last executing test programs: 2m41.917150638s ago: executing program 2 (id=475): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000540)=ANY=[@ANYRESOCT, @ANYRES16, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x7fffffffffffffff}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000002000010000000000000000000a148000000000030900010014000200fc020000000000000000000000000000140001002001"], 0x44}}, 0x40000) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000032003904000000000000000000000049c867ae1900", @ANYRES32=0x0, @ANYBLOB="0000000080100000300012800b000100697036746e6c00002000028014000300200100000000000000000000000000010800070000020000"], 0x50}}, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x4, 0xa7e, 0x1a}, 0x2c) socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x6020400) r4 = socket(0x10, 0x3, 0x0) recvmsg(r4, 0x0, 0x8042) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001040)={'ip_vti0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x2, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x81, 0x29, 0x0, @broadcast, @loopback}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000200)={'tunl0\x00', r6, 0x40, 0x1, 0x2, 0x9, {{0x7, 0x4, 0x1, 0x3b, 0x1c, 0x66, 0x0, 0xea, 0x2f, 0x0, @local, @multicast2, {[@cipso={0x86, 0x6, 0xfffffffffffffffd}]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r8) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r7, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x24, r9, 0x20, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x1ad2}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40084}, 0x20008890) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x210) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018"], 0x0, 0x18, 0x0, 0xa}, 0x28) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={r10}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x16, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000010000000000000001000085000000a0000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70500000800000085000000b60000de9400000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 2m40.399612196s ago: executing program 2 (id=493): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xcc}}, 0x0) (fail_nth: 2) 2m39.875973243s ago: executing program 2 (id=498): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x0, 0x3, 0x1, 0x1}, 0x20) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x5}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@ipv6_getroute={0x2c, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, [@RTA_IIF={0x8, 0x1b}, @RTA_UID={0x8}]}, 0x2c}}, 0x20000045) 2m39.677361415s ago: executing program 2 (id=500): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x89e2, &(0x7f0000000000)=@null={0x40, 0x8}) r1 = socket$alg(0x26, 0x5, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) shutdown(0xffffffffffffffff, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) recvmmsg(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000800)=ANY=[], &(0x7f0000000680)='GPL\x00', 0x9, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x1, 0x10, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000d80)=[r4, r4, r4], &(0x7f0000000dc0)=[{0x5, 0x5, 0x9, 0x1}, {0x3, 0x4, 0x2, 0x2}, {0x5, 0x10004, 0x0, 0x7}, {0x3, 0x4, 0x4, 0x4}], 0x10, 0x5}, 0x94) bpf$PROG_BIND_MAP(0x1c, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="0800d907000000", 0x7) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="58000000100001002dbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1843010000000000140003007866726d30000000000000000000000024001a8020000a8014000700fe80000000000000000000000000002c0500080002"], 0x58}, 0x1, 0x0, 0x0, 0x4000884}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) unshare(0x62040200) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r8, @ANYBLOB="0a00340002020202020200000a0006000802110000000000080035000000120008002201340300000500180136000000"], 0x4c}}, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x4c) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a534308", 0x10) 2m39.27651095s ago: executing program 2 (id=503): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x12}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe0}}, 0x0) 2m39.135903637s ago: executing program 2 (id=505): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000001740)={0x0, 0x38, &(0x7f0000001700)={&(0x7f0000001580)={0x14, 0x25, 0x1, 0x70bd2c, 0x25dfdbff, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x40080c0}, 0x24000100) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000203010200000000000000000000000009000200000000470200000008000340000000000800010001"], 0x30}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="580000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000201100003000128009000100766c616e00000000200002800600010000000000100003800c00390004050000470300000400048008000500", @ANYRES32=r3, @ANYBLOB="143ea9e36b54526a7ad894f57d328dca10"], 0x58}, 0x1, 0x0, 0x0, 0x2000c855}, 0x8000082) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f00000000c0)=[{0x7, 0x0, 0x49}, {0x2, 0x5, 0x2c, 0x40006}, {0xfac3, 0xfe, 0x4, 0x5}, {0x0, 0x7f, 0x1, 0x80000002}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmmsg(r4, &(0x7f00000019c0)=[{{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f00000006c0)="624eb531", 0x4}], 0x1}}], 0x1, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x70, 0x1, 0x1, 0x801, 0x0, 0x0, {0x7, 0x0, 0x5}, [@CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x4, 0xbc35, 0x6617be6e]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'sane-20000\x00'}}, @CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x200}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}]}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xa}]}]}, 0x70}, 0x1, 0x0, 0x0, 0xc004}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2000000002030500000000000000000000000000090002"], 0x20}}, 0x0) 2m24.022923198s ago: executing program 32 (id=505): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000001740)={0x0, 0x38, &(0x7f0000001700)={&(0x7f0000001580)={0x14, 0x25, 0x1, 0x70bd2c, 0x25dfdbff, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x40080c0}, 0x24000100) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000203010200000000000000000000000009000200000000470200000008000340000000000800010001"], 0x30}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="580000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000201100003000128009000100766c616e00000000200002800600010000000000100003800c00390004050000470300000400048008000500", @ANYRES32=r3, @ANYBLOB="143ea9e36b54526a7ad894f57d328dca10"], 0x58}, 0x1, 0x0, 0x0, 0x2000c855}, 0x8000082) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f00000000c0)=[{0x7, 0x0, 0x49}, {0x2, 0x5, 0x2c, 0x40006}, {0xfac3, 0xfe, 0x4, 0x5}, {0x0, 0x7f, 0x1, 0x80000002}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmmsg(r4, &(0x7f00000019c0)=[{{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f00000006c0)="624eb531", 0x4}], 0x1}}], 0x1, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x70, 0x1, 0x1, 0x801, 0x0, 0x0, {0x7, 0x0, 0x5}, [@CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x4, 0xbc35, 0x6617be6e]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'sane-20000\x00'}}, @CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x200}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}]}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xa}]}]}, 0x70}, 0x1, 0x0, 0x0, 0xc004}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2000000002030500000000000000000000000000090002"], 0x20}}, 0x0) 46.826878585s ago: executing program 1 (id=1427): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="050000000000000073113b0000000005000000000200000085000000ac00000095000000000000009500a50500000000bb7216ae0ee81ba8a6b3a51ea38c32394241d6fda5e2974f1dadf7eef15ad519fa9256a4046819906746699d8d07e9b2fa28bab41bb8c38eac13beaa77b9b420ce0aba84340b2aa1dbbe63164520ecc7ecc877209a80405ee3a6b7ab837608ec63150e071d8eb4b0853f8c48cb7b0b9a83f94415eab95d8b30e382ee40a5bfbbef7ff905fa8a9705"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 46.571897071s ago: executing program 1 (id=1430): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) (async) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042, 0x3}, 0x10) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async, rerun: 64) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) (async, rerun: 64) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async, rerun: 64) socket$kcm(0x10, 0x2, 0x0) (rerun: 64) socket$inet_sctp(0x2, 0x1, 0x84) (async, rerun: 64) socket$inet_sctp(0x2, 0x5, 0x84) (rerun: 64) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8) (async) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x7}], 0x1c) (async, rerun: 64) sendmmsg$inet6(r2, &(0x7f0000000640)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x2, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000300)="06", 0x1}], 0x1}}], 0x1, 0x3404c8d4) (async, rerun: 64) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES16=r2, @ANYRES16=r3], 0x1000f) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000240)) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r4, 0x0) (async) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(r5, 0x84, 0x1, 0x0, &(0x7f0000000140)) (async) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000100)={0x42}, 0x10) sendmsg$tipc(r6, &(0x7f0000002340)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x3, {{0x43}, 0x4}}, 0x10, 0x0}, 0x0) (async) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x14, 0x10, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000100000000000000000000cfbf0000b7080000002000e07a01212000000000b7080000959700007b0312fe00000000bfa100000000000007010000880300000000ebffffffffff06040000f0ffffffb7020000080000001823", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 46.457081008s ago: executing program 1 (id=1432): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x22281, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'veth1_to_hsr\x00'}) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @multicast1}, &(0x7f00000000c0)=0x10, 0x0) setsockopt$inet_udp_int(r1, 0x11, 0xa, &(0x7f0000000100)=0x4, 0x4) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000140)="72fafec9469d3e99591d3b9f0c9f4b0931c1386b37109feeb84930d8096685777a045f51106f1b24814a43262d2d04a66f5c2d0bf081f960bfd8867c29b396becb1f08c7d0238a1bdc62319ca9abeed054e9e91f344a2e9e", 0x58}, {&(0x7f00000001c0)="a4ce1dcb77c401b3ad4480601f332393a8ebca5d8c971f6c7e50a9d3df7bd25f4265119cd48ba4a56a1ddb0996f4bc48711cca39aa088208538108c712c231e167121df265721e92ecb8aea73a6862990630d00c8686bf6a3328f493a56da1f0a49577349561c6ccdff2daf2d68ba48302e1d9772704def0bab9b85f9c6f3a", 0x7f}, {&(0x7f0000000240)="4193dde8d2d289c4e4176faaa496144c72323f39556d7d218ded1acb12da6cbca82d022fdb15bb5360fe9c77ad0e4befdb160da6d183", 0x36}, {&(0x7f0000000280)="ca090811413ee4d79cdc0f24b3370d4a2478214b2c7c26bcd4d984351afa87e0f1fac287a4ffae2f1cb26416c744db00cce3bab2420a4e98f9fdfecffc90e3d30ecf57994fe7d17e21d1fb346c09ee33f12d441860d109ae4e77bf45f3e3a531f7fa7bbc85c8", 0x66}, {&(0x7f0000000300)="7d6aeff4da1eafd8393cc0bf492baa7f4ba064b5f5208c4506f251234dca1fbbf3d37747df6a997e4ee1da2d43735324578e4af64893e8dce255db0d58caebd0a705c35d7f322a92ca9f3f82", 0x4c}, {&(0x7f0000000380)="5b7cad0028736dc5dc44a5b7edbb544241f2ea1e13e5f33fcd82e0e668e5428a8181f493b43b18b639f58ca91152c3522f506bbe115682b5e6356f4a54f312fd30dcb6f3faa2f243cb78539c0824e86d601b071f672d9169993266f93e38278558570a80aa1eb2abc5e1a3a501dcac9cb8a5d614b9ae9acdebf64567d452a17f81003e", 0x83}, {&(0x7f0000000440)="e7d67f0a3b1e7679243cf16bf8fd99432d226c68ed93385b861c88539233a0a41a8e21aa7774f069378e25c97b1f970352c0567844bee3b3f66d0cbbda98fbe55b170f9811c33de9fcc1684a6aa92b8518aba7226823eeccf8b8ef0fdcbc977b299938cb6e607ffb603ecae95841f73bc9f4081005e884f822287868c77142ad28050a0d9dfe82e8526e58e721536a454e775cd000ee280a", 0x98}, {&(0x7f0000000500)="4974f37195eebb528fb3c24d7a0235eff39f867f6ceabff0a25825b04222d0d9b610d5f23a4b155a54d660eee96a469292a283d3ed7de41a561dd69eeafd5f9465faf8da21e5f106086ddcda7579bb63412add096f02ca1a6f8639b94e4edfdbf2fb4492da3b87e8b60920d391face82b0db54aaf9f8e572f6b7496a65553b4a983d7b041fa9f82c74792fd11d3223f89877466badee3f0643f6a3f017250b68aafe961a1ee444ba18ffe8be92e3121f71d1a1dcd6e528fbc94b54ce8b81f6bf661a67390f58277bffbbb80abf4b198aea4449c586af1bc67ce3ce3288aaafb58a2f4b249d6cc0ee83cc8bb1", 0xec}], 0x8) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000680)={{0x0, 0xfffffffffffffffb, 0x400, 0x8, 0xfffffffffffffc00, 0x56, 0x3, 0x10001, 0x101, 0x7fff, 0x4656, 0x4, 0x2, 0x9, 0x3}}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000001680)={{r2, 0xffffffffffff8001, 0x4, 0x0, 0x9ca4, 0x353, 0x4f, 0xa, 0x25, 0x0, 0xb, 0x20e5, 0x4, 0x7dbe}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) syz_genetlink_get_family_id$tipc(&(0x7f0000001740), 0xffffffffffffffff) bpf$TOKEN_CREATE(0x24, &(0x7f0000001780)={0x0, r0}, 0x8) r3 = socket$inet(0x2, 0x800, 0xe) sendto$inet(r3, &(0x7f00000017c0)="f3c77361b764b3aa6732c5906892f41391dbd36c1c1ee4ede014d1c63ef1d3376916d07931a9c64f765dc2383242af3fa7596a2a807b53a1a7786d99510a0c45446ffb1c24a2775c62377ab6e7720ff133ac19505d7c5838fd7567397794e8dd66009811e5be36d198075ed7a82f025ea0a3a65b3f50bb1b7d2a6fec7cf81642f32ec6aee493fd1146b80f292aae361517811a88c773f5a3cc88b34227aa3c50c452efeedcde544b02e216dd18ccc9d9ae4d7a34401ca346e62aeb7694b8f0467d2c20bd4dbd76c47382571a7b9c", 0xce, 0x4000004, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000001900)={0x0, 0x0}) ppoll(&(0x7f00000018c0)=[{r0, 0x200}, {r1, 0x880}], 0x2, &(0x7f0000001940)={r4, r5+10000000}, &(0x7f0000001980)={[0x8]}, 0x8) close(r1) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r6, 0x11, 0x0, &(0x7f00000019c0)=0x9, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000001a00)={0xffffffffffffffff}) sendmsg$inet6(r7, &(0x7f0000001f40)={&(0x7f0000001a40)={0xa, 0x4e20, 0xf961375, @remote, 0x200}, 0x1c, &(0x7f0000001e80)=[{&(0x7f0000001a80)="86b589b279729f7dcf3c4d360494a641dee7193be41c46c6708716b6234030e3d33e58f5e1a334e1eebc0f4989b3fc9c1c797e6ab6bbd940c3d4c5e7bffabbdd89e4db365e4b4ee9293f5702da498346d1d23a91e7ab08b0fd1eebdf6c2d73ad67a1c9845c5b7e4a4507a1c558aeae71c7abc40ae50aee59b0b444ef615019b4b777cdab1727862e25d8ab03e7a15f285f2641fb773a6e30652cdcf15ea184f945b7a2a81a3c3e6f1ee74cacd582b91d6723a2f92d88a13439f461d9cdb7c5a8a9aef608e5eeaaefa4f9db8563c344dbfe5c978bf1a7c1ff5db5d1", 0xdb}, {&(0x7f0000001b80)="07c8a7eb8f40c4fcb561809e3c27bd3a2f0d78d203f5195c0c56605386cdd53c745c1cd5eb03ac1fa574cb5f3b9ce5c6ea3642b97a191b0b67b20eaa10ba5322799422f3b8df79d6f07e3087578fe7cd077f59310190282453738847273aca05069d4495e618bbc0c71f8533cfe20c6171173fc05e921dd05b3f1dd558a85f56a2bb4347", 0x84}, {&(0x7f0000001c40)="7b94e516fdb7fdc42b", 0x9}, {&(0x7f0000001c80)="6fffa02d8c5dddeae8adfc05a96ac9eef21ab087de20304cde7af2d4f54e2afb6f87f7d6c65d9c45a6f233cb5b9602f4e8da84222277bff4b81ccacd3cf6d0fc27cd80c0e6", 0x45}, {&(0x7f0000001d00)="6c6180ecf1250003910e198de578e8b165151e278b2e891b2b0610838120", 0x1e}, {&(0x7f0000001d40)="61f8d6ad550a6a86ece22460f0efe011bc9ed5b9a7982f905eb3e7a89efc30fc2d0dd3408cc28db4a789383ab0728c8fe79abc8748e58fc6f547ed2d72cc98fa70473b182ebd8aa217b423b36f7af9c37f7c9fb6ac0b", 0x56}, {0x0}, {&(0x7f0000001dc0)="5bb9dbdba507d206b091ecb31449ddc84325959543c00336ed5d2f24140a1dfc61995ee7c0613119983df8ccc873d805bd4d2a7c6a0b5c3c069880a25c821e904f42056d2cb3db3ef50e37839e65e144616d4c99fa3237af014587426c5cd16b611fe40512c639ec8fd2d70ed6a6e54224af86db9ca8cd7c4ea168d52f79c1302bd274dee09888f840e95d71c5ac29dc3f314b1fbf31b92f9a62edabc8", 0x9d}], 0x8, &(0x7f0000001f00)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x8001}}, @flowinfo={{0x14, 0x29, 0xb, 0xa9}}], 0x30}, 0x800) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f0000001f80)={{0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e23, 0x3, 'rr\x00', 0x27, 0x6, 0x6c}, {@multicast1, 0x4e24, 0x10000, 0xd1, 0x3, 0x5}}, 0x44) ioctl$sock_netdev_private(r6, 0x89fc, &(0x7f0000002000)="4a7a051017b63da2d565bd225c47f804ce7fb147e28ee46c705cd58d255e7fb69bba745b3cfcf580ce738dc5bc9ba845756868842f8d0697d4f593c134fd3cb69e8a1c298418913380a417d5f4d29b5ea711976d68c4b59e64cc5c344408231e0ae5af0fa2833dc411e87295de5db45c852fcd7066d9b53a1c1b34cdbc3663996451e0c67923d144ac8b0716e8296bbd6b3b5589e0ade495a6f5eb1f3a25a43039ca9d0b30a3869452860e") syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000042c0)={0x0}, &(0x7f0000004300)=0xc) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000004340)={0x0, 0x0}, &(0x7f0000004380)=0xc) r10 = getgid() sendmsg$netlink(r7, &(0x7f0000004400)={&(0x7f00000020c0)=@kern={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000004280)=[{&(0x7f0000002100)={0x113c, 0x22, 0x10, 0x70bd2b, 0x25dfdbfe, "", [@typed={0x5, 0x125, 0x0, 0x0, @str='\x00'}, @nested={0x1122, 0x109, 0x0, 0x1, [@generic="9de9472615d0b6cd1d8990d941fb5704e3af6f6e5f2e69986027c25922c9fb064153e66920540ac4152bc20bfc8228d958ae5ca9189497c24b3a32287db262f8d02b", @generic="54c46bea9ae5c39e2746817a2b91676479070e6ad85774da0a456d8103c9e1376891810ebc9fad42322e32d37fca7e1526701c52c39308ce3252aa3b2286b61667046c37a820a7be3d97e584f029b19dcd4fd5b93d947911fb6e23d1941c829193ecb77446980efa17cc60cf58093067a7c17f1140949b74c1472f3891425df55bfe2c3057a2382a21e76db8f9b25e16a5f17cd180650d34f4b9cf5c0c9b1980c871058c5815bb0b356b22e5faa2f14fe107ab23c3958f7f1ccea38f9226326adeabb42d648bdf7b6c3b511c0bd3ad147e86094f4d7b256010d58d9b00c635e2df0275175554dc7b50d257ecf320163414ac0b6b947fb90b7e54f12c16e8d7c1e659a4f90944f1de86149bcd6ab214864aea05163415ebd4b6dd842450904f8ac1c1ff13395809bbbc9929daf15f9e6e5cc71138a97614087f2f23b3a1f25743d1c11962c72cfc8dfdbf584110181a784a644122d6323dd0425529180595408691a0eb34604f2ce67abf24c1366178b7d69c10d67e2c481e9c9a0925e0417bc6450475dc9770620cda9bfd6955ad772ab29161c695a882ffa445b9b26484b974fecf5c393cbcbb9614a19e6403018738bbed1635c623b3c73cd8f2b73781b129d7b25ee14d71aaadd2152e9acdc850766874a069bac610d3c6a9f6dbde2b2229200fc7895b9898c0f76332e38779345d4f3585d5a1b508e480a23ba3c186ff029eddbcb4aa41630ebfe8cf5a7b031e7fe5865f3cf35402581dc8b2851591c7e53d18088ea70e57e62cbbc13393bef07df4592126d5927ad2b6c3da7dc15a7ff37821dc3cfab57396305988d20f4b0becdb940d5395efa9aeeff590846e7a526e3cb54edc089ad16417c4cf55a96cf9ba8da00ac38bd429372ce840278a1798e04858aacc762b6f7b4ccf6e89ef5f57a2376256386fa03e945e85d61fef0cc3de2f1ec90ae63d66bf9789caa9db162187c4d3889aceb5ceb6053772338185931b2573615dced41dca939da84ac068e858ea56c49f76e8e66bf4014ec0dc2bbdab7595a5f70bf3f132ba3361ef8d3c42c81a9ce048ef69cc8c7ac7c03f7fa0f9fccf54c2ddeb5dc03d4fa2873646b2d6e10a49017f493ac17fdd62776280ae6efc2b9ab4c3c8d2d06f946fe5bd58c3a5466b47685509cc6e67bcb957c1fac9a1cf806971777ab20dcba40eafce9ed78f949f848c70bcb3c1f1eb22869ebae70cf1457f8e169787ce2fc28ac2fb3683019c5842cb83f1f36e88419be91fe6f8f6bb7b8db3441c948fe6d055c332872985f5a85a9054438a33efab7082107c47a3296350c41e656b2d3c54b7c6e63809840d4271419f3d230da915c1a1cf3e1c9db327af08e9e9fa9c49752af9a994f93c6ab73649e08a17f2ba659dc2898c3c2f2e5c60335c0fd9f4c006f16ba46d53566f3dd65b3a9f8ef3957773e6c57447b1409777d61c04aa00e12d192cc34107d9b4eae68a88019f24fd164159bfb8f7dcad94682b4ef1f3e794950cfd452ad024d771cb036f8ad9a696188b4ac3e97becc65533d1c4eea18d66cbee9ddf3b2f27f105053f132c83968d6de0b171559dda2e715c3836b21fc280d9ba7d02a2d867f278a4bc816a9adfecf87510d88cfe683fb461d0739248d99b4303cf7cded676eb159cb389d6976746a9abd2848c071dfe1684968a09b62164483343925b87337fbd70a45a0e0e191c31e53b34618a77c1c3914d493a0e87256ee4164b3c38d62b53327393bd1331c832b65283c02dda85c36202c00bfa933f89d327b2e8e3de6690b399a2fc4e6d5345dd115ab03031858e06e04277064e8a1f411dc2dc95ce75142012a4d2d2610618a04dad49d523ff274c44595d1f69b89abf8c1a27a04fc7045907a236d75fdb96e3ccd970e77c996c16c20f627b0c60ca7a7ad8002b430762367bc02dbb2e082d8b2e1d7f342bf746c7e32b70edc1e62ff416f8242b7fe47773db8271749fa0e3511dfdb011d5928c2d6885543b0a745bdd33689b3244d4861db6d93f01b095559ac5ca4680a5f65486142e3be3620b545979715c1c9bbd82a3f5523ecaa80c87ced1fd7a677978fe4c873ce1dc3edca7f4e072b76227d0038f153e3ca996c9c15704fd4433f451b807768f284df9021ef5e9d9ad462282df53b6464b3fe93eb00ce3a3f98c0c42b755d1fe0e298ac20a0cc44a64353d74f7cfa61e6585af634cc0105cde7949f5241c09fc9f6e1cd730114ae1a7863fda35712ccf704fd9ce565c48195757ceab2737b5177b2b9865cc0188392dc657b970c851629e551183d4b13fef1fb16cda7e3952806b2d9c5c22594e6f2459e916ddd150e4ca95ead82789b3ceef00d9134da3c1cd76580935ace09647cdd5e8475d8f9cf25ffad123ffa6a11ce387f89a0857e1a57bcd677b84f27900f96d71abfc939940b1d270cfeb06cbcf0e374a0d19badaa772014b82c704d074d6e159f21dbbcef2d7c1c83651b7cc6d7020a1dc31d402a7871644dacd91d4e3d3ba1e09ee6b904c268f94a3adf17a76e1cb44390776dec0fc6ca43271f39f3f2b2d0ccab35bafdf0c2746bca7464125d5dbf601054418e02cedab1d48630b4c95b5a59c2798b0c70fd1374e8e82950a0f810b023d383238c9048f63a27d0f31fd36bd5f5ec0d9b165e97ede43de5c396a5f4ce5c0510ac968ece030c5f2731c84ee2681fa91dd2453cd34b5fc6f06974447591163222aad03334d8597b4a4db6f3ec7dd6c5446f8a4d5339f1979ba072f496f545e209ffe6d6b5b9c9d7a7ea148268f5bd083180e60a9d69506b30ff9352564b873dfbe0a2e73b8a0c302feeffb8d1cc280f43d4b1c12a12ed3e4028085ac73e51f8540222de1352414842068a0b5f528f9e8ae42a837ac9974925b1a6379b072900399cb2f889ae9fc2762d7927c88c7ddfcc91d8ba4782c0043f119a6a5a60a173a9891bc4b04edb088b8f988fcacfa901a835589c3b76d744d60508089075da49d27d81408d35643775c43513204eb56f47e7d77b3423f6f862108bd0a7875b430bee8dbf0ac89eb0728c06ea8d344b5666f6f4e18502cf0d54e5296cde34b9e038d7d936fa464c74651ae1d84228f828ff29bfddd02a4e2dfcefb323eeaef14226bc2233c3b00a1a1b3e7ce8603df1caf823d547eef2f4ddd699e53b5010e942304833cfc05f8ef542234531e3c4289c3c4889f184be02a77d1eeefd4a1696542c2b3a325474d0f6a2bd0566df3d175bb78a01cff0534cab5a104f09850fd7fda8d290f10b3318bee925587d524ad062a434b9da05886f0c7f6710edc8aa182b7a43b1ed7273f31d1b7c7fa0097c3c6e52c6f52858156a57df6291a2ad8decf93c20a6bce9e84fe4830330a9e93f5c934ea4e67a9ab8047beed3d0e956c0c6234b47be91ce5b3320ec54c35c9d42bd1640fcb0f21ad54d02c2cfd9c65a9d988cd479c5dfa35998ffc22e3073b6a0be34eca9c4ecbbd32e65c51602f29875fc7b5c8bb9f8d40a421f110cb31f09d48afeed3d1aba21b7edffdda1d471b6cc3302679eb2a35afb422c0f9ee8c7a36fc9f7247585070b20267f6ec677bac309f65b371c8bced9de394ce53412cb7b10ebeac3a6688d7c560c7c9725a1ac5c251f214bae50b789ca2af4957ea2b7ff4208097e9eed3e6a6b9e49be7c87aeb8d988dc53471bf56411c89efb6f1fe2b9e0b96bf03c14dbf06fa2333523d736ee6b64907075a5187a996dac5e596df0f52d2c77dd66a42176713165a6294adbb1123f962001ad70292a8a8aa957fba975d49092b5140206248e5f723276cf1dbd4eb6569f5cc16140f5ddd8826b5f948603af40b22d1601467aae6f04ca26c0e990ea90b26dfa5222101a943a0a2923415dd534632406ee1ccb02a43f9ced5aa6552786ed6aec1572b068507be48c51a5f212aa096c8037a629f8a701390bb70c5d5002cf0dbc8f5d47949b9a40aec9d3bb32f574f6fa5be9180c263ca867f16a6c630296e5da3c3d866017ab141e11da4df0174520f64fba8e97f18e7aa9f2c8d8944851b26ebd9de950e07cf3be7b62e165b514ed48a0a366b945bdda6c6a095044d5872a7e6940d15654f03a8ab673f5c72c1a7245956bc744b7ccad62f2f0cd1ad55a6e57bf548f301a9b0ea6ad268174d3cae9eba2f8982709e1ba45b4539df01ad67701747a179b7afeb226c899f9ad092d94851986ab4dbd3b240dfd2272fceb6168e9ffe9966f3172357410004624393598e8951a369bf9780af38fe40771207c11c5c5395febeef8f2f98aad537b78839e6cf6eacfb32b2055aae6ff4e8ef713cf4c23913f29cad541acb267ba923cbc93ea78627bbd69b19d43374fd0368f712eefce662b371d32efc771d5f55b503fa1900be42b764db97f85c4ee0d5057a607c4413afcaaa79067424d6282cfc8cdd6c969ddc468cfb6f4be8175693cacd1a0ac128eecb3ae79c095e77ae53b087bffb7eabf4d4dfd8a91d6d6db831712ca7b39cf5f86bbda366f55524508d6896437acb21af2d8fe9722bd6f86af5dc82ae6df4fc4b127227901acffa50cf9e046fb42f1d42c5ad09ec5e90533fe8a1d8ec2ad0fa2e457ac16a924f31a5eeaca42158a50611afc156acd1125223fdc543ad30911bfa4b1355163b46954849a36448e17ea5398d22e65b810b6d953ba0ad5450fadecc89845867ffa30ea9e8f312429d082ae3fae2e950c128643525b54aaa6f60c887d1ff763dac09485250499a3781d0c8968df66ba203a6dd70d7c48bb2bc712bc4c8be22245c13bc6f0b759c4263f7a6b3393abd09c2e4eaac2859ec67a5616b1626ff30055be923ca85ea193dc0c853a8b02e046d1c20043ede7d1ee562bf5612f64e90198b3a124cbaa6c33b0bae45df7884a44d0621e2ad941283bd2e54aab7be345e2459e2040fc6472a5739782b67e06e4fce56ba65fe9e2811ab55493c32a714b0b297c6d0afb1aa49fd45818c6e7ac144979ac15b035243538a9c4eeefa1359714016a37b69713a73e168601a9e6aea2ef972807f7549f70ad45f281f1ef13c0d08c80aaa0866cd7af5a5e86593a85c379947d1ca3d779e09a0e19ca190d712064091c12dc678b80fd833c004314768802676ab49c065580ab693d566c7557d869a3aad7b142760fe72822b1d27f77ac37dd2cb07a45f7cb290059c0a9850e78fd8d4e96094cff3232b0e2b8927edc1190538d0e627337cfd083aa62b0619845c01e4397f5af3e27838e521010e76d2e58976d91be7523506407f1f5d0f8af18b1871dd4a0fa920f0ef53cc30f043b9a3aa0c713897d9946134196166f6a2c70a592cce69b9ae25e70c2a013e101280becd20057f0220de51fc993b7af82c1d2839edbe12e86ce986cd56bdfd1b89fccb9c160e0d7146f4e8e1d664ac2d10927a49c96cd14f144e67be047c6ae5ccfb296c991b4a93aa3fb9a5c6a017aa0e69c7c9e87977b8e91cc06246e8ad51512dbed753e3e42a8cbb6640694fba4f459c7fbb6c0bf39363c9a0ec34390ff3ea3bd907a5a843b6b4d4b44e6d61f8a7ac50e2c321e075f09871bf50992f80057a39375001391e85491a9e928cd7b35a2663fec50e81223671cdb37ed8033db9fc852660a7c2a9571e7f9535aa11e5c9cd99f6429c3249265def776a3726d2974a47fa4efc5b89726996889651bfe256f073beff93303cbd81f3d121fd6c0a1725a7352679310c4836cd0b4acb8113345fa2994908325139a8e3195daadf1bf27dd06b2e5bcf6ca6fbf0a7b5220074bb50e721257e1a1dd4b8704b225901cc8c9b6060d1032e6a6f78", @typed={0x36, 0x43, 0x0, 0x0, @binary="69cafc3df33cff26530f916b5301618b437ccafc3ca65cb035e2c1abc36ed57bce4d5664ff9dcfa084ee25397395f13cec81"}, @nested={0x4, 0x44}, @generic="2fca5a37d2f4a003e4e92994eb1ded8fa212a1ec3bc05817817ac9112e00963e58f3d2539009fbc3a78a75715841878e7c8447543eca9236821f610e22d6d1b71df11760c839dd439117c90ea4d7a8a310807d0742bf237fd920cf375df059668cc196c2dae7d0170978f6cf79586f397efb0bc82973249b82a81a60f88b002aaf05f16b", @nested={0x4, 0x67}, @nested={0x4, 0xaf}, @typed={0x14, 0x7d, 0x0, 0x0, @ipv6=@mcast1}]}]}, 0x113c}, {&(0x7f0000003240)={0x103c, 0x19, 0x100, 0x70bd2d, 0x25dfdbfc, "", [@nested={0x1022, 0x25, 0x0, 0x1, [@nested={0x4, 0x1a}, @generic="ae506bbe775f85e38840934a4de074334db1feb7b3bc5e5d0e3c", @generic="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"]}, @typed={0x8, 0x1d, 0x0, 0x0, @ipv4=@private=0xa010102}]}, 0x103c}], 0x2, &(0x7f00000043c0)=[@cred={{0x1c, 0x1, 0x2, {r8, r9, r10}}}], 0x20, 0x4}, 0x1) socket$unix(0x1, 0x5, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) gettid() 45.771061464s ago: executing program 1 (id=1436): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef42d430f6296b72a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed40000000022278d00031e5388ee5c867ddd58211d6ece3ccb0cd2b6d3cffd962867a3a2f624f992daa94a6a556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff020000000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409e011f1264d43f153b3d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7000026a4e739c60f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf3f704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eedd9068ca1457870eb30d219e23ccc8e06dddeb61799257ab5000013c86ba99523d61a00000000c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb8629aeec90e6d1857da822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae200f279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522e8dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f34a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be10ba7dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2db484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b00ffffff7f000000000801f71d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cf0d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67856ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e2b8e7370baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b09000000d31df213c802d74797056fd3bca8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221fff0f0000705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f14fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008f3a20b49fe7636806867283e35cff8d00e7b251bab3cf6377a24f8e8d4bda7503674bc94bf7f4d2fa6f25944bf0a186436d9f6831995976328a1fdc78492c65c1434855dc35c3cf7cf9610c5387794443c99b304799114132362849c3fa85d6379729ff9094933db0cfbe8887c50b87e1469fdf454cef4cbc5f7bf384000000000000a4e8c1a25f47c440144a9776be6cb40aafdb9d3cc8f6a6050974e1c4000000000000008b753f4e1bef9556efcc087a99dbf231167013a4b2eaf6338a0b100c98a331dffc09"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) setsockopt$sock_attach_bpf(r2, 0x1, 0x7, &(0x7f0000000000), 0x4) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000980)={0x414, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, "", [@nested={0x401, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x2}, @nested={0x311, 0x64, 0x0, 0x1, [@nested={0x145, 0x121, 0x0, 0x1, [@generic="d9b45c1c72ea0f6ec741f650e5d8f1c76e4d6e6f78dffc221296c2686a3b0e577e85e2", @generic="d42ec6795d0f76e5ed0f31909e6bed6e29fb89f169f2f3f03481b87cf2a83e3bc132072ed4ee7ab77002f80ddf0b8c819b047e1a70ad821d12b62ac2e3a2ccd666b54ee507ea702cd16bf1df7c22f67f542e5f0d71bc806d3888", @typed={0x8, 0xfa, 0x0, 0x0, @fd=r3}, @nested={0xb9, 0x1d, 0x0, 0x1, [@generic="395659cbee1ee6766c7549af751fbf2eb8788253b47d23023a32d9788c32998ee026024e276914d0aae70d786e120337fe9cbc0c9e9e9008c238dd702409482c45a977476e6638789f", @nested={0x6c, 0x1e, 0x0, 0x1, [@nested={0x59, 0xd4, 0x0, 0x1, [@generic="a4803e3fd1af764643b73de45d768de8db52619a63255c11ccef20dfffd887a99225e2f5ecae032cafb7216b237a1429eed88bc6f84aeb562009f34ab2a8894cd1d7697087420e5ab42922b7a9a487ed10c5c0e82b"]}, @typed={0xc, 0xf, 0x0, 0x0, @u64=0x100}]}]}]}, @generic="180187793ce4954a2d0c6394198efd86259a455b383d61a34aed593c5da530877c3102231ea96aa5cefb6c2d99b6fadffd0e3bd891225e8c0d45e6019a16c008707e0724a0a436faaabd146ae5a60224ca6e64f9e38c4349e259ac91811a57b5f522ff05f1", @nested={0x15d, 0xf, 0x0, 0x1, [@typed={0xc, 0x63, 0x0, 0x0, @u64}, @generic="796c3d3cc1f3db290ab3ff8af9998d01a9067f3cebdf5f818852b98b44e11fd441db5f6ccaf5833e192b4dca10fdf86450cae212660821bc12a1c14800e1893737f187022031f06b8d0f53b1090720f9f986853c93b418a7611f89d950d13b469a32796fe9d499cf7fd95151ff157e7e60ea88c4d6be9376ea4b50d5bd551481c915564cb2c452ed234ea4a800df8f95d198d2da935b789495ea7bb9ce6531ae7e6abf36751dba41809d5b16363323", @generic="9d22bafd4ac33962ab17d0d990f22e0ce4779bac24155d82f05498da6c9fa05cee888ef71b4755c9931b0200f564a52cdcc89114643ffd15fb495cd1bbb51ebd9f651e6ad3b3473949c0e79dcb948e0d4396e8c8a09ba50decb89def4523931fc20ba6e7ab5647f65f5ba45c278eec780cb651cd9c4ca1dc794060194b5f6e02947c12ad911895f1c0c5eee9b25581c2b4f2", @typed={0x8, 0x94, 0x0, 0x0, @fd=r3}, @nested={0x4, 0x30}]}]}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x414}], 0x1}, 0x0) 45.440381551s ago: executing program 1 (id=1437): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0xefffffff}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe0}}, 0x0) 45.226717735s ago: executing program 1 (id=1440): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='rpc_stats_latency\x00', r1, 0x0, 0xf}, 0x18) r2 = accept$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs, &(0x7f0000000080)=0x6e) recvmsg$unix(r2, &(0x7f00000003c0)={&(0x7f00000002c0)=@abs, 0x6e, &(0x7f0000000240)=[{&(0x7f00000008c0)=""/4096, 0x1000}], 0x1, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r3) sendmsg$ETHTOOL_MSG_RINGS_SET(r4, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x44, r5, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x8}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x10}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x3}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x6}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x80}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x1000}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008004}, 0x4000010) socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r12, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r14, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r13, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r16, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r15, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0x78}, 0x0) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r7], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) r17 = socket$nl_xfrm(0x10, 0x3, 0x6) write$nci(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB="414601", @ANYRES8=r17], 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 30.099191477s ago: executing program 33 (id=1440): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='rpc_stats_latency\x00', r1, 0x0, 0xf}, 0x18) r2 = accept$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs, &(0x7f0000000080)=0x6e) recvmsg$unix(r2, &(0x7f00000003c0)={&(0x7f00000002c0)=@abs, 0x6e, &(0x7f0000000240)=[{&(0x7f00000008c0)=""/4096, 0x1000}], 0x1, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r3) sendmsg$ETHTOOL_MSG_RINGS_SET(r4, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x44, r5, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x8}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x10}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x3}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x6}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x80}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x1000}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008004}, 0x4000010) socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r12, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r14, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r13, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r16, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r15, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0x78}, 0x0) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r7], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) r17 = socket$nl_xfrm(0x10, 0x3, 0x6) write$nci(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB="414601", @ANYRES8=r17], 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 4.252031163s ago: executing program 6 (id=1762): socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}], 0x1, 0x20000080) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r2, 0x7, 0x0, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 4.182568525s ago: executing program 6 (id=1763): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r2, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x58, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}], {0x14}}, 0xf4}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x490267a0}, 0x1c) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='4'], 0x34}, 0x1, 0x0, 0x0, 0x200040c1}, 0x8004) bind$isdn_base(0xffffffffffffffff, &(0x7f0000001200)={0x22, 0xe, 0x27, 0x7, 0x73}, 0x6) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) setsockopt$sock_timeval(r1, 0x1, 0x43, &(0x7f00000001c0)={0x0, 0xea60}, 0x10) r6 = socket(0x21, 0x2, 0x10000000000002) connect$rxrpc(r6, &(0x7f0000000140)=@in4={0x21, 0x100, 0x2, 0x10, {0x2, 0x4000, @empty}}, 0x24) setsockopt$RXRPC_SECURITY_KEYRING(r6, 0x110, 0x2, 0x0, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f0000000000)={'geneve0\x00'}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) connect$unix(r0, &(0x7f0000000800)=@abs={0x0, 0x0, 0x4e23}, 0x6e) 3.245980817s ago: executing program 5 (id=1777): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) sendmsg$kcm(r1, 0x0, 0x20000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x14, 0x0, 0x0, 0x7fff, 0x67, &(0x7f00000002c0)=""/103, 0x41000, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180)={0x4, 0x10, 0xfffff469}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3fe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r2, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) poll(&(0x7f0000000180), 0x0, 0x11ff) shutdown(r2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x174}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x12, r0, 0xbdd94000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24082}, 0xa800) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f00000001c0)={0x11, &(0x7f00000000c0)=[{0x0, 0x7}, {0xd, 0x3, 0xf6, 0x5}]}, 0x10) ioctl$sock_inet_SIOCSIFPFLAGS(r4, 0x8934, &(0x7f0000000000)={'veth0_macvtap\x00', 0x6}) getsockopt$sock_buf(r3, 0x1, 0x3d, &(0x7f00000017c0)=""/4096, &(0x7f0000000100)=0xfffffffffffffe42) r6 = socket(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r6, 0x84, 0x77, 0x0, &(0x7f0000000400)) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r8, &(0x7f0000000780), 0x12) bind$x25(r7, &(0x7f0000000080), 0x12) r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000700)={'bond0\x00'}) 3.239648915s ago: executing program 6 (id=1778): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYRES8=0x0], 0xf0}, 0x1, 0x0, 0x0, 0x40d1}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448d4, &(0x7f0000000080)={0x20, 0x200, "408b7c", 0x3}) unshare(0x10000c00) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000640)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad00"/15, 0xf) recvmmsg(r3, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="12000000050000000400000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000e3000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000ffffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="010028b6296be141526b7e00000008000300", @ANYRES32, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c6572300000000000000800050006000000"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000700)={0x48, r7, 0x0, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_CSA_IES={0x2c, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0xe, 0xbb, [0x0, 0x1, 0x3, 0x7, 0x4]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x16, 0xbb, [0x7ff, 0x0, 0xf001, 0x400, 0x0, 0xf, 0xcec, 0x1ff, 0x3]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x40) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000940)={0x2b0, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x5}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x274, 0x84, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x2}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @random="569b12278152"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}]}, {0xb4, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x4c, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x2}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x80000000}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x80}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x5c05}, @NL80211_BAND_60GHZ={0x8}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x2800}, @NL80211_BAND_LC={0x8, 0x5, 0xffff7fff}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x3ff}, @NL80211_BAND_LC={0x8, 0x5, 0x9}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x1e, 0x1, @random="8209666172f1a9b19b8957648044bd43a28b48ce0dcc2dc5350e"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="87195c98b548"}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xffffff6e}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="18387f81650d"}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x9}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="788a06dc9254"}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x16, 0x1, @random="ee9843c83e5db6b6bb8f18081b48e2532e42"}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x8}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x800}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x2}]}]}, {0xb0, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x24, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0x6}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x3}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x8001}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x5}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x2c, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x6}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x5}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x5}, @NL80211_BAND_LC={0x8, 0x5, 0x7ff}, @NL80211_BAND_6GHZ={0x8, 0x3, 0xa}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x3c, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x10}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x2}, @NL80211_BAND_LC={0x8, 0x5, 0x4}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x69aae8ef}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x9}, @NL80211_BAND_LC={0x8}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@broadcast}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x51}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x8}]}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8}, @NL80211_BAND_LC={0x8, 0x5, 0x1ce}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x1}]}]}]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x5, 0x9}}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x8}]}, 0x2b0}, 0x1, 0x0, 0x0, 0x10}, 0x4008004) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df12c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x23, 0x803, 0xfffffffd) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x0) 2.715829654s ago: executing program 4 (id=1782): r0 = socket$packet(0x11, 0x3, 0x300) pwrite64(r0, 0x0, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x2, 0x0, 0x3}]}, &(0x7f0000000100)='GPL\x00', 0x7}, 0x94) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc001, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(r2, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, 0xffffffffffffffff, 0x0) recvfrom$x25(r2, &(0x7f0000000180)=""/255, 0xff, 0x12161, &(0x7f0000000040), 0x12) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004811) 2.594847935s ago: executing program 4 (id=1784): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) socket$unix(0x1, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) 2.563190748s ago: executing program 3 (id=1785): syz_emit_ethernet(0x166, &(0x7f00000002c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x130, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x18, 0x18, "00540200a600828dadce42ce3d02d319e0cabb0171499f7642598cf1a1d40ca51300988c260ed2c4af88bdac1fc3925f5acb8e09cece04229969a0aee0537e1cc71b3009ab18767945d27594b37cd8abb99636a90bca4c54c3ce345b74a5344d2cdda99627bb20ea64b77b50c6dd7ac0ce2c39bcfef13daaef4db59a4483f2894602231daf4f31b82654278904b95919abbb34b324bdfc5ea17efe35444c3cc8f5cb729268ea2d5032fee7123364eac506f32a93621cf58e9f47d53114fb"}, {0x5, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "005ff9297d00001392000100"}]}}}}}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000a5f5fde31abc816a3c47e25a6d0cbe49ba8f9f869f35d1f710db6bfcbc49ec9533ac8127d4fda8164789e9e388271e9c36391f21fff45c1d1f7f6ce7ee817fc1c55153f68f7fc70c5f8a08ec61fefba9683096e59c0d4d7ccc0db823b9dc38069c2336e1630f16e835b390646094d13a13b8257228c34b6c665ca1b31f383239f4b6fe1ab766ca4c337128614dd8f3b5e70283111c2f17fa6a8e67b6453b8fc7f84f3ce1e943219521e80cf60612b3431725290910629c1614aa6e13b92374763bb2d2318166f12e1b0340defc05"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r1, r1}, &(0x7f0000000600), &(0x7f0000000640)=r0}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000080000000003500000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000940000000c62cdcd440000000000000095"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x4d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) 2.375963237s ago: executing program 3 (id=1786): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xc, &(0x7f0000000040)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00', 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {0x2}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x240000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000084}, 0x84) sendto$inet6(r0, &(0x7f0000000200)="e9f66af0dc39db961f128ce386c2b7131f263c1578a83221dc28a3a287dc8507113931beb455886d7c76be14d988aef471bbdb3cb6ee257ed6b81afc707c2f1cf94c876aaa3e1785a94e40162ef194436dd9bf2dab4b963ba1e14dbad6ebedb2d1e7174fcd2c9d0c926bb35c12d280f89cb3bc2bbe3ccedfcb5fab077a76fd9990a833ddb2bd96e298baa5b5e9699519fd790d96e5be1273ab83f32acf222c015f2a3bcee57a8490d89d9ae770c41b7a55fdb53568e62826738ade560134d643c0048404444725910365e3b57e0eea687854decd6daa44a7f40c4c8eb12ea85fecb50d5bce5dcfbef5394f8882a4eb28ae2f78", 0xf3, 0x4000010, &(0x7f0000000000)={0xa, 0x4e23, 0x1, @private2, 0x6}, 0x1c) r3 = socket$caif_stream(0x25, 0x1, 0x1) setsockopt$CAIFSO_REQ_PARAM(r3, 0x116, 0x80, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3003, 0xffff96aabfff, 0x832, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r5}, 0x8) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20305}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_VALIDATION={0x5, 0xd, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}}, 0x0) 2.358768228s ago: executing program 4 (id=1787): r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000000)) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000080)={0x1d, r1, 0x2, {0x2, 0xff, 0x1}}, 0x18) r2 = accept4$rose(0xffffffffffffffff, &(0x7f00000000c0)=@full={0xb, @dev, @netrom, 0x0, [@null, @rose, @default, @remote, @default]}, &(0x7f0000000100)=0x40, 0x800) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000140)={0x24b0, 0x0, 0x3, 0x8, 0x2}) recvfrom$ax25(0xffffffffffffffff, &(0x7f0000000180)=""/77, 0x4d, 0x40012141, &(0x7f0000000200)={{0x3, @default, 0x6}, [@bcast, @bcast, @bcast, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default]}, 0x48) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000280)=0x2000) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r4 = socket$l2tp6(0xa, 0x2, 0x73) getsockname$l2tp6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000300)=0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) socketpair(0x23, 0x3, 0x8, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_RESET_LINK_STATS(r6, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1aea559c6280d62}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, 0x0, 0x100, 0x70bd29, 0x5, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x44000}, 0x2000c064) r7 = accept$ax25(r6, 0x0, &(0x7f00000004c0)) ioctl$sock_ax25_SIOCDELRT(r7, 0x890c, &(0x7f0000000500)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, 0x7, [@bcast, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r6, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x40, 0x1405, 0xe7fa91b4c0220261, 0x70bd29, 0x25dfdbfd, "", [{{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x2}, {0x8}}, {{0x8}, {0x8, 0x3, 0x3}}]}, 0x40}}, 0x80) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r8, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x84, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x2}, 0x4000054) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r6) sendmsg$NL80211_CMD_ABORT_SCAN(r5, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x28, r9, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x36}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x44000}, 0x4) writev(r3, &(0x7f0000000bc0)=[{&(0x7f0000000940)="ccf5ef5c6e93b420558263a23e984c06705cf47ca4a1ade4b7f314b21efd373865ec32f5d2bc090c3706befe3e5e3799da4c55ed08b1a78597a6ed1be5d9ed0d3e297b", 0x43}, {&(0x7f00000009c0)="5806c23fa2730243515fc1c624a9488ece77323f2a2f947a76c2dcc0a3f6ab027ec73e5f52c57ea4ad00868615ded142afe214e74c90f8a22974ff1f1d497c688aba6aee8e71508454bc5d07a91accac7bd86a74e183673b84f55a72e38ec6765fa399350cef522ba60d3154f8b0e4743aa33fd35068e8489d5b87354551063936c6b1b0b45259abbf765d6797c5a191fd5d77b7a2dc16ae8b2084c94d870976be97c294308fb1389d3ce321673e294bb59f6eb83b9dd2492eb1ee04500731f44b2e147dd99936a8601b735e92229494c9b2593a2119586a4cf10d6172", 0xdd}, {&(0x7f0000000ac0)="a73a3c1faeee5d210d1eea453694d03f2426904d1cb065d2ac608181b453206603e9088fdd42e87c4fe1ce6775a0216fa775cb02d3b64e8f309f1b5264f55afa4611c7cef8cf41170ec9f72c6ff894a390b4e92e16ae78d530fb1c04cbc9b3b66656a809452d29cf512a73a5c98ad6f0151466de773b6a362853aa990c24bf5d3427e847f7be2d724fe03f0fdb3177509c32989c29f62824373919c13bf50aac3b561700c5d1e9bb42a5f52c6f23cd23fe6efa79c147a6aba119857b1e4bfaf78941c81c6f7ea31e62e9ed83eda732b4d9361e8a922d77b54b40713642727ad404086ec4db0f77b5a311b8a3bc3ceb22846ef3288f", 0xf5}], 0x3) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r6, 0x84, 0x20, &(0x7f0000000c00), &(0x7f0000000c40)=0x4) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000c80)={0x0, r6, 0x4, 0x8000000000000001, 0xed0f, 0x25eb}) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000cc0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) ioctl$PPPIOCGDEBUG(r10, 0x80047441, &(0x7f0000000d00)) syz_genetlink_get_family_id$smc(&(0x7f0000000d40), r6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x36, &(0x7f0000000d80)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc29}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r10}}, @jmp={0x5, 0x0, 0x3, 0x7, 0xb, 0x8}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffa}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xe554}, @map_val={0x18, 0xb, 0x2, 0x0, r10, 0x0, 0x0, 0x0, 0x89d}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}}], &(0x7f0000000f40)='GPL\x00', 0x5, 0xc3, &(0x7f0000000f80)=""/195, 0x41100, 0x3e, '\x00', r1, 0x25, r10, 0x8, &(0x7f0000001080)={0xa, 0x2}, 0x8, 0x10, &(0x7f00000010c0)={0x2, 0x7, 0x1, 0x29a0}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000001200)=[0xffffffffffffffff, r10, 0xffffffffffffffff], &(0x7f0000001240)=[{0x4, 0x5, 0x2, 0xb}], 0x10, 0x1}, 0x94) 2.255392899s ago: executing program 5 (id=1789): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x1c, r2, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x60040a0) (async) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="98000000", @ANYRES16=r1, @ANYBLOB="2da52abd7000fbdbdf250300000008000100000000000800010000000000340007800c000180080001"], 0x98}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000) (async, rerun: 64) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 64) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@updpolicy={0x1bc, 0x19, 0x1, 0x70bd2a, 0x0, {{@in=@multicast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0xff, 0x0, 0x0, 0x0, 0x2}}, [@tmpl={0x104, 0x5, [{{@in6=@mcast1, 0x4d2, 0x33}, 0xa, @in6=@empty, 0x3501, 0x1, 0x0, 0x3b, 0x83, 0x5, 0x7}, {{@in6=@local, 0x4d6, 0x3c}, 0xa, @in6=@private1, 0x3502, 0x2, 0x0, 0x7, 0x7f, 0x0, 0x4}, {{@in=@multicast1, 0x4d5, 0x6c}, 0x2, @in6=@empty, 0x0, 0x4, 0x3, 0x3, 0x4, 0x2, 0x3}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d3, 0x6c}, 0xa, @in=@private=0xa010100, 0x3502, 0x5, 0x0, 0xd1, 0xe, 0x47b, 0x3}]}]}, 0x1bc}}, 0x4000) (async, rerun: 32) syz_emit_ethernet(0x1ff, &(0x7f0000000440)={@local, @empty, @void, {@ipv4={0x800, @gre={{0xc, 0x4, 0x2, 0x3, 0x1f1, 0x64, 0x0, 0x2, 0x2f, 0x0, @remote, @empty, {[@rr={0x7, 0x1b, 0x1b, [@dev={0xac, 0x14, 0x14, 0x2c}, @private=0xa010101, @multicast1, @multicast2, @rand_addr=0x64010102, @broadcast]}]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x33, 0x1, [], "b4ff0e908df9391e35a76504c52cdd0809bfb74062325720a4702bd91db02bd865a5c93f5b439ff27e3c7592cbfa8ba2cf0cae"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x3fb4], "ce81f190c9e9220e91de759047581d3920c45da1360506a0193fe03fa62e0fd12bc6b514fcb70104f0a669fc2ebe7d30c95b688958c1796b3adfe8e630e2ed4fe3e86d9496fd7b1eb124468211f64c274265e37f"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x8, 0x9], "6ff207ebc41a43c0ddea42d3e81f26affa0af2858ecc39e687ab21e73f96fb47948b7a364cb05605df9e2da9410fa89c57aa47bb89b758209fce2f985a5254e3eda2d03d6012eeb67013477f842011bdd0401468e2550a26ad4b7e6d03e2f88ed2fc999b25e030193078b11fff2d7d87c3f65ad08e36e9d90c5d1c5903d1014958e8b3d86d4112f39c172a6c4a5ecaf1968be4cc02d81c21d52b0e3cf3"}, {0x8, 0x88be, 0x1, {{0xe, 0x1, 0xb8, 0x3, 0x1, 0x1, 0x6, 0x9}, 0x1, {0x100}}}, {0x8, 0x22eb, 0x1, {{0x5, 0x2, 0xa, 0x0, 0x1, 0x1, 0x3, 0xe2}, 0x2, {0x9, 0x9, 0x0, 0x8, 0x1}}}, {0x8, 0x6558, 0x4, "036cb03ce9e3b5dbe5db2db4cc5a161afeced2fc37757dddef31cf4016f5caaacb61403aa9d5ca06c88203ac35f50d24473d27ef530d64cae1df4418a9e4c7a67ef389e48d7233866ed663a918f6e5ddc74fd5"}}}}}}, 0x0) (async, rerun: 32) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2}, {0x0, [0x0]}}, &(0x7f0000001f80)=""/226, 0x26, 0x81, 0x2}, 0x20) 2.059764129s ago: executing program 0 (id=1790): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001f40)=@newtaction={0x104c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x1038, 0x1, [@m_ct={0x1034, 0x5, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_MARK_MASK={0x8, 0x6, 0x3ff}]}, {0x1004, 