last executing test programs: 2m27.889386213s ago: executing program 4 (id=1215): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) (async) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000100)={0x209d, 0x3, 0x0, 0x7ffffff9}, 0x10) write(r2, &(0x7f00000000c0)="1800000016005f0214fffffffffffff80700000001000000", 0x18) syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), r2) (async) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) (async) listen(r1, 0xaab) listen(r0, 0x9) (async) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0xcf) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r3, 0xc038943b, &(0x7f0000000040)={0x16c2, 0x8, '\x00', 0x0, &(0x7f0000000000)=[0x0]}) 2m27.512942566s ago: executing program 4 (id=1218): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x28, r2, 0x5, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}]]}, 0x28}, 0x1, 0x0, 0x0, 0x8800}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xe, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xffff, 0xb}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x40) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x54}}, 0x0) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m27.378912277s ago: executing program 4 (id=1222): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000800)={0x2c, r4, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x810}, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x439, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, 0x21801, 0x1103}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2f}}]}}}]}, 0x38}}, 0x4048084) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x0) 2m27.216357784s ago: executing program 4 (id=1224): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="3800000018000100000000000000000b0a000000000000000000000008000400", @ANYRES32=r0, @ANYBLOB="06001500070000000c0016800800"], 0x38}}, 0x10) 2m27.03658297s ago: executing program 4 (id=1229): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r1, 0x5421, &(0x7f0000000140)=0x1) writev(r1, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58"}, 0x28) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_freezer_state(r2, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r3, &(0x7f0000000040)='FROZEN\x00', 0xfdef) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000240)="6e37cff5b582e082d58cb23de3c19dc4971d9b59ddb52ae25a3ca48e8d5284721b4b722d1fd011fc3144e4ceb18b32b5b8", 0x31}, {&(0x7f0000000340)="5fdbd61342a1560054f74cee82024cacdf79b6be94f99a7aea5b7678644cc1ef33880d4a59cad1fd0852b05064b02335eb6064c24f1ad325e0325bc473c3aeaf6709e5227bca1f7ba283d381d4f64e34fa77c5cac5d0bcf72850aaa9ea7f9144a0e108ae41f51262011dd0a3eb6eaf00da010b18a79f6917d0c25efbf1c56feb59cbcb63f4683c026aa7aa1d65bea9ba31", 0x91}, {&(0x7f0000000940)="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", 0x105}, {&(0x7f0000000500)="0f1d547dfd011eee5ee96e9f1947841b6080ffadffd0f2ba53588a463cb08890097ea28302b894feb895cebb0e72a94c681955c3a39a1e5ebde1638c8f408cbb197ede5a6779e4582b685db9abb1184d1e4bf53bb5eafcc7d265002aeead4852d157cfb83a10f405c72c51bd99d99ea7f702c9424dcfffbd0387c5e7777aa1bf37cbffb95d0daf", 0x87}, {&(0x7f0000000700)="7a60507430110d45fba18e434184c81c9a10404af273af02537863cd4f9b455ba771ca5222198ae07333ef0d2beff796d017427138340fc2b1528610600c9b212beee90a7941df2f1ec93c7469156c30892b39b7b43f9d229a356cc43023e2eb30577ca2725e6c1ce2e4557d4150336ac279203360ee37b0f67dce3d0fa468aed602dc9f641bbacbeac908a860f4d02f22946a5a73f0bd6896b5fb16e75d3437356e3e8307c6d07b767649101165270eb5c82bc6cd3d2c5954f370361578736b68b2d8d891071b5ad1e7ede7372c18", 0xcf}, {&(0x7f0000001700)="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", 0x387}], 0x6}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) 2m26.832457946s ago: executing program 4 (id=1234): r0 = socket$nl_rdma(0x10, 0x3, 0x14) (async) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@deltfilter={0x3c, 0x2d, 0x10, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x2, 0xffe0}, {0x8, 0xb}, {0x3, 0x10}}, [@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x1, 0xe}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20000010) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd7000040000000500b600080009000200000008000c00a60a0000060001000500004008000b"], 0x40}, 0x1, 0x0, 0x0, 0x94ced4add106a01f}, 0x4040) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) (async, rerun: 64) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4006000}, 0x0) (rerun: 64) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async, rerun: 32) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 32) r6 = openat$cgroup_procs(r5, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) sendfile(r6, r6, 0x0, 0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x1b, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a0300000000f5ffffff00010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) 2m11.588562843s ago: executing program 32 (id=1234): r0 = socket$nl_rdma(0x10, 0x3, 0x14) (async) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@deltfilter={0x3c, 0x2d, 0x10, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x2, 0xffe0}, {0x8, 0xb}, {0x3, 0x10}}, [@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x1, 0xe}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20000010) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd7000040000000500b600080009000200000008000c00a60a0000060001000500004008000b"], 0x40}, 0x1, 0x0, 0x0, 0x94ced4add106a01f}, 0x4040) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) (async, rerun: 64) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4006000}, 0x0) (rerun: 64) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async, rerun: 32) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 32) r6 = openat$cgroup_procs(r5, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) sendfile(r6, r6, 0x0, 0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x1b, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a0300000000f5ffffff00010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) 2m5.54500004s ago: executing program 1 (id=1417): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async, rerun: 32) r1 = socket(0x10, 0x803, 0x0) (async, rerun: 32) syz_emit_ethernet(0x46, &(0x7f0000000540)=ANY=[], 0x0) (async, rerun: 64) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 64) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)=0x20) (async) write$bt_hci(r2, &(0x7f0000000040)=ANY=[], 0x6) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000600)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0f0000001000000002000000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) unshare(0x20000400) (async, rerun: 32) r3 = socket$alg(0x26, 0x5, 0x0) (rerun: 32) bind$alg(r3, 0x0, 0x0) (async) r4 = socket(0x8, 0x3, 0x0) (async) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) (async, rerun: 64) r7 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r6, @ANYBLOB="08001f0005"], 0x70}}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000068000100f1d7aa9278e124d00200000004002f000c000880050005000000000008000700f200000008000500", @ANYRES32=0x0, @ANYBLOB="0600030001000000"], 0x3c}}, 0x0) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000180)={'batadv_slave_1', 0x32, 0x33}, 0x11) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000200)={'wg0\x00', 0x0}) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@private0, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6}}, &(0x7f00000002c0)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f00000006c0)={{{@in6=@private0, @in=@multicast1, 0x4e23, 0x0, 0x4e21, 0x0, 0xa, 0x20, 0x80, 0x33, r8, r9}, {0x54c6, 0x1, 0x554, 0x6, 0x0, 0x3, 0xdff, 0x3}, {0x1, 0x100000001, 0x3ff, 0x1}, 0x38, 0x6e6bb0, 0x1, 0x0, 0x1, 0x2}, {{@in=@remote, 0xcb2, 0x3c}, 0xa, @in6=@local, 0x3501, 0x0, 0x3, 0x4, 0x5, 0xcc3, 0x9}}, 0xe8) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x20010, r1, 0xcbb3c000) (async) getsockname$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) r10 = socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(r10, &(0x7f0000000300)={&(0x7f00000010c0)=@in6={0xa, 0x0, 0x0, @local, 0x3}, 0x80, 0x0}, 0x4000850) (async) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f00000000c0)={{0xa, 0x4e23, 0x11, @dev={0xfe, 0x80, '\x00', 0x3a}, 0xfffffffe}, {0xa, 0x4e20, 0x5, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x15b}, 0xffffffffffffffff, {[0x4, 0x1000000b, 0x40, 0x2, 0x5, 0x3, 0xef, 0x8de]}}, 0x5c) (async) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x8}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xe, 0x0, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) 2m5.270740256s ago: executing program 1 (id=1419): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x9, &(0x7f0000000100)=@framed={{0x18, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa}, @generic={0x65, 0x0, 0x0, 0x0, 0x3}, @exit, @alu={0x4, 0x0, 0x4827170236d373bd, 0x3, 0x0, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000007c0), r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000900)={0x0, 0xe6, &(0x7f00000008c0)={&(0x7f0000000840)={0x3c, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xe6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x710ce59bde3da96}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4010044) syz_emit_ethernet(0x9a, &(0x7f0000000340)={@link_local={0x1, 0x80, 0xc2, 0x3}, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x64, 0x11, 0x0, @private2, @mcast2, {[], {0x0, 0xe22, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x2, "b3a5a32c15a74899004ccf462627b693b424cfac6d6f6c18a07448e7cfc77224", "eeb79b8e5cc84de93512fdd553dabc6b", {"2adfa4d4d8104bb99fa1887ab53acb45", "40e3d0b4c2c5585ef57152f112ea5a1e"}}}}}}}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x44, r2, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8000000000000000}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x490) 2m4.998656404s ago: executing program 1 (id=1422): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000840)={0x2}, 0x4) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x5, @loopback}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}]}}}]}, 0x58}}, 0x0) 2m4.712795884s ago: executing program 1 (id=1424): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x2, [@union={0x0, 0x0, 0x0, 0x5, 0x0, 0x7ff}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x2, [{0xc, 0x2}]}]}}, &(0x7f0000000f40)=""/4089, 0x3a, 0xff9, 0xa, 0x7ff, 0x0, @void, @value}, 0x28) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r3, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xffff}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}]}, 0x40}}, 0x801) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x54}, 0x1, 0x0, 0x0, 0x40084}, 0x0) 2m4.484483084s ago: executing program 1 (id=1426): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x32}, 0xb}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x2) sendmmsg(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000440)="d5", 0x1}], 0x1}}], 0x1, 0x0) 2m4.215723462s ago: executing program 1 (id=1429): r0 = socket(0x11, 0x4, 0x9) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000280)={'wg0\x00', 0x0}) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f00000002c0)={r1, 0x1, 0x6, @local}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000001aa80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[], &(0x7f0000000140)=""/240, 0x56, 0xf0, 0x1, 0x0, 0x0, @void, @value}, 0x28) r4 = socket$inet6(0xa, 0x80003, 0xff) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000240)={0x1f, 0xffff, 0x2}, 0x6) recvmmsg(r5, &(0x7f0000000600), 0x204083acb88ff8b, 0x2, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x0, 0x0) accept4$ax25(r6, 0x0, &(0x7f0000000140), 0x0) setsockopt$inet6_int(r4, 0x29, 0x16, &(0x7f0000000040), 0xfffffceb) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) unshare(0x62040200) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000050000000100000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r7}, 0x38) 1m48.805383506s ago: executing program 33 (id=1429): r0 = socket(0x11, 0x4, 0x9) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000280)={'wg0\x00', 0x0}) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f00000002c0)={r1, 0x1, 0x6, @local}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000001aa80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[], &(0x7f0000000140)=""/240, 0x56, 0xf0, 0x1, 0x0, 0x0, @void, @value}, 0x28) r4 = socket$inet6(0xa, 0x80003, 0xff) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000240)={0x1f, 0xffff, 0x2}, 0x6) recvmmsg(r5, &(0x7f0000000600), 0x204083acb88ff8b, 0x2, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x0, 0x0) accept4$ax25(r6, 0x0, &(0x7f0000000140), 0x0) setsockopt$inet6_int(r4, 0x29, 0x16, &(0x7f0000000040), 0xfffffceb) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) unshare(0x62040200) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000050000000100000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r7}, 0x38) 1m43.512968683s ago: executing program 0 (id=1570): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001400030400000000000000542d"], 0x44}}, 0x0) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="d81060f1883e46f19d63719660666b3de99ab7c1099d56c2f7bc3df8e7c5502f3571caca8617936f5fc7db1b18607b20483e902eca8f73bc766f604ee0047d4c50b9403ca238f16aa125bc6a915d5a9d9c039f9741ce0e9df775b029ba76d6b70a5f429328079f8e5d8b7b2b015eac0e066fab4f6f7c91e62daee64ea3be9a34cde8ebc562b483347a55a01117a703d024404175cb2e7efcf1e441fbc460b83cff78cc8444c447e26ea026f832e879be731dc407fb21b41df60622556fda53515c9b948b3e67ae2dee89db1822f4501365ebf1", 0xd3}, {&(0x7f00000003c0)="83966ddf022ed92f107cf67a4c60dfcdde926da02776323ad274b30c6d8fd8cdb0a63e6a54c005165cc75be5abfc8ccaf1e5247988a7f3ad17607b3f9445db2251abad7984a7ba4d7037034d4c72d7c3a9d109451eec2801d70ee9b76dbe6ebd887a2d3ecda4ed0ce21befd9cbeb9bb409cf2b73d31d70f652f0764d7715f9b3b0e074f4312d164f86722757ea", 0x8d}], 0x2, &(0x7f0000001b80)=[@hopopts_2292={{0x30, 0x29, 0x36, {0x89, 0x3, '\x00', [@hao={0xc9, 0x10, @mcast1}, @enc_lim={0x4, 0x1, 0x90}, @pad1]}}}, @rthdr={{0xb8, 0x29, 0x39, {0x87, 0x14, 0x3, 0xa, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @loopback, @rand_addr=' \x01\x00', @mcast1, @local, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x15}}, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}, @hopopts={{0x20, 0x29, 0x36, {0x62, 0x0, '\x00', [@pad1]}}}, @rthdr={{0x28, 0x29, 0x39, {0x6, 0x2, 0x1, 0xfd, 0x0, [@mcast1]}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x89, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x1}]}}}, @dstopts_2292={{0x1110, 0x29, 0x4, {0x2, 0x21e, '\x00', [@generic={0x5, 0x1000, "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"}, @ra={0x5, 0x2, 0x6}, @padn={0x1, 0x1, [0x0]}, @generic={0x2, 0xec, "f9d234cb81937f9f700eacff6769f296200baaa61d2cfdd3770ebc9b980b67702b29e25cd55e9acfcd32072fe4662ac6905120a18caa6a6c81514b8afdce113b9bbea869f2a761bad96676c92a01d63fff5340a54e43e58b9193828c6f0dde19f325c76ae637342d8f14a47eea961e5ab1475fe9539674851664cf00c40b1765a7310d0e1333804c977ef02e02bdaafcb1239b1ce96abb1f36f7a9c4de48b945b112402d9b28a16d88c1d14dff97795570aaeedd1f9fb24663b58e09c761ad885454b73774ebfc5c280a24b335f84eefdecf403ad337bf0c3a7289678d90f9a0d1f014ed27b737397f6bbf45"}]}}}, @hopopts={{0x110, 0x29, 0x36, {0xff, 0x1e, '\x00', [@enc_lim={0x4, 0x1, 0xd}, @padn={0x1, 0x2, [0x0, 0x0]}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x0, 0xe4, "2bcd270152e36693eb0a072b618061ba0a6f97c2655fbf64535a06a5ad8e4014fc2f2bada61e38911258c850f80774c97585110207047be3f0d4ba9e5e02c6dff7fe2a7197ae13e6e27a0dc765b08d8e6b3009ad877ed7446a951c1a22a5eb52c7c78c45df03b990bc5a51f1b6ce98732c56215590ecb267a203dcc86ecfda17926318732246ebf09ed702015c3bdd3a87079dbc8dd0e1a45034c0f565d47c90de9ce835867d1beb363241b75901bc24d0d0f0c1d676f7a18ec2aa22ea9ebd76899db69a43315b8ffe3d4f22a6f17c5772a175cf0abd281ef507399a8f17853988dc595b"}]}}}, @hoplimit_2292={{0x14}}], 0x1388}, 0x4000010) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040844}, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x0) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x2, &(0x7f0000000000)=""/126, &(0x7f0000000080)=0x7e) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x304}, '\x00', "376a31a11e8e279cec092f071cc80f218d360356a936a7e3971a8c35c47e5804", '\x00', "fffffffffffffffd"}, 0x38) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) getsockopt$netlink(r4, 0x10e, 0x9, 0x0, &(0x7f0000000180)) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000180), 0x4) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000005d00)=ANY=[], 0x114}], 0x1, 0x0, 0x0, 0x20000001}, 0x20040080) 1m42.513472833s ago: executing program 0 (id=1571): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d491009b3426c8928f3d97cb", 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x13, 0x0, 0x8}]}}, &(0x7f0000000240)=""/220, 0x26, 0xdc, 0x800000a, 0x0, 0x0, @void, @value}, 0x28) r3 = accept4(r2, 0x0, 0x0, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000100)=0x8000) read$alg(r3, &(0x7f0000000000)=""/35, 0x23) sendmsg$alg(r3, &(0x7f0000002a00)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000600)="fa96b72a28b331238cee2e466dd5741851b1c737f2b6bfc991cb9cce55bf4f142fb4d540c30e2fd3756adb162fe6ec020d8e285becf63a7e640fe6f09d53a9aa16e9eeba1296000a75697ba794673c9069dc1919c7f083b617a74ba488126656013d755f83d52e58e27666c0c17070794ea2c5c42319954efd9e66bc18f2c5df22625214b0ba8563beb0be16e1d200ca3133cbbd3c27cc73212c38e6b585230c9947be5cda7fc6bfcb2cb8ec4d0205ad0088ea987454f0cd4a765f50e40dc8a7d480424086c40f9445cf9576d889134dd13355c6ef947a64e9789cb23e97f603264b2a46819f5724767383d87351253851a8e8a9739928a0", 0xf8}], 0x1, 0x0, 0x0, 0x20040890}, 0x4040011) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) sendto$packet(r7, 0x0, 0x0, 0x5, 0x0, 0x0) unshare(0x62040200) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @local}, 0x10) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xc, 0x14, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES64=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000004c0)={0x11, @multicast2, 0x0, 0x0, 'rr\x00', 0x0, 0x7e5, 0x4000067}, 0x2c) 1m41.536853115s ago: executing program 0 (id=1578): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x2, 0x7, 0xc, 0x7, 0x2, 0x0, 0x70bd28, 0x25dfdbfc}, 0x10}}, 0x4400c030) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@private=0xa010102, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x32}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg$inet6(r1, &(0x7f0000000a80)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x33, 0x0, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @loopback, 0x3}, 0x1c) listen(r3, 0xb) close(0x3) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)={0x2c, r4, 0x1, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x90) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012abd7000fcdbdf250e0000001c000180060002002c000800089b7f4204052e54cb00ff0004000800e2000300000014000e004e240000080006af1a05ab116b2958000500003e08b6193b0b84be0000000000"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x20004880) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000e27f000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000134c2651638af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000e80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e21, 0x40, @empty, 0x34}, 0x1c) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_lsm={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061114c0000000000850000006300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1m40.57299863s ago: executing program 0 (id=1582): setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x4}, 0x8) r0 = socket$inet6(0xa, 0x3, 0x2f) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000e00)=ANY=[@ANYBLOB="b0000000", @ANYRES16=0x0, @ANYBLOB="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"], 0xb0}, 0x1, 0x0, 0x0, 0xc5}, 0x8004) connect$inet6(r0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f00000005c0)={0x0, 0x3, {0x4, @struct={0x5, 0x7}, 0x0, 0x8, 0xb1d, 0x75a, 0x1, 0x8, 0x52, @struct={0x5, 0x2}, 0x8, 0x1, [0x998, 0xa3, 0xff000000, 0x9, 0x3, 0x1ff]}, {0x401, @usage=0x7fff, 0x0, 0x10000, 0x5, 0x9, 0xfffffffffffffffb, 0x5, 0x30, @usage=0x2, 0x8, 0x1, [0x100000000, 0xffffffff, 0x9, 0x80, 0x5, 0xffffffffffffffc0]}, {0x5ece, @usage=0x9, 0x0, 0x55, 0x8001, 0x5, 0xffff, 0x7bc, 0x8, @struct={0x8}, 0x480, 0xf425, [0x487, 0x2, 0x58d4, 0xaaf, 0x6, 0x81]}, {0x0, 0x724}}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x12, 0x0, 0x0, 0xfffffffe, 0x7ffffff}}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="18020000fffdffff00000000000000008500000041000000850000002a00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x11, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f00000009c0)={r1, 0x5, 0x0, [0x1, 0x9, 0xfe9, 0x2, 0x5], [0x7, 0x5, 0xd4, 0x4, 0x0, 0x1000, 0x101, 0x4, 0x0, 0x0, 0x4, 0x5, 0xfffffffffffffff7, 0x7, 0xfffffffffffffffd, 0x0, 0x7, 0xfff, 0x80000001, 0x1, 0x7, 0x3, 0x8, 0x10, 0x9, 0x4, 0x943, 0x4, 0xb, 0x689, 0x1, 0x8, 0x700000000, 0x6, 0x4, 0xff, 0x8000000000000001, 0x0, 0x10, 0xfffffffffffff001, 0x0, 0x7, 0xfffffffffffeffff, 0x2, 0x6, 0x100000000, 0x7, 0x6, 0x4d3aa6df, 0x483, 0x5, 0x101, 0x1000, 0x8001, 0x7, 0x5, 0x3, 0xd2, 0x7fffffffffffffff, 0x6, 0x5, 0x4, 0x82, 0x4, 0x0, 0x7, 0xff, 0x5, 0x8, 0xf, 0x5, 0x9bf, 0xa22, 0xffffffffffff70e8, 0x6, 0x3, 0x6, 0xffffffff00000001, 0x100000000, 0xffff, 0x40, 0x2, 0x10, 0x7, 0x7fffffffffffffff, 0x800, 0x4a, 0x8000000000000000, 0xfffffffffffffff7, 0x4, 0x81, 0xad5b, 0x3, 0x4, 0x2e21, 0x5, 0x8, 0x6, 0x5, 0x81, 0x1, 0x6, 0x10, 0x1, 0x0, 0x1, 0x0, 0xffffffffffffff26, 0x4, 0x5, 0x0, 0x9, 0x4eae, 0x80000000, 0x7, 0x4, 0xfffffffffffffffc, 0x6, 0x1f, 0x8]}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000078000000030a01010000000000000000010000000900030073797a31000000002800048008000240f500000208000140000000051400030076657468315f746f5f626174616476000900010073797a300000000008000a4000000002"], 0xc0}}, 0x8000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x15, 0x55, 0x1e5, 0x0, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x0, {@ip4=@broadcast, 0x86dd}}}]}, 0x38}, 0x1, 0xf0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r9 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r9, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3}, 0xa) shutdown(r9, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000000)) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYRESOCT=r5, @ANYRES32=r8, @ANYRES8=r8], 0x4c}}, 0x0) accept4(r6, 0x0, &(0x7f0000000100), 0xbe0258d51c0b8f71) 1m39.475999644s ago: executing program 0 (id=1594): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2c, r1, 0x1, 0x3, 0x0, {{0xa}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_IDX={0x5}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48881}, 0x40) 1m39.314051721s ago: executing program 0 (id=1598): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r2, @ANYBLOB="000080000000000018003480"], 0x38}, 0x1, 0x300}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) 1m24.229529457s ago: executing program 34 (id=1598): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r2, @ANYBLOB="000080000000000018003480"], 0x38}, 0x1, 0x300}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) 1m12.071146881s ago: executing program 3 (id=1867): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000000c0)={{{@in=@multicast1, @in6=@loopback, 0x0, 0xfffe, 0x4e24, 0x8, 0xa, 0x0, 0x20, 0x87}, {0x0, 0x48bb978d, 0xcd, 0x800000000000}, {0x0, 0x0, 0x200}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in=@empty, 0x4d2, 0x6c}, 0x0, @in6=@mcast2, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}}, 0xe8) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0xfffc}}}}}}, 0x0) 1m11.968668817s ago: executing program 3 (id=1869): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x4004800) 1m11.880512976s ago: executing program 3 (id=1871): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x51, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580)={0x0, 0x7}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="ec0000002100390d000000000000000000000000000000000000000000000000e000000200000000000000000000000000000000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100ff010000000000000000000000000001ffffffff000000000000000000000000ac1414aa000000000000000000000000ac141400000000000000000000000000000000000000000011000a00ff01ffffff8000000000000000000001ffffffff"], 0xec}}, 0x0) 1m11.728369066s ago: executing program 3 (id=1872): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r2, 0x6) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = accept(r1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000001d40)={0x0, @in6={{0xa, 0x4e21, 0x3, @local, 0x4f2c}}}, &(0x7f0000001e00)=0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000002080)={0x8, 0x6, 0x8402, 0x1, 0x64fb, 0x7, 0x401, 0xffff4d85}, &(0x7f00000020c0)=0x20) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r6, 0x84, 0x77, 0x0, 