last executing test programs: 2m50.952537061s ago: executing program 32 (id=228): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)='Q', 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r0], 0xa0}, 0x4004881) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100500106"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 2m27.092571206s ago: executing program 3 (id=476): r0 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a40)={{0x14, 0x3eb}, [@NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x305, 0x0, 0x0, {0x5, 0x0, 0xa}}], {0x14, 0x3f5}}, 0x3c}, 0x1, 0x0, 0x0, 0x4c0d4}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@gettaction={0x48, 0x32, 0x400, 0x70bd2a, 0x25cfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x85, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81f7}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008000}, 0x4040090) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c00000010000304000000000000000000000400", @ANYRES32=r2, @ANYBLOB="60bc010004a701003c00128009000100626f6e64000000002c"], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f00000005c0)={0x11, 0x2f, '\x00', [@hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x10}}, @calipso={0x7, 0x38, {0x0, 0xc, 0x4f, 0x7, [0x3, 0x5, 0xd3ea, 0x8, 0x5e5bb710, 0x3]}}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @calipso={0x7, 0x38, {0x2, 0xc, 0x5, 0x6, [0xe74, 0x3, 0x100, 0x323, 0x10000, 0x4]}}, @pad1, @generic={0x4, 0xd4, "1b4e65a5e0d64bb3ca4aca02e750c62a16a8f1d057e7d01c74431c073d55b6d8e7bc9fdad565329f71c148a6094eb8601e1be6a79705a1fe9df6d3e27eaccb3fdecd92e5a936fd72e5bdcf3c6025bf0fdd96bfb7ab08585ba1794922f81ed77d997dd4faef8f04ea2c4b7a81432c57b0d98f97193c0751ce999bc9073fbef990bbac0b3504e3d6084392388ddaed627817c48aa1f8ce657e7a478eae5268339d9fcca81efe86ba1fffb835b2a3a1140e30dd4752e52cb24c1472fc34d88cc8675a6a8c76af5641d09016b67462a9b3fe7c2f9aea"}, @pad1]}, 0x188) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)={0x8c, r4, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5c}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xb270}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40004}, 0x4081) 2m26.714599217s ago: executing program 3 (id=479): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x4, 0x0, &(0x7f0000000600)='GPL\x00', 0x2000000, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000000000011000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x110) 2m26.406238162s ago: executing program 3 (id=480): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001020000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r2}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r3 = socket$kcm(0x2, 0x5, 0x84) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x2) socket(0x26, 0x3, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r6, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r8}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)='O', 0x28}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) sendmsg$inet(r3, &(0x7f0000000140)={&(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10, &(0x7f0000001400)=[{&(0x7f0000000100)='@', 0x1}], 0x1}, 0x4000000) setsockopt$sock_attach_bpf(r3, 0x84, 0x1e, &(0x7f0000000000), 0x10) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)="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", 0xfa, 0x80, &(0x7f0000000240)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x80000000}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1e, 0x1, 0x0) sendmsg$NL80211_CMD_START_P2P_DEVICE(r9, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xffffffff, 0xb}}}}, ["", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r10}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x19, 0x4, 0x4, 0x10002, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, r9, 0x550fe000) 2m25.402374539s ago: executing program 3 (id=489): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000000120000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES8=r2], 0x64}}, 0x0) 2m24.730178435s ago: executing program 3 (id=493): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="e4000000100009"], 0xe4}], 0x1}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @local}, 0xc) ioctl$SIOCNRDECOBS(0xffffffffffffffff, 0x89e2) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="fa00000000000000000003000000240001800d0001007564703a73797a32000000000d000100c9a520f673737a3200000000"], 0x38}, 0x1, 0x0, 0x0, 0x48000}, 0x0) ppoll(&(0x7f0000000340)=[{r0, 0x3000}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) socket$inet6(0xa, 0x3, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000001300)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r4, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$inet6_sctp(0xa, 0x801, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000005940)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)=ANY=[@ANYRES32=r5, @ANYRES32, @ANYRES64=r5], 0x10) 2m23.607388731s ago: executing program 3 (id=501): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)='Q', 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r0], 0xa0}, 0x4004881) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000003"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 2m8.512313786s ago: executing program 33 (id=501): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)='Q', 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r0], 0xa0}, 0x4004881) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000003"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 1m57.785967647s ago: executing program 0 (id=650): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002900), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f00000032c0)={0x0, 0x0, &(0x7f0000003280)={&(0x7f0000003200)={0x34, r2, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x34}, 0x1, 0x0, 0x0, 0x880}, 0x40c4) (fail_nth: 5) socket$inet(0xa, 0x801, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000640), r4) sendmsg$NLBL_CALIPSO_C_REMOVE(r5, 0x0, 0x4000050) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, r6, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44004}, 