0x6, "3e1410ff13207b1ec7dbef6dc76d244b4e24d89be4bb40a39a9e7a9b80d3c63f085023589f60aac0914b561d9cbca9374e9be8597a739a23f8091125ce72fa09109bc098ab5fb51e43124b916541181666bf67256c1b93d62de4cf58c64b3f90a0243e1b10cb7d6b45b34166facfc94a9a12094e89c737506cc05ff3158a53f6bbf710a7ba96d8ca811bae61adf4ae930d8373dd1414544e25f3d856cabb1b83f474debc4733d6cc7fa2be4ac7f7d7a4f1f41ecccfb184fd690e1da7ca945a3e2712a5682a56554df842fa65913a9f33b10492b392fb02d8bb5b1dcb24fd42bebac82222539f5702e077522eb5476adc5633f110e6b413bb5029685cf131c33d0fdf2cd4b765409bd1c5ced6d4c23a7a23b0901f28b48fb23a84f4a82679a3aa1a92c6a982ba1a9cdf78f9c414efce2bca10de8df51a8ceb41a0e76cce1234123aeeb3a0413a26eec0ab933a2195722f391b12b3b3fe20eeab4375f1785043fc5a273f30d004042ef49020874a6b739319853f125437d71f87cde02a60d755017f405ead972a5f262513e2d7eda9e70a52ea681bd2a58fece079f5b654904a132581b112626ccc48224ed9f3185d7781754f6126d548a42038e91fdb36eaa78ae5ae23128b95194a5c871917540532287af34194566afceec1a900c0e8eed8aadea7a9378027a5c34690b1d8af9dc9e1a8eea2a64a6b0056631c3c94a51fdbb75bf5b5d90a58196afeaf56924d3dab53f629d6736f4d13d5e52b525416b3054a38d20172dc149e5e41a4f1b3b3bf75cbad5eb09ee810e6a93b3363818794ca6aac6e4c13d3fd641627876c4e0c0207199f45ff0ced65b3ac097d24a7903bbbb0434a1a26d32e1de7ca9bb13d5e9d9c922133c324eb11a79fcd6f2ba15b10ab7be43ddedf72fef7696addea7de60a0ea39d6799d820324d58303639b14ae7b3f7a61382147b87c4d2ff2c0b5bf76da6b1d38ca61e2ef643f92cf1a6a03e58ed17a5b46a72f253b3e9d4794f1aabff35429deffdaddac2e6860abb7b2fa2a7fbee1f8a9afb2a2e347d09700baeb49782e52d5185be4bd476cab71fe67c94ca21bd5587aae9d920387ff92166048b7cc3cdac79c1858a8f5582781b572126a87cd2659b9101cac49a0b17df90e48fb6e7b64fca86936ddfed59b95e7015b0f57e3093cf80033e3f13c7218d6218c8f271219e9d7f32c8e6b8b43f90e35e80d04016f8cc19b6712d018571d753f869cbb5de61d46942db63e1576cbe44d8b60247b725e8dc46df06ad8617c6333f90293c758bc3cbd3f9feea3909514ab9901b1c49915008da1347200e03c3715a46bc16ed12b9c635129b767016741d83ac3b6901d812bc7722332437894c79f10bb2ec079ce4c6bfa9c9723ab6b5a4b0f10101b582fb9c95d73ae90c99ec9368d98ab24ed888a56ca1ba1b15f7fe265f3effaaa766df64e72b181c99189013ffd90b4b970cb7ae80327e41706918fd9cef3307a97bcf8b4c1aa4d9b1099233ab2659d1f6c5a730e76bc7b25cb418a079d36760c55ef90206ba12a234ea6b371fb379d7271e3576cb6f3e9676e35d210738a4a9cc1653768a8ae150b7639622319c2b243740cf4089038402e6b0c42c69ab6e16eeb16246465779c222fc5d72f7982ccdf415d586c457c5afe8ba7b47bad35b94e8e3d7d69ed05e1412c176a056bc9734bc8f905df640c6f42a8b286b0295016d5a372ddf99643083400cc7b27c2148cd8b349c37a888c9d2f2a7b5edd401b62dd0447ac338bda132dc18a1328abb00a49f1c1bd3bdc724931942d39ddd4f8d8258615a9d20f4668d1a41035a1ecde5b07d340dfd93dd6e12488bbf315258c722f14b7729a0d3e56716eab932a99c2475a498797c660f012be36d84c1d6522247f18160a25b16a045bbccbfc65410554d8d17e3b74edb31dc5954d1e7cce9d4372caec91f50eca7be8f984a62ad83fc715545d8d80119df63c8d2bab749d918fe8ad2d1d00a4d9d8f1ac641a8bb1f922565b937f6b32544d37c816c7322ed165c61c495d9c5046b8dd0761d9310ac457c3286630a9f85891254a2a4d42027fdae2d89a947ce23414c6501de20d4cd4be0cf2ea16fbbfd4587efff50a0687e68fff27310e316af3650e9b9daf47dfe3e2cb9940f4ebd37a8db3c2e625ac2a6d84936f025f6e705e83297ddb42de39a667a94112890afbc6ad6a38f5f87065936e68990f1851fc602a69c9404b13c0444cebfd61236d36a46201ecb8e6a24aa9ed9f79f340e54a0f90dc5d000ed9b6005701f7926cc441531b53cbaf21f0554bbfdb46c7ccae366f8caf5ea67d1c0d7356c44e45c4951ce2d1728a896e751e08aa6ed25d124f3a6f2916d5a0666dea2aa0fc43103b93cd100f9443266ba7b237f58835fbb3eb1c5c779bee7b98c269cc43d7b963a6049049ae1712e9724ccb456119385fded9581d64176ebc5d5704b4b34effdc9324b532628fc2a2e48cb43e339913174e7c634bf68844d714738944c5d14c8fad53adc5e1e0b640195c8d8922610916bae1f1b4cba9cb2ceb9165ada95d9c74d1c36aef912bdbf48b6c2e508c1b2c2f1c2f4df3fabe26b41dba84f27c21b26c7990de998f54d5182d9b3f33115133a9a4bf4759c2338bffe1926244f3df61373f2d678331350986dde3c28e25dd2791647c1aaa34bf7401411eceb043931c1690fa851784055b51bb92988f926b8bb0dfd1d37364402e2da408375552e3e66a23734f4d2d6fef21cdcb801e99c9024d35ed0dc16bbc603f9bbcad1700d6f67170919e2a221cd8fce8576fbd4f1eb44b68b4cf0c32a7abb9044a8c926ab566b5efe0675e59f1331a30eaf8949d507c0ced47fe8e340ee3ed2e9685e6849f3c827280c0b083beaf1c094354ef1ad21aaa2c0d9a5692e9428f811410d55c4ad739b0a33a82ea05d4187eee01309081f820e1b4078fa5e149cdf1d840dc5d7ef5331acbf3a672faa330caa59114f19362c09de48433a82ae284500d7f11feba9238857839c50d9529b1ac0bffe6e862d1c095af7beaacbf004c55178a3a3776ffb0ac6032b8046da56c71b6a23d28ec9224689d5aaf814d55a6657bd6d56b9fdcaf2e0676357540f904cfeeb214f4dce7375f6d82d0297a6ffdfb73cbd710815b6f1187401915376b923fe0f85ce247aeb31fa7011ac980b34608f5dab6718d5488d08597a08ebd210a2e124336f13d1289051a5f90652fa199781b05a980d060a7a0aa57fe2277254f84e0de7b6eca9af06d9eed485c622a37de631f98c6c445c0bebc47387da5d2c4dc5c5981ee94aaa61308b09e9a58b2217f83a2b47f806e8b5596f66a0f78942e4ab6067475708643bf8e17ea3ec7c1c7b443fa66e64e2310144baa76245e7afbd0dd96a182f7c14d1a773cf57ed8b2054301b9a94474d7a384008f0d1688a39bb88368064553961bdffa643d763b21c316f6a91e6edb491bb54726ea0466558341a4bef826af39716e655038690140da972233a5f466041654b6e0c40523013dd1ce01f1b44822cfeb2c2174c89938bca0fea14bfffe6e3fbda4ce852024e26ee8a1756d21fd4e345aa3f8fbe0acdac5126577a62ad7a735fc54677cf054516f5508299f62832da684ae6bc3ba92b6c0fc31f7df52653c0b920bb90f55256f029f3e205eb78b1fbe757db889d0196ed70f68eeb447554a8a967a571a8fdd62e30c78184014eb9d4bd344252a78e355c2c4c09c8b13b20308d4804eaba8ddd3cb1b0933053900e84f1dbea24d6f76ee0c1ff1b2f2ec5a2181f0550a26fb42e130f344424a3b3ca5c9679b8024fe50469563f96fc5854a96b0e7d390e728297bec68b80baab1c1abe6f0498adf14e6eab580b0b6ada2c8d7cef9982a6dcd82b2ece697191c08c626a9b5c0a19d73157f56556bf83978a3f8cf302de435e27df5aa63433bca288212d6dd08545fd275db57eacf76e10cfeac6c3ac0e97e4ce9b1aab3c48a6c83021ef6a37f2490f760425ce320df4a20cdf23f2dd4c7810b1624e6a1e49eda26f1285bb293168290187b780869f491ec1c03f0341d2e474701238ce9529fdff159de5fa4f61acc3a2176db0e1211992085934de62b4257a1ae32eaa3934c0b55aea26097b1c89b1dc305b23e2aa1f9d97ec1970b64f71fe3323bba587973918786f0449ab0f3a47fbd6450b4a608b1da99c7fb606df59fad828e915b7a7dd5460b9e464f0fbdcfaee9e12030531ef1e8d4d1b022aabfaf2d8fe2cb93176239a57405f246368d99468f97f5fe90305d80e079baba44ddc81616b127e9cd624d9d1ecfd8b9a45b5a7114310ca11c619aa561add81e03f258b628091cfc99c7ad8046700ac19af9528f8dc458dce77a7ec2872863bd944339b3f8ae141af5229392439ddd6b5f49901a33d2c5e553208ec88530d5f0812846b7727754197dd7269f3a405e943d091ef411c645f26108cab7989fdaa40c731b109b90dbd337b1841c4e2c17fc51ff0cea586f2f1cab72ae7081aa347c50c12dc07cd594e05e896984f92d4714c3eed73952093b13473dbaf6d21196bef1cb7371e2a070d8ccf61dad67d59b4f95887e82f3455361f7f58187491462d69dab66ad82b4fc29636847f2d123ef7ec4e82f161b9bf2bd461a4e83d6f60657405d88dc27b09b4a30ea6b9a26a9e1464a79cc286cbc25214992e78823dfa7ac5a8b8373ecf0a9b4acb7135c4148ae11a8d3174fa0ed89dda3377a76680569a2fc08c6e5427aaaefe6037344f930ee346f21b65f335ef370132eab479b12ddfb4f953c0e0fee3609111d5910db6c0dee44d0facc82ca5223905ed4253ba68b2f8dbb4608a5cc8a0a7ccd8bccc69f3349d8ad6a7b52e8840cb281d2520e8d59fcb3e2fa230f4f1113bb75999f98dd6cc782d351363be4ddfee4f0657588e96154430b25d86ceef29db3272f14c531b68cd9be05a4e8bdbe82ea66169330a5cbc681fd3a1cb5ddf8e6bdf35b2039a9bc149f28b929a334f326db6d41c6c4782f5465e4db5141d5f47c20e791d5841b80b74af4dd364088754152e2b50552221a4f4bda175ea6fe079f9f2ed8f3167a1ea76a2a3a6d650d310cd39eaff83e017b48d147f0a7226c70a13fdcdcee7c6a5b9020954f468d48694b20438463bea3fb23022747cd106b38c0e250bbba0763cc7256aa06404f1c8f526abbb2cabea38a01e0ad9712c5afc6ebeb4def1a9546782618d03ad3ccfe997174eb9012f53a5cd78d125163197703792f561425efebe8a946440d3df5c53464343a4e2ec07eddedffc98ad3bd900e5bc60b8f9fb5e78d9e6d61ff47aea2d153967ddec7a49fe5c2ffe4ce9145c490f6447e7264cf58921db59ed7928be4fa94595c73dcda6e260ce5ccf9360f482541a034f23af41b8ce3333d1e2d6a8cf93ba9ebde63e71ada7282ce66bfe6b151323770902cdaed61afd7ba6d1a93fa600f9510b612178940bc42c0c7cd226136a4652b91711c2d703021006e1c332529b6bb8e60a3e482b19beda971770718829a359bddbb0daffa35acde4fb489358c7253d9e8ef89bf00270dda2df340f8d13c098e1804136cc522d4f7ed37f04f7d6a2355b4472ffee9642eefb57d4e77ee7f74f8209953d37ecbf9437194c21cf716a7ca9daf38cde7383e72521d1c3bde55719d4b299ade6d22ceea960d9e0fb3aeaaaa20cb4631070b59b36a950428bd4e21224aa556e7e9be606a502189c9c1537816c080e2194555f0bfb1e6d19cf8a619f2ec0cba3735a8e03703252add471a4205aa7b14556fdffe59058b0c6d2aac52c8f093959"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x104c}}, 0x0) (async, rerun: 64) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), r2) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) (rerun: 32) sendmsg$NL802154_CMD_NEW_SEC_DEV(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7000fbdbdf251a00000004002e8008000300", @ANYRES32=r4, @ANYBLOB='4\x00.'], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040) (async, rerun: 32) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) (rerun: 32) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtaction={0x70, 0x30, 0x109, 0x70bd29, 0x0, {}, [{0x5c, 0x1, [@m_ctinfo={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3f00}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x1, 0xffffffffffffffff}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x7}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x440c0}, 0x0) (async) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2f7f8154447a426b}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, r5, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x1e}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xd}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040045}, 0x0) (async) r7 = socket$kcm(0x10, 0x2, 0x4) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) r9 = socket$igmp(0x2, 0x3, 0x2) (async) r10 = syz_init_net_socket$ax25(0x3, 0x5, 0xc5) ioctl$SIOCAX25ADDUID(r10, 0x89e1, 0x0) (async, rerun: 32) r11 = socket$inet6(0xa, 0x5, 0x0) (rerun: 32) setsockopt$inet_int(r11, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r11, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e23, @multicast2}], 0x20) sendmmsg$inet6(r11, &(0x7f0000002580)=[{{&(0x7f00000004c0)={0xa, 0x4e21, 0xffffffff, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000380)="98", 0x1}], 0x1}}], 0x1, 0x4000040) (async, rerun: 32) getsockopt$inet_int(r9, 0x0, 0x21, 0x0, &(0x7f0000000240)) (async, rerun: 32) sendmsg$nl_route_sched(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@gettaction={0x1c, 0x5a, 0xc6b747b6bf1c6b95, 0x0, 0xfffffffc, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xffffffff}]}, 0x1c}}, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="89000000120081ae08061cdc030ec080000000000000000100e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) (async, rerun: 32) r12 = socket$packet(0x11, 0x3, 0x300) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r12, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendto$packet(r12, &(0x7f0000000080)="3f03fe7fffffffff06001e0086dd4a899c5e2051c0f8472fffc321fa2564d52a92e31a17f8cff2de1106238bc9456a51ce30a9146a1bcf98f234cdbd70c16212f147a159", 0x44, 0x0, &(0x7f0000000540)={0xc9, 0x15, r13, 0x1, 0x6, 0x6, @multicast}, 0x14) (async, rerun: 64) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) (rerun: 64) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb600d57f4000000000000240000002400000006000000000000000200008409010000040000000400000001000000090000000400000000000000006100002e00"], &(0x7f0000000f40)=""/4079, 0x42, 0xfef, 0x8}, 0x28) 2.056627921s ago: executing program 6 (id=1791): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x12000000, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xcc}}, 0x0) 2.007071416s ago: executing program 5 (id=1792): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x52, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='virtio_transport_alloc_pkt\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='afs_cell\x00', r2, 0x0, 0x4298}, 0x18) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x8a, 0x20c, 0x0, 0x7, 0x0}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r5, 0x84, 0xf, &(0x7f0000000240)={r6, @in={{0x2, 0x4e24, @multicast1}}, 0x8, 0xab, 0x80000000, 0xffff8001, 0x2}, &(0x7f00000001c0)=0x98) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r7 = accept$alg(r4, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f0000000180)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000003c0)="553e12df315719c9cddfbe1f03774b1d49d6fc51d5b185", 0x17}, {&(0x7f0000001680)="33caaff65bbb49384ba3fa03220c730c8531786e424bfa1ee6d344e5ca70fa4e68f9ad2bd7a154c3da71f3d9548c", 0x2e}, {&(0x7f0000000400)="7082b8d45f4cc86d0267eabd24340e1911fe3ceeb757ca4a090897a00b8d106a8ceb5beaa118a5652769ac67e809e68ca18f0241349dc5351bd8b9877ae81e64", 0x40}], 0x3}], 0x1, 0x840) recvmsg(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)=""/149, 0x95}], 0x1}, 0x10001) 1.89596503s ago: executing program 4 (id=1793): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x18}]}}}]}, 0x3c}}, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) r5 = socket(0x2, 0x80805, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB], 0x30, 0x4040001}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r5, 0x84, 0x1b, &(0x7f0000000240)={r7}, &(0x7f0000000280)=0x8) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) unshare(0x62040200) write$tun(0xffffffffffffffff, 0x0, 0x3e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000740)={"8c3ef01be86258108b331b07f91efab2", 0x0, 0x0, {0x6, 0x40}, {0x3, 0x1}, 0x6, [0x3, 0x5, 0x9, 0x7, 0x7, 0x5, 0x10, 0x953, 0x1, 0x4, 0x8, 0x9000000000000000, 0x2, 0x4, 0x2, 0x5]}) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280300002d00090027bd70000000000004000000130317"], 0x328}}, 0x84) 1.771968637s ago: executing program 6 (id=1794): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000640)={{{@in6=@mcast1, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x0, 0x6}, {}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010111}, 0x0, 0x32}, 0x0, @in=@private=0xa0100fd, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1200000004000000040000000200000000000000", @ANYRES32, @ANYBLOB="000001000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) 1.761357869s ago: executing program 0 (id=1795): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x1, 0x8, 0x2}, 0x50) r2 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r1, &(0x7f0000000480), &(0x7f0000000280)=@udp=r2, 0x1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, &(0x7f0000000040)="a0", &(0x7f0000000180)=@udp=r2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={r1, &(0x7f0000000380), 0x0}, 0x20) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg$inet6(r3, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000280)='i', 0x1}], 0x1, &(0x7f00000005c0)=ANY=[], 0x200}}], 0x1, 0x4000006) r4 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r4, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) r5 = epoll_create(0x10001) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000000)={0xb0000000}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newlink={0x50, 0x10, 0x503, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6vti={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x144}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) socket$inet6_udplite(0xa, 0x2, 0x88) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept(r6, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000380)={'pim6reg1\x00', &(0x7f0000000100)=@ethtool_cmd={0x18, 0x9, 0x7990, 0xff, 0x4, 0x3, 0x7, 0x7f, 0x4, 0x7, 0x5, 0x9, 0x3, 0xff, 0x7, 0x23df3d1c, [0xa1bb, 0xf]}}) 1.703858959s ago: executing program 5 (id=1796): unshare(0x6090500) (async) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)=0x40000) (async) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000000)=0x31) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000009c0)={0x0, ""/256, 0x0, 0x0, 0x0}) (async) r2 = socket(0x2, 0x80805, 0x0) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) unshare(0x22020600) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26}, 0x28) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r4, 0x58, &(0x7f0000000040)}, 0x5) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000010c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000140)={r5, 0x3}, 0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000040)={0x6, 0x8, 0x204, 0x7, 0x6, 0x20000000, 0x0, 0x0, r5}, &(0x7f00000000c0)=0x20) (async) sendmmsg$inet(r2, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}], 0x2, 0x48851) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000007c0)={"2c17983fcf52d89930709ca087969d7e", 0x0, r1, {0xf, 0x8}, {0x3, 0x200}, 0xf0c, [0x3, 0xffffffff80000001, 0x8000, 0xc9, 0x7, 0xad6c, 0xfffffffffffffffd, 0x3, 0xfffffffffffffff7, 0x3, 0x100000001, 0x8000, 0x8, 0xe6b, 0x8, 0x9]}) (async) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r6, 0x89e4) (async) r7 = socket(0x80000000000000a, 0x2, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000200)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r8) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r8, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r10, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x20040085) (async) sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000002c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100ffffffff00000000030000000c00060003000000000000000400078008000100000000000c000200ff7f000000000000"], 0x38}}, 0x20000000) (async) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x1c, r9, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2001}, 0x10) (async) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x6}}, {{0xa, 0xfffe, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}}}, 0x108) (async) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0xa4ffffff, @rand_addr=' \x01\x00'}}}, 0x15a) close(r7) 1.411946697s ago: executing program 0 (id=1797): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000000)=0x5, 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000400)=0xc) sendmsg$netlink(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000540)={0x3c, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0xc, 0x0, 0x0, @uid=r4}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x18, 0x1, 0x0, 0x1, [@nested={0x14, 0xf6, 0x0, 0x1, [@nested={0x10, 0x146, 0x0, 0x1, [@typed={0x8, 0x14a, 0x0, 0x0, @u32=0xb3}, @nested={0x4, 0x4d}]}]}]}]}, 0x3c}], 0x1, 0x0, 0x0, 0x2000000}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)={0x58c, 0x39, 0x73fa7e54e7639a19, 0x0, 0x4000, {0x1, 0x7c}, [@nested={0x577, 0xe5, 0x0, 0x1, [@generic="c563e816cbacd6732dfa2f89f4fa814e90c9ce7b83bc1e47b971", @generic="33291682f387e91613f64ce01aa110a54a6775fee7ea1c37aeeab352ae7151a7c6d820f436c24265e141c98309cb816dd9973dff2112b0a00bf429a7bfdfe451d15c3f2c5717f95274ee805a102b1c89fb8ab2f42f00b8d1302c37e1a90fbfa391aa9cfbbb1bd5970303356b18342db7efef0ead50ce2337eb98c24dcafa12afe373d8c1684ac88b740b31ac1dd1483de49ff74e0d84de71dd5a9347849875dbe915b92845fb75dc422b56a89a01ffadf49c3164c9ca98973f5c2b3c4baaf9fd3731ff4bd84bae660ddd2336b6cee5a76924330900", @typed={0xc, 0x12e, 0x0, 0x0, @u64=0x80}, @nested={0x258, 0x8, 0x0, 0x1, [@nested={0x4, 0x104}, @nested={0x4, 0x3b}, @typed={0x8, 0x120, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @generic="ec66b899c1b49daf2f9f0c9c7afaee4c4ec9850814c2ac9854e9cadf2629ff9a026ac36f80918eb69e5070b6bd1a5665b0415b5fe5fa708b091ec71e2958e9dba8d67a112ca47afc5321e05907f06e476e0378ca0f0108091443f5878c980bf5fe1b4e2adfc260b58705cb8df4b1b7b65e11677a2ab26883e19c5e466e32c8633d4dd04ea044aeb5ec866fdb1e3965922a107cf7cab151b12d83330fcda34004df5043fbb7e3499b6aa33ed67b1829aa0c5db288ef51e7ce9cbfa56bb5843f631a5e328f0d0607dfe3336521106fed72829c65c176bab6edc6247e7df417ca2cd998e098da16d31b017c248bc71d0efb", @generic="74fe4e6c7407a6d1bd452fc67690c151ad7458716b5bcaaf4a0bae87a4f3e0433f0ce8ed484771093ec008ce9f04698ee9f12a8e586ec816c50eb01efa1c50fb8d3efc144bd4e509e27a45f08a8ec7c34ee7ce10848155fee1c03afe33431dd461fb48dc28e707748ecb5897341f8ff7ae8c5266e94addc7ff530d05e58c3b1a6f3d9063", @generic="ad8a6dd90288139e3ebf912404dd7161f66e718bbcc4eeef41ff4f5916dee1236719eadedcf73dc70c3712a04854b562ef4b44fa5b2ff3edfe94cadb1b35342df008d08ec80c1ee41e1bd3b7dd5bd9cd6cc33dfec2240311ac3f13ec77e43a767aeaba854ad6883bc4abbdec97f9191dcc187ef4c4bfc90afcaa6372ae13772db86f36c01b452d60c65dbfacb47a522bdc878b2ad6309bc3cb51137667f30e3eae1ef5bad807920b5ec19945bce89151", @generic="558dbb2251f6f03df6f2cd7325818f26e5bae8e767ca0bc7e8c6cbd5fa68ea66"]}, @nested={0xed, 0xbc, 0x0, 0x1, [@nested={0x4, 0xfb}, @typed={0x8, 0x53, 0x0, 0x0, @ipv4=@private=0xa010102}, @nested={0x4, 0x29}, @typed={0x8, 0x50, 0x0, 0x0, @uid=0xee00}, @generic="01af0dfb388020c75b66649b68016da4c9566a00c17c6f0958254bfab5911c381aa95c98abe97ce44ff0594a4118dd562b90a23affbae5b98744261e865e49cd3b3abef83713dbf60662ff71d3604d84c1a1636ba9519923201775e704338f5c0e9ec47c4d2d9abcbef8a30f0d06b48ead0e19b6b5033488606a27a2e0e9b5afa77a503af797920ccb8ef08ecd52d9571a554b26735fbe8de32d5aa4f8ccd47b5033830d10cec84aeb81665303ead1071111f44a97b148ad34", @nested={0x4, 0xa5}, @typed={0x8, 0xcc, 0x0, 0x0, @u32=0x2}, @nested={0x4, 0x34}, @typed={0x8, 0xe7, 0x0, 0x0, @uid=r4}]}, @generic="c4f2aefdd7b184a261d415d5754b8f4e23fbe0397d7088014893d4a636eef1fa6e64de34606aa0864f1ad4a2a960b75e9db4c7aa94670d8845bd85031a584b49ab47bd2e53a0452f47b7205365d862e37b17", @generic="752e6bd11feefaed6cda60cb28719391e45d3eaaebe5013e3d00a4dff23d460c59d8a614082cb5daddf90be04e91a6629dc0e91db0559680ac1324a3d4ec429bb1efab2e8dfcda2cb18d77d5df08cd70bf2054bac2c03f3ae837c772f748703f19759a544a598fac5c6b61c52b8ba36aa7f81b722f5ea1fdbeb6ca4c9e5d1b4b8a8a7131ec7c90f743827dd715da050b3cd2ac459e7dd3e4448c7d5f60feceb81fc60bab8606bd9f3ef71ef85520bd9bfa52ae41d39b701600aafd557422ea6d35f5c967f0f604aeee00533eeae7e433a40df96e5979e07add4c3854c882"]}]}, 0x58c}}, 0xc010) 1.410733167s ago: executing program 5 (id=1798): r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000001080)={0xa, 0x0, 0x0, @initdev}, &(0x7f00000010c0)=0x1c) sendmsg$inet(r0, 0x0, 0x24008010) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000001000)='cubic', 0x5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) r4 = socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, r3, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2, 0x3, @loopback, 0x8}, 0x1c) read(0xffffffffffffffff, &(0x7f0000000140)=""/20, 0x14) sendto$inet6(r1, &(0x7f00000000c0)="b2", 0x1, 0x24008844, &(0x7f0000000040)={0xa, 0x2, 0x80398, @empty, 0xfffffffe}, 0x1c) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000480)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-avx2\x00'}, 0x58) r6 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r6, 0x89b1, &(0x7f0000000040)={'syz_tun\x00', 0xfffffffe}) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000001180)="009fc3e8a42c8d01fc4ebeb6c15e4b166c541d808cdd6524cc2319725dd45208cd8be28cb104e3d0f056240c324ba0143f77474668566bce917af3d89c8ef5e062a214b60f15", 0x46) r7 = accept4(r5, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) unshare(0x20040600) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r8, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r9, 0x400448ca, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r7, &(0x7f0000001280)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x20040801}, 0x1) shutdown(r1, 0x1) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r10, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0xffff, 0x0, 'lblc\x00', 0x0, 0x9, 0x64}, 0x2c) 1.295650418s ago: executing program 0 (id=1799): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) sendmsg$kcm(r1, 0x0, 0x20000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x14, 0x0, 0x0, 0x7fff, 0x67, &(0x7f00000002c0)=""/103, 0x41000, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180)={0x4, 0x10, 0xfffff469}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3fe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r2, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) poll(&(0x7f0000000180), 0x0, 0x11ff) shutdown(r2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x174}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x12, r0, 0xbdd94000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24082}, 0xa800) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f00000001c0)={0x11, &(0x7f00000000c0)=[{0x0, 0x7}, {0xd, 0x3, 0xf6, 0x5}]}, 0x10) ioctl$sock_inet_SIOCSIFPFLAGS(r4, 0x8934, &(0x7f0000000000)={'veth0_macvtap\x00', 0x6}) getsockopt$sock_buf(r3, 0x1, 0x3d, &(0x7f00000017c0)=""/4096, &(0x7f0000000100)=0xfffffffffffffe42) r6 = socket(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r6, 0x84, 0x77, 0x0, &(0x7f0000000400)) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r8, &(0x7f0000000780), 0x12) bind$x25(r7, &(0x7f0000000080), 0x12) r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000700)={'bond0\x00'}) 891.545768ms ago: executing program 3 (id=1800): syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x18, 0x6, 0x0, @mcast2, @local, {[], {{0x4e24, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0x3, 0x2}]}}}}}}}}, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000080), 0x1, 0x0) 864.3824ms ago: executing program 6 (id=1801): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) getsockopt$rose(0xffffffffffffffff, 0x104, 0x7, 0x0, 0x0) sendmsg$rds(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc2300, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0x4, {0x0, 0x0, 0x0, r3, {0x4, 0x2}, {}, {0x1, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_DST={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}}, @TCA_FLOWER_KEY_ETH_DST_MASK={0xa, 0x5, [0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}]}}]}, 0x4c}}, 0x20040054) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) sendto$inet(r4, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvmmsg(r4, &(0x7f0000001240)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x10001, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000500)=ANY=[@ANYBLOB="00000800000003000000000000004959002c0065000004019078ac1414bbffffffff940ff00c8a76d0966f9a2b2407c08a00120090780000ffff284745cdf5caf845d5dc23faa9f4854d0b33ff0166c09ad75488b173a2fa179555196600cbeae361a58f31302c652c724c0c2d88752f87fc571a0bb25e065534d460e188c22c7459a56a55b1ec0dfdd7bbb898bfc345d9937643b2965a2e7222b3bd159ba5438fbad743bb6a7a76d7912c7856de728126c22206c9474f6a67433a43af8b8291615f6dfe4e4b082f1e284bad52"], 0xff04) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18e5ffffc5000000e72e94cfe48e9dc6f100000000000095000000bc000f583ed75b4cafd1fc25e5c18a6c33ae64695c74ffcc67c83993614d5a88726c048d"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000bc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSET={0x38, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_ID={0xfffffffffffffe32}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x100, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xd4, 0x3, 0x0, 0x1, [{0xd0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x6e, 0x6, 0x1, 0x0, "3dfd2ed268470db32bb16aff5622acc9eac80b80887705794e2d101989048cecadbbfc1d15820df224075fc978e89400e40b7c1bf6052dbe8911a3228215635fc009f0de3bb98ff55d10f4bddd9548ea6f318bbc4a53ea2f02d14aaf97c00bb94289e202710ad9906abf"}, @NFTA_SET_ELEM_EXPRESSIONS={0x5c, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x10000}]}}}, {0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x80000000}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8}]}}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x160}, 0x1, 0x0, 0x0, 0x4000850}, 0x24028010) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 655.844797ms ago: executing program 3 (id=1802): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0xef, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe0}}, 0x0) 541.745073ms ago: executing program 4 (id=1803): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) r1 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0xff2c, 0x0}, 0x1}], 0x40, 0x2, 0x0) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000000)={'macsec0\x00'}) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000080)="fb", 0x1}], 0x1) syz_init_net_socket$ax25(0x3, 0x5, 0xcf) 463.979768ms ago: executing program 3 (id=1804): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x60000000, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xcc}}, 0x0) 338.571352ms ago: executing program 3 (id=1805): ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000280)=0x3a0af83a) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a0603a6ff8000000000000000006302496b3a17b42e64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x18, r2, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8040}, 0x24040014) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa8, r2, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3, 