0x0) sendmmsg$inet_sctp(r4, &(0x7f0000002200)=[{&(0x7f0000000080)=@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000ac0)="0f6f476bb66f45f3cf8b0b07ab205236c8756c3c4ce6da61b017ffe254492ce91de01c997ea5ce6a6424a2030f2857c2b7e7e227743d2c7b4cd2b96e27c5463ce610a6a0da20c30a636b600c8e2c106fb1816b48565780123d7ece88dcad39301eb714b0128f606c365748587484899609238092b06a2672e8bf3a34511f4b0f41d256603982744be0ba610835c7bb72b7db0cc8286f415277b568c9b2f1c646fba31d423e6fb4b18d8970d70be60f6409dd21fcfc7fc1e60c4cd3564011d56638c29f2529087735f25698d7b989410703680ad2063eeda3d65c39f73edcb5f2b12831f998dc75b035e00b84410c1cbd9d4d9813d83a7272a40230414cf0cf410b188675e435d9ae8e4dab2ae1a06a85858de77302bd312b8218570420905b54626a008d1f72c744a52dc1c175567c165115d4aec26f052dae383c4fe011706dbc483dd4c8f89c0fdb7b975ff71f3a8a773fd2e3052fedf3475e2be53eae5a72e3a8ef806eeff70e5ef6e4f5a2cb3c2be19c0c8ed3bbff8ee9d6be04a585ecd3f2f7d7c0949934656a7563e1bb7cdd2c3fd93d67acd717bf8fba9c576323617f724981145e6b220ddc449d4506c9e2d4b0598c2236266d939d265711a9b882f39bd8f138a17605ee291348d7f8c7d770469756c4f55897f0b04bf83b76413d3f44727aa568fbcf68f996915d869b0efbb9f1926e9c735679c14d6699dc7fa251ae98ca1f86e683dd801b0f42a9d01e32c0b894405e6304c1463046553cc32ec38ff1d077bf3b0ee5676db4851543f29513ce2d1308414a009bc9b7ce9ce7bf69b35d279cb30c54be265194d8eaa2992f1bed50d7ef9409348384bab379173d49f9bfaa89534a22bc7e5366d70591e523e750e53b674951a7265dd9383fcfb5590bfe358b33a22664b28cdace2cfc48a3bad41e4cfdc015813824e38ba701b8c33ce57918876fe27a2aefc62b8373931301dd92d76cdf7d608babcd7af33ff9018bc50a9eb29793a3eae57fcb95334f8b171b6aa1a3c8e9edad64489af643d618429cf790466aa478ab11532e0232b4f51a503ba215aa4d471d625f444f4de20a9ed633d0dd5024e40331247280ebe4ac2ed094c79f48cd8f29537250547e3656f55fddbd49d598f717df0800df7ecb312c9ac4d6b6addfe541a164f361ca35a4bd44c8c5f07df280e1a64ef9dab9a45db74c7100d6267ff8c15792e1c8b9e3a447a162350dc84298812eae9c53e49cc3d7e133ad478575a4d5d657866761e5488ee7dd05ad2f8df6d5e81e4e8fbce5066edfacf8fa38d0d49cefdbbae09d6a04ecf7a9e7449acff0fccf83dbaae28c30030fc97e4875622ad955d504d9dee576bcf05e01c663eddc566fa06f46306bdb9d9753de5ab1267c7aa9e9245082064183eedbfe3ad82e546311460316d47016f28003a3685d2933324768b65263b1263f9c659a0e38b72a8cbba8650d312192642bf96af74ae3c20a5a43ce2a02df7f841f08363da436f6a2722b6a172cef7ced4b24d316e0c64842101a7f411cbd0fa4a6402cd18616d87bd3feea8f70c6ef964fb2643846f6b3cd48402b787d0a52f5826cf7e65903ff13d09a3bb1e6eca45ddce2c198128989c8c884ea6082a82cb4a759f2e9556add128a5c6dc95af6f916bbfbe546f83028c08db6bb354f269964967c60044ef7f72631c7c55c79cc86f23ccf987c4dce5274b782fcf2e72b85f0ae981dc96a32e17e3f2cdb95be01cdc7a22cc54b170a143930a8e03efb8976d9d22286808015d908547816219825c015a23bd9bf4f5a6678469ced05cf98acfb6b998b124bd85323f872ec2ae577b304d273d1798c9842d55a359ca50732ac586ec9ac028aeecea78a26d901798ef69aefc1acff2792e45aeb0d21aeee453219e5dc6a3ebb587159963e1cb1f612d860df4955d61fce343ada174e38727b64c6ca2090b55d2bf9e5f2bbc1175d2939228a490b40b3e92d538520efbae83ce1033a9a2c973109a168d0c863692bb3d4c6797d0fa0c83aac7e767dbe38ffffb33ddf81eb63387812cf0f869075daacdde6d59653868446b84eb9128f7f401e14285571dc61bfe550812354d6e08faa0366235bdfa23e0f07b8d6c6943c7b078fb5a4a7d9f5d80edffc587e379c2401f85686ca1dbf5155b2c8e40e58b48b9d12b8bf897f738f405736fc2247cf91009bbbc5e9e1007575b1a9f8fd4cca105c33a462d33a346668efb276c97ccc10e2d044ab4c235e2807687791ae765b08ba11e576eefb852d7bf5f5a1ef24f61e0437b21c8845c867ee8bb8c24c9180631c5174c679588d8e495aefe240247f5905df8fc03517da981f365428c0e5c4f6dcae582bc187af76a98ca07eef381ba9642a2d280eb10c5d794cb1834f0a7f263b577b07a54f95b6a0b57f7d610d2efeef9602f043ba325aec465b103aff0e7f2da25f52cc7cad89835989e9f4c3756ce47bf10a160aeeea48ae18050db45888bb5faabf1644350c1c219114438fef32741e4bb08aeed22501cf6cb214b487c2be658ed2e6cf6bb6487be38faa6bd180118f4e875706cd41e2b40eb8f9152efb17f14a54e2b24c3256f3f0d6d3930bccdd24d5d0281e523f7ba21f5b5608775587bca26732cda474020fbdf0a8d00f81c9d0b32050ae4bdf94f43c928ff4f48ecb00a34ca89b90a0bb12842baf7777f7162123e898f2e426d11fb4257ee52cb2065d4d596c37a2c967c7c07a01c25e53ed779d1ad8c1ae425b0477ada09e2760db7e0f0a934c6c65ced3e2ef9f010091fe9c37c45c7c6f64ebdb9097cb997faa63b5602380f8185d54d13816d2525c38b94f2da85e0c2f96b7d7dfaad8afabb24de8b68b36ad3bf88cb17fe06877e00c5c82d828cfb70d6fb99b980fd27c8fefe5b2fdcc9ced274b37d1dff343898f33a0a43b25256d53b26f9634f51e29acf09539e4c064b8c5b39264d7638fdaa4d9ff7d15a63485f15b3a0ec9b66a100e125b92c97caa1df7611f77fb9e93f32d794edd426d84f11ef926caf4cc485c5bad93818f3da0c43d8b36caf15ed95e86f42987c58c2da8110551640b82787987d42aba84f623cd594d1584957ea14af60f824a089a7ccb60a932df586ff15dca1964d2ed8c155dee2a3750a666d196bc2b988e9a984f5bb45bf187962e811f641de37363b01dea0bb9bedbbed0bc4bf38489f375953b5b913793a8f9f9fb964838e7127bef2f0e83d9225756cfe2f35910dd7b11c43d430ab5443d34cfebe89d1c64d7897e78656ead253818fa1c017a7e85e8a34186ce48139192e219f25109bcd600f708a1d3f7d70cf87f29b99495916b8644fbca53a30e62aa69e518e8625f38a93d2beb6a910e7ccb230d4659428330a643536b7c43f9318b290f531ab6ebdfddb0293defa866750a5a9e381add6d3de109e7436e0520404583ea73085a9de573dba83f79db67f9423adf15844564f8ff8aad15760cd4ef35dfec8719a07dcb25b13a67213f62b9f0cf013f01de93ea18f33e3a613c831e73e2355ac624882b3bda4234dffc6f6d75b345a5f8177a3e065bfba30110dcd873013db6e8fdf9e2d74ce2ccdd25f8ff5423fbbc5ae936af842c53b0de50dede9905f66d0954358eed86a411a9a9d888262dd4d0eb7a9cb99b9ce6fae7c95989b6cfe4939cabde34e50c243a9e2c9ce4caa8b46c4f8ac20b04a85614d169aeafeba257d96547e37922117ba8064b2fc0e18bd25df8f4bfe211d20ce3f8d94ba915daf589d64827362d73df4193c77aca107f6d99e24e57901a02d69690a217fdaa0079c8e40a72a722a16da00922978418a812c417e1591afb1a102d31d51576c3f9a5ef2396a1f7c17c34cb0cd72b4cead472e0b492ef5b0d92352c851a662dadbc175d9bae71157a55930278ed734d10d2bc94e1ba4e0ff1c808eb45e54ed479f72bbe2ccc4135c3fd7ec8fc4f26606ef2a288adf78044ea71c9ad2d8757d758c3155886744e089d1142b19f08872f8400d78d2a35edc42986d5ffc5059a5f1e54aef434095d101c4bb9d005a0873447878b30872135d1a97b4780cbd6c045dec4a44bb58871d487f3d86498aa8b0605ba854b3275245f8ae74fbeb2bb8f6df5b076bafa1558976b8f4a7251a6ff84c20ff7f70455ce10d96ff9ad89a6580cad2a71bea29e24578822a4a98d68ae0f7dd3b90d5e7576f9ec1d6cc044178442eefec0fa27771a035826057abf4052e19ad040ff31a7c7483a14e8b10e0508b775fa278d97a071cd0b36d025d4ec8f70874cf4313b09eb531e61990208982eb8d0fa45c4ee7ea0c2eb9a0882c7adde900f580caf0491c441c07012f5d5d13e5b405b79bc282bc2a5f625d8eaec8f4047a7590216361a5e67fbdb4ba3ee2227fb12b95b9db2b261289f6cbab5fc3573101363faa60baf48646c17eebbe1e279fb35843e742d81030c1d8c4825a5c4d51468da80fe34eb38f600dba4b7b47789250bfb288f9f680411e52ef8f8688b43b59ac980623597cef334528a313bab2fb653a6a394a2e389b31cfda998da268b23b56196c14965aa2900de3775123c1799b2d4ad1e5442ef980b67c5720b74d765cdc05bb9efe7592bd5650afd540ae967bc905a164859ddf5bb19567b7888d01936e29409dbee318bd0e1cd60c7ece939710015d93baeb00df58b02a2249f1d4661e3bf5da548989bdcfbc73a58dd24a18ab5473046a68885bef53b1fcc011d2930b23c2d4e1886d0382c525e0452bdee04beb69ec4a82fd8bd8fdec391617037cdce4d3c5701c252f1a757009a4a09ec073f2227734de50b61ebe0eb0b0742e7edd80ceb6baec6ee7de73975acfd9c2dd77d32067283f3d507438c44c03ca60d26e28953c48c2c2d97bb2ebefe02eb620a48beb56b92a8ea3fee2290d2c3e0763ddfd62ab5d7b4332e637e756f9a6b6ae759ac4b49ba3a311dd842cf209e421c543720df9478a27a7f5a26782d9be1cd16447b56ce477fc5bb20d75ba3548eab76b3875f6b166ab764b5c7e022d1957d43a8a137a80046b9ad758b5bc876fc660d2b0e734eb1a79d2a624b46baa8e20b4522dde6d5c04cf1c2e176877aaabebe72cab479d80eeec39aa6a64925d5b89324573fd3cebfe691070852274a94c3443bf9f0f2a7b0fc4d3a5691e65cbf1a403213923cbaf8c3adedf92a1fae78db194514ef27b9378ea57b74e0b5bd49638243669435162e53bc1356d12605ed444387da946921d1eaefb152e67a66e737b8c7817f3b0625b5cb9952702af37112fec605efca65b3f714022eaa03724bbe15fb7b5404acb8e4d2bf7789233944aed4446758e13781b03b0dc190f746aac44d187cc6c048988a88a977538e0371517b9796a6b0ee9d3bb31745521206d20ae25219472a42f4ca86b40d4da106adf54bdfd969eb9c52294698e5ea9d98e00fae3bba4a62b63e4ab204f0d457ba920eb0cca1dbcccd2feb2256ccdecb9263117a4ecde0fcd3b503a9ddf0211fd2f6eeee76b8611bc2ff4bb673d5681a1334ce344550d22ca057bdf1d83cf9b58679067b23f17138845394a0a9b53382fcd31a65ce8d4535cd42bd4d9ab794acb6db7393357f94e34e9cff8be965b5d679c2db49023e78581150a9a87e8f1678dcd71f058614bed73cc878a673f1530a75fc5d1a3de92c62174abf58ffe319b50bb433acee0767bfb272a762b9f9ec3520d6728652766eca652b57b87e99055034edb7ea2fa1d08b4d74c62243d7355191eed35bc3554c124396887aa23ad524d6e64947c22844fd02f628f9ea3382bc3c7218dca48b25b2a5d684461f", 0x1000}, {&(0x7f0000000140)="3cdafc64e55b9adedb", 0x9}, {&(0x7f0000000180)="6802f29b5f24f447f7aa144cf5a7422e28821f210f882ed62c4c133d6c685ea4d143f06874329718f0091b", 0x2b}, {&(0x7f0000000340)="2bfe3031900f9bdb5f53c421dd47f5e8532482b35d68854b9d01d746f8d04457821f3cad2dbb918d2f82061e43bc0558f34101b9826f6e98eb755362a3342e07933b8c006b3c071742f2301f080e9de4fe0f757237f6175118195078cf007566a09e1001835015a22f2c10e59aa6ef3bcddf99d6ff6e377612833d7dee052fbab88b20f1226519fa60e6e08f9b501a080b64146c376ba57e6caeddd6b102406074b40228c2a4ed9a61b31fb1c63aaa8ba84c3e476f94fc44c3162df0b6e6c9e8707356bc01eb465c44fc6d5c3356119108afd2fbb6002814e0ac1ce27766e061405fb96b744316f6bb9bf7e6474f000ced94412e54290361a2", 0xf9}, {&(0x7f00000001c0)="41ddc42175ac46d7f1e5b3530c00038c5b444e51de169cc8119fbdd696a9b67b5f28f9fad8287b3d456c1851ed79cea576e4f39b2361eace113e35e05a107fdad34765e2491560d3b0715ee5514c901662eeeb", 0x53}, {&(0x7f00000004c0)="63a11f1bd4210dd49eb6e32f7562de2757f38af2618b50b173026cf6a7678b1aee9118206e6299b4feae1c38d83ff2df45f8999821ddf04357712c932a861a9e2aa9b351c7be772520be2a838e1537fb8693a96ec20149fca240eb4c2ad6df635d4883e15ca97792747198d3b2c7d2878a0f902a0eff06e86deb58b6b13869573e88243976b04b5a489fda4b07ae3a7ccfcaa247c3b817159e71c68ae673036569d6af54f869824909c258df31b2a963df8b", 0xb2}], 0x6, &(0x7f0000000780)}, {&(0x7f0000000240)=@in6={0xa, 0x4e23, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c, &(0x7f0000001cc0)=[{&(0x7f00000005c0)="d19f2d36fc176cae539aa4ab236471890f3d1bd04a", 0x15}, {&(0x7f0000000800)="233f57814ec8662ce6663693a69a2db0e7cbf31b0ebf200bede1490a0abf49f52553ad6eced6bb16f10e68f847007d2af7a90e9414e65ba98a45e4a3551a14904a5162c942c83bc3ee579374afddeac16088079900b83419536f89a7c5e59218010f024eccddac6ed27fb3426323a2931af43f7b37728dec57079387e96b979efdd83c9f72ef47e2008d6bb97474275a72ef850a28ac11e235dcb7d729e92f514623abb46a6e906606544c8ee6ff7571941dfe8ed8dacb22e450", 0xba}, {&(0x7f0000001ac0)="3265dfac9fb1ef9b4ba890cb6b32f37879c90b7a3834f38169dab8f59e70dc622570cdf14a36ee77aff501ceb1f06d6dc52e3ed540856da6ac7b55a896241166867c16e1f18f7cc376890cc0472f99acde842a26928dfe4787f6e51067ed0010f9fc2bc7cb7f1e065c3972606cf8abebd122a94ea30848077e06", 0x7a}, {&(0x7f0000001b40)="0e00f44bef6e0a80525997ec1497b96eb9bb34ab1e73709ee17e1ff364b9729c07d175b4c214584a74bba00ffbd615c2b377ab396f729b02cb8cc8a7abbea522a91b3b2c3cd22fbf8ee3ba80828dad2614154af0c597b4c593ae72658fa2a2b4fa08d1c935f1ce07cbedfd2f5fb397", 0x6f}, {&(0x7f0000000900)="b233a3cc2347dfdf2939b91c1f16710f059ba31c057646c523d89588b76a3e80d9b3a9152a06e850c9e65356ca483bfd96bf", 0x32}, {&(0x7f0000000a00)="8fd6a5b90b4f4dbb5b07468bb71dda503b54f84757e1a8ab31917cdb99585017794e", 0x22}, {&(0x7f0000001bc0)="dc04e77caf15178bc7a784ba961f895b5badefb3b2bacf762a683415b35462fe0e537828a89dc49714557c03f02213049d8f1d7e88e0c28dde518ffe731d1aa7ab3d2950dcbc538fef9b916ef2dc68d508e5e2607f74df73039fc138040d648529f7600cc9b7b840a8dd22176b", 0x6d}], 0x7, &(0x7f0000001e40)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x6, 0x9, 0xfd2, 0x100, 0x810e, 0x9, 0x1, r5}}], 0x30, 0x4040004}, {&(0x7f0000001e80)=@in6={0xa, 0x4e22, 0x5, @loopback, 0x2d2}, 0x1c, &(0x7f0000002040)=[{&(0x7f0000001ec0)="0cd9b1b46c6fa9a13671dce2f5b972d980f779bfa8358148bac55f8404481314a6941f02534551386fb22582971e949c846e507e0fc32cbbfa204900836c9f5a5114702a6e29196642dcf43b43ce", 0x4e}, {&(0x7f0000001f40)="78d7a334d1f4648dbdf55d66931e295ef53266cc0adde25bbeb49fb8194386394ccc4349a30e1bc7c130e0f9f4c1c547405fa476134e75bb9fe93a495a62fdd83d8c317b861a249ef4f4b8b8c48601baad9eb4159d5d70b7684a04ebdf5a42600adcf192957a2f867218be87b66f551f3de9701ba335770ec3400d8a725ff92f90c2e00fb541f5ab39bfb2b2b19dd18ac88ffe41e32de09e7df2a699e5cf826379ce0b77298b23407411aea0d17cdeccc9a17dcdd23fe6a2994aa2afe36307ebd171c50ae97299c449767a711238fbb9428458103833f466d46c0bc12d99efd0fa230f9de5b44415d8882d677a7f131063e2531e", 0xf4}], 0x2, &(0x7f0000002100), 0x0, 0x10}], 0x3, 0x8085) 1m10.798406473s ago: executing program 3 (id=1881): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x4004800) 1m10.611639368s ago: executing program 3 (id=1883): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') socket$rxrpc(0x21, 0x2, 0x2) unshare(0x6a040000) r0 = socket(0x8, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) r1 = socket(0x8, 0x3, 0x0) ioctl$PPPIOCGL2TPSTATS(r1, 0x400461f1, 0x0) 1m4.892430426s ago: executing program 2 (id=1304): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000060a0b040000000000000000020000001400048010000180080001006669620004000280140300000000000000000000000000000000000a11f376f7df6da932f3db9348"], 0x50}}, 0x0) (async) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0], 0x1c}}, 0x0) (async, rerun: 32) r1 = socket(0x10, 0x803, 0x0) (rerun: 32) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="410000000000000001000603000014000300060a0004090300f006e8ffffffffffff070007003a3a090914"], 0x44}, 0x1, 0x1000000}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r2, @ANYBLOB="020000000000800080001200080001007674693674000200"], 0xa0}}, 0x0) 56.792080314s ago: executing program 2 (id=1304): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000060a0b040000000000000000020000001400048010000180080001006669620004000280140300000000000000000000000000000000000a11f376f7df6da932f3db9348"], 0x50}}, 0x0) (async) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0], 0x1c}}, 0x0) (async, rerun: 32) r1 = socket(0x10, 0x803, 0x0) (rerun: 32) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="410000000000000001000603000014000300060a0004090300f006e8ffffffffffff070007003a3a090914"], 0x44}, 0x1, 0x1000000}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r2, @ANYBLOB="020000000000800080001200080001007674693674000200"], 0xa0}}, 0x0) 55.376202397s ago: executing program 35 (id=1883): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') socket$rxrpc(0x21, 0x2, 0x2) unshare(0x6a040000) r0 = socket(0x8, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) r1 = socket(0x8, 0x3, 0x0) ioctl$PPPIOCGL2TPSTATS(r1, 0x400461f1, 0x0) 41.116136909s ago: executing program 2 (id=1304): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000060a0b040000000000000000020000001400048010000180080001006669620004000280140300000000000000000000000000000000000a11f376f7df6da932f3db9348"], 0x50}}, 0x0) (async) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0], 0x1c}}, 0x0) (async, rerun: 32) r1 = socket(0x10, 0x803, 0x0) (rerun: 32) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="410000000000000001000603000014000300060a0004090300f006e8ffffffffffff070007003a3a090914"], 0x44}, 0x1, 0x1000000}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r2, @ANYBLOB="020000000000800080001200080001007674693674000200"], 0xa0}}, 0x0) 30.401145579s ago: executing program 5 (id=2181): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000)={r2, 0xeba, 0x1, 0x3, 0xd1fe, 0x6}, 0x14) (fail_nth: 2) 30.337426736s ago: executing program 6 (id=2182): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000)={r2, 0xeba, 0x1, 0x3, 0xd1fe, 0x6}, 0x14) 29.536658318s ago: executing program 5 (id=2186): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='cdg\x00', 0x4) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000000c80)=[{{&(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000180)="fd", 0x1}], 0x1}}, {{&(0x7f0000001180)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f00000011c0)=[{&(0x7f0000004d00)='f', 0x1}], 0x1}}], 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000300)={r4, 0x1}, 0x8) sendmmsg$inet(r1, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7eca", 0x63}, {0x0}, {&(0x7f0000000040)="f96be6c391f1f8b23ae44a70a75f4a", 0xf}, {&(0x7f0000000740)}, {0x0}], 0x5}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a", 0x4a}], 0x1}}], 0x2, 0xc0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="018d1192", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) write$tun(r5, &(0x7f0000000380)={@val={0x0, 0xa00}, @val={0x2, 0x104, 0x6, 0x8, 0x0, 0x7fff}, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @broadcast, @void, {@x25={0x805, {0x3, 0x0, 0xf7, "a70899e14ac071642ae1eaed681feb606d0d1a20737f8a9033d492e51df55ba8f29a08610e8a48a5f603bfe38992cf9e1c676859bd69e8ac7aa2ce314661c9e76f528d3f8fff9493fa1f79f01ee329f3233e9d939d78367ba9f4abb18888e14a92248ec6bfcdec20c1d0d0f6be81d808381fb1937d6f7571a9a779fb1f9abfefbe295854822d"}}}}}, 0xa5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$inet_sctp(0x2, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x1, 0x42, 0x40, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)={r6}) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r9, 0x6, 0x1d, &(0x7f0000000300), &(0x7f0000000340)=0x14) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r8], 0x90}}, 0x0) 29.314982543s ago: executing program 6 (id=2188): r0 = socket$tipc(0x1e, 0x4, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) recvmmsg(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000180)}, 0xb7}], 0x1, 0x40002021, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f00000003c0)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000340)=[{&(0x7f00000002c0)='/', 0x1}], 0x1, 0x0, 0x0, 0x1000a8d0}, 0x0) 29.095747024s ago: executing program 2 (id=1304): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000060a0b040000000000000000020000001400048010000180080001006669620004000280140300000000000000000000000000000000000a11f376f7df6da932f3db9348"], 0x50}}, 0x0) (async) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0], 0x1c}}, 0x0) (async, rerun: 32) r1 = socket(0x10, 0x803, 0x0) (rerun: 32) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="410000000000000001000603000014000300060a0004090300f006e8ffffffffffff070007003a3a090914"], 0x44}, 0x1, 0x1000000}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r2, @ANYBLOB="020000000000800080001200080001007674693674000200"], 0xa0}}, 0x0) 27.352795496s ago: executing program 6 (id=2190): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x82}, [@call={0x85, 0x0, 0x0, 0xc4}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="180100002e00010000000000fcdbdf2507"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="180000000000000000000000000000007110b7000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0xac, &(0x7f0000000200)=""/172, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0xfffffffc}, 0x1c) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x800442d2, &(0x7f0000000180)={0xa, &(0x7f0000000040)=[{0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @broadcast}, {}, {0x0, 0x0, 0x0, @multicast}, {0x0, 0x0, 0x0, @multicast}, {0x0, 0x0, 0x0, @link_local}]}) socket$igmp6(0xa, 0x3, 0x2) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)={0x1a0, 0x0, 0x1, 0x901, 0x0, 0x0, {0x1, 0x0, 0x7}, [@CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x44, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x10}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x3b07}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x10}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x4}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x40}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x1}]}}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1ff}]}, @CTA_FILTER={0x1c, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x1}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x104}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x20}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_SYNPROXY={0x34, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0xfffffff8}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SYNPROXY_TSOFF={0x8}]}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xaa}]}, @CTA_SEQ_ADJ_ORIG={0x2c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x2}]}, @CTA_TUPLE_REPLY={0x98, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x20000040}, 0x10) 27.351731391s ago: executing program 5 (id=2192): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x259fdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {}, {0x7, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) 26.876124504s ago: executing program 6 (id=2194): r0 = socket(0x10, 0x3, 0xfffffffc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@ipv6_newrule={0x6c, 0x20, 0x200, 0x0, 0x0, {0xa, 0x20, 0x20}, [@FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'dvmrp1\x00'}, @FRA_SRC={0x14, 0x2, @private0}, @FRA_SRC={0x14, 0x2, @empty}, @FRA_DST={0x14, 0x1, @remote}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendto$inet6(r0, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000c200a0000000d0085a168d0bf46d32345653600648d2700000000000000ffff5ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000800000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x7) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r2) 26.611073236s ago: executing program 5 (id=2197): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], &(0x7f0000000100)='GPL\x00', 0x4, 0xfa, &(0x7f00000007c0)=""/250, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe6c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x2}, {}, {}, {}, {0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0x0, 0x800000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xfffffffd}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f0000000140)={0x5, 0x6, 0x8, 0x8, 0x0, 0x2, 0x0, 0x8}, &(0x7f0000000180)={0x9, 0x2, 0x7fff, 0x22c, 0x5, 0x0, 0xa9e, 0x7}, &(0x7f00000001c0)={0x7fffffff, 0x9, 0x81, 0xa1, 0x3, 0xff, 0x1, 0xffff}, &(0x7f0000000200)={0x77359400}, &(0x7f00000004c0)={&(0x7f0000000240)={[0xc6]}, 0x8}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00800000000000000c002b8008000100", @ANYRES32, @ANYBLOB="e8df2a98e2bc71e3f5cf2a"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe8000000000"], 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001e80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r4, 0x0, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="050000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000100000000000000000000009dfc47318ccc3455"], 0x48}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB], 0x4c}}, 0x2) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000000)="6a0e6435f82b96e120e95ef657c67f3804ab3fd20f854380e05a23b6758439b1bcc2af4612a9ffbedef954ca796197b2ad54eb4aa5e40f7e0679b02c55444cd757567b124e1c78808a05eac11e93d4de3287", 0x52) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601080000000000000000050000000900020073797a310000000005000100070000002c000780060004404e21000005000700e30000000c00018008000140850101010c0002800800"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x3d0, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x430) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0xf00) socket(0x400000000010, 0x3, 0x0) 26.418027138s ago: executing program 6 (id=2199): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x9, &(0x7f0000000100)=@framed={{0x18, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @generic={0x65, 0x0, 0x0, 0x0, 0x3}, @initr0, @exit, @alu={0x4, 0x0, 0x4827170236d373bd, 0x3, 0x0, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000007c0), r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000900)={0x0, 0xe6, &(0x7f00000008c0)={&(0x7f0000000840)={0x3c, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xe6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x710ce59bde3da96}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4010044) syz_emit_ethernet(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x38, r2, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8000000000000000}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x490) 26.02547615s ago: executing program 6 (id=2202): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001880)={&(0x7f0000000380)=@nfc, 0x80, 0x0}, 0x2000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@dellinkprop={0x28, 0x6d, 0x519, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4000, 0x50000}, [@IFLA_NET_NS_PID={0x8}]}, 0x28}}, 0x44) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r3, 0x0, 0x81, &(0x7f00000052c0)={'broute\x00', 0x0, 0x0, 0x0, [0x9573, 0x1, 0x3, 0x5, 0x547, 0x1], 0x1, 0x0, 0x0, [{}]}, 0x88) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$sock_buf(r4, 0x1, 0x3b, 0x0, &(0x7f0000000040)=0x2b) getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x82, &(0x7f00000000c0)={'filter\x00', 0x0, 0x0, 0x0, [0xf1, 0xfffffffb, 0x7, 0xfee, 0x5, 0x3]}, &(0x7f0000000340)=0x78) getsockopt$EBT_SO_GET_INFO(r2, 0x0, 0x80, &(0x7f0000000000)={'nat\x00', 0x0, 0x0, 0x0, [0x4, 0x5, 0x9, 0x7, 0x97d3, 0x73]}, &(0x7f0000000080)=0x50) sendmmsg$inet6(r0, &(0x7f0000000640)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x8, @mcast2}, 0x1c, 0x0}}], 0x54, 0xc040) 25.45301141s ago: executing program 5 (id=2203): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000080)="5800003a1400192340834b80040d8c560aff820fffff5bab003a0000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100030c100000000000224e0000", 0x58}], 0x1) 25.251946427s ago: executing program 5 (id=2206): socket$can_j1939(0x1d, 0x2, 0x7) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="6112ba000000000061139b0000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf6700000000000056"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, 0x0, &(0x7f0000000140)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) unshare(0x62040200) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0500000008000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000172c58b21bac8b1f41855e2eea000000000000000000000000000000000000000000001fac76b05feac87a5cdc2d1341bcd562a6e2f7e6982e4862a963284f752fff00d7ec7d196edb7ab57afe60c10d7d36745ce98aa02daade1e"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002a00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) write$tun(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x3e) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f00000002c0)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x800000000000, 0x4}, 0x0, 0x0, 0x0, 0x0) write(r6, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000380)=0x1, 0x4) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRES32=r7], 0x188}}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) 19.925677583s ago: executing program 2 (id=1304): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000060a0b040000000000000000020000001400048010000180080001006669620004000280140300000000000000000000000000000000000a11f376f7df6da932f3db9348"], 0x50}}, 0x0) (async) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0], 0x1c}}, 0x0) (async, rerun: 32) r1 = socket(0x10, 0x803, 0x0) (rerun: 32) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="410000000000000001000603000014000300060a0004090300f006e8ffffffffffff070007003a3a090914"], 0x44}, 0x1, 0x1000000}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r2, @ANYBLOB="020000000000800080001200080001007674693674000200"], 0xa0}}, 0x0) 11.558029471s ago: executing program 2 (id=1304): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000060a0b040000000000000000020000001400048010000180080001006669620004000280140300000000000000000000000000000000000a11f376f7df6da932f3db9348"], 0x50}}, 0x0) (async) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0], 0x1c}}, 0x0) (async, rerun: 32) r1 = socket(0x10, 0x803, 0x0) (rerun: 32) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="410000000000000001000603000014000300060a0004090300f006e8ffffffffffff070007003a3a090914"], 0x44}, 0x1, 0x1000000}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r2, @ANYBLOB="020000000000800080001200080001007674693674000200"], 0xa0}}, 0x0) 9.655224337s ago: executing program 36 (id=2202): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001880)={&(0x7f0000000380)=@nfc, 0x80, 0x0}, 0x2000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@dellinkprop={0x28, 0x6d, 0x519, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4000, 0x50000}, [@IFLA_NET_NS_PID={0x8}]}, 0x28}}, 0x44) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r3, 0x0, 0x81, &(0x7f00000052c0)={'broute\x00', 0x0, 0x0, 0x0, [0x9573, 0x1, 0x3, 0x5, 0x547, 0x1], 0x1, 0x0, 0x0, [{}]}, 0x88) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$sock_buf(r4, 0x1, 0x3b, 0x0, &(0x7f0000000040)=0x2b) getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x82, &(0x7f00000000c0)={'filter\x00', 0x0, 0x0, 0x0, [0xf1, 0xfffffffb, 0x7, 0xfee, 0x5, 0x3]}, &(0x7f0000000340)=0x78) getsockopt$EBT_SO_GET_INFO(r2, 0x0, 0x80, &(0x7f0000000000)={'nat\x00', 0x0, 0x0, 0x0, [0x4, 0x5, 0x9, 0x7, 0x97d3, 0x73]}, &(0x7f0000000080)=0x50) sendmmsg$inet6(r0, &(0x7f0000000640)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x8, @mcast2}, 0x1c, 0x0}}], 0x54, 0xc040) 9.578219735s ago: executing program 37 (id=2206): socket$can_j1939(0x1d, 0x2, 0x7) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="6112ba000000000061139b0000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf6700000000000056"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, 0x0, &(0x7f0000000140)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) unshare(0x62040200) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0500000008000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000172c58b21bac8b1f41855e2eea000000000000000000000000000000000000000000001fac76b05feac87a5cdc2d1341bcd562a6e2f7e6982e4862a963284f752fff00d7ec7d196edb7ab57afe60c10d7d36745ce98aa02daade1e"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002a00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) write$tun(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x3e) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f00000002c0)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x800000000000, 0x4}, 0x0, 0x0, 0x0, 0x0) write(r6, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000380)=0x1, 0x4) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRES32=r7], 0x188}}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) 3.485070736s ago: executing program 8 (id=2303): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x1410, 0x1, 0x70bd2c, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x24044836}, 0xc094) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000008000000000000000000000000401586c6a0f6a0043b61b50680e397e1066f2e55ab3e79361049e0e952a0a647db55352c9508518f6802d1504cc3c7f0bf0baa48961497b25358a3e2b3d5c8f93284ed8ac280c3ffc537d48361920d49c3b975a88872a7fbeeec8f2529b5376ffb0fc3d7a86e11c7e517d56e13"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r2}, 0x10) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000040)="05000000010001", 0x7) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x30, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_INET6={0x4, 0x2d}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r6) sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)={0x6c, r7, 0x1, 0x70bd67, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x27}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x76}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20004084}, 0x4008800) bind$llc(r5, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000000), 0xffffff6a) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) r11 = socket$pppl2tp(0x18, 0x1, 0x1) r12 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r11, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r12, {0x2, 0x0, @dev}, 0x2}}, 0x2e) sendmsg$L2TP_CMD_SESSION_GET(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x30, r10, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_LNS_MODE={0x5}]}, 0x30}}, 0x0) sendfile(r5, r8, 0x0, 0xffffffff000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b0000000000000000000000e89c000000000000", @ANYRES32=0x1, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB="01000000000000000200"/28], 0x50) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[@ANYBLOB="0e00000002"], 0x8) 2.730494762s ago: executing program 7 (id=2304): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@gettfilter={0x24, 0x2e, 0x121, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x2, 0xa}, {0x1, 0xfff1}, {0x7, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4041080) (fail_nth: 3) 2.45389413s ago: executing program 8 (id=2305): sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000080)={0x28, 0x0, 0x801, 0x0, 0x3, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x3}, @NL80211_ATTR_KEY={0x4}]}, 0x28}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7000fbdbdf252100000008000300", @ANYRES32=r3, @ANYBLOB="0c007d800400"], 0x28}, 0x1, 0x0, 0x0, 0x24000845}, 0x40000) 2.093552411s ago: executing program 7 (id=2306): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-512\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000002b00)=[{{&(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x8000010}}, {{&(0x7f00000005c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000880)=[{&(0x7f0000000640)="ca3ceb0814f1", 0x6}], 0x1, 0x0, 0x0, 0x4048040}}], 0x2, 0x4884) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000000c0)={0x2}, 0x8) syz_emit_ethernet(0x7c, &(0x7f0000000000)=ANY=[@ANYBLOB="ffff74ef66349cdf422daaaa86dd60381f3400462f00fc000000000000000000000000000000ff020000000000000000000000000001042081000000892f008000000800000086dd88a888be00000000100000000100000000000000080022eb00000000200000000200000000000000000000000800655800000000"], 0x0) 2.092493495s ago: executing program 8 (id=2307): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b06, &(0x7f0000000140)={'wlan1\x00', @random="018d000000eb"}) sendmmsg(r2, &(0x7f0000002540)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7, @remote, 0x3ffb}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000180)="709100ba77816ecd771347aebef456f7f14f81480c9d15aa49bd83c4492b7381230971de2d01522d2ffa3c586f40e16735fbe5e828333d58d2dad896c30d30df3d2cbc68083174166af7fed7a3abcbd636a4ff2bdd0f69f6e676a162be1530082a198d4a011a14d398c17763ef9dde714b1e9409d59d243f2e44d4ce3f7c075c8239566ca31de2fd0346534a8dca6bf74169c415c88c21272aa6ef122fabb73fc10177b0ef2ba0bc32b5c78650e9859dc86f7e45652c0cd0e73045c2959bfc21c475fc10157394474d3db11603e2abf4b9d206", 0xd3}, {&(0x7f00000000c0)="298c07b71cba2354b429134cb4a49bf5342df5ad78f1ecea1a646e4da0ed55314f47f17d0cc09276b5204ae1b3d9710ad387cebb5cc96877478530fc30ba021d6af6cfb2ceb222", 0x47}, {&(0x7f0000000400)="016dfa61d232fd337f5b5f3617ce1db64e4cd10cae3602d50320c404dfa8ea3f66f5edd5586700a182a75539c2eb35bd2e84323765f0d7a37c1b9f2e0fafee188027d902f0def3b423", 0x49}], 0x3, &(0x7f00000004c0)=[{0x108, 0x10d, 0x7, "a7703c648db36276a7dd907cf607fecebf6498747f39fbfcf90bed6845fca1dfb27485ff48a2f90ef177c3baa87a252e10c640f3bce5bd306faaab4cf13fbd0e082c2baf89e7016a64598ec1653054c0bdbaa0adf8ec79f5d8ff278dcf23f3d359ae7b6e5f14d157ac3b50bc807b1f6e9f6eb4512440a206c20e91c49b8eabcb07de73eb45c6adf4975cf91f2cb728ebcc01ebc580a7ffc0e886741eddb30e5c36d3444f600779d0c47701451dd3bee05945f57bc37557ed006138c96bd67505bb0d725febc584026748c79446d48f2a4b42b53e573f2627075ce9ca1bd1bda2b621410b6fbf5285bea54e2e3eaab9d4be4eb6"}], 0x108}}, {{&(0x7f0000000600)=@isdn={0x22, 0x4, 0x4, 0x4, 0x7}, 0x80, &(0x7f0000001840)=[{&(0x7f0000000680)="9e21d76b79bcfdf443deddd875651f3b3b26913e700a43472bdb3638aad14e2e16f51d6b83d7eb4dc4e4271cc2e5868a8e24f73ce1557bfaee3999c33896f259d2e1a1eea3127985e0dcaf7822ca3bce79ffebfe757c386881525b387efa7241d5d05df4ceb8edde3d4eeda515d248074095c915a46354ec5946830f09758ab94c8839943b7295af33915f", 0x8b}, {&(0x7f0000000740)="91e335bbb33230871642fbe2adfc712ff227a2a48411f56564ea24c47e4907385d1ae76c60fd1236e6c90c1613adec6d06cba932b0baeb50d8af9f66d59668829b06de713cc0c1ffeab6dc47513d9da48ddb902a84dd9ed5d736990befa27ee941c723ca8d018476ebdabdb0a74d626343189d390998d0dd6f29510e54255abc951e8d7424f7307e9ba5de8344d2c64bbd863bdda83894aacd2e7de90abb6ae1373f05b971380bb2e79a3bdd654ff5c5d6647d43488b4ee93a00af6d77a27ec2e3e601431e057b5775f02dbd6c2b6e2ac8098dde98607eaf7734628c3fc47e7a9c52f44a555c3c70b1fbcfb512a74d90f7771807d5bcd18a21855c04f1d001483398c278b4e81e2374ff148c202131a8b952a0ef5c612b1d010c1bfa093acb9523c580511ff2710937bb975f153bca8257cbb95621b22153d9ed8b1aa8d8487b19d2d288a69cffb1fecc47fc5ff5c31faa87d2e05d024069feaa9f63bc701b51b2e912646ed33da64ea7fb110c35bf52a7212169c009c4facdd9da1ee871b838d848d3aaac6883966272919ad6e96b2f4bbf69d029634f6fa5c2ad3b6d0fee97085f3c5d1fb4a853fc52ed233738f9149a0bfd5370350269d64d401b4566bfdb65dceebab5efe4a91d920687f52789664d8207d8ae98c2794bb8ce0a96e1908d65042f1f1d086bc1f6a20f99c4e995cca9b24711b6d93428bd76e0f6d1d48dd31a869b0f43b7124d840fbef6c82a66f3a20679646657fb97a854dbc30443eb6d7733518ceed2dd6486825e763387353ed6f996dd46eeab5fe8750a84042a0d128a9860836bc616753f33340f2ab14dd335655b0c1de20f9561325ea7c8d75a5402e04386138e8957abfa8c4c5f2e9f0d78558e96756439a190726c7a5a146d1d6c8f8e8166d340abc4d9f0eeccd5debf04817b846597b95b4601d867313e6b07352a31a690eb623926820afe790ab37b739989c13bbd89808a965edcc5b6223adcbed68a55f4acee4393fee868a8c902f40215f85286cc54d26ea05aad50e31e84dbf72cd0de165d1f2a3c12dd5d2c4e14a1e2d858b1b338f0748c19542fcbcc0bae6bb94ac18c1bc2f9544546c79a633898c9e39b92a04c4d347c359846ec4adaa3499869e2ae7087d51247ef736db4760411eaec6d815598e90f9e3ab102d190ca43ec3a825e5d5bb72a1d2c52ba0589a39f36403d5037fa9c3726df2bf9816bf8dd0ff43b05839575bf7ec8fa8013a7a2cf9fe73fac8a64c6f496862ac3c3d3f9a6ad88e76d705d27d281b52497c5e926e5b034872619984ff498c61451f792d70a22206548b8278dfd385cf45d168e070a8fa8d15461e4c5e5c76e945c666585fdf7957864d82886a76a118409c95cfd27969419ef79c71eb2e65921e0a24ac8adc261d51c2fc664087744197f2fdeedac2190204ebc20cc65a922cbf434ad50ff018c0004af8ade97c3524e4466d80902dbef4c2b6269031499ac05a3ff4027527fd37f3bbede53bc725d21ac3acde27bf7302b5bfa2956dfa8298000d2b9a5232ef2572f78f8a882d487d07eab84d8dbfac66eab1cd33baefcf1ba25d58b25b2e3ed528ad546b9920050461f9b87e55c4367f0d3aed87039c4c1b467f746f82fbe71c5a3330dc23d281ebc6999bc6ad6ec9b344655e568acd7acc337225e4aa951764afd664ccd5f1e4914e7865cede327042ffaaaeb8634c60fb64960f6d18e1e1e3229005b701144f50ea2d4bbf31b735bce1af54b9400027f7ea27559ea7f8e6ad5c5b353b70c7ebc38e0e524c54c12591a3163319ecb39b5af20b45910933c0df359743e2bcadfb4d54667ce36123abf15818f46e8bb5c7a74892125ae9457d09b3b6ff667ec7d4276089801561fa405a0d40e2c7fae69c340403115c40f4cd647897a246569bd0656ce14749c7d7bdfa58f1fec84c2d603539d8a59f09126bb528a6d152780f4c38c1e5e6d55094d758e9ed709c3ee2a473d91f93fd07dc52515615b83eab829372f69defc58e21b2bf31a3c1c1c6078d9208ef9640056116ffa91a10d1085d92a67c8c1c5fe80ea8ec781f80284f33e494395537e3afcd8630ab38f1faa04fdc190caf003c671765dcabc8dc74f07986fb9d176cd62a0a45ac93e771d1d16b62716448b9c3e9bb31691ee5e034750d3920d3072bc2ee76c77a2d358f12fd7282d13c5afbc649f3c0d62543d3924f33973103babedcb2ea7b324eea915ee53cce1833ee51e4c452871c015028da84e459e22185260af18807a22cf9a7234f6f28242701f1ec1e59f6c2403aa468a0f8b88fa8b7c65739e0a7ce4551afe8348152448b975935ccc8073e7b5f4702ac12dfa678b5e85c0d4dccdb14c7d2bc5354c4cf3775edbbbc8adf180108ab16393e2a9370222841f86d5735a6b12e49ef0e84858cc12d140fa1c801a1764dcbb0c77934f3c54e778e16e3c199dc8b19485448569df1c39da7d63c836b88c00596ec6b1298711e93284e33b00feca5004772554d8538ee0a44f3cd9a01f24dfc9f5c3795f39a2d5469012fd13f73b2b62669ae77a938d5f9f56ec9c714cbfdf25f5e6de7673bc814a82bd6e3762afae4a68e94716e5f79f093e8a75cd19393e15f0d34b83f997d09edbaffd367368ba99260a7e7f083c18acc1719bab8500393e6eaba2a3f7ca2fb2fef392c69842d61169c360cf6259b378ae5d20fd739c03b9dfc289ae69de2427b39d1cae56ab5b5ca803a302ff8db4a464da7da2bf78fcd92ff88c8d248c22ea079ef57bfb34f01a209a38784c76bf019b667b027a5796a675f43be5e226026366b66f0b882c8c5db0d003b2aeaaaaf1c657fcdaf0a78ba0bfcc8116621fecb7a0a37929913c77b982a5f61a078369cc4eafd6563d1ae6b07d5146e2d2b78e37b5bf366a412c3464a31f2a4220fea055301eda7f0bfac01fa1b0dd7cce12c75c77baf650016c69e322b676a9677782f3c0e0882bc429ffb6e3d8a2188cb2593fae9954b444365655cc18e98f0e96d66b52f140ec9476af0a6db917aef2c46b001938136f04772f10669cbf6852b42eceee0c55e603d266c94addd49c7a4f24e11f61810ea7888a5686c146c893882b6950245d31b1e454aaa24626bc555f3ccc24defc4c3c32adf2ccb13bfdac434e088a74c2f82641bf00a5a994c3f4b2ea5d0c174ad11d78dadebb9a3cf55b7682cfe4d99e24fff9574e8aaa378e10336a7fcd930949581c6dc1ec0bbff8743edab46592248ab443a00b9b2cddf83d8ba3efa2c109416921b9d799c5a912f5a4f8895436da4dcf1de840dc376f6697087681c36c377747bd8f45632719bd9907ec44c040f0afdc01c5d8aad4e0feba50a906d6fce186f5142e77db37b1f5a76d57a97c873973d824004c1846772331e3dc667e50043828c0d916a45434ab3b5263c2edb6aa5f2ee39c25f745133324d4ffb18c5d43b796b21dcfb392f3b9931958636c942e9b47e59e7b29d144405f642607194e5bd0996b7e7ab420c62ef96d0bfd3ebf8a824d76701c9e6e5533c7dbf64cfb1c3a5b3bfc5328c30678f71da72a98ba2c15bd6d2031baa14548a5d47f9d356c0088f4cf5b55ff512eac361bc5d7ce594b35c8c254f69cb97998e4859728e1535a0d1fbea55dc0a5d3a42a6ffc8d3e551dc38399ffc82ecbd5ab8c38f7075f40c341627a5b7b9911dfe91d1042f93cd9c047281fd25d4f11e43d7bdc86bf8de8396982eb53ba487ea1eee782231cf8b6ad521ea0dcc5abc8211a83ad35a40d68b3f17aa00d89a36c42899821d1390c8558cf1033e8df7bc682d103bd03aedb7ce306accc98c7bfdc6eee7aaaa6c7c092158808e1956800a755aa7f6ced5906fcc14973d19e3b6a93136153d636d079f8593bef474976eb34cccfb8f2646e2536512e8ef97d87d7b85ed6a8e7f6aae55950033e2ea1c69e0597a3f347428949fa3c3abc46f777b77be80edc2d00e9ee5ac93139d82405f84678ea02965791fcad569772fb7047c24ef5764528d39fb256165233617ea5036a399799dc5a599955a0efe1fb73de84c808ca0702bbc6eb38dee7405bd2aa0544486dfa507bc1c7d0e2099f448c934a5bd1dcb2b9b63b241f0cc31ec58b5e56745c9a2c732513beb9bfefbb405ab35e7172340f27a5bff8434201c098894e65dadba920a19853fd79bdd016cec32e42a2df406a0baa476e1b6d93e3ae91707294bc6da8ca54ad9ebc739b7d1c100c4438584b52ecc396d68e36342298d1ea53b00b379336b39c4ec9fd9263b0215f1a3f69770b0a56275bdbe1b15d7196a37f1ccb91fb7ce6a837429c0899f14b717930f850360da0a5f6de28d781a2e473a189bf286e405407023cb599cba4569fb9190ca7e370a255cfbc37d8e5e96c8ce631a3283e201f209bcf91718d30b4a6690ae231b44107f314c56a5e5d012d2d80ca11ad9f869ff032ebc1d2b79bb1d2fc34f07f89bf284a1b1206abccf43a294dc3f4b66249e2988e7e2c2b82c4234c032919860928006469dc7d4388bb08887f331dfe6d072f05ffbc85a57b1c14225f44c4f9ba629ad52dbec0e5efe92b123f27e05a1cf0ca3730a885f07e3669d9ef1383a4efcce74c634b0f913c59e2bcd56652dcf98791d0ff897fb1d52f217456963aa4586570bf22a7980ec64c8f9c259d116c340eb932a33fe28e7df538567fee0a463ca143a73a4ccaa4e92f594b18cfdb78bd2467a7a2b7289ca91fdd4f06b5eb12ffa411cd005c77a5e1151a41d386e8c59a48dec78c21ebc6d16371434544084b1034cb0479ecd3cfa02ff652ab01add578f6cb51ed51ff27a45579e4a968d8eddb9f708e4bfc1dfaabdca1a918741ef315e15124f771aa79a63c3bfd77433a39de35e995efa4d0608c006927b63dc1b263648299b90acc5e3ffc9a8d5187fe240028ce1a3edea4c6004ec61967a8b2be49352461a60fc8602a7c7d766d11049214d32cee563c6ca3b60a95bf4e4badaf1715e0a505233acbd1960d402e489a62049f478a14428a404a5f7d864f32405a45f1b96d39df77aedc897ad13f04dd7b77df56284d11d2c53c0f66aaea3c5bb311914fe164ade848c1fa3c9d84711a2d6480bb3d35d9ec4a347a0a310012ec7e49b2415f96fdefdb55027535813cfdf4d0f06f3aa26dd348376806f06011d503c8f6dc024616f46cc1eba07082a451e4e2189cc130162981c989c81a6e6891462e2fa772cb0095e99e027b5bc3251b0263b73621e12f4a8f6213c9212f1b6b785afd56856480165e9141a7d331996f75f46a57975f246829606c291a5762349daba0190106ffb15c62b220c24e58273b7d727f3f73acbb945465a5ca3961c766dcf66cba6c8367ef68d95799e967d1b7d817794a828267c387da1f8c744b46086a34a447469ae7065d5e82ddcb132bfabde0c6e62cfac56698079bbaf91f5ff96c411686d1d30151fca5e855be6de04b80f8ddb32d743f24a1a3b61203d64e13b5f551bbc6b48ac27956ef61c73ab745e4b97263062f0bb527e59e9ad292a932028922137a85fb503d70be86df6a5712a50c9e164f11bade9c1a37b93f5d1c0e0849bf3f7958b2d2a1a7d8cfd0597b91ea40fda7cf42a676feb9444fe1aceab54a427fc242ccf51bf3d4560e6637677bac2502d0713750b68e879453d4de6ee76bbfbc45e85f4c0c7ed951d3833050103d1b2f64fd23f95c38035c39376c4b3d1dce9777b11e2562d090631d0e749aa69cc68c5b5f3de4f4f0d1010dd6aa19351b5ab133544ee1a6bf2268701372704730384ee225eb60e8552378e9857ed17530e241", 0x1000}, {&(0x7f0000001740)="5af0e3157e09ccfdb273cd982f6dc23e76b85c916537a06b1df760619ee3d6673f11bbaee4e45a9e3953b2fc7f66fd51f5d421f7dd3e930795fd379d27ab427edee73ea2b6dd9faf0e201158b270254d4a385fa41ba9c23a1e69a3f5ed02c437597bd9d9b8bb2b5a8b818fc487f41866a2e74cabd8d8e2bcd7c5432c9f94a5be1dfb7873eec58bdea0bba6ba7c223015142d84f9c4b61f3c3b2f72892848e666a411a22ef816f726c251000881ec5b11e0159547f4bf3b14777f40e58efa65930c975fb35e1f5e536faef453ef78a6fbad88759ab2923979ecf4a4f24bf1dc769b753597a532a7451f0e9f73f21058bd784113e9", 0xf4}], 0x3, &(0x7f0000001880)}}, {{&(0x7f00000018c0)=@isdn={0x22, 0x5, 0x0, 0x4, 0xa}, 0x80, &(0x7f0000001d40)=[{&(0x7f0000001940)="b76a94638f6a3a539bf0292edf91b32a4e9e7222f50edaab20663d2ac7ecda3b5830a1a6a3875743c600e4585232a3d4a851bf0253ddfd8353a607e576efda5db0fdffa97b6128df8343279e46de48f9da17a2869e6181a81a76045cfb1f8febbc92796e4077e07f4ea9a3281b3d3c0da0139902bb7fb68fa6c3b07445e0170ec1583411a344c9cef7a72c66529e437fa421774ee03b10a0785aa145412cd9e837741435cb9bbf47fb440ee482bc6e16c418b7a562bf3d8d5e3c0b0a0b51a3033fcb4909baf0731632449c17a15ccca818c9a0f5991aa6c2bd292c2c2afdc9eb", 0xe0}, {&(0x7f0000001a40)="2d8bcd5bb8da6fa4c9f71a64bcc0f023584e3717af", 0x15}, {&(0x7f0000001a80)="3380c5f7ae1e338ce9d71d7f27d3d43f13593fb9a6ee2b053aff55f795b2d9d51d1eb093c101f8b8a73d50c00e006f47e4e9e9544a4ecba0e9d7dcd63968b160cdad76aa8d5926233433351f6a7a4700f7c88b6de329adb07377149095a1c2badffad7437f9a45349ae70000647e82b61617aa0374465bcbcc213cf7477d9f9f7749121a7aa0a8a8963959a662d225a198b2e797f5ae71665523fbf739f344f164c6f6baec42de40e0f2d5291265afb31d1e1ae4941392ff96c48f22b45f61e6f5302e9546f881f07ce98e5fd1321d5a07837e40688e1e6c04af", 0xda}, {&(0x7f0000001b80)="474859ca9b9a2182c85504d0682243efa923ce3dcf59f5e0e39fd3672d944f4813ec50ba5f3e0e24f8d467a29834c51114cb8572923424160c71a23ade2b0df7cecf81c789f3f24bdf6818fadff2a1e87228754b53b655c5684618c647b142d066bde788f8d226141d96dbbcd121162b1a3ef92268225d71ce05e0721be357d5842cd0af4d516c254ebd103fdeb1672c86cbf09971", 0x95}, {&(0x7f0000001c40)="1e0c672aa9c1ab21cbbcad7d02f1e55ba5e7016f54787fbd4761f8f1aaede7c3cc5faafb7337ddfa08da0a17888c4547f3ad1ae1b64cda7b7d1ae337430ef09403e565df42737d4489690bae3cae06a1278c00400da50f705e028902336c3b355a9283acfba01d0695e391a0e89a8d01c1c3300f497943643c73aeab68de1ac5a440a3e50c79c3bb494a690f69a8412d55f7", 0x92}, {&(0x7f0000001d00)="eddb", 0x2}], 0x6}}, {{&(0x7f0000001dc0)=@llc={0x1a, 0x309, 0x4, 0xad, 0x0, 0xc, @broadcast}, 0x80, &(0x7f0000002180)=[{&(0x7f0000001e40)="e62323559c0a15805eb11585b55e119e559f481ca1cfd57d74a494a3691d3f0a87dea35c8fe60540ee2af3e8d04ea3f47279e85fd17ba45befb8909a0a2ba9c33f2aef06f75a5153f81095d5471a065ce90f4a046f038ad6b4a57a69cfac9013a19767573b332645d0d84b", 0x6b}, {&(0x7f0000001ec0)="6fa82fa568557a40eaef94dd3193a2574209d2d2a3f5706ef5a32191f647e17c3d37fade0f868e8ad9377f4cdf42d8fcc73f8022583f224cfcf259217c04ec8c10fd7ad3154ee7dcdd0228bd05a203f02b367b448880903b722718540b40b236a82ed875a122cb5ca4e42095bb358c286bfd67872a4e3d54bf558e982e24a23bab721801000b144d542c2c6457c0a7f341a927580f049ec6824f5a2ad198e88989953582bd45d8645f1a50c6d458755e82dfdc25f83efd856ea9e5a138e3eb7d0990c5e71db28187bb6ce3875eb9f9e51a296704ae0c75deec4696cee39d92d9fa2b8ac91de152d7", 0xe8}, {&(0x7f0000001fc0)="d70236bdb9437ba73cc5a0c9d74aa39cfb57bd393569789c996a8e6c59ca0201a2fa6155cb2769ca97c8c5c64946cb62afc08968268312b91f230f1bbe2c05e3ff425d7468472dd16b8c1118ac96", 0x4e}, {&(0x7f0000002040)="0d8a63a3b974bd83143d9bc734fd61ae99fcc234ee08ef25c0fc12b33b87fe9cf4e29d0bca354e03", 0x28}, {&(0x7f0000002080)="83e98d09cfa0e6bb30518b661b8392b6ce4109c46309397a159277aba33530f065e1bf959b3e3d95003e34754b6e3c406edfd8d8280575c73dd6d24910f39c055f8ab35ea3a314fc25fc37409d60d80a7ca403005c409714bfa8ebef46ce396b527c4247e78f142e779fda623bb57285bd363636455d20dd4805efba2a39e570583467a3c12024dece44e14eae1eb9ec6757211b635db795cf57991af059676f9f55be48319ec0db7940f1573ff6f974719ab92df58acab0f9c099e2b3f699406aa43583f24acb", 0xc7}], 0x5, &(0x7f0000002200)=[{0xe8, 0x104, 0x0, "89787ac4303c1b6ffb15a3834ae7dc92dd37f4b75b0c25da4f71c20d05d6add84be432dc1dae577a3b3cfca3d0652f2f963adf159c08f1f9413cbc260a1fff168162f9684b6a75a2121c9006c155a3a5e1364155129904e3587dec573be111a02acaa5feb8078a9a55181e710895deca0865f2735217d19083d87886a20769e3564ba553d5ace2c02c35ae61c599bb92ccc07fbc0f7319950c8e2ba70adb750c314fd9eab7db6347cabfd9ea639a8e0604141ef12d48ca2ed7acf3a78e91745a08ad67637a630cf3f61e4c81a7e8f0bcd21517ae"}, {0xa0, 0xff, 0x21b, "3de40905d874f1778030de7d408cae84afca22279d91bf6c782db13a046790dda5af3c748c5a8a79f22dd660fb17af9243bbf56c6d02bb38d35f4720463e9acb13a06c53f476b346a93cc50fa7d00e2d160b9ba7b5761d418583c8058026b898bdbdf2cebc2b01150068c20a09625d8beaaa2639b6f687bbbfb3d268ea622e0985efb51295ae427e20"}, {0xc0, 0x117, 0x0, "eeddc887ac0954a66fa48ac167142f27c256e89e5806c1069072a7509f869d31b9f1307477fa77b82628a2f50ce253f668b3a84a857170ea3ca619b3a1328d0e5f03499f88399fb2c38b9f03cd41ebf13a3d3b66343736a606323489562daa9fa417c4e4fe73c24f81042888d092be039d7b8c4d9aa869209022ef954201ddbf6c418de67735b76614c39dad8bccb5badd52d77730c5ac9455fc248b6eabea908b22ab1477e14a4ef2c459cf4461"}, {0x10, 0x88, 0x2a}, {0x80, 0x84, 0x7, "28b843f5f204319bbf27d7a57e5aab105dac29b94cf7caf26da9a7812f77e3476b81128cd882deecd505afdb635426f29c5e42feba457c3f65fd3c4ac23770fdb4412eb7c166c2c6f2943bd65c455804c4a9ac240b9ed421fb4729cc2fb34f2ada152dcc25908929b298eee89b2f94"}, {0x48, 0x10f, 0x80, "65906d9601c772c8abcb4d46447d47314615ea9d9fb8a6aaa748a156a869bfb53d080ccdbe3fadbed9ad70168ad4fc80804c87d8f01aac"}, {0x10, 0x1, 0x10000}], 0x330}}], 0x4, 0xc5) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x0, 0x0, 0x80000008, 0x8}, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x8c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_TBF={0x30}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8c}}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000)={r5, 0xeba, 0x1, 0x3, 0xd1fe, 0x6}, 0x14) 1.982771804s ago: executing program 7 (id=2308): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) close(0x3) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x45, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 1.880300606s ago: executing program 7 (id=2309): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x8005}, 0x0) 1.790032399s ago: executing program 7 (id=2310): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="24002380080002000200000005001e00010000000500130000000000080014"], 0x40}, 0x1, 0x0, 0x0, 0x8005}, 0x0) 1.690601333s ago: executing program 7 (id=2311): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)=@newqdisc={0x9c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r4, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x6c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x100], [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x4]}}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0xc, 0x0, 0x1, [{0x4}]}]}}]}, 0x9c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) socket$netlink(0x10, 0x3, 0x4e9f7fccd0cb5db7) ioctl$SIOCSIFMTU(r0, 0x8948, &(0x7f0000000040)={'vlan1\x00', 0x2003}) r6 = socket(0x8, 0x3, 0x0) ioctl$PPPIOCGL2TPSTATS(r6, 0x400461f1, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r7, &(0x7f0000000780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/17, 0x11}, 0x40}], 0x1, 0x20010122, 0x0) setsockopt$inet6_int(r7, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) r8 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x4f24, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}, 0x1c) getsockopt$sock_buf(r8, 0x1, 0x1c, 0x0, &(0x7f0000000300)) sendto$inet6(r7, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="611234000000000061134c0000000000bf3000000000000015000200000000103d030100000000009500000000000000bc26080000000000bf67000000000000070300000fff07006702000003000000160600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f909ad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe70305865050df26469fac5202"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703360000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20004002) 1.112772254s ago: executing program 8 (id=2312): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560aff820fffff5bab003a0000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100030c100000000000224e0000", 0x58}], 0x1) 1.058915184s ago: executing program 8 (id=2313): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x1410, 0x1, 0x70bd2c, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x24044836}, 0xc094) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000008000000000000000000000000401586c6a0f6a0043b61b50680e397e1066f2e55ab3e79361049e0e952a0a647db55352c9508518f6802d1504cc3c7f0bf0baa48961497b25358a3e2b3d5c8f93284ed8ac280c3ffc537d48361920d49c3b975a88872a7fbeeec8f2529b5376ffb0fc3d7a86e11c7e517d56e13"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r2}, 0x10) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000040)="05000000010001", 0x7) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x30, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_INET6={0x4, 0x2d}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r6) sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)={0x6c, r7, 0x1, 0x70bd67, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x27}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x76}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20004084}, 0x4008800) bind$llc(r5, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000000), 0xffffff6a) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) r11 = socket$pppl2tp(0x18, 0x1, 0x1) r12 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r11, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r12, {0x2, 0x0, @dev}, 0x2}}, 0x2e) sendmsg$L2TP_CMD_SESSION_GET(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x30, r10, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_LNS_MODE={0x5}]}, 0x30}}, 0x0) sendfile(r5, r8, 0x0, 0xffffffff000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b0000000000000000000000e89c000000000000", @ANYRES32=0x1, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB="01000000000000000200"/28], 