0x40000) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20000000240740681dde66018728915c402ab1905e031faa0000a15100000008900a8ad66a359fe6c5254249e728fa997d92ff450aaf2d13ba9f937fbe87ca0876e9828f7b68561b7275484b3053e4272bd730c41f01925caf2299d3d6a59aea39d07450562c54f2fe5d7cff737b4b10044cd5f2473ed838253d1544b0b976d9d41ce37507b9cc9937218bd1da351dfc3103a96572fcff88b394324d36275b26ac300d3ef29b9a63cf8c351d60716bd7e614fa1a8db5a75338d91d8e3ffc0521e08fd42c43582f40a693dee894546928e0dfc714"], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1m57.110956939s ago: executing program 0 (id=653): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20}, {}, {0x7, 0x1, 0xb, 0x2, 0xa, 0x0, 0x2000000}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000008c0)='syzkaller\x00', 0x2, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1m56.781261045s ago: executing program 0 (id=656): socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$rds(0x15, 0x5, 0x0) socket$kcm(0x21, 0x2, 0x2) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x4}, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) socket$inet_udplite(0x2, 0x2, 0x88) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x80001, 0x0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x42, &(0x7f00000000c0)=0x81a, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r4, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 1m56.346382736s ago: executing program 0 (id=660): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="500100001000130429bd700000000000acd8b438140000002001000065c9b84ea9cd3e8c59859b4c4608f100000000000000004000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e000000100000000000000000000000000000000320000000100000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000800000000000000000008000000000081000000000000000000000000000000000000000000000005000000000000000400000000000000060000040000000000000000f9ffffff000008000000000000000000020004816800000000000000600012"], 0x150}, 0x1, 0x0, 0x0, 0x612fc0b6c779297b}, 0x0) 1m56.110135468s ago: executing program 0 (id=662): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001180)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x22, 0x1, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4, 0x11}]}]}}]}, 0x94}, 0x1, 0xf1}, 0x0) 1m55.49012497s ago: executing program 0 (id=666): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)='Q', 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r0], 0xa0}, 0x4004881) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x20, 0x0, 0x0, 0x400048c0}, 0x0) 1m49.705588448s ago: executing program 1 (id=694): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x0, @remote, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x5dc, {0x0, 0x6, "8cb02b", 0x4, 0x2f, 0x0, @loopback, @local, [@srh={0x2b, 0x0, 0x4, 0x0, 0x0, 0x10}]}}}}}}}, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000040)="10208100", 0x4, 0x0, &(0x7f0000000340)={0x11, 0x8100, r1, 0x1, 0x0, 0x6, @local}, 0x14) r2 = accept4(r0, &(0x7f0000000340)=@generic, &(0x7f0000000200)=0x80, 0x80400) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@private2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@private2}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000540)={{{@in=@empty, @in6=@local, 0x4e23, 0x2, 0x4e20, 0x9, 0xa, 0x20, 0x20, 0x0, r1, r4}, {0x10, 0x9, 0x3, 0xb35, 0x314, 0x7, 0x1, 0x9}, {0x1, 0x9, 0x79, 0x10000}, 0x1306b3a1, 0x6e6bc0, 0x1, 0x0, 0x2, 0x2}, {{@in=@local, 0x4d3, 0xff}, 0x2, @in=@loopback, 0x3500, 0x0, 0x2, 0x85, 0xfffffffa, 0x101}}, 0xe8) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080", @ANYRES16=r1, @ANYRES64, @ANYRES64=r3], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r6, 0x0, 0x0}, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r7, 0x6, 0xd, 0x0, 0x0) setsockopt$inet6_mtu(r7, 0x29, 0x17, &(0x7f0000000300)=0x5, 0x4) setsockopt$inet6_tcp_int(r7, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r7, &(0x7f0000001080)='D', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x5, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000000}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a7fbb}, @ldst={0x6, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffe, 0xa000000}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0xf4240, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) write(r7, &(0x7f00000010c0)="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", 0x1000) 1m48.623563319s ago: executing program 1 (id=701): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB='6\x00'/12, @ANYRES32, @ANYBLOB="addaced30a01a7fe46005a6cdee853229216446b411c8d9e63e3d3cdab8325cdc8faa5cb28989108c94e95a12489c73629f24aaef11a6cafca29547a05f362658b4964f4c208f68ab3815a3a918db58d9fdb302c7ff2"], 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xffe0}}}, 0x24}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000008000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb7000000000000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r2}, 0x10) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000600), 0x8) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000640)=0x40, 0x1) r4 = socket$alg(0x26, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004084}, 0x10) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="02180000100000000000000000000000030005000000000002000010e000000100000000000000000800120000000000000000000000000010000000000000000000000000000000ac1414bb000000000000000000000000fc010000000000000000000000000000030006000000000002"], 0x80}}, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000004c0)}}], 0x90}, 0x0) r7 = accept4(r4, 0x0, 0x0, 0x800) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xd3, &(0x7f0000000340)=""/211, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r8, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000003000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b8", @ANYBLOB="4caa6dd072"], 0xfdef) 1m48.066252405s ago: executing program 1 (id=707): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="110000000514440027bd7000fddbdf25"], 0x10}, 0x1, 0x0, 0x0, 0x8881}, 0x4000000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001400)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=r4, @ANYBLOB="00410000000000001c002b8008000100", @ANYRES32, @ANYBLOB="0800030019000000080008"], 0x3c}}, 0x0) socket$key(0xf, 0x3, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth0_to_bridge\x00', 0x0}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r7}, 0x10) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r8, 0x84, 0x75, &(0x7f0000000000)={r10, 0x4}, &(0x7f0000000040)=0x8) bpf$PROG_LOAD(0x5, 0xfffffffffffffffe, 0xaf) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000000)={r6, 0x1, 0x6, @multicast}, 0x10) r11 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r11, 0x107, 0x2, &(0x7f00000003c0)={r6, 0x1, 0x6, @remote}, 0x10) 1m47.486334174s ago: executing program 1 (id=710): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xffffff00, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0xfffffffe, 0x0, @void, @value, @void, @value}, 0x50) (async) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x3, 0x1001, 0x2, 0x1b503, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0xb, @value=r2, @void, @value=r0}, 0x50) (async, rerun: 64) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) vmsplice(r3, &(0x7f0000000180), 0x2ae, 0x0) 1m47.151262797s ago: executing program 1 (id=712): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x80805, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet(0x2, 0x4000000805, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="12000000070000000400000002"], 0x50) socket(0xa, 0x3, 0x3a) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) 1m46.114421629s ago: executing program 1 (id=718): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)='Q', 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r0], 0xa0}, 0x4004881) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x2f, 0x0, 0x0, 0x400048c0}, 0x0) 1m40.074665683s ago: executing program 34 (id=666): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)='Q', 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r0], 0xa0}, 0x4004881) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x20, 0x0, 0x0, 0x400048c0}, 0x0) 1m36.374346319s ago: executing program 4 (id=774): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000010004b04bd7000fcdbdf257a000d0000", @ANYRES32=0x0, @ANYBLOB="0010000020900000400012800b0001006272696467650000300002800c0023000100000000000080050016000000000008001b004b0f00000500250001000000050024"], 0x60}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_to_bridge\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x2, &(0x7f00000003c0)={r3, 0x1, 0x6, @remote}, 0x10) 1m35.903603054s ago: executing program 4 (id=777): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) (async) socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 32) pipe(&(0x7f0000000c00)) (rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000001180)=ANY=[], 0x48) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = epoll_create(0x4) (async) socket$can_bcm(0x1d, 0x2, 0x2) socket$inet_mptcp(0x2, 0x1, 0x106) (async) writev(r0, 0x0, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xb, 0x0, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) (async) unshare(0x6020400) (async, rerun: 32) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) (rerun: 32) connect$pppl2tp(r3, &(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x0, 0x4, 0x1, {0xa, 0x4e24, 0x1, @local, 0x10}}}, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) (async) socket(0x3, 0x5, 0x8) (async) r4 = socket(0x1d, 0x5, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @local}, 0x10) r5 = syz_init_net_socket$ax25(0x3, 0x3, 0xc4) connect$llc(r5, &(0x7f0000000400)={0x1a, 0x313, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) r7 = syz_init_net_socket$ax25(0x3, 0x3, 0xcd) connect$ax25(r7, &(0x7f0000000040)={{0x3, @default, 0x6}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) 1m35.606317554s ago: executing program 4 (id=778): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="2400000018000109000000000010000002180000fe0000060000000008000100ac1414"], 0x1c}}, 0x0) 1m35.396696155s ago: executing program 4 (id=780): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x80805, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet(0x2, 0x4000000805, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) socket(0xa, 0x3, 0x3a) socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400000000000000000000000f", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) 1m34.961993756s ago: executing program 4 (id=781): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002900), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, 0x6, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x44010) sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f00000032c0)={0x0, 0x0, &(0x7f0000003280)={&(0x7f0000003200)={0x34, r2, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x34}, 0x1, 0x0, 0x0, 0x880}, 0x40c4) socket$inet(0xa, 0x801, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000640), r5) sendmsg$NLBL_CALIPSO_C_REMOVE(r6, 0x0, 0x4000050) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, r7, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44004}, 0x40000) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20000000240740681dde66018728915c402ab1905e031faa0000a15100000008900a8ad66a359fe6c5254249e728fa997d92ff450aaf2d13ba9f937fbe87ca0876e9828f7b68561b7275484b3053e4272bd730c41f01925caf2299d3d6a59aea39d07450562c54f2fe5d7cff737b4b10044cd5f2473ed838253d1544b0b976d9d41ce37507b9cc9937218bd1da351dfc3103a96572fcff88b394324d36275b26ac300d3ef29b9a63cf8c351d60716bd7e614fa1a8db5a75338d91d8e3ffc0521e08fd42c43582f40a693dee894546928e0dfc714"], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1m34.528350807s ago: executing program 4 (id=785): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000140)="c0", 0x1, 0x0, &(0x7f0000000a80)={0x11, 