0x11}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xc7}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000000}, 0x8084) shutdown(0xffffffffffffffff, 0x1) unshare(0x22020400) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28) close(0x3) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x610c40, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000080)='GPL\x00', 0xd, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x0, r3, 0x19c00, 0x0, 0x0, 0x10, &(0x7f0000000180)={0x0, 0x2, 0x5b, 0x9}, 0x10}, 0x94) listen(0xffffffffffffffff, 0x20) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f00000002c0)={&(0x7f0000000240)=""/7, 0x7}) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x804f}], 0x1, 0x11ff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000001c0)={@initdev, @multicast1}, &(0x7f0000000200)=0xc) shutdown(0xffffffffffffffff, 0x0) 321.696391ms ago: executing program 0 (id=1806): connect$inet(0xffffffffffffffff, &(0x7f00000005c0)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 219.368138ms ago: executing program 5 (id=1807): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt(r0, 0x84, 0x2, &(0x7f00000002c0)="1a00000002000000", 0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xc, &(0x7f0000000000)=0xffff, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000001c0)=@ccm_128={{0x304}, "0300", "95670cff05e29ee8dcfc54e13b2dd711", "fdffb26f", "a2deb79f8c96bff4"}, 0x28) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$inet(0x2, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x8, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r4, &(0x7f0000000500), 0x0}, 0x20) setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f0000000140)=0x8, 0x4) shutdown(r3, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@map=r5, 0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_open_procfs$namespace(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x50}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x3e}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) unshare(0x6a040000) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x4, 0x6, 0x4, 0x6, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x0, 0x40, 0xde9, 0x3b5f}}) getsockopt$inet_mptcp_buf(0xffffffffffffffff, 0x11c, 0x3, &(0x7f0000000040)=""/185, &(0x7f0000000100)=0xb9) socket(0x8, 0x3, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x40, 0x0, 0x0) write(r2, &(0x7f00000006c0)="91", 0x1) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f0000000880)=0x3, 0x4) 11.733473ms ago: executing program 4 (id=1808): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000013c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020a0002070000000000ffffffff000005001a00ff10a82076efec29c632e9cc8cc1c374ab4c3128aae8ec733264b82255180114abe87fd4"], 0x38}}, 0x20008040) ioctl$TUNSETGROUP(r0, 0x400454ce, 0xee00) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000640)=@gcm_128={{0x303}, "587dd0225910c349", "3660d18c7dc7e5c522efb85ad9604a10", "60180867", "9eb58fa87ac1174e"}, 0x28) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x70, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {}, {0x10, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x401}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{0xe6a7}, "fe"}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x2, 0x3, 0x4}, {0x4, 0x82, 0x2, 0x9}}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c010) socket$alg(0x26, 0x5, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r8}, 0x10) recvmsg$qrtr(r7, &(0x7f0000000340)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)=[{&(0x7f0000000400)=""/201, 0xc9}, {&(0x7f0000000640)=""/105, 0x69}, {&(0x7f00000006c0)=""/89, 0x59}], 0x3, &(0x7f0000000740)=[{0x88, 0x0, 0x0, ""/115}, {0x98, 0x0, 0x0, ""/131}, {0x20, 0x0, 0x0, ""/11}], 0x140}, 0x38, 0x10100) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x803, 0x0) write$cgroup_int(r7, &(0x7f0000000200), 0x806000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x2a, 0x0, 0x1}, 0x28) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000c, 0x11, r6, 0x0) 0s ago: executing program 0 (id=1809): syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x21}}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) unshare(0x20000400) r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r0, 0x28, 0x6, 0x0, &(0x7f0000000000)=0x42) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000}, 0x94) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) kernel console output (not intermixed with test programs): 42.450734][ T8304] CPU: 0 UID: 0 PID: 8304 Comm: syz.3.567 Not tainted syzkaller #0 PREEMPT(full) [ 142.450761][ T8304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 142.450772][ T8304] Call Trace: [ 142.450779][ T8304] [ 142.450786][ T8304] dump_stack_lvl+0x189/0x250 [ 142.450811][ T8304] ? __pfx____ratelimit+0x10/0x10 [ 142.450832][ T8304] ? __pfx_dump_stack_lvl+0x10/0x10 [ 142.450851][ T8304] ? __pfx__printk+0x10/0x10 [ 142.450874][ T8304] ? __mutex_trylock_common+0x153/0x260 [ 142.450898][ T8304] ? __pfx___mutex_trylock_common+0x10/0x10 [ 142.450922][ T8304] should_fail_ex+0x414/0x560 [ 142.450951][ T8304] should_failslab+0xa8/0x100 [ 142.450978][ T8304] __kmalloc_cache_noprof+0x70/0x3d0 [ 142.451008][ T8304] ? __hw_addr_add_ex+0x1f4/0x770 [ 142.451037][ T8304] __hw_addr_add_ex+0x1f4/0x770 [ 142.451067][ T8304] dev_addr_init+0x14f/0x230 [ 142.451095][ T8304] ? __pfx_dev_addr_init+0x10/0x10 [ 142.451131][ T8304] alloc_netdev_mqs+0x2ae/0x11b0 [ 142.451158][ T8304] ? __pfx_gprs_setup+0x10/0x10 [ 142.451186][ T8304] gprs_attach+0x7a/0x540 [ 142.451211][ T8304] pep_setsockopt+0x33d/0x4c0 [ 142.451235][ T8304] ? __pfx_pep_setsockopt+0x10/0x10 [ 142.451255][ T8304] ? aa_sock_opt_perm+0xff/0x1b0 [ 142.451272][ T8304] ? sock_common_setsockopt+0x36/0xc0 [ 142.451291][ T8304] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 142.451311][ T8304] do_sock_setsockopt+0x179/0x1b0 [ 142.451338][ T8304] __x64_sys_setsockopt+0x13f/0x1b0 [ 142.451364][ T8304] do_syscall_64+0xfa/0x3b0 [ 142.451384][ T8304] ? lockdep_hardirqs_on+0x9c/0x150 [ 142.451402][ T8304] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.451420][ T8304] ? clear_bhb_loop+0x60/0xb0 [ 142.451440][ T8304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.451457][ T8304] RIP: 0033:0x7fa4a198eec9 [ 142.451473][ T8304] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.451489][ T8304] RSP: 002b:00007fa49fbee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 142.451509][ T8304] RAX: ffffffffffffffda RBX: 00007fa4a1be5fa0 RCX: 00007fa4a198eec9 [ 142.451522][ T8304] RDX: 0000000000000001 RSI: 0000000000000113 RDI: 0000000000000003 [ 142.451533][ T8304] RBP: 00007fa49fbee090 R08: 0000000000000004 R09: 0000000000000000 [ 142.451544][ T8304] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.451556][ T8304] R13: 00007fa4a1be6038 R14: 00007fa4a1be5fa0 R15: 00007ffe7b7f5718 [ 142.451583][ T8304] [ 142.900765][ T8309] netlink: 24 bytes leftover after parsing attributes in process `syz.1.569'. [ 143.326938][ T8339] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 143.407135][ T8336] syzkaller0: entered promiscuous mode [ 143.412803][ T8336] syzkaller0: entered allmulticast mode [ 143.570102][ T8342] netlink: 'syz.1.577': attribute type 21 has an invalid length. [ 143.577933][ T8342] netlink: 4 bytes leftover after parsing attributes in process `syz.1.577'. [ 143.593282][ T8342] netlink: 'syz.1.577': attribute type 21 has an invalid length. [ 143.601660][ T8342] netlink: 4 bytes leftover after parsing attributes in process `syz.1.577'. [ 143.652338][ T8346] FAULT_INJECTION: forcing a failure. [ 143.652338][ T8346] name failslab, interval 1, probability 0, space 0, times 0 [ 143.667013][ T8346] CPU: 1 UID: 0 PID: 8346 Comm: syz.1.578 Not tainted syzkaller #0 PREEMPT(full) [ 143.667030][ T8346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 143.667036][ T8346] Call Trace: [ 143.667040][ T8346] [ 143.667045][ T8346] dump_stack_lvl+0x189/0x250 [ 143.667063][ T8346] ? __pfx____ratelimit+0x10/0x10 [ 143.667075][ T8346] ? __pfx_dump_stack_lvl+0x10/0x10 [ 143.667086][ T8346] ? __pfx__printk+0x10/0x10 [ 143.667103][ T8346] ? __pfx___might_resched+0x10/0x10 [ 143.667133][ T8346] should_fail_ex+0x414/0x560 [ 143.667162][ T8346] ? alloc_netdev_mqs+0x8a0/0x11b0 [ 143.667186][ T8346] should_failslab+0xa8/0x100 [ 143.667213][ T8346] __kvmalloc_node_noprof+0x161/0x5f0 [ 143.667236][ T8346] ? alloc_netdev_mqs+0x8a0/0x11b0 [ 143.667252][ T8346] alloc_netdev_mqs+0x8a0/0x11b0 [ 143.667270][ T8346] gprs_attach+0x7a/0x540 [ 143.667284][ T8346] pep_setsockopt+0x33d/0x4c0 [ 143.667296][ T8346] ? __pfx_pep_setsockopt+0x10/0x10 [ 143.667306][ T8346] ? aa_sock_opt_perm+0xff/0x1b0 [ 143.667316][ T8346] ? sock_common_setsockopt+0x36/0xc0 [ 143.667327][ T8346] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 143.667337][ T8346] do_sock_setsockopt+0x179/0x1b0 [ 143.667352][ T8346] __x64_sys_setsockopt+0x13f/0x1b0 [ 143.667367][ T8346] do_syscall_64+0xfa/0x3b0 [ 143.667378][ T8346] ? lockdep_hardirqs_on+0x9c/0x150 [ 143.667389][ T8346] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.667399][ T8346] ? clear_bhb_loop+0x60/0xb0 [ 143.667411][ T8346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.667420][ T8346] RIP: 0033:0x7f715cd8eec9 [ 143.667431][ T8346] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.667439][ T8346] RSP: 002b:00007f715dc69038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 143.667451][ T8346] RAX: ffffffffffffffda RBX: 00007f715cfe5fa0 RCX: 00007f715cd8eec9 [ 143.667459][ T8346] RDX: 0000000000000001 RSI: 0000000000000113 RDI: 0000000000000003 [ 143.667465][ T8346] RBP: 00007f715dc69090 R08: 0000000000000004 R09: 0000000000000000 [ 143.667471][ T8346] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000002 [ 143.667477][ T8346] R13: 00007f715cfe6038 R14: 00007f715cfe5fa0 R15: 00007fff4feb60b8 [ 143.667493][ T8346] [ 144.068159][ T8353] af_packet: tpacket_rcv: packet too big, clamped from 36 to 4294967272. macoff=96 [ 144.467068][ T8372] netlink: 68 bytes leftover after parsing attributes in process `syz.1.588'. [ 144.507245][ T8374] netlink: 4 bytes leftover after parsing attributes in process `syz.3.587'. [ 144.557983][ T8372] tipc: New replicast peer: 255.255.255.255 [ 144.566446][ T8372] tipc: Enabled bearer , priority 10 [ 145.695636][ T10] tipc: Node number set to 3026559083 [ 145.782216][ T8436] netlink: 256 bytes leftover after parsing attributes in process `syz.0.606'. [ 145.802560][ T8436] netlink: 48 bytes leftover after parsing attributes in process `syz.0.606'. [ 146.110776][ T8447] netlink: 'syz.1.609': attribute type 2 has an invalid length. [ 146.444974][ T8453] batadv_slave_0: entered promiscuous mode [ 146.556309][ T8452] batadv_slave_0: left promiscuous mode [ 146.572042][ T8455] vlan2: entered promiscuous mode [ 146.580204][ T8455] team0: entered promiscuous mode [ 146.586497][ T8455] team_slave_0: entered promiscuous mode [ 146.597700][ T8455] team_slave_1: entered promiscuous mode [ 147.192086][ T8492] FAULT_INJECTION: forcing a failure. [ 147.192086][ T8492] name failslab, interval 1, probability 0, space 0, times 0 [ 147.216781][ T8492] CPU: 0 UID: 0 PID: 8492 Comm: syz.1.622 Not tainted syzkaller #0 PREEMPT(full) [ 147.216808][ T8492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 147.216819][ T8492] Call Trace: [ 147.216827][ T8492] [ 147.216835][ T8492] dump_stack_lvl+0x189/0x250 [ 147.216866][ T8492] ? __pfx____ratelimit+0x10/0x10 [ 147.216886][ T8492] ? __pfx_dump_stack_lvl+0x10/0x10 [ 147.216907][ T8492] ? __pfx__printk+0x10/0x10 [ 147.216936][ T8492] ? __pfx___might_resched+0x10/0x10 [ 147.216962][ T8492] ? fs_reclaim_acquire+0x7d/0x100 [ 147.216995][ T8492] should_fail_ex+0x414/0x560 [ 147.217023][ T8492] should_failslab+0xa8/0x100 [ 147.217049][ T8492] __kmalloc_cache_noprof+0x70/0x3d0 [ 147.217073][ T8492] ? alloc_netdev_mqs+0xbf1/0x11b0 [ 147.217106][ T8492] alloc_netdev_mqs+0xbf1/0x11b0 [ 147.217141][ T8492] gprs_attach+0x7a/0x540 [ 147.217168][ T8492] pep_setsockopt+0x33d/0x4c0 [ 147.217193][ T8492] ? __pfx_pep_setsockopt+0x10/0x10 [ 147.217212][ T8492] ? aa_sock_opt_perm+0xff/0x1b0 [ 147.217232][ T8492] ? sock_common_setsockopt+0x36/0xc0 [ 147.217251][ T8492] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 147.217273][ T8492] do_sock_setsockopt+0x179/0x1b0 [ 147.217311][ T8492] __x64_sys_setsockopt+0x13f/0x1b0 [ 147.217339][ T8492] do_syscall_64+0xfa/0x3b0 [ 147.217359][ T8492] ? lockdep_hardirqs_on+0x9c/0x150 [ 147.217378][ T8492] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.217396][ T8492] ? clear_bhb_loop+0x60/0xb0 [ 147.217417][ T8492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.217436][ T8492] RIP: 0033:0x7f715cd8eec9 [ 147.217454][ T8492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.217470][ T8492] RSP: 002b:00007f715dc69038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 147.217490][ T8492] RAX: ffffffffffffffda RBX: 00007f715cfe5fa0 RCX: 00007f715cd8eec9 [ 147.217504][ T8492] RDX: 0000000000000001 RSI: 0000000000000113 RDI: 0000000000000003 [ 147.217515][ T8492] RBP: 00007f715dc69090 R08: 0000000000000004 R09: 0000000000000000 [ 147.217525][ T8492] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000002 [ 147.217535][ T8492] R13: 00007f715cfe6038 R14: 00007f715cfe5fa0 R15: 00007fff4feb60b8 [ 147.217565][ T8492] [ 147.777865][ T8511] ip6tnl0: entered promiscuous mode [ 147.826589][ T8511] netlink: 'syz.1.627': attribute type 2 has an invalid length. [ 147.884786][ T8515] netlink: 16 bytes leftover after parsing attributes in process `syz.4.629'. [ 147.936557][ T8518] netlink: 24 bytes leftover after parsing attributes in process `syz.3.630'. [ 148.172261][ T8530] netlink: 24 bytes leftover after parsing attributes in process `syz.3.634'. [ 148.483455][ T8542] netlink: 28 bytes leftover after parsing attributes in process `syz.3.635'. [ 148.669522][ T8550] netlink: 12 bytes leftover after parsing attributes in process `syz.1.636'. [ 148.723305][ T8550] vlan2: entered promiscuous mode [ 148.739693][ T8550] veth0: entered promiscuous mode [ 149.350579][ T8564] delete_channel: no stack [ 149.494362][ T8568] tipc: Started in network mode [ 149.500126][ T8568] tipc: Node identity ac14142f, cluster identity 4711 [ 149.539917][ T8568] tipc: New replicast peer: 0.0.0.0 [ 149.547025][ T8568] tipc: Enabled bearer , priority 10 [ 149.560448][ T8568] tipc: New replicast peer: 255.255.255.255 [ 149.834439][ T8587] FAULT_INJECTION: forcing a failure. [ 149.834439][ T8587] name failslab, interval 1, probability 0, space 0, times 0 [ 149.874491][ T8587] CPU: 1 UID: 0 PID: 8587 Comm: syz.3.649 Not tainted syzkaller #0 PREEMPT(full) [ 149.874519][ T8587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 149.874530][ T8587] Call Trace: [ 149.874537][ T8587] [ 149.874546][ T8587] dump_stack_lvl+0x189/0x250 [ 149.874572][ T8587] ? __pfx____ratelimit+0x10/0x10 [ 149.874592][ T8587] ? __pfx_dump_stack_lvl+0x10/0x10 [ 149.874611][ T8587] ? __pfx__printk+0x10/0x10 [ 149.874638][ T8587] ? stack_trace_save+0x9c/0xe0 [ 149.874658][ T8587] ? __pfx_stack_trace_save+0x10/0x10 [ 149.874686][ T8587] should_fail_ex+0x414/0x560 [ 149.874717][ T8587] should_failslab+0xa8/0x100 [ 149.874745][ T8587] __kmalloc_noprof+0xcb/0x4f0 [ 149.874768][ T8587] ? dev_prep_valid_name+0x193/0x610 [ 149.874791][ T8587] dev_prep_valid_name+0x193/0x610 [ 149.874810][ T8587] ? __pfx___might_resched+0x10/0x10 [ 149.874836][ T8587] ? __pfx_dev_prep_valid_name+0x10/0x10 [ 149.874861][ T8587] ? __raw_spin_lock_init+0x45/0x100 [ 149.874885][ T8587] register_netdevice+0x542/0x1ae0 [ 149.874925][ T8587] ? __pfx___mutex_lock+0x10/0x10 [ 149.874946][ T8587] ? __pfx_register_netdevice+0x10/0x10 [ 149.874969][ T8587] ? alloc_netdev_mqs+0xc7c/0x11b0 [ 149.874999][ T8587] ? alloc_netdev_mqs+0xc7c/0x11b0 [ 149.875032][ T8587] ? alloc_netdev_mqs+0xe2a/0x11b0 [ 149.875065][ T8587] register_netdev+0x40/0x60 [ 149.875091][ T8587] gprs_attach+0x18a/0x540 [ 149.875119][ T8587] pep_setsockopt+0x33d/0x4c0 [ 149.875143][ T8587] ? __pfx_pep_setsockopt+0x10/0x10 [ 149.875162][ T8587] ? aa_sock_opt_perm+0xff/0x1b0 [ 149.875182][ T8587] ? sock_common_setsockopt+0x36/0xc0 [ 149.875202][ T8587] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 149.875232][ T8587] do_sock_setsockopt+0x179/0x1b0 [ 149.875262][ T8587] __x64_sys_setsockopt+0x13f/0x1b0 [ 149.875292][ T8587] do_syscall_64+0xfa/0x3b0 [ 149.875313][ T8587] ? lockdep_hardirqs_on+0x9c/0x150 [ 149.875335][ T8587] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.875353][ T8587] ? clear_bhb_loop+0x60/0xb0 [ 149.875377][ T8587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.875396][ T8587] RIP: 0033:0x7fa4a198eec9 [ 149.875413][ T8587] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.875429][ T8587] RSP: 002b:00007fa49fbee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 149.875449][ T8587] RAX: ffffffffffffffda RBX: 00007fa4a1be5fa0 RCX: 00007fa4a198eec9 [ 149.875463][ T8587] RDX: 0000000000000001 RSI: 0000000000000113 RDI: 0000000000000003 [ 149.875474][ T8587] RBP: 00007fa49fbee090 R08: 0000000000000004 R09: 0000000000000000 [ 149.875486][ T8587] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000002 [ 149.875498][ T8587] R13: 00007fa4a1be6038 R14: 00007fa4a1be5fa0 R15: 00007ffe7b7f5718 [ 149.875530][ T8587] [ 149.950501][ T8585] pim6reg: entered allmulticast mode [ 150.245441][ T8588] pim6reg: left allmulticast mode [ 150.323289][ T8599] netlink: 72 bytes leftover after parsing attributes in process `syz.3.651'. [ 150.477571][ T8603] netlink: 8 bytes leftover after parsing attributes in process `syz.1.652'. [ 150.533773][ T8603] netlink: 4 bytes leftover after parsing attributes in process `syz.1.652'. [ 150.544483][ T5884] tipc: Node number set to 2886997039 [ 150.564855][ T8606] netlink: 'syz.3.653': attribute type 1 has an invalid length. [ 150.679071][ T8610] netlink: 12 bytes leftover after parsing attributes in process `syz.1.654'. [ 150.695332][ T8610] IPv6: sit1: Disabled Multicast RS [ 150.701701][ T8610] sit1: entered allmulticast mode [ 150.960075][ T8617] netlink: 128 bytes leftover after parsing attributes in process `syz.1.657'. [ 151.003591][ T7558] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.017981][ T7558] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.234489][ T8617] syz.1.657 (8617) used greatest stack depth: 16088 bytes left [ 151.271909][ T8627] netlink: 'syz.1.661': attribute type 1 has an invalid length. [ 151.690370][ T8637] netlink: 12 bytes leftover after parsing attributes in process `syz.3.664'. [ 151.730476][ T8637] netlink: 'syz.3.664': attribute type 12 has an invalid length. [ 151.763544][ T8637] netlink: 'syz.3.664': attribute type 12 has an invalid length. [ 151.771599][ T7558] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.800572][ T7558] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.853723][ T8640] syzkaller1: entered promiscuous mode [ 151.861565][ T8640] syzkaller1: entered allmulticast mode [ 151.884369][ T30] audit: type=1107 audit(1759222963.566:2): pid=8639 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 151.891807][ T7558] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.938122][ T7558] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.009556][ T5872] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 152.019939][ T5872] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 152.028157][ T5872] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 152.045142][ T5872] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 152.052844][ T5872] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 152.969143][ T8646] chnl_net:caif_netlink_parms(): no params data found [ 153.173756][ T8686] vlan2: entered allmulticast mode [ 153.179546][ T8686] bridge_slave_0: entered allmulticast mode [ 153.349648][ T8673] __nla_validate_parse: 2 callbacks suppressed [ 153.349741][ T8673] netlink: 24 bytes leftover after parsing attributes in process `syz.0.674'. [ 153.452490][ T8646] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.476900][ T8646] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.493225][ T8646] bridge_slave_0: entered allmulticast mode [ 153.518754][ T8646] bridge_slave_0: entered promiscuous mode [ 153.560010][ T8693] syzkaller0: entered promiscuous mode [ 153.567966][ T8693] syzkaller0: entered allmulticast mode [ 153.683067][ T8646] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.702663][ T8646] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.721552][ T8646] bridge_slave_1: entered allmulticast mode [ 153.735568][ T8708] netlink: 36 bytes leftover after parsing attributes in process `syz.3.683'. [ 153.753544][ T8646] bridge_slave_1: entered promiscuous mode [ 153.796313][ T8711] netlink: 32 bytes leftover after parsing attributes in process `syz.4.684'. [ 153.848247][ T8716] netlink: 'syz.4.684': attribute type 1 has an invalid length. [ 153.890617][ T8718] IPv6: addrconf: prefix option has invalid lifetime [ 153.986283][ T8722] sctp: [Deprecated]: syz.1.686 (pid 8722) Use of struct sctp_assoc_value in delayed_ack socket option. [ 153.986283][ T8722] Use struct sctp_sack_info instead [ 154.035977][ T8722] sctp: [Deprecated]: syz.1.686 (pid 8722) Use of struct sctp_assoc_value in delayed_ack socket option. [ 154.035977][ T8722] Use struct sctp_sack_info instead [ 154.081956][ T8716] bond2: entered promiscuous mode [ 154.087620][ T8716] 8021q: adding VLAN 0 to HW filter on device bond2 [ 154.107086][ T8718] netlink: 8 bytes leftover after parsing attributes in process `syz.1.686'. [ 154.144637][ T5877] Bluetooth: hci5: command tx timeout [ 154.165048][ T8720] bond2: (slave bridge1): making interface the new active one [ 154.214730][ T8720] bridge1: entered promiscuous mode [ 154.233202][ T8720] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 154.279416][ T8646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 154.328219][ T8646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 154.438626][ T8736] netlink: 'syz.0.691': attribute type 1 has an invalid length. [ 154.467531][ T8736] netlink: 224 bytes leftover after parsing attributes in process `syz.0.691'. [ 154.522699][ T8646] team0: Port device team_slave_0 added [ 154.642710][ T8646] team0: Port device team_slave_1 added [ 154.702551][ T8745] netlink: 8 bytes leftover after parsing attributes in process `syz.1.695'. [ 154.745506][ T8744] netlink: 8 bytes leftover after parsing attributes in process `syz.1.695'. [ 154.838537][ T8646] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.854497][ T8646] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 154.951350][ T8646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 154.992769][ T8646] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 155.014365][ T8646] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 155.099436][ T8758] netlink: 36 bytes leftover after parsing attributes in process `syz.1.699'. [ 155.113063][ T8646] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 155.136817][ T8769] netlink: 'syz.3.702': attribute type 20 has an invalid length. [ 155.300595][ T8646] hsr_slave_0: entered promiscuous mode [ 155.331803][ T8777] netlink: 8 bytes leftover after parsing attributes in process `syz.4.705'. [ 155.349253][ T8646] hsr_slave_1: entered promiscuous mode [ 155.370004][ T8646] debugfs: 'hsr0' already exists in 'hsr' [ 155.389488][ T8646] Cannot create hsr debugfs directory [ 155.551854][ T7558] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.570609][ T7558] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.141640][ T8782] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 156.224569][ T5877] Bluetooth: hci5: command tx timeout [ 156.277244][ T8813] netlink: 'syz.1.715': attribute type 10 has an invalid length. [ 156.285349][ T8813] netlink: 2 bytes leftover after parsing attributes in process `syz.1.715'. [ 156.351026][ T8813] team0: entered promiscuous mode [ 156.358154][ T8813] team_slave_0: entered promiscuous mode [ 156.366268][ T8813] team_slave_1: entered promiscuous mode [ 156.372804][ T8813] bridge0: port 3(team0) entered blocking state [ 156.392256][ T8813] bridge0: port 3(team0) entered disabled state [ 156.414336][ T8813] team0: entered allmulticast mode [ 156.419590][ T8813] team_slave_0: entered allmulticast mode [ 156.426130][ T8813] team_slave_1: entered allmulticast mode [ 156.436566][ T8813] bridge0: port 3(team0) entered blocking state [ 156.443074][ T8813] bridge0: port 3(team0) entered listening state [ 156.621182][ T8825] syzkaller1: entered promiscuous mode [ 156.634395][ T8825] syzkaller1: entered allmulticast mode [ 156.747945][ T8833] tipc: Enabling of bearer <“dp:s> rejected, media not registered [ 156.768715][ T8646] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 156.795042][ T8646] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 156.861333][ T8646] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 157.045416][ T8646] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 157.088144][ T8854] unsupported nlmsg_type 40 [ 157.584304][ T5877] Bluetooth: hci0: command 0x0c1a tx timeout [ 157.866752][ T8646] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.965412][ T8646] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.000360][ T7560] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.007614][ T7560] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.118377][ T7564] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.125799][ T7564] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.231522][ T8880] netlink: 'syz.0.730': attribute type 5 has an invalid length. [ 158.251568][ T8874] netlink: 'syz.4.729': attribute type 11 has an invalid length. [ 158.302318][ T8880] ip6erspan0: entered promiscuous mode [ 158.308918][ T5877] Bluetooth: hci5: command tx timeout [ 158.435670][ T8882] syzkaller0: entered promiscuous mode [ 158.441582][ T8882] syzkaller0: entered allmulticast mode [ 158.821218][ T8902] __nla_validate_parse: 8 callbacks suppressed [ 158.821237][ T8902] netlink: 8 bytes leftover after parsing attributes in process `syz.3.737'. [ 160.388225][ T5877] Bluetooth: hci5: command tx timeout [ 161.671070][ T8646] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.063176][ T8975] vxcan1 speed is unknown, defaulting to 1000 [ 162.120409][ T8975] vxcan1 speed is unknown, defaulting to 1000 [ 162.147491][ T8975] vxcan1 speed is unknown, defaulting to 1000 [ 162.237182][ T8646] veth0_vlan: entered promiscuous mode [ 162.316953][ T8646] veth1_vlan: entered promiscuous mode [ 162.377736][ T8646] veth0_macvtap: entered promiscuous mode [ 162.391405][ T8646] veth1_macvtap: entered promiscuous mode [ 162.420158][ T8646] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 162.458201][ T8646] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 162.510193][ T7560] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.522312][ T8975] infiniband syz2: set active [ 162.527489][ T8975] infiniband syz2: added vxcan1 [ 162.537336][ T7560] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.557393][ T7560] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.579786][ T5939] vxcan1 speed is unknown, defaulting to 1000 [ 162.584545][ T7560] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.769110][ T8975] RDS/IB: syz2: added [ 162.795836][ T8964] vxcan1 speed is unknown, defaulting to 1000 [ 162.861122][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.886778][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.960066][ T7558] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.980844][ T7558] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.362483][ T8992] netlink: 4 bytes leftover after parsing attributes in process `syz.3.749'. [ 163.401305][ T8992] bridge3: entered allmulticast mode [ 163.430267][ T8975] vxcan1 speed is unknown, defaulting to 1000 [ 164.120150][ T8975] vxcan1 speed is unknown, defaulting to 1000 [ 164.157921][ T9007] netlink: 'syz.0.755': attribute type 9 has an invalid length. [ 164.198227][ T9007] netlink: 24 bytes leftover after parsing attributes in process `syz.0.755'. [ 164.215675][ T9007] netlink: 24 bytes leftover after parsing attributes in process `syz.0.755'. [ 164.246498][ T9007] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.256113][ T9007] eql: remember to turn off Van-Jacobson compression on your slave devices [ 164.269661][ T9007] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 164.352914][ T9013] netlink: 'syz.5.756': attribute type 1 has an invalid length. [ 164.361186][ T9013] netlink: 172 bytes leftover after parsing attributes in process `syz.5.756'. [ 164.371377][ T9013] netlink: 4 bytes leftover after parsing attributes in process `syz.5.756'. [ 164.712249][ T9024] netlink: 12 bytes leftover after parsing attributes in process `syz.3.760'. [ 164.847542][ T9024] 8021q: adding VLAN 0 to HW filter on device bond2 [ 164.868941][ T8975] vxcan1 speed is unknown, defaulting to 1000 [ 164.908719][ T9026] bond2: (slave macvlan0): Enslaving as an active interface with an up link [ 164.962929][ T9029] tipc: Started in network mode [ 164.986675][ T9029] tipc: Node identity 462cecf98cc5, cluster identity 4711 [ 165.004621][ T9029] tipc: Enabled bearer , priority 0 [ 165.030281][ T9029] syzkaller0: entered promiscuous mode [ 165.044204][ T9029] syzkaller0: entered allmulticast mode [ 165.117694][ T9029] tipc: Resetting bearer [ 165.151361][ T9029] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 165.160990][ T9029] bridge1: entered allmulticast mode [ 165.191245][ T9029] 8021q: VLANs not supported on ip_vti0 [ 165.201319][ T9027] tipc: Resetting bearer [ 165.248737][ T9027] tipc: Disabling bearer [ 165.437036][ T30] audit: type=1800 audit(1759222977.136:3): pid=9034 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.762" name="memory.events" dev="tmpfs" ino=949 res=0 errno=0 [ 165.497474][ T8975] vxcan1 speed is unknown, defaulting to 1000 [ 165.599210][ T9042] netlink: 68 bytes leftover after parsing attributes in process `syz.5.763'. [ 165.787377][ T9050] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 165.886970][ T8975] vxcan1 speed is unknown, defaulting to 1000 [ 166.173346][ T8975] vxcan1 speed is unknown, defaulting to 1000 [ 166.298298][ T9059] sit0: entered promiscuous mode [ 166.335698][ T9059] netlink: 'syz.3.768': attribute type 1 has an invalid length. [ 166.384865][ T9059] netlink: 1 bytes leftover after parsing attributes in process `syz.3.768'. [ 166.468525][ T8975] vxcan1 speed is unknown, defaulting to 1000 [ 166.618516][ T5926] IPVS: starting estimator thread 0... [ 166.724228][ T9069] IPVS: using max 28 ests per chain, 67200 per kthread [ 166.836086][ T8975] vxcan1 speed is unknown, defaulting to 1000 [ 167.301247][ T9086] netlink: 4 bytes leftover after parsing attributes in process `syz.4.774'. [ 167.899028][ T9102] siw: device registration error -23 [ 168.053931][ T9107] netlink: 4 bytes leftover after parsing attributes in process `syz.5.780'. [ 168.067978][ T9107] veth1_to_team: entered promiscuous mode [ 168.099776][ T9107] veth1_to_team: entered allmulticast mode [ 168.108564][ T9108] netlink: 4 bytes leftover after parsing attributes in process `syz.5.780'. [ 168.470723][ T9114] FAULT_INJECTION: forcing a failure. [ 168.470723][ T9114] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 168.496485][ T9114] CPU: 0 UID: 0 PID: 9114 Comm: syz.5.783 Not tainted syzkaller #0 PREEMPT(full) [ 168.496514][ T9114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 168.496525][ T9114] Call Trace: [ 168.496533][ T9114] [ 168.496541][ T9114] dump_stack_lvl+0x189/0x250 [ 168.496568][ T9114] ? __pfx____ratelimit+0x10/0x10 [ 168.496590][ T9114] ? __pfx_dump_stack_lvl+0x10/0x10 [ 168.496611][ T9114] ? __pfx__printk+0x10/0x10 [ 168.496650][ T9114] should_fail_ex+0x414/0x560 [ 168.496683][ T9114] _copy_to_user+0x31/0xb0 [ 168.496709][ T9114] simple_read_from_buffer+0xe1/0x170 [ 168.496742][ T9114] proc_fail_nth_read+0x1b3/0x220 [ 168.496766][ T9114] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 168.496790][ T9114] ? rw_verify_area+0x2a6/0x4d0 [ 168.496812][ T9114] ? __lock_acquire+0xab9/0xd20 [ 168.496836][ T9114] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 168.496858][ T9114] vfs_read+0x200/0xa30 [ 168.496880][ T9114] ? fdget_pos+0x247/0x320 [ 168.496912][ T9114] ? __pfx___mutex_lock+0x10/0x10 [ 168.496935][ T9114] ? __pfx_vfs_read+0x10/0x10 [ 168.496960][ T9114] ? __fget_files+0x2a/0x420 [ 168.496991][ T9114] ? __fget_files+0x3a0/0x420 [ 168.497017][ T9114] ? __fget_files+0x2a/0x420 [ 168.497053][ T9114] ksys_read+0x145/0x250 [ 168.497089][ T9114] ? __pfx_ksys_read+0x10/0x10 [ 168.497109][ T9114] ? rcu_is_watching+0x15/0xb0 [ 168.497133][ T9114] ? do_syscall_64+0xbe/0x3b0 [ 168.497157][ T9114] do_syscall_64+0xfa/0x3b0 [ 168.497178][ T9114] ? lockdep_hardirqs_on+0x9c/0x150 [ 168.497197][ T9114] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.497216][ T9114] ? clear_bhb_loop+0x60/0xb0 [ 168.497240][ T9114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.497258][ T9114] RIP: 0033:0x7f05b838d8dc [ 168.497275][ T9114] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 168.497291][ T9114] RSP: 002b:00007f05b92b6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 168.497311][ T9114] RAX: ffffffffffffffda RBX: 00007f05b85e5fa0 RCX: 00007f05b838d8dc [ 168.497326][ T9114] RDX: 000000000000000f RSI: 00007f05b92b60a0 RDI: 0000000000000004 [ 168.497337][ T9114] RBP: 00007f05b92b6090 R08: 0000000000000000 R09: 0000000000000000 [ 168.497349][ T9114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.497360][ T9114] R13: 00007f05b85e6038 R14: 00007f05b85e5fa0 R15: 00007ffffb12ae98 [ 168.497392][ T9114] [ 168.861347][ T9116] veth1_macvtap: left promiscuous mode [ 168.943290][ T9116] macsec0: entered promiscuous mode [ 168.982794][ T9116] macsec0: entered allmulticast mode [ 169.016812][ T9117] veth1_macvtap: entered promiscuous mode [ 169.022823][ T9117] veth1_macvtap: entered allmulticast mode [ 169.035828][ T9117] macsec0: left promiscuous mode [ 169.075493][ T9117] macsec0: left allmulticast mode [ 169.091884][ T9117] veth1_macvtap: left allmulticast mode [ 169.287572][ T9126] __nla_validate_parse: 3 callbacks suppressed [ 169.287592][ T9126] netlink: 192 bytes leftover after parsing attributes in process `syz.5.784'. [ 169.630119][ T9132] netlink: 40 bytes leftover after parsing attributes in process `syz.3.786'. [ 169.676511][ T9134] netlink: 104 bytes leftover after parsing attributes in process `syz.5.787'. [ 169.979297][ T9141] netlink: 'syz.4.788': attribute type 32 has an invalid length. [ 169.990347][ T9141] netlink: 8 bytes leftover after parsing attributes in process `syz.4.788'. [ 170.017395][ T9141] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 170.309401][ T9147] netlink: 'syz.4.789': attribute type 13 has an invalid length. [ 170.399548][ T9147] netlink: 'syz.4.789': attribute type 17 has an invalid length. [ 170.591057][ T9147] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.605191][ T9147] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 171.406066][ T9166] netlink: 'syz.4.795': attribute type 6 has an invalid length. [ 171.440604][ T9166] netlink: 'syz.4.795': attribute type 12 has an invalid length. [ 171.454598][ T9166] netlink: 9472 bytes leftover after parsing attributes in process `syz.4.795'. [ 171.877636][ T30] audit: type=1800 audit(1759222983.566:4): pid=9188 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.799" name="@" dev="tmpfs" ino=110 res=0 errno=0 [ 171.911816][ T9183] IPVS: set_ctl: invalid protocol: 2 172.20.20.30:20003 [ 171.923416][ T9186] FAULT_INJECTION: forcing a failure. [ 171.923416][ T9186] name failslab, interval 1, probability 0, space 0, times 0 [ 171.943613][ T9186] CPU: 0 UID: 0 PID: 9186 Comm: syz.0.801 Not tainted syzkaller #0 PREEMPT(full) [ 171.943641][ T9186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 171.943653][ T9186] Call Trace: [ 171.943661][ T9186] [ 171.943670][ T9186] dump_stack_lvl+0x189/0x250 [ 171.943696][ T9186] ? __pfx____ratelimit+0x10/0x10 [ 171.943718][ T9186] ? __pfx_dump_stack_lvl+0x10/0x10 [ 171.943740][ T9186] ? __pfx__printk+0x10/0x10 [ 171.943771][ T9186] ? __pfx___might_resched+0x10/0x10 [ 171.943804][ T9186] should_fail_ex+0x414/0x560 [ 171.943836][ T9186] should_failslab+0xa8/0x100 [ 171.943864][ T9186] __kmalloc_cache_noprof+0x70/0x3d0 [ 171.943887][ T9186] ? call_usermodehelper_setup+0x8e/0x270 [ 171.943912][ T9186] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 171.943939][ T9186] call_usermodehelper_setup+0x8e/0x270 [ 171.943961][ T9186] ? __pfx_free_modprobe_argv+0x10/0x10 [ 171.943988][ T9186] __request_module+0x39f/0x5e0 [ 171.944012][ T9186] ? __pfx___request_module+0x10/0x10 [ 171.944041][ T9186] ? __pfx___request_module+0x10/0x10 [ 171.944072][ T9186] ? apparmor_capable+0x137/0x1b0 [ 171.944101][ T9186] ? dev_load+0x21/0x1f0 [ 171.944122][ T9186] dev_ioctl+0x837/0x1150 [ 171.944147][ T9186] sock_ioctl+0x719/0x790 [ 171.944177][ T9186] ? __pfx_sock_ioctl+0x10/0x10 [ 171.944207][ T9186] ? __fget_files+0x3a0/0x420 [ 171.944231][ T9186] ? __fget_files+0x2a/0x420 [ 171.944260][ T9186] ? bpf_lsm_file_ioctl+0x9/0x20 [ 171.944283][ T9186] ? __pfx_sock_ioctl+0x10/0x10 [ 171.944310][ T9186] __se_sys_ioctl+0xfc/0x170 [ 171.944336][ T9186] do_syscall_64+0xfa/0x3b0 [ 171.944357][ T9186] ? lockdep_hardirqs_on+0x9c/0x150 [ 171.944376][ T9186] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.944395][ T9186] ? clear_bhb_loop+0x60/0xb0 [ 171.944417][ T9186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.944434][ T9186] RIP: 0033:0x7fd9aeb8eec9 [ 171.944451][ T9186] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.944466][ T9186] RSP: 002b:00007fd9afad2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 171.944485][ T9186] RAX: ffffffffffffffda RBX: 00007fd9aede5fa0 RCX: 00007fd9aeb8eec9 [ 171.944499][ T9186] RDX: 0000200000000940 RSI: 00000000000089f3 RDI: 0000000000000003 [ 171.944511][ T9186] RBP: 00007fd9afad2090 R08: 0000000000000000 R09: 0000000000000000 [ 171.944523][ T9186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.944534][ T9186] R13: 00007fd9aede6038 R14: 00007fd9aede5fa0 R15: 00007ffd5e1800d8 [ 171.944572][ T9186] [ 172.065610][ C1] bridge0: port 3(team0) entered learning state [ 172.516272][ T9204] netlink: 12 bytes leftover after parsing attributes in process `syz.3.804'. [ 172.568548][ T9207] netlink: 12 bytes leftover after parsing attributes in process `syz.3.804'. [ 172.612935][ T9210] netlink: 56 bytes leftover after parsing attributes in process `syz.4.805'. [ 172.688653][ T9211] netlink: 56 bytes leftover after parsing attributes in process `syz.4.805'. [ 172.990364][ T9229] batadv_slave_1: default FDB implementation only supports local addresses [ 173.003222][ T9214] netlink: 'syz.1.806': attribute type 1 has an invalid length. [ 173.013522][ T9214] netlink: 224 bytes leftover after parsing attributes in process `syz.1.806'. [ 173.382411][ T9243] netlink: 'syz.0.815': attribute type 33 has an invalid length. [ 173.439511][ T9244] delete_channel: no stack [ 173.605903][ T9255] tap0: tun_chr_ioctl cmd 1074025677 [ 173.611918][ T9255] tap0: linktype set to 270 [ 174.501333][ T9302] TCP: TCP_TX_DELAY enabled [ 174.756884][ T9291] bridge_slave_1: left allmulticast mode [ 174.784772][ T9291] bridge_slave_1: left promiscuous mode [ 174.790943][ T9291] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.830611][ T9291] bridge_slave_0: left allmulticast mode [ 174.840921][ T9291] bridge_slave_0: left promiscuous mode [ 174.849150][ T9291] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.107569][ T9312] __nla_validate_parse: 9 callbacks suppressed [ 175.107590][ T9312] netlink: 36 bytes leftover after parsing attributes in process `syz.4.834'. [ 175.148322][ T9312] netlink: 36 bytes leftover after parsing attributes in process `syz.4.834'. [ 175.159153][ T9312] netlink: 36 bytes leftover after parsing attributes in process `syz.4.834'. [ 175.173545][ T9312] netlink: 36 bytes leftover after parsing attributes in process `syz.4.834'. [ 175.183527][ T9312] netlink: 36 bytes leftover after parsing attributes in process `syz.4.834'. [ 175.206418][ T9326] netlink: 4 bytes leftover after parsing attributes in process `syz.1.837'. [ 175.212290][ T9312] netlink: 36 bytes leftover after parsing attributes in process `syz.4.834'. [ 175.229886][ T9312] netlink: 36 bytes leftover after parsing attributes in process `syz.4.834'. [ 175.258793][ T9312] netlink: 36 bytes leftover after parsing attributes in process `syz.4.834'. [ 175.269895][ T9312] netlink: 36 bytes leftover after parsing attributes in process `syz.4.834'. [ 175.825651][ T9312] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.861062][ T9312] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.207442][ T9312] veth0: left allmulticast mode [ 176.327124][ T9346] syz.4.838: vmalloc error: size 16781312, failed to allocated page array size 32776, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 176.348547][ T9346] CPU: 0 UID: 0 PID: 9346 Comm: syz.4.838 Not tainted syzkaller #0 PREEMPT(full) [ 176.348577][ T9346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 176.348588][ T9346] Call Trace: [ 176.348596][ T9346] [ 176.348605][ T9346] dump_stack_lvl+0x189/0x250 [ 176.348636][ T9346] ? __pfx_dump_stack_lvl+0x10/0x10 [ 176.348658][ T9346] ? __pfx__printk+0x10/0x10 [ 176.348685][ T9346] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 176.348704][ T9346] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 176.348726][ T9346] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 176.348750][ T9346] warn_alloc+0x214/0x310 [ 176.348784][ T9346] ? __pfx_warn_alloc+0x10/0x10 [ 176.348820][ T9346] ? __get_vm_area_node+0x28f/0x300 [ 176.348847][ T9346] ? xskq_create+0xbf/0x170 [ 176.348871][ T9346] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 176.348937][ T9346] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 176.348966][ T9346] ? xskq_create+0x56/0x170 [ 176.348988][ T9346] ? __kasan_kmalloc+0x93/0xb0 [ 176.349017][ T9346] vmalloc_user_noprof+0xad/0xf0 [ 176.349044][ T9346] ? xskq_create+0xbf/0x170 [ 176.349065][ T9346] xskq_create+0xbf/0x170 [ 176.349088][ T9346] xsk_init_queue+0xb0/0x110 [ 176.349111][ T9346] xsk_setsockopt+0x57b/0x8d0 [ 176.349144][ T9346] ? __pfx_xsk_setsockopt+0x10/0x10 [ 176.349174][ T9346] ? __pfx_aa_sk_perm+0x10/0x10 [ 176.349206][ T9346] ? __fget_files+0x2a/0x420 [ 176.349232][ T9346] ? aa_sock_opt_perm+0xff/0x1b0 [ 176.349252][ T9346] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 176.349273][ T9346] ? __pfx_xsk_setsockopt+0x10/0x10 [ 176.349304][ T9346] do_sock_setsockopt+0x179/0x1b0 [ 176.349335][ T9346] __x64_sys_setsockopt+0x13f/0x1b0 [ 176.349366][ T9346] do_syscall_64+0xfa/0x3b0 [ 176.349388][ T9346] ? lockdep_hardirqs_on+0x9c/0x150 [ 176.349409][ T9346] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.349429][ T9346] ? clear_bhb_loop+0x60/0xb0 [ 176.349454][ T9346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.349473][ T9346] RIP: 0033:0x7fd8f538eec9 [ 176.349496][ T9346] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 176.349513][ T9346] RSP: 002b:00007fd8f61b6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 176.349533][ T9346] RAX: ffffffffffffffda RBX: 00007fd8f55e6090 RCX: 00007fd8f538eec9 [ 176.349548][ T9346] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000004 [ 176.349560][ T9346] RBP: 00007fd8f5411f91 R08: 0000000000000004 R09: 0000000000000000 [ 176.349572][ T9346] R10: 0000200000001780 R11: 0000000000000246 R12: 0000000000000000 [ 176.349585][ T9346] R13: 00007fd8f55e6128 R14: 00007fd8f55e6090 R15: 00007ffceb5bb638 [ 176.349618][ T9346] [ 176.349637][ T9346] Mem-Info: [ 176.455027][ T9326] team0: left allmulticast mode [ 176.475938][ T9346] active_anon:5632 inactive_anon:0 isolated_anon:0 [ 176.475938][ T9346] active_file:3407 inactive_file:39918 isolated_file:0 [ 176.475938][ T9346] unevictable:768 dirty:148 writeback:0 [ 176.475938][ T9346] slab_reclaimable:11388 slab_unreclaimable:194094 [ 176.475938][ T9346] mapped:36647 shmem:1359 pagetables:1130 [ 176.475938][ T9346] sec_pagetables:0 bounce:0 [ 176.475938][ T9346] kernel_misc_reclaimable:0 [ 176.475938][ T9346] free:1214990 free_pcp:17753 free_cma:0 [ 176.499076][ T9326] team_slave_0: left allmulticast mode [ 176.545026][ T9346] Node 0 active_anon:22528kB inactive_anon:0kB active_file:13628kB inactive_file:159472kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:146588kB dirty:592kB writeback:0kB shmem:3900kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13076kB pagetables:4372kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 176.550253][ T9326] team_slave_1: left allmulticast mode [ 176.553214][ T9346] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 176.578627][ T9326] bridge0: port 3(team0) entered disabled state [ 176.590375][ T9346] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 176.797235][ T9346] lowmem_reserve[]: 0 2499 2501 2501 2501 [ 176.799897][ T9326] bridge_slave_1: left allmulticast mode [ 176.803152][ T9346] Node 0 DMA32 free:956364kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22480kB inactive_anon:0kB active_file:13628kB inactive_file:157632kB unevictable:1536kB writepending:592kB present:3129332kB managed:2559852kB mlocked:0kB bounce:0kB free_pcp:50196kB local_pcp:28820kB free_cma:0kB [ 176.809472][ T9326] bridge_slave_1: left promiscuous mode [ 176.842609][ T9346] lowmem_reserve[]: 0 0 1 1 1 [ 176.849285][ T9326] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.852952][ T9346] Node 0 Normal free:4kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1840kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 176.892556][ T9346] lowmem_reserve[]: 0 0 0 0 0 [ 176.893205][ T9326] bridge_slave_0: left allmulticast mode [ 176.897975][ T9346] Node 1 Normal free:3888232kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:21436kB local_pcp:11384kB free_cma:0kB [ 176.898043][ T9346] lowmem_reserve[]: 0 0 0 0 0 [ 176.898085][ T9346] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB [ 176.935758][ T9326] bridge_slave_0: left promiscuous mode [ 176.936024][ T9326] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.941218][ T9346] 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 176.972335][ T9346] Node 0 DMA32: 129*4kB (UM) 41*8kB (ME) 182*16kB (UM) 176*32kB (UM) 56*64kB (UM) 18*128kB (UME) 22*256kB (UM) 11*512kB (UM) 2*1024kB (UM) 3*2048kB (UME) 225*4096kB (M) = 956332kB [ 176.992901][ T9346] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 177.005862][ T9346] Node 1 Normal: 130*4kB (UME) 48*8kB (UME) 56*16kB (UME) 85*32kB (UME) 33*64kB (UME) 7*128kB (UME) 5*256kB (UME) 3*512kB (UM) 3*1024kB (UME) 2*2048kB (UE) 945*4096kB (M) = 3888232kB [ 177.026255][ T9346] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 177.036714][ T9346] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 177.047032][ T9346] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 177.057192][ T9346] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 177.068588][ T9346] 44681 total pagecache pages [ 177.073298][ T9346] 0 pages in swap cache [ 177.079691][ T9346] Free swap = 124996kB [ 177.083894][ T9346] Total swap = 124996kB [ 177.090087][ T59] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.099448][ T9346] 2097051 pages RAM [ 177.103375][ T9346] 0 pages HighMem/MovableOnly [ 177.108659][ T59] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.118685][ T9346] 424998 pages reserved [ 177.122858][ T9346] 0 pages cma reserved [ 177.231010][ T9350] netlink: zone id is out of range [ 177.236747][ T9350] netlink: zone id is out of range [ 177.243700][ T9350] netlink: get zone limit has 8 unknown bytes [ 177.257928][ T59] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.271322][ T59] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.627315][ T195] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.645648][ T195] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.713492][ T195] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.740428][ T195] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.809575][ T9381] tipc: Started in network mode [ 177.815823][ T9381] tipc: Node identity ac14140f, cluster identity 8 [ 177.822795][ T9381] tipc: New replicast peer: 255.255.255.255 [ 177.853800][ T9381] tipc: Enabled bearer , priority 10 [ 177.883362][ T9387] bridge4: entered allmulticast mode [ 178.245490][ T9408] tipc: Enabling of bearer rejected, failed to enable media [ 178.530878][ T9424] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 178.532461][ T9416] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 178.718369][ T9433] ÿ: renamed from bond_slave_0 (while UP) [ 178.763001][ T9433] lo: entered promiscuous mode [ 178.800101][ T9433] lo: entered allmulticast mode [ 178.807222][ T9433] tunl0: entered promiscuous mode [ 178.812455][ T9433] tunl0: entered allmulticast mode [ 178.819201][ T9433] gre0: entered promiscuous mode [ 178.824797][ T9433] gre0: entered allmulticast mode [ 178.831297][ T9433] gretap0: entered promiscuous mode [ 178.837747][ T9433] gretap0: entered allmulticast mode [ 178.848432][ T9433] erspan0: entered promiscuous mode [ 178.853957][ T9433] erspan0: entered allmulticast mode [ 178.861379][ T9433] ip_vti0: entered promiscuous mode [ 178.868751][ T9433] ip_vti0: entered allmulticast mode [ 178.877922][ T9433] ip6_vti0: entered promiscuous mode [ 178.883548][ T9433] ip6_vti0: entered allmulticast mode [ 178.921004][ T9433] sit0: entered promiscuous mode [ 178.964314][ T9332] tipc: Node number set to 2886997007 [ 178.969301][ T9433] sit0: entered allmulticast mode [ 178.980301][ T9433] ip6tnl0: entered promiscuous mode [ 178.993485][ T9433] ip6tnl0: entered allmulticast mode [ 179.005273][ T9433] ip6gre0: entered promiscuous mode [ 179.020967][ T9433] ip6gre0: entered allmulticast mode [ 179.027683][ T9433] syz_tun: entered promiscuous mode [ 179.040669][ T9433] syz_tun: entered allmulticast mode [ 179.072551][ T9433] ip6gretap0: entered promiscuous mode [ 179.102724][ T9433] ip6gretap0: entered allmulticast mode [ 179.137579][ T9433] bridge0: entered promiscuous mode [ 179.161310][ T9433] bridge0: entered allmulticast mode [ 179.187155][ T9433] vcan0: entered promiscuous mode [ 179.201241][ T9433] vcan0: entered allmulticast mode [ 179.215982][ T9433] bond0: entered promiscuous mode [ 179.226093][ T9433] ÿ: entered promiscuous mode [ 179.231249][ T9433] bond_slave_1: entered promiscuous mode [ 179.289781][ T9433] bond0: entered allmulticast mode [ 179.313054][ T9433] ÿ: entered allmulticast mode [ 179.320133][ T9433] bond_slave_1: entered allmulticast mode [ 179.329181][ T9433] team0: entered promiscuous mode [ 179.339051][ T9433] team_slave_0: entered promiscuous mode [ 179.353753][ T9433] team_slave_1: entered promiscuous mode [ 179.373477][ T9433] team0: entered allmulticast mode [ 179.384001][ T9433] team_slave_0: entered allmulticast mode [ 179.398253][ T9433] team_slave_1: entered allmulticast mode [ 179.420319][ T9433] dummy0: entered promiscuous mode [ 179.439252][ T9433] dummy0: entered allmulticast mode [ 179.451016][ T9433] nlmon0: entered promiscuous mode [ 179.457450][ T9433] nlmon0: entered allmulticast mode [ 179.486209][ T9433] caif0: entered promiscuous mode [ 179.492565][ T9433] caif0: entered allmulticast mode [ 179.512043][ T9433] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 179.858199][ T9482] netlink: 'syz.3.876': attribute type 1 has an invalid length. [ 179.930157][ T9482] 8021q: adding VLAN 0 to HW filter on device bond3 [ 180.108977][ T9501] netlink: 'syz.0.879': attribute type 1 has an invalid length. [ 180.141799][ T9501] netlink: 'syz.0.879': attribute type 2 has an invalid length. [ 180.173014][ T9501] team_slave_0: mtu less than device minimum [ 180.202366][ T9501] __nla_validate_parse: 157 callbacks suppressed [ 180.202384][ T9501] netlink: 8 bytes leftover after parsing attributes in process `syz.0.879'. [ 180.269976][ T9505] netlink: 12 bytes leftover after parsing attributes in process `syz.0.879'. [ 181.306723][ T9516] netlink: 4 bytes leftover after parsing attributes in process `syz.4.885'. [ 184.817103][ T9521] netlink: 'syz.1.887': attribute type 9 has an invalid length. [ 184.835863][ T9521] netlink: 4 bytes leftover after parsing attributes in process `syz.1.887'. [ 185.297915][ T9553] sit0: left promiscuous mode [ 185.377626][ T9553] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 185.416943][ T9559] lo: left promiscuous mode [ 185.421631][ T9559] lo: left allmulticast mode [ 185.429195][ T9559] tunl0: left promiscuous mode [ 185.434473][ T9559] tunl0: left allmulticast mode [ 185.440495][ T9559] gre0: left promiscuous mode [ 185.445539][ T9559] gre0: left allmulticast mode [ 185.451383][ T9559] gretap0: left promiscuous mode [ 185.459032][ T9559] gretap0: left allmulticast mode [ 185.466169][ T9559] erspan0: left promiscuous mode [ 185.471328][ T9559] erspan0: left allmulticast mode [ 185.477923][ T9559] ip_vti0: left promiscuous mode [ 185.482895][ T9559] ip_vti0: left allmulticast mode [ 185.488990][ T9559] ip6_vti0: left promiscuous mode [ 185.494659][ T9559] ip6_vti0: left allmulticast mode [ 185.501072][ T9559] sit0: left promiscuous mode [ 185.506944][ T9559] sit0: left allmulticast mode [ 185.513352][ T9559] ip6tnl0: left promiscuous mode [ 185.518878][ T9559] ip6tnl0: left allmulticast mode [ 185.525215][ T9559] ip6gre0: left promiscuous mode [ 185.530266][ T9559] ip6gre0: left allmulticast mode [ 185.536788][ T9559] syz_tun: left promiscuous mode [ 185.541899][ T9559] syz_tun: left allmulticast mode [ 185.548404][ T9559] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 185.587772][ T9561] netlink: 168 bytes leftover after parsing attributes in process `syz.1.895'. [ 185.597703][ T9561] netlink: 144 bytes leftover after parsing