x5, 0x99, 0x5, 0x10, 0x9, 0x3, 0x4, 0xa, 0x3, 0x3, 0x6, 0x1, 0x8000007, [0x5b, 0x6]}}) 4.493946838s ago: executing program 6 (id=1368): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r3, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000500)={r4, r2, 0x4, r2}, 0x10) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x7, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x7fffffff}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x5}, @alu={0x0, 0x23d4de2617a2705e, 0x4, 0x4, 0x4, 0xfffffffffffffff0}]}, &(0x7f0000000040)='syzkaller\x00', 0x2a, 0x58, &(0x7f0000000080)=""/88, 0x41000, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000140)={0x4, 0x9, 0xb08, 0x8000}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r0, r1, r0], &(0x7f00000001c0)=[{0x1, 0x4, 0x8, 0xa}, {0x2, 0x1, 0xc, 0xc}, {0x3, 0x5, 0xa, 0x3}, {0x3, 0x4, 0x1, 0x2}, {0x0, 0x4, 0x5, 0xb}, {0x1, 0x2, 0xf, 0xa}, {0x3, 0x4, 0xb, 0x1}], 0x10, 0x4, @void, @value}, 0x94) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000380)='./file0\x00', 0x0, 0x1c}, 0x18) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000400)={r4, r5, 0x4, r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000bf020000000000007b9af8ff00000000b609080089ffffff7baaf0ff00000000bf8700000000000007090000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004600020076004000bf980000000000007e080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 4.387669747s ago: executing program 6 (id=1370): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c4000000190001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d54900000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000c001500000070c451"], 0xc4}}, 0x0) (async, rerun: 64) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x12, 0x0, &(0x7f0000000300)="259a53f271a76d2688ca4c6588a8588a3c71", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 4.030933277s ago: executing program 6 (id=1375): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c00)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYBLOB="fe88"], 0x48}}, 0x0) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000380)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x9, 0xffff, 0x0, 0x0, 0x55, 0xb66e, 0x7c}, 0x9c) 3.993592812s ago: executing program 3 (id=585): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000700000061114c000000000085000000cf00000095"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, &(0x7f0000000440)) 2.617512182s ago: executing program 0 (id=1376): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x14, 0x2f, 0x9, 0x70bd27, 0x0, {0x6}}, 0x14}}, 0x84) (async) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x14, 0x2f, 0x9, 0x70bd27, 0x0, {0x6}}, 0x14}}, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="9a", 0x1}], 0x1}}, {{&(0x7f00000001c0)={0x2, 0xff, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000280)="90", 0x1}], 0x1}}], 0x2, 0x4000000) (async) sendmmsg$inet(r2, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="9a", 0x1}], 0x1}}, {{&(0x7f00000001c0)={0x2, 0xff, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000280)="90", 0x1}], 0x1}}], 0x2, 0x4000000) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r4, 0x6}, 0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000040)={r4, 0x33, "8c8a92f9760758584b549237720eece1715c0b110b909244d45abcc91f9097b1630dfc218a3e16e9ae1329385bc9a36b9e8e86"}, &(0x7f0000000080)=0x3b) 2.616435376s ago: executing program 6 (id=1377): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000340)='cgroup\x00'}, 0x30) syz_open_procfs$namespace(0x0, &(0x7f0000000340)) close(0x4) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) readv(r4, 0x0, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)='\x00\x00\x00\x00 \x00\x00\x00\x00\x00', 0xa}], 0x1, 0x7) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r3}, 0x0, &(0x7f00000001c0)=r2}, 0x20) close(r3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r6, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001280)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0x1f00, 0x18, 0x19, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23) bpf$MAP_CREATE(0x0, &(0x7f0000004080)=@base={0x2, 0x4, 0x4, 0xbf22, 0x480, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r1, &(0x7f0000000000)={0x2c, 0x8, r6, 0x2, r8}, 0x10) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000c40)={@initdev={0xfe, 0x88, '\x00', 0x8, 0x0}, 0x5, r10}) 2.606190865s ago: executing program 5 (id=1379): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x2, 0x0, 0x4, 0x1, 0xffff, [{0x0, 0x3, 0x29}, {0xe, 0x2, 0x8001}]}]}}, &(0x7f0000000340)=""/135, 0x3e, 0x87, 0x1, 0xe0, 0x0, @void, @value}, 0x28) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x85, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f00000001c0)=0x9c) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000000)={0x80000000, 0x7, 0x101, 0x10}) r1 = socket$inet(0x2b, 0x801, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000280)=0x8) writev(r1, &(0x7f0000001600)=[{&(0x7f0000000580)="6d456bde", 0x4}], 0x1) 2.439129387s ago: executing program 5 (id=1380): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f00000004c0), 0x800) connect$phonet_pipe(r3, &(0x7f0000000500)={0x23, 0x5, 0x3, 0x5}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@bridge_delneigh={0x2c, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x80, 0xb2, 0x9}, [@NDA_IFINDEX={0x8, 0x8, r1}, @NDA_PORT={0x6, 0x6, 0x4e23}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x40800) (async) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x15}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x44}}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff034}, {0x6, 0xfe}]}, 0x10) r5 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4102a}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048050}, 0x4000) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000080)=ANY=[], 0x10448) (async) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) (async) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000400a8000600200003400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b31d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025cc40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de603000000e4edef3d93452a92954b43370e9703920723f9a94100"/216, 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) (async) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r8, 0x0) (async) accept4$netrom(r7, &(0x7f0000000540)={{}, [@default, @netrom, @default, @default, @rose, @remote, @null, @netrom]}, &(0x7f00000005c0)=0x48, 0x80000) (async) pipe(&(0x7f0000002740)) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r4, &(0x7f00000002c0)={0x10}) (async) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmmsg(r10, &(0x7f0000004e40)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f00000003c0)=""/126, 0x7e}], 0x1}, 0x1ff}], 0x1, 0x2000, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r11, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000680)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYBLOB="e9f46a703c1a7aca1dcb906e44749c4a6f02357db7a249bf14e8249b4b63b7654bbe552eac2591b78b67f033da2fbfd616c6a77cff5bb5f9c9298fc3574a5c53ee3f53e2fe4ec25ec3985ed831fe607d7836f60784598f6edaadaa918de27626a48d39c0ea2e896deba9eb863dd9e69650ec9476d4a451da5eac", @ANYBLOB="01000000000000000000010000000c0002000900000000000000400007800c00018008000100", @ANYRES32=r10, @ANYBLOB="0c00018908000100ab0a53db0e4cbc28a3da3b0e1c9265edfc541f9807befb45139807ef8200907ac8919023e6979c52b74e31a7b2f7670408dd64", @ANYBLOB, @ANYRES32=r10, @ANYRES64, @ANYRES16=r2, @ANYRES8=r9], 0x60}}, 0x4000040) (async) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000008, 0x13, r5, 0x1000) (async) syz_emit_ethernet(0x7a, &(0x7f0000000200)={@local, @broadcast, @val={@val={0x88a8, 0x6, 0x0, 0x4}, {0x8100, 0x3, 0x1, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1, {[@timestamp_prespec={0x44, 0x24, 0xce, 0x3, 0xf, [{@multicast2, 0xfff}, {@rand_addr=0x64010101, 0x2}, {@local, 0x7ff}, {@broadcast, 0x9}]}, @ra={0x94, 0x4}, @rr={0x7, 0x3, 0x5d}]}}, "040086dd0000ffff"}}}}}, 0x0) 2.365310487s ago: executing program 0 (id=1382): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0xfe18}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x44}}, 0x0) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=@newtaction={0x2c74, 0x30, 0x51b, 0x0, 0x0, {}, [{0x2c60, 0x1, [@m_pedit={0x2c30, 0x5, 0x0, 0x0, {{0xa}, {0x2b9c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{0x9, 0xd20e, 0x2, 0x101, 0xfffffffd}, 0x8, 0x7f, [{0x8, 0x7ff, 0x0, 0x2, 0x4, 0x2}, {0x33, 0xdb, 0xefe, 0x101, 0x5, 0xf}]}, [{0x9, 0x0, 0x1, 0x101, 0x45, 0x334}, {0x6, 0xff, 0xc07, 0x6, 0x9, 0x1}, {0x8, 0xfffffffb, 0x7ff, 0x1, 0x7, 0x200}, {0x140, 0x3, 0xfffffffc, 0x8, 0x38}, {0x5, 0x6, 0xf, 0x4, 0x76, 0xffffffff}, {0xc, 0x9, 0x8, 0x7, 0x7ff, 0x400}, {0xbe0, 0xffffde33, 0x4, 0x3, 0x3ff, 0x2}, {0xf, 0x3, 0x5e68, 0x6, 0x1, 0x8000}, {0x80000001, 0x3, 0x4, 0x6290, 0x7, 0xb7}, {0x568f, 0x1, 0x4, 0x6, 0x1, 0x7}, {0x0, 0x6, 0x200, 0xe5f3, 0x1, 0xbc}, {0xfff, 0x8000, 0x1, 0x3, 0x6874, 0x9}, {0xba, 0x2, 0x7fffffff, 0x0, 0x4985}, {0x0, 0x6, 0x5, 0x380, 0x5}, {0xe00, 0x2b, 0x8b, 0x1, 0xf13, 0x8001}, {0x6d43, 0x4, 0x8, 0x4, 0x3, 0x6}, {0xdc6, 0x9, 0x2, 0x8, 0x80000001, 0x9}, {0x3, 0xa4cb, 0x6, 0x800, 0xe, 0x7fff}, {0x4, 0xff, 0x1000, 0x4, 0xb2b3}, {0x5, 0x5, 0xb26b, 0x2, 0x3, 0x2}, {0x7, 0x7, 0x2, 0x8, 0x4, 0xc}, {0xe, 0x5, 0x9, 0x6, 0x0, 0x7}, {0x5, 0x400, 0x4, 0x4, 0x7}, {0xcb9, 0x6, 0x2e, 0xd, 0x4b30}, {0x1, 0x81, 0x3, 0x63, 0x4d8f, 0x7}, {0xfffffffb, 0x45a, 0xc7d, 0x6, 0x9, 0x8}, {0x6, 0xa, 0x2, 0xa, 0x2, 0x3}, {0x0, 0x6, 0x9, 0x1, 0x1000, 0x3}, {0x0, 0x9, 0x4, 0x6, 0x0, 0xe39}, {0x5, 0x6, 0xfffff279, 0x0, 0x5, 0x1}, {0x800, 0x7, 0xa70, 0x1, 0x92, 0xeba}, {0x1, 0x10000, 0x6, 0x68f7, 0xacb, 0x520}, {0xc, 0x101, 0xd, 0x7, 0x7ff, 0x1}, {0x8, 0x5, 0xd3f, 0x39f8, 0x8, 0xc}, {0x5, 0xa2, 0x6, 0x3, 0x0, 0x5}, {0x2, 0x1, 0x3ff, 0x5, 0xe, 0x4}, {0x6, 0x278, 0x8ce8, 0x8, 0x6}, {0x9, 0x6, 0x1000, 0x5, 0x4, 0x1}, {0x3, 0x5, 0xa41a, 0x2c6, 0x6, 0xfffffffa}, {0x4a8, 0x7, 0x3, 0x9a7, 0x1, 0x9}, {0x3, 0x7, 0x729a, 0xfffffff9, 0x3, 0x871f}, {0x380, 0xaa4, 0x6, 0x6, 0x80000001, 0x80}, {0xc6d6, 0x2, 0x8d, 0x5, 0x5, 0x10}, {0x4, 0x1000, 0x7fff, 0x8, 0x7, 0x8000}, {0x6, 0xfff, 0x8, 0x6, 0x1000200, 0x3}, {0x0, 0x6, 0x8, 0x1, 0x5bcb, 0x40000000}, {0x9, 0x10001, 0x3, 0x9, 0x1, 0x7e67}, {0x2, 0x2, 0x1, 0xd, 0x1, 0x9}, {0x1, 0xfffff434, 0xbc, 0x8, 0x7, 0xfff}, {0x4, 0xffffffff, 0x0, 0xb, 0x7fffffff, 0x1}, {0x3, 0xfffffff8, 0xffffffff, 0x8a38ac3, 0x0, 0x9}, {0x7f, 0x9, 0x2, 0x2, 0x0, 0xe}, {0x28fa, 0x6, 0x583, 0x1, 0x5, 0x6bf9}, {0x0, 0xfffffff8, 0x8, 0xe, 0x72, 0xe}, {0xd, 0x1c000, 0x3ff, 0x6, 0x4, 0x4}, {0x1, 0x2, 0xdf, 0x8, 0x53, 0x400}, {0xfef, 0xd53, 0x4, 0x80000001, 0x400, 0x2}, {0x6, 0x7f, 0x4, 0x0, 0xd77a, 0x8}, {0x1ff, 0x7f, 0x40, 0x8, 0xfffffffd, 0x7}, {0x8000, 0x9, 0x101, 0x2, 0x2, 0x7}, {0xfff, 0x22f, 0xb15c, 0x8, 0x7, 0x6}, {0xfffffc01, 0x5, 0x6, 0x401, 0x0, 0x2}, {0xd61c, 0x5f7, 0x4b, 0x9, 0x6, 0x8}, {0x5, 0xe20, 0xffffffff, 0x95857af, 0x2, 0x50000}, {0x7, 0x6, 0x8, 0x80000000, 0x8001, 0x400}, {0x58fc1ea5, 0x6, 0x9a8b, 0x1, 0x5, 0xa}, {0xffffff81, 0x6, 0x1b4, 0x10, 0x10000, 0x8d18}, {0x7, 0x82, 0xfffffffa, 0x0, 0x1, 0x2}, {0x1, 0x6, 0xfffffffb, 0x80000000, 0x5, 0x2}, {0x2, 0xdbf4, 0x3, 0x7, 0xffffffff, 0x5}, {0x8, 0x2, 0xffff, 0x40, 0x4b, 0x4}, {0x6, 0x4, 0x6, 0x7, 0x5, 0x400}, {0x6, 0xe, 0x1, 0x803, 0x6, 0x8e1}, {0x8001, 0x200, 0x4, 0x1, 0x80000001, 0x1}, {0x7, 0x8, 0x8, 0x6, 0x80000001, 0x1}, {0xfffffff9, 0x9, 0x3ff, 0x10000, 0x6, 0x6}, {0xfffffeff, 0x2, 0xfff, 0x101, 0xa9, 0x1}, {0x5, 0x51, 0x82, 0x76, 0x6, 0xfffffff8}, {0x6, 0x8, 0xe, 0x5, 0x0, 0xf}, {0x8, 0x7, 0x4, 0x8, 0x7f, 0x5}, {0x5, 0x1, 0xe09, 0x2999, 0x7, 0x7}, {0x9, 0xffff, 0x3, 0x5, 0x5, 0xff}, {0x4, 0x5, 0x10000, 0x9, 0x1ff00000, 0x1ff}, {0x5, 0x6, 0xe78, 0x7, 0x359068de, 0x8}, {0x0, 0x8, 0xb, 0x1, 0x9, 0x4}, {0x3, 0x80, 0x100, 0xff, 0x8, 0x8}, {0x5, 0x0, 0x5, 0x9, 0x0, 0x2}, {0x8000, 0x10, 0x2, 0x4, 0x8, 0x2}, {0x6, 0x3156, 0x8b, 0x7ff, 0x4, 0x8}, {0x3ff, 0x0, 0xff, 0x6, 0x0, 0x10}, {0xf6c, 0x7, 0x100, 0x1, 0xd, 0x3}, {0x78000000, 0x8b7, 0x800, 0x3, 0x4, 0xfffffff7}, {0xe0000000, 0x2, 0x8000, 0x4, 0x6b, 0xffffff01}, {0xfffffff9, 0x4, 0x4, 0x5, 0x77, 0x81}, {0x2, 0xffffffff, 0xff, 0x5, 0xe84, 0x5}, {0x2c, 0x1, 0x5, 0xffff, 0x3, 0x5}, {0x8001, 0x20080, 0xd8d, 0x4, 0x4, 0xdcc}, {0xfffffffd, 0x1ff, 0xc, 0xfffffff9, 0x35b, 0x8}, {0x7b400000, 0x4, 0x1, 0xcd0, 0x6e3, 0x7}, {0xfffff063, 0x4ca, 0x8000, 0x8000, 0x400, 0xe}, {0x8, 0x5, 0xc13d, 0xff, 0x7ff, 0x865}, {0xfb9a, 0x2, 0x0, 0x3, 0x5, 0x7}, {0x7ff, 0x3, 0x0, 0x8, 0xea7, 0x3ff}, {0x80000000, 0x3, 0x2, 0x800, 0x7ff, 0x9}, {0x2, 0x6, 0x6, 0x3, 0x200, 0x9}, {0x0, 0x800, 0x2, 0xbb62, 0x101, 0x3}, {0x6, 0x1, 0xe, 0x4ec, 0x5, 0x7ee0}, {0x7ff, 0x6, 0x8, 0x5, 0x8, 0x6}, {0x10000, 0xff, 0xfffffc00, 0x5, 0x1d, 0x2}, {0xfffffffc, 0xb, 0x82da, 0x2, 0x800, 0x80000001}, {0x7, 0x9ed4, 0xf1a52f52, 0x8, 0x40, 0x3ff}, {0x7, 0x400, 0x0, 0x4, 0x9, 0xff}, {0x3, 0x7, 0x100, 0x1, 0x2}, {0xb6, 0x3, 0x3, 0x8000, 0x5, 0x9}, {0x98, 0x9, 0x4e95, 0x6ae, 0x4, 0x64}, {0xfffffffa, 0x6, 0xfffff5af, 0x5, 0x7, 0x2}, {0x0, 0xffff, 0xfffffa7c, 0xff, 0xfffffffb, 0x800}, {0x800, 0x1, 0xfc5, 0x4, 0x14, 0x8001}, {0x8, 0xffffffff, 0xfffffffc, 0x400, 0xd, 0x3}, {0x8, 0x3, 0xff, 0x3, 0x8, 0x1}, {0xe, 0x9, 0x1, 0x910, 0x5, 0x800}, {0x7, 0x28, 0xfffffff7, 0xfffffffd, 0xff, 0x2}, {0x6, 0x0, 0x5, 0x96e9, 0x40, 0x1}, {0x6, 0x9, 0x5, 0x5, 0x1, 0xc}, {0x7, 0xa8, 0x5, 0x3, 0x6, 0x4}, {0x88f, 0xffff, 0x101, 0xffffff5d}, {0x19, 0x5, 0x6, 0x2, 0x7d, 0x7}, {0x5, 0x400, 0x8, 0x6, 0xfe7a, 0x4}], [{0x0, 0x1}, {0x1, 0x1}, {0x2}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x6}, {0x1}, {0x2}, {0x5}, {0x9aa85c4a9b0f676e}, {0xa01da69eecd52744, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x5}, {0x5}, {0x2, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5}, {0x7}, {0x2}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x45caa0f3f2717a3e}, {0x1}, {0x9}, {0x3}, {0x2, 0x264bb7c75bed7a8b}, {0x0, 0x1}, {0x0, 0x1}, {0x1}, {0x2}, {0x2}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x8, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x5}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x7, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {}, {0x3}, {0x3}, {0x4, 0x1}, {0x5}, {0x3}, {0x0, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x4}, {0x3, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x3}, {0x4, 0x2}, {0x3}, {0x5, 0x1}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x7, 0x1}, {0x3, 0x1}, {0x6, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {0x2}, {0x5}, {0x4}, {0x5}, {0x0, 0x1}, {0x2}, {0x3}, {0x4}, {0x4}, {0x69cd5e7b911f9fe5, 0x1}, {0x2}, {}, {0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x7, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x1}, {0x3, 0x1}, {0x1}, {0x7}, {0x3}, {0x1, 0x1}], 0x1}}, @TCA_PEDIT_PARMS_EX={0xeb0, 0x4, {{{0x9, 0x6, 0x6, 0x84e1, 0x2}, 0x6, 0x3, [{0x6, 0x66e, 0x7, 0x4, 0x66a5, 0x9}, {0x3, 0x2, 0x9, 0x6, 0x80000001, 0x5}, {0x7, 0xff, 0x2, 0x80000001, 0x7, 0x6}, {0x4, 0x9, 0x1, 0x3, 0x2}, {0x7, 0x80000001, 0x9, 0x3ff, 0xa5d, 0x2f3e}, {0x6, 0x8, 0x217c, 0x3, 0x8, 0x800}]}, [{0x10, 0x1000, 0x9, 0x80000001, 0x1, 0x2}, {0x80000000, 0x0, 0x6, 0x7, 0x8, 0x2}, {0x3, 0xff, 0xffffffff, 0x40, 0x0, 0xfffffbff}, {0xe2, 0x4, 0x9, 0x13, 0x2, 0xc}, {0x4, 0x9, 0x800, 0x0, 0x1}, {0xfffffffc, 0xe01b15aa, 0xcbb1e2a, 0x2, 0x7, 0x44}, {0xfffffffd, 0x1, 0x9, 0x1, 0x7, 0x2b}, {0x9e2, 0x8, 0x6, 0x6, 0x8}, {0x8, 0x7, 0x9, 0x2, 0xf, 0x8}, {0x3f17, 0x401, 0x3, 0x4, 0xffffffff, 0x81}, {0x1c00, 0x3, 0x4, 0x9, 0x3, 0x643b}, {0x1, 0xffffff80, 0x8, 0xff, 0x1ff, 0x8}, {0x12000, 0x200, 0x7, 0x8, 0x4, 0xee}, {0x7, 0xc, 0x5, 0x3, 0x328, 0x7}, {0x7, 0x1, 0x1cc, 0x5, 0xd, 0xdbd1}, {0x9, 0x7, 0x8001, 0x40000, 0x9, 0x8}, {0x1, 0x0, 0x5, 0x9, 0x3, 0x4}, {0x6, 0x3, 0x10, 0x101, 0x7, 0xbd92}, {0x390, 0xfb, 0x4, 0x2, 0x3, 0x64e5dd2d}, {0xfffffff7, 0x5b6a7ec6, 0x8, 0x1, 0xffffffff, 0x5cb}, {0x8000, 0x8, 0x1, 0x4, 0x0, 0xe40}, {0x2, 0x6, 0x9, 0x5, 0xfffffff7, 0x9}, {0x9, 0xe4, 0x6, 0x1000, 0x7fff, 0x5}, {0x200, 0x3, 0x892, 0x2, 0xffffff89, 0x2}, {0x9, 0x2c7f, 0x5, 0x6, 0x1000, 0x5}, {0x2, 0x400, 0x6d8, 0xfffffff7, 0x7, 0x8c7}, {0x80000000, 0x9, 0x7ff, 0x6, 0x1000, 0x7f}, {0x72f39014, 0x3, 0x80e, 0x0, 0x4, 0xfffffff9}, {0xfffffff9, 0x5, 0x5, 0x1, 0x3, 0x2}, {0x1, 0x5c2785c3, 0x2, 0xb, 0x100, 0x8}, {0x3, 0x9a33, 0x1, 0xff, 0x9bc, 0x5}, {0x7f, 0x10, 0x9, 0x2, 0x0, 0x8}, {0x1a4b, 0x7, 0x2, 0x9, 0x97, 0x1000}, {0x1, 0x0, 0x2, 0x3ff, 0x0, 0x39b}, {0x332, 0x9, 0xffff500d, 0x9, 0x8, 0x3}, {0x2, 0x4, 0x1, 0xfffffffb, 0x0, 0x7}, {0x9, 0x9, 0x10, 0x8, 0xfffffffc, 0x6}, {0x0, 0x89a, 0xffffffff, 0x7, 0x0, 0x7ff}, {0x2, 0x8, 0x1, 0x1, 0x2, 0x8}, {0x6adc, 0x5, 0x0, 0x7, 0x3, 0x1ff}, {0x4, 0x5, 0x80000, 0x1, 0xa456, 0x1ff}, {0x4, 0x9, 0xc, 0xda95, 0xf, 0x2}, {0x9, 0x4, 0x7, 0x5, 0x8, 0x80000001}, {0x8001, 0xc90, 0xb49d, 0xcce, 0x3, 0x6}, {0xc45, 0x7, 0xff, 0x800, 0xfffffffd, 0x20109767}, {0x5, 0x3, 0xa, 0x1, 0x3, 0x6}, {0x10001, 0x6, 0x6, 0x3, 0x5, 0xafc}, {0x0, 0x10000, 0x0, 0x1, 0x6, 0x789b}, {0x1, 0x1, 0x2, 0x7, 0x2, 0xf}, {0x1, 0x7, 0x5, 0x8, 0xb3b3, 0x9}, {0x7fffffff, 0xb, 0x2, 0x0, 0x1, 0x2}, {0x1ff, 0x8, 0x6, 0xfffffbff, 0x8, 0x7}, {0x5, 0x6, 0x2, 0x4, 0x2, 0x2}, {0xff, 0x101, 0x1, 0x9, 0x0, 0x3}, {0x2, 0xbfc, 0x2, 0x426aeefa, 0x5, 0x6822}, {0x800, 0x8, 0x6, 0xde, 0x63be, 0x5}, {0x3, 0x4, 0x75cf, 0x6, 0x7, 0x1}, {0xdf, 0x7, 0xfffffff8, 0x4, 0x40, 0xf3}, {0xb, 0x3, 0x9, 0x5c, 0x9, 0x2}, {0x80000001, 0x3, 0xfff, 0x6ca, 0x1, 0x8}, {0x2, 0x6, 0x0, 0x1, 0x8, 0x8}, {0x1, 0x1, 0x6, 0x9, 0xe, 0xdeb6}, {0xf82, 0x89a, 0x3, 0x7, 0x1, 0x4}, {0x3bd568cd, 0x5, 0x2, 0x8, 0x8001, 0x8001}, {0xfffffffb, 0x8, 0x0, 0x4, 0x0, 0x10}, {0x6, 0x5, 0x6, 0x1ff, 0x1000, 0x3}, {0x1, 0x7, 0x8, 0x7, 0x7, 0x3}, {0x7, 0x9, 0x2, 0x1, 0xfffffc05, 0x2}, {0x1, 0x1ff, 0xed, 0x3, 0x0, 0xffffffff}, {0x5, 0x9, 0x3, 0x8, 0x9, 0xfff}, {0x7, 0xfffffff7, 0x0, 0x3, 0xc, 0x2}, {0x10000, 0x9, 0x40, 0x3, 0x6, 0x9}, {0xa, 0x2, 0x4, 0x32, 0x0, 0xb}, {0x688b, 0x401, 0x10001, 0x1, 0x3, 0x3}, {0xf, 0x6, 0xce, 0x7ff, 0x0, 0x3ae}, {0x9e41, 0x0, 0x9, 0x6, 0x2, 0x5}, {0x4238, 0x5, 0x2, 0x7ff, 0x8}, {0x9, 0xa, 0xffff, 0x6, 0x1, 0x1}, {0x7, 0x80000000, 0x80000000, 0x6, 0x4000000, 0x1}, {0x7, 0x7, 0x8, 0xcc, 0xeed, 0x9}, {0x7f, 0x4, 0x7, 0x10000, 0x6, 0x8}, {0xbf7, 0x2, 0x3, 0x6, 0x7, 0x6}, {0x8, 0x8, 0x80000000, 0x8, 0xc3, 0x8}, {0x2, 0x75, 0x0, 0x172c, 0x7fff, 0x90}, {0x1000, 0x8, 0x9, 0x6, 0x1, 0xe0000}, {0xb2, 0x3, 0x4, 0x7f, 0x1, 0x2}, {0x3, 0x680, 0xffff9153, 0x924c, 0x6, 0xfffffffa}, {0x0, 0x4, 0x4, 0x20, 0x3, 0x9}, {0x4, 0x781b, 0x1, 0x2, 0x9, 0xcc2}, {0x94e8, 0x58, 0x4d0, 0x1ff, 0x9, 0x40}, {0x2, 0x8, 0x7, 0x5, 0xd8, 0xc}, {0x81, 0x3f3, 0x5, 0x3, 0x5, 0x6670}, {0x9, 0x58d, 0x6, 0x72, 0x7, 0x1fc000}, {0x4, 0x13789906, 0x3, 0x1, 0xfffffff4, 0x6}, {0x10001, 0xd, 0x0, 0x3ff, 0x100, 0x6}, {0x3, 0x1000, 0x2, 0x4, 0xa6, 0xffff}, {0x0, 0x6, 0x1, 0xfffffffb, 0x287, 0x4}, {0x38000, 0x5, 0x6, 0xfffffffd, 0x10, 0xd}, {0x4, 0x4, 0x32, 0x80, 0xfb57, 0xd47}, {0x5, 0x1, 0x6, 0x2, 0x3, 0x59c}, {0xf9c1, 0x5, 0x3, 0x3, 0x2, 0x6}, {0x1000, 0x4, 0x9, 0x7fffffff, 0x80, 0x1ff}, {0x3ff, 0x9, 0xffffffff, 0x8, 0x0, 0x3d9dd80e}, {0xcbc4, 0x3, 0x6, 0x6, 0x5, 0x7}, {0x40000000, 0x5, 0x6, 0x7, 0x800, 0x5}, {0x1, 0x80, 0x7, 0x7, 0xc3, 0x80000001}, {0xbcb, 0x8bb, 0xa, 0x9, 0x8}, {0x7ff, 0x8001, 0x7ff, 0x85, 0x2, 0x1}, {0x0, 0x10000, 0xb5, 0x3, 0x2, 0x6}, {0x675, 0x7fffffff, 0xff, 0x1, 0x3, 0x10001}, {0x1, 0x2, 0x7f, 0x8, 0x3, 0x51f1ea8e}, {0x8, 0x9, 0x3, 0xfffffffa, 0x1ff, 0x48af}, {0xd25b, 0x10001, 0x34b, 0xfffffbff, 0x80, 0xffff}, {0x9, 0x5, 0x9, 0x2, 0x1, 0x5}, {0x0, 0x7, 0x4, 0xfffffff2, 0x1, 0x79bf}, {0x3, 0xd, 0x3, 0x9, 0x80, 0x5}, {0xffffffff, 0x2, 0x4, 0x7fffffff, 0x5, 0x7}, {0xff, 0x9, 0x7fff, 0x0, 0x401, 0x4}, {0x4, 0x6, 0x2, 0x7, 0x10001, 0x1}, {0x5, 0x6, 0x9, 0x9, 0x0, 0x7}, {0x0, 0x2, 0x37b8bb45, 0x62ccc82e, 0x6, 0xffff}, {0x9, 0x4c6, 0xfffffffa, 0x1769a, 0x70, 0x4}, {0x3, 0x0, 0x10000, 0x5, 0x1, 0x9}, {0x3, 0x80000001, 0xb1, 0x1053, 0x7fff}, {0x4, 0x9, 0x1, 0x8, 0x4, 0x1}, {0x3, 0x7, 0x18, 0x0, 0xb, 0x6}, {0xfffffffe, 0x9, 0x101, 0x5, 0x80000000, 0x2}, {0x6, 0xfffffff9, 0x0, 0x42b, 0x7, 0x8}], [{0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {}, {0x4}, {0x3}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x2, 0x1}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x4}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {0x457d5fba3d8c12e, 0x1}, {0x4}, {0x5, 0x1}, {0x4}, {0x2}, {0x1, 0x1}, {0x2}, {}, {0x5}, {0x5}, {0x1}, {0x4}, {}, {0x4}, {0x5}, {0x3}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x2c965c65fc0f3b2d, 0x1}, {0x4, 0x1}, {0x1}, {0xc3b8509434982d56}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x2}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x4}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x1, 0x2ab2c9230214c788}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x2}, {0x6}, {0x2}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3}, {0x3}, {0x2}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x3, 0x1}, {0x2, 0x1}, {0x5}]}}, @TCA_PEDIT_PARMS={0xe98, 0x2, {{{0xf5e, 0x5, 0x0, 0x8}, 0x3, 0xd, [{0x8, 0x2, 0x3, 0x39d, 0x7fff, 0x2}, {0x6, 0x44c, 0x2, 0x5, 0x5, 0x800}, {0x7ff, 0x81, 0x1, 0x8a, 0xd1, 0x81}, {0x5, 0x1, 0xfffffff9, 0x1, 0x600, 0x4}, {0xffff0001, 0x7fff, 0xdf3b, 0x2, 0x10000, 0xeb}]}, [{0x8, 0x5, 0x7, 0x80000000, 0x7, 0x400}, {0xfdc, 0x1, 0xfffffffa, 0x4, 0x8001, 0x28}, {0x3, 0x7fff, 0x10000, 0x1, 0x1, 0x6}, {0x0, 0x9, 0x4, 0xa6, 0x6, 0x9}, {0xcaf, 0x8001, 0x3, 0x2e2, 0x3, 0x80000001}, {0x4, 0x2, 0x4000000, 0x4, 0x0, 0x1e2c}, {0x6, 