0x88a8, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$SIOCGSTAMP(r5, 0x8906, 0x0) recvmmsg(r5, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10022, 0x0) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r8) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="495fa07f9af29579be610030b1cf138787c554d06d531905be86ff3396b8f4f0ccdd48566f1c3a0be1ac4189b1f2ae0e92370b05d3f0d9ed1f23bc56746a75ef40d98252a08550c22cf3b7468217fa79900c4830a4daaf262a231c26ba75ca21c8d0385c90a85c1a5b4e53d59f269e55383a12fb5233de03e8fa26baf6f893ab6ba759db1d35909f2e5773ba5e6f248975dcf61244caa46700325be2d8d914b090bebe5fec75f94416b68adc7d3c3e27f450432cbb11cb0346190c6ca754b485526cd1dd7c993a97037eee7da1f3", @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x10044001) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafb", 0x240}], 0x1) 1m30.879797032s ago: executing program 35 (id=718): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)='Q', 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r0], 0xa0}, 0x4004881) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x2f, 0x0, 0x0, 0x400048c0}, 0x0) 1m19.351756593s ago: executing program 36 (id=785): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000140)="c0", 0x1, 0x0, &(0x7f0000000a80)={0x11, 0x88a8, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$SIOCGSTAMP(r5, 0x8906, 0x0) recvmmsg(r5, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10022, 0x0) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r8) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="495fa07f9af29579be610030b1cf138787c554d06d531905be86ff3396b8f4f0ccdd48566f1c3a0be1ac4189b1f2ae0e92370b05d3f0d9ed1f23bc56746a75ef40d98252a08550c22cf3b7468217fa79900c4830a4daaf262a231c26ba75ca21c8d0385c90a85c1a5b4e53d59f269e55383a12fb5233de03e8fa26baf6f893ab6ba759db1d35909f2e5773ba5e6f248975dcf61244caa46700325be2d8d914b090bebe5fec75f94416b68adc7d3c3e27f450432cbb11cb0346190c6ca754b485526cd1dd7c993a97037eee7da1f3", @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x10044001) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafb", 0x240}], 0x1) 1m7.538070117s ago: executing program 7 (id=894): r0 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000180)="290000002000190f00003fffffffda0602000000fde80001dd0000040d001800ea11c21d0005000000", 0x29}], 0x1) (async) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000180)="290000002000190f00003fffffffda0602000000fde80001dd0000040d001800ea11c21d0005000000", 0x29}], 0x1) setsockopt$inet_mreqn(r0, 0x0, 0x24, 0x0, 0x0) (async) setsockopt$inet_mreqn(r0, 0x0, 0x24, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'veth0_virt_wifi\x00', 0x84aebfbd6349b7f2}) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'veth0_virt_wifi\x00', 0x84aebfbd6349b7f2}) r4 = socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r5 = socket$unix(0x1, 0x1, 0x0) writev(r5, &(0x7f0000000240)=[{&(0x7f0000001300)="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", 0x1000}], 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x28, 0x2d, 0x9, 0x70bd27, 0x0, {0x5}, [@typed={0x14, 0xa, 0x0, 0x0, @ipv6=@loopback}]}, 0x28}}, 0x84) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="ac141440640101020100009a04000000ffffffffac1414aae00000010a010100"], 0x20) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bdaa, 0xffffffff, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r8, &(0x7f0000000480)={0x2, 0x4e22, @empty}, 0x10) (async) bind$inet(r8, &(0x7f0000000480)={0x2, 0x4e22, @empty}, 0x10) listen(r8, 0x1ff) sendto$inet(r8, &(0x7f00000004c0)="ab", 0x1, 0x20c0, &(0x7f00000001c0)={0x2, 0x4e22, @loopback=0x7f0000c0}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000804}, 0x20040054) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r11, r12, 0x5, 0x0, 0x0, @void, @value}, 0x10) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r11, r12, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r11}, &(0x7f00000006c0), &(0x7f0000000700)=r10}, 0x20) sendmsg$inet(r9, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x50, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5, 0x17, 0x1}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x6}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x81}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) 1m6.217389255s ago: executing program 7 (id=898): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB="8400000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000005c0043800b00010067726574617000004c000280050016000200000006000e000100000008000700ac1414aa080007007f00000106000e000000000008000100", @ANYRES32, @ANYBLOB="050016000100000008001500acb8060006000200", @ANYRES32], 0x84}, 0x1, 0x0, 0x0, 0x813}, 0x0) 1m5.966861052s ago: executing program 7 (id=899): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x8c, 0x8c, 0x4, [@restrict={0xe, 0x0, 0x0, 0xb, 0x3}, @enum={0x2, 0x4, 0x0, 0x6, 0x4, [{0x0, 0x6}, {0x7, 0x5}, {0xe, 0x7}, {0x1}]}, @enum64={0xf, 0x6, 0x0, 0x13, 0x0, 0xc, [{0x4, 0x5f, 0x200}, {0xf, 0x7a, 0x7}, {0x10, 0x5, 0x6977}, {0x2, 0x0, 0x1}, {0x8, 0x4, 0xfffffff8}, {0xd, 0x100, 0x7a6}]}]}, {0x0, [0x2e, 0x61]}}, &(0x7f0000000280)=""/161, 0xa8, 0xa1, 0x0, 0xffff, 0x10000, @value}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000400)={0x1ff, 0x0}, 0x8) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000480)=@o_path={&(0x7f0000000440)='./file0\x00', 0x0, 0x18}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1a, 0x8, &(0x7f0000000000)=@raw=[@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}], &(0x7f0000000040)='GPL\x00', 0x401, 0xc3, &(0x7f0000000080)=""/195, 0x41000, 0x0, '\x00', r0, @fallback=0xd, r1, 0x8, &(0x7f0000000380)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000003c0)={0x4, 0x5, 0x9, 0x7}, 0x10, r2, r3, 0x2, 0x0, &(0x7f00000004c0)=[{0x0, 0x1, 0xa, 0xb}, {0x1, 0x2, 0x6, 0x7}], 0x10, 0x5, @void, @value}, 0x94) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f8, &(0x7f00000005c0)="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") r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x44094008}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@getnetconf={0x14, 