attributes in process `syz.1.895'. [ 185.650683][ T9563] netlink: 'syz.5.896': attribute type 1 has an invalid length. [ 185.658835][ T9563] netlink: 228 bytes leftover after parsing attributes in process `syz.5.896'. [ 185.670876][ T9564] netlink: 'syz.5.896': attribute type 1 has an invalid length. [ 185.679151][ T9564] netlink: 228 bytes leftover after parsing attributes in process `syz.5.896'. [ 185.691855][ T9561] netlink: 104 bytes leftover after parsing attributes in process `syz.1.895'. [ 185.753413][ T9564] netlink: 'syz.5.896': attribute type 3 has an invalid length. [ 185.806142][ T9564] netlink: 182108 bytes leftover after parsing attributes in process `syz.5.896'. [ 185.919350][ T9574] netlink: 146780 bytes leftover after parsing attributes in process `syz.1.899'. [ 185.941057][ T9574] netlink: zone id is out of range [ 186.323277][ T9599] team0: left promiscuous mode [ 186.337116][ T9599] team_slave_0: left promiscuous mode [ 186.343074][ T9599] team_slave_1: left promiscuous mode [ 186.370432][ T9599] netlink: 16 bytes leftover after parsing attributes in process `syz.1.906'. [ 186.555733][ T9606] netlink: 'syz.1.910': attribute type 30 has an invalid length. [ 186.657356][ T9608] netlink: 8 bytes leftover after parsing attributes in process `syz.5.911'. [ 186.701841][ T9610] macvlan3: entered promiscuous mode [ 186.717792][ T9610] syz_tun: entered promiscuous mode [ 186.727212][ T9610] team0: Port device macvlan3 added [ 188.435828][ T9660] netlink: 8 bytes leftover after parsing attributes in process `syz.0.927'. [ 188.453971][ T9652] ip6erspan0: entered promiscuous mode [ 188.645681][ T9669] tipc: Enabled bearer , priority 0 [ 188.776463][ T9669] syzkaller0: entered promiscuous mode [ 188.828426][ T9669] syzkaller0: entered allmulticast mode [ 188.857308][ T9669] tipc: Resetting bearer [ 189.068245][ T9669] tipc: Resetting bearer [ 190.762272][ T9669] tipc: Disabling bearer [ 190.926502][ T9701] __nla_validate_parse: 2 callbacks suppressed [ 190.926523][ T9701] netlink: 20 bytes leftover after parsing attributes in process `syz.3.937'. [ 190.999964][ T9707] netlink: 'syz.5.939': attribute type 13 has an invalid length. [ 191.367129][ T9707] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 191.547782][ T9730] 8021q: adding VLAN 0 to HW filter on device bond4 [ 191.592169][ T9699] infiniband syz1: set active [ 191.597749][ T9699] infiniband syz1: added bond0 [ 191.647598][ T9699] RDS/IB: syz1: added [ 191.666789][ T9730] bond0: (slave bond_slave_0): Releasing backup interface [ 191.677200][ T9730] bond0: (slave bond_slave_1): Releasing backup interface [ 191.703171][ T9730] team_slave_0: left promiscuous mode [ 191.855041][ T9730] team0: Port device team_slave_0 removed [ 191.899599][ T9730] team_slave_1: left promiscuous mode [ 191.943120][ T9730] team0: Port device team_slave_1 removed [ 191.956794][ T9730] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 191.966707][ T9730] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 191.977311][ T9730] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 192.001027][ T9746] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.085209][ T9746] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.160207][ T9746] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.369505][ T9754] vlan2: entered promiscuous mode [ 192.375061][ T9754] erspan0: entered promiscuous mode [ 192.386144][ T9746] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.502407][ T9764] netlink: 12 bytes leftover after parsing attributes in process `syz.0.952'. [ 192.524831][ T9766] bond4: entered promiscuous mode [ 192.530665][ T9766] 8021q: adding VLAN 0 to HW filter on device bond4 [ 192.566275][ T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.611530][ T9766] netlink: 'syz.3.953': attribute type 7 has an invalid length. [ 192.631588][ T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.650432][ T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.697002][ T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.837485][ T9780] netlink: 20 bytes leftover after parsing attributes in process `syz.0.956'. [ 192.943334][ T9783] netlink: 'syz.3.953': attribute type 10 has an invalid length. [ 192.961847][ T9783] netlink: 40 bytes leftover after parsing attributes in process `syz.3.953'. [ 192.984870][ T9783] dummy0: entered promiscuous mode [ 192.990938][ T9783] bridge0: port 3(dummy0) entered blocking state [ 193.007908][ T9785] netlink: 8 bytes leftover after parsing attributes in process `syz.1.957'. [ 193.019969][ T9785] netlink: 8 bytes leftover after parsing attributes in process `syz.1.957'. [ 193.029207][ T9785] netlink: 4 bytes leftover after parsing attributes in process `syz.1.957'. [ 193.044456][ T9783] bridge0: port 3(dummy0) entered disabled state [ 193.054358][ T9783] dummy0: entered allmulticast mode [ 193.057148][ T9790] netlink: 8 bytes leftover after parsing attributes in process `syz.0.958'. [ 193.072503][ T9783] bridge0: port 3(dummy0) entered blocking state [ 193.079136][ T9783] bridge0: port 3(dummy0) entered forwarding state [ 193.087564][ T9790] netlink: 8 bytes leftover after parsing attributes in process `syz.0.958'. [ 193.138503][ T9785] netlink: 8 bytes leftover after parsing attributes in process `syz.1.957'. [ 193.139455][ T7558] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.161078][ T7558] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.211873][ T7558] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.236466][ T7558] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.513443][ T9898] vlan2: entered promiscuous mode [ 196.557889][ T9941] __nla_validate_parse: 3 callbacks suppressed [ 196.557909][ T9941] netlink: 12 bytes leftover after parsing attributes in process `syz.0.994'. [ 196.932273][ T9951] netlink: 48 bytes leftover after parsing attributes in process `syz.1.996'. [ 197.122275][ T30] audit: type=1800 audit(1759223008.816:5): pid=9958 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.999" name=CB dev="tmpfs" ino=290 res=0 errno=0 [ 197.240325][ T9963] bridge0: entered allmulticast mode [ 197.246503][ T9963] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1000'. [ 197.472192][ T9974] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1002'. [ 197.485403][ T9974] netlink: 'syz.1.1002': attribute type 30 has an invalid length. [ 197.547329][ T9974] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1002'. [ 197.614500][ T9974] netlink: 'syz.1.1002': attribute type 30 has an invalid length. [ 197.995172][T10001] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1009'. [ 198.166304][T10008] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1011'. [ 198.565875][T10027] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1016'. [ 198.652509][T10032] syz_tun: entered allmulticast mode [ 198.700131][T10033] dvmrp8: entered allmulticast mode [ 199.115494][T10053] tipc: Enabled bearer , priority 0 [ 199.190094][T10053] syzkaller0: entered promiscuous mode [ 199.196246][T10053] syzkaller0: entered allmulticast mode [ 199.210289][T10053] tipc: Resetting bearer [ 199.228618][T10052] tipc: Resetting bearer [ 201.061113][T10052] tipc: Disabling bearer [ 201.271284][T10098] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1036'. [ 201.288959][T10099] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1036'. [ 201.342825][T10101] netlink: set zone limit has 8 unknown bytes [ 201.350878][T10100] tipc: Enabled bearer , priority 0 [ 201.362424][T10098] tipc: Enabled bearer , priority 0 [ 201.370975][T10098] syzkaller0: entered promiscuous mode [ 201.376715][T10098] syzkaller0: entered allmulticast mode [ 201.392181][T10098] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 201.416116][T10098] tipc: Resetting bearer [ 201.422625][T10099] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 201.443032][T10094] tipc: Resetting bearer [ 201.460486][T10094] tipc: Disabling bearer [ 201.666712][ T5880] Bluetooth: hci1: command 0x0406 tx timeout [ 201.673626][ T5182] Bluetooth: hci0: command 0x0c1a tx timeout [ 201.673652][ T5881] Bluetooth: hci2: command 0x0406 tx timeout [ 201.679666][ T5876] Bluetooth: hci3: command 0x0406 tx timeout [ 202.115410][T10095] tipc: Disabling bearer [ 202.264818][T10140] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1043'. [ 202.481278][T10149] Can't find ip_set type hash9ip,port,ip [ 202.726614][T10161] tipc: Enabling of bearer rejected, failed to enable media [ 202.934920][T10174] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1051'. [ 202.971933][T10177] tipc: Started in network mode [ 202.984973][T10177] tipc: Node identity eae6fe4fc496, cluster identity 4711 [ 202.999861][T10177] tipc: Enabled bearer , priority 0 [ 203.031058][T10177] syzkaller0: entered promiscuous mode [ 203.054658][T10177] syzkaller0: entered allmulticast mode [ 203.145944][T10177] tipc: Resetting bearer [ 203.216104][T10188] netlink: 'syz.3.1056': attribute type 1 has an invalid length. [ 203.244983][T10177] 8021q: adding VLAN 0 to HW filter on device bond5 [ 203.275786][T10177] bridge0: port 1(bond5) entered blocking state [ 203.287094][T10140] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1043'. [ 203.297157][T10177] bridge0: port 1(bond5) entered disabled state [ 203.304544][T10177] bond5: entered allmulticast mode [ 203.317303][T10177] bond5: entered promiscuous mode [ 203.368501][T10188] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 203.435129][T10176] tipc: Resetting bearer [ 203.481982][T10176] tipc: Disabling bearer [ 204.261894][T10239] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 2, id = 0 [ 204.330377][T10238] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1067'. [ 204.353866][T10243] netlink: 'syz.4.1066': attribute type 3 has an invalid length. [ 204.368807][T10243] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1066'. [ 204.540010][T10243] 8021q: adding VLAN 0 to HW filter on device bond6 [ 204.925036][T10272] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1075'. [ 204.940520][T10272] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1075'. [ 205.307687][T10287] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1081'. [ 205.320610][T10301] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1084'. [ 205.741390][T10329] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1087'. [ 206.017894][T10329] bond1: entered promiscuous mode [ 206.171503][T10329] 8021q: adding VLAN 0 to HW filter on device bond1 [ 206.245851][T10364] netlink: 'syz.0.1098': attribute type 13 has an invalid length. [ 206.253707][T10364] netlink: 'syz.0.1098': attribute type 17 has an invalid length. [ 206.262438][T10363] sctp: [Deprecated]: syz.5.1094 (pid 10363) Use of int in max_burst socket option. [ 206.262438][T10363] Use struct sctp_assoc_value instead [ 206.283240][T10338] 8021q: adding VLAN 0 to HW filter on device bond1 [ 206.313561][T10338] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 206.335702][T10338] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 206.505479][T10364] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.528397][T10364] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.563844][T10364] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 206.621054][T10353] syzkaller1: entered promiscuous mode [ 206.636467][T10353] syzkaller1: entered allmulticast mode [ 206.707877][T10375] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 206.798405][ T7564] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 206.820978][ T7564] bond0: (slave bond_slave_1): link status definitely down, disabling slave [ 206.832272][ T7564] bond0: (slave team0): link status definitely down, disabling slave [ 206.843585][ T7564] bond0: now running without any active interface! [ 206.857513][T10364] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 206.950786][T10364] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 207.524944][T10400] __nla_validate_parse: 2 callbacks suppressed [ 207.524965][T10400] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1104'. [ 207.656055][T10405] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1106'. [ 207.848555][T10409] tipc: Enabled bearer , priority 0 [ 207.863923][T10413] syzkaller0: entered promiscuous mode [ 207.873733][T10413] syzkaller0: entered allmulticast mode [ 208.049339][T10409] tipc: Resetting bearer [ 208.159792][T10407] tipc: Resetting bearer [ 208.191114][T10407] tipc: Disabling bearer [ 208.281478][T10421] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1112'. [ 208.291705][T10421] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1112'. [ 208.302702][T10421] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1112'. [ 208.505436][T10432] wg1 speed is unknown, defaulting to 1000 [ 208.544666][T10432] wg1 speed is unknown, defaulting to 1000 [ 208.639673][T10436] xfrm0: entered promiscuous mode [ 208.667270][T10436] xfrm0: entered allmulticast mode [ 208.682381][T10432] wg1 speed is unknown, defaulting to 1000 [ 208.713293][T10427] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1114'. [ 209.054033][T10441] netlink: 'syz.3.1117': attribute type 1 has an invalid length. [ 209.065708][T10441] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1117'. [ 209.106130][T10441] NCSI netlink: No device for ifindex 0 [ 209.127157][T10441] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1117'. [ 209.142568][T10441] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1117'. [ 209.166687][T10441] 0ªX¹¦À: renamed from caif0 [ 209.182745][T10441] 0ªX¹¦À: entered allmulticast mode [ 209.189072][T10441] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 209.211912][T10441] netlink: 'syz.3.1117': attribute type 1 has an invalid length. [ 209.243755][T10441] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1117'. [ 209.254208][T10441] NCSI netlink: No device for ifindex 0 [ 209.350761][T10447] netlink: 'syz.3.1118': attribute type 5 has an invalid length. [ 209.688832][T10432] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 209.709494][T10432] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 209.781834][T10465] netlink: 'syz.3.1122': attribute type 10 has an invalid length. [ 209.886660][T10465] team0: Cannot enslave team device to itself [ 210.045128][T10432] wg1 speed is unknown, defaulting to 1000 [ 210.073346][T10432] wg1 speed is unknown, defaulting to 1000 [ 210.086605][T10432] wg1 speed is unknown, defaulting to 1000 [ 210.152857][T10432] wg1 speed is unknown, defaulting to 1000 [ 210.165515][T10432] wg1 speed is unknown, defaulting to 1000 [ 210.193700][T10432] wg1 speed is unknown, defaulting to 1000 [ 210.255357][T10432] wg1 speed is unknown, defaulting to 1000 [ 210.268493][T10432] wg1 speed is unknown, defaulting to 1000 [ 210.285361][T10432] wg1 speed is unknown, defaulting to 1000 [ 211.043689][T10498] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 212.551111][T10583] __nla_validate_parse: 9 callbacks suppressed [ 212.551132][T10583] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1156'. [ 212.584638][T10583] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1156'. [ 212.600723][T10583] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1156'. [ 212.851580][T10561] wg1 speed is unknown, defaulting to 1000 [ 213.391318][T10597] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1159'. [ 213.401109][T10597] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1159'. [ 213.963434][T10616] ip6tnl1: entered promiscuous mode [ 213.985265][T10616] ip6tnl1: entered allmulticast mode [ 213.986235][T10622] netlink: 'syz.4.1162': attribute type 1 has an invalid length. [ 213.992396][T10616] team0: Device ip6tnl1 is up. Set it down before adding it as a team port [ 214.000382][T10622] netlink: 184 bytes leftover after parsing attributes in process `syz.4.1162'. [ 214.025295][T10611] netlink: 676 bytes leftover after parsing attributes in process `syz.0.1160'. [ 214.078231][T10611] netlink: 676 bytes leftover after parsing attributes in process `syz.0.1160'. [ 214.097092][T10622] netlink: 'syz.4.1162': attribute type 1 has an invalid length. [ 214.219425][T10579] wg1 speed is unknown, defaulting to 1000 [ 214.550055][T10653] netlink: 'syz.0.1170': attribute type 1 has an invalid length. [ 214.686727][T10653] bond1: (slave bridge0): making interface the new active one [ 214.695587][T10653] bond1: (slave bridge0): Enslaving as an active interface with an up link [ 214.848262][T10651] wg1 speed is unknown, defaulting to 1000 [ 215.252624][T10668] sctp: [Deprecated]: syz.0.1172 (pid 10668) Use of int in max_burst socket option. [ 215.252624][T10668] Use struct sctp_assoc_value instead [ 215.510755][T10661] netlink: 'syz.0.1172': attribute type 4 has an invalid length. [ 215.573094][T10676] netlink: 'syz.4.1174': attribute type 1 has an invalid length. [ 215.732410][T10683] FAULT_INJECTION: forcing a failure. [ 215.732410][T10683] name failslab, interval 1, probability 0, space 0, times 0 [ 215.746218][T10683] CPU: 0 UID: 0 PID: 10683 Comm: syz.4.1176 Not tainted syzkaller #0 PREEMPT(full) [ 215.746246][T10683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 215.746258][T10683] Call Trace: [ 215.746266][T10683] [ 215.746274][T10683] dump_stack_lvl+0x189/0x250 [ 215.746301][T10683] ? __pfx____ratelimit+0x10/0x10 [ 215.746323][T10683] ? __pfx_dump_stack_lvl+0x10/0x10 [ 215.746345][T10683] ? __pfx__printk+0x10/0x10 [ 215.746378][T10683] ? __pfx___might_resched+0x10/0x10 [ 215.746406][T10683] ? fs_reclaim_acquire+0x7d/0x100 [ 215.746439][T10683] should_fail_ex+0x414/0x560 [ 215.746472][T10683] should_failslab+0xa8/0x100 [ 215.746501][T10683] __kmalloc_cache_noprof+0x70/0x3d0 [ 215.746526][T10683] ? nf_tables_newtable+0x435/0x1890 [ 215.746564][T10683] nf_tables_newtable+0x435/0x1890 [ 215.746588][T10683] ? nfnetlink_has_listeners+0x22/0x50 [ 215.746641][T10683] nfnetlink_rcv+0x11d6/0x2590 [ 215.746700][T10683] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 215.746777][T10683] ? netlink_deliver_tap+0x2e/0x1b0 [ 215.746820][T10683] netlink_unicast+0x82c/0x9e0 [ 215.746850][T10683] ? __pfx_netlink_unicast+0x10/0x10 [ 215.746873][T10683] ? netlink_sendmsg+0x642/0xb30 [ 215.746893][T10683] ? skb_put+0x11b/0x210 [ 215.746920][T10683] netlink_sendmsg+0x805/0xb30 [ 215.746957][T10683] ? __pfx_netlink_sendmsg+0x10/0x10 [ 215.746985][T10683] ? aa_sock_msg_perm+0xf1/0x1d0 [ 215.747016][T10683] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 215.747036][T10683] ? __pfx_netlink_sendmsg+0x10/0x10 [ 215.747061][T10683] __sock_sendmsg+0x21c/0x270 [ 215.747094][T10683] ____sys_sendmsg+0x505/0x830 [ 215.747127][T10683] ? __pfx_____sys_sendmsg+0x10/0x10 [ 215.747163][T10683] ? import_iovec+0x74/0xa0 [ 215.747192][T10683] ___sys_sendmsg+0x21f/0x2a0 [ 215.747220][T10683] ? __pfx____sys_sendmsg+0x10/0x10 [ 215.747288][T10683] ? __fget_files+0x2a/0x420 [ 215.747314][T10683] ? __fget_files+0x3a0/0x420 [ 215.747353][T10683] __x64_sys_sendmsg+0x19b/0x260 [ 215.747382][T10683] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 215.747419][T10683] ? __pfx_ksys_write+0x10/0x10 [ 215.747441][T10683] ? rcu_is_watching+0x15/0xb0 [ 215.747465][T10683] ? do_syscall_64+0xbe/0x3b0 [ 215.747492][T10683] do_syscall_64+0xfa/0x3b0 [ 215.747512][T10683] ? lockdep_hardirqs_on+0x9c/0x150 [ 215.747533][T10683] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.747558][T10683] ? clear_bhb_loop+0x60/0xb0 [ 215.747583][T10683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.747601][T10683] RIP: 0033:0x7fd8f538eec9 [ 215.747619][T10683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 215.747637][T10683] RSP: 002b:00007fd8f61d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 215.747657][T10683] RAX: ffffffffffffffda RBX: 00007fd8f55e5fa0 RCX: 00007fd8f538eec9 [ 215.747671][T10683] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 215.747684][T10683] RBP: 00007fd8f61d7090 R08: 0000000000000000 R09: 0000000000000000 [ 215.747696][T10683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.747707][T10683] R13: 00007fd8f55e6038 R14: 00007fd8f55e5fa0 R15: 00007ffceb5bb638 [ 215.747741][T10683] [ 216.281820][T10688] tipc: Enabling of bearer rejected, failed to enable media [ 216.343698][T10659] wg1 speed is unknown, defaulting to 1000 [ 216.394501][T10663] wg1 speed is unknown, defaulting to 1000 [ 216.610265][T10702] netlink: 'syz.4.1182': attribute type 1 has an invalid length. [ 216.633272][T10702] netlink: 'syz.4.1182': attribute type 1 has an invalid length. [ 216.966551][T10695] wg1 speed is unknown, defaulting to 1000 [ 217.649570][T10724] syzkaller1: entered promiscuous mode [ 217.659532][T10724] syzkaller1: entered allmulticast mode [ 218.005096][T10730] tipc: Enabling of bearer rejected, failed to enable media [ 218.081341][T10712] wg1 speed is unknown, defaulting to 1000 [ 218.134939][T10698] wg1 speed is unknown, defaulting to 1000 [ 218.500798][T10745] netlink: 'syz.1.1191': attribute type 11 has an invalid length. [ 218.668392][T10749] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1192'. [ 218.974461][T10754] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1193'. [ 219.101839][T10752] digital: digital_start_poll: Unknown protocol [ 219.238686][T10769] xfrm0: left promiscuous mode [ 219.243888][T10769] xfrm0: left allmulticast mode [ 219.573162][T10770] wg1 speed is unknown, defaulting to 1000 [ 219.813865][T10796] netlink: 'syz.4.1204': attribute type 21 has an invalid length. [ 219.889050][T10798] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1204'. [ 219.943049][T10796] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1204'. [ 220.227698][T10814] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1209'. [ 220.256579][T10814] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1209'. [ 220.305468][T10815] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1207'. [ 220.337378][T10815] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1207'. [ 220.441963][T10823] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1211'. [ 220.506490][T10823] netlink: 'syz.1.1211': attribute type 11 has an invalid length. [ 220.539006][T10823] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1211'. [ 220.654512][T10823] netlink: 'syz.1.1211': attribute type 11 has an invalid length. [ 220.857161][T10841] bond0: option packets_per_slave: invalid value (16779898) [ 220.865450][T10841] bond0: option packets_per_slave: allowed values 0 - 65535 [ 220.901844][T10854] netlink: 'syz.1.1217': attribute type 13 has an invalid length. [ 220.920686][T10854] netlink: 'syz.1.1217': attribute type 17 has an invalid length. [ 221.051405][T10852] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.059357][T10852] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.175738][T10861] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 221.240489][T10861] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 221.271965][T10852] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.297401][T10852] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.525206][T10854] ip6tnl0: left promiscuous mode [ 221.585204][T10854] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.599297][T10854] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 221.678947][ T9332] wg1 speed is unknown, defaulting to 1000 [ 221.679032][ T7560] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 221.694201][ T9332] syz0: Port: 1 Link DOWN [ 221.724225][ T7560] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.752734][ T7560] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 221.777230][ T7560] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.812762][ T7560] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 221.844194][ T7560] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.862842][ T7560] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 221.872998][ T7560] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.992752][T10851] wg1 speed is unknown, defaulting to 1000 [ 222.439803][T10855] wg1 speed is unknown, defaulting to 1000 [ 223.276203][T10925] netlink: 'syz.0.1239': attribute type 15 has an invalid length. [ 223.793662][T10960] veth0_to_bond: entered allmulticast mode [ 224.302696][T10984] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 224.559520][T11002] __nla_validate_parse: 6 callbacks suppressed [ 224.559540][T11002] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1264'. [ 224.601699][T11006] netlink: 'syz.4.1265': attribute type 13 has an invalid length. [ 224.635131][T10970] wg1 speed is unknown, defaulting to 1000 [ 225.569942][T11049] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1276'. [ 226.396294][T11087] netlink: 'syz.0.1287': attribute type 1 has an invalid length. [ 226.404407][T11087] netlink: 'syz.0.1287': attribute type 3 has an invalid length. [ 226.412408][T11087] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1287'. [ 226.532881][T11081] wg1 speed is unknown, defaulting to 1000 [ 227.108515][T11104] FAULT_INJECTION: forcing a failure. [ 227.108515][T11104] name failslab, interval 1, probability 0, space 0, times 0 [ 227.145161][T11108] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1294'. [ 227.161202][T11104] CPU: 1 UID: 0 PID: 11104 Comm: syz.1.1292 Not tainted syzkaller #0 PREEMPT(full) [ 227.161224][T11104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 227.161233][T11104] Call Trace: [ 227.161240][T11104] [ 227.161246][T11104] dump_stack_lvl+0x189/0x250 [ 227.161269][T11104] ? __pfx____ratelimit+0x10/0x10 [ 227.161287][T11104] ? __pfx_dump_stack_lvl+0x10/0x10 [ 227.161305][T11104] ? __pfx__printk+0x10/0x10 [ 227.161328][T11104] ? __pfx___might_resched+0x10/0x10 [ 227.161348][T11104] ? fs_reclaim_acquire+0x7d/0x100 [ 227.161374][T11104] should_fail_ex+0x414/0x560 [ 227.161398][T11104] ? rhashtable_init_noprof+0x4ee/0xbb0 [ 227.161413][T11104] should_failslab+0xa8/0x100 [ 227.161436][T11104] __kvmalloc_node_noprof+0x161/0x5f0 [ 227.161456][T11104] ? rhashtable_init_noprof+0x4ee/0xbb0 [ 227.161477][T11104] rhashtable_init_noprof+0x4ee/0xbb0 [ 227.161500][T11104] nft_rhash_init+0x10b/0x3a0 [ 227.161521][T11104] ? __pfx_nft_rhash_init+0x10/0x10 [ 227.161538][T11104] ? __pfx_nft_rhash_key+0x10/0x10 [ 227.161555][T11104] ? __pfx_nft_rhash_obj+0x10/0x10 [ 227.161573][T11104] ? __pfx_nft_rhash_cmp+0x10/0x10 [ 227.161594][T11104] ? nf_tables_newset+0x1396/0x2530 [ 227.161613][T11104] ? kfree+0x18e/0x440 [ 227.161634][T11104] nf_tables_newset+0x1c04/0x2530 [ 227.161665][T11104] ? __pfx_nf_tables_newset+0x10/0x10 [ 227.161714][T11104] ? __nla_parse+0x40/0x60 [ 227.161733][T11104] nfnetlink_rcv+0x11d6/0x2590 [ 227.161780][T11104] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 227.161808][T11104] ? ref_tracker_free+0x63a/0x7d0 [ 227.161855][T11104] ? __netlink_deliver_tap+0x807/0x850 [ 227.161874][T11104] ? netlink_deliver_tap+0x2e/0x1b0 [ 227.161908][T11104] netlink_unicast+0x82c/0x9e0 [ 227.161934][T11104] ? __pfx_netlink_unicast+0x10/0x10 [ 227.161955][T11104] ? netlink_sendmsg+0x642/0xb30 [ 227.161974][T11104] ? skb_put+0x11b/0x210 [ 227.161999][T11104] netlink_sendmsg+0x805/0xb30 [ 227.162031][T11104] ? __pfx_netlink_sendmsg+0x10/0x10 [ 227.162056][T11104] ? aa_sock_msg_perm+0xf1/0x1d0 [ 227.162086][T11104] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 227.162105][T11104] ? __pfx_netlink_sendmsg+0x10/0x10 [ 227.162127][T11104] __sock_sendmsg+0x21c/0x270 [ 227.162158][T11104] ____sys_sendmsg+0x505/0x830 [ 227.162188][T11104] ? __pfx_____sys_sendmsg+0x10/0x10 [ 227.162223][T11104] ? import_iovec+0x74/0xa0 [ 227.162251][T11104] ___sys_sendmsg+0x21f/0x2a0 [ 227.162275][T11104] ? __pfx____sys_sendmsg+0x10/0x10 [ 227.162336][T11104] ? __fget_files+0x2a/0x420 [ 227.162362][T11104] ? __fget_files+0x3a0/0x420 [ 227.162401][T11104] __x64_sys_sendmsg+0x19b/0x260 [ 227.162428][T11104] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 227.162464][T11104] ? __pfx_ksys_write+0x10/0x10 [ 227.162485][T11104] ? rcu_is_watching+0x15/0xb0 [ 227.162509][T11104] ? do_syscall_64+0xbe/0x3b0 [ 227.162537][T11104] do_syscall_64+0xfa/0x3b0 [ 227.162557][T11104] ? lockdep_hardirqs_on+0x9c/0x150 [ 227.162577][T11104] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.162597][T11104] ? clear_bhb_loop+0x60/0xb0 [ 227.162621][T11104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.162639][T11104] RIP: 0033:0x7f715cd8eec9 [ 227.162657][T11104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 227.162682][T11104] RSP: 002b:00007f715dc69038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 227.162701][T11104] RAX: ffffffffffffffda RBX: 00007f715cfe5fa0 RCX: 00007f715cd8eec9 [ 227.162714][T11104] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 227.162726][T11104] RBP: 00007f715dc69090 R08: 0000000000000000 R09: 0000000000000000 [ 227.162736][T11104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 227.162746][T11104] R13: 00007f715cfe6038 R14: 00007f715cfe5fa0 R15: 00007fff4feb60b8 [ 227.162778][T11104] [ 227.592389][T11112] netlink: 'syz.3.1293': attribute type 13 has an invalid length. [ 227.634213][T11112] netlink: 'syz.3.1293': attribute type 17 has an invalid length. [ 227.725873][T11118] sctp: [Deprecated]: syz.4.1297 (pid 11118) Use of int in max_burst socket option deprecated. [ 227.725873][T11118] Use struct sctp_assoc_value instead [ 227.803152][T11112] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.820237][T11112] 0ªX¹¦À: left allmulticast mode [ 227.830595][T11112] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 227.884547][T11125] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 227.906301][T11118] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1297'. [ 227.939129][T11106] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 228.018967][T11131] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1300'. [ 228.053486][T11131] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1300'. [ 228.244665][T11134] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1300'. [ 229.060926][T11115] wg1 speed is unknown, defaulting to 1000 [ 229.245288][T11147] syzkaller1: entered promiscuous mode [ 229.251593][T11147] syzkaller1: entered allmulticast mode [ 229.337439][T11148] syzkaller0: entered promiscuous mode [ 229.355766][T11148] syzkaller0: entered allmulticast mode [ 232.410295][T11195] syzkaller1: entered promiscuous mode [ 232.419853][T11195] syzkaller1: entered allmulticast mode [ 232.679339][T11210] netlink: 'syz.1.1313': attribute type 3 has an invalid length. [ 232.705852][T11204] syz_tun: entered allmulticast mode [ 232.789849][T11204] syz_tun: left allmulticast mode [ 233.030066][T11234] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1321'. [ 233.033248][T11235] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1321'. [ 233.097037][T11238] batadv0: left promiscuous mode [ 233.112346][T11238] batadv0: left allmulticast mode [ 233.144347][T11238] macvlan2: left promiscuous mode [ 233.149928][T11238] macvlan2: left allmulticast mode [ 233.157685][T11238] bond2: left promiscuous mode [ 233.174240][T11238] bridge1: left promiscuous mode [ 233.311153][ T59] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d [ 233.840514][T11260] netlink: 'syz.4.1326': attribute type 1 has an invalid length. [ 234.211257][T11263] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1327'. [ 234.420894][T11287] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1333'. [ 234.467264][T11283] bridge3: entered promiscuous mode [ 234.488501][T11289] vlan0: entered promiscuous mode [ 234.493723][T11289] erspan0: entered promiscuous mode [ 234.504559][T11285] vlan0: left promiscuous mode [ 234.509380][T11285] erspan0: left promiscuous mode [ 234.581430][T11294] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1335'. [ 234.692591][T11294] tipc: Enabled bearer , priority 0 [ 234.864410][T11279] wg1 speed is unknown, defaulting to 1000 [ 234.968367][T11304] 8021q: adding VLAN 0 to HW filter on device bond7 [ 234.983113][T11304] bridge0: port 2(bond7) entered blocking state [ 235.000902][T11304] bridge0: port 2(bond7) entered disabled state [ 235.012769][T11304] bond7: entered allmulticast mode [ 235.022525][T11310] netlink: 'syz.4.1337': attribute type 1 has an invalid length. [ 235.038538][T11304] bond7: entered promiscuous mode [ 235.521048][T11333] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.1342'. [ 235.533760][T11327] pimreg: entered allmulticast mode [ 235.556695][T11327] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1340'. [ 235.667449][T11339] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1344'. [ 235.712139][T11341] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input7 [ 235.743352][T11343] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1343'. [ 235.743368][T11344] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1343'. [ 235.762622][T11343] 8021q: VLANs not supported on sit0 [ 235.815868][T11344] 8021q: VLANs not supported on sit0 [ 236.243741][T11368] netlink: 'syz.1.1349': attribute type 4 has an invalid length. [ 236.440195][T11334] wg1 speed is unknown, defaulting to 1000 [ 236.739054][T11375] bond0: (slave team0): Releasing backup interface [ 236.747408][T11375] team0 (unregistering): left promiscuous mode [ 236.753798][T11375] team_slave_0: left promiscuous mode [ 236.759768][T11375] team_slave_1: left promiscuous mode [ 236.770993][T11375] team0 (unregistering): Port device team_slave_0 removed [ 236.782819][T11375] team0 (unregistering): Port device team_slave_1 removed [ 237.019984][T11386] netlink: 'syz.5.1352': attribute type 1 has an invalid length. [ 237.796601][T11408] syzkaller0: entered promiscuous mode [ 237.802383][T11408] syzkaller0: entered allmulticast mode [ 237.810325][T11410] mac80211_hwsim hwsim20 wlan0: entered promiscuous mode [ 237.818389][T11410] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 237.835209][T11411] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 240.013571][T11454] pim6reg: entered allmulticast mode [ 240.129574][T11458] IPVS: set_ctl: invalid protocol: 47 172.20.20.170:20004 [ 240.158178][T11458] __nla_validate_parse: 9 callbacks suppressed [ 240.158197][T11458] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1367'. [ 240.175953][T11458] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1367'. [ 240.187706][T11461] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1368'. [ 240.209051][T11464] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1369'. [ 240.629233][T11419] wg1 speed is unknown, defaulting to 1000 [ 240.733523][T11486] netlink: 'syz.0.1372': attribute type 13 has an invalid length. [ 240.742408][T11486] netlink: 'syz.0.1372': attribute type 17 has an invalid length. [ 240.786048][T11486] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 241.651256][T11521] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1380'. [ 241.734785][T11521] vlan2: entered allmulticast mode [ 241.897342][T11538] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1384'. [ 241.974718][T11538] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 241.987456][T11538] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 242.049786][T11540] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1383'. [ 243.183535][T11558] wg1 speed is unknown, defaulting to 1000 [ 243.205964][T11591] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1394'. [ 243.300582][T11596] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1394'. [ 243.689828][T11619] netem: incorrect gi model size [ 243.714948][T11619] netem: change failed [ 243.754009][T11624] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1400'. [ 243.830350][T11624] 0ªX¹¦À: renamed from caif0 [ 243.868575][T11624] 0ªX¹¦À: entered allmulticast mode [ 243.874017][T11624] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 244.005829][T11563] wg1 speed is unknown, defaulting to 1000 [ 244.451362][T11623] wg1 speed is unknown, defaulting to 1000 [ 244.581625][T11642] Bluetooth: MGMT ver 1.23 [ 244.744667][T11644] lo speed is unknown, defaulting to 1000 [ 244.768705][T11644] lo speed is unknown, defaulting to 1000 [ 244.841754][T11644] lo speed is unknown, defaulting to 1000 [ 244.916764][T11644] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 245.097294][T11644] lo speed is unknown, defaulting to 1000 [ 245.118937][T11644] lo speed is unknown, defaulting to 1000 [ 245.189085][T11644] lo speed is unknown, defaulting to 1000 [ 245.225701][T11644] lo speed is unknown, defaulting to 1000 [ 245.261035][T11644] lo speed is unknown, defaulting to 1000 [ 245.311307][T11644] lo speed is unknown, defaulting to 1000 [ 245.342266][T11644] lo speed is unknown, defaulting to 1000 [ 246.033360][T11682] __nla_validate_parse: 3 callbacks suppressed [ 246.033382][T11682] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1414'. [ 246.067190][T11680] bond_slave_0: entered promiscuous mode [ 246.073164][T11680] bond_slave_1: entered promiscuous mode [ 246.104736][T11680] macsec1: entered promiscuous mode [ 246.109993][T11680] bond0: entered promiscuous mode [ 246.124701][T11680] macsec1: entered allmulticast mode [ 246.130220][T11680] bond0: entered allmulticast mode [ 246.141222][T11680] bond_slave_0: entered allmulticast mode [ 246.147819][T11680] bond_slave_1: entered allmulticast mode [ 246.306861][T11694] netlink: 'syz.0.1416': attribute type 1 has an invalid length. [ 246.322900][T11693] bridge0: entered promiscuous mode [ 246.333274][T11693] bridge0: port 4(macvlan2) entered blocking state [ 246.353244][T11693] bridge0: port 4(macvlan2) entered disabled state [ 246.371758][T11693] macvlan2: entered allmulticast mode [ 246.382711][T11693] bridge0: entered allmulticast mode [ 246.404590][T11693] macvlan2: left allmulticast mode [ 246.420999][T11693] bridge0: left allmulticast mode [ 246.433144][T11693] bridge0: left promiscuous mode [ 246.466111][T11699] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1416'. [ 247.238665][T11694] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 247.581471][T11724] xfrm0: entered promiscuous mode [ 247.612344][T11724] xfrm0: entered allmulticast mode [ 248.245524][T11724] wg1 speed is unknown, defaulting to 1000 [ 248.253278][T11724] lo speed is unknown, defaulting to 1000 [ 248.997018][T11769] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 249.036197][T11767] netlink: 'syz.5.1431': attribute type 12 has an invalid length. [ 249.293659][T11749] wg1 speed is unknown, defaulting to 1000 [ 249.347249][T11749] lo speed is unknown, defaulting to 1000 [ 249.503102][T11784] netlink: 'syz.1.1436': attribute type 1 has an invalid length. [ 249.527741][T11784] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1436'. [ 249.846275][T11793] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 249.924416][T11793] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 249.986731][T11793] sch_tbf: burst 2 is lower than device lo mtu (81) ! [ 250.077511][T11802] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 250.093162][T11802] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 250.319877][T11816] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1443'. [ 250.333835][T11816] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1443'. [ 250.370072][T11816] netlink: 'syz.4.1443': attribute type 3 has an invalid length. [ 250.378277][T11816] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1443'. [ 250.783193][T11824] syzkaller1: entered promiscuous mode [ 250.793252][T11824] syzkaller1: entered allmulticast mode [ 251.793943][T11834] wg1 speed is unknown, defaulting to 1000 [ 251.812399][T11834] lo speed is unknown, defaulting to 1000 [ 252.077436][T11849] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 252.094273][T11849] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.248851][T11849] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 252.262129][T11849] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.361877][T11849] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 252.373900][T11849] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.419585][T11836] wg1 speed is unknown, defaulting to 1000 [ 252.439398][T11849] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 252.474370][T11849] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.534684][T11836] lo speed is unknown, defaulting to 1000 [ 252.593852][T11688] Set syz1 is full, maxelem 65536 reached [ 252.827474][ T4008] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.851300][ T4008] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.903794][ T4008] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.921691][ T4008] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.033118][ T59] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.045884][ T59] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.092092][ T59] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.112181][ T59] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.510764][ T9340] hid-generic 0005:0007:0008.0001: unknown main item tag 0x4 [ 253.533688][ T9340] hid-generic 0005:0007:0008.0001: reserved main item tag 0xe [ 253.543691][ T9340] hid-generic 0005:0007:0008.0001: item fetching failed at offset 6/7 [ 253.561439][ T9340] hid-generic 0005:0007:0008.0001: probe with driver hid-generic failed with error -22 [ 253.600900][T11897] pimreg: entered allmulticast mode [ 253.646967][T11897] tipc: Enabled bearer , priority 0 [ 253.655754][T11897] syzkaller0: entered promiscuous mode [ 253.666838][T11897] syzkaller0: entered allmulticast mode [ 253.689833][T11896] tipc: Resetting bearer [ 253.739822][T11896] tipc: Disabling bearer [ 253.782943][T11908] xfrm0: entered promiscuous mode [ 253.799238][T11908] xfrm0: entered allmulticast mode [ 253.832104][T11899] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1463'. [ 253.925217][T11913] netlink: 'syz.0.1466': attribute type 3 has an invalid length. [ 254.059198][T11917] netlink: 'syz.3.1467': attribute type 1 has an invalid length. [ 254.125939][T11908] wg1 speed is unknown, defaulting to 1000 [ 254.133828][T11908] lo speed is unknown, defaulting to 1000 [ 254.517883][T11942] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1474'. [ 254.550396][T11942] netlink: 35 bytes leftover after parsing attributes in process `syz.5.1474'. [ 254.584345][T11942] netlink: 'syz.5.1474': attribute type 5 has an invalid length. [ 254.592605][T11942] netlink: 'syz.5.1474': attribute type 6 has an invalid length. [ 254.600907][T11942] netlink: 35 bytes leftover after parsing attributes in process `syz.5.1474'. [ 254.723524][T11923] wg1 speed is unknown, defaulting to 1000 [ 254.751871][T11923] lo speed is unknown, defaulting to 1000 [ 254.819292][T11954] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1478'. [ 255.169676][T11963] netlink: 'syz.5.1479': attribute type 21 has an invalid length. [ 255.215207][T11963] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1479'. [ 255.227977][T11963] IPv6: Can't replace route, no match found [ 255.309523][T11972] netlink: 'syz.0.1480': attribute type 4 has an invalid length. [ 255.358017][T11966] netlink: 'syz.0.1480': attribute type 4 has an invalid length. [ 255.541826][T11967] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 255.782748][T11987] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1483'. [ 255.943599][T11961] wg1 speed is unknown, defaulting to 1000 [ 256.009737][T11961] lo speed is unknown, defaulting to 1000 [ 256.258875][T12002] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1486'. [ 256.289804][T12002] netlink: 'syz.3.1486': attribute type 1 has an invalid length. [ 256.315891][T12002] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1486'. [ 256.578420][T12006] netlink: 344 bytes leftover after parsing attributes in process `syz.4.1487'. [ 256.923844][T12022] dvmrp1: tun_chr_ioctl cmd 1074025673 [ 257.133442][T12033] netlink: 'syz.5.1496': attribute type 4 has an invalid length. [ 257.146337][T12033] netlink: 'syz.5.1496': attribute type 4 has an invalid length. [ 257.213474][T12035] syzkaller1: entered promiscuous mode [ 257.225095][T12035] syzkaller1: entered allmulticast mode [ 257.417687][T12049] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 257.515337][T12049] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 257.527575][T12057] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input8 [ 257.849716][T12047] wg1 speed is unknown, defaulting to 1000 [ 257.888417][T12047] lo speed is unknown, defaulting to 1000 [ 258.492557][T12056] wg1 speed is unknown, defaulting to 1000 [ 258.525875][T12056] lo speed is unknown, defaulting to 1000 [ 259.829381][T12115] wg1 speed is unknown, defaulting to 1000 [ 259.851030][T12115] lo speed is unknown, defaulting to 1000 [ 260.494166][T12161] validate_nla: 2 callbacks suppressed [ 260.494184][T12161] netlink: 'syz.3.1528': attribute type 1 has an invalid length. [ 260.508845][T12161] __nla_validate_parse: 3 callbacks suppressed [ 260.508861][T12161] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1528'. [ 260.702514][T12173] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1530'. [ 260.725051][T12173] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1530'. [ 260.935483][T12186] gtp0: entered promiscuous mode [ 260.940588][T12186] gtp0: entered allmulticast mode [ 261.790272][T12221] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1541'. [ 261.795056][T12212] wg1 speed is unknown, defaulting to 1000 [ 261.807478][T12212] lo speed is unknown, defaulting to 1000 [ 261.836493][T12221] team1: entered promiscuous mode [ 261.842556][T12221] team1: entered allmulticast mode [ 261.850853][T12222] netlink: 'syz.5.1541': attribute type 1 has an invalid length. [ 261.880829][T12222] netlink: 228 bytes leftover after parsing attributes in process `syz.5.1541'. [ 261.978180][T12221] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1541'. [ 262.303920][T12239] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1545'. [ 262.345081][T12224] wg1 speed is unknown, defaulting to 1000 [ 262.353017][T12224] lo speed is unknown, defaulting to 1000 [ 262.858576][T12257] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1551'. [ 262.871824][T12255] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1550'. [ 262.880832][T12257] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1551'. [ 262.916178][T12255] syz_tun (unregistering): left allmulticast mode [ 264.711581][T12345] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 2, id = 0 [ 264.729543][T12347] FAULT_INJECTION: forcing a failure. [ 264.729543][T12347] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 264.794794][T12347] CPU: 1 UID: 0 PID: 12347 Comm: syz.4.1572 Not tainted syzkaller #0 PREEMPT(full) [ 264.794823][T12347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 264.794845][T12347] Call Trace: [ 264.794854][T12347] [ 264.794863][T12347] dump_stack_lvl+0x189/0x250 [ 264.794890][T12347] ? __pfx____ratelimit+0x10/0x10 [ 264.794912][T12347] ? __pfx_dump_stack_lvl+0x10/0x10 [ 264.794934][T12347] ? __pfx__printk+0x10/0x10 [ 264.794960][T12347] ? __might_fault+0xb0/0x130 [ 264.794997][T12347] should_fail_ex+0x414/0x560 [ 264.795030][T12347] _copy_from_user+0x2d/0xb0 [ 264.795055][T12347] do_ip_vs_set_ctl+0x2d3/0xa60 [ 264.795087][T12347] ? rcu_is_watching+0x15/0xb0 [ 264.795106][T12347] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 264.795131][T12347] ? trace_contention_end+0x39/0x120 [ 264.795169][T12347] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 264.795198][T12347] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 264.795219][T12347] ? aa_sk_perm+0x81e/0x950 [ 264.795253][T12347] ? __pfx_aa_sk_perm+0x10/0x10 [ 264.795288][T12347] nf_setsockopt+0x26f/0x290 [ 264.795319][T12347] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 264.795342][T12347] do_sock_setsockopt+0x179/0x1b0 [ 264.795371][T12347] __x64_sys_setsockopt+0x13f/0x1b0 [ 264.795402][T12347] do_syscall_64+0xfa/0x3b0 [ 264.795423][T12347] ? lockdep_hardirqs_on+0x9c/0x150 [ 264.795443][T12347] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.795463][T12347] ? clear_bhb_loop+0x60/0xb0 [ 264.795487][T12347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.795506][T12347] RIP: 0033:0x7fd8f538eec9 [ 264.795524][T12347] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 264.795541][T12347] RSP: 002b:00007fd8f61d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 264.795560][T12347] RAX: ffffffffffffffda RBX: 00007fd8f55e5fa0 RCX: 00007fd8f538eec9 [ 264.795572][T12347] RDX: 000000000000048b RSI: 0000000000000000 RDI: 0000000000000003 [ 264.795583][T12347] RBP: 00007fd8f61d7090 R08: 0000000000000018 R09: 0000000000000000 [ 264.795595][T12347] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 264.795607][T12347] R13: 00007fd8f55e6038 R14: 00007fd8f55e5fa0 R15: 00007ffceb5bb638 [ 264.795645][T12347] [ 265.102266][T12353] batadv_slave_0: entered promiscuous mode [ 265.110116][T12353] batadv_slave_0: entered allmulticast mode [ 265.117524][T12353] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 265.640578][T12374] workqueue: name exceeds WQ_NAME_LEN. Truncating to: žÀ^–>º>ùMv^µâ侦¸ÑKc'A¥»– [ 265.727625][ T5863] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 265.739212][ T5863] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 265.748432][ T5863] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 265.758782][ T5863] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 265.767547][ T5863] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 265.976332][T12383] netlink: 'syz.5.1580': attribute type 4 has an invalid length. [ 266.140144][T12386] wg1 speed is unknown, defaulting to 1000 [ 266.149042][T12386] lo speed is unknown, defaulting to 1000 [ 266.344753][T12396] macsec1: entered promiscuous mode [ 266.354400][T12396] batadv0: entered promiscuous mode [ 266.385161][T12396] batadv0: left promiscuous mode [ 266.543697][T12379] wg1 speed is unknown, defaulting to 1000 [ 266.546084][T12402] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 2, id = 0 [ 266.567778][T12379] lo speed is unknown, defaulting to 1000 [ 267.469309][T12407] wg1 speed is unknown, defaulting to 1000 [ 267.493513][T12407] lo speed is unknown, defaulting to 1000 [ 267.519008][T12379] chnl_net:caif_netlink_parms(): no params data found [ 267.827164][ T51] Bluetooth: hci6: command tx timeout [ 267.902743][T12379] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.924241][T12379] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.934375][T12379] bridge_slave_0: entered allmulticast mode [ 267.950233][T12379] bridge_slave_0: entered promiscuous mode [ 267.959568][T12379] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.967848][T12379] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.975789][T12379] bridge_slave_1: entered allmulticast mode [ 268.000230][T12379] bridge_slave_1: entered promiscuous mode [ 268.007483][T12415] wg1 speed is unknown, defaulting to 1000 [ 268.224908][ T51] Bluetooth: hci4: command 0x0401 tx timeout [ 268.302301][T12415] lo speed is unknown, defaulting to 1000 [ 268.313040][T12379] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 268.329303][T12456] raw_sendmsg: syz.4.1594 forgot to set AF_INET. Fix it! [ 268.362182][T12379] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 268.442785][T12451] pim6reg1: entered promiscuous mode [ 268.449504][T12451] pim6reg1: entered allmulticast mode [ 268.457171][T12379] team0: Port device team_slave_0 added [ 268.466174][T12379] team0: Port device team_slave_1 added [ 268.517038][T12379] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 268.524792][T12379] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 268.552011][T12379] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 268.567969][T12379] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 268.575252][T12379] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 268.612209][T12379] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 268.809912][T12379] hsr_slave_0: entered promiscuous mode [ 268.817514][T12379] hsr_slave_1: entered promiscuous mode [ 268.825179][T12379] debugfs: 'hsr0' already exists in 'hsr' [ 268.831197][T12379] Cannot create hsr debugfs directory [ 269.121791][T12470] __nla_validate_parse: 4 callbacks suppressed [ 269.121810][T12470] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1600'. [ 269.249676][T12475] netlink: 16386 bytes leftover after parsing attributes in process `syz.4.1600'. [ 269.293958][T12472] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1599'. [ 269.369437][T12379] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 269.406743][T12379] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 269.436446][T12379] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 269.451636][T12379] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 269.612084][T12379] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.709832][T12379] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.762161][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.769504][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.812455][ T7560] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.819790][ T7560] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.886768][T12514] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1608'. [ 269.919091][ T5863] Bluetooth: hci6: command tx timeout [ 270.032846][T12520] netlink: 'syz.0.1612': attribute type 39 has an invalid length. [ 270.116150][T12523] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 2, id = 0 [ 270.323020][T12539] netlink: 'syz.5.1616': attribute type 1 has an invalid length. [ 270.359379][T12539] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1616'. [ 270.569557][T12379] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.903879][T12566] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1620'. [ 271.183972][T12534] wg1 speed is unknown, defaulting to 1000 [ 271.245993][T12534] lo speed is unknown, defaulting to 1000 [ 271.809694][T12595] netlink: 