0x1, 0x3, 0x6, 0xa, 0x4}, {0x3, 0x0, 0x400, 0xb3ac, 0xffffff2c, 0xfff}, {0x1, 0x0, 0x6, 0x5, 0x8ed1, 0xc459}, {0xa6b, 0x5, 0x1, 0x8, 0x8001, 0x2}, {0x1, 0x7ff, 0x80000000, 0x7, 0x6, 0x3}, {0x6, 0xfffffff9, 0x5, 0xffff, 0xe, 0xce9}, {0x7, 0x83, 0x0, 0x3, 0x10000, 0x9}, {0x401, 0x6, 0x0, 0xded, 0x26c, 0x9}, {0x200, 0x2, 0x4, 0x5, 0x8, 0x101}, {0xffffffff, 0xa9, 0xe, 0x80000001, 0x5, 0xfffffff8}, {0x1, 0xf, 0x8, 0x1, 0xb0b, 0x7}, {0x4, 0x7ff, 0x101, 0x2, 0x0, 0x2e5ce239}, {0x3, 0x6, 0x9, 0x8f69, 0xffffff7c, 0x9}, {0x1, 0x0, 0x3, 0x761c, 0x84, 0x8}, {0x1000, 0x4, 0x0, 0x10, 0x8001, 0x200}, {0x1, 0x9, 0x6, 0x6, 0x3, 0x9}, {0x8c000000, 0x4, 0xffffff01, 0x7fffffff, 0x48, 0x2}, {0xfffffff8, 0x401, 0x1, 0x6, 0x4, 0x400d}, {0x3, 0x7fff, 0x7, 0x1ff, 0x1, 0x2ef3}, {0x1682, 0xfffffffb, 0x1ecb, 0x4, 0x3, 0x400}, {0x8, 0x80000001, 0x200, 0x40, 0x80, 0x8}, {0x2, 0xff, 0x3ff, 0x6, 0x401, 0x2}, {0x3, 0x2, 0x7, 0x5, 0x5, 0x4}, {0x6, 0x1, 0x3914000, 0x1000, 0x1}, {0x4, 0xc0000000, 0x6, 0xa, 0x153, 0x1}, {0x6, 0x6, 0x401, 0x4, 0x1000, 0x2}, {0x8, 0x7, 0x7, 0x7, 0x1, 0x79}, {0x4, 0x5, 0x5, 0xfffffffc, 0x7, 0x5}, {0x8, 0x7, 0x24b70, 0x5, 0x2, 0x2}, {0xffff7fff, 0xff, 0x8001, 0xffff, 0x40, 0x4}, {0x0, 0x0, 0x8, 0xb1d, 0x400, 0xffffffff}, {0x9, 0x7fffffff, 0xab7, 0x7, 0x0, 0x1ff}, {0x9, 0x8, 0xa, 0x1000000, 0x7ea, 0x7}, {0x3, 0x25, 0x5, 0x8, 0x5, 0x1}, {0x6bd4cbcd, 0x7, 0x2, 0x4, 0x9, 0x5f}, {0x5, 0x3, 0x504d, 0x7, 0xe4, 0x7fffffff}, {0x7, 0x400, 0x3, 0x9, 0xdf81, 0x5}, {0xce, 0x0, 0x1, 0x0, 0x8, 0xff}, {0x2, 0xfffffff5, 0x5, 0x1, 0x1000, 0xd7ae}, {0x2, 0x7, 0x1ff, 0x8, 0x200, 0x7}, {0x0, 0x1, 0x0, 0x80, 0x1ff, 0x4c5637f7}, {0x3, 0x200, 0x7fffffff, 0x6, 0x7, 0xf}, {0x9, 0x9, 0x9, 0xbd, 0x4, 0x5b5}, {0x7, 0x6, 0xe522, 0x6, 0x2, 0x2}, {0x4, 0xae, 0xfffffff7, 0x7, 0x7, 0x3}, {0x8, 0x8, 0x0, 0x1, 0x7fff, 0xa}, {0x6, 0xb0, 0xa, 0xfff, 0x2, 0x6}, {0x7, 0x4, 0xa, 0x80000000, 0x1, 0x4}, {0xf, 0xffff, 0xe823, 0xf7f6, 0x6c, 0x280000}, {0x1ff, 0x101, 0x6, 0x80000000, 0x7, 0x10000}, {0x3, 0x8001, 0xc, 0x7, 0x3ff, 0x200000}, {0xff, 0x30, 0x8, 0x8, 0x7, 0x5}, {0x9, 0xf, 0x8000, 0x603, 0x4, 0x2fc}, {0x5c82, 0x8, 0x2, 0x1ff, 0x1000, 0x40000000}, {0x5, 0xedfa, 0xd2, 0x3, 0xc, 0x5}, {0x7, 0x0, 0xffffff6d, 0x5, 0x1, 0x4}, {0x8, 0xc3e4, 0x7fffffff, 0x401, 0xfffffff8, 0x2}, {0x0, 0x3, 0x6a98fb75, 0x80000000, 0x1, 0x101}, {0x3, 0xfff, 0x401, 0x9, 0x400, 0xf21}, {0xe950, 0x9, 0xd4f, 0x1ff, 0x32a, 0x37}, {0x8000, 0x1, 0x7fff, 0xffff7fff, 0x5, 0x8}, {0x8, 0x2, 0x0, 0x0, 0x9, 0x1}, {0x7, 0x8, 0x2, 0x5, 0xfffffffe, 0x1ff}, {0x7, 0xe626, 0x2, 0x8, 0xfa, 0xf1}, {0xe23, 0x3, 0xf, 0x1, 0x0, 0x1}, {0x3, 0x8, 0x7, 0xbf, 0x5, 0xba2}, {0x7, 0x9, 0x2, 0x2, 0xe8aa, 0xd}, {0x5, 0x3, 0x0, 0x6, 0xc, 0x4}, {0x6f8e, 0x8, 0x1ff, 0x5, 0x9, 0x4}, {0x400, 0x0, 0x1, 0x59, 0x8, 0x3}, {0x4, 0x0, 0x2, 0x400, 0x5, 0xa}, {0x0, 0x3, 0xfffffffc, 0x3cc3, 0xd68, 0x5}, {0x4, 0x8, 0x2, 0x1ff, 0x40, 0xfffffff7}, {0x5, 0x6, 0xe, 0xfffffffc, 0x6, 0xa2ea0}, {0x3, 0x8, 0x10000, 0x5, 0xdd6, 0x6}, {0x7, 0xd3, 0x8, 0x7, 0xf0cd, 0x800}, {0x0, 0x32c3, 0xffff0000, 0x4, 0x7}, {0x8, 0x5, 0x800, 0x4, 0x7ff, 0x6}, {0x2, 0x9, 0xead, 0x2fa0, 0x1, 0x7}, {0x1, 0xa, 0x60, 0xe, 0x4}, {0x4, 0xfffffeff, 0x1, 0x4, 0x8000, 0x6}, {0x10001, 0xb, 0x5, 0x8001, 0x6, 0x7f}, {0xa5, 0xffffff01, 0x3, 0x80000000, 0x0, 0x7}, {0x6, 0x5, 0xd, 0x4, 0x9, 0x6}, {0x7, 0x9, 0x2, 0x9, 0x81, 0xa}, {0x3, 0x3, 0x401, 0xebb5310, 0x6, 0x6}, {0x2, 0x43, 0x6, 0x7fff, 0x4, 0x2}, {0x200, 0x100, 0x9, 0x0, 0x4000000, 0x2}, {0x10, 0x3, 0x7fff, 0x9, 0xfff, 0x6}, {0x8, 0x2266, 0xa, 0x5, 0x8, 0x8}, {0x81, 0x0, 0xc1d, 0x2, 0x8000, 0xb}, {0x2, 0x36e, 0x9, 0xf, 0x3, 0x8}, {0x2, 0x3ff, 0x641, 0x7fffffff, 0x7, 0xfff}, {0xa, 0x2, 0x6, 0x1ff, 0x0, 0xe}, {0xfff, 0x4, 0x2, 0x9f7, 0x0, 0x1}, {0x4e6, 0x6, 0x9d30, 0x1, 0x63, 0x1}, {0x5, 0x7, 0x401, 0x5, 0x3ff, 0x7}, {0x1, 0xb3f, 0x8, 0x3, 0x4}, {0x6, 0x80000000, 0x0, 0x8, 0x5, 0xdd}, {0x8, 0x0, 0x3, 0x9, 0x9, 0xb8}, {0x8001, 0x8001, 0xfffffffd, 0x0, 0xa3fc0000}, {0xfffffc01, 0x6, 0x0, 0x40000000, 0xb, 0x7fff}, {0x7, 0x9, 0x0, 0xb3, 0x9f, 0x18}, {0x4, 0x4fe3, 0x9, 0xf, 0xa1, 0x3}, {0xdbd, 0x8, 0x10001, 0x1ff, 0x4c20, 0x80}, {0x9, 0x3ff, 0x3, 0x8, 0x66d, 0x4ff9}, {0x8, 0x9, 0xe8, 0xf244, 0x101, 0x1000}, {0x177, 0x7, 0xaf72, 0x2, 0x4, 0x3}, {0x3, 0x40, 0x1ffa, 0xe21f, 0x8, 0x67f}, {0xfffffffc, 0x3, 0x8, 0x8000000, 0x0, 0x9}, {0xe661176, 0x0, 0x40, 0x80000000, 0x5, 0x3}, {0x1ff, 0xf6d, 0x8d3c, 0x1, 0x8, 0xfffffffe}, {0x9, 0x200, 0xfffffffa, 0xffff0000, 0xf, 0x4}, {0x6, 0x7, 0x7, 0x6, 0xefd, 0x7}, {0x7f, 0x6, 0x1, 0x2, 0x712, 0xe}, {0x9, 0x2665, 0x6c4, 0x0, 0x2, 0x5}, {0xff, 0x0, 0x8, 0x2, 0x40e0, 0xa}, {0x0, 0x0, 0x3, 0xd, 0xa, 0x8001}, {0x400, 0x4, 0x6, 0x5, 0xf3e3, 0x5}, {0x1, 0xffffff80, 0x4, 0x0, 0xa, 0x7}, {0x3, 0x8, 0x10000, 0x3, 0x4, 0xffff8001}, {0xd6b0fd7, 0xd19c, 0x7, 0xb, 0x8000, 0xe474}], [{0x4, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {}, {0x1, 0x1}, {0x54a7f345252169e3, 0x1}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x1}, {0x5, 0x1}, {0x5}, {0x2}, {0x3, 0x1}, {0x3}, {0x1, 0x1}, {0x0, 0x1f4d9c3d86002dbb}, {0x8}, {0x5, 0x1}, {0x1, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x4}, {0x6}, {0xd}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {0x3}, {0x2, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {}, {0x0, 0x1}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3}, {0x2}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x1, 0x1}, {}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {0x1}, {}, {}, {0x2}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1}, {0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x75c27ab018193fe1}, {0x3, 0x1}, {}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x5}, {0x4}, {0x5}, {0x7, 0x1}, {0x4}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {}, {0x5}, {0x4, 0x1}, {0x5}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0x1}]}}]}, {0x6c, 0x6, "271656a5987032c12ecb1cd74efeb03a12587003cd3460ec16f3b3dfa599e3855c8c604ecd1373c4ea7462a39e433577bea5cce63e790894a2475383ffbfa45e61432666841c3966523fe5958bfcf29f4e2e762683295535b2dfbfd95e8d4c65e372a44668f3251c"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x2c74}}, 0x0) (async, rerun: 64) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) (async) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) (async) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x90}, 0x1c) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000680)={@ifindex, 0xffffffffffffffff, 0x23, 0x4, 0x0, @void, @value}, 0x20) (async) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x89}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, 0x0, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) (async) syz_emit_ethernet(0x1f, &(0x7f0000000240)={@local, @local, @void, {@llc_tr={0x11, {@snap={0xaa, 0xab, 'c', "f876a7", 0x6c0c, "ee145e4c67651dcaac"}}}}}, 0x0) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r4, 0x6, 0x19, 0x0, &(0x7f0000000040)) (async) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x34}, 0x9}, 0x1c) (async) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000080)={0x3, {{0x2, 0x4e21, @multicast2}}}, 0x88) close(r3) (async) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e00010000000000fcdbdf250801f2800c00180008ac0f0000000000140001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) 1.747007134s ago: executing program 0 (id=1383): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6, 0xe, 0x0, 0x800}]}, 0x10) sendmmsg$unix(r0, &(0x7f0000001640)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}], 0x1, 0x20000000) (fail_nth: 5) 1.729365114s ago: executing program 6 (id=1384): r0 = socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x10010, r0, 0x90454000) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r3, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="340000001000370410000000ffdbdf2500000000dda1809a47a99b415b0cd8e0acaf2baa04ade2272ab59b041ddb64873d08b39acce524298dd5e43318d66206ad85d6e3b128a2c3254a81bcd0e5c5ef37cab5c1cdb868e8201730", @ANYRES32=r4, @ANYBLOB="8345050001000000140012800b00010067656e657665000004000280"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e0, 0x0, 0x168, 0x9, 0xd0, 0xb, 0x210, 0x250, 0x250, 0x210, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {0xff}, 0x6c}, 0x6000000, 0xa8, 0xd0, 0x0, {0x0, 0x28e}}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0xc7, 0x3}, {0xffffffffffffffff, 0x4, 0x1}}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@inet=@set3={{0x50}, {{0x4, 0x1}, {0x7, 0xe}, {0x7, 0x8}, 0xfff}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@local, 'batadv0\x00', {0x4}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x340) socket$netlink(0x10, 0x3, 0xc) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100000009000100273891f894b85f7e1c73797a310000000040000000030a0102000000000000000001000000090003007300000007797a310000000030000000050a0102000000000000000001002004ea508b4000000000000000010900010073797a310000000004000480140000001100010000000000000000000000000a0000f7704014f400"/198], 0xb8}}, 0x200000d4) sendmmsg$inet(r1, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty}}}], 0x20}}], 0x1, 0x80) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) r7 = socket$inet(0x2, 0xa, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, &(0x7f0000000f40)=""/4089, 0x0, 0xff9, 0xa, 0x7ff, 0x0, @void, @value}, 0x28) setsockopt$sock_int(r7, 0x1, 0x2c, &(0x7f0000000040)=0x3, 0x4) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x2c, &(0x7f0000000140)={0x0, 0x0}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000400000004000000002000000000000000000000904000000000000000000000105000000080000000000000000000003000000000200000002000000000000000000000000000003"], 0x0, 0x5a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001f40)=ANY=[@ANYBLOB="93990000100003042abd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="b4a5af88400000001400128009000100766574680000000004000280640416803c0001802800010009000000000000000000000000000000000000000000000000000000000000000000000010000200fc2300003104000006000000040001809800018014000a0001000080000000000200000000000000100002000600000060000000020000000c00090006000000a6b900001000020008000000bf06000009000000280001000c000000b73aab6e387a00000000000000000000000000000000000000000000000000002c000c80140001000900000046050000030000008100000014000100010001003c0b00000400000088a80000700001802800010006000000aaaaaaaaaa0c00000000000000000000000000000000000000000000000000000c000300030000007f00000010000200ffffff7fca0b00000600000028000100ff030000bbbbbbbbbbbb00000000000000000000000000000000000000000000000000001801018014000b000400000000000000fbffffffffffffff90000c8014000100fb050000ad0b00000400000088a800001400010023100000e50c000008000000810000001400010006000000c70500009e74000088a800001400010001800000820c00000300000088a8000014000100691565090e0a0000e8d0000088a80000140001000c000000f20c0000d4dc000081000000140001006d220000b80500000300000088a800000c00070003000000b10000001000060000000000000000000800000028000100000800000000000000000000000000000000000000000000000000000000000000000000100006000800000002000000090000001000060004000000f9030000070000000c0009000101000001000000380001800c00030002000000db8c000028000100fdffffff00000000000000000000000000000000000000000000000000000000000000004c0101802800010003000000ffffffffffff000000000000000000000000000000000000000000000000000028000100030000000180c2000002000000000000000000000000000000000000000000000000000014000a00080000000000000008000000000000000c00040001000000080000002800010006000000ffffffffffff000000000000000000000000000000000000000000000000000068000c80140001000900000043060000060000008100000014000100000000802d0e00000000000081000000140001007f000000ba0100000600000088a800001400010000000000cd0400000700000088a800001400010009000000e80400000200000088a8000014000a00040000000000000000000000000000000c000400080000000100000018000c8014000100070000008a060000f7ffffff81000000100006000600000007000000080000007c00018014000b000900000000000000020000000000000014000b0000100000000000000a00000000000000100006000100000000000000040000000c00070005000000000000000c00030006000000050000000c00090008000000060000000c000400030000000000000010000200ff0f0000ff09000001000000"], 0x498}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r9) sendmsg$IEEE802154_START_REQ(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000000d0000000500b1e7f2ef52aa4d25180001000000060008f7ffffff0005001700000000b8e2910f340bf78a000300190004000000"], 0x44}, 0x1, 0x0, 0x0, 0x18000}, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) 1.656109979s ago: executing program 5 (id=1385): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000040)=0x9, 0x4) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000002d00210000000000000000000400"], 0x1c}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0x80000001}, 0x10) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x0, 0x25, 0x148, 0x340, 0x60, 0x438, 0x2a8, 0x2a8, 0x438, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x340, 0x0, {0x200003ae, 0x7f00}}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'dvmrp1\x00', {0xff}}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x9, 0x8001}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x248) sendmsg$nl_route_sched(r3, &(0x7f000000a280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=@newtaction={0x18, 0x5a, 0x1, 0x0, 0x2, {0x2}, [{0x4}]}, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x1}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@gettclass={0x24, 0x2a, 0x129, 0x870bd2c, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x3}, {}, {0x0, 0xe}}}, 0x24}}, 0x40004) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000711209000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x2a, '\x00', 0x0, @cgroup_sock_addr=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6_sctp(0xa, 0x0, 0x84) 1.331743518s ago: executing program 0 (id=1386): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, r1, 0xb01}, 0x14}}, 0x0) (async) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, r1, 0xb01}, 0x14}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1700bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200001f00000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_DYNSET_FLAGS={0x8}, @NFTA_DYNSET_OP={0x8}, @NFTA_DYNSET_SREG_KEY={0x8}]}}}]}]}], {0x14}}, 0x90}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_DYNSET_FLAGS={0x8}, @NFTA_DYNSET_OP={0x8}, @NFTA_DYNSET_SREG_KEY={0x8}]}}}]}]}], {0x14}}, 0x90}}, 0x0) 1.271708932s ago: executing program 2 (id=1387): r0 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1410aa0800060001000000"], 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'veth0_virt_wifi\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000540)={'ip6gre0\x00', &(0x7f00000004c0)={'syztnl1\x00', r4, 0x4, 0x81, 0x4, 0x9, 0x0, @local, @private0, 0x8, 0x20, 0x1, 0x3f}}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, 0x0, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYRESHEX=r1], &(0x7f00000000c0)='GPL\x00', 0x200009, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="090000000813000004000000094000004a000000", @ANYRESHEX=r0, @ANYBLOB='\x00\x00@\x00'/20, @ANYRESDEC=r3, @ANYRES8=r3, @ANYRESOCT=r5], 0x50) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r6, 0x10f, 0x81, &(0x7f0000000080), 0x4) sendmmsg$inet(r6, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r7) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000140), 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="180000002400010390b266c3f01e208349001ea300800000001144b76a34002f80"], 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$FS_IOC_GETFLAGS(r8, 0x80086601, &(0x7f0000000040)) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'geneve1\x00', 0x0}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, 0x0, 0x0) setsockopt$packet_add_memb(r10, 0x107, 0x1, &(0x7f00000004c0)={r11, 0x3, 0x6, @broadcast}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r12 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r12, 0x107, 0x1, &(0x7f0000000180)={r11, 0x1, 0x6, @remote}, 0x10) 953.634058ms ago: executing program 5 (id=1388): r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x18) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001180)={r0, &(0x7f0000001000)="846ecd0ea1e151d2b2a1428fa7abb49afe5b27ccb641a0c9a87eeb37ecb622f91b612b017e4174d78032b50e8c92a5a4f8b35eb6", &(0x7f0000001080)=""/165}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) recvmsg$unix(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, 0x181) 942.327604ms ago: executing program 0 (id=1398): r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r0, 0x29, 0xcc, &(0x7f0000000640)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x6a27f823, @empty, 0xae42}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f00000005c0)=ANY=[@ANYBLOB="000000000000000048ac0dcd599d93785b23714583dabf7544b90e3971cdd9d0185680247a8c2c7544709550c681fc814e9d18eaaa82af394d198f3495421441299ae950ebae69a993a00119f84e8a1e317e056b1077d78ab3e97762c1ea45d1635c12a22d93d59daa81e277e3c9f42ea32d59862d4e"], 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000680)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r3}, 0x10) clock_gettime(0x0, &(0x7f0000000600)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) nanosleep(&(0x7f0000000080)={r6, r7+10000000}, &(0x7f0000000180)) nanosleep(&(0x7f0000000700)={r4, r5+10000000}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4f0, 0x340, 0x25, 0x148, 0x0, 0x60, 0x458, 0x2a8, 0x2a8, 0x458, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x3d, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4, 0x20}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000, 'syz0\x00', {0x481c}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x550) r8 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1c}}], 0x1) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_int(r9, &(0x7f0000000580)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) r11 = socket$netlink(0x10, 0x3, 0xf) connect$netlink(r11, &(0x7f0000000040)=@kern={0x10, 0x0, 0x0, 0x90000004}, 0xc) r12 = openat$cgroup_procs(r9, &(0x7f0000000780)='cgroup.procs\x00', 0x2, 0x0) sendfile(r12, r10, 0x0, 0x7) socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r14, 0x0) write$cgroup_subtree(r14, &(0x7f00000006c0)={[{0x2d, 'freezer'}, {0x2d, 'cpuacct'}, {0x2b, 'net_cls'}, {0x2d, 'net_cls'}, {0x2d, 'rdma'}, {0x2b, 'memory'}, {0x6, 'memory'}, {0x2d, 'net_prio'}, {0x2d, 'hugetlb'}, {0x2d, 'rlimit'}]}, 0x55) r15 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32=r15], 0x3c}}, 0x0) 941.156959ms ago: executing program 2 (id=1389): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000000), r1) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f00), r0) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000f40)={0x20, r2, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xc800}, 0x4000000) 786.361526ms ago: executing program 2 (id=1390): r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r3}, 0xc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000500)={0x4, &(0x7f00000004c0)=[{0x4d, 0x2, 0xda, 0xf}, {0x3, 0x0, 0x0, 0x8000}, {0x1, 0xff, 0x4b, 0x4}, {0x3b78, 0x8, 0x6, 0x7f}]}, 0x10) 701.6092ms ago: executing program 2 (id=1391): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8880, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'veth0_to_bridge\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) 607.817164ms ago: executing program 2 (id=1392): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6, 0xe, 0x0, 0x800}]}, 0x10) sendmmsg$unix(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x4}}], 0x1, 0x20000000) 540.038941ms ago: executing program 2 (id=1393): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) r13 = socket(0x1, 0x803, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'erspan0\x00'}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x24044800) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000002100fedbdf253900000008000300", @ANYRES32=r5, @ANYBLOB="10005a800c0004800500010004000000d3822d09dca055459c9e9dd3972e84b4af936d4ec23d8721b67b1bf7707b0ce8c7a5a1bba598275d2736cb96df5e47d50d34803cc5fbc1bb0d3c6f89b1762166609c5ee58a83a02a76a145c4203fc81b1698ec40f6046b862124d7bc4c2ffcda21909117380bdbc4408af77878d898aa634a971d8e99709119e47cdf766d9241e312ab3db71cc092f5bced1b232589bcef1ad83f6e03a9deb75b4ec0ccc741c6236712d1a10f9adaa27b2d7d25b3168bec3179486dbf96d762c15c97eaae63e768aabdcb1cf0c6c70e5a6e585d3d364d6ea4f1b539aaef68"], 0x2c}, 0x1, 0x0, 0x0, 0x200440c1}, 0x4004) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb0100180000000000007be1b25844a9415d5afca387c81ecd9fce123beb0421d0809802594d1e0034000000340000000200000000000000000000030000000003000000020000002000000000000000008000010500000020000000"], 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="60000000200000002abd7000ffdbdf250214b425070000060000000008001000000000000c000c40000000000000000808000200ac1414bb08000200e000000108000b004340000008000b0002000000080004000600000008000b00aa000000"], 0x60}, 0x1, 0x0, 0x0, 0x40080c0}, 0x40000) 2.183868ms ago: executing program 0 (id=1394): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r2, &(0x7f0000000280)={&(0x7f0000000000)={0xa, 0x4e21, 0x6, @mcast1, 0x6}, 0x1c, 0x0, 0x0, &(0x7f0000000440)=[@dstopts={{0x18, 0x29, 0x37, {0x87}}}, @rthdr_2292={{0x12, 0x29, 0x39, {0x3b, 0x0, 0x0, 0x8}}}], 0x30}, 0x20008080) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000b00)={'hsr0\x00', 0x9}) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000d40)=@nat={'nat\x00', 0x670, 0x5, 0x490, 0xf8, 0xf8, 0xfeffffff, 0x220, 0x2f0, 0x3f8, 0x3f8, 0xffffffff, 0x3f8, 0x3f8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'vlan0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0xc0, 