0x52, 0x10, 0x70bd2c, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040040}, 0x24000000) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$BTRFS_IOC_GET_DEV_STATS(r5, 0xc4089434, &(0x7f00000007c0)={0x0, 0xdde, 0x0, [0x0, 0x3, 0x2, 0x9, 0x7], [0x9, 0x7fffffffffffffff, 0x9, 0x1, 0xffffffffffffffff, 0x8, 0x6, 0x1, 0x8000, 0x9, 0x9, 0x4, 0x85, 0x0, 0x9, 0x1, 0x2, 0xc040000000000000, 0x9, 0x5, 0x5, 0x219, 0x1, 0x3c, 0x1, 0x8, 0x7, 0x7fff, 0x9, 0x3, 0x7ff, 0x3, 0x5, 0x1d9, 0x3d1, 0x3, 0x1, 0x1200000, 0xfffffffffffffffd, 0x3, 0x5, 0x5, 0x98, 0x0, 0x0, 0x58f8, 0x6, 0x1, 0xb1, 0x5, 0xb9c7, 0x8, 0x9, 0x100000001, 0xfffffffffffffff8, 0xfffffffffffffffd, 0x2, 0x2, 0x5, 0x200, 0x10, 0x4, 0x8001, 0xeb, 0x5, 0x1, 0xb, 0xfff, 0x8000, 0x3, 0x5ed, 0x8, 0x0, 0x7fffffff, 0x7, 0x3, 0x200, 0x1, 0x1, 0x3d93, 0x800, 0x3, 0xd, 0x8cb, 0x100000000, 0x100000000, 0x0, 0xfffffffffffff0c3, 0x6, 0xfffffffffffffe01, 0x8, 0x10001, 0xffff, 0x5, 0x79, 0x6fd3, 0x3, 0x0, 0x0, 0xfc, 0x7, 0x65da, 0x5, 0x7fff, 0xdb70, 0x7, 0x23cc, 0xfff, 0x1, 0x81, 0x2, 0xfffffffffffffff7, 0x9, 0x1, 0x7, 0x3, 0x6, 0x80000000800000, 0xff, 0x8000000000000001, 0x8]}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000c00)={@ifindex=r0, r4, 0x1b, 0x0, 0x0, @void, @value=r4}, 0x20) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DONE(r7, 0x0, 0xc9, 0x0, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(0xffffffffffffffff, 0x110, 0x3) bind$inet(r7, &(0x7f0000000c40)={0x2, 0x4e24, @empty}, 0x10) r9 = accept4(r6, &(0x7f0000000c80)=@un=@abs, &(0x7f0000000d00)=0x80, 0x80000) connect$vsock_stream(r9, &(0x7f0000000d40)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r10 = socket$inet_smc(0x2b, 0x1, 0x0) sendmmsg$inet(r9, &(0x7f0000002280)=[{{0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000d80)="3ac71b0642c174ace65cdf471079418d8501f3422ae11d83ab2740da4b41716e2f", 0x21}, {&(0x7f0000000dc0)="c3b62ecfb18ef6a4da598551718ddbf599dbc89ad3d02fe6fdfc63ac8a8dad5422f25dc4ae778d16669237774174746d9f8bf0817a0231218a3380ed7d16f72c52bcef5e236348c791d40dd56f27df4e55bb6292d9e8e4242af1a2343cdf6209d8920ff0be904a", 0x67}, {&(0x7f0000000e40)="50414c3d607ccac33aa16db070dcae890b4015482ba309a1ceb7fd5f4a70538553960b", 0x23}, {&(0x7f0000000e80)='T', 0x1}, {&(0x7f0000000ec0)="08970485baf54b318a4bf83da0024b4cd61a405fffc3f10564e51efbdbd1031ba1a4db55f9016bb2da4a2ca58a03e50f7ca642b4e87e5dd8563d189aee14606dfe23ccf1407ef8f1ff26097378ed34dd749ac3b542efdb00db0ad426f10f151a5f73ae8fa534a1392f864d9945893de80e96bee971048bf322963b9f0eec138c0ab6cbde5185b5a0abf5e9a263a1afc1311865fae2", 0x95}], 0x5, &(0x7f0000001040)=[@ip_tos_u8={{0x11}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}], 0x30}}, {{&(0x7f0000001080)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000001240)=[{0x0}, {&(0x7f0000001180)="5ced32c37ab97195fb69178474e5704cb52464a1ee5da9ab7433848a651060fad717f11bf7128e02b857e6a1f0aa90dcf8f0089ada2710d87928b6b3847512ac0a4bf5d39a57ab7f828b86e12c29113acdb9c76e7c7403f1cdb06f12b4d83bf7636d5bc23ecb95554e75473572ae960b7d8e75716a29ca3f95c3e24f93f8577c07f405e28f2fe92f2bb827f196d4ebad2f6ce7afafde43b7a463", 0x9a}], 0x2, &(0x7f0000001280)=[@ip_ttl={{0x14, 0x0, 0x2, 0x8}}], 0x18}}, {{&(0x7f00000012c0)={0x2, 0x4e23, @private=0xa010102}, 0x10, &(0x7f0000001780)=[{&(0x7f0000001300)="b2fa90f322ea34edd3372666051440c3cd115e8042ace8eb91fc020ba1d140adbdd055eb088f4a30bf06ae18018a25f27abbbc510cb1b20a192a1324f3af55a3bf02444b1df47ca97b47d3b0a2808f55", 0x50}, {&(0x7f0000001380)="8714466e83df41d99518e5438b0e4b26ae14f69a4f6aee", 0x17}, {&(0x7f00000013c0)="40695da589155932f7357726dd2e831d44cd96a86b57915586c59b54aa499b58283d740bcdb556b6f99b0c51025ed373cc868dbddecc78ebf3748d8aa06dffa85c2a16a411433f82eb24c8369f9eb18d486296e09f54c0ca917a3da002ae71740df74ce4abd7b2554e4fe8", 0x6b}, {&(0x7f0000001440)="97245e4f7aadd8c15b2d38d613f8da389e7ad39c83969a221ff5e285f86d5d7607af1db0381302e23802508eab16a8c9057a0eed6f4175162c980d18846d1262c5470cba0d0861b1cf4f32c8d35fced2083f28d21be1065c89b38477ae77b2784aa53f605bf247bf9a16196ebcfd3391b331bea65be8819ae387cd27b1859576cdb0054edcc2caa7de5104fc9982cf4106fa70a9137548796ccc9f2b9e187372c3baa9d1a6bd1e3f89f3a3224c2addd2ba0dcec352e3028a25048c891f3a27d83067f83517b09305f2f113e7cecfccbbcf686e359e1232c43cc4a017d92f79", 0xdf}, {&(0x7f0000001540)="1d90afa00a22a439590315e32db12db4459f4838d14ae59cc38282d77b2abe49ee36adff6821e95e5f9a44bcccef8a16a6e9d55cda01d396fbf19d82744f3b9048840b964b725d16594fe0baab290c5dfd92f86e85b0794380de031d80d294440fd1d0bfd56e6ea99f011e67fd424cf572c5e1fe9f359d7c7f9fb0820fac16bfe48b827f1f90fd05a7a369b38d5be8467dee8a1647", 0x95}, {&(0x7f0000001600)="fc7ce1f0c81cee204bea8a39f08d9584dbe2d83b1e66e3ca3481fb17cfeba4c68b734ddf9c4b61796f4b3ba6ae3c763e02c66962728254284da819803505660dd87ab1f64d86e0c71b1a385f96c710a961d3b5acfa44ea38e0d8335ff081c70f516957147b3538b664549b6ed029f311b1cf7282dc48b38f639f6b625ed62c211782e68762417bb5bfd8e3fa6beb461a9f62569d33a7b32852edc70b887c3eef74f897bb5e291dd98af549", 0xab}, {&(0x7f00000016c0)="7f595db654bf937397c3457b0abdbd7f06cbf246a23c5bb57c9687c3bdf88732b7469466aa44ec72b9c0fb63d55392978abaad27ea5c67221ca23e86df8aa010c729950a05f7b6018df97fae1f97b73e285eb2770ed7b250ce6ca50dc9e740290e4b7143899bfdd17d9fef9b1d530d505b688d1a0bab56ff6c4053e70573c5469d1d1131b2", 0x85}], 0x7, &(0x7f0000001800)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_ttl={{0x14, 0x0, 0x2, 0xcfd}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x84a0}}, @ip_retopts={{0x2c, 0x0, 0x7, {[@timestamp={0x44, 0x8, 0x13, 0x0, 0x8, [0xcad]}, @timestamp_prespec={0x44, 0x14, 0xa, 0x3, 0x3, [{@loopback, 0x2ca}, {@loopback, 0x7}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xdc}}], 0x90}}, {{&(0x7f0000001900)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000001b00)=[{&(0x7f0000001940)="f53d061f15286aff333f7ec34f4d5005b3318712fcf307cc44e2a8e23e8d4094fa308a3b34d8ea5b1e9d80e522573d44ffa6d0ab0c9319484cbb93915ec6f1140bdaf63d6f6e68fe6d8fff55df2f6a5abcf036f20898ef24863d72c32efe9ad4befaf3f787dfa772253cda4eaccb05a826509766b64e7cfc71b33c6c1abc03905f087f4dfe962dd61ffc3e588ea9dc79d3f90558afa03952d640f01d918c29f8586c08db76926713d379abda90313c1b67985abc79491cc1", 