'syz.4.1625': attribute type 10 has an invalid length. [ 271.886085][T12595] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 271.992406][ T5863] Bluetooth: hci6: command tx timeout [ 272.039552][T12595] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 272.077952][T12379] veth0_vlan: entered promiscuous mode [ 272.201897][T12379] veth1_vlan: entered promiscuous mode [ 272.257253][T12607] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.1629'. [ 272.267677][T12607] netlink: zone id is out of range [ 272.273662][T12607] netlink: zone id is out of range [ 272.289461][T12607] netlink: zone id is out of range [ 272.294847][T12607] netlink: zone id is out of range [ 272.300239][T12607] netlink: zone id is out of range [ 272.301528][T12588] wg1 speed is unknown, defaulting to 1000 [ 272.306261][T12607] netlink: zone id is out of range [ 272.322310][T12607] netlink: zone id is out of range [ 272.328512][T12607] netlink: zone id is out of range [ 272.335069][T12607] netlink: zone id is out of range [ 272.340205][T12607] netlink: zone id is out of range [ 272.349982][T12588] lo speed is unknown, defaulting to 1000 [ 272.410515][T12379] veth0_macvtap: entered promiscuous mode [ 272.513076][T12379] veth1_macvtap: entered promiscuous mode [ 272.533041][T12610] syz_tun: entered allmulticast mode [ 272.600294][T12610] dvmrp8: entered allmulticast mode [ 272.683467][T12379] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 272.721656][T12379] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 272.740450][T12611] netlink: 'syz.5.1630': attribute type 23 has an invalid length. [ 272.972969][ T195] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.011908][ T195] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.032246][ T195] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.082122][ T195] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.231854][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.251806][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.348132][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.357569][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.381098][T12609] syz_tun: left allmulticast mode [ 273.397951][T12609] dvmrp8: left allmulticast mode [ 273.426737][T12624] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1634'. [ 273.464613][T12624] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1634'. [ 273.734405][T12638] netlink: 'syz.0.1635': attribute type 10 has an invalid length. [ 273.804877][T12624] team0 (unregistering): Port device team_slave_0 removed [ 273.832902][T12624] team0 (unregistering): Port device team_slave_1 removed [ 273.901606][T12610] wg1 speed is unknown, defaulting to 1000 [ 273.961400][T12635] vxcan7: entered allmulticast mode [ 274.074556][ T5863] Bluetooth: hci6: command tx timeout [ 274.176845][T12610] lo speed is unknown, defaulting to 1000 [ 274.235261][T12645] !: renamed from dummy0 (while UP) [ 274.353751][T12657] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1639'. [ 274.649726][T12666] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1640'. [ 275.234468][T12681] ip6tnl1: entered promiscuous mode [ 275.239841][T12681] ip6tnl1: entered allmulticast mode [ 275.260720][T12681] team0: Device ip6tnl1 is of different type [ 275.783856][T12655] wg1 speed is unknown, defaulting to 1000 [ 275.842009][T12655] lo speed is unknown, defaulting to 1000 [ 275.970193][T12694] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input9 [ 276.455293][T12705] netlink: 256 bytes leftover after parsing attributes in process `syz.6.1650'. [ 276.484437][T12705] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1650'. [ 276.526370][T12707] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1652'. [ 276.574612][T12707] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1652'. [ 276.613435][T12707] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1652'. [ 276.808203][T12713] pim6reg: entered allmulticast mode [ 276.816980][T12713] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1654'. [ 277.490340][T12715] wg1 speed is unknown, defaulting to 1000 [ 277.512153][T12715] lo speed is unknown, defaulting to 1000 [ 278.089585][T12743] netlink: 'syz.3.1665': attribute type 7 has an invalid length. [ 278.100093][T12743] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1665'. [ 278.312184][T12753] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1668'. [ 278.332955][T12733] wg1 speed is unknown, defaulting to 1000 [ 278.412800][T12753] gretap0: entered promiscuous mode [ 278.454865][T12753] gretap0: left promiscuous mode [ 278.523312][T12733] lo speed is unknown, defaulting to 1000 [ 279.118629][T12772] wg1 speed is unknown, defaulting to 1000 [ 279.128926][T12772] lo speed is unknown, defaulting to 1000 [ 279.938214][T12809] __nla_validate_parse: 1 callbacks suppressed [ 279.938236][T12809] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1679'. [ 280.745451][T12820] netlink: 'syz.5.1682': attribute type 30 has an invalid length. [ 281.199143][T12823] bridge0: port 3(0!) entered disabled state [ 281.205629][T12823] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.213359][T12823] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.470467][T12823] batadv_slave_0: left promiscuous mode [ 281.484850][T12823] xfrm0: left promiscuous mode [ 281.491397][T12823] xfrm0: left allmulticast mode [ 281.856424][T12823] bridge3: left allmulticast mode [ 281.921459][T12823] bridge4: left allmulticast mode [ 281.994928][T12823] ip6erspan0: left promiscuous mode [ 282.003833][T12823] vlan2: left promiscuous mode [ 282.014471][T12823] erspan0: left promiscuous mode [ 282.034917][T12823] bond4: left promiscuous mode [ 282.088264][T12823] bond0: left allmulticast mode [ 282.093506][T12823] bond_slave_0: left allmulticast mode [ 282.100226][T12823] bond_slave_1: left allmulticast mode [ 282.123208][T12823] bond0: left promiscuous mode [ 282.133778][T12823] bond_slave_0: left promiscuous mode [ 282.156886][T12823] bond_slave_1: left promiscuous mode [ 282.171805][T12823] macsec1: left promiscuous mode [ 282.189756][T12823] macsec1: left allmulticast mode [ 282.215925][T12823] gtp0: left promiscuous mode [ 282.228885][T12823] gtp0: left allmulticast mode [ 282.345641][ T12] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 282.361112][ T12] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.406610][ T12] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 282.442914][ T12] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.481574][ T12] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 282.515326][ T12] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.548120][ T12] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 282.572145][ T12] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.176156][T12841] wg1 speed is unknown, defaulting to 1000 [ 283.187968][T12841] lo speed is unknown, defaulting to 1000 [ 283.217603][T12884] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1693'. [ 283.279356][T12887] siw: device registration error -23 [ 283.369388][T12892] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1696'. [ 284.107634][T12916] netlink: 'syz.0.1701': attribute type 1 has an invalid length. [ 284.250069][T12920] bond3: (slave vcan1): The slave device specified does not support setting the MAC address [ 284.286984][T12920] bond3: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 284.341481][T12920] bond3: (slave vcan1): making interface the new active one [ 284.356123][T12920] bond3: (slave vcan1): Enslaving as an active interface with an up link [ 284.367099][T12906] wg1 speed is unknown, defaulting to 1000 [ 284.376632][T12906] lo speed is unknown, defaulting to 1000 [ 285.136268][T12956] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1707'. [ 285.240668][T12956] bridge_slave_1: left allmulticast mode [ 285.246755][T12956] bridge_slave_1: left promiscuous mode [ 285.252548][T12956] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.264647][T12956] bridge_slave_0: left allmulticast mode [ 285.270328][T12956] bridge_slave_0: left promiscuous mode [ 285.296166][T12956] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.684387][T12977] net_ratelimit: 4 callbacks suppressed [ 285.684408][T12977] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 286.019027][T12991] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1716'. [ 286.247875][T13008] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1721'. [ 286.265799][T13007] macsec1: entered promiscuous mode [ 286.271541][T13007] macsec1: entered allmulticast mode [ 286.300684][T13008] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1721'. [ 286.517337][T13004] wg1 speed is unknown, defaulting to 1000 [ 286.517349][T13015] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 2, id = 0 [ 286.526091][T13004] lo speed is unknown, defaulting to 1000 [ 286.717833][T13020] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1723'. [ 287.103260][T13025] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1724'. [ 287.105226][T13036] netlink: 84 bytes leftover after parsing attributes in process `syz.6.1727'. [ 287.458287][T13051] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1730'. [ 287.644238][T13031] wg1 speed is unknown, defaulting to 1000 [ 287.659447][T13031] lo speed is unknown, defaulting to 1000 [ 288.569556][T13051] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1730'. [ 288.698015][T13062] wg1 speed is unknown, defaulting to 1000 [ 288.725228][T13062] lo speed is unknown, defaulting to 1000 [ 288.972347][T13107] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1744'. [ 289.607970][T13123] bond0: (slave bond_slave_0): Releasing backup interface [ 289.678457][T13123] bond0: (slave bond_slave_1): Releasing backup interface [ 289.724463][T13123] team0: Port device team_slave_0 removed [ 289.742039][T13123] team0: Port device team_slave_1 removed [ 289.760882][T13123] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 289.791304][T13123] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 289.866054][T13123] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 289.914116][T13123] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 289.949745][T13123] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 290.219820][T13156] __nla_validate_parse: 1 callbacks suppressed [ 290.219841][T13156] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1752'. [ 290.236581][T13158] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1753'. [ 290.269630][T13158] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1753'. [ 291.254910][T13215] IPVS: set_ctl: invalid protocol: 229 0.0.0.0:20001 [ 291.295496][T13210] tipc: Enabling of bearer rejected, failed to enable media [ 291.315715][T13212] tipc: Enabling of bearer rejected, failed to enable media [ 292.128167][T13270] netlink: 'syz.4.1779': attribute type 5 has an invalid length. [ 292.143615][T13270] netlink: 'syz.4.1779': attribute type 5 has an invalid length. [ 292.153977][T13270] netlink: 'syz.4.1779': attribute type 5 has an invalid length. [ 292.163158][T13270] netlink: 'syz.4.1779': attribute type 5 has an invalid length. [ 292.171552][T13270] netlink: 'syz.4.1779': attribute type 5 has an invalid length. [ 292.180021][T13270] netlink: 'syz.4.1779': attribute type 5 has an invalid length. [ 292.197994][T13270] netlink: 'syz.4.1779': attribute type 5 has an invalid length. [ 292.208150][T13270] netlink: 'syz.4.1779': attribute type 5 has an invalid length. [ 292.217752][T13270] netlink: 'syz.4.1779': attribute type 5 has an invalid length. [ 292.226288][T13270] netlink: 'syz.4.1779': attribute type 5 has an invalid length. [ 292.367143][T13277] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1781'. [ 292.945816][T13305] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1788'. [ 293.023512][T13313] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1789'. [ 293.056146][T13313] block nbd0: not configured, cannot reconfigure [ 293.381393][T13330] syz_tun: entered allmulticast mode [ 293.466535][T13330] dvmrp8: entered allmulticast mode [ 294.056788][T13330] wg1 speed is unknown, defaulting to 1000 [ 294.065705][T13330] lo speed is unknown, defaulting to 1000 [ 294.247734][T13329] syz_tun: left allmulticast mode [ 294.304390][T13329] dvmrp8: left allmulticast mode [ 294.776332][T13376] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1801'. [ 295.527253][T13401] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1810'. [ 295.723326][T13403] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1811'. [ 295.830341][T13406] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1812'. [ 295.861734][T13406] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1812'. [ 295.893054][T13396] wg1 speed is unknown, defaulting to 1000 [ 295.908525][T13396] lo speed is unknown, defaulting to 1000 [ 385.994831][ T51] Bluetooth: hci5: command 0x0406 tx timeout [ 399.267031][ T31] INFO: task syz.1.1440:11801 blocked for more than 143 seconds. [ 399.275534][ T31] Not tainted syzkaller #0 [ 399.280615][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 399.289433][ T31] task:syz.1.1440 state:D stack:25864 pid:11801 tgid:11800 ppid:5864 task_flags:0x400140 flags:0x00004004 [ 399.302405][ T31] Call Trace: [ 399.305901][ T31] [ 399.308967][ T31] __schedule+0x1798/0x4cc0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 399.313766][ T31] ? __lock_acquire+0xab9/0xd20 [ 399.318660][ T31] ? __lock_acquire+0xab9/0xd20 [ 399.323590][ T31] ? __pfx___schedule+0x10/0x10 [ 399.328590][ T31] ? schedule+0x91/0x360 [ 399.332905][ T31] schedule+0x165/0x360 [ 399.337211][ T31] schedule_preempt_disabled+0x13/0x30 [ 399.342801][ T31] __mutex_lock+0x7e6/0x1350 [ 399.347874][ T31] ? __mutex_lock+0x5bb/0x1350 [ 399.352716][ T31] ? nfsd_nl_listener_set_doit+0x137/0x1690 [ 399.358852][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 399.363905][ T31] ? __asan_memset+0x22/0x50 [ 399.368632][ T31] ? ____sys_sendmsg+0x505/0x830 [ 399.373748][ T31] ? ___sys_sendmsg+0x21f/0x2a0 [ 399.424331][ T31] ? __x64_sys_sendmsg+0x19b/0x260 [ 399.429526][ T31] nfsd_nl_listener_set_doit+0x137/0x1690 [ 399.463307][ T31] ? __pfx___nla_validate_parse+0x10/0x10 [ 399.504161][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 399.510393][ T31] ? __nla_parse+0x40/0x60 [ 399.519037][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 399.525500][ T31] genl_family_rcv_msg_doit+0x212/0x300 [ 399.531100][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 399.537508][ T31] ? bpf_lsm_capable+0x9/0x20 [ 399.542295][ T31] ? security_capable+0x7e/0x2e0 [ 399.547452][ T31] genl_rcv_msg+0x60e/0x790 [ 399.551996][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 399.557235][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 399.563631][ T31] netlink_rcv_skb+0x208/0x470 [ 399.568449][ T31] ? __lock_acquire+0xab9/0xd20 [ 399.573327][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 399.578594][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 399.583919][ T31] ? down_read+0x1ad/0x2e0 [ 399.588633][ T31] genl_rcv+0x28/0x40 [ 399.592729][ T31] netlink_unicast+0x82c/0x9e0 [ 399.597696][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 399.603146][ T31] ? netlink_sendmsg+0x642/0xb30 [ 399.608284][ T31] ? skb_put+0x11b/0x210 [ 399.612648][ T31] netlink_sendmsg+0x805/0xb30 [ 399.617687][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 399.623106][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 399.628228][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 399.633544][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 399.639051][ T31] __sock_sendmsg+0x21c/0x270 [ 399.643878][ T31] ____sys_sendmsg+0x505/0x830 [ 399.649160][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 399.654679][ T31] ? import_iovec+0x74/0xa0 [ 399.659215][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 399.663945][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 399.669521][ T31] ? __fget_files+0x2a/0x420 [ 399.674299][ T31] ? __fget_files+0x3a0/0x420 [ 399.679097][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 399.684111][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 399.689688][ T31] ? rcu_is_watching+0x15/0xb0 [ 399.694923][ T31] ? do_syscall_64+0xbe/0x3b0 [ 399.699679][ T31] do_syscall_64+0xfa/0x3b0 [ 399.704313][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 399.709581][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.715770][ T31] ? clear_bhb_loop+0x60/0xb0 [ 399.720467][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.726445][ T31] RIP: 0033:0x7f715cd8eec9 [ 399.730870][ T31] RSP: 002b:00007f715dc69038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 399.739528][ T31] RAX: ffffffffffffffda RBX: 00007f715cfe5fa0 RCX: 00007f715cd8eec9 [ 399.747898][ T31] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 399.755987][ T31] RBP: 00007f715ce11f91 R08: 0000000000000000 R09: 0000000000000000 [ 399.764128][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 399.772131][ T31] R13: 00007f715cfe6038 R14: 00007f715cfe5fa0 R15: 00007fff4feb60b8 [ 399.780291][ T31] [ 399.783728][ T31] [ 399.783728][ T31] Showing all locks held in the system: [ 399.792032][ T31] 1 lock held by khungtaskd/31: [ 399.814787][ T31] #0: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 399.854993][ T31] 2 locks held by getty/5625: [ 399.859743][ T31] #0: ffff88814dcc60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 399.884149][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 399.914062][ T31] 1 lock held by syz-executor/5860: [ 399.919309][ T31] 5 locks held by syz-executor/5870: [ 399.955417][ T31] #0: ffff888033138dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 399.984142][ T31] #1: ffff8880331380b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 400.014050][ T31] #2: ffffffff8f69fce8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 400.054861][ T31] #3: ffff888025a0fb38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 400.074054][ T31] #4: ffffffff8e13fb78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 400.114308][ T31] 2 locks held by syz.2.505/8056: [ 400.120398][ T31] #0: ffffffff8f5a08d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 400.144259][ T31] #1: ffffffff8e418b48 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 400.194052][ T31] 4 locks held by kworker/1:8/9331: [ 400.199332][ T31] 3 locks held by kworker/1:10/9333: [ 400.224389][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 400.264261][ T31] #1: ffffc9000b8d7bc0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 400.294106][ T31] #2: ffffffff8e13fb78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 400.324049][ T31] 5 locks held by kworker/0:10/9340: [ 400.329766][ T31] 2 locks held by syz.1.1440/11801: [ 400.339581][ T31] #0: ffffffff8f5a08d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 400.349510][ T31] #1: ffffffff8e418b48 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 400.360058][ T31] 3 locks held by syz-executor/12379: [ 400.365720][ T31] #0: ffff888032298dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 400.375856][ T31] #1: ffff8880322980b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 400.386304][ T31] #2: ffffffff8f69fce8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 400.396387][ T31] [ 400.398737][ T31] ============================================= [ 400.398737][ T31] [ 400.413924][ T31] NMI backtrace for cpu 0 [ 400.413954][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 400.413972][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 400.413982][ T31] Call Trace: [ 400.413988][ T31] [ 400.413994][ T31] dump_stack_lvl+0x189/0x250 [ 400.414018][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 400.414033][ T31] ? __pfx__printk+0x10/0x10 [ 400.414062][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 400.414087][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 400.414110][ T31] ? __pfx__printk+0x10/0x10 [ 400.414132][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 400.414156][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 400.414181][ T31] watchdog+0xf93/0xfe0 [ 400.414205][ T31] ? watchdog+0x1de/0xfe0 [ 400.414230][ T31] kthread+0x70e/0x8a0 [ 400.414253][ T31] ? __pfx_watchdog+0x10/0x10 [ 400.414271][ T31] ? __pfx_kthread+0x10/0x10 [ 400.414290][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 400.414304][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 400.414321][ T31] ? __pfx_kthread+0x10/0x10 [ 400.414340][ T31] ret_from_fork+0x439/0x7d0 [ 400.414357][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 400.414377][ T31] ? __switch_to_asm+0x39/0x70 [ 400.414395][ T31] ? __switch_to_asm+0x33/0x70 [ 400.414413][ T31] ? __pfx_kthread+0x10/0x10 [ 400.414435][ T31] ret_from_fork_asm+0x1a/0x30 [ 400.414472][ T31] [ 400.556567][ T31] Sending NMI from CPU 0 to CPUs 1: [ 400.562205][ C1] NMI backtrace for cpu 1 [ 400.562223][ C1] CPU: 1 UID: 0 PID: 1 Comm: init Not tainted syzkaller #0 PREEMPT(full) [ 400.562241][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 400.562252][ C1] RIP: 0010:lock_release+0xaf/0x3e0 [ 400.562279][ C1] Code: 0a 00 00 00 0f 85 1e 02 00 00 49 81 3e 20 23 62 93 0f 84 11 02 00 00 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 48 8b 5c 24 20 48 c7 c7 84 55 9c 8d e8 34 82 d6 09 65 ff 05 dd 3f 01 11 c7 44 [ 400.562294][ C1] RSP: 0018:ffffc90000067290 EFLAGS: 00000002 [ 400.562309][ C1] RAX: 0000000000000000 RBX: 0000000000000002 RCX: e1666d8dc9707c00 [ 400.562320][ C1] RDX: ffffc90000067401 RSI: ffffffff8be33f60 RDI: ffffffff8be33f20 [ 400.562333][ C1] RBP: dffffc0000000000 R08: ffffc90000067500 R09: 0000000000000000 [ 400.562344][ C1] R10: ffffc90000067418 R11: fffff5200000ce85 R12: ffffc90000067510 [ 400.562357][ C1] R13: ffffffff8172c195 R14: ffffffff8e13a0e0 R15: ffff8881404c8000 [ 400.562370][ C1] FS: 00007efcaaadac80(0000) GS:ffff888125d39000(0000) knlGS:0000000000000000 [ 400.562384][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 400.562396][ C1] CR2: 00007fd9af917d60 CR3: 0000000032f1c000 CR4: 00000000003526f0 [ 400.562411][ C1] Call Trace: [ 400.562425][ C1] [ 400.562431][ C1] ? unwind_next_frame+0x19ae/0x2390 [ 400.562449][ C1] ? deref_stack_reg+0x19f/0x230 [ 400.562467][ C1] ? unwind_next_frame+0xa5/0x2390 [ 400.562483][ C1] unwind_next_frame+0x19a9/0x2390 [ 400.562503][ C1] ? unwind_next_frame+0xa5/0x2390 [ 400.562519][ C1] ? stack_trace_save+0x9c/0xe0 [ 400.562538][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 400.562558][ C1] arch_stack_walk+0x11c/0x150 [ 400.562579][ C1] ? kasan_save_track+0x3e/0x80 [ 400.562599][ C1] stack_trace_save+0x9c/0xe0 [ 400.562616][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 400.562635][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 400.562657][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 400.562680][ C1] kasan_save_track+0x3e/0x80 [ 400.562724][ C1] __kasan_kmalloc+0x93/0xb0 [ 400.562744][ C1] __kmalloc_cache_noprof+0x230/0x3d0 [ 400.562764][ C1] ? kmem_cache_free+0x166/0x400 [ 400.562785][ C1] ? release_task+0x1105/0x17f0 [ 400.562803][ C1] kmem_cache_free+0x166/0x400 [ 400.562825][ C1] release_task+0x1105/0x17f0 [ 400.562848][ C1] ? wait_consider_task+0x1944/0x2e10 [ 400.562872][ C1] ? __pfx_release_task+0x10/0x10 [ 400.562890][ C1] ? __do_wait+0x153/0x740 [ 400.562914][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 400.562930][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 400.562949][ C1] wait_consider_task+0x1944/0x2e10 [ 400.562979][ C1] ? __do_wait+0x153/0x740 [ 400.562999][ C1] ? __pfx_wait_consider_task+0x10/0x10 [ 400.563022][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 400.563042][ C1] __do_wait+0x153/0x740 [ 400.563064][ C1] do_wait+0x1f8/0x520 [ 400.563083][ C1] ? do_wait+0x18e/0x520 [ 400.563104][ C1] kernel_wait4+0x1af/0x280 [ 400.563123][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 400.563141][ C1] ? __pfx_kernel_wait4+0x10/0x10 [ 400.563159][ C1] ? do_sigtimedwait+0x22f/0x680 [ 400.563182][ C1] ? __pfx_child_wait_callback+0x10/0x10 [ 400.563205][ C1] ? __pfx_do_sigtimedwait+0x10/0x10 [ 400.563230][ C1] __x64_sys_wait4+0x133/0x1e0 [ 400.563252][ C1] ? __pfx___x64_sys_wait4+0x10/0x10 [ 400.563272][ C1] ? __se_sys_rt_sigtimedwait+0x229/0x2b0 [ 400.563296][ C1] ? rcu_is_watching+0x15/0xb0 [ 400.563313][ C1] ? do_syscall_64+0xbe/0x3b0 [ 400.563333][ C1] do_syscall_64+0xfa/0x3b0 [ 400.563350][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 400.563366][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.563383][ C1] ? clear_bhb_loop+0x60/0xb0 [ 400.563401][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.563416][ C1] RIP: 0033:0x7efcaac2a407 [ 400.563435][ C1] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 400.563449][ C1] RSP: 002b:00007fff0934b1c0 EFLAGS: 00000202 ORIG_RAX: 000000000000003d [ 400.563466][ C1] RAX: ffffffffffffffda RBX: 00007efcaaadac80 RCX: 00007efcaac2a407 [ 400.563478][ C1] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffffffffffffff [ 400.563489][ C1] RBP: 00007efcaae29e89 R08: 0000000000000000 R09: 0000000000000000 [ 400.563499][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 00007efcaae44490 [ 400.563509][ C1] R13: 00007fff0934b21c R14: 00007efcaae84000 R15: 00005594e6990d98 [ 400.563529][ C1] [ 400.570068][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 400.570093][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 400.570115][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 400.570127][ T31] Call Trace: [ 400.570136][ T31] [ 400.570145][ T31] dump_stack_lvl+0x99/0x250 [ 400.570171][ T31] ? __asan_memcpy+0x40/0x70 [ 400.570194][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 400.570215][ T31] ? __pfx__printk+0x10/0x10 [ 400.570252][ T31] vpanic+0x281/0x750 [ 400.570276][ T31] ? __pfx_vpanic+0x10/0x10 [ 400.570295][ T31] ? preempt_schedule+0xae/0xc0 [ 400.570317][ T31] ? preempt_schedule_common+0x83/0xd0 [ 400.570343][ T31] panic+0xb9/0xc0 [ 400.570363][ T31] ? __pfx_panic+0x10/0x10 [ 400.570385][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 400.570430][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 400.570456][ T31] watchdog+0xfd2/0xfe0 [ 400.570481][ T31] ? watchdog+0x1de/0xfe0 [ 400.570511][ T31] kthread+0x70e/0x8a0 [ 400.570538][ T31] ? __pfx_watchdog+0x10/0x10 [ 400.570561][ T31] ? __pfx_kthread+0x10/0x10 [ 400.570585][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 400.570604][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 400.570623][ T31] ? __pfx_kthread+0x10/0x10 [ 400.570646][ T31] ret_from_fork+0x439/0x7d0 [ 400.570672][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 400.570696][ T31] ? __switch_to_asm+0x39/0x70 [ 400.570718][ T31] ? __switch_to_asm+0x33/0x70 [ 400.570740][ T31] ? __pfx_kthread+0x10/0x10 [ 400.570763][ T31] ret_from_fork_asm+0x1a/0x30 [ 400.570800][ T31] [ 401.166237][ T31] Kernel Offset: disabled [ 401.170565][ T31] Rebooting in 86400 seconds..