0x108, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00'}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4f0) r5 = socket(0x400000000010, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000015c0)=@newtfilter={0x340, 0x2c, 0xd27, 0x70bd2a, 0x2, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x304, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x4}, @TCA_MATCHALL_ACT={0x2b8, 0x2, [@m_skbedit={0x14c, 0x1f, 0x0, 0x0, {{0xc}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x8, 0x6, 0xffffffffffffffff, 0xaf000000, 0x1}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x3ff}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}]}, {0xef, 0x6, "4c0b2d056d27d61bf9caa7638256403e0a873ca84f9e23b21c8b50af1caf8445094c77efc7a906cc51927cae63f5582b9cd772754ad95975f8cd15a7eaf94d6407b559f7e03319122770e276d047f4e861875f58f1f09c50ed6055b988b88edb58dbe1b4964af4b889e66d3e316861be06762ece4361114a00bf7934b73b2fcfcc13476192158ee9e4eb6ac960884827b73b0070d251dfb26c40ee090cf9d8b117e148b8bf73557fc7200d34a97ba8fdfb6822477f55185368e5735891cf0e8306674740bbb34c5274c454ba6a9f17fe9ac26abf476434507f12237fdafb132634a52843c93aa663f4dac1"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_nat={0x90, 0x16, 0x0, 0x0, {{0x8}, {0x4}, {0x68, 0x6, "efb1ceb9e1fd5c3140979a820830591412b3a1e51ff01430b993e9513caeae48b445fc37a3632c283671b57dd18d62cc84acc268c7342a5de3348ec761f3af57144f222391ee893e8205a4803bb4aa896c4072f30729be7dd8940468da8e00213347348f"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_mpls={0xd8, 0x1b, 0x0, 0x0, {{0x9}, {0x2c, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x5afe}, @TCA_MPLS_TTL={0x5, 0x7, 0xf7}, @TCA_MPLS_PROTO={0x6, 0x4, 0x214}, @TCA_MPLS_TC={0x5, 0x6, 0x2}, @TCA_MPLS_PROTO={0x6, 0x4, 0x7}]}, {0x83, 0x6, "eb2042fe38ab0d916321af29a34b9bbd84a6d6391439132dc2874bd38943ffa2edd2f00878610900061671b1b41a0e691137276ea931cb82b74fb0addd575d8dd7027ebf87153ce18d472c9d8e36562ec03932f3d40069543582a25007da76ae8c8d66c787e2eda8d73f8a0356d68837797fda29468e105a0b50fd4cc133fb"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x7}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x3}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x5}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x8}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x7}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x3}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xa, 0x8}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff3, 0xb}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}, @TCA_RATE={0x6, 0x5, {0xff, 0x5}}]}, 0x340}, 0x1, 0x0, 0x0, 0x240080d0}, 0x0) r8 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r8, &(0x7f0000000800)=[{{&(0x7f0000000080)={0xa, 0x0, 0x66f, @local, 0x4}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000000)="8000102e7577d401", 0x8}], 0x1, &(0x7f00000000c0)=[@hopopts_2292={{0x51, 0x29, 0x36, {0x21, 0x9, '\x00', [@padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x9}, @ra={0x5, 0x2, 0xb}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @generic={0x1, 0x23, "57f4f0d4e566e40f5e050d4458c19c98b6f2ace0c0dc48d8959b1bf4f0af66dd6b241c"}, @pad1]}}}], 0x68}}], 0x1, 0x4000010) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r9}, 0x18) r10 = socket(0x11, 0x800000003, 0x0) bind$tipc(r10, &(0x7f00000002c0)=@name={0x1e, 0x2, 0x1, {{0x0, 0x4}, 0x4}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@newqdisc={0xd0, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r11, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x400]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x40}]}]}]}}, @TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x16, 0x5, 0x1, 0x5, 0x0, 0xe, 0x7fffffff, 0x4}}, {0xc, 0x2, [0x8000, 0x0, 0x0, 0x3]}}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000003c0007010000000000400000017c00000400fc800c00018006000600800a00000800028004007280140007000001"], 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 0s ago: executing program 5 (id=1395): openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x788d41, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000e8ffffffffffff050000", @ANYRES32], 0x48) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket(0x200000000000011, 0x2, 0x1) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xd50, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x3, 0x10004, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = socket$inet6(0xa, 0x802, 0x0) sendmmsg$inet6(r3, &(0x7f0000000a40)=[{{&(0x7f0000000080)={0xa, 0x4e24, 0x3, @loopback, 0x9}, 0x1c, &(0x7f0000000400)}}, {{&(0x7f0000000480)={0xa, 0xfffe, 0x0, @mcast1, 0xfff}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x87}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x401}}, @hoplimit={{0x14, 0x29, 0x34, 0x6d6}}, @hopopts={{0xd8, 0x29, 0x36, {0x33, 0x17, '\x00', [@generic={0x3, 0xb9, "cb8b1eb58a57d150578acde519e6a9ad0301a2783c50a38500f6be3855321d6e4fcea9f4babb36a50aff854925aa4aa87bcb3940f68e18af326f6006dbd86c116c97969e475afc9939353ae9cde2a9a6d89b3d8f7e15d8d26615289f6f6f99f0516dfde9d2cd28b0bec4fbac0ced08f3ccee7872558ebda378383b9b2cb2183cd5262fdef9c7e408e73ae1d44118357580a09b73de9d52948adbb06dd19b836aec8db81a6d019c17dbdd47b10c20202d97d56d9b4c9554a35b"}]}}}], 0x120}}], 0x2, 0x4004004) close(0x3) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r4}, 0x38) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd7000fc0000008000000000000000024100000010001369623a7465616d30000000000b3ee8afdf93d30bd36579312e5e70083ea7be526e2e2acc9b2d709ce5b5f02c2ea1a5274681f7f73948f3d31729cbdef83dfff3c321497acd27c7a6c53a6912"], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x200c48a4) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000740)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r5, 0x8, 0x70bd2b, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4048884) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r6}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x6, 0x2a1, 0x7, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r7, 0x89fb, &(0x7f0000000040)={'bond0\x00', 0x10000}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000000c0)={'wg2\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES32=0x1, @ANYBLOB="0500"/20, @ANYRES32=r8, @ANYRES32, @ANYBLOB="03000000020000000200"/28], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x15, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r2, @ANYRES64=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r9}, 0x10) syz_open_procfs$namespace(0x0, &(0x7f00000009c0)='ns/pid\x00') kernel console output (not intermixed with test programs): adv_slave_0 (retrying later): interface not active [ 166.539602][ T8496] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 166.561528][ T8496] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.640754][ T8496] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.727851][ T8347] veth0_vlan: entered promiscuous mode [ 166.782756][ T8359] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 166.797776][ T8347] veth1_vlan: entered promiscuous mode [ 166.835706][ T8496] hsr_slave_0: entered promiscuous mode [ 166.852067][ T8496] hsr_slave_1: entered promiscuous mode [ 166.861234][ T8496] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 166.872041][ T8496] Cannot create hsr debugfs directory [ 166.924562][ T8359] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 166.993320][ T8359] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.004861][ T8359] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.014647][ T8359] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.026136][ T8359] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.262123][ T8565] netlink: 4 bytes leftover after parsing attributes in process `syz.2.664'. [ 167.308823][ T5837] Bluetooth: hci4: command tx timeout [ 167.349648][ T8347] veth0_macvtap: entered promiscuous mode [ 167.496714][ T8347] veth1_macvtap: entered promiscuous mode [ 167.624250][ T8347] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 167.663828][ T8574] netlink: 'syz.0.667': attribute type 1 has an invalid length. [ 167.675622][ T8347] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 167.683950][ T8574] netlink: 180 bytes leftover after parsing attributes in process `syz.0.667'. [ 167.727065][ T6271] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.734908][ T6271] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.758040][ T8347] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.768840][ T8347] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.777754][ T8347] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.787004][ T8347] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.849083][ T6271] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.865208][ T6271] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.981425][ T6291] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.994197][ T6291] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.098701][ T8578] netlink: 68 bytes leftover after parsing attributes in process `syz.6.614'. [ 168.137137][ T6271] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.144986][ T6271] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.218491][ T8496] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 168.232124][ T8580] netlink: 'syz.6.668': attribute type 1 has an invalid length. [ 168.267845][ T8496] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 168.289480][ T8496] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 168.359936][ T8581] gretap1: entered promiscuous mode [ 168.406690][ T8496] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 168.564725][ T8586] netlink: 28 bytes leftover after parsing attributes in process `syz.2.669'. [ 168.712152][ T8600] netlink: 14 bytes leftover after parsing attributes in process `syz.5.672'. [ 168.735007][ T8602] netlink: 132 bytes leftover after parsing attributes in process `syz.2.669'. [ 169.013068][ T8600] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 169.073426][ T8600] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 169.110139][ T8600] bond0 (unregistering): Released all slaves [ 169.387435][ T5837] Bluetooth: hci4: command tx timeout [ 169.507260][ T8614] netlink: 32 bytes leftover after parsing attributes in process `syz.2.675'. [ 169.540227][ T8496] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.608994][ T8496] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.648734][ T6291] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.655943][ T6291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.708476][ T6291] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.715750][ T6291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.870637][ T8620] netlink: 16 bytes leftover after parsing attributes in process `syz.5.679'. [ 170.388376][ T8496] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.584584][ T8496] veth0_vlan: entered promiscuous mode [ 170.653436][ T8666] netlink: 4 bytes leftover after parsing attributes in process `syz.2.690'. [ 170.684608][ T8496] veth1_vlan: entered promiscuous mode [ 170.689772][ T8660] netlink: 4 bytes leftover after parsing attributes in process `syz.6.689'. [ 170.691676][ T8666] sctp: [Deprecated]: syz.2.690 (pid 8666) Use of struct sctp_assoc_value in delayed_ack socket option. [ 170.691676][ T8666] Use struct sctp_sack_info instead [ 170.819540][ T8496] veth0_macvtap: entered promiscuous mode [ 170.854200][ T8496] veth1_macvtap: entered promiscuous mode [ 170.919935][ T8496] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 170.989902][ T8496] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 171.075842][ T8496] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.133403][ T8496] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.192149][ T8496] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.227258][ T8496] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.402892][ T8678] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 171.476217][ T5837] Bluetooth: hci4: command tx timeout [ 171.589267][ T8680] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.760661][ T8691] nbd: socks must be embedded in a SOCK_ITEM attr [ 172.104452][ T8702] IPVS: length: 78 != 8 [ 172.195857][ T8680] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.411030][ T8680] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.568091][ T8680] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.837779][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.845636][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.926667][ T8728] xt_CT: No such helper "syz1" [ 172.969435][ T6299] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.985595][ T6299] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.023828][ T8680] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.089420][ T8680] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.145607][ T8680] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.208406][ T8740] netlink: 64 bytes leftover after parsing attributes in process `syz.6.709'. [ 173.227750][ T8680] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.729560][ T44] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.760461][ T8748] netlink: 12 bytes leftover after parsing attributes in process `syz.2.711'. [ 173.977680][ T44] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.143817][ T44] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.337026][ T8767] netlink: zone id is out of range [ 174.367793][ T8767] netlink: zone id is out of range [ 174.389934][ T44] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.577465][ T8767] netlink: set zone limit has 4 unknown bytes [ 174.580003][ T8772] netlink: 32 bytes leftover after parsing attributes in process `syz.5.717'. [ 174.819712][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 174.829024][ T8783] netlink: 104 bytes leftover after parsing attributes in process `syz.0.721'. [ 174.840092][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 174.851198][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 174.863404][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 174.874402][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 174.959651][ T44] bridge_slave_1: left allmulticast mode [ 174.969727][ T44] bridge_slave_1: left promiscuous mode [ 174.983141][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.992619][ T8790] netlink: 4 bytes leftover after parsing attributes in process `syz.5.722'. [ 175.059277][ T8795] netlink: 104 bytes leftover after parsing attributes in process `syz.2.723'. [ 175.070510][ T44] bridge_slave_0: left allmulticast mode [ 175.070570][ T44] bridge_slave_0: left promiscuous mode [ 175.070775][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.680838][ T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 175.692660][ T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 175.702922][ T44] bond0 (unregistering): Released all slaves [ 175.830355][ T8809] syzkaller0: entered promiscuous mode [ 175.835890][ T8809] syzkaller0: entered allmulticast mode [ 175.858399][ T8819] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 175.933789][ T8822] rdma_rxe: rxe_newlink: failed to add macvlan1 [ 176.331568][ T8838] netlink: 32 bytes leftover after parsing attributes in process `syz.6.732'. [ 176.907165][ T5837] Bluetooth: hci4: command tx timeout [ 177.576004][ T8836] netlink: 8 bytes leftover after parsing attributes in process `syz.2.733'. [ 177.714149][ T8843] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.735'. [ 177.782908][ T8845] netlink: 104 bytes leftover after parsing attributes in process `syz.6.736'. [ 177.795847][ T8845] FAULT_INJECTION: forcing a failure. [ 177.795847][ T8845] name failslab, interval 1, probability 0, space 0, times 0 [ 177.810236][ T8845] CPU: 1 UID: 0 PID: 8845 Comm: syz.6.736 Not tainted 6.16.0-rc1-syzkaller-00189-gb549faa950e6 #0 PREEMPT(full) [ 177.810260][ T8845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 177.810278][ T8845] Call Trace: [ 177.810285][ T8845] [ 177.810293][ T8845] dump_stack_lvl+0x189/0x250 [ 177.810324][ T8845] ? __pfx____ratelimit+0x10/0x10 [ 177.810349][ T8845] ? __pfx_dump_stack_lvl+0x10/0x10 [ 177.810374][ T8845] ? __pfx__printk+0x10/0x10 [ 177.810410][ T8845] should_fail_ex+0x414/0x560 [ 177.810439][ T8845] should_failslab+0xa8/0x100 [ 177.810460][ T8845] kmem_cache_alloc_noprof+0x73/0x3c0 [ 177.810485][ T8845] ? skb_clone+0x212/0x3a0 [ 177.810513][ T8845] skb_clone+0x212/0x3a0 [ 177.810539][ T8845] __netlink_deliver_tap+0x404/0x850 [ 177.810573][ T8845] ? netlink_deliver_tap+0x2e/0x1b0 [ 177.810595][ T8845] netlink_deliver_tap+0x19c/0x1b0 [ 177.810616][ T8845] netlink_sendskb+0x68/0x140 [ 177.810638][ T8845] netlink_rcv_skb+0x28c/0x470 [ 177.810659][ T8845] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 177.810684][ T8845] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 177.810723][ T8845] ? netlink_deliver_tap+0x2e/0x1b0 [ 177.810742][ T8845] ? netlink_deliver_tap+0x2e/0x1b0 [ 177.810765][ T8845] xfrm_netlink_rcv+0x79/0x90 [ 177.810786][ T8845] netlink_unicast+0x75b/0x8d0 [ 177.810817][ T8845] netlink_sendmsg+0x805/0xb30 [ 177.810849][ T8845] ? __pfx_netlink_sendmsg+0x10/0x10 [ 177.810873][ T8845] ? aa_sock_msg_perm+0x94/0x160 [ 177.810904][ T8845] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 177.810925][ T8845] ? __pfx_netlink_sendmsg+0x10/0x10 [ 177.810947][ T8845] __sock_sendmsg+0x21c/0x270 [ 177.810968][ T8845] ____sys_sendmsg+0x505/0x830 [ 177.810996][ T8845] ? __pfx_____sys_sendmsg+0x10/0x10 [ 177.811029][ T8845] ? import_iovec+0x74/0xa0 [ 177.811051][ T8845] ___sys_sendmsg+0x21f/0x2a0 [ 177.811076][ T8845] ? __pfx____sys_sendmsg+0x10/0x10 [ 177.811140][ T8845] ? __fget_files+0x2a/0x420 [ 177.811158][ T8845] ? __fget_files+0x3a0/0x420 [ 177.811189][ T8845] __x64_sys_sendmsg+0x19b/0x260 [ 177.811214][ T8845] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 177.811247][ T8845] ? __pfx_ksys_write+0x10/0x10 [ 177.811261][ T8845] ? rcu_is_watching+0x15/0xb0 [ 177.811291][ T8845] ? do_syscall_64+0xbe/0x3b0 [ 177.811313][ T8845] do_syscall_64+0xfa/0x3b0 [ 177.811328][ T8845] ? lockdep_hardirqs_on+0x9c/0x150 [ 177.811351][ T8845] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.811369][ T8845] ? clear_bhb_loop+0x60/0xb0 [ 177.811390][ T8845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.811407][ T8845] RIP: 0033:0x7f9b55f8e929 [ 177.811427][ T8845] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.811442][ T8845] RSP: 002b:00007f9b56dc9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 177.811462][ T8845] RAX: ffffffffffffffda RBX: 00007f9b561b5fa0 RCX: 00007f9b55f8e929 [ 177.811475][ T8845] RDX: 0000000000000010 RSI: 0000200000000180 RDI: 0000000000000003 [ 177.811486][ T8845] RBP: 00007f9b56dc9090 R08: 0000000000000000 R09: 0000000000000000 [ 177.811498][ T8845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.811508][ T8845] R13: 0000000000000000 R14: 00007f9b561b5fa0 R15: 00007ffdcf283688 [ 177.811539][ T8845] [ 178.250280][ T8852] xt_CT: No such helper "pptp" [ 178.257485][ T8851] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 178.335943][ T8854] netlink: 'syz.6.738': attribute type 10 has an invalid length. [ 178.380232][ T8823] infiniband syz2: set active [ 178.382382][ T8852] Cannot find set identified by id 2 to match [ 178.386540][ T8823] infiniband syz2: added macvlan1 [ 178.398193][ T8823] syz2: rxe_create_cq: returned err = -12 [ 178.404207][ T8823] infiniband syz2: Couldn't create ib_mad CQ [ 178.410423][ T8823] infiniband syz2: Couldn't open port 1 [ 178.436426][ T8852] netlink: 5 bytes leftover after parsing attributes in process `syz.0.737'. [ 178.461101][ T8823] RDS/IB: syz2: added [ 178.465567][ T8823] smc: adding ib device syz2 with port count 1 [ 178.472292][ T8823] smc: ib device syz2 port 1 has pnetid [ 178.701445][ T44] hsr_slave_0: left promiscuous mode [ 178.736460][ T44] hsr_slave_1: left promiscuous mode [ 178.752995][ T44] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.765408][ T44] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.774409][ T44] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.782308][ T44] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.804260][ T44] veth1_macvtap: left promiscuous mode [ 178.810406][ T44] veth0_macvtap: left promiscuous mode [ 178.816090][ T44] veth1_vlan: left promiscuous mode [ 178.821578][ T44] veth0_vlan: left promiscuous mode [ 178.962365][ T8858] netlink: 4 bytes leftover after parsing attributes in process `syz.2.739'. [ 178.986551][ T5837] Bluetooth: hci4: command tx timeout [ 179.355683][ T44] team0 (unregistering): Port device team_slave_1 removed [ 179.405999][ T44] team0 (unregistering): Port device team_slave_0 removed [ 179.872201][ T8854] veth0_vlan: left promiscuous mode [ 179.885923][ T8854] veth0_vlan: entered promiscuous mode [ 179.899738][ T8854] team0: Device veth0_vlan failed to register rx_handler [ 180.482684][ T8882] batman_adv: batadv0: Adding interface: dummy0 [ 180.526075][ T8882] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.551658][ T8882] batman_adv: batadv0: Interface activated: dummy0 [ 180.597464][ T8877] batadv0: mtu less than device minimum [ 180.604614][ T8877] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 180.616810][ T8877] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 180.628669][ T8877] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 180.640645][ T8877] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 180.652657][ T8877] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 180.664044][ T8877] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 180.675253][ T8877] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 180.686763][ T8877] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 180.698649][ T8877] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 180.743073][ T8888] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 180.762248][ T8784] chnl_net:caif_netlink_parms(): no params data found [ 180.950547][ T8894] netlink: 104 bytes leftover after parsing attributes in process `syz.0.748'. [ 180.973611][ T8894] FAULT_INJECTION: forcing a failure. [ 180.973611][ T8894] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 181.003852][ T8894] CPU: 0 UID: 0 PID: 8894 Comm: syz.0.748 Not tainted 6.16.0-rc1-syzkaller-00189-gb549faa950e6 #0 PREEMPT(full) [ 181.003874][ T8894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 181.003883][ T8894] Call Trace: [ 181.003889][ T8894] [ 181.003897][ T8894] dump_stack_lvl+0x189/0x250 [ 181.003931][ T8894] ? __pfx____ratelimit+0x10/0x10 [ 181.003953][ T8894] ? __pfx_dump_stack_lvl+0x10/0x10 [ 181.003973][ T8894] ? __pfx__printk+0x10/0x10 [ 181.003998][ T8894] should_fail_ex+0x414/0x560 [ 181.004020][ T8894] _copy_to_user+0x31/0xb0 [ 181.004036][ T8894] simple_read_from_buffer+0xe1/0x170 [ 181.004055][ T8894] proc_fail_nth_read+0x1df/0x250 [ 181.004074][ T8894] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 181.004093][ T8894] ? rw_verify_area+0x258/0x650 [ 181.004112][ T8894] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 181.004129][ T8894] vfs_read+0x200/0x980 [ 181.004154][ T8894] ? __pfx___mutex_lock+0x10/0x10 [ 181.004168][ T8894] ? __pfx_vfs_read+0x10/0x10 [ 181.004189][ T8894] ? __fget_files+0x2a/0x420 [ 181.004208][ T8894] ? __fget_files+0x3a0/0x420 [ 181.004222][ T8894] ? __fget_files+0x2a/0x420 [ 181.004246][ T8894] ksys_read+0x145/0x250 [ 181.004264][ T8894] ? __pfx_ksys_read+0x10/0x10 [ 181.004284][ T8894] ? rcu_is_watching+0x15/0xb0 [ 181.004311][ T8894] ? do_syscall_64+0xbe/0x3b0 [ 181.004331][ T8894] do_syscall_64+0xfa/0x3b0 [ 181.004345][ T8894] ? lockdep_hardirqs_on+0x9c/0x150 [ 181.004368][ T8894] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.004384][ T8894] ? clear_bhb_loop+0x60/0xb0 [ 181.004404][ T8894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.004420][ T8894] RIP: 0033:0x7f0658f8d33c [ 181.004443][ T8894] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 181.004458][ T8894] RSP: 002b:00007f0659d13030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 181.004483][ T8894] RAX: ffffffffffffffda RBX: 00007f06591b5fa0 RCX: 00007f0658f8d33c [ 181.004495][ T8894] RDX: 000000000000000f RSI: 00007f0659d130a0 RDI: 0000000000000004 [ 181.004506][ T8894] RBP: 00007f0659d13090 R08: 0000000000000000 R09: 0000000000000000 [ 181.004516][ T8894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.004526][ T8894] R13: 0000000000000000 R14: 00007f06591b5fa0 R15: 00007ffc8579ea48 [ 181.004557][ T8894] [ 181.238816][ T5837] Bluetooth: hci4: command tx timeout [ 181.318570][ T8784] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.326901][ T8784] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.334149][ T8784] bridge_slave_0: entered allmulticast mode [ 181.342149][ T8784] bridge_slave_0: entered promiscuous mode [ 181.350503][ T8784] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.357987][ T8784] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.365205][ T8784] bridge_slave_1: entered allmulticast mode [ 181.373275][ T8784] bridge_slave_1: entered promiscuous mode [ 181.485030][ T8902] netlink: 40 bytes leftover after parsing attributes in process `syz.0.750'. [ 181.564471][ T8906] netlink: 104 bytes leftover after parsing attributes in process `syz.6.752'. [ 181.583573][ T8784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.609556][ T8784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 181.665037][ T8911] netlink: 9 bytes leftover after parsing attributes in process `syz.6.752'. [ 181.748910][ T8911] gretap0: entered promiscuous mode [ 181.799996][ T8784] team0: Port device team_slave_0 added [ 181.841631][ T8784] team0: Port device team_slave_1 added [ 182.101465][ T8784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 182.111168][ T8784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.139052][ T8784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 182.160417][ T8784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 182.172591][ T8784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.266671][ T8784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 182.474078][ T8932] netlink: 84 bytes leftover after parsing attributes in process `syz.6.759'. [ 182.479550][ T8784] hsr_slave_0: entered promiscuous mode [ 182.511315][ T8784] hsr_slave_1: entered promiscuous mode [ 182.538725][ T8784] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 182.566627][ T8784] Cannot create hsr debugfs directory [ 183.185870][ T8954] netlink: 24 bytes leftover after parsing attributes in process `syz.0.766'. [ 183.307887][ T5837] Bluetooth: hci4: command tx timeout [ 183.618748][ T8784] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 183.640657][ T8784] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 183.672691][ T8784] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 183.792265][ T8963] vlan4: entered promiscuous mode [ 183.802010][ T8963] vlan4: entered allmulticast mode [ 183.824638][ T8963] hsr_slave_1: entered allmulticast mode [ 183.894509][ T8784] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 184.027100][ T8968] netlink: 4 bytes leftover after parsing attributes in process `syz.2.768'. [ 184.575446][ T8994] Bluetooth: MGMT ver 1.23 [ 184.650449][ T8998] netlink: 16 bytes leftover after parsing attributes in process `syz.6.775'. [ 184.670034][ T8998] netlink: 40 bytes leftover after parsing attributes in process `syz.6.775'. [ 184.769778][ T8784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.841168][ T8784] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.873561][ T6272] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.880798][ T6272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.954199][ T6272] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.961441][ T6272] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.386714][ T5837] Bluetooth: hci4: command tx timeout [ 185.810412][ T8784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.026885][ T8784] veth0_vlan: entered promiscuous mode [ 186.077975][ T8784] veth1_vlan: entered promiscuous mode [ 186.222834][ T9027] netlink: 'syz.0.781': attribute type 2 has an invalid length. [ 186.288592][ T9027] netlink: 12 bytes leftover after parsing attributes in process `syz.0.781'. [ 186.490841][ T8784] veth0_macvtap: entered promiscuous mode [ 186.590125][ T8784] veth1_macvtap: entered promiscuous mode [ 186.720725][ T8784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.734378][ T9035] netlink: 4 bytes leftover after parsing attributes in process `syz.0.783'. [ 186.735361][ T8784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.775123][ T8784] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.791323][ T8784] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.802607][ T8784] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.816443][ T8784] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.227806][ T6291] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.269387][ T6291] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.385359][ T6291] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.418782][ T6291] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.437440][ T9044] netlink: 'syz.5.787': attribute type 2 has an invalid length. [ 187.472799][ T9046] netlink: 'syz.5.787': attribute type 2 has an invalid length. [ 187.691717][ T9049] tipc: Enabling of bearer rejected, failed to enable media [ 187.963762][ T9056] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.080655][ T9056] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.210403][ T9066] netlink: 'syz.5.793': attribute type 10 has an invalid length. [ 188.246422][ T9050] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.518915][ T9066] team0: Port device syz_tun added [ 188.640922][ T6288] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.771659][ T6288] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.875893][ T6288] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.050107][ T9050] syz.0.788 (9050) used greatest stack depth: 17464 bytes left [ 189.076980][ T9075] netlink: 104 bytes leftover after parsing attributes in process `syz.2.795'. [ 189.132357][ T9078] bridge1: entered promiscuous mode [ 189.164298][ T9078] bridge1: entered allmulticast mode [ 189.192693][ T9078] team0: Port device bridge1 added [ 189.352236][ T6288] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.396556][ T9088] IPVS: Unknown mcast interface: ip6erspan0 [ 189.445324][ T9089] IPVS: Unknown mcast interface: ip6erspan0 [ 189.564775][ T9098] netlink: 8 bytes leftover after parsing attributes in process `syz.0.800'. [ 189.833873][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 189.845595][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 189.856480][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 189.871267][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 189.873174][ T6288] bridge_slave_1: left allmulticast mode [ 189.887049][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 189.966260][ T6288] bridge_slave_1: left promiscuous mode [ 189.976654][ T6288] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.002076][ T9122] netlink: 8 bytes leftover after parsing attributes in process `syz.0.805'. [ 190.043320][ T6288] bridge_slave_0: left allmulticast mode [ 190.062656][ T6288] bridge_slave_0: left promiscuous mode [ 190.079867][ T6288] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.981235][ T6288] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 190.992152][ T6288] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 191.007377][ T6288] bond0 (unregistering): Released all slaves [ 191.084560][ T9150] netlink: 'syz.6.807': attribute type 16 has an invalid length. [ 191.104098][ T9150] netlink: 'syz.6.807': attribute type 17 has an invalid length. [ 191.132821][ T9129] tun0: tun_chr_ioctl cmd 1074025677 [ 191.143472][ T9129] tun0: linktype set to 5 [ 191.149794][ T9152] netlink: 44 bytes leftover after parsing attributes in process `syz.5.808'. [ 191.322365][ T9150] net_ratelimit: 10 callbacks suppressed [ 191.322375][ T9150] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 191.449369][ T9155] netlink: 'syz.5.809': attribute type 10 has an invalid length. [ 191.493702][ T9155] netlink: 40 bytes leftover after parsing attributes in process `syz.5.809'. [ 191.507925][ T9154] netlink: 248 bytes leftover after parsing attributes in process `syz.5.809'. [ 191.575981][ T9155] veth0_vlan: entered allmulticast mode [ 191.587744][ T9155] bridge0: port 3(veth0_vlan) entered blocking state [ 191.621699][ T9155] bridge0: port 3(veth0_vlan) entered disabled state [ 191.660338][ T9155] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 191.747816][ T9167] netlink: 'syz.0.811': attribute type 1 has an invalid length. [ 191.755692][ T9167] netlink: 244 bytes leftover after parsing attributes in process `syz.0.811'. [ 191.779545][ T9162] mac80211_hwsim hwsim22 wlan0: entered promiscuous mode [ 191.789163][ T9162] macsec2: entered allmulticast mode [ 191.794624][ T9162] mac80211_hwsim hwsim22 wlan0: entered allmulticast mode [ 191.805189][ T9162] batman_adv: batadv0: Adding interface: macsec2 [ 191.811795][ T9162] batman_adv: batadv0: The MTU of interface macsec2 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.838653][ T9162] batman_adv: batadv0: Interface activated: macsec2 [ 191.845688][ T9162] batadv0: mtu less than device minimum [ 191.857583][ T9162] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 191.869694][ T9162] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 191.880974][ T9162] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 191.892233][ T9162] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 191.903491][ T9162] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 191.914639][ T9162] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 191.925897][ T9162] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 191.946815][ T5837] Bluetooth: hci4: command tx timeout [ 191.984067][ T9171] netlink: 84 bytes leftover after parsing attributes in process `syz.2.813'. [ 192.041037][ T9172] netlink: 4 bytes leftover after parsing attributes in process `syz.2.813'. [ 192.057189][ T9171] netlink: 28 bytes leftover after parsing attributes in process `syz.2.813'. [ 192.105446][ T9169] netlink: 12 bytes leftover after parsing attributes in process `syz.2.813'. [ 192.500504][ T9186] netlink: 'syz.6.818': attribute type 10 has an invalid length. [ 193.053531][ T6288] hsr_slave_0: left promiscuous mode [ 193.103009][ T6288] hsr_slave_1: left promiscuous mode [ 193.113176][ T6288] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.123487][ T6288] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 193.135917][ T6288] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.145445][ T6288] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.182934][ T6288] veth1_macvtap: left promiscuous mode [ 193.189443][ T6288] veth0_macvtap: left promiscuous mode [ 193.195030][ T6288] veth1_vlan: left promiscuous mode [ 193.201655][ T6288] veth0_vlan: left promiscuous mode [ 193.522724][ T9191] sctp: [Deprecated]: syz.5.819 (pid 9191) Use of struct sctp_assoc_value in delayed_ack socket option. [ 193.522724][ T9191] Use struct sctp_sack_info instead [ 193.861936][ T6288] team0 (unregistering): Port device team_slave_1 removed [ 193.912096][ T6288] team0 (unregistering): Port device team_slave_0 removed [ 194.027481][ T5837] Bluetooth: hci4: command tx timeout [ 194.285189][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.291676][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.372870][ T9186] macvlan0: entered allmulticast mode [ 194.395889][ T9186] veth1_vlan: entered allmulticast mode [ 194.414385][ T9186] team0: Port device macvlan0 added [ 194.436632][ T9197] tipc: Enabling of bearer rejected, failed to enable media [ 194.770217][ T9211] netlink: 104 bytes leftover after parsing attributes in process `syz.5.823'. [ 195.566054][ T9113] chnl_net:caif_netlink_parms(): no params data found [ 195.691306][ T9240] pim6reg0: tun_chr_ioctl cmd 2147767521 [ 195.740857][ T9236] netlink: 'syz.5.831': attribute type 1 has an invalid length. [ 195.779474][ T9236] netlink: 224 bytes leftover after parsing attributes in process `syz.5.831'. [ 196.106508][ T5837] Bluetooth: hci4: command tx timeout [ 196.350831][ T5845] Bluetooth: hci2: command 0x0406 tx timeout [ 196.362358][ T9265] netlink: 'syz.2.838': attribute type 1 has an invalid length. [ 196.376230][ T9265] netlink: 224 bytes leftover after parsing attributes in process `syz.2.838'. [ 196.626485][ T9265] netlink: 4 bytes leftover after parsing attributes in process `syz.2.838'. [ 196.733990][ T9113] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.762040][ T9113] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.804933][ T9113] bridge_slave_0: entered allmulticast mode [ 196.853151][ T9113] bridge_slave_0: entered promiscuous mode [ 196.887073][ T9113] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.922590][ T9113] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.934060][ T9113] bridge_slave_1: entered allmulticast mode [ 196.944506][ T9113] bridge_slave_1: entered promiscuous mode [ 197.315629][ T9113] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.359925][ T9113] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.545776][ T9113] team0: Port device team_slave_0 added [ 197.580068][ T9113] team0: Port device team_slave_1 added [ 197.658949][ T9113] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.672353][ T9113] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.701544][ T9113] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.717200][ T9113] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.733205][ T9113] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.760650][ T9113] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.772702][ T9301] netlink: 4 bytes leftover after parsing attributes in process `syz.2.847'. [ 197.797499][ T9301] netlink: 4 bytes leftover after parsing attributes in process `syz.2.847'. [ 197.883411][ T9113] hsr_slave_0: entered promiscuous mode [ 197.891829][ T9113] hsr_slave_1: entered promiscuous mode [ 197.899149][ T9113] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 197.941474][ T9113] Cannot create hsr debugfs directory [ 198.004104][ T9310] netlink: 24 bytes leftover after parsing attributes in process `syz.6.850'. [ 198.186686][ T51] Bluetooth: hci4: command tx timeout [ 198.784552][ T9343] netlink: 40 bytes leftover after parsing attributes in process `syz.2.859'. [ 198.892550][ T9351] netlink: 28 bytes leftover after parsing attributes in process `syz.5.861'. [ 198.902587][ T9351] netlink: 28 bytes leftover after parsing attributes in process `syz.5.861'. [ 198.963534][ T9351] gretap0: entered promiscuous mode [ 198.971714][ T9351] gretap0: left promiscuous mode [ 199.077182][ T9353] RDS: rds_bind could not find a transport for fe88::7, load rds_tcp or rds_rdma? [ 199.365156][ T9113] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 199.384201][ T9113] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 199.462536][ T9375] netlink: 40 bytes leftover after parsing attributes in process `syz.6.869'. [ 199.464150][ T9113] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 199.525185][ T9113] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 199.804306][ T9397] netlink: 32 bytes leftover after parsing attributes in process `syz.2.874'. [ 199.854883][ T9400] netlink: 16 bytes leftover after parsing attributes in process `syz.5.875'. [ 200.267957][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 200.829450][ T6288] wlan1: Trigger new scan to find an IBSS to join [ 201.724408][ T9407] __nla_validate_parse: 2 callbacks suppressed [ 201.724428][ T9407] netlink: 20 bytes leftover after parsing attributes in process `syz.5.876'. [ 201.755016][ T9422] netlink: 12 bytes leftover after parsing attributes in process `syz.2.879'. [ 201.787102][ T9422] vlan4: entered promiscuous mode [ 201.792174][ T9422] gretap0: entered promiscuous mode [ 201.858944][ T9113] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.970006][ T9113] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.988809][ T9434] netlink: 'syz.6.883': attribute type 5 has an invalid length. [ 202.010588][ T9434] ip6erspan0: entered allmulticast mode [ 202.034205][ T6284] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.034533][ T9435] netlink: 4 bytes leftover after parsing attributes in process `syz.0.881'. [ 202.041435][ T6284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.092320][ T6284] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.099564][ T6284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.621771][ T9459] netlink: 8 bytes leftover after parsing attributes in process `syz.2.888'. [ 202.630800][ T9459] netlink: 'syz.2.888': attribute type 21 has an invalid length. [ 202.721988][ T9113] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.914105][ T9113] veth0_vlan: entered promiscuous mode [ 202.918937][ T9468] netlink: 32 bytes leftover after parsing attributes in process `syz.2.889'. [ 202.947778][ T9113] veth1_vlan: entered promiscuous mode [ 203.058379][ T9113] veth0_macvtap: entered promiscuous mode [ 203.143855][ T9113] veth1_macvtap: entered promiscuous mode [ 203.177816][ T9481] net_ratelimit: 12 callbacks suppressed [ 203.177833][ T9481] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 203.232326][ T9113] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 203.269332][ T9113] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 203.318948][ T9113] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.338826][ T9113] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.363954][ T9113] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.378383][ T9113] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.412674][ T9491] netlink: 'syz.0.896': attribute type 10 has an invalid length. [ 203.574689][ T6272] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.613913][ T6272] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.720383][ T6288] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.739724][ T6288] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.774001][ T9510] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 203.823735][ T9513] netlink: 32 bytes leftover after parsing attributes in process `syz.6.902'. [ 203.867382][ T6288] wlan1: Trigger new scan to find an IBSS to join [ 203.902472][ T9516] xfrm1: entered promiscuous mode [ 203.914356][ T9516] xfrm1: entered allmulticast mode [ 203.983527][ T9516] xt_hashlimit: size too large, truncated to 1048576 [ 204.158717][ T9530] netlink: 'syz.2.905': attribute type 4 has an invalid length. [ 204.639693][ T9541] xt_cgroup: xt_cgroup: no path or classid specified [ 204.990743][ T9551] netlink: 'syz.0.912': attribute type 1 has an invalid length. [ 205.017328][ T6291] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.158729][ T6291] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.343514][ T6291] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.432845][ T6291] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.545208][ T6291] bridge_slave_1: left allmulticast mode [ 205.553099][ T6291] bridge_slave_1: left promiscuous mode [ 205.559838][ T6291] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.569355][ T6291] bridge_slave_0: left allmulticast mode [ 205.574994][ T6291] bridge_slave_0: left promiscuous mode [ 205.581399][ T6291] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.781720][ T9558] netlink: 92 bytes leftover after parsing attributes in process `syz.0.913'. [ 205.792792][ T9556] netlink: 8 bytes leftover after parsing attributes in process `syz.6.914'. [ 205.803723][ T9559] netlink: 32 bytes leftover after parsing attributes in process `syz.5.916'. [ 205.823617][ T9556] GUP no longer grows the stack in syz.6.914 (9556): 200000003000-20000000a000 (200000001000) [ 205.839994][ T9556] CPU: 1 UID: 0 PID: 9556 Comm: syz.6.914 Not tainted 6.16.0-rc1-syzkaller-00189-gb549faa950e6 #0 PREEMPT(full) [ 205.840020][ T9556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 205.840032][ T9556] Call Trace: [ 205.840040][ T9556] [ 205.840048][ T9556] dump_stack_lvl+0x189/0x250 [ 205.840086][ T9556] ? __pfx_dump_stack_lvl+0x10/0x10 [ 205.840112][ T9556] ? __pfx__printk+0x10/0x10 [ 205.840129][ T9556] ? find_vma+0xe7/0x160 [ 205.840161][ T9556] __get_user_pages+0x2a60/0x30b0 [ 205.840226][ T9556] ? __pfx___get_user_pages+0x10/0x10 [ 205.840250][ T9556] ? __gup_longterm_locked+0xbf7/0x15b0 [ 205.840275][ T9556] ? down_read_killable+0x1d1/0x350 [ 205.840301][ T9556] __gup_longterm_locked+0xd66/0x15b0 [ 205.840341][ T9556] ? sanity_check_pinned_pages+0x11cf/0x12c0 [ 205.840376][ T9556] ? gup_fast_fallback+0x1afc/0x2260 [ 205.840406][ T9556] gup_fast_fallback+0x1cd4/0x2260 [ 205.840428][ T9556] ? is_bpf_text_address+0x26/0x2b0 [ 205.840494][ T9556] ? __pfx_gup_fast_fallback+0x10/0x10 [ 205.840516][ T9556] ? stack_trace_save+0x9c/0xe0 [ 205.840539][ T9556] ? stack_depot_save_flags+0x40/0x900 [ 205.840573][ T9556] ? pin_user_pages_fast+0x4d/0xb0 [ 205.840600][ T9556] iov_iter_extract_pages+0x35a/0x5e0 [ 205.840630][ T9556] extract_iter_to_sg+0xe46/0x24e0 [ 205.840673][ T9556] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 205.840720][ T9556] ? __asan_memset+0x22/0x50 [ 205.840747][ T9556] af_alg_get_rsgl+0x436/0x810 [ 205.840791][ T9556] aead_recvmsg+0x4cc/0x13f0 [ 205.840842][ T9556] ? __pfx_aead_recvmsg+0x10/0x10 [ 205.840865][ T9556] ? trace_sched_exit_tp+0x38/0x120 [ 205.840890][ T9556] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 205.840914][ T9556] ? __pfx_aead_recvmsg+0x10/0x10 [ 205.840940][ T9556] sock_recvmsg_nosec+0x183/0x1c0 [ 205.840964][ T9556] ____sys_recvmsg+0x3aa/0x460 [ 205.840997][ T9556] ? __pfx_____sys_recvmsg+0x10/0x10 [ 205.841039][ T9556] ? import_iovec+0x74/0xa0 [ 205.841064][ T9556] ___sys_recvmsg+0x1b5/0x510 [ 205.841094][ T9556] ? __pfx____sys_recvmsg+0x10/0x10 [ 205.841155][ T9556] ? __might_fault+0xb0/0x130 [ 205.841176][ T9556] do_recvmmsg+0x307/0x770 [ 205.841211][ T9556] ? __pfx_do_recvmmsg+0x10/0x10 [ 205.841249][ T9556] ? __pfx_do_futex+0x10/0x10 [ 205.841289][ T9556] __x64_sys_recvmmsg+0x190/0x240 [ 205.841316][ T9556] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 205.841338][ T9556] ? rcu_is_watching+0x15/0xb0 [ 205.841376][ T9556] ? do_syscall_64+0xbe/0x3b0 [ 205.841399][ T9556] do_syscall_64+0xfa/0x3b0 [ 205.841415][ T9556] ? lockdep_hardirqs_on+0x9c/0x150 [ 205.841440][ T9556] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.841459][ T9556] ? clear_bhb_loop+0x60/0xb0 [ 205.841481][ T9556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.841500][ T9556] RIP: 0033:0x7f9b55f8e929 [ 205.841517][ T9556] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 205.841533][ T9556] RSP: 002b:00007f9b56dc9038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 205.841553][ T9556] RAX: ffffffffffffffda RBX: 00007f9b561b5fa0 RCX: 00007f9b55f8e929 [ 205.841567][ T9556] RDX: 0000000000000002 RSI: 0000200000000c80 RDI: 0000000000000006 [ 205.841579][ T9556] RBP: 00007f9b56010b39 R08: 0000000000000000 R09: 0000000000000000 [ 205.841590][ T9556] R10: 0000000000000060 R11: 0000000000000246 R12: 0000000000000000 [ 205.841601][ T9556] R13: 0000000000000000 R14: 00007f9b561b5fa0 R15: 00007ffdcf283688 [ 205.841634][ T9556] [ 206.414814][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 206.432730][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 206.449705][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 206.467625][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 206.482396][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 206.546674][ T6291] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 206.577828][ T6291] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 206.598218][ T6291] bond0 (unregistering): Released all slaves [ 206.827273][ T6288] wlan1: Creating new IBSS network, BSSID 8a:8f:76:03:54:a4 [ 207.370442][ T9601] netlink: 76 bytes leftover after parsing attributes in process `syz.0.923'. [ 207.443640][ T9608] netlink: 16 bytes leftover after parsing attributes in process `syz.2.924'. [ 207.636652][ T9614] netlink: 8 bytes leftover after parsing attributes in process `syz.2.927'. [ 207.719637][ T9619] netlink: 4 bytes leftover after parsing attributes in process `syz.0.928'. [ 207.742106][ T9619] netlink: 4 bytes leftover after parsing attributes in process `syz.0.928'. [ 207.765402][ T9619] netlink: 8 bytes leftover after parsing attributes in process `syz.0.928'. [ 208.070506][ T9619] openvswitch: netlink: Multiple metadata blocks provided [ 208.464141][ T6291] hsr_slave_0: left promiscuous mode [ 208.489015][ T6291] hsr_slave_1: left promiscuous mode [ 208.495163][ T6291] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.527528][ T6291] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.542745][ T6291] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.572298][ T6291] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.588527][ T51] Bluetooth: hci4: command tx timeout [ 208.633855][ T6291] veth1_macvtap: left promiscuous mode [ 208.640517][ T6291] veth0_macvtap: left promiscuous mode [ 208.647405][ T6291] veth1_vlan: left promiscuous mode [ 208.652873][ T6291] veth0_vlan: left promiscuous mode [ 208.705993][ T9644] netlink: 28 bytes leftover after parsing attributes in process `syz.2.935'. [ 208.715385][ T9644] netlink: 28 bytes leftover after parsing attributes in process `syz.2.935'. [ 209.202521][ T6291] team0 (unregistering): Port device team_slave_1 removed [ 209.247450][ T6291] team0 (unregistering): Port device team_slave_0 removed [ 209.631511][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.753722][ T9648] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode [ 209.791480][ T9648] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode [ 210.050342][ T9568] chnl_net:caif_netlink_parms(): no params data found [ 210.423991][ T9568] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.436800][ T9568] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.444333][ T9568] bridge_slave_0: entered allmulticast mode [ 210.454399][ T9568] bridge_slave_0: entered promiscuous mode [ 210.464539][ T9568] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.472495][ T9568] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.480086][ T9568] bridge_slave_1: entered allmulticast mode [ 210.488927][ T9568] bridge_slave_1: entered promiscuous mode [ 210.563200][ T9568] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.590629][ T9568] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.631110][ T9568] team0: Port device team_slave_0 added [ 210.642002][ T9568] team0: Port device team_slave_1 added [ 210.654250][ T9686] netlink: del zone limit has 4 unknown bytes [ 210.666669][ T51] Bluetooth: hci4: command tx timeout [ 210.702888][ T9568] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.715325][ T9568] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.744608][ T9568] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.759372][ T9568] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.766718][ T9568] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.793687][ T9568] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.992941][ T9568] hsr_slave_0: entered promiscuous mode [ 211.001786][ T9568] hsr_slave_1: entered promiscuous mode [ 211.012185][ T9568] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 211.021085][ T9568] Cannot create hsr debugfs directory [ 211.087933][ T9699] netlink: 4 bytes leftover after parsing attributes in process `syz.6.950'. [ 211.352886][ T9707] No such timeout policy "syz0" [ 211.694894][ T9720] bridge4: entered allmulticast mode [ 211.769139][ T9725] netem: incorrect gi model size [ 211.774660][ T9725] netem: change failed [ 212.142371][ T9568] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 212.188716][ T9568] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 212.230032][ T9568] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 212.331232][ T9568] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 212.576525][ T9773] netlink: 8 bytes leftover after parsing attributes in process `syz.5.974'. [ 212.611604][ T9773] netlink: 56 bytes leftover after parsing attributes in process `syz.5.974'. [ 212.684910][ T9568] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.750084][ T51] Bluetooth: hci4: command tx timeout [ 212.780137][ T9568] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.812638][ T6288] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.819821][ T6288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.849876][ T6288] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.857082][ T6288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.865965][ T9790] netlink: 68 bytes leftover after parsing attributes in process `syz.2.972'. [ 212.967783][ T9790] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 212.975218][ T9790] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 213.062209][ T9795] Bluetooth: MGMT ver 1.23 [ 213.129092][ T9795] geneve2: entered promiscuous mode [ 213.141719][ T9798] netlink: 20 bytes leftover after parsing attributes in process `syz.5.980'. [ 213.234750][ T9807] netlink: 4 bytes leftover after parsing attributes in process `syz.6.979'. [ 213.560933][ T9568] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.732033][ T9568] veth0_vlan: entered promiscuous mode [ 213.795160][ T9568] veth1_vlan: entered promiscuous mode [ 213.852276][ T9820] netlink: 4 bytes leftover after parsing attributes in process `syz.5.984'. [ 213.917985][ T9568] veth0_macvtap: entered promiscuous mode [ 213.952128][ T9568] veth1_macvtap: entered promiscuous mode [ 214.141274][ T9568] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 214.212405][ T9568] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 214.234874][ T9568] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.276960][ T9568] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.285827][ T9568] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.306628][ T9568] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.312875][ T9833] netlink: 44 bytes leftover after parsing attributes in process `syz.2.990'. [ 214.339710][ T9833] netlink: 12 bytes leftover after parsing attributes in process `syz.2.990'. [ 214.386384][ T9836] netlink: 'syz.2.990': attribute type 32 has an invalid length. [ 214.394486][ T9833] netlink: 8 bytes leftover after parsing attributes in process `syz.2.990'. [ 214.405091][ T9836] netlink: 8 bytes leftover after parsing attributes in process `syz.2.990'. [ 214.497248][ T9836] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 214.627360][ T9843] Cannot find add_set index 2 as target [ 214.676028][ T6288] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.701443][ T6288] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.771529][ T6288] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.786059][ T6288] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.827017][ T5837] Bluetooth: hci4: command tx timeout [ 214.992973][ T9852] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 215.403263][ T9874] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 215.433957][ T9874] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.465458][ T9874] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 215.483936][ T9874] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 215.598671][ T9874] bond0: (slave batadv0): Releasing backup interface [ 215.898148][ T9894] netlink: 'syz.0.1008': attribute type 1 has an invalid length. [ 216.005284][ T9894] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 216.294615][ T9914] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 216.906794][ T5837] Bluetooth: hci4: command 0x0405 tx timeout [ 216.960433][ T9931] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.969424][ T9931] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.980289][ T9931] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.989884][ T9931] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.510401][ T6291] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.602216][ T6291] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.683388][ T6291] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.772744][ T6291] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.911799][ T6291] bridge_slave_1: left allmulticast mode [ 217.919290][ T6291] bridge_slave_1: left promiscuous mode [ 217.925007][ T6291] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.934197][ T6291] bridge_slave_0: left allmulticast mode [ 217.941333][ T6291] bridge_slave_0: left promiscuous mode [ 217.947491][ T6291] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.472663][ T6291] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 218.538011][ T6291] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 218.570891][ T6291] bond0 (unregistering): Released all slaves [ 218.601584][ T9958] tipc: New replicast peer: 255.255.255.255 [ 218.610736][ T9958] tipc: Enabled bearer , priority 10 [ 218.622995][ T9964] __nla_validate_parse: 6 callbacks suppressed [ 218.623011][ T9964] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1024'. [ 218.665013][ T9964] tipc: Disabling bearer [ 218.795133][ T9974] tipc: Enabling of bearer rejected, failed to enable media [ 218.928275][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 218.937796][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 218.947032][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 218.964435][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 218.974947][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 219.022571][ T9987] FAULT_INJECTION: forcing a failure. [ 219.022571][ T9987] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 219.037375][ T9987] CPU: 0 UID: 0 PID: 9987 Comm: syz.5.1030 Not tainted 6.16.0-rc1-syzkaller-00189-gb549faa950e6 #0 PREEMPT(full) [ 219.037402][ T9987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 219.037414][ T9987] Call Trace: [ 219.037421][ T9987] [ 219.037429][ T9987] dump_stack_lvl+0x189/0x250 [ 219.037459][ T9987] ? __pfx____ratelimit+0x10/0x10 [ 219.037485][ T9987] ? __pfx_dump_stack_lvl+0x10/0x10 [ 219.037510][ T9987] ? __pfx__printk+0x10/0x10 [ 219.037529][ T9987] ? __might_fault+0xb0/0x130 [ 219.037558][ T9987] should_fail_ex+0x414/0x560 [ 219.037586][ T9987] _copy_from_iter+0x1db/0x16f0 [ 219.037616][ T9987] ? sock_alloc_send_pskb+0x875/0x990 [ 219.037646][ T9987] ? __pfx__copy_from_iter+0x10/0x10 [ 219.037680][ T9987] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 219.037707][ T9987] skb_copy_datagram_from_iter+0xf5/0x720 [ 219.037733][ T9987] ? __asan_memcpy+0x40/0x70 [ 219.037757][ T9987] ? eth_header+0x11b/0x200 [ 219.037783][ T9987] packet_sendmsg+0x3abb/0x53f0 [ 219.037819][ T9987] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 219.037875][ T9987] ? __pfx___might_resched+0x10/0x10 [ 219.037900][ T9987] ? __lock_acquire+0xab9/0xd20 [ 219.037937][ T9987] ? __pfx_packet_sendmsg+0x10/0x10 [ 219.037957][ T9987] ? aa_sk_perm+0x81e/0x950 [ 219.037983][ T9987] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 219.038013][ T9987] ? aa_sock_msg_perm+0x94/0x160 [ 219.038036][ T9987] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 219.038057][ T9987] ? __pfx_packet_sendmsg+0x10/0x10 [ 219.038081][ T9987] __sock_sendmsg+0x21c/0x270 [ 219.038101][ T9987] __sys_sendto+0x3bd/0x520 [ 219.038124][ T9987] ? __pfx___sys_sendto+0x10/0x10 [ 219.038141][ T9987] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 219.038178][ T9987] ? __fget_files+0x3a0/0x420 [ 219.038208][ T9987] ? ksys_write+0x22a/0x250 [ 219.038227][ T9987] ? __pfx_ksys_write+0x10/0x10 [ 219.038241][ T9987] ? rcu_is_watching+0x15/0xb0 [ 219.038272][ T9987] __x64_sys_sendto+0xde/0x100 [ 219.038295][ T9987] do_syscall_64+0xfa/0x3b0 [ 219.038311][ T9987] ? lockdep_hardirqs_on+0x9c/0x150 [ 219.038335][ T9987] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.038353][ T9987] ? clear_bhb_loop+0x60/0xb0 [ 219.038374][ T9987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.038391][ T9987] RIP: 0033:0x7f74e878e929 [ 219.038407][ T9987] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 219.038422][ T9987] RSP: 002b:00007f74e65f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 219.038442][ T9987] RAX: ffffffffffffffda RBX: 00007f74e89b5fa0 RCX: 00007f74e878e929 [ 219.038456][ T9987] RDX: 0000000000000017 RSI: 00002000000000c0 RDI: 0000000000000003 [ 219.038467][ T9987] RBP: 00007f74e65f6090 R08: 0000200000000040 R09: 0000000000000014 [ 219.038479][ T9987] R10: 0000000020008040 R11: 0000000000000246 R12: 0000000000000001 [ 219.038490][ T9987] R13: 0000000000000000 R14: 00007f74e89b5fa0 R15: 00007ffc0676c7b8 [ 219.038520][ T9987] [ 219.665841][ T9998] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1034'. [ 219.675319][ T9998] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1034'. [ 220.138458][ T5205] udevd[5205]: worker [5851] terminated by signal 33 (Unknown signal 33) [ 220.389211][T10013] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1039'. [ 220.554924][T10017] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1040'. [ 220.584962][T10017] netlink: 'syz.5.1040': attribute type 7 has an invalid length. [ 220.615301][T10017] netlink: 'syz.5.1040': attribute type 8 has an invalid length. [ 220.647456][T10017] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1040'. [ 221.066745][ T5837] Bluetooth: hci4: command tx timeout [ 221.143874][T10037] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1044'. [ 221.358607][T10041] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 221.385300][T10039] netlink: 'syz.0.1045': attribute type 3 has an invalid length. [ 221.505254][T10045] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0 [ 221.520801][T10047] netlink: 'syz.5.1047': attribute type 1 has an invalid length. [ 221.574797][T10047] netlink: 600 bytes leftover after parsing attributes in process `syz.5.1047'. [ 221.618128][T10047] netlink: 'syz.5.1047': attribute type 1 has an invalid length. [ 221.629341][T10045] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1046'. [ 221.667111][T10047] netlink: 600 bytes leftover after parsing attributes in process `syz.5.1047'. [ 221.741434][T10047] netlink: 'syz.5.1047': attribute type 1 has an invalid length. [ 221.951086][T10047] netlink: 'syz.5.1047': attribute type 1 has an invalid length. [ 221.974870][T10047] netlink: 'syz.5.1047': attribute type 1 has an invalid length. [ 221.997383][T10047] netlink: 'syz.5.1047': attribute type 1 has an invalid length. [ 222.005330][T10047] netlink: 'syz.5.1047': attribute type 1 has an invalid length. [ 222.256882][ T6291] hsr_slave_0: left promiscuous mode [ 222.296228][ T6291] hsr_slave_1: left promiscuous mode [ 222.302373][ T6291] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 222.356248][ T6291] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 222.387076][ T6291] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 222.394559][ T6291] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 222.461181][ T6291] veth1_macvtap: left promiscuous mode [ 222.473704][ T6291] veth0_macvtap: left promiscuous mode [ 222.491206][ T6291] veth1_vlan: left promiscuous mode [ 222.501279][ T6291] veth0_vlan: left promiscuous mode [ 223.156882][ T5837] Bluetooth: hci4: command tx timeout [ 223.311898][ T6291] team0 (unregistering): Port device team_slave_1 removed [ 223.386894][ T6291] team0 (unregistering): Port device team_slave_0 removed [ 224.131188][ T9980] chnl_net:caif_netlink_parms(): no params data found [ 224.184630][T10092] __nla_validate_parse: 66 callbacks suppressed [ 224.184649][T10092] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1059'. [ 224.261654][T10094] x_tables: unsorted entry at hook 2 [ 224.267511][T10096] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1061'. [ 224.368989][T10102] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1062'. [ 224.375647][T10104] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1064'. [ 224.379130][T10102] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1062'. [ 224.399127][T10104] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1064'. [ 224.521898][ T9980] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.546499][ T9980] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.566077][ T9980] bridge_slave_0: entered allmulticast mode [ 224.594006][ T9980] bridge_slave_0: entered promiscuous mode [ 224.613290][ T9980] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.624300][ T9980] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.633504][ T9980] bridge_slave_1: entered allmulticast mode [ 