0xb8}, {&(0x7f0000001a00)}, {&(0x7f0000001a40)="c28f9e7235889762c4a33ac1e5a0", 0xe}, {&(0x7f0000001a80)="a2cf81ad20ebaf751cb2c3c37bffa6fa3139098c342110b828e798e6cee861fbe8a6d77f0275c8a27edbf09be0108292d9e41ad5a0b5ccd0267eba5098757e60acc746a65e33905da2b5", 0x4a}], 0x4}}, {{0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000001b40)="176500f994d83cbb5ba88114459d646cb512b371c2971a6510dd7664df8d43845f9e092748403acd719ea85a9ce742300480d28ef8ce9785d7f884499001b4eab41aa78a", 0x44}, {&(0x7f0000001bc0)="87e7ccb97d81eb7da19fb0", 0xb}, {0xfffffffffffffffe}, {&(0x7f0000001c00)="2309ad00984634febceebbb642aaa2c036bc6c1611bfad548e4b0c2f6aa966b849785e821ee32ebaa3a368040b4f65a1c64b56ef0fb549cb52570ae417b229e23680788675c2d15a4a66d8dbe357761b9a611f389084b35e1df72b8c4034ee6131e38da8eb138a8de8bfe1b260cf263e093dc649282562526a392b3c1044df6bbc17f46d5c0f1a1c96c58160000249d8f306815cb9", 0x95}, {&(0x7f0000001cc0)="292b957619fe753b5d8a2367c8f8728655e69a52ba87edc9b01af5f18cd8ed1b7e0ae3239e2e689887fa110fad09c636637107912e8d60abefe7b88e632fa8c8fb8649a7dbb384851444d6b43739819f386d0b9fe7b662cdcbc556bcd496e107681b3b2da37eba68506990aff70ac18078d229ec756e1e3eb3c18a9222ef8378fd63bf66c3d6c3eb0cf250fd75d7b0c25f68414a9ed8116426d978b3", 0x9c}, {&(0x7f0000001d80)="897794d95b0ca33e8a2803bd191e0e501d894c4a016bf7599b08725bc63340c779809afe3e9231d4738c4d9d8c534d8744be2677788bd661c5802e22e63794f00461e1c5396201087815492de4", 0x4d}, {&(0x7f0000001e00)="5baad64206b3a3abf33e35c3cefe8e4c35842e1f3ed94a1f0a089079b102c8d7983a9b601e0d7bc319751f70c42c0f421455d694bb3d6afc097b73dd70f032d21f5587961745afe7918020e1dff80f", 0x4f}], 0x7, &(0x7f0000001f00)=[@ip_retopts={{0x28, 0x0, 0x7, {[@timestamp={0x44, 0x18, 0x70, 0x0, 0x4, [0x8, 0x11d3216e, 0x3, 0xc09, 0x3559]}]}}}], 0x28}}, {{0x0, 0x0, &(0x7f0000002240)=[{&(0x7f0000001f40)="ba76c4f8eba4f4956f2e368a859baf0d88844f9138ee72b03308d79b6de7af0311905cab9bab9a5c1ae1c6df3acf426c70963c1e5ec1446402383e913b630ea8aec572f4bc3a9a0a8cf1bd398de0354d8c7da5b572f30d673e84673c5141e934f20b2ff964af4c00a1168fca56e121f28eaa3ddeb140ca664e94a7ca", 0x7c}, {&(0x7f0000001fc0)="c8a3cec46b383d992480a1b2b5bb5ab9dc86e273b7bc3890cfe8969c5c0a03955066b96b27c80a36b627f5906528a052fcdcf4fd03c75bd7b79d2bd43689f48b64a9054741bd059553843d5981c4a75c241aa3a8748d3def122c9b755f9bf20d4fcf24e5073c3cada881ebad428c74e8d2e3e23528365d679d3bf01302d0cef0c041c3207955e548", 0x88}, {&(0x7f0000002080)="3001f1bb6329144270d50898aebbccd2a03e1bb42810b8786b071f9b1e1a792e8e2143499a348925d53260d2e41bfb524ed27f2285a53a3b5c92db3258256c6a547abedee2c810fe2f03a3b4445c8a04c3e626034e538b403e2f4895e291e03be827a21418ad1ffffd80f7d987fdc2017ed015f5ba3356b484b692138d17f0c5288026f173c752cbd28185", 0x8b}, {&(0x7f0000002140)="4109edfcb7265112788f54ce7df079584869319b9b9c356ac3f30609b41b58bdfbe51b08deb377b3c15d231feafff0c8bbff0c9970ebf693ddbe4f742698bbe4ae2e149c87774b071759d96b438ccb3c48b0ca959d743c2c5ad7b45fb93f048541bc870d609af0abeb5901a5ec636daab291c6a7bd", 0x75}], 0x4}}], 0x6, 0x40800) bind$alg(r9, &(0x7f0000002400)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) getsockopt$IP_VS_SO_GET_TIMEOUT(r10, 0x0, 0x486, &(0x7f0000002480), &(0x7f00000024c0)=0xc) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r9, 0x84, 0x1a, &(0x7f0000002500)={0x0, 0xb1, "bfbd3b8660e4cff64054d1ea8b1096a4d45bb4d3e50cd49833c5a3e5c6ff7d69eff62c7ad221b0aeb296cca0e85dc901c31a0bd586c8509c4873e2f311fef4037f999c5856e6d66e755b85ee6409f08fa412d44edf08a88455727b7ed54694294e6603cc4969d05ef372d50115b62bc80928c36e5d64a1302c12dc5ccc37f49b4ba837f17b8d292c13aa6fdfafa9ffb2575316862affabfdabe5c94f43e2f0123cd5be4527d81a9fa986a14f13af0a6b0f"}, &(0x7f00000025c0)=0xb9) setsockopt$inet_sctp6_SCTP_MAXSEG(r9, 0x84, 0xd, &(0x7f0000002600)=@assoc_id=r11, 0x4) ioctl$sock_SIOCOUTQ(r8, 0x5411, &(0x7f0000002640)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000029c0)={0xffffffffffffffff, 0x0, 0xc6, 0x67, &(0x7f0000002680)="fdaa21bcc96444007cebdc9ee5697e2b40ff1ecf4c8d5da41c37f3c4d84897f531f1267274e3443ffddefb535bc567a433fcbae2b5cde8edcc560584e3f0e4dec006653422afdffda9ff44735d9bf54753cd603e598e861d2ca41e0480a771cd9d8996eccfb398c1adf11296dbff642565572ac30747c9f28cd60ae220383c92dc51a04285248dbf6448cb6df26e4eb97d73dec8cf4c7c5be15b851975a61dc181cc52333400d32ed3a8bf5457c96b4e9f5d2e03bba28e36b3da55350522b06919dc9994ca21", &(0x7f0000002780)=""/103, 0x8, 0x0, 0x96, 0xd5, &(0x7f0000002800)="5e650441015e005a0abec093bc47cea904d508a63182ae931d72e58911e4bb90c9662f447e5195f28ef793c58e97b277bea95a05db287a3c35466f321558979d633c7f19d671fc8eb406ac6ce8673f8e0218daf0466a48a2bab5efcb1ae79aaf1e6f6dd10b9f757ae1db68dd0cfb1dc9cffd8f8ec52da4617d1c855ce8c8257e014dcc25c3decf40d584fd88ee3a876926e4eaa5061b", &(0x7f00000028c0)="0954c4875d2c42f5127d835788b4b4bb827cc208c5000a2bc356659867fb2f31e839d4d48b31f02c3ef2caca37e44afaeaa8af3ce8afa28b67feef5e7420d80fb44091ed0dd9e264679252b09ef0c95b4e7be004057c011b40458bcdbd66a94189611d86a26b234b0cee9888cea0d44fbffb83dab01cbb1b4dc90d319103122f599dc93c409d402482ab4f3b5bd11596eabb4e5a70d82d66cb7be56f475abeb6fd54f867bfc3c4531a7692fa7674237326c1fc5b416b410c43ec291888c84fa53a31ac18e5122558515cbde158a61e61ffddc8e6b9", 0x4, 0x0, 0x7}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000002a40)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002b00)={{r1, 0xffffffffffffffff}, &(0x7f0000002a80), &(0x7f0000002ac0)=r4}, 0x20) ioctl$F2FS_IOC_MOVE_RANGE(r7, 0xc020f509, &(0x7f0000002c80)={r4, 0x100000002000000, 0x100, 0x4ab9}) bpf$PROG_LOAD(0x5, &(0x7f0000002f00)={0x1d, 0x16, &(0x7f0000002b40)=@raw=[@ldst={0x3, 0x2, 0x2, 0x9, 0x4, 0xffffffffffffffe0, 0x8}, @map_val={0x18, 0x9, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2a74}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r12}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r13}}, @exit], &(0x7f0000002c00)='syzkaller\x00', 0x0, 0x0, &(0x7f0000002c40), 0x41100, 0x11, '\x00', 0x0, @fallback=0x1, r14, 0x8, &(0x7f0000002cc0)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000002d00)={0x2, 0xa, 0x7, 0xfac0}, 0x10, r2, r3, 