0x50) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[@ANYBLOB="0e00000002"], 0x8) 0s ago: executing program 8 (id=2314): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000240)=ANY=[@ANYBLOB="e0d7b7cdabc52858f9b92840000002"], 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000020000000000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f00000000c0)=@abs={0x1}, 0x6e) bind$unix(r4, &(0x7f0000003000)=@abs={0x1}, 0x6e) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTALL(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x14, r2, 0xb03, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0xa6ffffffffffffff, 0x0, 0x4000}, 0x20040880) kernel console output (not intermixed with test programs): 72][ T8753] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.647584][ T8753] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.677080][T12590] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1837'. [ 296.711069][T12391] veth1_vlan: entered promiscuous mode [ 296.766728][ T5843] Bluetooth: hci7: command tx timeout [ 296.799059][T12597] netlink: 'syz.5.1840': attribute type 2 has an invalid length. [ 296.877475][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.911821][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.949837][T12391] veth0_macvtap: entered promiscuous mode [ 296.979882][T12391] veth1_macvtap: entered promiscuous mode [ 297.042348][T12391] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 297.093162][T12391] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 297.129410][T12391] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.147641][T12391] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.163194][T12391] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.174280][T12391] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.292648][T12610] syzkaller0: entered promiscuous mode [ 297.300406][T12610] syzkaller0: entered allmulticast mode [ 297.347571][T12608] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1843'. [ 297.615258][ T8756] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.641197][ T8756] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.774992][ T8756] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.793328][ T8756] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.981003][ T5885] net_ratelimit: 1 callbacks suppressed [ 297.981026][ T5885] TC_ACT_REPEAT abuse ? [ 299.335518][T12648] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1858'. [ 299.567865][T12656] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1862'. [ 299.599963][T12656] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1862'. [ 299.612130][T12656] netlink: 'syz.5.1862': attribute type 13 has an invalid length. [ 299.612773][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 299.631247][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 299.643192][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 299.653523][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 299.661464][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 299.714714][T12659] TC_ACT_REPEAT abuse ? [ 299.719754][ C0] TC_ACT_REPEAT abuse ? [ 299.758927][T12657] wg1 speed is unknown, defaulting to 1000 [ 299.767082][T12657] hsr0 speed is unknown, defaulting to 1000 [ 299.858390][T12665] netlink: 596 bytes leftover after parsing attributes in process `syz.7.1864'. [ 300.364146][T12682] bridge_slave_0: left allmulticast mode [ 300.389028][T12682] bridge_slave_0: left promiscuous mode [ 300.408729][T12682] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.428678][T12682] bridge_slave_1: left allmulticast mode [ 300.434391][T12682] bridge_slave_1: left promiscuous mode [ 300.440429][T12682] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.453913][T12682] bond0: (slave bond_slave_0): Releasing backup interface [ 300.474590][T12682] bond0: (slave bond_slave_1): Releasing backup interface [ 300.538658][T12682] team0: Port device team_slave_0 removed [ 300.564180][T12682] team0: Port device team_slave_1 removed [ 300.572110][T12682] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 300.580079][T12682] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 300.589420][T12682] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 300.600497][T12682] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 300.775680][T12657] chnl_net:caif_netlink_parms(): no params data found [ 301.079814][T12657] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.105081][T12657] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.123623][T12657] bridge_slave_0: entered allmulticast mode [ 301.136142][T12657] bridge_slave_0: entered promiscuous mode [ 301.174669][T12711] TC_ACT_REPEAT abuse ? [ 301.179881][ C1] TC_ACT_REPEAT abuse ? [ 301.183686][T12657] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.206633][T12711] TC_ACT_REPEAT abuse ? [ 301.214156][ T8761] TC_ACT_REPEAT abuse ? [ 301.218778][T12657] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.234372][T12657] bridge_slave_1: entered allmulticast mode [ 301.243088][T12711] TC_ACT_REPEAT abuse ? [ 301.244004][T12657] bridge_slave_1: entered promiscuous mode [ 301.247946][ C1] TC_ACT_REPEAT abuse ? [ 301.249055][ C1] TC_ACT_REPEAT abuse ? [ 301.385098][T12657] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 301.457385][T12657] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 301.638860][T12657] team0: Port device team_slave_0 added [ 301.661517][T12657] team0: Port device team_slave_1 added [ 301.730237][ T5843] Bluetooth: hci4: command tx timeout [ 301.748458][T12728] wg1 speed is unknown, defaulting to 1000 [ 301.761743][T12657] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 301.772770][T12657] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.799411][T12657] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 301.813346][T12732] wg1 speed is unknown, defaulting to 1000 [ 301.815200][T12657] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 301.867125][T12657] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.910639][T12657] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 301.923151][T12728] hsr0 speed is unknown, defaulting to 1000 [ 302.024277][T12732] hsr0 speed is unknown, defaulting to 1000 [ 302.114778][T12657] hsr_slave_0: entered promiscuous mode [ 302.122494][T12657] hsr_slave_1: entered promiscuous mode [ 302.143822][T12657] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 302.151889][T12657] Cannot create hsr debugfs directory [ 302.178533][T12739] sctp: [Deprecated]: syz.7.1887 (pid 12739) Use of int in max_burst socket option. [ 302.178533][T12739] Use struct sctp_assoc_value instead [ 302.997705][ T6778] net_ratelimit: 3 callbacks suppressed [ 302.997735][ T6778] TC_ACT_REPEAT abuse ? [ 303.128659][T12657] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.311182][T12657] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.511714][T12657] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.547674][T12779] FAULT_INJECTION: forcing a failure. [ 303.547674][T12779] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 303.579809][T12779] CPU: 0 UID: 0 PID: 12779 Comm: syz.6.1904 Not tainted 6.15.0-rc6-syzkaller-01232-g9ab0ac0e532a #0 PREEMPT(full) [ 303.579844][T12779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 303.579858][T12779] Call Trace: [ 303.579866][T12779] [ 303.579875][T12779] dump_stack_lvl+0x189/0x250 [ 303.579912][T12779] ? __lock_acquire+0xaac/0xd20 [ 303.579948][T12779] ? __pfx_dump_stack_lvl+0x10/0x10 [ 303.579980][T12779] ? __pfx__printk+0x10/0x10 [ 303.580002][T12779] ? __might_fault+0xb0/0x130 [ 303.580043][T12779] should_fail_ex+0x414/0x560 [ 303.580070][T12779] _copy_from_user+0x2d/0xb0 [ 303.580103][T12779] ___sys_sendmsg+0x158/0x2a0 [ 303.580139][T12779] ? __pfx____sys_sendmsg+0x10/0x10 [ 303.580220][T12779] ? __might_fault+0xb0/0x130 [ 303.580254][T12779] __sys_sendmmsg+0x227/0x430 [ 303.580294][T12779] ? __pfx___sys_sendmmsg+0x10/0x10 [ 303.580337][T12779] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 303.580383][T12779] ? ksys_write+0x1f0/0x250 [ 303.580423][T12779] __x64_sys_sendmmsg+0xa0/0xc0 [ 303.580458][T12779] do_syscall_64+0xf6/0x210 [ 303.580485][T12779] ? clear_bhb_loop+0x60/0xb0 [ 303.580512][T12779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.580532][T12779] RIP: 0033:0x7fbf3cd8e969 [ 303.580552][T12779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 303.580571][T12779] RSP: 002b:00007fbf3db45038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 303.580595][T12779] RAX: ffffffffffffffda RBX: 00007fbf3cfb5fa0 RCX: 00007fbf3cd8e969 [ 303.580610][T12779] RDX: 0000000000000054 RSI: 0000200000000640 RDI: 0000000000000003 [ 303.580631][T12779] RBP: 00007fbf3db45090 R08: 0000000000000000 R09: 0000000000000000 [ 303.580644][T12779] R10: 000000000000c040 R11: 0000000000000246 R12: 0000000000000001 [ 303.580657][T12779] R13: 0000000000000000 R14: 00007fbf3cfb5fa0 R15: 00007ffd62c80568 [ 303.580701][T12779] [ 303.835235][ T5843] Bluetooth: hci4: command tx timeout [ 303.848750][T12657] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.273468][T12657] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 304.316826][T12657] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 304.363977][T12657] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 304.391618][T12802] syzkaller0: entered promiscuous mode [ 304.402018][T12802] syzkaller0: entered allmulticast mode [ 304.410464][T12657] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 304.424230][T12804] TC_ACT_REPEAT abuse ? [ 304.481715][T12802] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1912'. [ 304.647271][T12657] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.700630][T12657] 8021q: adding VLAN 0 to HW filter on device team0 [ 304.723282][ T8761] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.730465][ T8761] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.764172][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.771385][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.819302][ T5843] block nbd5: Receive control failed (result -32) [ 305.391427][T12657] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 305.474240][T12657] veth0_vlan: entered promiscuous mode [ 305.490332][T12657] veth1_vlan: entered promiscuous mode [ 305.571413][T12657] veth0_macvtap: entered promiscuous mode [ 305.601224][T12657] veth1_macvtap: entered promiscuous mode [ 305.676053][ T5843] block nbd16: Receive control failed (result -32) [ 305.741621][T12657] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 305.794372][T12657] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 305.823383][T12657] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.832839][T12657] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.842661][T12657] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.855097][T12657] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.903723][ T5843] Bluetooth: hci4: command tx timeout [ 306.108313][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.140844][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.241775][ T8756] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.271855][ T8756] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.291038][ T9] TC_ACT_REPEAT abuse ? [ 307.285183][T12881] netlink: 352 bytes leftover after parsing attributes in process `syz.6.1943'. [ 307.307829][T12881] netlink: 352 bytes leftover after parsing attributes in process `syz.6.1943'. [ 307.570978][ T6773] TC_ACT_REPEAT abuse ? [ 308.675351][T12888] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1946'. [ 308.689325][T12888] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1946'. [ 309.035473][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 309.048453][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 309.060513][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 309.071771][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 309.080933][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 309.172501][T12906] wg1 speed is unknown, defaulting to 1000 [ 309.180520][T12906] hsr0 speed is unknown, defaulting to 1000 [ 309.580371][T12906] chnl_net:caif_netlink_parms(): no params data found [ 309.772198][T12906] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.779675][T12906] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.787726][T12906] bridge_slave_0: entered allmulticast mode [ 309.795576][T12906] bridge_slave_0: entered promiscuous mode [ 309.805480][T12906] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.817282][T12906] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.824718][T12906] bridge_slave_1: entered allmulticast mode [ 309.833389][T12906] bridge_slave_1: entered promiscuous mode [ 309.885580][T12906] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 309.900684][T12906] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 309.961653][T12906] team0: Port device team_slave_0 added [ 309.975203][T12906] team0: Port device team_slave_1 added [ 310.024356][T12906] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 310.031626][T12906] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.064128][T12906] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 310.078753][T12906] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 310.086118][T12906] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.113485][T12906] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 310.193448][T12906] hsr_slave_0: entered promiscuous mode [ 310.200500][T12906] hsr_slave_1: entered promiscuous mode [ 310.207658][T12906] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 310.215346][T12906] Cannot create hsr debugfs directory [ 310.447889][T12906] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.711778][T12906] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.908941][T12906] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.134975][T12958] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input9 [ 311.151861][T12906] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.167572][ T5842] Bluetooth: hci4: command tx timeout [ 311.264947][T12953] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 311.331238][T12950] wg1 speed is unknown, defaulting to 1000 [ 311.340858][T12950] hsr0 speed is unknown, defaulting to 1000 [ 311.664515][T12906] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 311.682035][T12906] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 311.701265][T12906] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 311.713473][T12906] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 311.957113][T12906] 8021q: adding VLAN 0 to HW filter on device bond0 [ 312.023212][T12906] 8021q: adding VLAN 0 to HW filter on device team0 [ 312.049104][ T5885] TC_ACT_REPEAT abuse ? [ 312.049276][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.060654][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.102436][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.109686][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.877241][T13006] FAULT_INJECTION: forcing a failure. [ 312.877241][T13006] name failslab, interval 1, probability 0, space 0, times 0 [ 312.946025][T12992] wg1 speed is unknown, defaulting to 1000 [ 312.953762][T12992] hsr0 speed is unknown, defaulting to 1000 [ 312.970499][T13006] CPU: 1 UID: 0 PID: 13006 Comm: syz.6.1980 Not tainted 6.15.0-rc6-syzkaller-01232-g9ab0ac0e532a #0 PREEMPT(full) [ 312.970532][T13006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 312.970545][T13006] Call Trace: [ 312.970553][T13006] [ 312.970563][T13006] dump_stack_lvl+0x189/0x250 [ 312.970604][T13006] ? __pfx_dump_stack_lvl+0x10/0x10 [ 312.970645][T13006] ? __pfx__printk+0x10/0x10 [ 312.970673][T13006] ? __pfx___might_resched+0x10/0x10 [ 312.970699][T13006] should_fail_ex+0x414/0x560 [ 312.970728][T13006] should_failslab+0xa8/0x100 [ 312.970760][T13006] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 312.970789][T13006] ? __alloc_skb+0x112/0x2d0 [ 312.970822][T13006] __alloc_skb+0x112/0x2d0 [ 312.970855][T13006] netlink_sendmsg+0x5c6/0xb30 [ 312.970896][T13006] ? __pfx_netlink_sendmsg+0x10/0x10 [ 312.970930][T13006] ? aa_sock_msg_perm+0x94/0x160 [ 312.970958][T13006] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 312.970983][T13006] ? __pfx_netlink_sendmsg+0x10/0x10 [ 312.971014][T13006] __sock_sendmsg+0x21c/0x270 [ 312.971041][T13006] ____sys_sendmsg+0x505/0x830 [ 312.971079][T13006] ? __pfx_____sys_sendmsg+0x10/0x10 [ 312.971121][T13006] ? import_iovec+0x74/0xa0 [ 312.971156][T13006] ___sys_sendmsg+0x21f/0x2a0 [ 312.971190][T13006] ? __pfx____sys_sendmsg+0x10/0x10 [ 312.971263][T13006] ? __fget_files+0x2a/0x420 [ 312.971290][T13006] ? __fget_files+0x3a0/0x420 [ 312.971331][T13006] __x64_sys_sendmsg+0x19b/0x260 [ 312.971367][T13006] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 312.971418][T13006] ? do_syscall_64+0xba/0x210 [ 312.971448][T13006] do_syscall_64+0xf6/0x210 [ 312.971473][T13006] ? clear_bhb_loop+0x60/0xb0 [ 312.971500][T13006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.971520][T13006] RIP: 0033:0x7fbf3cd8e969 [ 312.971538][T13006] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 312.971557][T13006] RSP: 002b:00007fbf3db45038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 312.971579][T13006] RAX: ffffffffffffffda RBX: 00007fbf3cfb5fa0 RCX: 00007fbf3cd8e969 [ 312.971594][T13006] RDX: 0000000020040040 RSI: 0000200000000000 RDI: 0000000000000003 [ 312.971609][T13006] RBP: 00007fbf3db45090 R08: 0000000000000000 R09: 0000000000000000 [ 312.971622][T13006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 312.971640][T13006] R13: 0000000000000000 R14: 00007fbf3cfb5fa0 R15: 00007ffd62c80568 [ 312.971673][T13006] [ 312.975562][T12906] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 313.253840][ T5842] Bluetooth: hci4: command tx timeout [ 313.340591][T13013] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1982'. [ 313.549407][T13015] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1984'. [ 313.740113][T13019] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1977'. [ 313.855704][T12906] veth0_vlan: entered promiscuous mode [ 313.935699][T12906] veth1_vlan: entered promiscuous mode [ 314.081037][T12906] veth0_macvtap: entered promiscuous mode [ 314.117871][T12906] veth1_macvtap: entered promiscuous mode [ 314.180277][T12906] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 314.231553][T12906] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 314.272117][T12906] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.312454][T12906] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.346049][T12906] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.376026][T12906] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.616155][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.642134][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.752895][ T8748] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.793617][ T8748] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.902728][T13051] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1995'. [ 315.177376][T13060] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 317.176583][ C0] TC_ACT_REPEAT abuse ? [ 317.187128][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.272776][T13086] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20003 [ 317.329392][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 317.339926][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 317.348576][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 317.357712][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 317.367443][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 317.540825][T13095] TC_ACT_REPEAT abuse ? [ 317.550749][T13088] wg1 speed is unknown, defaulting to 1000 [ 317.577995][T13088] hsr0 speed is unknown, defaulting to 1000 [ 317.628839][ T5842] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 317.677481][ T5842] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 317.690233][ T5842] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 317.705103][ T5842] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 317.722407][ T5842] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 317.989854][T13108] netlink: 'syz.5.2012': attribute type 5 has an invalid length. [ 317.997290][T13100] wg1 speed is unknown, defaulting to 1000 [ 318.121619][T13100] hsr0 speed is unknown, defaulting to 1000 [ 318.485680][T13088] chnl_net:caif_netlink_parms(): no params data found [ 318.568600][ T5843] block nbd17: Receive control failed (result -32) [ 318.717827][ T5843] block nbd18: Receive control failed (result -32) [ 319.014189][T13088] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.036179][T13088] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.059155][T13088] bridge_slave_0: entered allmulticast mode [ 319.067737][T13088] bridge_slave_0: entered promiscuous mode [ 319.118746][T13088] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.136162][T13088] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.153809][T13088] bridge_slave_1: entered allmulticast mode [ 319.169291][T13088] bridge_slave_1: entered promiscuous mode [ 319.187756][T13156] netlink: 'syz.7.2028': attribute type 4 has an invalid length. [ 319.211565][T13156] netlink: 'syz.7.2028': attribute type 10 has an invalid length. [ 319.239651][T13156] netlink: 'syz.7.2028': attribute type 5 has an invalid length. [ 319.315508][T13100] chnl_net:caif_netlink_parms(): no params data found [ 319.332195][T13163] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2030'. [ 319.351757][T13088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 319.408652][T13088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 319.492857][ T5843] Bluetooth: hci4: command tx timeout [ 319.704717][T13169] erspan1: entered allmulticast mode [ 319.800589][T13088] team0: Port device team_slave_0 added [ 319.807324][ T5843] Bluetooth: hci8: command tx timeout [ 319.830838][T13088] team0: Port device team_slave_1 added [ 319.964815][T13174] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0 [ 320.005279][T13100] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.013407][T13100] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.024264][T13100] bridge_slave_0: entered allmulticast mode [ 320.035803][T13100] bridge_slave_0: entered promiscuous mode [ 320.047137][T13088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 320.059068][T13088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 320.088901][T13088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 320.115531][T13100] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.133168][T13100] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.156403][T13100] bridge_slave_1: entered allmulticast mode [ 320.174300][T13100] bridge_slave_1: entered promiscuous mode [ 320.248704][T13088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 320.282461][T13088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 320.314986][T13088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 320.425228][T13100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 320.445794][T13100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 320.573562][T13100] team0: Port device team_slave_0 added [ 320.684071][T13100] team0: Port device team_slave_1 added [ 320.713608][T13088] hsr_slave_0: entered promiscuous mode [ 320.727327][ T5843] block nbd19: Receive control failed (result -32) [ 320.758700][T13088] hsr_slave_1: entered promiscuous mode [ 320.765377][T13088] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 320.778567][T13088] Cannot create hsr debugfs directory [ 320.885141][T13193] netlink: 'syz.7.2038': attribute type 7 has an invalid length. [ 320.904747][T13100] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 320.928109][T13100] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 320.979874][T13100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 321.014762][T13196] FAULT_INJECTION: forcing a failure. [ 321.014762][T13196] name failslab, interval 1, probability 0, space 0, times 0 [ 321.027948][T13196] CPU: 0 UID: 0 PID: 13196 Comm: syz.7.2039 Not tainted 6.15.0-rc6-syzkaller-01232-g9ab0ac0e532a #0 PREEMPT(full) [ 321.027979][T13196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 321.028017][T13196] Call Trace: [ 321.028027][T13196] [ 321.028036][T13196] dump_stack_lvl+0x189/0x250 [ 321.028076][T13196] ? __pfx_dump_stack_lvl+0x10/0x10 [ 321.028108][T13196] ? __pfx__printk+0x10/0x10 [ 321.028138][T13196] ? ref_tracker_alloc+0x318/0x460 [ 321.028167][T13196] should_fail_ex+0x414/0x560 [ 321.028196][T13196] should_failslab+0xa8/0x100 [ 321.028228][T13196] kmem_cache_alloc_noprof+0x73/0x3c0 [ 321.028257][T13196] ? skb_clone+0x212/0x3a0 [ 321.028282][T13196] skb_clone+0x212/0x3a0 [ 321.028306][T13196] __netlink_deliver_tap+0x404/0x850 [ 321.028351][T13196] ? netlink_deliver_tap+0x2e/0x1b0 [ 321.028383][T13196] netlink_deliver_tap+0x19c/0x1b0 [ 321.028414][T13196] netlink_unicast+0x72f/0x8d0 [ 321.028454][T13196] netlink_sendmsg+0x805/0xb30 [ 321.028495][T13196] ? __pfx_netlink_sendmsg+0x10/0x10 [ 321.028530][T13196] ? aa_sock_msg_perm+0x94/0x160 [ 321.028557][T13196] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 321.028583][T13196] ? __pfx_netlink_sendmsg+0x10/0x10 [ 321.028615][T13196] __sock_sendmsg+0x21c/0x270 [ 321.028642][T13196] ____sys_sendmsg+0x505/0x830 [ 321.028681][T13196] ? __pfx_____sys_sendmsg+0x10/0x10 [ 321.028724][T13196] ? import_iovec+0x74/0xa0 [ 321.028759][T13196] ___sys_sendmsg+0x21f/0x2a0 [ 321.028793][T13196] ? __pfx____sys_sendmsg+0x10/0x10 [ 321.028874][T13196] ? __fget_files+0x2a/0x420 [ 321.028903][T13196] ? __fget_files+0x3a0/0x420 [ 321.028945][T13196] __x64_sys_sendmsg+0x19b/0x260 [ 321.028980][T13196] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 321.029038][T13196] ? do_syscall_64+0xba/0x210 [ 321.029068][T13196] do_syscall_64+0xf6/0x210 [ 321.029094][T13196] ? clear_bhb_loop+0x60/0xb0 [ 321.029119][T13196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.029139][T13196] RIP: 0033:0x7f93bc98e969 [ 321.029158][T13196] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 321.029176][T13196] RSP: 002b:00007f93bd75c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 321.029198][T13196] RAX: ffffffffffffffda RBX: 00007f93bcbb5fa0 RCX: 00007f93bc98e969 [ 321.029214][T13196] RDX: 0000000020040040 RSI: 0000200000000000 RDI: 0000000000000003 [ 321.029227][T13196] RBP: 00007f93bd75c090 R08: 0000000000000000 R09: 0000000000000000 [ 321.029239][T13196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 321.029251][T13196] R13: 0000000000000000 R14: 00007f93bcbb5fa0 R15: 00007ffd1fad0588 [ 321.029283][T13196] [ 321.350582][T13100] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 321.358420][T13100] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.417469][T13100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 321.498008][T13100] hsr_slave_0: entered promiscuous mode [ 321.504844][T13100] hsr_slave_1: entered promiscuous mode [ 321.512089][T13100] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 321.519824][T13100] Cannot create hsr debugfs directory [ 321.554890][T13200] batadv_slave_1: entered promiscuous mode [ 321.567072][T13200] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2041'. [ 321.574697][ T5843] Bluetooth: hci4: command tx timeout [ 321.650840][ T5885] TC_ACT_REPEAT abuse ? [ 321.657425][ T53] TC_ACT_REPEAT abuse ? [ 321.761000][T13209] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2042'. [ 321.886300][ T5843] Bluetooth: hci8: command tx timeout [ 322.267886][T13226] FAULT_INJECTION: forcing a failure. [ 322.267886][T13226] name failslab, interval 1, probability 0, space 0, times 0 [ 322.307712][T13226] CPU: 0 UID: 0 PID: 13226 Comm: syz.5.2049 Not tainted 6.15.0-rc6-syzkaller-01232-g9ab0ac0e532a #0 PREEMPT(full) [ 322.307746][T13226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 322.307760][T13226] Call Trace: [ 322.307769][T13226] [ 322.307780][T13226] dump_stack_lvl+0x189/0x250 [ 322.307822][T13226] ? __pfx_dump_stack_lvl+0x10/0x10 [ 322.307853][T13226] ? __pfx__printk+0x10/0x10 [ 322.307883][T13226] ? __pfx___might_resched+0x10/0x10 [ 322.307931][T13226] should_fail_ex+0x414/0x560 [ 322.307959][T13226] should_failslab+0xa8/0x100 [ 322.308000][T13226] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 322.308032][T13226] ? __alloc_skb+0x112/0x2d0 [ 322.308058][T13226] ? __pfx___mutex_trylock_common+0x10/0x10 [ 322.308086][T13226] __alloc_skb+0x112/0x2d0 [ 322.308119][T13226] netlink_dump+0x22b/0xe20 [ 322.308150][T13226] ? __netlink_lookup+0xbd/0x810 [ 322.308189][T13226] ? __pfx_netlink_dump+0x10/0x10 [ 322.308232][T13226] ? netlink_lookup+0x30/0x200 [ 322.308259][T13226] ? netlink_lookup+0x30/0x200 [ 322.308284][T13226] ? netlink_lookup+0x30/0x200 [ 322.308319][T13226] __netlink_dump_start+0x5cb/0x7e0 [ 322.308358][T13226] rtnetlink_rcv_msg+0x9eb/0xb70 [ 322.308388][T13226] ? __pfx_inet6_dump_ifmcaddr+0x10/0x10 [ 322.308411][T13226] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 322.308437][T13226] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 322.308461][T13226] ? ref_tracker_free+0x63a/0x7d0 [ 322.308485][T13226] ? __pfx_inet6_dump_ifmcaddr+0x10/0x10 [ 322.308525][T13226] netlink_rcv_skb+0x205/0x470 [ 322.308555][T13226] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 322.308584][T13226] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 322.308629][T13226] ? netlink_deliver_tap+0x2e/0x1b0 [ 322.308658][T13226] ? netlink_deliver_tap+0x2e/0x1b0 [ 322.308694][T13226] netlink_unicast+0x758/0x8d0 [ 322.308734][T13226] netlink_sendmsg+0x805/0xb30 [ 322.308775][T13226] ? __pfx_netlink_sendmsg+0x10/0x10 [ 322.308810][T13226] ? aa_sock_msg_perm+0x94/0x160 [ 322.308837][T13226] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 322.308863][T13226] ? __pfx_netlink_sendmsg+0x10/0x10 [ 322.308895][T13226] __sock_sendmsg+0x21c/0x270 [ 322.308923][T13226] ____sys_sendmsg+0x505/0x830 [ 322.308962][T13226] ? __pfx_____sys_sendmsg+0x10/0x10 [ 322.309013][T13226] ? import_iovec+0x74/0xa0 [ 322.309049][T13226] ___sys_sendmsg+0x21f/0x2a0 [ 322.309085][T13226] ? __pfx____sys_sendmsg+0x10/0x10 [ 322.309160][T13226] ? __fget_files+0x2a/0x420 [ 322.309189][T13226] ? __fget_files+0x3a0/0x420 [ 322.309231][T13226] __x64_sys_sendmsg+0x19b/0x260 [ 322.309267][T13226] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 322.309320][T13226] ? do_syscall_64+0xba/0x210 [ 322.309350][T13226] do_syscall_64+0xf6/0x210 [ 322.309376][T13226] ? clear_bhb_loop+0x60/0xb0 [ 322.309404][T13226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.309425][T13226] RIP: 0033:0x7f2bddb8e969 [ 322.309444][T13226] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 322.309463][T13226] RSP: 002b:00007f2bde96e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 322.309486][T13226] RAX: ffffffffffffffda RBX: 00007f2bdddb5fa0 RCX: 00007f2bddb8e969 [ 322.309501][T13226] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 322.309514][T13226] RBP: 00007f2bde96e090 R08: 0000000000000000 R09: 0000000000000000 [ 322.309527][T13226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 322.309540][T13226] R13: 0000000000000000 R14: 00007f2bdddb5fa0 R15: 00007ffdeee10238 [ 322.309574][T13226] [ 322.764455][T13088] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.093827][T13088] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.164722][T13236] syzkaller0: entered promiscuous mode [ 323.170713][T13236] syzkaller0: entered allmulticast mode [ 323.182569][T13244] netlink: 'syz.5.2054': attribute type 2 has an invalid length. [ 323.195849][T13244] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2054'. [ 323.320042][T13088] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.381234][T13249] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2057'. [ 323.390485][T13249] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2057'. [ 323.474162][T13088] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.646226][ T5843] Bluetooth: hci4: command tx timeout [ 323.722960][T13088] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 323.762189][T13262] FAULT_INJECTION: forcing a failure. [ 323.762189][T13262] name failslab, interval 1, probability 0, space 0, times 0 [ 323.777111][T13262] CPU: 1 UID: 0 PID: 13262 Comm: syz.5.2063 Not tainted 6.15.0-rc6-syzkaller-01232-g9ab0ac0e532a #0 PREEMPT(full) [ 323.777143][T13262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 323.777156][T13262] Call Trace: [ 323.777164][T13262] [ 323.777175][T13262] dump_stack_lvl+0x189/0x250 [ 323.777214][T13262] ? __pfx_dump_stack_lvl+0x10/0x10 [ 323.777247][T13262] ? __pfx__printk+0x10/0x10 [ 323.777273][T13262] ? __pfx___might_resched+0x10/0x10 [ 323.777294][T13262] ? fs_reclaim_acquire+0x7d/0x100 [ 323.777334][T13262] should_fail_ex+0x414/0x560 [ 323.777363][T13262] should_failslab+0xa8/0x100 [ 323.777396][T13262] __kmalloc_noprof+0xcb/0x4f0 [ 323.777422][T13262] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 323.777441][T13262] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 323.777470][T13262] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 323.777501][T13262] genl_family_rcv_msg_doit+0xb8/0x300 [ 323.777533][T13262] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 323.777559][T13262] ? rcu_is_watching+0x15/0xb0 [ 323.777582][T13262] ? apparmor_capable+0x137/0x1b0 [ 323.777616][T13262] ? bpf_lsm_capable+0x9/0x20 [ 323.777646][T13262] ? security_capable+0x7e/0x2e0 [ 323.777679][T13262] genl_rcv_msg+0x60e/0x790 [ 323.777709][T13262] ? __pfx_genl_rcv_msg+0x10/0x10 [ 323.777729][T13262] ? ref_tracker_free+0x63a/0x7d0 [ 323.777753][T13262] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 323.777788][T13262] ? __pfx_ref_tracker_free+0x10/0x10 [ 323.777825][T13262] netlink_rcv_skb+0x205/0x470 [ 323.777853][T13262] ? __lock_acquire+0xaac/0xd20 [ 323.777885][T13262] ? __pfx_genl_rcv_msg+0x10/0x10 [ 323.777910][T13262] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 323.777960][T13262] ? down_read+0x1ad/0x2e0 [ 323.777990][T13262] genl_rcv+0x28/0x40 [ 323.778011][T13262] netlink_unicast+0x758/0x8d0 [ 323.778049][T13262] netlink_sendmsg+0x805/0xb30 [ 323.778100][T13262] ? __pfx_netlink_sendmsg+0x10/0x10 [ 323.778133][T13262] ? aa_sock_msg_perm+0x94/0x160 [ 323.778160][T13262] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 323.778185][T13262] ? __pfx_netlink_sendmsg+0x10/0x10 [ 323.778215][T13262] __sock_sendmsg+0x21c/0x270 [ 323.778244][T13262] ____sys_sendmsg+0x505/0x830 [ 323.778283][T13262] ? __pfx_____sys_sendmsg+0x10/0x10 [ 323.778326][T13262] ? import_iovec+0x74/0xa0 [ 323.778361][T13262] ___sys_sendmsg+0x21f/0x2a0 [ 323.778397][T13262] ? __pfx____sys_sendmsg+0x10/0x10 [ 323.778468][T13262] ? __fget_files+0x2a/0x420 [ 323.778495][T13262] ? __fget_files+0x3a0/0x420 [ 323.778535][T13262] __x64_sys_sendmsg+0x19b/0x260 [ 323.778572][T13262] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 323.778623][T13262] ? do_syscall_64+0xba/0x210 [ 323.778652][T13262] do_syscall_64+0xf6/0x210 [ 323.778677][T13262] ? clear_bhb_loop+0x60/0xb0 [ 323.778704][T13262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.778724][T13262] RIP: 0033:0x7f2bddb8e969 [ 323.778742][T13262] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 323.778761][T13262] RSP: 002b:00007f2bde96e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 323.778783][T13262] RAX: ffffffffffffffda RBX: 00007f2bdddb5fa0 RCX: 00007f2bddb8e969 [ 323.778799][T13262] RDX: 0000000020040040 RSI: 0000200000000000 RDI: 0000000000000003 [ 323.778813][T13262] RBP: 00007f2bde96e090 R08: 0000000000000000 R09: 0000000000000000 [ 323.778826][T13262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 323.778838][T13262] R13: 0000000000000000 R14: 00007f2bdddb5fa0 R15: 00007ffdeee10238 [ 323.778873][T13262] [ 323.817747][T13265] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2064'. [ 323.824151][T13088] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 323.966172][ T5843] Bluetooth: hci8: command tx timeout [ 324.126370][T13088] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 324.210011][T13271] netlink: 'syz.5.2066': attribute type 5 has an invalid length. [ 324.257482][T13088] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 324.292108][T13271] FAULT_INJECTION: forcing a failure. [ 324.292108][T13271] name failslab, interval 1, probability 0, space 0, times 0 [ 324.327260][T13271] CPU: 0 UID: 0 PID: 13271 Comm: syz.5.2066 Not tainted 6.15.0-rc6-syzkaller-01232-g9ab0ac0e532a #0 PREEMPT(full) [ 324.327291][T13271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 324.327304][T13271] Call Trace: [ 324.327313][T13271] [ 324.327322][T13271] dump_stack_lvl+0x189/0x250 [ 324.327362][T13271] ? __pfx_dump_stack_lvl+0x10/0x10 [ 324.327394][T13271] ? __pfx__printk+0x10/0x10 [ 324.327422][T13271] ? __pfx___might_resched+0x10/0x10 [ 324.327442][T13271] ? fs_reclaim_acquire+0x7d/0x100 [ 324.327481][T13271] should_fail_ex+0x414/0x560 [ 324.327509][T13271] should_failslab+0xa8/0x100 [ 324.327541][T13271] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 324.327570][T13271] ? __alloc_skb+0x112/0x2d0 [ 324.327603][T13271] __alloc_skb+0x112/0x2d0 [ 324.327636][T13271] netlink_ack+0x146/0xa50 [ 324.327662][T13271] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 324.327687][T13271] ? ref_tracker_free+0x63a/0x7d0 [ 324.327709][T13271] ? __copy_skb_header+0xa7/0x550 [ 324.327760][T13271] ? __pfx_ref_tracker_free+0x10/0x10 [ 324.327809][T13271] netlink_rcv_skb+0x28c/0x470 [ 324.327839][T13271] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 324.327868][T13271] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 324.327911][T13271] ? netlink_deliver_tap+0x2e/0x1b0 [ 324.327940][T13271] ? netlink_deliver_tap+0x2e/0x1b0 [ 324.327976][T13271] netlink_unicast+0x758/0x8d0 [ 324.328014][T13271] netlink_sendmsg+0x805/0xb30 [ 324.328055][T13271] ? __pfx_netlink_sendmsg+0x10/0x10 [ 324.328089][T13271] ? aa_sock_msg_perm+0x94/0x160 [ 324.328116][T13271] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 324.328142][T13271] ? __pfx_netlink_sendmsg+0x10/0x10 [ 324.328172][T13271] __sock_sendmsg+0x21c/0x270 [ 324.328200][T13271] __sys_sendto+0x3bd/0x520 [ 324.328235][T13271] ? __pfx___sys_sendto+0x10/0x10 [ 324.328260][T13271] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 324.328300][T13271] ? __fget_files+0x3a0/0x420 [ 324.328342][T13271] ? ksys_write+0x1f0/0x250 [ 324.328365][T13271] ? rcu_is_watching+0x15/0xb0 [ 324.328395][T13271] __x64_sys_sendto+0xde/0x100 [ 324.328428][T13271] do_syscall_64+0xf6/0x210 [ 324.328454][T13271] ? clear_bhb_loop+0x60/0xb0 [ 324.328481][T13271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.328501][T13271] RIP: 0033:0x7f2bddb8e969 [ 324.328520][T13271] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 324.328538][T13271] RSP: 002b:00007f2bde96e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 324.328560][T13271] RAX: ffffffffffffffda RBX: 00007f2bdddb5fa0 RCX: 00007f2bddb8e969 [ 324.328576][T13271] RDX: 0000000000000078 RSI: 0000200000000080 RDI: 0000000000000003 [ 324.328589][T13271] RBP: 00007f2bde96e090 R08: 0000000000000000 R09: 0000000000000000 [ 324.328602][T13271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 324.328614][T13271] R13: 0000000000000000 R14: 00007f2bdddb5fa0 R15: 00007ffdeee10238 [ 324.328647][T13271] [ 324.484141][T13100] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 324.702929][T13100] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 324.722577][T13100] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 324.759729][T13100] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 324.809949][T13280] syzkaller0: entered promiscuous mode [ 324.819582][T13280] syzkaller0: entered allmulticast mode [ 325.058784][T13088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 325.201829][T13088] 8021q: adding VLAN 0 to HW filter on device team0 [ 325.282601][ T8748] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.289865][ T8748] bridge0: port 1(bridge_slave_0) entered forwarding state [ 325.341007][ T8756] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.348464][ T8756] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.381720][T13293] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2076'. [ 325.419451][T13100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 325.521626][T13100] 8021q: adding VLAN 0 to HW filter on device team0 [ 325.645359][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.652708][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 325.738483][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.745677][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.753356][ T5843] Bluetooth: hci4: command tx timeout [ 326.002230][T13309] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2078'. [ 326.206573][ T5842] Bluetooth: hci8: command tx timeout [ 326.690017][T13306] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.697874][T13306] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.413511][ T65] TC_ACT_REPEAT abuse ? [ 327.431761][ T6880] TC_ACT_REPEAT abuse ? [ 327.566975][T13306] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 327.677498][T13306] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 327.806416][ T5843] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 328.308363][T13306] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.331246][T13306] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.350580][T13306] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.363707][T13306] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.821239][T13100] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 329.046719][T13337] FAULT_INJECTION: forcing a failure. [ 329.046719][T13337] name failslab, interval 1, probability 0, space 0, times 0 [ 329.100002][T13337] CPU: 1 UID: 0 PID: 13337 Comm: syz.7.2085 Not tainted 6.15.0-rc6-syzkaller-01232-g9ab0ac0e532a #0 PREEMPT(full) [ 329.100039][T13337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 329.100052][T13337] Call Trace: [ 329.100061][T13337] [ 329.100070][T13337] dump_stack_lvl+0x189/0x250 [ 329.100112][T13337] ? __pfx_dump_stack_lvl+0x10/0x10 [ 329.100144][T13337] ? __pfx__printk+0x10/0x10 [ 329.100173][T13337] ? __pfx___might_resched+0x10/0x10 [ 329.100193][T13337] ? fs_reclaim_acquire+0x7d/0x100 [ 329.100232][T13337] should_fail_ex+0x414/0x560 [ 329.100261][T13337] should_failslab+0xa8/0x100 [ 329.100293][T13337] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 329.100322][T13337] ? __alloc_skb+0x112/0x2d0 [ 329.100356][T13337] __alloc_skb+0x112/0x2d0 [ 329.100460][T13337] netlink_ack+0x146/0xa50 [ 329.100486][T13337] ? __pfx_genl_rcv_msg+0x10/0x10 [ 329.100507][T13337] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 329.100529][T13337] ? __pfx_nl80211_post_doit+0x10/0x10 [ 329.100567][T13337] netlink_rcv_skb+0x28c/0x470 [ 329.100594][T13337] ? __lock_acquire+0xaac/0xd20 [ 329.100626][T13337] ? __pfx_genl_rcv_msg+0x10/0x10 [ 329.100650][T13337] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 329.100695][T13337] ? down_read+0x1ad/0x2e0 [ 329.100725][T13337] genl_rcv+0x28/0x40 [ 329.100745][T13337] netlink_unicast+0x758/0x8d0 [ 329.100784][T13337] netlink_sendmsg+0x805/0xb30 [ 329.100825][T13337] ? __pfx_netlink_sendmsg+0x10/0x10 [ 329.100860][T13337] ? aa_sock_msg_perm+0x94/0x160 [ 329.100887][T13337] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 329.100913][T13337] ? __pfx_netlink_sendmsg+0x10/0x10 [ 329.100944][T13337] __sock_sendmsg+0x21c/0x270 [ 329.100972][T13337] ____sys_sendmsg+0x505/0x830 [ 329.101014][T13337] ? __pfx_____sys_sendmsg+0x10/0x10 [ 329.101057][T13337] ? import_iovec+0x74/0xa0 [ 329.101092][T13337] ___sys_sendmsg+0x21f/0x2a0 [ 329.101127][T13337] ? __pfx____sys_sendmsg+0x10/0x10 [ 329.101201][T13337] ? __fget_files+0x2a/0x420 [ 329.101230][T13337] ? __fget_files+0x3a0/0x420 [ 329.101272][T13337] __x64_sys_sendmsg+0x19b/0x260 [ 329.101307][T13337] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 329.101360][T13337] ? do_syscall_64+0xba/0x210 [ 329.101395][T13337] do_syscall_64+0xf6/0x210 [ 329.101422][T13337] ? clear_bhb_loop+0x60/0xb0 [ 329.101448][T13337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.101469][T13337] RIP: 0033:0x7f93bc98e969 [ 329.101489][T13337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 329.101507][T13337] RSP: 002b:00007f93bd75c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 329.101530][T13337] RAX: ffffffffffffffda RBX: 00007f93bcbb5fa0 RCX: 00007f93bc98e969 [ 329.101545][T13337] RDX: 0000000000000040 RSI: 00002000000004c0 RDI: 0000000000000003 [ 329.101558][T13337] RBP: 00007f93bd75c090 R08: 0000000000000000 R09: 0000000000000000 [ 329.101571][T13337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 329.101583][T13337] R13: 0000000000000000 R14: 00007f93bcbb5fa0 R15: 00007ffd1fad0588 [ 329.101617][T13337] [ 329.514429][T13088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 329.587261][T13088] veth0_vlan: entered promiscuous mode [ 329.600449][T13088] veth1_vlan: entered promiscuous mode [ 329.649510][T13088] veth0_macvtap: entered promiscuous mode [ 329.805706][T13088] veth1_macvtap: entered promiscuous mode [ 329.959009][T13088] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 329.994607][T13088] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 330.044626][T13088] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.063504][T13088] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.072701][T13088] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.082003][T13088] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.125825][T13100] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 330.361342][ T8756] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.369782][ T8756] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.517327][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.546917][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.956666][T13368] netlink: 'syz.5.2098': attribute type 2 has an invalid length. [ 331.016235][T13368] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2098'. [ 331.090814][T13374] FAULT_INJECTION: forcing a failure. [ 331.090814][T13374] name failslab, interval 1, probability 0, space 0, times 0 [ 331.133011][T13374] CPU: 1 UID: 0 PID: 13374 Comm: syz.6.2099 Not tainted 6.15.0-rc6-syzkaller-01232-g9ab0ac0e532a #0 PREEMPT(full) [ 331.133044][T13374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 331.133058][T13374] Call Trace: [ 331.133066][T13374] [ 331.133076][T13374] dump_stack_lvl+0x189/0x250 [ 331.133116][T13374] ? __pfx_dump_stack_lvl+0x10/0x10 [ 331.133147][T13374] ? __pfx__printk+0x10/0x10 [ 331.133176][T13374] ? __pfx___might_resched+0x10/0x10 [ 331.133202][T13374] should_fail_ex+0x414/0x560 [ 331.133232][T13374] should_failslab+0xa8/0x100 [ 331.133263][T13374] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 331.133293][T13374] ? __alloc_skb+0x112/0x2d0 [ 331.133327][T13374] __alloc_skb+0x112/0x2d0 [ 331.133360][T13374] netlink_sendmsg+0x5c6/0xb30 [ 331.133400][T13374] ? __pfx_netlink_sendmsg+0x10/0x10 [ 331.133434][T13374] ? aa_sock_msg_perm+0x94/0x160 [ 331.133462][T13374] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 331.133487][T13374] ? __pfx_netlink_sendmsg+0x10/0x10 [ 331.133519][T13374] __sock_sendmsg+0x21c/0x270 [ 331.133553][T13374] ____sys_sendmsg+0x505/0x830 [ 331.133592][T13374] ? __pfx_____sys_sendmsg+0x10/0x10 [ 331.133634][T13374] ? import_iovec+0x74/0xa0 [ 331.133669][T13374] ___sys_sendmsg+0x21f/0x2a0 [ 331.133703][T13374] ? __pfx____sys_sendmsg+0x10/0x10 [ 331.133776][T13374] ? __fget_files+0x2a/0x420 [ 331.133804][T13374] ? __fget_files+0x3a0/0x420 [ 331.133845][T13374] __x64_sys_sendmsg+0x19b/0x260 [ 331.133879][T13374] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 331.133930][T13374] ? do_syscall_64+0xba/0x210 [ 331.133960][T13374] do_syscall_64+0xf6/0x210 [ 331.133986][T13374] ? clear_bhb_loop+0x60/0xb0 [ 331.134012][T13374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.134032][T13374] RIP: 0033:0x7fbf3cd8e969 [ 331.134051][T13374] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 331.134070][T13374] RSP: 002b:00007fbf3db45038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 331.134092][T13374] RAX: ffffffffffffffda RBX: 00007fbf3cfb5fa0 RCX: 00007fbf3cd8e969 [ 331.134107][T13374] RDX: 0000000004004800 RSI: 0000200000000540 RDI: 0000000000000003 [ 331.134121][T13374] RBP: 00007fbf3db45090 R08: 0000000000000000 R09: 0000000000000000 [ 331.134133][T13374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 331.134145][T13374] R13: 0000000000000000 R14: 00007fbf3cfb5fa0 R15: 00007ffd62c80568 [ 331.134179][T13374] [ 331.531431][T13100] veth0_vlan: entered promiscuous mode [ 331.566352][T13100] veth1_vlan: entered promiscuous mode [ 331.615135][T13100] veth0_macvtap: entered promiscuous mode [ 331.636076][T13100] veth1_macvtap: entered promiscuous mode [ 331.662700][T13100] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 331.680142][T13100] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 331.693186][T13100] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.702477][T13100] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.713019][T13100] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.722094][T13100] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.838198][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.856089][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.892526][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.905288][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.713069][T13383] FAULT_INJECTION: forcing a failure. [ 332.713069][T13383] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 332.714931][T13380] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2102'. [ 332.767482][T13383] CPU: 0 UID: 0 PID: 13383 Comm: syz.8.2003 Not tainted 6.15.0-rc6-syzkaller-01232-g9ab0ac0e532a #0 PREEMPT(full) [ 332.767516][T13383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 332.767530][T13383] Call Trace: [ 332.767538][T13383] [ 332.767547][T13383] dump_stack_lvl+0x189/0x250 [ 332.767583][T13383] ? __lock_acquire+0xaac/0xd20 [ 332.767617][T13383] ? __pfx_dump_stack_lvl+0x10/0x10 [ 332.767647][T13383] ? __pfx__printk+0x10/0x10 [ 332.767669][T13383] ? __might_fault+0xb0/0x130 [ 332.767710][T13383] should_fail_ex+0x414/0x560 [ 332.767739][T13383] _copy_from_user+0x2d/0xb0 [ 332.767772][T13383] ___sys_sendmsg+0x158/0x2a0 [ 332.767804][T13383] ? __pfx____sys_sendmsg+0x10/0x10 [ 332.767882][T13383] ? __fget_files+0x2a/0x420 [ 332.767911][T13383] ? __fget_files+0x3a0/0x420 [ 332.767952][T13383] __x64_sys_sendmsg+0x19b/0x260 [ 332.767993][T13383] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 332.768042][T13383] ? do_syscall_64+0xba/0x210 [ 332.768072][T13383] do_syscall_64+0xf6/0x210 [ 332.768098][T13383] ? clear_bhb_loop+0x60/0xb0 [ 332.768125][T13383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.768146][T13383] RIP: 0033:0x7fccd0b8e969 [ 332.768166][T13383] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 332.768184][T13383] RSP: 002b:00007fccd19b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 332.768207][T13383] RAX: ffffffffffffffda RBX: 00007fccd0db5fa0 RCX: 00007fccd0b8e969 [ 332.768222][T13383] RDX: 0000000000008000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 332.768236][T13383] RBP: 00007fccd19b7090 R08: 0000000000000000 R09: 0000000000000000 [ 332.768248][T13383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 332.768260][T13383] R13: 0000000000000000 R14: 00007fccd0db5fa0 R15: 00007ffc1e639d18 [ 332.768292][T13383] [ 333.194378][ T8748] TC_ACT_REPEAT abuse ? [ 333.199236][ T8748] TC_ACT_REPEAT abuse ? [ 333.215014][T13389] netlink: 168 bytes leftover after parsing attributes in process `syz.5.2104'. [ 333.282390][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 333.315104][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 333.334189][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 333.344017][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 333.354182][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 333.362054][T13393] TC_ACT_REPEAT abuse ? [ 333.462215][T13392] wg1 speed is unknown, defaulting to 1000 [ 333.492663][T13392] hsr0 speed is unknown, defaulting to 1000 [ 333.602087][T13398] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2106'. [ 333.642832][T13398] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2106'. [ 333.699777][T13398] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2106'. [ 333.710955][T13393] TC_ACT_REPEAT abuse ? [ 334.053730][T13393] TC_ACT_REPEAT