224.648102][ T9980] bridge_slave_1: entered promiscuous mode [ 224.741813][T10119] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1067'. [ 224.823284][ T9980] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.858542][ T9980] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.954993][ T9980] team0: Port device team_slave_0 added [ 224.972715][ T9980] team0: Port device team_slave_1 added [ 225.069373][ T9980] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.077483][T10131] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1071'. [ 225.093224][ T9980] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.124437][ T9980] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.139042][ T9980] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.147003][ T9980] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.175068][ T9980] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 225.238972][ T5837] Bluetooth: hci4: command tx timeout [ 225.301053][ T9980] hsr_slave_0: entered promiscuous mode [ 225.312212][ T9980] hsr_slave_1: entered promiscuous mode [ 225.318853][ T9980] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 225.326835][ T9980] Cannot create hsr debugfs directory [ 225.397640][T10132] tipc: Enabled bearer , priority 0 [ 225.410824][T10135] tipc: Resetting bearer [ 225.498523][T10137] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1073'. [ 225.606096][T10144] validate_nla: 58 callbacks suppressed [ 225.645084][T10144] netlink: 'syz.6.1077': attribute type 3 has an invalid length. [ 225.688267][T10142] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1073'. [ 225.702896][T10142] gretap0: entered promiscuous mode [ 226.399072][ T5928] tipc: Node number set to 1 [ 226.975733][ T9980] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 227.069432][ T9980] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 227.165811][ T9980] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 227.197915][ T9980] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 227.306454][ T5837] Bluetooth: hci4: command tx timeout [ 227.553343][ T9980] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.563848][T10200] netlink: 'syz.5.1090': attribute type 10 has an invalid length. [ 227.655434][ T9980] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.697057][ T6293] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.704286][ T6293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.767740][ T6271] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.772594][T10209] SET target dimension over the limit! [ 227.775037][ T6271] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.389919][ T9980] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.518290][ T9980] veth0_vlan: entered promiscuous mode [ 228.580168][ T9980] veth1_vlan: entered promiscuous mode [ 228.691541][ T9980] veth0_macvtap: entered promiscuous mode [ 228.734157][ T9980] veth1_macvtap: entered promiscuous mode [ 228.813276][ T9980] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.858659][ T9980] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.899704][ T9980] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.920292][ T9980] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.966363][ T9980] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.986864][ T9980] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.054886][T10269] veth1_macvtap: left promiscuous mode [ 229.062117][T10269] macsec0: entered allmulticast mode [ 229.092627][T10276] veth1_macvtap: entered promiscuous mode [ 229.105138][T10276] veth1_macvtap: entered allmulticast mode [ 229.127305][T10276] macsec0: left allmulticast mode [ 229.141130][T10276] veth1_macvtap: left allmulticast mode [ 229.469952][ T6288] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.500711][ T6288] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.550301][ T6291] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.565467][T10290] __nla_validate_parse: 7 callbacks suppressed [ 229.565486][T10290] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1112'. [ 229.595632][ T6291] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.734860][T10295] netlink: 344 bytes leftover after parsing attributes in process `syz.0.1114'. [ 229.773731][T10299] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1115'. [ 229.785401][T10299] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1115'. [ 230.138867][T10316] netlink: 'syz.0.1122': attribute type 29 has an invalid length. [ 230.152882][T10316] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1122'. [ 230.168281][T10320] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1120'. [ 230.254713][ T6291] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.361230][T10316] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 230.385178][T10324] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1120'. [ 230.386627][T10316] netlink: 'syz.0.1122': attribute type 29 has an invalid length. [ 230.457565][T10316] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1122'. [ 230.485483][ T6291] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.567085][T10316] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 230.592039][T10309] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1119'. [ 230.599153][T10316] netlink: 'syz.0.1122': attribute type 29 has an invalid length. [ 230.630840][T10316] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1122'. [ 230.654694][ T6291] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.785114][T10316] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 230.799705][T10316] netlink: 'syz.0.1122': attribute type 29 has an invalid length. [ 230.840504][ T6291] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.860163][T10316] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 230.870721][T10316] netlink: 'syz.0.1122': attribute type 29 has an invalid length. [ 230.878932][T10316] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 230.922800][T10316] netlink: 'syz.0.1122': attribute type 29 has an invalid length. [ 230.932857][T10316] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 230.943415][T10316] netlink: 'syz.0.1122': attribute type 29 has an invalid length. [ 230.982305][T10316] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 231.052193][ T6291] bridge_slave_1: left allmulticast mode [ 231.066432][ T6291] bridge_slave_1: left promiscuous mode [ 231.072987][ T6291] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.091203][ T6291] bridge_slave_0: left allmulticast mode [ 231.097565][ T6291] bridge_slave_0: left promiscuous mode [ 231.103238][ T6291] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.376022][T10329] netlink: 'syz.5.1124': attribute type 10 has an invalid length. [ 231.630905][ T6291] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 231.645207][ T6291] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 231.656853][ T6291] bond0 (unregistering): Released all slaves [ 231.668370][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 231.679368][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 231.690691][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 231.708156][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 231.716045][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 231.722810][T10334] netlink: 'syz.6.1123': attribute type 2 has an invalid length. [ 231.765202][T10329] team0: Device veth1_macvtap failed to register rx_handler [ 232.038879][T10353] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 232.387953][T10359] sctp: [Deprecated]: syz.6.1128 (pid 10359) Use of int in max_burst socket option. [ 232.387953][T10359] Use struct sctp_assoc_value instead [ 232.699706][T10367] netlink: 'syz.0.1130': attribute type 10 has an invalid length. [ 232.712079][T10367] syz_tun: left allmulticast mode [ 232.738572][T10367] team0: Port device syz_tun added [ 232.955422][T10345] chnl_net:caif_netlink_parms(): no params data found [ 233.320973][ T6291] hsr_slave_0: left promiscuous mode [ 233.327278][ T6291] hsr_slave_1: left promiscuous mode [ 233.333087][ T6291] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.341055][ T6291] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 233.349119][ T6291] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.356704][ T6291] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 233.382083][ T6291] veth1_macvtap: left promiscuous mode [ 233.387755][ T6291] veth0_macvtap: left promiscuous mode [ 233.393411][ T6291] veth1_vlan: left promiscuous mode [ 233.400647][ T6291] veth0_vlan: left promiscuous mode [ 233.788731][ T5837] Bluetooth: hci4: command tx timeout [ 233.850018][ T6291] team0 (unregistering): Port device team_slave_1 removed [ 233.895434][ T6291] team0 (unregistering): Port device team_slave_0 removed [ 234.612377][T10345] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.649641][T10345] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.670728][T10345] bridge_slave_0: entered allmulticast mode [ 234.692007][T10345] bridge_slave_0: entered promiscuous mode [ 234.737752][T10345] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.766437][T10345] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.784823][T10345] bridge_slave_1: entered allmulticast mode [ 234.811679][T10345] bridge_slave_1: entered promiscuous mode [ 234.917512][T10345] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.931634][T10345] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.982967][T10345] team0: Port device team_slave_0 added [ 234.993327][T10345] team0: Port device team_slave_1 added [ 235.066063][T10345] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 235.073571][T10345] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.100962][T10345] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.114933][T10345] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 235.122307][T10345] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.166414][T10345] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.247805][T10345] hsr_slave_0: entered promiscuous mode [ 235.254778][T10345] hsr_slave_1: entered promiscuous mode [ 235.263167][T10345] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 235.271342][T10345] Cannot create hsr debugfs directory [ 235.919917][T10429] __nla_validate_parse: 7 callbacks suppressed [ 235.919935][T10429] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1148'. [ 235.974645][ T5837] Bluetooth: hci4: command tx timeout [ 236.172065][T10437] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1150'. [ 236.185429][T10437] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 236.216859][T10437] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.225474][T10437] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.247077][T10439] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1151'. [ 236.383247][T10345] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 236.415610][T10442] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1153'. [ 236.445283][T10442] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1153'. [ 236.446751][T10345] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 236.461328][T10442] netlink: 'syz.6.1153': attribute type 18 has an invalid length. [ 236.537543][T10345] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 236.551957][T10345] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 236.782858][T10345] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.832177][T10345] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.851370][ T6284] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.858589][ T6284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.898956][ T6293] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.906249][ T6293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.921628][T10461] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1156'. [ 237.460484][T10345] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 237.549458][T10345] veth0_vlan: entered promiscuous mode [ 237.585810][T10345] veth1_vlan: entered promiscuous mode [ 238.026630][ T5837] Bluetooth: hci4: command tx timeout [ 238.038037][T10345] veth0_macvtap: entered promiscuous mode [ 238.090737][T10491] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1163'. [ 238.104266][T10345] veth1_macvtap: entered promiscuous mode [ 238.133788][T10491] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1163'. [ 238.230951][T10345] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 238.259067][T10345] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 238.280859][T10345] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.292518][T10345] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.320042][T10345] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.359426][T10345] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.540050][T10503] FAULT_INJECTION: forcing a failure. [ 238.540050][T10503] name failslab, interval 1, probability 0, space 0, times 0 [ 238.553191][T10503] CPU: 1 UID: 0 PID: 10503 Comm: syz.2.1166 Not tainted 6.16.0-rc1-syzkaller-00189-gb549faa950e6 #0 PREEMPT(full) [ 238.553216][T10503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 238.553227][T10503] Call Trace: [ 238.553234][T10503] [ 238.553241][T10503] dump_stack_lvl+0x189/0x250 [ 238.553272][T10503] ? __pfx____ratelimit+0x10/0x10 [ 238.553298][T10503] ? __pfx_dump_stack_lvl+0x10/0x10 [ 238.553322][T10503] ? __pfx__printk+0x10/0x10 [ 238.553347][T10503] ? __pfx___might_resched+0x10/0x10 [ 238.553376][T10503] should_fail_ex+0x414/0x560 [ 238.553404][T10503] should_failslab+0xa8/0x100 [ 238.553424][T10503] __kmalloc_node_noprof+0xd1/0x4e0 [ 238.553441][T10503] ? alloc_slab_obj_exts+0x39/0xa0 [ 238.553471][T10503] alloc_slab_obj_exts+0x39/0xa0 [ 238.553494][T10503] __memcg_slab_post_alloc_hook+0x31e/0x7f0 [ 238.553537][T10503] kmem_cache_alloc_node_noprof+0x2bd/0x3c0 [ 238.553555][T10503] ? __alloc_skb+0x112/0x2d0 [ 238.553579][T10503] __alloc_skb+0x112/0x2d0 [ 238.553602][T10503] alloc_skb_with_frags+0xca/0x890 [ 238.553630][T10503] ? process_measurement+0x72d/0x1a40 [ 238.553659][T10503] sock_alloc_send_pskb+0x857/0x990 [ 238.553702][T10503] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 238.553737][T10503] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 238.553764][T10503] unix_dgram_sendmsg+0x4f6/0x1870 [ 238.553786][T10503] ? __lock_acquire+0xab9/0xd20 [ 238.553823][T10503] ? aa_sk_perm+0x81e/0x950 [ 238.553843][T10503] ? __lock_acquire+0xab9/0xd20 [ 238.553864][T10503] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 238.553892][T10503] ? aa_sock_msg_perm+0x94/0x160 [ 238.553915][T10503] ? unix_seqpacket_sendmsg+0x111/0x1e0 [ 238.553946][T10503] ? __pfx_unix_seqpacket_sendmsg+0x10/0x10 [ 238.553970][T10503] __sock_sendmsg+0x21c/0x270 [ 238.553990][T10503] ____sys_sendmsg+0x52d/0x830 [ 238.554017][T10503] ? __pfx_____sys_sendmsg+0x10/0x10 [ 238.554047][T10503] ? import_iovec+0x74/0xa0 [ 238.554069][T10503] ___sys_sendmsg+0x21f/0x2a0 [ 238.554093][T10503] ? __pfx____sys_sendmsg+0x10/0x10 [ 238.554151][T10503] ? __fget_files+0x2a/0x420 [ 238.554170][T10503] ? __fget_files+0x3a0/0x420 [ 238.554199][T10503] __sys_sendmmsg+0x227/0x430 [ 238.554226][T10503] ? __pfx___sys_sendmmsg+0x10/0x10 [ 238.554246][T10503] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 238.554290][T10503] ? ksys_write+0x22a/0x250 [ 238.554308][T10503] ? __pfx_ksys_write+0x10/0x10 [ 238.554322][T10503] ? rcu_is_watching+0x15/0xb0 [ 238.554354][T10503] __x64_sys_sendmmsg+0xa0/0xc0 [ 238.554378][T10503] do_syscall_64+0xfa/0x3b0 [ 238.554394][T10503] ? lockdep_hardirqs_on+0x9c/0x150 [ 238.554416][T10503] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.554432][T10503] ? clear_bhb_loop+0x60/0xb0 [ 238.554453][T10503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.554470][T10503] RIP: 0033:0x7f9074b8e929 [ 238.554486][T10503] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 238.554500][T10503] RSP: 002b:00007f9075a00038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 238.554520][T10503] RAX: ffffffffffffffda RBX: 00007f9074db5fa0 RCX: 00007f9074b8e929 [ 238.554532][T10503] RDX: 0000000000000001 RSI: 0000200000001640 RDI: 0000000000000003 [ 238.554544][T10503] RBP: 00007f9075a00090 R08: 0000000000000000 R09: 0000000000000000 [ 238.554554][T10503] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 238.554565][T10503] R13: 0000000000000000 R14: 00007f9074db5fa0 R15: 00007ffc3fd45a58 [ 238.554593][T10503] [ 239.099240][ T6288] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.121268][T10512] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1169'. [ 239.130032][ T6288] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.212028][ T6284] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.232203][ T6284] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.344088][T10517] pim6reg1: entered promiscuous mode [ 239.345977][T10520] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1173'. [ 239.360206][T10517] pim6reg1: entered allmulticast mode [ 239.381201][T10520] pim6reg: entered allmulticast mode [ 239.458802][T10520] pim6reg: left allmulticast mode [ 239.810196][T10540] netlink: 'syz.2.1180': attribute type 12 has an invalid length. [ 239.819469][T10540] netlink: 'syz.2.1180': attribute type 11 has an invalid length. [ 239.821188][T10535] : entered promiscuous mode [ 240.401304][T10567] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.410026][T10567] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.418525][T10567] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.427455][T10567] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.500238][T10575] netlink: 'syz.2.1189': attribute type 10 has an invalid length. [ 240.785801][ T6271] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.810129][T10577] pimreg3: entered allmulticast mode [ 240.817246][T10575] veth0_vlan: entered allmulticast mode [ 240.825623][T10575] bridge0: port 1(veth0_vlan) entered blocking state [ 240.834814][T10575] bridge0: port 1(veth0_vlan) entered disabled state [ 240.844183][T10575] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 240.883872][T10569] pimreg3: left allmulticast mode [ 241.063575][ T6271] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.143039][ T6271] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.192862][ T6271] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.288190][ T6271] bridge_slave_1: left allmulticast mode [ 241.293867][ T6271] bridge_slave_1: left promiscuous mode [ 241.299813][ T6271] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.310942][ T6271] bridge_slave_0: left allmulticast mode [ 241.317001][ T6271] bridge_slave_0: left promiscuous mode [ 241.322708][ T6271] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.678820][T10588] __nla_validate_parse: 11 callbacks suppressed [ 241.678841][T10588] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1192'. [ 241.719128][T10587] FAULT_INJECTION: forcing a failure. [ 241.719128][T10587] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 241.781101][T10587] CPU: 1 UID: 0 PID: 10587 Comm: syz.0.1191 Not tainted 6.16.0-rc1-syzkaller-00189-gb549faa950e6 #0 PREEMPT(full) [ 241.781128][T10587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 241.781139][T10587] Call Trace: [ 241.781146][T10587] [ 241.781154][T10587] dump_stack_lvl+0x189/0x250 [ 241.781184][T10587] ? __pfx____ratelimit+0x10/0x10 [ 241.781209][T10587] ? __pfx_dump_stack_lvl+0x10/0x10 [ 241.781232][T10587] ? __pfx__printk+0x10/0x10 [ 241.781251][T10587] ? __might_fault+0xb0/0x130 [ 241.781280][T10587] should_fail_ex+0x414/0x560 [ 241.781306][T10587] _copy_from_iter+0x1db/0x16f0 [ 241.781332][T10587] ? sock_alloc_send_pskb+0x875/0x990 [ 241.781360][T10587] ? __pfx__copy_from_iter+0x10/0x10 [ 241.781393][T10587] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 241.781419][T10587] skb_copy_datagram_from_iter+0xf5/0x720 [ 241.781449][T10587] ? skb_put+0x11b/0x210 [ 241.781472][T10587] unix_dgram_sendmsg+0x5af/0x1870 [ 241.781495][T10587] ? __lock_acquire+0xab9/0xd20 [ 241.781532][T10587] ? aa_sk_perm+0x81e/0x950 [ 241.781556][T10587] ? __lock_acquire+0xab9/0xd20 [ 241.781576][T10587] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 241.781606][T10587] ? aa_sock_msg_perm+0x94/0x160 [ 241.781638][T10587] ? unix_seqpacket_sendmsg+0x111/0x1e0 [ 241.781661][T10587] ? __pfx_unix_seqpacket_sendmsg+0x10/0x10 [ 241.781686][T10587] __sock_sendmsg+0x21c/0x270 [ 241.781706][T10587] ____sys_sendmsg+0x52d/0x830 [ 241.781735][T10587] ? __pfx_____sys_sendmsg+0x10/0x10 [ 241.781767][T10587] ? import_iovec+0x74/0xa0 [ 241.781788][T10587] ___sys_sendmsg+0x21f/0x2a0 [ 241.781812][T10587] ? __pfx____sys_sendmsg+0x10/0x10 [ 241.781868][T10587] ? __fget_files+0x2a/0x420 [ 241.781886][T10587] ? __fget_files+0x3a0/0x420 [ 241.781915][T10587] __sys_sendmmsg+0x227/0x430 [ 241.781942][T10587] ? __pfx___sys_sendmmsg+0x10/0x10 [ 241.781961][T10587] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 241.782005][T10587] ? ksys_write+0x22a/0x250 [ 241.782024][T10587] ? __pfx_ksys_write+0x10/0x10 [ 241.782037][T10587] ? rcu_is_watching+0x15/0xb0 [ 241.782069][T10587] __x64_sys_sendmmsg+0xa0/0xc0 [ 241.782093][T10587] do_syscall_64+0xfa/0x3b0 [ 241.782109][T10587] ? lockdep_hardirqs_on+0x9c/0x150 [ 241.782133][T10587] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.782149][T10587] ? clear_bhb_loop+0x60/0xb0 [ 241.782171][T10587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.782187][T10587] RIP: 0033:0x7f0658f8e929 [ 241.782203][T10587] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.782216][T10587] RSP: 