0x0, &(0x7f0000002ec0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x9, @void, @value}, 0x94) 1m5.09182964s ago: executing program 7 (id=903): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000000)=@acquire={0x134, 0x17, 0x301, 0x0, 0x0, {{@in=@broadcast}, @in6=@remote, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@mcast1}, {{@in=@multicast1, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0x134}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newlink={0x40, 0x10, 0x44b, 0x70bd28, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x54880}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @broadcast}]}, 0x40}}, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e23, 0x0, @empty}}, 0x0, 0x83, 0x6000, 0x0, 0xb3550aa4ba878396}, 0x9c) 1m3.435884305s ago: executing program 7 (id=909): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c0000001000010026bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="02210000000000001400030068737230000000000000ffff000000001800168014000180100006000008000004008000010001006a04493a"], 0x4c}, 0x1, 0x0, 0x0, 0x50}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x7, 0x7ff, 0x9, 0x745, 0xfffff32e}) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000200)={'ip6_vti0\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, 0x0, 0x73976972ba3f4b55, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400000038"], 0x14}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0x1a) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000)=0x18, 0x4) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0xffffffff}, 0x10, 0x800) setsockopt$inet_mreqsrc(r1, 0x0, 0x26, &(0x7f00000000c0)={@broadcast, @empty, @rand_addr=0x64010102}, 0xc) 1m2.954063378s ago: executing program 7 (id=910): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) unshare(0x2c060000) unshare(0x24020400) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000ec0)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r3) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="030300000000fcffffff0c00000008000300", @ANYRES32=r4, @ANYBLOB="cc6d7ba1983e581bfe21340d9553c806ba0e77c5ef45b117deb455703092d444cadb114870a64d9e123cb840744f38a4260b8307690d0040d6e555659a248e1c2c2297c210fcccf73a80377a570f"], 0x1c}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=0x1, r6, 0x5, 0x0, 0x0, @void, @value}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r3) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_IP_TARGET={0x8, 0x5, 0x0, 0x1, [@broadcast]}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=ANY=[@ANYBLOB="200000001100010029bd7000fedbdf25000000001f9c72"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x400000c0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 47.782984446s ago: executing program 37 (id=910): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) unshare(0x2c060000) unshare(0x24020400) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000ec0)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r3) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="030300000000fcffffff0c00000008000300", @ANYRES32=r4, @ANYBLOB="cc6d7ba1983e581bfe21340d9553c806ba0e77c5ef45b117deb455703092d444cadb114870a64d9e123cb840744f38a4260b8307690d0040d6e555659a248e1c2c2297c210fcccf73a80377a570f"], 0x1c}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=0x1, r6, 0x5, 0x0, 0x0, @void, @value}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r3) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_IP_TARGET={0x8, 0x5, 0x0, 0x1, [@broadcast]}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=ANY=[@ANYBLOB="200000001100010029bd7000fedbdf25000000001f9c72"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x400000c0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 8.869267024s ago: executing program 5 (id=1158): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x2, 0x0, @local, 0x2}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) r1 = socket(0x2, 0x3, 0xff) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000180)=0x7db7, 0x4) sendto$inet(r1, &(0x7f00000002c0)="b401fcc8cd1bb8b66f7ee68e052af9c34b7d7494", 0x14, 0x0, &(0x7f0000000040)={0x2, 0x0, @dev}, 0x10) recvfrom$l2tp6(r1, 0x0, 0x0, 0x2022, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x10000c00) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40050) socket$inet_smc(0x2b, 0x1, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r5 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r5, &(0x7f0000001dc0)=[{{&(0x7f00000003c0)=@alg, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000440)=""/120, 0x78}, {&(0x7f0000000600)=""/197, 0xc5}, {&(0x7f00000001c0)=""/16, 0x10}, {&(0x7f0000000700)=""/132, 0x84}], 0x4, &(0x7f00000007c0)=""/118, 0x76}, 0x6}, {{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000000840)=""/193, 0xc1}, {&(0x7f0000000940)=""/187, 0xbb}, {&(0x7f0000000500)=""/23, 0x17}, {&(0x7f0000000a00)=""/155, 0x9b}, {&(0x7f0000001e80)=""/4096, 0x1000}], 0x5, &(0x7f0000000580)=""/30, 0x1e}, 0x7}, {{&(0x7f0000001bc0)=@pptp, 0x80, &(0x7f0000001c80)=[{&(0x7f0000001c40)=""/48, 0x30}], 0x1, &(0x7f0000001cc0)=""/239, 0xef}, 0x9}], 0x3, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=ANY=[@ANYRESHEX=r7], 0x3c}, 0x1, 0x0, 0x0, 0x44000}, 0x20008080) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4000000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000010240000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r9], 0x40}}, 0x4000) 7.813074799s ago: executing program 9 (id=1164): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, 0x0, 0x4, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xa1, 0x14}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x2}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0xc011) setsockopt$inet6_tcp_buf(r1, 0x6, 0xe, &(0x7f00000001c0)="6b14a29179ce31d16d434b59915ca3d00677f0d5aad22c170e06f82fae99b2d20bbb5f3d", 0x24) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r1) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, r3, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xe}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40a1}, 0x800) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000340), 0x10) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x48, 0x1404, 0x1, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, &(0x7f00000004c0)={{0x5, 0x10000}, 0x100, '.