abuse ? [ 334.120267][T13393] TC_ACT_REPEAT abuse ? [ 334.471457][T13392] chnl_net:caif_netlink_parms(): no params data found [ 334.703280][T13425] TC_ACT_REPEAT abuse ? [ 334.838297][T13392] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.848280][T13392] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.855698][T13392] bridge_slave_0: entered allmulticast mode [ 334.865137][T13392] bridge_slave_0: entered promiscuous mode [ 334.879653][T13392] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.887633][T13392] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.895612][T13392] bridge_slave_1: entered allmulticast mode [ 334.909018][T13392] bridge_slave_1: entered promiscuous mode [ 334.943109][ T5843] block nbd20: Receive control failed (result -32) [ 335.051601][T13441] netlink: 104 bytes leftover after parsing attributes in process `syz.7.2121'. [ 335.066570][T13392] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 335.092544][T13392] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 335.120779][T13442] netlink: 104 bytes leftover after parsing attributes in process `syz.7.2121'. [ 335.258649][T13392] team0: Port device team_slave_0 added [ 335.279500][T13392] team0: Port device team_slave_1 added [ 335.344154][T13452] netlink: 'syz.7.2125': attribute type 5 has an invalid length. [ 335.407335][ T5843] Bluetooth: hci4: command tx timeout [ 335.459593][T13392] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 335.467023][T13392] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 335.495038][T13392] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 335.540435][T13392] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 335.564769][T13392] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 335.636694][T13392] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 335.883600][T13462] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2129'. [ 335.894137][T13462] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2129'. [ 335.984951][T13392] hsr_slave_0: entered promiscuous mode [ 336.013305][T13392] hsr_slave_1: entered promiscuous mode [ 336.048075][T13392] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 336.077088][T13392] Cannot create hsr debugfs directory [ 336.094822][T13464] wg1 speed is unknown, defaulting to 1000 [ 336.162981][T13475] sctp: [Deprecated]: syz.7.2133 (pid 13475) Use of int in max_burst socket option. [ 336.162981][T13475] Use struct sctp_assoc_value instead [ 336.223793][T13464] hsr0 speed is unknown, defaulting to 1000 [ 336.615121][T13392] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.800087][T13488] TC_ACT_REPEAT abuse ? [ 336.868073][T13392] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.892762][T13483] pim6reg1: entered promiscuous mode [ 336.898688][T13483] pim6reg1: entered allmulticast mode [ 336.908131][T13481] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2136'. [ 337.014084][T13392] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.149570][T13392] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.431343][T13511] 8021q: adding VLAN 0 to HW filter on device bond1 [ 337.486942][ T5843] Bluetooth: hci4: command tx timeout [ 337.887059][T13511] bond1 (unregistering): Released all slaves [ 337.943778][ T5843] block nbd21: Receive control failed (result -32) [ 338.110917][T13392] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 338.157533][T13392] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 338.187745][T13392] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 338.266720][T13392] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 338.325765][T13531] syzkaller0: entered promiscuous mode [ 338.331990][T13531] syzkaller0: entered allmulticast mode [ 338.395165][T13533] netlink: 'syz.8.2152': attribute type 1 has an invalid length. [ 338.459646][T13537] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2152'. [ 338.491618][T13538] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2154'. [ 338.496652][T13537] netlink: 3 bytes leftover after parsing attributes in process `syz.8.2152'. [ 338.602855][T13537] batadv1: entered promiscuous mode [ 338.609111][T13537] batadv1: entered allmulticast mode [ 338.660400][T13542] syzkaller0: entered promiscuous mode [ 338.679063][T13542] syzkaller0: entered allmulticast mode [ 338.821266][T13549] FAULT_INJECTION: forcing a failure. [ 338.821266][T13549] name failslab, interval 1, probability 0, space 0, times 0 [ 338.854502][T13549] CPU: 1 UID: 0 PID: 13549 Comm: syz.6.2158 Not tainted 6.15.0-rc6-syzkaller-01232-g9ab0ac0e532a #0 PREEMPT(full) [ 338.854536][T13549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 338.854549][T13549] Call Trace: [ 338.854557][T13549] [ 338.854567][T13549] dump_stack_lvl+0x189/0x250 [ 338.854608][T13549] ? __pfx_dump_stack_lvl+0x10/0x10 [ 338.854640][T13549] ? __pfx__printk+0x10/0x10 [ 338.854669][T13549] ? __pfx___might_resched+0x10/0x10 [ 338.854700][T13549] ? fs_reclaim_acquire+0x7d/0x100 [ 338.854742][T13549] should_fail_ex+0x414/0x560 [ 338.854772][T13549] should_failslab+0xa8/0x100 [ 338.854804][T13549] kmem_cache_alloc_noprof+0x73/0x3c0 [ 338.854831][T13549] ? _sctp_make_chunk+0x14e/0x430 [ 338.854865][T13549] _sctp_make_chunk+0x14e/0x430 [ 338.854899][T13549] sctp_make_datafrag_empty+0x122/0x230 [ 338.854930][T13549] ? __pfx_sctp_make_datafrag_empty+0x10/0x10 [ 338.854956][T13549] ? __kasan_kmalloc+0x93/0xb0 [ 338.854986][T13549] ? sctp_auth_send_cid+0x69/0x250 [ 338.855018][T13549] sctp_datamsg_from_user+0x729/0xef0 [ 338.855061][T13549] ? __genradix_ptr+0x1e1/0x220 [ 338.855098][T13549] sctp_sendmsg_to_asoc+0x1003/0x1810 [ 338.855140][T13549] ? __lock_acquire+0xaac/0xd20 [ 338.855188][T13549] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 338.855221][T13549] ? __local_bh_enable_ip+0x12d/0x1c0 [ 338.855242][T13549] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 338.855267][T13549] ? sctp_sendmsg_check_sflags+0x18d/0x2e0 [ 338.855305][T13549] sctp_sendmsg+0x1941/0x2810 [ 338.855351][T13549] ? __pfx_sctp_sendmsg+0x10/0x10 [ 338.855387][T13549] ? aa_sk_perm+0x81e/0x950 [ 338.855416][T13549] ? __pfx_aa_sk_perm+0x10/0x10 [ 338.855443][T13549] ? sock_rps_record_flow+0x19/0x410 [ 338.855471][T13549] ? inet_sendmsg+0x2f4/0x370 [ 338.855494][T13549] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 338.855524][T13549] __sock_sendmsg+0x19c/0x270 [ 338.855552][T13549] ____sys_sendmsg+0x505/0x830 [ 338.855591][T13549] ? __pfx_____sys_sendmsg+0x10/0x10 [ 338.855634][T13549] ? import_iovec+0x74/0xa0 [ 338.855669][T13549] ___sys_sendmsg+0x21f/0x2a0 [ 338.855709][T13549] ? __pfx____sys_sendmsg+0x10/0x10 [ 338.855785][T13549] ? __fget_files+0x2a/0x420 [ 338.855813][T13549] ? __fget_files+0x3a0/0x420 [ 338.855856][T13549] __x64_sys_sendmsg+0x19b/0x260 [ 338.855890][T13549] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 338.855940][T13549] ? do_syscall_64+0xba/0x210 [ 338.855969][T13549] do_syscall_64+0xf6/0x210 [ 338.855995][T13549] ? clear_bhb_loop+0x60/0xb0 [ 338.856022][T13549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.856042][T13549] RIP: 0033:0x7fbf3cd8e969 [ 338.856062][T13549] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 338.856081][T13549] RSP: 002b:00007fbf3db45038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 338.856104][T13549] RAX: ffffffffffffffda RBX: 00007fbf3cfb5fa0 RCX: 00007fbf3cd8e969 [ 338.856120][T13549] RDX: 0000000004048050 RSI: 0000200000000040 RDI: 0000000000000004 [ 338.856134][T13549] RBP: 00007fbf3db45090 R08: 0000000000000000 R09: 0000000000000000 [ 338.856147][T13549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 338.856159][T13549] R13: 0000000000000000 R14: 00007fbf3cfb5fa0 R15: 00007ffd62c80568 [ 338.856194][T13549] [ 339.190367][T13550] netlink: 'syz.7.2156': attribute type 1 has an invalid length. [ 339.206885][ T53] TC_ACT_REPEAT abuse ? [ 339.211229][ T8748] TC_ACT_REPEAT abuse ? [ 339.272847][T13552] FAULT_INJECTION: forcing a failure. [ 339.272847][T13552] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 339.296799][T13552] CPU: 0 UID: 0 PID: 13552 Comm: syz.8.2159 Not tainted 6.15.0-rc6-syzkaller-01232-g9ab0ac0e532a #0 PREEMPT(full) [ 339.296832][T13552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 339.296845][T13552] Call Trace: [ 339.296854][T13552] [ 339.296863][T13552] dump_stack_lvl+0x189/0x250 [ 339.296899][T13552] ? __lock_acquire+0xaac/0xd20 [ 339.296933][T13552] ? __pfx_dump_stack_lvl+0x10/0x10 [ 339.296964][T13552] ? __pfx__printk+0x10/0x10 [ 339.296986][T13552] ? __might_fault+0xb0/0x130 [ 339.297029][T13552] should_fail_ex+0x414/0x560 [ 339.297058][T13552] _copy_from_user+0x2d/0xb0 [ 339.297091][T13552] ___sys_sendmsg+0x158/0x2a0 [ 339.297127][T13552] ? __pfx____sys_sendmsg+0x10/0x10 [ 339.297205][T13552] ? __fget_files+0x2a/0x420 [ 339.297233][T13552] ? __fget_files+0x3a0/0x420 [ 339.297275][T13552] __x64_sys_sendmsg+0x19b/0x260 [ 339.297310][T13552] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 339.297362][T13552] ? do_syscall_64+0xba/0x210 [ 339.297391][T13552] do_syscall_64+0xf6/0x210 [ 339.297417][T13552] ? clear_bhb_loop+0x60/0xb0 [ 339.297444][T13552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.297464][T13552] RIP: 0033:0x7fccd0b8e969 [ 339.297483][T13552] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 339.297502][T13552] RSP: 002b:00007fccd19b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 339.297524][T13552] RAX: ffffffffffffffda RBX: 00007fccd0db5fa0 RCX: 00007fccd0b8e969 [ 339.297540][T13552] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 339.297553][T13552] RBP: 00007fccd19b7090 R08: 0000000000000000 R09: 0000000000000000 [ 339.297566][T13552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 339.297578][T13552] R13: 0000000000000000 R14: 00007fccd0db5fa0 R15: 00007ffc1e639d18 [ 339.297612][T13552] [ 339.548679][T13392] 8021q: adding VLAN 0 to HW filter on device bond0 [ 339.569583][ T5843] Bluetooth: hci4: command tx timeout [ 339.577697][T13392] 8021q: adding VLAN 0 to HW filter on device team0 [ 339.605790][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.613098][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.664421][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.671694][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.738531][T13556] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2160'. [ 340.028000][T13568] FAULT_INJECTION: forcing a failure. [ 340.028000][T13568] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 340.076133][T13568] CPU: 0 UID: 0 PID: 13568 Comm: syz.5.2164 Not tainted 6.15.0-rc6-syzkaller-01232-g9ab0ac0e532a #0 PREEMPT(full) [ 340.076167][T13568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 340.076180][T13568] Call Trace: [ 340.076188][T13568] [ 340.076198][T13568] dump_stack_lvl+0x189/0x250 [ 340.076249][T13568] ? __pfx_dump_stack_lvl+0x10/0x10 [ 340.076281][T13568] ? __pfx__printk+0x10/0x10 [ 340.076317][T13568] should_fail_ex+0x414/0x560 [ 340.076348][T13568] _copy_to_user+0x31/0xb0 [ 340.076381][T13568] simple_read_from_buffer+0xe1/0x170 [ 340.076413][T13568] proc_fail_nth_read+0x1df/0x250 [ 340.076448][T13568] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 340.076482][T13568] ? rw_verify_area+0x258/0x650 [ 340.076506][T13568] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 340.076539][T13568] vfs_read+0x1fd/0x980 [ 340.076681][T13568] ? __pfx___mutex_lock+0x10/0x10 [ 340.076710][T13568] ? __pfx_vfs_read+0x10/0x10 [ 340.076737][T13568] ? __fget_files+0x2a/0x420 [ 340.076772][T13568] ? __fget_files+0x3a0/0x420 [ 340.076806][T13568] ? __fget_files+0x2a/0x420 [ 340.076867][T13568] ksys_read+0x145/0x250 [ 340.076891][T13568] ? rcu_is_watching+0x15/0xb0 [ 340.076914][T13568] ? __pfx_ksys_read+0x10/0x10 [ 340.076947][T13568] ? do_syscall_64+0xba/0x210 [ 340.076979][T13568] do_syscall_64+0xf6/0x210 [ 340.077013][T13568] ? clear_bhb_loop+0x60/0xb0 [ 340.077041][T13568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.077063][T13568] RIP: 0033:0x7f2bddb8d37c [ 340.077084][T13568] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 340.077102][T13568] RSP: 002b:00007f2bde96e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 340.077125][T13568] RAX: ffffffffffffffda RBX: 00007f2bdddb5fa0 RCX: 00007f2bddb8d37c [ 340.077142][T13568] RDX: 000000000000000f RSI: 00007f2bde96e0a0 RDI: 0000000000000004 [ 340.077155][T13568] RBP: 00007f2bde96e090 R08: 0000000000000000 R09: 0000000000000000 [ 340.077168][T13568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 340.077181][T13568] R13: 0000000000000000 R14: 00007f2bdddb5fa0 R15: 00007ffdeee10238 [ 340.077217][T13568] [ 340.537822][T13392] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 340.574262][T13580] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2168'. [ 340.641259][T13392] veth0_vlan: entered promiscuous mode [ 340.719532][T13392] veth1_vlan: entered promiscuous mode [ 340.892827][T13392] veth0_macvtap: entered promiscuous mode [ 340.933155][T13392] veth1_macvtap: entered promiscuous mode [ 341.037195][T13392] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 341.057924][T13597] FAULT_INJECTION: forcing a failure. [ 341.057924][T13597] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 341.091335][T13392] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 341.097867][T13597] CPU: 0 UID: 0 PID: 13597 Comm: syz.6.2173 Not tainted 6.15.0-rc6-syzkaller-01232-g9ab0ac0e532a #0 PREEMPT(full) [ 341.097906][T13597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 341.097921][T13597] Call Trace: [ 341.097931][T13597] [ 341.097941][T13597] dump_stack_lvl+0x189/0x250 [ 341.097980][T13597] ? __lock_acquire+0xaac/0xd20 [ 341.098019][T13597] ? __pfx_dump_stack_lvl+0x10/0x10 [ 341.098053][T13597] ? __pfx__printk+0x10/0x10 [ 341.098079][T13597] ? __might_fault+0xb0/0x130 [ 341.098126][T13597] should_fail_ex+0x414/0x560 [ 341.098157][T13597] _copy_from_user+0x2d/0xb0 [ 341.098193][T13597] ___sys_sendmsg+0x158/0x2a0 [ 341.098233][T13597] ? __pfx____sys_sendmsg+0x10/0x10 [ 341.098312][T13597] ? __fget_files+0x2a/0x420 [ 341.098343][T13597] ? __fget_files+0x3a0/0x420 [ 341.098389][T13597] __x64_sys_sendmsg+0x19b/0x260 [ 341.098435][T13597] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 341.098491][T13597] ? do_syscall_64+0xba/0x210 [ 341.098529][T13597] do_syscall_64+0xf6/0x210 [ 341.098557][T13597] ? clear_bhb_loop+0x60/0xb0 [ 341.098584][T13597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.098604][T13597] RIP: 0033:0x7fbf3cd8e969 [ 341.098630][T13597] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 341.098656][T13597] RSP: 002b:00007fbf3db45038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 341.098677][T13597] RAX: ffffffffffffffda RBX: 00007fbf3cfb5fa0 RCX: 00007fbf3cd8e969 [ 341.098693][T13597] RDX: 0000000020040880 RSI: 0000200000000280 RDI: 0000000000000005 [ 341.098706][T13597] RBP: 00007fbf3db45090 R08: 0000000000000000 R09: 0000000000000000 [ 341.098718][T13597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 341.098731][T13597] R13: 0000000000000000 R14: 00007fbf3cfb5fa0 R15: 00007ffd62c80568 [ 341.098766][T13597] [ 341.360667][T13392] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.379844][T13392] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.396030][T13392] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.405026][T13392] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.494478][ T5842] block nbd22: Receive control failed (result -32) [ 341.646787][ T5842] Bluetooth: hci4: command tx timeout [ 341.739882][T13620] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 341.765774][T13621] FAULT_INJECTION: forcing a failure. [ 341.765774][T13621] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 341.788328][ T8753] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.796652][T13622] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 341.808135][ T8753] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.845774][T13621] CPU: 0 UID: 0 PID: 13621 Comm: syz.5.2181 Not tainted 6.15.0-rc6-syzkaller-01232-g9ab0ac0e532a #0 PREEMPT(full) [ 341.845805][T13621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 341.845817][T13621] Call Trace: [ 341.845825][T13621] [ 341.845834][T13621] dump_stack_lvl+0x189/0x250 [ 341.845878][T13621] ? __pfx_dump_stack_lvl+0x10/0x10 [ 341.845910][T13621] ? __pfx__printk+0x10/0x10 [ 341.845947][T13621] should_fail_ex+0x414/0x560 [ 341.845977][T13621] _copy_from_user+0x2d/0xb0 [ 341.846010][T13621] sctp_setsockopt+0x19f/0x1200 [ 341.846042][T13621] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 341.846071][T13621] do_sock_setsockopt+0x25a/0x3e0 [ 341.846105][T13621] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 341.846133][T13621] ? __fget_files+0x2a/0x420 [ 341.846168][T13621] ? __fget_files+0x3a0/0x420 [ 341.846196][T13621] ? __fget_files+0x2a/0x420 [ 341.846235][T13621] __x64_sys_setsockopt+0x18b/0x220 [ 341.846272][T13621] do_syscall_64+0xf6/0x210 [ 341.846300][T13621] ? clear_bhb_loop+0x60/0xb0 [ 341.846326][T13621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.846346][T13621] RIP: 0033:0x7f2bddb8e969 [ 341.846365][T13621] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 341.846383][T13621] RSP: 002b:00007f2bde94d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 341.846426][T13621] RAX: ffffffffffffffda RBX: 00007f2bdddb6080 RCX: 00007f2bddb8e969 [ 341.846442][T13621] RDX: 0000000000000001 RSI: 0000000000000084 RDI: 0000000000000003 [ 341.846454][T13621] RBP: 00007f2bde94d090 R08: 0000000000000014 R09: 0000000000000000 [ 341.846467][T13621] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 341.846488][T13621] R13: 0000000000000000 R14: 00007f2bdddb6080 R15: 00007ffdeee10238 [ 341.846519][T13621] [ 342.103663][ T8753] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.111700][ T8753] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.341443][T13631] x_tables: duplicate underflow at hook 2 [ 342.358965][T13631] netlink: 'syz.8.2183': attribute type 29 has an invalid length. [ 342.370265][T13631] netlink: 'syz.8.2183': attribute type 29 has an invalid length. [ 342.385029][T13631] netlink: 'syz.8.2183': attribute type 10 has an invalid length. [ 342.455130][T13631] team0: Device veth1_macvtap failed to register rx_handler [ 342.627292][T13640] TC_ACT_REPEAT abuse ? [ 342.677639][T13640] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2186'. [ 342.798878][T13640] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2186'. [ 342.838622][T13640] bond0: entered promiscuous mode [ 342.904757][T13640] bond0: left promiscuous mode [ 344.288504][ T8753] TC_ACT_REPEAT abuse ? [ 344.701639][ T62] TC_ACT_REPEAT abuse ? [ 344.821953][T13660] FAULT_INJECTION: forcing a failure. [ 344.821953][T13660] name failslab, interval 1, probability 0, space 0, times 0 [ 344.856175][T13661] netlink: 260 bytes leftover after parsing attributes in process `syz.6.2190'. [ 344.876085][T13660] CPU: 0 UID: 0 PID: 13660 Comm: syz.7.2189 Not tainted 6.15.0-rc6-syzkaller-01232-g9ab0ac0e532a #0 PREEMPT(full) [ 344.876119][T13660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 344.876132][T13660] Call Trace: [ 344.876141][T13660] [ 344.876150][T13660] dump_stack_lvl+0x189/0x250 [ 344.876191][T13660] ? __pfx_dump_stack_lvl+0x10/0x10 [ 344.876224][T13660] ? __pfx__printk+0x10/0x10 [ 344.876253][T13660] ? __pfx___might_resched+0x10/0x10 [ 344.876287][T13660] should_fail_ex+0x414/0x560 [ 344.876317][T13660] should_failslab+0xa8/0x100 [ 344.876349][T13660] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 344.876379][T13660] ? __alloc_skb+0x112/0x2d0 [ 344.876412][T13660] __alloc_skb+0x112/0x2d0 [ 344.876444][T13660] netlink_sendmsg+0x5c6/0xb30 [ 344.876485][T13660] ? __pfx_netlink_sendmsg+0x10/0x10 [ 344.876520][T13660] ? aa_sock_msg_perm+0x94/0x160 [ 344.876548][T13660] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 344.876574][T13660] ? __pfx_netlink_sendmsg+0x10/0x10 [ 344.876606][T13660] __sock_sendmsg+0x21c/0x270 [ 344.876633][T13660] ____sys_sendmsg+0x505/0x830 [ 344.876671][T13660] ? __pfx_____sys_sendmsg+0x10/0x10 [ 344.876712][T13660] ? import_iovec+0x74/0xa0 [ 344.876747][T13660] ___sys_sendmsg+0x21f/0x2a0 [ 344.876781][T13660] ? __pfx____sys_sendmsg+0x10/0x10 [ 344.876852][T13660] ? __fget_files+0x2a/0x420 [ 344.876880][T13660] ? __fget_files+0x3a0/0x420 [ 344.876920][T13660] __x64_sys_sendmsg+0x19b/0x260 [ 344.876954][T13660] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 344.877004][T13660] ? do_syscall_64+0xba/0x210 [ 344.877035][T13660] do_syscall_64+0xf6/0x210 [ 344.877061][T13660] ? clear_bhb_loop+0x60/0xb0 [ 344.877088][T13660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.877109][T13660] RIP: 0033:0x7f93bc98e969 [ 344.877129][T13660] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 344.877147][T13660] RSP: 002b:00007f93bd75c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 344.877171][T13660] RAX: ffffffffffffffda RBX: 00007f93bcbb5fa0 RCX: 00007f93bc98e969 [ 344.877187][T13660] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 344.877200][T13660] RBP: 00007f93bd75c090 R08: 0000000000000000 R09: 0000000000000000 [ 344.877213][T13660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 344.877225][T13660] R13: 0000000000000000 R14: 00007f93bcbb5fa0 R15: 00007ffd1fad0588 [ 344.877259][T13660] [ 345.413689][T13668] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2195'. [ 345.424325][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 345.426176][T13668] netlink: 'syz.7.2195': attribute type 3 has an invalid length. [ 345.436300][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 345.452751][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 345.462333][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 345.476693][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 345.501066][T13668] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2195'. [ 345.540244][T13668] netlink: 'syz.7.2195': attribute type 3 has an invalid length. [ 345.612715][T13664] wg1 speed is unknown, defaulting to 1000 [ 345.702430][T13664] hsr0 speed is unknown, defaulting to 1000 [ 345.742031][T13675] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2197'. [ 345.875495][T13675] TC_ACT_REPEAT abuse ? [ 345.889563][T13675] TC_ACT_REPEAT abuse ? [ 345.894405][T13675] TC_ACT_REPEAT abuse ? [ 345.899512][T13675] TC_ACT_REPEAT abuse ? [ 345.904914][T13675] TC_ACT_REPEAT abuse ? [ 345.909703][T13675] TC_ACT_REPEAT abuse ? [ 345.914295][T13675] TC_ACT_REPEAT abuse ? [ 345.924006][T13675] TC_ACT_REPEAT abuse ? [ 345.974766][ T5843] block nbd23: Receive control failed (result -32) [ 346.186348][T13664] chnl_net:caif_netlink_parms(): no params data found [ 346.343719][T13695] wg1 speed is unknown, defaulting to 1000 [ 346.407393][T13695] hsr0 speed is unknown, defaulting to 1000 [ 346.457641][T13664] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.465144][T13664] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.487774][T13664] bridge_slave_0: entered allmulticast mode [ 346.507145][T13664] bridge_slave_0: entered promiscuous mode [ 346.534516][T13664] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.546092][T13664] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.553501][T13664] bridge_slave_1: entered allmulticast mode [ 346.562245][T13664] bridge_slave_1: entered promiscuous mode [ 346.720305][T13702] netlink: 'syz.7.2204': attribute type 6 has an invalid length. [ 346.782211][T13664] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 346.933621][T13664] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 346.953185][T13709] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2205'. [ 346.967332][T13710] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2205'. [ 347.070054][T13709] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2205'. [ 347.145088][T13706] wg1 speed is unknown, defaulting to 1000 [ 347.158575][T13706] hsr0 speed is unknown, defaulting to 1000 [ 347.174435][T13709] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2205'. [ 347.198526][T13664] team0: Port device team_slave_0 added [ 347.404981][T13711] team0: Port device team_slave_1 removed [ 347.421367][T13664] team0: Port device team_slave_1 added [ 347.566392][ T5843] Bluetooth: hci4: command tx timeout [ 347.592856][T13664] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 347.609556][T13664] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.637796][T13664] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 347.680185][T13664] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 347.687725][T13664] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.719869][T13664] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 347.857599][T13729] IPVS: set_ctl: invalid protocol: 109 0.0.0.0:20001 [ 347.956997][T13729] __nla_validate_parse: 1 callbacks suppressed [ 347.957018][T13729] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2211'. [ 347.979885][T13664] hsr_slave_0: entered promiscuous mode [ 347.987478][T13664] hsr_slave_1: entered promiscuous mode [ 347.994115][T13664] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 348.002428][T13664] Cannot create hsr debugfs directory [ 348.372003][T13664] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.463379][T13664] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.596877][T13664] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.714035][T13664] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.968834][T13664] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 348.984057][T13664] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 349.027299][T13664] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 349.061577][T13664] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 349.223648][T13664] 8021q: adding VLAN 0 to HW filter on device bond0 [ 349.301312][T13664] 8021q: adding VLAN 0 to HW filter on device team0 [ 349.316613][ T8756] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.323823][ T8756] bridge0: port 1(bridge_slave_0) entered forwarding state [ 349.332662][ T62] net_ratelimit: 1016 callbacks suppressed [ 349.332683][ T62] TC_ACT_REPEAT abuse ? [ 349.382312][ T8756] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.389559][ T8756] bridge0: port 2(bridge_slave_1) entered forwarding state [ 349.469398][T13758] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2221'. [ 