002b:00007f0659d13038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 241.782236][T10587] RAX: ffffffffffffffda RBX: 00007f06591b5fa0 RCX: 00007f0658f8e929 [ 241.782248][T10587] RDX: 0000000000000001 RSI: 0000200000001640 RDI: 0000000000000003 [ 241.782259][T10587] RBP: 00007f0659d13090 R08: 0000000000000000 R09: 0000000000000000 [ 241.782270][T10587] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.782281][T10587] R13: 0000000000000000 R14: 00007f06591b5fa0 R15: 00007ffc8579ea48 [ 241.782308][T10587] [ 242.129252][T10595] netlink: 26 bytes leftover after parsing attributes in process `syz.6.1197'. [ 242.204531][ T6271] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 242.314760][ T6271] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 242.366548][ T6271] bond0 (unregistering): Released all slaves [ 242.442930][T10600] veth0_vlan: left allmulticast mode [ 242.463123][T10600] vlan0: left promiscuous mode [ 242.469664][T10600] vlan2: left allmulticast mode [ 242.474684][T10600] veth1: left allmulticast mode [ 242.480285][T10600] gtp0: left promiscuous mode [ 242.485104][T10600] gtp0: left allmulticast mode [ 242.491243][T10600] ip6erspan0: left promiscuous mode [ 242.496935][T10600] tipc: Resetting bearer [ 242.508929][T10600] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode [ 242.516516][T10600] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode [ 242.525662][T10600] vlan3: left promiscuous mode [ 242.530763][T10600] bridge0: left promiscuous mode [ 242.536019][T10600] vlan3: left allmulticast mode [ 242.541266][T10600] bridge0: left allmulticast mode [ 242.552898][T10600] bridge4: left allmulticast mode [ 242.564690][T10613] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1200'. [ 242.589125][T10608] netlink: 76 bytes leftover after parsing attributes in process `syz.6.1197'. [ 242.640093][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 242.649838][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 242.659424][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 242.668094][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 242.676913][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 242.762798][T10620] netlink: 208 bytes leftover after parsing attributes in process `syz.2.1202'. [ 242.816624][T10620] netlink: 208 bytes leftover after parsing attributes in process `syz.2.1202'. [ 242.982542][T10623] netlink: 'syz.2.1203': attribute type 1 has an invalid length. [ 242.993215][T10626] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 243.045719][T10623] bond4: entered promiscuous mode [ 243.077525][T10623] 8021q: adding VLAN 0 to HW filter on device bond4 [ 243.118004][T10625] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1204'. [ 243.229498][T10631] 8021q: adding VLAN 0 to HW filter on device bond4 [ 243.257061][T10631] bond4: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 243.267714][T10631] bond4: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 243.290317][T10631] bond4: (slave ip6gre1): making interface the new active one [ 243.311124][T10631] ip6gre1: entered promiscuous mode [ 243.328404][T10631] bond4: (slave ip6gre1): Enslaving as an active interface with an up link [ 243.357633][T10628] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1204'. [ 243.448578][T10643] geneve0: entered allmulticast mode [ 243.501560][T10646] FAULT_INJECTION: forcing a failure. [ 243.501560][T10646] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 243.534902][T10646] CPU: 1 UID: 0 PID: 10646 Comm: syz.6.1209 Not tainted 6.16.0-rc1-syzkaller-00189-gb549faa950e6 #0 PREEMPT(full) [ 243.534930][T10646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 243.534955][T10646] Call Trace: [ 243.534962][T10646] [ 243.534971][T10646] dump_stack_lvl+0x189/0x250 [ 243.535001][T10646] ? __pfx____ratelimit+0x10/0x10 [ 243.535028][T10646] ? __pfx_dump_stack_lvl+0x10/0x10 [ 243.535052][T10646] ? __pfx__printk+0x10/0x10 [ 243.535071][T10646] ? __might_fault+0xb0/0x130 [ 243.535100][T10646] should_fail_ex+0x414/0x560 [ 243.535128][T10646] _copy_from_user+0x2d/0xb0 [ 243.535147][T10646] kstrtouint_from_user+0xc4/0x170 [ 243.535170][T10646] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 243.535201][T10646] proc_fail_nth_write+0x88/0x240 [ 243.535218][T10646] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 243.535245][T10646] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 243.535267][T10646] vfs_write+0x27e/0xa90 [ 243.535302][T10646] ? __pfx_vfs_write+0x10/0x10 [ 243.535329][T10646] ? __fget_files+0x2a/0x420 [ 243.535352][T10646] ? __fget_files+0x3a0/0x420 [ 243.535366][T10646] ? __fget_files+0x2a/0x420 [ 243.535394][T10646] ksys_write+0x145/0x250 [ 243.535412][T10646] ? __pfx_ksys_write+0x10/0x10 [ 243.535424][T10646] ? rcu_is_watching+0x15/0xb0 [ 243.535452][T10646] ? do_syscall_64+0xbe/0x3b0 [ 243.535471][T10646] do_syscall_64+0xfa/0x3b0 [ 243.535484][T10646] ? lockdep_hardirqs_on+0x9c/0x150 [ 243.535505][T10646] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.535520][T10646] ? clear_bhb_loop+0x60/0xb0 [ 243.535539][T10646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.535555][T10646] RIP: 0033:0x7f9b55f8d3df [ 243.535571][T10646] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 243.535585][T10646] RSP: 002b:00007f9b56dc9030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 243.535604][T10646] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9b55f8d3df [ 243.535616][T10646] RDX: 0000000000000001 RSI: 00007f9b56dc90a0 RDI: 0000000000000005 [ 243.535626][T10646] RBP: 00007f9b56dc9090 R08: 0000000000000000 R09: 0000000000000000 [ 243.535636][T10646] R10: 0000000020000000 R11: 0000000000000293 R12: 0000000000000001 [ 243.535645][T10646] R13: 0000000000000000 R14: 00007f9b561b5fa0 R15: 00007ffdcf283688 [ 243.535674][T10646] [ 243.798876][ T6271] hsr_slave_0: left promiscuous mode [ 243.827787][ T6271] hsr_slave_1: left promiscuous mode [ 243.834058][ T6271] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 243.845870][ T6271] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 243.857997][ T6271] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 243.865503][ T6271] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 243.898251][ T6271] veth1_macvtap: left promiscuous mode [ 243.904813][ T6271] veth0_macvtap: left promiscuous mode [ 243.910547][ T6271] veth1_vlan: left promiscuous mode [ 243.915910][ T6271] veth0_vlan: left promiscuous mode [ 243.977242][T10657] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1212'. [ 244.591794][ T6271] team0 (unregistering): Port device team_slave_1 removed [ 244.640671][ T6271] team0 (unregistering): Port device team_slave_0 removed [ 244.750992][ T51] Bluetooth: hci4: command tx timeout [ 245.748709][T10614] chnl_net:caif_netlink_parms(): no params data found [ 246.017504][T10703] dvmrp0: entered allmulticast mode [ 246.240154][T10614] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.260313][T10614] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.288418][T10614] bridge_slave_0: entered allmulticast mode [ 246.315619][T10614] bridge_slave_0: entered promiscuous mode [ 246.364534][T10614] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.387487][T10614] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.402593][T10614] bridge_slave_1: entered allmulticast mode [ 246.413473][T10722] netlink: del zone limit has 4 unknown bytes [ 246.421794][T10614] bridge_slave_1: entered promiscuous mode [ 246.578790][T10614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 246.595727][T10614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 246.826329][ T51] Bluetooth: hci4: command tx timeout [ 247.048065][T10741] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1229'. [ 247.091524][T10614] team0: Port device team_slave_0 added [ 247.119379][T10614] team0: Port device team_slave_1 added [ 247.220641][T10614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 247.230519][T10614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.289473][T10614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 247.324016][T10759] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1233'. [ 247.355873][T10614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 247.363494][T10759] netlink: 'syz.2.1233': attribute type 11 has an invalid length. [ 247.373037][T10614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.400404][T10614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 247.670229][T10770] netlink: 'syz.6.1237': attribute type 1 has an invalid length. [ 247.692193][T10770] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1237'. [ 247.704476][T10772] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1238'. [ 247.719757][T10772] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1238'. [ 247.729406][T10772] netlink: 'syz.5.1238': attribute type 5 has an invalid length. [ 247.749376][T10614] hsr_slave_0: entered promiscuous mode [ 247.770896][T10614] hsr_slave_1: entered promiscuous mode [ 247.777972][T10614] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 247.799736][T10614] Cannot create hsr debugfs directory [ 247.835527][T10774] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1238'. [ 247.895997][T10774] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1238'. [ 247.931365][T10780] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1240'. [ 247.941768][T10756] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1230'. [ 247.985465][T10781] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1239'. [ 248.477694][T10796] openvswitch: netlink: Multiple metadata blocks provided [ 248.901435][T10814] netlink: 'syz.2.1249': attribute type 1 has an invalid length. [ 248.936821][ T51] Bluetooth: hci4: command tx timeout [ 248.988573][T10814] nbd: socks must be embedded in a SOCK_ITEM attr [ 248.995692][T10814] block nbd1: shutting down sockets [ 249.131303][T10614] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 249.167582][T10614] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 249.203047][T10614] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 249.230113][T10614] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 249.241556][T10823] netlink: 'syz.2.1250': attribute type 2 has an invalid length. [ 249.440855][T10614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.493554][T10614] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.540409][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.547653][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.615634][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.622878][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 249.849867][T10854] netlink: 'syz.5.1266': attribute type 8 has an invalid length. [ 250.000039][T10859] openvswitch: netlink: Multiple metadata blocks provided [ 250.192601][ T5883] IPVS: starting estimator thread 0... [ 250.296741][T10869] IPVS: using max 33 ests per chain, 79200 per kthread [ 250.402557][T10614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.509718][T10878] geneve0: entered allmulticast mode [ 250.565428][T10614] veth0_vlan: entered promiscuous mode [ 250.639815][T10614] veth1_vlan: entered promiscuous mode [ 250.783470][T10614] veth0_macvtap: entered promiscuous mode [ 250.812353][T10614] veth1_macvtap: entered promiscuous mode [ 250.877719][T10614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 250.933140][T10614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 250.951025][T10614] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.976242][T10614] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.989337][ T51] Bluetooth: hci4: command tx timeout [ 251.005443][T10614] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.025729][T10614] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.218649][ T6293] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.235556][ T6293] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.319391][ T6299] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.354895][ T6299] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.554285][ T6288] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.765643][ T6288] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.003087][ T6288] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.165474][ T6288] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.264924][ T6288] bridge_slave_1: left allmulticast mode [ 253.270720][ T6288] bridge_slave_1: left promiscuous mode [ 253.276689][ T6288] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.285614][ T6288] bridge_slave_0: left allmulticast mode [ 253.291694][ T6288] bridge_slave_0: left promiscuous mode [ 253.297760][ T6288] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.612375][ T6288] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 253.624773][ T6288] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 253.635604][ T6288] bond0 (unregistering): Released all slaves [ 253.845361][T10926] __nla_validate_parse: 20 callbacks suppressed [ 253.845382][T10926] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1277'. [ 253.869845][T10926] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1277'. [ 253.893520][T10935] netlink: 'syz.2.1280': attribute type 39 has an invalid length. [ 253.911879][T10936] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1276'. [ 253.925176][T10932] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1279'. [ 253.937941][T10932] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1279'. [ 253.971360][T10926] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.980627][T10926] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.989505][T10926] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.998469][T10926] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.016376][T10932] netlink: 'syz.5.1279': attribute type 1 has an invalid length. [ 254.024145][T10932] netlink: 10 bytes leftover after parsing attributes in process `syz.5.1279'. [ 254.168088][T10932] nbd: socks must be embedded in a SOCK_ITEM attr [ 254.174847][T10932] block nbd1: shutting down sockets [ 254.277435][T10940] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1281'. [ 254.503368][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 254.524307][T10957] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 254.527017][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 254.541805][T10957] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 254.553035][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 254.561084][T10957] tipc: Resetting bearer [ 254.587771][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 254.612002][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 254.691127][T10957] tipc: Resetting bearer [ 254.802751][ T6288] hsr_slave_0: left promiscuous mode [ 254.811239][ T6288] hsr_slave_1: left promiscuous mode [ 254.820865][ T6288] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 254.839699][ T6288] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 254.854843][ T6288] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 254.867176][ T6288] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 254.901018][ T6288] veth1_macvtap: left promiscuous mode [ 254.907846][ T6288] veth0_macvtap: left promiscuous mode [ 254.913591][ T6288] veth1_vlan: left promiscuous mode [ 254.923468][ T6288] veth0_vlan: left promiscuous mode [ 255.645651][ T6288] team0 (unregistering): Port device team_slave_1 removed [ 255.711195][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.723286][ T6288] team0 (unregistering): Port device team_slave_0 removed [ 256.170487][T10985] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1292'. [ 256.273718][T10987] Cannot find del_set index 2 as target [ 256.405761][ T5890] IPVS: starting estimator thread 0... [ 256.455781][T10957] tipc: Resetting bearer [ 256.506323][T10994] IPVS: using max 29 ests per chain, 69600 per kthread [ 256.666918][ T5837] Bluetooth: hci4: command tx timeout [ 257.513189][T10952] chnl_net:caif_netlink_parms(): no params data found [ 257.737444][T11026] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1304'. [ 257.940177][T11029] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1303'. [ 258.076117][T11044] netlink: 'syz.0.1306': attribute type 32 has an invalid length. [ 258.084445][T11044] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 258.269145][T10952] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.296785][T10952] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.304061][T10952] bridge_slave_0: entered allmulticast mode [ 258.326377][T10952] bridge_slave_0: entered promiscuous mode [ 258.383594][T10952] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.391289][T10952] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.426797][T10952] bridge_slave_1: entered allmulticast mode [ 258.447688][T10952] bridge_slave_1: entered promiscuous mode [ 258.554669][T11062] netlink: 'syz.0.1310': attribute type 4 has an invalid length. [ 258.567688][T10952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 258.662725][T10952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 258.747343][ T5837] Bluetooth: hci4: command tx timeout [ 258.780116][T10952] team0: Port device team_slave_0 added [ 258.809302][T10952] team0: Port device team_slave_1 added [ 258.904357][T10952] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 258.921844][T10952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.966552][T10952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 258.985277][T10952] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 258.992442][T10952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.036232][T10952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 259.219288][T10952] hsr_slave_0: entered promiscuous mode [ 259.226041][T10952] hsr_slave_1: entered promiscuous mode [ 259.230767][T11073] __nla_validate_parse: 4 callbacks suppressed [ 259.230785][T11073] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1311'. [ 259.238896][T10952] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 259.260048][T10952] Cannot create hsr debugfs directory [ 259.719084][T11080] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1315'. [ 260.108810][T11096] syzkaller1: entered allmulticast mode [ 260.141383][T11099] raw_sendmsg: syz.2.1320 forgot to set AF_INET. Fix it! [ 260.323531][T10952] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 260.341442][T10952] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 260.370424][T10952] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 260.393874][T10952] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 260.456102][T11105] netlink: 'syz.6.1322': attribute type 1 has an invalid length. [ 260.543525][T11105] 8021q: adding VLAN 0 to HW filter on device bond1 [ 260.614510][T11112] 8021q: adding VLAN 0 to HW filter on device bond1 [ 260.633676][T11119] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 260.643751][T11112] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 260.669779][T11122] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1326'. [ 260.689592][T11105] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1322'. [ 260.701219][T11112] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 260.717380][T11124] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1327'. [ 260.781342][T11115] veth9: entered promiscuous mode [ 260.800469][T11115] bond1: (slave veth9): Enslaving as an active interface with a down link [ 260.814694][T11125] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:2a [ 260.833928][ T5837] Bluetooth: hci4: command tx timeout [ 260.874827][T11105] batman_adv: batadv0: Interface deactivated: dummy0 [ 260.896344][T11105] batman_adv: batadv0: Removing interface: dummy0 [ 260.903787][T11105] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 260.913712][T11105] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 260.931291][T11105] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 260.945558][T11105] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 260.954199][T11105] batman_adv: batadv0: Interface deactivated: macsec2 [ 260.985516][T11105] batman_adv: batadv0: Removing interface: macsec2 [ 261.054962][T11139] FAULT_INJECTION: forcing a failure. [ 261.054962][T11139] name failslab, interval 1, probability 0, space 0, times 0 [ 261.069027][T11139] CPU: 0 UID: 0 PID: 11139 Comm: syz.5.1332 Not tainted 6.16.0-rc1-syzkaller-00189-gb549faa950e6 #0 PREEMPT(full) [ 261.069055][T11139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 261.069066][T11139] Call Trace: [ 261.069072][T11139] [ 261.069080][T11139] dump_stack_lvl+0x189/0x250 [ 261.069109][T11139] ? __pfx____ratelimit+0x10/0x10 [ 261.069133][T11139] ? __pfx_dump_stack_lvl+0x10/0x10 [ 261.069156][T11139] ? __pfx__printk+0x10/0x10 [ 261.069177][T11139] ? __pfx___might_resched+0x10/0x10 [ 261.069201][T11139] ? fs_reclaim_acquire+0x7d/0x100 [ 261.069223][T11139] should_fail_ex+0x414/0x560 [ 261.069248][T11139] should_failslab+0xa8/0x100 [ 261.069267][T11139] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 261.069284][T11139] ? __alloc_skb+0x112/0x2d0 [ 261.069308][T11139] __alloc_skb+0x112/0x2d0 [ 261.069332][T11139] alloc_skb_with_frags+0xca/0x890 [ 261.069358][T11139] ? process_measurement+0x72d/0x1a40 [ 261.069388][T11139] sock_alloc_send_pskb+0x857/0x990 [ 261.069426][T11139] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 261.069460][T11139] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 261.069484][T11139] unix_dgram_sendmsg+0x4f6/0x1870 [ 261.069505][T11139] ? __lock_acquire+0xab9/0xd20 [ 261.069537][T11139] ? aa_sk_perm+0x81e/0x950 [ 261.069555][T11139] ? __lock_acquire+0xab9/0xd20 [ 261.069572][T11139] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 261.069601][T11139] ? aa_sock_msg_perm+0x94/0x160 [ 261.069622][T11139] ? unix_seqpacket_sendmsg+0x111/0x1e0 [ 261.069643][T11139] ? __pfx_unix_seqpacket_sendmsg+0x10/0x10 [ 261.069668][T11139] __sock_sendmsg+0x21c/0x270 [ 261.069687][T11139] ____sys_sendmsg+0x52d/0x830 [ 261.069715][T11139] ? __pfx_____sys_sendmsg+0x10/0x10 [ 261.069745][T11139] ? import_iovec+0x74/0xa0 [ 261.069765][T11139] ___sys_sendmsg+0x21f/0x2a0 [ 261.069789][T11139] ? __pfx____sys_sendmsg+0x10/0x10 [ 261.069849][T11139] ? __fget_files+0x2a/0x420 [ 261.069867][T11139] ? __fget_files+0x3a0/0x420 [ 261.069896][T11139] __sys_sendmmsg+0x227/0x430 [ 261.069923][T11139] ? __pfx___sys_sendmmsg+0x10/0x10 [ 261.069942][T11139] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 261.069984][T11139] ? ksys_write+0x22a/0x250 [ 261.070011][T11139] ? __pfx_ksys_write+0x10/0x10 [ 261.070025][T11139] ? rcu_is_watching+0x15/0xb0 [ 261.070057][T11139] __x64_sys_sendmmsg+0xa0/0xc0 [ 261.070081][T11139] do_syscall_64+0xfa/0x3b0 [ 261.070097][T11139] ? lockdep_hardirqs_on+0x9c/0x150 [ 261.070120][T11139] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.070139][T11139] ? clear_bhb_loop+0x60/0xb0 [ 261.070160][T11139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.070175][T11139] RIP: 0033:0x7f74e878e929 [ 261.070191][T11139] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 261.070205][T11139] RSP: 002b:00007f74e65f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 261.070223][T11139] RAX: ffffffffffffffda RBX: 00007f74e89b5fa0 RCX: 00007f74e878e929 [ 261.070235][T11139] RDX: 0000000000000001 RSI: 0000200000001640 RDI: 0000000000000003 [ 261.070246][T11139] RBP: 00007f74e65f6090 R08: 0000000000000000 R09: 0000000000000000 [ 261.070256][T11139] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 261.070267][T11139] R13: 0000000000000000 R14: 00007f74e89b5fa0 R15: 00007ffc0676c7b8 [ 261.070295][T11139] [ 261.143940][T10952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.539281][T10952] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.603632][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.610839][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.661215][ T6293] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.668393][ T6293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.700332][T11160] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1338'. [ 261.823685][T11166] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1341'. [ 261.943112][T11174] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1344'. [ 261.972725][T11169] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.981599][T11169] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.997258][T11179] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1344'. [ 262.055577][T11184] netlink: 'syz.2.1344': attribute type 10 has an invalid length. [ 262.087932][T11169] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 262.103904][T11169] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 262.233391][T11169] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.244636][T11169] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.254324][T11169] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.263965][T11169] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.354159][ T5946] syz2: Port: 1 Link DOWN [ 262.548170][T11197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.562717][T11200] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1346'. [ 262.564782][T11197] 8021q: adding VLAN 0 to HW filter on device team0 [ 262.589933][T11197] bond0: (slave dummy0): Releasing backup interface [ 262.598926][T11197] dummy0: left promiscuous mode [ 262.611344][T11197] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 262.642188][T10952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 262.762084][T10952] veth0_vlan: entered promiscuous mode [ 262.831894][T10952] veth1_vlan: entered promiscuous mode [ 262.906517][ T5837] Bluetooth: hci4: command tx timeout [ 262.934796][T10952] veth0_macvtap: entered promiscuous mode [ 262.945555][T10952] veth1_macvtap: entered promiscuous mode [ 262.973792][T10952] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 262.995007][T10952] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 263.021875][T10952] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.041388][T10952] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.063963][T10952] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.080964][T10952] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.103148][T11220] syz_tun: entered allmulticast mode [ 263.117017][T11211] syz_tun: left allmulticast mode [ 263.225987][T11224] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 263.372863][ T6272] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.411031][ T6272] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.501930][ T6293] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.514153][ T6293] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.404603][T11289] ipt_ECN: cannot use operation on non-tcp rule [ 264.433960][ T6288] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.767326][ T6288] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.190107][ T6288] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.380621][ T6288] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.480267][ T6288] bridge_slave_1: left allmulticast mode [ 265.485937][ T6288] bridge_slave_1: left promiscuous mode [ 265.492237][ T6288] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.502834][ T6288] bridge_slave_0: left allmulticast mode [ 265.508686][ T6288] bridge_slave_0: left promiscuous mode [ 265.514405][ T6288] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.813252][T11297] sctp: [Deprecated]: syz.0.1376 (pid 11297) Use of struct sctp_assoc_value in delayed_ack socket option. [ 265.813252][T11297] Use struct sctp_sack_info instead [ 265.994779][T11312] __nla_validate_parse: 4 callbacks suppressed [ 265.994798][T11312] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1382'. [ 266.348227][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 266.361480][ T6288] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 266.372438][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 266.383592][ T6288] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 266.396524][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 266.396573][ T6288] bond0 (unregistering): Released all slaves [ 266.412159][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 266.423454][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 266.459189][T11308] veth0_vlan: left allmulticast mode [ 266.474199][T11308] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 266.487617][T11308] bridge1: left promiscuous mode [ 266.492752][T11308] bridge1: left allmulticast mode [ 266.498363][T11308] xfrm1: left promiscuous mode [ 266.505494][T11308] xfrm1: left allmulticast mode [ 266.653078][T11325] FAULT_INJECTION: forcing a failure. [ 266.653078][T11325] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 266.685873][T11325] CPU: 1 UID: 0 PID: 11325 Comm: syz.0.1383 Not tainted 6.16.0-rc1-syzkaller-00189-gb549faa950e6 #0 PREEMPT(full) [ 266.685899][T11325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 266.685910][T11325] Call Trace: [ 266.685918][T11325] [ 266.685926][T11325] dump_stack_lvl+0x189/0x250 [ 266.685955][T11325] ? __pfx____ratelimit+0x10/0x10 [ 266.685980][T11325] ? __pfx_dump_stack_lvl+0x10/0x10 [ 266.686005][T11325] ? __pfx__printk+0x10/0x10 [ 266.686037][T11325] should_fail_ex+0x414/0x560 [ 266.686066][T11325] _copy_to_user+0x31/0xb0 [ 266.686087][T11325] simple_read_from_buffer+0xe1/0x170 [ 266.686108][T11325] proc_fail_nth_read+0x1df/0x250 [ 266.686135][T11325] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 266.686157][T11325] ? rw_verify_area+0x258/0x650 [ 266.686178][T11325] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 266.686200][T11325] vfs_read+0x200/0x980 [ 266.686230][T11325] ? __pfx___mutex_lock+0x10/0x10 [ 266.686248][T11325] ? __pfx_vfs_read+0x10/0x10 [ 266.686275][T11325] ? __fget_files+0x2a/0x420 [ 266.686299][T11325] ? __fget_files+0x3a0/0x420 [ 266.686315][T11325] ? __fget_files+0x2a/0x420 [ 266.686344][T11325] ksys_read+0x145/0x250 [ 266.686362][T11325] ? __pfx_ksys_read+0x10/0x10 [ 266.686384][T11325] ? rcu_is_watching+0x15/0xb0 [ 266.686415][T11325] ? do_syscall_64+0xbe/0x3b0 [ 266.686436][T11325] do_syscall_64+0xfa/0x3b0 [ 266.686452][T11325] ? lockdep_hardirqs_on+0x9c/0x150 [ 266.686482][T11325] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.686500][T11325] ? clear_bhb_loop+0x60/0xb0 [ 266.686520][T11325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.686536][T11325] RIP: 0033:0x7f0658f8d33c [ 266.686551][T11325] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 266.686565][T11325] RSP: 002b:00007f0659d13030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 266.686584][T11325] RAX: ffffffffffffffda RBX: 00007f06591b5fa0 RCX: 00007f0658f8d33c [ 266.686596][T11325] RDX: 000000000000000f RSI: 00007f0659d130a0 RDI: 0000000000000005 [ 266.686607][T11325] RBP: 00007f0659d13090 R08: 0000000000000000 R09: 0000000000000000 [ 266.686618][T11325] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 266.686629][T11325] R13: 0000000000000000 R14: 00007f06591b5fa0 R15: 00007ffc8579ea48 [ 266.686659][T11325] [ 266.960362][T11329] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1385'. [ 266.971608][T11331] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1384'. [ 267.036606][T11329] netlink: 'syz.5.1385': attribute type 1 has an invalid length. [ 267.057760][T11329] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1385'. [ 267.070902][T11330] SET target dimension over the limit! [ 267.251697][T11336] geneve1: entered promiscuous mode [ 267.257755][T11333] geneve1: left promiscuous mode [ 267.584648][T11352] xt_bpf: check failed: parse error [ 267.812241][ T6288] hsr_slave_0: left promiscuous mode [ 267.819467][ T6288] hsr_slave_1: left promiscuous mode [ 267.825668][ T6288] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 267.845997][T11360] netlink: 'syz.2.1393': attribute type 1 has an invalid length. [ 267.846340][ T6288] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 267.863652][ T6288] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 267.875837][ T6288] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 267.904893][ T6288] veth1_macvtap: left promiscuous mode [ 267.914121][ T6288] veth0_macvtap: left promiscuous mode [ 267.920031][ T6288] veth1_vlan: left promiscuous mode [ 267.925315][ T6288] veth0_vlan: left promiscuous mode [ 268.463662][T11372] set match dimension is over the limit! [ 268.507813][ T5837] Bluetooth: hci4: command tx timeout [ 268.650481][ T6288] team0 (unregistering): Port device team_slave_1 removed [ 268.682306][T11377] netlink: 'syz.0.1394': attribute type 7 has an invalid length. [ 268.710494][ T6288] team0 (unregistering): Port device team_slave_0 removed [ 269.141867][T11360] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 269.210625][T11362] veth3: entered promiscuous mode [ 269.233621][T11363] erspan0: entered allmulticast mode [ 269.269180][T11372] ------------[ cut here ]------------ [ 269.275005][T11372] WARNING: CPU: 1 PID: 11372 at net/sched/sch_taprio.c:1223 taprio_get_start_time+0x15e/0x190 [ 269.285307][T11372] Modules linked in: [ 269.289512][T11372] CPU: 1 UID: 0 PID: 11372 Comm: syz.0.1394 Not tainted 6.16.0-rc1-syzkaller-00189-gb549faa950e6 #0 PREEMPT(full) [ 269.301619][T11372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 269.311724][T11372] RIP: 0010:taprio_get_start_time+0x15e/0x190 [ 269.317838][T11372] Code: 42 80 3c 28 00 74 08 48 89 df e8 5d bd 9d f8 4c 89 23 31 c0 5b 41 5c 41 5d 41 5e 41 5f 5d e9 99 ef e2 01 cc e8 e3 44 3a f8 90 <0f> 0b 90 b8 f2 ff ff ff eb e0 44 89 e9 80 e1 07 80 c1 03 38 c1 0f [ 269.337500][T11372] RSP: 0018:ffffc9000478eee8 EFLAGS: 00010287 [ 269.343586][T11372] RAX: ffffffff89861a0d RBX: ffffc9000478efd8 RCX: 0000000000080000 [ 269.351591][T11372] RDX: ffffc9000f4da000 RSI: 0000000000000c35 RDI: 0000000000000c36 [ 269.359707][T11372] RBP: 0000000000000000 R08: ffffffff8fa10ef7 R09: 1ffffffff1f421de [ 269.367725][T11372] R10: dffffc0000000000 R11: ffffffff81679c10 R12: 184898a57a6335ad [ 269.375721][T11372] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 269.383736][T11372] FS: 00007f0656dd56c0(0000) GS:ffff888125d52000(0000) knlGS:0000000000000000 [ 269.392718][T11372] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 269.399349][T11372] CR2: 0000000000010000 CR3: 000000006029c000 CR4: 00000000003526f0 [ 269.407374][T11372] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 269.415358][T11372] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 269.423388][T11372] Call Trace: [ 269.426701][T11372] [ 269.429641][T11372] taprio_change+0x2da5/0x3f60 [ 269.434447][T11372] ? __pfx_taprio_change+0x10/0x10 [ 269.439615][T11372] ? trace_contention_end+0x39/0x120 [ 269.445017][T11372] taprio_init+0x959/0xbd0 [ 269.449496][T11372] ? __pfx_taprio_init+0x10/0x10 [ 269.454454][T11372] ? qdisc_alloc+0x780/0xaa0 [ 269.459112][T11372] ? __pfx_taprio_init+0x10/0x10 [ 269.464069][T11372] qdisc_create+0x7ac/0xea0 [ 269.468619][T11372] tc_modify_qdisc+0x1426/0x2010 [ 269.473578][T11372] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 269.478913][T11372] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 269.484192][T11372] rtnetlink_rcv_msg+0x779/0xb70 [ 269.489147][T11372] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 269.494249][T11372] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 269.499731][T11372] ? ref_tracker_free+0x63a/0x7d0 [ 269.504743][T11372] ? __copy_skb_header+0xa7/0x550 [ 269.509792][T11372] ? __pfx_ref_tracker_free+0x10/0x10 [ 269.515181][T11372] ? __skb_clone+0x63/0x7a0 [ 269.519710][T11372] netlink_rcv_skb+0x208/0x470 [ 269.524464][T11372] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 269.529944][T11372] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 269.535223][T11372] ? netlink_deliver_tap+0x2e/0x1b0 [ 269.540436][T11372] ? netlink_deliver_tap+0x2e/0x1b0 [ 269.545624][T11372] netlink_unicast+0x75b/0x8d0 [ 269.550397][T11372] netlink_sendmsg+0x805/0xb30 [ 269.555156][T11372] ? __pfx_netlink_sendmsg+0x10/0x10 [ 269.560451][T11372] ? aa_sock_msg_perm+0x94/0x160 [ 269.565384][T11372] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 269.570683][T11372] ? __pfx_netlink_sendmsg+0x10/0x10 [ 269.575961][T11372] __sock_sendmsg+0x21c/0x270 [ 269.580663][T11372] ____sys_sendmsg+0x505/0x830 [ 269.585447][T11372] ? __pfx_____sys_sendmsg+0x10/0x10 [ 269.590772][T11372] ? import_iovec+0x74/0xa0 [ 269.595290][T11372] ___sys_sendmsg+0x21f/0x2a0 [ 269.600013][T11372] ? __pfx____sys_sendmsg+0x10/0x10 [ 269.605236][T11372] ? __fget_files+0x2a/0x420 [ 269.609867][T11372] ? __fget_files+0x3a0/0x420 [ 269.614560][T11372] __x64_sys_sendmsg+0x19b/0x260 [ 269.619535][T11372] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 269.625026][T11372] ? rcu_is_watching+0x15/0xb0 [ 269.629879][T11372] ? do_syscall_64+0xbe/0x3b0 [ 269.634576][T11372] do_syscall_64+0xfa/0x3b0 [ 269.639131][T11372] ? lockdep_hardirqs_on+0x9c/0x150 [ 269.644352][T11372] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.650472][T11372] ? clear_bhb_loop+0x60/0xb0 [ 269.655169][T11372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.661102][T11372] RIP: 0033:0x7f0658f8e929 [ 269.665527][T11372] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 269.685188][T11372] RSP: 002b:00007f0656dd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 269.693672][T11372] RAX: ffffffffffffffda RBX: 00007f06591b6160 RCX: 00007f0658f8e929 [ 269.701700][T11372] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 000000000000000e [ 269.709723][T11372] RBP: 00007f0659010b39 R08: 0000000000000000 R09: 0000000000000000 [ 269.717727][T11372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 269.725702][T11372] R13: 0000000000000000 R14: 00007f06591b6160 R15: 00007ffc8579ea48 [ 269.733736][T11372] [ 269.736794][T11372] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 269.744067][T11372] CPU: 1 UID: 0 PID: 11372 Comm: syz.0.1394 Not tainted 6.16.0-rc1-syzkaller-00189-gb549faa950e6 #0 PREEMPT(full) [ 269.756118][T11372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 269.766167][T11372] Call Trace: [ 269.769435][T11372] [ 269.772352][T11372] dump_stack_lvl+0x99/0x250 [ 269.776947][T11372] ? __asan_memcpy+0x40/0x70 [ 269.781536][T11372] ? __pfx_dump_stack_lvl+0x10/0x10 [ 269.786821][T11372] ? __pfx__printk+0x10/0x10 [ 269.791414][T11372] panic+0x2db/0x790 [ 269.795308][T11372] ? __pfx_panic+0x10/0x10 [ 269.799729][T11372] ? show_trace_log_lvl+0x4fb/0x550 [ 269.804968][T11372] __warn+0x31b/0x4b0 [ 269.808964][T11372] ? taprio_get_start_time+0x15e/0x190 [ 269.814427][T11372] ? taprio_get_start_time+0x15e/0x190 [ 269.819881][T11372] report_bug+0x2be/0x4f0 [ 269.824212][T11372] ? taprio_get_start_time+0x15e/0x190 [ 269.829664][T11372] ? taprio_get_start_time+0x15e/0x190 [ 269.835115][T11372] ? taprio_get_start_time+0x160/0x190 [ 269.840571][T11372] handle_bug+0x84/0x160 [ 269.844807][T11372] exc_invalid_op+0x1a/0x50 [ 269.849301][T11372] asm_exc_invalid_op+0x1a/0x20 [ 269.854145][T11372] RIP: 0010:taprio_get_start_time+0x15e/0x190 [ 269.860223][T11372] Code: 42 80 3c 28 00 74 08 48 89 df e8 5d bd 9d f8 4c 89 23 31 c0 5b 41 5c 41 5d 41 5e 41 5f 5d e9 99 ef e2 01 cc e8 e3 44 3a f8 90 <0f> 0b 90 b8 f2 ff ff ff eb e0 44 89 e9 80 e1 07 80 c1 03 38 c1 0f [ 269.879835][T11372] RSP: 0018:ffffc9000478eee8 EFLAGS: 00010287 [ 269.885911][T11372] RAX: ffffffff89861a0d RBX: ffffc9000478efd8 RCX: 0000000000080000 [ 269.893874][T11372] RDX: ffffc9000f4da000 RSI: 0000000000000c35 RDI: 0000000000000c36 [ 269.901841][T11372] RBP: 0000000000000000 R08: ffffffff8fa10ef7 R09: 1ffffffff1f421de [ 269.909807][T11372] R10: dffffc0000000000 R11: ffffffff81679c10 R12: 184898a57a6335ad [ 269.917780][T11372] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 269.925756][T11372] ? __pfx_read_tsc+0x10/0x10 [ 269.930458][T11372] ? taprio_get_start_time+0x15d/0x190 [ 269.935922][T11372] ? taprio_get_start_time+0x15d/0x190 [ 269.941378][T11372] taprio_change+0x2da5/0x3f60 [ 269.946237][T11372] ? __pfx_taprio_change+0x10/0x10 [ 269.951338][T11372] ? trace_contention_end+0x39/0x120 [ 269.956651][T11372] taprio_init+0x959/0xbd0 [ 269.961072][T11372] ? __pfx_taprio_init+0x10/0x10 [ 269.966012][T11372] ? qdisc_alloc+0x780/0xaa0 [ 269.970613][T11372] ? __pfx_taprio_init+0x10/0x10 [ 269.975560][T11372] qdisc_create+0x7ac/0xea0 [ 269.980066][T11372] tc_modify_qdisc+0x1426/0x2010 [ 269.985098][T11372] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 269.990398][T11372] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 269.995671][T11372] rtnetlink_rcv_msg+0x779/0xb70 [ 270.000602][T11372] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 270.005705][T11372] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 270.011151][T11372] ? ref_tracker_free+0x63a/0x7d0 [ 270.016174][T11372] ? __copy_skb_header+0xa7/0x550 [ 270.021201][T11372] ? __pfx_ref_tracker_free+0x10/0x10 [ 270.026565][T11372] ? __skb_clone+0x63/0x7a0 [ 270.031072][T11372] netlink_rcv_skb+0x208/0x470 [ 270.035827][T11372] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 270.041274][T11372] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 270.046561][T11372] ? netlink_deliver_tap+0x2e/0x1b0 [ 270.051760][T11372] ? netlink_deliver_tap+0x2e/0x1b0 [ 270.056972][T11372] netlink_unicast+0x75b/0x8d0 [ 270.061748][T11372] netlink_sendmsg+0x805/0xb30 [ 270.066525][T11372] ? __pfx_netlink_sendmsg+0x10/0x10 [ 270.071813][T11372] ? aa_sock_msg_perm+0x94/0x160 [ 270.076761][T11372] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 270.082074][T11372] ? __pfx_netlink_sendmsg+0x10/0x10 [ 270.087362][T11372] __sock_sendmsg+0x21c/0x270 [ 270.092058][T11372] ____sys_sendmsg+0x505/0x830 [ 270.096826][T11372] ? __pfx_____sys_sendmsg+0x10/0x10 [ 270.102129][T11372] ? import_iovec+0x74/0xa0 [ 270.106642][T11372] ___sys_sendmsg+0x21f/0x2a0 [ 270.111320][T11372] ? __pfx____sys_sendmsg+0x10/0x10 [ 270.116556][T11372] ? __fget_files+0x2a/0x420 [ 270.121140][T11372] ? __fget_files+0x3a0/0x420 [ 270.125820][T11372] __x64_sys_sendmsg+0x19b/0x260 [ 270.130760][T11372] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 270.136226][T11372] ? rcu_is_watching+0x15/0xb0 [ 270.141002][T11372] ? do_syscall_64+0xbe/0x3b0 [ 270.145673][T11372] do_syscall_64+0xfa/0x3b0 [ 270.150175][T11372] ? lockdep_hardirqs_on+0x9c/0x150 [ 270.155369][T11372] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.161425][T11372] ? clear_bhb_loop+0x60/0xb0 [ 270.166096][T11372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.171981][T11372] RIP: 0033:0x7f0658f8e929 [ 270.176648][T11372] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 270.196256][T11372] RSP: 002b:00007f0656dd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 270.204681][T11372] RAX: ffffffffffffffda RBX: 00007f06591b6160 RCX: 00007f0658f8e929 [ 270.212649][T11372] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 000000000000000e [ 270.220612][T11372] RBP: 00007f0659010b39 R08: 0000000000000000 R09: 0000000000000000 [ 270.228573][T11372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 270.236534][T11372] R13: 0000000000000000 R14: 00007f06591b6160 R15: 00007ffc8579ea48 [ 270.244516][T11372] [ 270.247667][T11372] Kernel Offset: disabled [ 270.251983][T11372] Rebooting in 86400 seconds..