349.648116][ T5843] Bluetooth: hci4: command tx timeout [ 349.727916][ T53] TC_ACT_REPEAT abuse ? [ 349.997745][T13664] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 350.088683][T13664] veth0_vlan: entered promiscuous mode [ 350.112241][T13664] veth1_vlan: entered promiscuous mode [ 350.168241][T13664] veth0_macvtap: entered promiscuous mode [ 350.185296][T13664] veth1_macvtap: entered promiscuous mode [ 350.247820][T13664] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 350.285498][T13664] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 350.309508][T13664] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.318697][T13664] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.330246][T13664] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.343892][T13664] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.541242][T13777] batadv_slave_1: entered promiscuous mode [ 350.550298][T13777] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2227'. [ 350.592249][ T8761] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.609725][ T8761] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.702318][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.711724][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.747706][T13780] netlink: 'syz.7.2228': attribute type 1 has an invalid length. [ 350.776305][T13780] netlink: 224 bytes leftover after parsing attributes in process `syz.7.2228'. [ 351.129105][T13785] syz.8.2230: vmalloc error: size 8392704, failed to allocated page array size 16392, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 351.146435][T13785] CPU: 1 UID: 0 PID: 13785 Comm: syz.8.2230 Not tainted 6.15.0-rc6-syzkaller-01232-g9ab0ac0e532a #0 PREEMPT(full) [ 351.146465][T13785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 351.146479][T13785] Call Trace: [ 351.146487][T13785] [ 351.146497][T13785] dump_stack_lvl+0x189/0x250 [ 351.146538][T13785] ? __pfx_dump_stack_lvl+0x10/0x10 [ 351.146570][T13785] ? __pfx__printk+0x10/0x10 [ 351.146592][T13785] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 351.146615][T13785] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 351.146639][T13785] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 351.146665][T13785] warn_alloc+0x214/0x310 [ 351.146706][T13785] ? __pfx_warn_alloc+0x10/0x10 [ 351.146757][T13785] ? __get_vm_area_node+0x28f/0x300 [ 351.146796][T13785] __vmalloc_node_range_noprof+0x5f2/0x12c0 [ 351.146864][T13785] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 351.146898][T13785] ? __kasan_kmalloc_large+0x1a/0xa0 [ 351.146929][T13785] ? rcu_is_watching+0x15/0xb0 [ 351.146951][T13785] ? htable_create+0xfc/0x7a0 [ 351.146970][T13785] ? htable_create+0xfc/0x7a0 [ 351.146988][T13785] __kvmalloc_node_noprof+0x3a0/0x5e0 [ 351.147019][T13785] ? htable_create+0xfc/0x7a0 [ 351.147036][T13785] ? hashlimit_pernet+0x23/0x240 [ 351.147065][T13785] htable_create+0xfc/0x7a0 [ 351.147093][T13785] hashlimit_mt_check_common+0x719/0xa10 [ 351.147126][T13785] hashlimit_mt_check_v1+0x221/0x360 [ 351.147164][T13785] ? __pfx_hashlimit_mt_check_v1+0x10/0x10 [ 351.147206][T13785] ? xt_find_match+0x1f7/0x250 [ 351.147246][T13785] xt_check_match+0x3ce/0xab0 [ 351.147277][T13785] ? __pfx___mutex_lock+0x10/0x10 [ 351.147307][T13785] ? __pfx_xt_check_match+0x10/0x10 [ 351.147343][T13785] ? pcpu_alloc_noprof+0xfdb/0x16b0 [ 351.147385][T13785] ? xt_find_match+0x1f7/0x250 [ 351.147426][T13785] translate_table+0x150b/0x2000 [ 351.147482][T13785] ? __pfx_translate_table+0x10/0x10 [ 351.147514][T13785] ? __might_fault+0xb0/0x130 [ 351.147567][T13785] ? _copy_from_user+0x94/0xb0 [ 351.147605][T13785] do_ipt_set_ctl+0x967/0xcd0 [ 351.147643][T13785] ? rcu_is_watching+0x15/0xb0 [ 351.147662][T13785] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 351.147714][T13785] ? __pfx___mutex_lock+0x10/0x10 [ 351.147748][T13785] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 351.147771][T13785] ? aa_sk_perm+0x81e/0x950 [ 351.147800][T13785] ? __pfx_aa_sk_perm+0x10/0x10 [ 351.147832][T13785] nf_setsockopt+0x26f/0x290 [ 351.147866][T13785] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 351.147895][T13785] do_sock_setsockopt+0x25a/0x3e0 [ 351.147929][T13785] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 351.147956][T13785] ? __fget_files+0x2a/0x420 [ 351.147992][T13785] ? __fget_files+0x3a0/0x420 [ 351.148019][T13785] ? __fget_files+0x2a/0x420 [ 351.148057][T13785] __x64_sys_setsockopt+0x18b/0x220 [ 351.148095][T13785] do_syscall_64+0xf6/0x210 [ 351.148122][T13785] ? clear_bhb_loop+0x60/0xb0 [ 351.148149][T13785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.148169][T13785] RIP: 0033:0x7fccd0b8e969 [ 351.148189][T13785] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 351.148208][T13785] RSP: 002b:00007fccd19b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 351.148231][T13785] RAX: ffffffffffffffda RBX: 00007fccd0db5fa0 RCX: 00007fccd0b8e969 [ 351.148247][T13785] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000003 [ 351.148260][T13785] RBP: 00007fccd0c10ab1 R08: 0000000000000448 R09: 0000000000000000 [ 351.148274][T13785] R10: 00002000000006c0 R11: 0000000000000246 R12: 0000000000000000 [ 351.148287][T13785] R13: 0000000000000000 R14: 00007fccd0db5fa0 R15: 00007ffc1e639d18 [ 351.148320][T13785] [ 351.148328][T13785] Mem-Info: [ 351.541871][T13785] active_anon:10470 inactive_anon:0 isolated_anon:0 [ 351.541871][T13785] active_file:2028 inactive_file:39970 isolated_file:0 [ 351.541871][T13785] unevictable:789 dirty:140 writeback:0 [ 351.541871][T13785] slab_reclaimable:12974 slab_unreclaimable:189329 [ 351.541871][T13785] mapped:56798 shmem:7156 pagetables:776 [ 351.541871][T13785] sec_pagetables:0 bounce:0 [ 351.541871][T13785] kernel_misc_reclaimable:0 [ 351.541871][T13785] free:1193681 free_pcp:1086 free_cma:0 [ 351.615335][T13785] Node 0 active_anon:41880kB inactive_anon:0kB active_file:8112kB inactive_file:159680kB unevictable:1620kB isolated(anon):0kB isolated(file):0kB mapped:227192kB dirty:560kB writeback:0kB shmem:27088kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:15248kB pagetables:3004kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 351.672034][T13785] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 351.713906][ T5843] block nbd24: Receive control failed (result -32) [ 351.722847][T13785] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 351.752871][T13785] lowmem_reserve[]: 0 2503 2504 2504 2504 [ 351.758896][T13785] Node 0 DMA32 free:851376kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB active_anon:41772kB inactive_anon:0kB active_file:8112kB inactive_file:159580kB unevictable:1620kB writepending:556kB present:3129332kB managed:2563988kB mlocked:84kB bounce:0kB free_pcp:4288kB local_pcp:3620kB free_cma:0kB [ 351.789804][T13785] lowmem_reserve[]: 0 0 0 0 0 [ 351.799107][T13785] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:100kB unevictable:0kB writepending:4kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 351.839500][T13785] lowmem_reserve[]: 0 0 0 0 0 [ 351.846290][T13785] Node 1 Normal free:3908548kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 351.876199][T13785] lowmem_reserve[]: 0 0 0 0 0 [ 351.880993][T13785] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 351.894689][T13785] Node 0 DMA32: 233*4kB (U) 220*8kB (UME) 80*16kB (UME) 64*32kB (UME) 18*64kB (UM) 19*128kB (UME) 5*256kB (M) 5*512kB (UME) 2*1024kB (UM) 0*2048kB 204*4096kB (UM) = 851076kB [ 351.917713][T13785] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 351.929650][T13785] Node 1 Normal: 197*4kB (UE) 54*8kB (UME) 44*16kB (UME) 210*32kB (UME) 94*64kB (UME) 35*128kB (UME) 11*256kB (UME) 7*512kB (UM) 6*1024kB (UME) 1*2048kB (E) 946*4096kB (M) = 3908548kB [ 351.950492][T13785] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 351.967921][T13785] Node 0 hugepages_total=6 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 351.977463][T13785] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 351.987727][T13785] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 351.997427][T13785] 49152 total pagecache pages [ 352.022190][T13785] 0 pages in swap cache [ 352.024698][T13796] netlink: 104 bytes leftover after parsing attributes in process `syz.7.2233'. [ 352.030315][T13785] Free swap = 124996kB [ 352.040208][T13785] Total swap = 124996kB [ 352.044509][T13785] 2097051 pages RAM [ 352.049690][T13785] 0 pages HighMem/MovableOnly [ 352.054442][T13785] 424396 pages reserved [ 352.061030][T13785] 0 pages cma reserved [ 353.757305][T13802] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2235'. [ 353.943637][T13808] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 353.992774][T13808] batadv_slave_1: entered promiscuous mode [ 354.016559][T13808] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2238'. [ 354.169515][T13810] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2239'. [ 354.229545][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 354.239275][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 354.248857][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 354.261923][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 354.275670][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 354.338429][T13814] wg1 speed is unknown, defaulting to 1000 [ 354.347348][T13814] hsr0 speed is unknown, defaulting to 1000 [ 354.402386][T13818] netlink: 180 bytes leftover after parsing attributes in process `syz.8.2241'. [ 354.412978][T13818] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2241'. [ 354.439426][T13818] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2241'. [ 354.473307][T13818] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2241'. [ 354.597527][T13817] wg1 speed is unknown, defaulting to 1000 [ 354.619548][T13817] hsr0 speed is unknown, defaulting to 1000 [ 354.744673][T13814] chnl_net:caif_netlink_parms(): no params data found [ 354.930552][ T8748] TC_ACT_REPEAT abuse ? [ 355.043930][T13814] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.056550][T13814] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.063999][T13814] bridge_slave_0: entered allmulticast mode [ 355.088505][T13814] bridge_slave_0: entered promiscuous mode [ 355.113671][T13814] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.136098][T13814] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.143703][T13814] bridge_slave_1: entered allmulticast mode [ 355.152350][T13814] bridge_slave_1: entered promiscuous mode [ 355.184540][T13838] netlink: 'syz.8.2244': attribute type 10 has an invalid length. [ 355.192696][T13838] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2244'. [ 355.205524][T13834] wg1 speed is unknown, defaulting to 1000 [ 355.205803][T13838] veth0_vlan: entered allmulticast mode [ 355.218443][T13838] bridge0: port 3(veth0_vlan) entered blocking state [ 355.225386][T13838] bridge0: port 3(veth0_vlan) entered disabled state [ 355.237930][T13838] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 355.297433][T13834] hsr0 speed is unknown, defaulting to 1000 [ 355.316585][T13814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 355.343646][T13814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 355.506849][T13814] team0: Port device team_slave_0 added [ 355.522612][T13814] team0: Port device team_slave_1 added [ 355.574540][ T65] TC_ACT_REPEAT abuse ? [ 355.590247][T13814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 355.600039][T13814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.626590][T13814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 355.641462][T13814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 355.648695][T13814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.675428][T13814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 355.753688][T13814] hsr_slave_0: entered promiscuous mode [ 355.768452][T13814] hsr_slave_1: entered promiscuous mode [ 355.775500][T13814] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 355.783331][T13814] Cannot create hsr debugfs directory [ 355.868075][T13846] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2247'. [ 356.141689][T13814] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.248940][T13814] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.327917][T13814] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.367025][ T5842] Bluetooth: hci4: command tx timeout [ 356.411138][T13851] FAULT_INJECTION: forcing a failure. [ 356.411138][T13851] name failslab, interval 1, probability 0, space 0, times 0 [ 356.424023][T13851] CPU: 1 UID: 0 PID: 13851 Comm: syz.7.2249 Not tainted 6.15.0-rc6-syzkaller-01232-g9ab0ac0e532a #0 PREEMPT(full) [ 356.424054][T13851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 356.424068][T13851] Call Trace: [ 356.424076][T13851] [ 356.424085][T13851] dump_stack_lvl+0x189/0x250 [ 356.424126][T13851] ? __pfx_dump_stack_lvl+0x10/0x10 [ 356.424157][T13851] ? __pfx__printk+0x10/0x10 [ 356.424186][T13851] ? __pfx___might_resched+0x10/0x10 [ 356.424206][T13851] ? fs_reclaim_acquire+0x7d/0x100 [ 356.424239][T13851] should_fail_ex+0x414/0x560 [ 356.424266][T13851] should_failslab+0xa8/0x100 [ 356.424296][T13851] kmem_cache_alloc_noprof+0x73/0x3c0 [ 356.424324][T13851] ? skb_clone+0x212/0x3a0 [ 356.424349][T13851] skb_clone+0x212/0x3a0 [ 356.424365][T13851] ? nfnetlink_rcv+0x486/0x2520 [ 356.424391][T13851] nfnetlink_rcv+0x4b4/0x2520 [ 356.424415][T13851] ? unwind_get_return_address+0x4d/0x90 [ 356.424441][T13851] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 356.424481][T13851] ? stack_trace_save+0x9c/0xe0 [ 356.424507][T13851] ? stack_depot_save_flags+0x40/0x910 [ 356.424533][T13851] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 356.424576][T13851] ? __lock_acquire+0xaac/0xd20 [ 356.424633][T13851] ? __lock_acquire+0xaac/0xd20 [ 356.424672][T13851] ? netlink_deliver_tap+0x2e/0x1b0 [ 356.424715][T13851] ? netlink_deliver_tap+0x2e/0x1b0 [ 356.424743][T13851] ? netlink_deliver_tap+0x2e/0x1b0 [ 356.424778][T13851] netlink_unicast+0x758/0x8d0 [ 356.424816][T13851] netlink_sendmsg+0x805/0xb30 [ 356.424856][T13851] ? __pfx_netlink_sendmsg+0x10/0x10 [ 356.424890][T13851] ? aa_sock_msg_perm+0x94/0x160 [ 356.424916][T13851] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 356.424941][T13851] ? __pfx_netlink_sendmsg+0x10/0x10 [ 356.424971][T13851] __sock_sendmsg+0x21c/0x270 [ 356.424997][T13851] ____sys_sendmsg+0x505/0x830 [ 356.425034][T13851] ? __pfx_____sys_sendmsg+0x10/0x10 [ 356.425074][T13851] ? import_iovec+0x74/0xa0 [ 356.425109][T13851] ___sys_sendmsg+0x21f/0x2a0 [ 356.425142][T13851] ? __pfx____sys_sendmsg+0x10/0x10 [ 356.425217][T13851] ? __fget_files+0x2a/0x420 [ 356.425245][T13851] ? __fget_files+0x3a0/0x420 [ 356.425306][T13851] __x64_sys_sendmsg+0x19b/0x260 [ 356.425341][T13851] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 356.425392][T13851] ? do_syscall_64+0xba/0x210 [ 356.425421][T13851] do_syscall_64+0xf6/0x210 [ 356.425447][T13851] ? clear_bhb_loop+0x60/0xb0 [ 356.425473][T13851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.425493][T13851] RIP: 0033:0x7f93bc98e969 [ 356.425512][T13851] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 356.425530][T13851] RSP: 002b:00007f93bd75c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 356.425552][T13851] RAX: ffffffffffffffda RBX: 00007f93bcbb5fa0 RCX: 00007f93bc98e969 [ 356.425573][T13851] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 356.425586][T13851] RBP: 00007f93bd75c090 R08: 0000000000000000 R09: 0000000000000000 [ 356.425599][T13851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 356.425611][T13851] R13: 0000000000000000 R14: 00007f93bcbb5fa0 R15: 00007ffd1fad0588 [ 356.425643][T13851] [ 356.794009][T13814] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.054244][T13814] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 357.070238][T13814] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 357.099819][T13814] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 357.135529][T13814] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 357.152468][T13858] netlink: 'syz.7.2252': attribute type 1 has an invalid length. [ 357.164013][T13858] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2252'. [ 357.243306][T13860] bridge_slave_0: left allmulticast mode [ 357.249485][T13860] bridge_slave_0: left promiscuous mode [ 357.255339][T13860] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.300824][T13860] bridge_slave_1: left allmulticast mode [ 357.307128][T13860] bridge_slave_1: left promiscuous mode [ 357.313023][T13860] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.376928][T13860] bond0: (slave bond_slave_0): Releasing backup interface [ 357.413916][T13860] bond0: (slave bond_slave_1): Releasing backup interface [ 357.448649][T13860] team0: Port device team_slave_0 removed [ 357.455522][T13860] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 357.463565][T13860] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 357.494689][T13860] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 357.524951][T13866] ip6t_srh: unknown srh match flags 5294 [ 357.558036][T13865] macvlan2: entered promiscuous mode [ 357.563418][T13865] bridge0: entered promiscuous mode [ 357.570308][T13865] bridge0: port 3(macvlan2) entered blocking state [ 357.586815][T13865] bridge0: port 3(macvlan2) entered disabled state [ 357.593885][T13865] macvlan2: entered allmulticast mode [ 357.599612][T13865] bridge0: entered allmulticast mode [ 357.617252][T13865] macvlan2: left allmulticast mode [ 357.636292][T13865] bridge0: left allmulticast mode [ 357.649320][T13865] bridge0: left promiscuous mode [ 357.964442][T13814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 358.034296][T13876] openvswitch: netlink: Missing key (keys=40, expected=100) [ 358.057679][T13814] 8021q: adding VLAN 0 to HW filter on device team0 [ 358.089472][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.096703][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 358.128063][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 358.153817][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.161058][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 358.304784][T13881] netlink: 'syz.7.2257': attribute type 5 has an invalid length. [ 358.446623][ T5842] Bluetooth: hci4: command tx timeout [ 358.747150][T13814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 358.855117][T13814] veth0_vlan: entered promiscuous mode [ 358.880519][T13814] veth1_vlan: entered promiscuous mode [ 358.933837][T13814] veth0_macvtap: entered promiscuous mode [ 358.951038][ T5842] block nbd25: Receive control failed (result -32) [ 358.973175][T13814] veth1_macvtap: entered promiscuous mode [ 358.998812][T13814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 359.016615][T13814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 359.029166][T13814] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.038840][T13814] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.047842][T13814] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.057084][T13814] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.210981][ T6880] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.237313][ T6880] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.361248][ T8756] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.386393][ T8756] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.404547][T13898] FAULT_INJECTION: forcing a failure. [ 359.404547][T13898] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 359.434557][T13898] CPU: 0 UID: 0 PID: 13898 Comm: syz.8.2263 Not tainted 6.15.0-rc6-syzkaller-01232-g9ab0ac0e532a #0 PREEMPT(full) [ 359.434592][T13898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 359.434606][T13898] Call Trace: [ 359.434615][T13898] [ 359.434625][T13898] dump_stack_lvl+0x189/0x250 [ 359.434660][T13898] ? __lock_acquire+0xaac/0xd20 [ 359.434696][T13898] ? __pfx_dump_stack_lvl+0x10/0x10 [ 359.434727][T13898] ? __pfx__printk+0x10/0x10 [ 359.434750][T13898] ? __might_fault+0xb0/0x130 [ 359.434792][T13898] should_fail_ex+0x414/0x560 [ 359.434822][T13898] _copy_from_iter+0x1db/0x15a0 [ 359.434859][T13898] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 359.434885][T13898] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 359.434915][T13898] ? __pfx__copy_from_iter+0x10/0x10 [ 359.434946][T13898] ? __build_skb_around+0x257/0x3e0 [ 359.434980][T13898] ? netlink_sendmsg+0x642/0xb30 [ 359.435009][T13898] ? skb_put+0x11b/0x210 [ 359.435043][T13898] netlink_sendmsg+0x6b2/0xb30 [ 359.435093][T13898] ? __pfx_netlink_sendmsg+0x10/0x10 [ 359.435128][T13898] ? aa_sock_msg_perm+0x94/0x160 [ 359.435155][T13898] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 359.435181][T13898] ? __pfx_netlink_sendmsg+0x10/0x10 [ 359.435213][T13898] __sock_sendmsg+0x21c/0x270 [ 359.435241][T13898] ____sys_sendmsg+0x505/0x830 [ 359.435279][T13898] ? __pfx_____sys_sendmsg+0x10/0x10 [ 359.435321][T13898] ? import_iovec+0x74/0xa0 [ 359.435357][T13898] ___sys_sendmsg+0x21f/0x2a0 [ 359.435392][T13898] ? __pfx____sys_sendmsg+0x10/0x10 [ 359.435465][T13898] ? __fget_files+0x2a/0x420 [ 359.435494][T13898] ? __fget_files+0x3a0/0x420 [ 359.435536][T13898] __x64_sys_sendmsg+0x19b/0x260 [ 359.435572][T13898] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 359.435624][T13898] ? do_syscall_64+0xba/0x210 [ 359.435654][T13898] do_syscall_64+0xf6/0x210 [ 359.435680][T13898] ? clear_bhb_loop+0x60/0xb0 [ 359.435707][T13898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.435728][T13898] RIP: 0033:0x7fccd0b8e969 [ 359.435747][T13898] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 359.435766][T13898] RSP: 002b:00007fccd19b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 359.435790][T13898] RAX: ffffffffffffffda RBX: 00007fccd0db5fa0 RCX: 00007fccd0b8e969 [ 359.435805][T13898] RDX: 0000000020040040 RSI: 0000200000000000 RDI: 0000000000000003 [ 359.435819][T13898] RBP: 00007fccd19b7090 R08: 0000000000000000 R09: 0000000000000000 [ 359.435832][T13898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 359.435845][T13898] R13: 0000000000000000 R14: 00007fccd0db5fa0 R15: 00007ffc1e639d18 [ 359.435879][T13898] [ 360.052908][ T8748] TC_ACT_REPEAT abuse ? [ 360.219415][T13913] IPv6: NLM_F_REPLACE set, but no existing node found! [ 361.338309][ T65] TC_ACT_REPEAT abuse ? [ 362.932100][T13934] tipc: Enabling of bearer rejected, failed to enable media [ 363.003855][T13934] pim6reg9: entered allmulticast mode [ 363.429518][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 363.443738][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 363.455947][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 363.467589][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 363.488216][ T5844] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 363.551106][ T5844] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 363.562372][ T5844] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 363.590983][ T5844] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 363.626619][ T5844] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 363.638656][ T5844] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 363.653210][T13942] wg1 speed is unknown, defaulting to 1000 [ 363.665434][T13942] hsr0 speed is unknown, defaulting to 1000 [ 363.734846][ T5844] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 363.754867][ T5844] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 363.786587][ T5844] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 363.810035][ T5844] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 363.847957][ T5844] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 363.967232][T13946] wg1 speed is unknown, defaulting to 1000 [ 363.974928][T13946] hsr0 speed is unknown, defaulting to 1000 [ 364.168620][T13949] wg1 speed is unknown, defaulting to 1000 [ 364.307546][T13949] hsr0 speed is unknown, defaulting to 1000 [ 364.624100][T13942] chnl_net:caif_netlink_parms(): no params data found [ 364.963332][T13969] FAULT_INJECTION: forcing a failure. [ 364.963332][T13969] name failslab, interval 1, probability 0, space 0, times 0 [ 364.976531][T13969] CPU: 1 UID: 0 PID: 13969 Comm: syz.7.2285 Not tainted 6.15.0-rc6-syzkaller-01232-g9ab0ac0e532a #0 PREEMPT(full) [ 364.976560][T13969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 364.976574][T13969] Call Trace: [ 364.976582][T13969] [ 364.976590][T13969] dump_stack_lvl+0x189/0x250 [ 364.976631][T13969] ? __pfx_dump_stack_lvl+0x10/0x10 [ 364.976663][T13969] ? __pfx__printk+0x10/0x10 [ 364.976691][T13969] ? __pfx___might_resched+0x10/0x10 [ 364.976720][T13969] should_fail_ex+0x414/0x560 [ 364.976749][T13969] should_failslab+0xa8/0x100 [ 364.976782][T13969] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 364.976809][T13969] ? __alloc_skb+0x112/0x2d0 [ 364.976843][T13969] __alloc_skb+0x112/0x2d0 [ 364.976876][T13969] netlink_sendmsg+0x5c6/0xb30 [ 364.976918][T13969] ? __pfx_netlink_sendmsg+0x10/0x10 [ 364.976961][T13969] ? aa_sock_msg_perm+0x94/0x160 [ 364.976989][T13969] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 364.977015][T13969] ? __pfx_netlink_sendmsg+0x10/0x10 [ 364.977047][T13969] __sock_sendmsg+0x21c/0x270 [ 364.977074][T13969] ____sys_sendmsg+0x505/0x830 [ 364.977112][T13969] ? __pfx_____sys_sendmsg+0x10/0x10 [ 364.977155][T13969] ? import_iovec+0x74/0xa0 [ 364.977191][T13969] ___sys_sendmsg+0x21f/0x2a0 [ 364.977226][T13969] ? __pfx____sys_sendmsg+0x10/0x10 [ 364.977300][T13969] ? __fget_files+0x2a/0x420 [ 364.977328][T13969] ? __fget_files+0x3a0/0x420 [ 364.977370][T13969] __x64_sys_sendmsg+0x19b/0x260 [ 364.977406][T13969] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 364.977457][T13969] ? do_syscall_64+0xba/0x210 [ 364.977488][T13969] do_syscall_64+0xf6/0x210 [ 364.977514][T13969] ? clear_bhb_loop+0x60/0xb0 [ 364.977541][T13969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.977561][T13969] RIP: 0033:0x7f93bc98e969 [ 364.977580][T13969] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 364.977599][T13969] RSP: 002b:00007f93bd75c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 364.977622][T13969] RAX: ffffffffffffffda RBX: 00007f93bcbb5fa0 RCX: 00007f93bc98e969 [ 364.977637][T13969] RDX: 0000000004041080 RSI: 0000200000006040 RDI: 0000000000000006 [ 364.977651][T13969] RBP: 00007f93bd75c090 R08: 0000000000000000 R09: 0000000000000000 [ 364.977664][T13969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 364.977677][T13969] R13: 0000000000000000 R14: 00007f93bcbb5fa0 R15: 00007ffd1fad0588 [ 364.977712][T13969] [ 365.228304][ T5842] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 365.326661][ T5839] Bluetooth: hci3: command 0x0406 tx timeout [ 365.331560][ T5842] Bluetooth: hci5: command 0x0406 tx timeout [ 365.566212][ T5843] Bluetooth: hci4: command tx timeout [ 365.730035][ T5843] Bluetooth: hci9: command tx timeout [ 365.808470][ T53] TC_ACT_REPEAT abuse ? [ 365.966705][ T5843] Bluetooth: hci10: command tx timeout [ 366.023643][T13967] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.042946][T13967] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.052289][T13967] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.061395][T13967] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.524638][T13942] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.524967][T13988] netlink: 'syz.7.2288': attribute type 1 has an invalid length. [ 366.549727][T13942] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.564107][T13988] __nla_validate_parse: 1 callbacks suppressed [ 366.564125][T13988] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2288'. [ 366.568450][T13942] bridge_slave_0: entered allmulticast mode [ 366.616714][T13942] bridge_slave_0: entered promiscuous mode [ 366.634197][T13942] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.647311][T13942] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.654866][T13942] bridge_slave_1: entered allmulticast mode [ 366.666494][T13942] bridge_slave_1: entered promiscuous mode [ 366.707327][T13946] chnl_net:caif_netlink_parms(): no params data found [ 366.979527][T13942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 367.088972][ T53] TC_ACT_REPEAT abuse ? [ 367.101912][T13942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 367.293470][T13949] chnl_net:caif_netlink_parms(): no params data found [ 367.358507][T14009] netlink: 'syz.8.2293': attribute type 58 has an invalid length. [ 367.435639][T14008] ip6tnl1: entered promiscuous mode [ 367.446790][T14008] ip6tnl1: entered allmulticast mode [ 367.585379][T13942] team0: Port device team_slave_0 added [ 367.610530][T13942] team0: Port device team_slave_1 added [ 367.646512][ T5848] Bluetooth: hci4: command tx timeout [ 367.815983][ T5848] Bluetooth: hci9: command tx timeout [ 367.829806][T13946] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.841952][T13946] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.850429][T13946] bridge_slave_0: entered allmulticast mode [ 367.858648][T13946] bridge_slave_0: entered promiscuous mode [ 367.867790][T13946] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.880481][T13946] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.888639][T13946] bridge_slave_1: entered allmulticast mode [ 367.897133][T13946] bridge_slave_1: entered promiscuous mode [ 367.913044][T13942] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 367.928624][T13942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.958935][T13942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 368.046648][ T5848] Bluetooth: hci10: command tx timeout [ 368.093838][T13942] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 368.117186][T13942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.209608][T13942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 368.308693][T13946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 368.393166][ T6773] TC_ACT_REPEAT abuse ? [ 368.503387][T14033] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2302'. [ 368.512016][T13946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 368.618823][T13942] hsr_slave_0: entered promiscuous mode [ 368.629950][T13942] hsr_slave_1: entered promiscuous mode [ 368.637177][T13942] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 368.644810][T13942] Cannot create hsr debugfs directory [ 368.689642][T13949] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.703832][T13949] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.711380][T13949] bridge_slave_0: entered allmulticast mode [ 368.721177][T13949] bridge_slave_0: entered promiscuous mode [ 368.826479][T13946] team0: Port device team_slave_0 added [ 368.833154][T13949] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.841796][T13949] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.857421][T13949] bridge_slave_1: entered allmulticast mode [ 368.877558][T13949] bridge_slave_1: entered promiscuous mode [ 368.905681][T13946] team0: Port device team_slave_1 added [ 369.011075][ T5843] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 369.139286][T13949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 369.257204][T13949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 369.527374][T13946] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 369.544678][T13946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 369.602725][T13946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 369.728183][ T5843] Bluetooth: hci4: command tx timeout [ 369.831996][T13946] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 369.846857][T13946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 369.874432][T13946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 369.886382][ T5843] Bluetooth: hci9: command tx timeout [ 369.907378][T13949] team0: Port device team_slave_0 added [ 369.949387][T13949] team0: Port device team_slave_1 added [ 370.128921][ T5843] Bluetooth: hci10: command tx timeout [ 370.176275][T13949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 370.183293][T13949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 370.217319][T13949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 370.349371][T14059] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2307'. [ 370.361361][T13949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 370.376248][T13949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 370.403706][T13949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 370.478706][T13942] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.585942][T13946] hsr_slave_0: entered promiscuous mode [ 370.594383][T13946] hsr_slave_1: entered promiscuous mode [ 370.603405][T13946] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 370.612786][T13946] Cannot create hsr debugfs directory [ 370.684936][T13942] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.783440][T14063] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.7.2311:14063 [ 370.856893][T14067] netlink: 'syz.7.2311': attribute type 10 has an invalid length. [ 370.878757][T14067] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2311'. [ 370.938504][T13942] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.063999][T13949] hsr_slave_0: entered promiscuous mode [ 371.083484][T13949] hsr_slave_1: entered promiscuous mode [ 371.091315][T13949] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 371.100468][T13949] Cannot create hsr debugfs directory [ 371.106439][T14067] veth0_vlan: left promiscuous mode [ 371.111773][T14067] veth0_vlan: entered promiscuous mode [ 371.117474][T14067] veth0_vlan: entered allmulticast mode [ 371.128869][T14067] bridge0: port 3(veth0_vlan) entered blocking state [ 371.136962][T14067] bridge0: port 3(veth0_vlan) entered disabled state [ 371.147442][T14067] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 371.209658][T14065] wg1 speed is unknown, defaulting to 1000 [ 371.283557][T13942] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.573451][ T53] TC_ACT_REPEAT abuse ? [ 371.613097][T14065] hsr0 speed is unknown, defaulting to 1000 [ 371.817265][ T5848] Bluetooth: hci4: command tx timeout [ 371.974377][ T5848] Bluetooth: hci9: command tx timeout [ 372.210704][ T31] INFO: task syz.4.1234:10492 blocked for more than 143 seconds. [ 372.220657][ T5848] Bluetooth: hci10: command tx timeout [ 372.226404][ T31] Not tainted 6.15.0-rc6-syzkaller-01232-g9ab0ac0e532a #0 [ 372.228462][ T8748] TC_ACT_REPEAT abuse ? [ 372.234160][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 372.247321][ T31] task:syz.4.1234 state:D stack:23016 pid:10492 tgid:10484 ppid:5834 task_flags:0x400140 flags:0x00004004 [ 372.259601][ T31] Call Trace: [ 372.263270][ T31] [ 372.267084][ T31] __schedule+0x16e2/0x4cd0 [ 372.271890][ T31] ? validate_chain+0x897/0x2140 [ 372.281559][ T31] ? schedule+0x165/0x360 [ 372.286452][ T31] ? __pfx___schedule+0x10/0x10 [ 372.291474][ T31] ? schedule+0x91/0x360 [ 372.295847][ T31] schedule+0x165/0x360 [ 372.300384][ T31] schedule_timeout+0x9a/0x270 [ 372.305398][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 372.311387][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 372.317056][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 372.322441][ T31] ? wait_for_completion+0x267/0x5d0 [ 372.328047][ T31] wait_for_completion+0x2bf/0x5d0 [ 372.333358][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 372.339190][ T31] ? up_write+0x1c4/0x420 [ 372.343697][ T31] ? remove_client_context+0xc0/0x1e0 [ 372.349371][ T31] disable_device+0x1c6/0x320 [ 372.354312][ T31] ? __pfx_disable_device+0x10/0x10 [ 372.359767][ T31] __ib_unregister_device+0x2cb/0x3f0 [ 372.365384][ T31] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 372.372127][ T31] ib_unregister_device_and_put+0xb8/0xf0 [ 372.383129][ T31] nldev_dellink+0x2d1/0x320 [ 372.401019][ T31] ? __pfx_nldev_dellink+0x10/0x10 [ 372.412372][ T31] ? rcu_is_watching+0x15/0xb0 [ 372.423123][ T31] ? apparmor_capable+0x137/0x1b0 [ 372.434251][ T31] ? bpf_lsm_capable+0x9/0x20 [ 372.443899][ T31] ? security_capable+0x7e/0x2e0 [ 372.455027][ T31] ? __pfx_nldev_dellink+0x10/0x10 [ 372.467430][ T31] rdma_nl_rcv+0x6ab/0x980 [ 372.472343][ T31] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 372.477669][ T31] ? __lock_acquire+0xaac/0xd20 [ 372.489636][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 372.495017][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 372.505522][ T31] netlink_unicast+0x758/0x8d0 [ 372.515211][ T31] netlink_sendmsg+0x805/0xb30 [ 372.520550][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 372.526702][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 372.531790][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 372.537368][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 372.542798][ T31] __sock_sendmsg+0x21c/0x270 [ 372.563974][ T31] ____sys_sendmsg+0x505/0x830 [ 372.572647][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 372.593296][ T31] ? import_iovec+0x74/0xa0 [ 372.602030][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 372.611724][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 372.619073][ T31] ? __fget_files+0x2a/0x420 [ 372.623824][ T31] ? __fget_files+0x3a0/0x420 [ 372.629083][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 372.634631][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 372.640348][ T31] ? do_syscall_64+0xba/0x210 [ 372.645107][ T31] do_syscall_64+0xf6/0x210 [ 372.649782][ T31] ? clear_bhb_loop+0x60/0xb0 [ 372.654507][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.660493][ T31] RIP: 0033:0x7f0a1238e969 [ 372.664949][ T31] RSP: 002b:00007f0a1315a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 372.673571][ T31] RAX: ffffffffffffffda RBX: 00007f0a125b6160 RCX: 00007f0a1238e969 [ 372.681665][ T31] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 372.694698][ T31] RBP: 00007f0a12410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 372.702815][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 372.710952][ T31] R13: 0000000000000001 R14: 00007f0a125b6160 R15: 00007fff38cd9db8 [ 372.719105][ T31] [ 372.739676][ T31] [ 372.739676][ T31] Showing all locks held in the system: [ 372.771031][ T31] 4 locks held by kworker/u8:1/13: [ 372.776416][ T31] #0: ffff88801aefe148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 372.806018][ T31] #1: ffffc90000127c60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 372.825980][ T31] #2: ffffffff8f2eb0d0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x8a0 [ 372.835454][ T31] #3: ffff88807d5a06d0 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 372.862952][ T31] 1 lock held by khungtaskd/31: [ 372.868442][ T31] #0: ffffffff8df3dce0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 372.878629][ T31] 2 locks held by kworker/u8:5/65: [ 372.884043][ T31] #0: ffff8880b893b598 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 372.899914][ T31] #1: ffffc9000157fc60 ((work_completion)(&(&bat_priv->nc.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 372.913701][ T31] 2 locks held by getty/5591: [ 372.918653][ T31] #0: ffff88802fe3e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 372.929787][ T31] #1: ffffc900033332f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 372.940709][ T31] 3 locks held by kworker/u9:5/5843: [ 372.946328][ T31] #0: ffff8880279ab148 ((wq_completion)hci0){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 372.957395][ T31] #1: ffffc90004507c60 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 372.970298][ T31] #2: ffff8880321f8d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 372.980475][ T31] 2 locks held by syz.4.1234/10492: [ 372.985730][ T31] #0: ffffffff99bdd018 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv+0x302/0x980 [ 373.002257][ T31] #1: ffff88807d5a06d0 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x284/0x3f0 [ 373.014445][ T31] 2 locks held by syz.1.1429/11279: [ 373.019819][ T31] #0: ffffffff8f2eb0d0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x317/0x590 [ 373.030754][ T31] #1: ffff88807d5a06d0 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 373.043502][ T31] 2 locks held by syz.0.1598/11976: [ 373.049064][ T31] #0: ffffffff8f2eb0d0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x317/0x590 [ 373.058744][ T31] #1: ffff88807d5a06d0 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 373.070331][ T31] 2 locks held by syz.3.1883/12732: [ 373.075648][ T31] #0: ffffffff8f2eb0d0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x317/0x590 [ 373.086397][ T31] #1: ffff88807d5a06d0 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 373.104032][ T5843] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 373.113288][ T31] 2 locks held by syz.6.2202/13695: [ 373.118796][ T31] #0: ffffffff8f2eb0d0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x317/0x590 [ 373.128490][ T31] #1: ffff88807d5a06d0 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 373.141617][ T31] 2 locks held by syz.5.2206/13706: [ 373.148003][ T31] #0: ffffffff8f2eb0d0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x317/0x590 [ 373.157729][ T31] #1: ffff88807d5a06d0 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 373.169236][ T31] 1 lock held by syz-executor/13942: [ 373.174646][ T31] #0: ffffffff8f2f7c88 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 373.183953][ T31] 7 locks held by syz-executor/13946: [ 373.189737][ T31] #0: ffff888033efa420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 373.205041][ T31] #1: ffff8880667b5488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 373.215090][ T31] #2: ffff888026751a58 (kn->active#53){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 373.225469][ T31] #3: ffffffff8eb977e8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: new_device_store+0x12c/0x6f0 [ 373.236235][ T31] #4: ffff88807a1e40e8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 373.245635][ T31] #5: ffff88807a1e5250 (&devlink->lock_key#25){+.+.}-{4:4}, at: nsim_drv_probe+0xc1/0xb70 [ 373.256263][ T31] #6: ffffffff8f2f7c88 (rtnl_mutex){+.+.}-{4:4}, at: register_nexthop_notifier+0x80/0x210 [ 373.266573][ T31] 2 locks held by syz-executor/13949: [ 373.272070][ T31] #0: ffffffff8f7fb1f8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 373.281849][ T31] #1: ffffffff8f2f7c88 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 373.291146][ T31] 3 locks held by syz.7.2311/14065: [ 373.296754][ T31] #0: ffffffff8f2eb0d0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x317/0x590 [ 373.310798][ T31] #1: ffffffff8f2f7c88 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x2a4/0x990 [ 373.320176][ T31] #2: ffffffff8df437b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f4/0x730 [ 373.331572][ T31] [ 373.334036][T13942] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 373.343160][ T31] ============================================= [ 373.343160][ T31] [ 373.360439][ T31] NMI backtrace for cpu 1 [ 373.360465][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc6-syzkaller-01232-g9ab0ac0e532a #0 PREEMPT(full) [ 373.360491][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 373.360504][ T31] Call Trace: [ 373.360512][ T31] [ 373.360521][ T31] dump_stack_lvl+0x189/0x250 [ 373.360558][ T31] ? __wake_up_klogd+0xd9/0x110 [ 373.360588][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 373.360620][ T31] ? __pfx__printk+0x10/0x10 [ 373.360658][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 373.360695][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 373.360725][ T31] ? _printk+0xcf/0x120 [ 373.360752][ T31] ? __pfx__printk+0x10/0x10 [ 373.360777][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 373.360805][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 373.360842][ T31] watchdog+0xfee/0x1030 [ 373.360874][ T31] ? watchdog+0x1de/0x1030 [ 373.360913][ T31] kthread+0x711/0x8a0 [ 373.360944][ T31] ? __pfx_watchdog+0x10/0x10 [ 373.360971][ T31] ? __pfx_kthread+0x10/0x10 [ 373.361001][ T31] ? __pfx_kthread+0x10/0x10 [ 373.361026][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 373.361048][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 373.361072][ T31] ? __pfx_kthread+0x10/0x10 [ 373.361098][ T31] ret_from_fork+0x4b/0x80 [ 373.361121][ T31] ? __pfx_kthread+0x10/0x10 [ 373.361147][ T31] ret_from_fork_asm+0x1a/0x30 [ 373.361186][ T31] [ 373.361194][ T31] Sending NMI from CPU 1 to CPUs 0: [ 373.478994][T13942] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 373.482275][ C0] NMI backtrace for cpu 0 [ 373.482291][ C0] CPU: 0 UID: 0 PID: 13942 Comm: syz-executor Not tainted 6.15.0-rc6-syzkaller-01232-g9ab0ac0e532a #0 PREEMPT(full) [ 373.482314][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 373.482325][ C0] RIP: 0010:io_serial_in+0x77/0xc0 [ 373.482354][ C0] Code: e8 be 01 82 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 6f fb e3 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07 [ 373.482369][ C0] RSP: 0018:ffffc90004026598 EFLAGS: 00000006 [ 373.482385][ C0] RAX: 1ffffffff336c905 RBX: 00000000000003f9 RCX: 0000000000000000 [ 373.482397][ C0] RDX: 00000000000003f9 RSI: 0000000000000000 RDI: 0000000000000020 [ 373.482408][ C0] RBP: ffffc90004026770 R08: 0000000000000003 R09: 0000000000000004 [ 373.482419][ C0] R10: dffffc0000000000 R11: ffffffff853defe0 R12: dffffc0000000000 [ 373.482432][ C0] R13: dffffc0000000000 R14: ffffffff99b64c40 R15: 0000000000000000 [ 373.482445][ C0] FS: 000055556f686500(0000) GS:ffff8881260b5000(0000) knlGS:0000000000000000 [ 373.482460][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 373.482471][ C0] CR2: 0000200000003000 CR3: 000000003d7e2000 CR4: 00000000003526f0 [ 373.482487][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 373.482497][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 373.482507][ C0] Call Trace: [ 373.482514][ C0] [ 373.482523][ C0] serial8250_console_write+0x581/0x1ba0 [ 373.482557][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 373.482581][ C0] ? console_flush_all+0x13a/0xc40 [ 373.482603][ C0] ? console_flush_all+0x13a/0xc40 [ 373.482627][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 373.482648][ C0] ? console_flush_all+0x13a/0xc40 [ 373.482666][ C0] ? console_flush_all+0x13a/0xc40 [ 373.482687][ C0] console_flush_all+0x728/0xc40 [ 373.482709][ C0] ? console_flush_all+0x13a/0xc40 [ 373.482733][ C0] ? __pfx_console_flush_all+0x10/0x10 [ 373.482761][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 373.482786][ C0] console_unlock+0xc4/0x270 [ 373.482806][ C0] ? __pfx_console_unlock+0x10/0x10 [ 373.482826][ C0] ? vprintk_emit+0x444/0x7a0 [ 373.482842][ C0] ? vprintk_emit+0x444/0x7a0 [ 373.482860][ C0] vprintk_emit+0x5b7/0x7a0 [ 373.482877][ C0] ? vprintk_emit+0x444/0x7a0 [ 373.482895][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 373.482911][ C0] ? notifier_call_chain+0x1b3/0x3e0 [ 373.482928][ C0] ? __dev_notify_flags+0x18d/0x2e0 [ 373.482954][ C0] ? __pfx_snprintf+0x10/0x10 [ 373.482990][ C0] ? __lock_acquire+0xaac/0xd20 [ 373.483022][ C0] dev_vprintk_emit+0x337/0x3f0 [ 373.483052][ C0] ? __pfx_dev_vprintk_emit+0x10/0x10 [ 373.483083][ C0] ? __lock_acquire+0xaac/0xd20 [ 373.483113][ C0] dev_printk_emit+0xe0/0x130 [ 373.483145][ C0] ? __pfx_dev_printk_emit+0x10/0x10 [ 373.483181][ C0] __netdev_printk+0x3d7/0x4d0 [ 373.483204][ C0] netdev_info+0x10a/0x160 [ 373.483228][ C0] ? __pfx_netdev_info+0x10/0x10 [ 373.483248][ C0] ? __local_bh_enable_ip+0x12d/0x1c0 [ 373.483274][ C0] netif_change_name+0x889/0x960 [ 373.483298][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 373.483325][ C0] ? do_setlink+0xa75/0x40d0 [ 373.483349][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 373.483370][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 373.483396][ C0] ? __pfx_netif_change_name+0x10/0x10 [ 373.483421][ C0] ? nla_strscpy+0x10f/0x170 [ 373.483446][ C0] do_setlink+0xa75/0x40d0 [ 373.483480][ C0] ? __pfx_do_setlink+0x10/0x10 [ 373.483506][ C0] ? __lock_acquire+0xaac/0xd20 [ 373.483535][ C0] ? __mutex_trylock_common+0x153/0x260 [ 373.483556][ C0] ? __pfx___mutex_trylock_common+0x10/0x10 [ 373.483578][ C0] ? rcu_is_watching+0x15/0xb0 [ 373.483595][ C0] ? trace_contention_end+0x39/0x120 [ 373.483614][ C0] ? __mutex_lock+0x330/0xe80 [ 373.483634][ C0] ? __pfx_aa_get_newest_label+0x10/0x10 [ 373.483658][ C0] ? rtnl_newlink+0x8db/0x1c70 [ 373.483678][ C0] ? rcu_is_watching+0x15/0xb0 [ 373.483695][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 373.483721][ C0] ? ns_capable+0x8a/0xf0 [ 373.483738][ C0] ? rtnl_link_get_net_capable+0x16a/0x350 [ 373.483765][ C0] rtnl_newlink+0x160b/0x1c70 [ 373.483795][ C0] ? __pfx_rtnl_newlink+0x10/0x10 [ 373.483817][ C0] ? __lock_acquire+0xaac/0xd20 [ 373.483846][ C0] ? __lock_acquire+0xaac/0xd20 [ 373.483878][ C0] ? __lock_acquire+0xaac/0xd20 [ 373.483914][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 373.483943][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 373.483992][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 373.484021][ C0] ? kernel_text_address+0xa5/0xe0 [ 373.484046][ C0] ? __kernel_text_address+0xd/0x40 [ 373.484070][ C0] ? unwind_get_return_address+0x4d/0x90 [ 373.484096][ C0] ? aa_get_newest_label+0xf7/0x5d0 [ 373.484118][ C0] ? __lock_acquire+0xaac/0xd20 [ 373.484157][ C0] ? __pfx_rtnl_newlink+0x10/0x10 [ 373.484178][ C0] rtnetlink_rcv_msg+0x7cc/0xb70 [ 373.484202][ C0] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 373.484224][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 373.484256][ C0] netlink_rcv_skb+0x205/0x470 [ 373.484282][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 373.484305][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 373.484337][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 373.484361][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 373.484389][ C0] netlink_unicast+0x758/0x8d0 [ 373.484417][ C0] netlink_sendmsg+0x805/0xb30 [ 373.484447][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 373.484474][ C0] ? aa_sock_msg_perm+0x94/0x160 [ 373.484495][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 373.484517][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 373.484542][ C0] __sock_sendmsg+0x21c/0x270 [ 373.484564][ C0] __sys_sendto+0x3bd/0x520 [ 373.484588][ C0] ? __pfx___sys_sendto+0x10/0x10 [ 373.484620][ C0] ? fput_close_sync+0x119/0x200 [ 373.484643][ C0] ? dnotify_flush+0x1db/0x5e0 [ 373.484668][ C0] ? __pfx_fput_close_sync+0x10/0x10 [ 373.484689][ C0] __x64_sys_sendto+0xde/0x100 [ 373.484715][ C0] do_syscall_64+0xf6/0x210 [ 373.484737][ C0] ? clear_bhb_loop+0x60/0xb0 [ 373.484758][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.484775][ C0] RIP: 0033:0x7fc8169907fc [ 373.484789][ C0] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 373.484804][ C0] RSP: 002b:00007ffed5d0f880 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 373.484821][ C0] RAX: ffffffffffffffda RBX: 00007fc8176e35c0 RCX: 00007fc8169907fc [ 373.484834][ C0] RDX: 0000000000000030 RSI: 00007fc8176e3610 RDI: 0000000000000006 [ 373.484845][ C0] RBP: 0000000000000000 R08: 00007ffed5d0f8d4 R09: 000000000000000c [ 373.484856][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006 [ 373.484867][ C0] R13: 0000000000000000 R14: 00007fc8176e3610 R15: 0000000000000000 [ 373.484888][ C0] [ 373.585945][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 373.585971][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc6-syzkaller-01232-g9ab0ac0e532a #0 PREEMPT(full) [ 373.586001][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 373.586017][ T31] Call Trace: [ 373.586028][ T31] [ 373.586039][ T31] dump_stack_lvl+0x99/0x250 [ 373.586080][ T31] ? __asan_memcpy+0x40/0x70 [ 373.586109][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 373.586144][ T31] ? __pfx__printk+0x10/0x10 [ 373.586184][ T31] panic+0x2db/0x790 [ 373.586233][ T31] ? __pfx_panic+0x10/0x10 [ 373.586264][ T31] ? tick_nohz_tick_stopped+0x86/0xb0 [ 373.586297][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 373.586327][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 373.586373][ T31] watchdog+0x102d/0x1030 [ 373.586409][ T31] ? watchdog+0x1de/0x1030 [ 373.586451][ T31] kthread+0x711/0x8a0 [ 373.586487][ T31] ? __pfx_watchdog+0x10/0x10 [ 373.586518][ T31] ? __pfx_kthread+0x10/0x10 [ 373.586550][ T31] ? __pfx_kthread+0x10/0x10 [ 373.586579][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 373.586604][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 373.586630][ T31] ? __pfx_kthread+0x10/0x10 [ 373.586659][ T31] ret_from_fork+0x4b/0x80 [ 373.586685][ T31] ? __pfx_kthread+0x10/0x10 [ 373.586716][ T31] ret_from_fork_asm+0x1a/0x30 [ 373.586759][ T31] [ 373.594322][ T31] Kernel Offset: disabled