\x00'}) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x68, 0x0, 0x7, 0x5, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x7}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x11c3}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x7}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xfffffffffffffffc}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_BYTES={0xc}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x40804) getsockname$packet(r1, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000007c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)=@ipmr_delroute={0x40, 0x19, 0x300, 0x70bd2d, 0x25dfdbfd, {0x80, 0x20, 0x0, 0x9, 0xfe, 0x3, 0xff, 0x2, 0x2400}, [@RTA_SRC={0x8, 0x2, @local}, @RTA_MULTIPATH={0xc, 0x9, {0xfff7, 0x4, 0xe9, r5}}, @RTA_PRIORITY={0x8, 0x6, 0xffffffff}, @RTA_DPORT={0x6, 0x1d, 0x4e24}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000005}, 0x40000) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000008c0)={'veth0_to_bridge\x00', @random="65c5243f7908"}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000900)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000940)) close(r0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000009c0)=0x0) sendmsg$nl_route(r1, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=@RTM_NEWNSID={0x34, 0x58, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@NETNSA_PID={0x8, 0x2, r6}, @NETNSA_NSID={0x8, 0x1, 0x4}, @NETNSA_FD={0x8, 0x3, r1}, @NETNSA_FD={0x8, 0x3, r1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8080}, 0x0) r7 = socket(0xb, 0x6, 0x10) setsockopt$RDS_CONG_MONITOR(r7, 0x114, 0x6, &(0x7f0000000ac0), 0x4) socket$nl_rdma(0x10, 0x3, 0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000b00)={'wg2\x00'}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(r8, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x50, r9, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010100}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xf}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}]}, 0x50}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000f40)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3ff, '\x00', r5, 0xffffffffffffffff, 0x5, 0x1, 0x1, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001040)={{r1, 0xffffffffffffffff}, &(0x7f0000000fc0), &(0x7f0000001000)='%pI4 \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x1b, &(0x7f0000000cc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_idx={0x18, 0x1, 0x5, 0x0, 0xf}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xa1}, @map_idx={0x18, 0xc, 0x5, 0x0, 0x3}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000dc0)='GPL\x00', 0x3, 0xc3, &(0x7f0000000e00)=""/195, 0x41000, 0x24, '\x00', 0x0, @fallback=0x28, r1, 0x8, &(0x7f0000000f00)={0x8, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, r0, 0x3, &(0x7f0000001080)=[r1, r0, r10, r11], &(0x7f00000010c0)=[{0x3, 0x3, 0xd, 0x3}, {0x4, 0x3, 0xa, 0xb}, {0x5, 0x3, 0xc, 0x2}], 0x10, 0xad5, @void, @value}, 0x94) 7.537557018s ago: executing program 9 (id=1166): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) unshare(0x42000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r1, @ANYBLOB="101000000000000008000d0005000000e4031680a40001800c00070000000000adffffff0c00", @ANYRES16=r1], 0x40c}}, 0x0) socket$rds(0x15, 0x5, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) close(0x3) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000000, @mcast2, 0x5}, 0x80) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r0, &(0x7f00000000c0)="8f2a0a65bd8c2b2b0304000e0580a7b6070d63e286a5cefe", 0x5ac) 5.630119241s ago: executing program 8 (id=1172): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000240)=""/214, 0xd6}], 0x1) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001e0001eb25bd70000000000001"], 0x114}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000071122e000000000095"], &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10002568, @void, @value}, 0x94) 5.081931566s ago: executing program 8 (id=1175): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$inet(0x2, 0x3, 0x6) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r5, @ANYBLOB="10007d80", @ANYRES32=r3, @ANYRESDEC=r2], 0x2c}, 0x1, 0x0, 0x0, 0x440c0}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB], 0x84}}, 0x0) 4.710263776s ago: executing program 6 (id=1176): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="500100001000130429bd700000000000acd8b438140000002001000065c9b84ea9cd3e8c59859b4c4608f10000000000000000000000000000001a0000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e000000100000000000000000000000000000000320000000100000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000800000000000000000008000000000081000000000000000000000000000000000000000000000005000000000000000400000000000000060000040000000000000000f9ffffff000008000000000000000000020004816800000000000000600012"], 0x150}, 0x1, 0x0, 0x0, 0x612fc0b6c779297b}, 0x0) 4.572724339s ago: executing program 8 (id=1177): unshare(0x62040200) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000c00000000000000000000000067bd047a549741f54d2b4e3500"/40], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b70300001b0000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b9af8ff00000000b5090500000000007baaf0ff00000000bda804000000000007080000f8ffffffbfa400000000000007000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000046000000760000006d00ffff00000000bf"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007673e16e000000000400028008000a00", @ANYRES32=r5, @ANYBLOB], 0x3c}}, 0x0) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000540), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1e001d00060000682eb26d40000000", @ANYRES32=r1, @ANYBLOB="0400"/20, @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="0200000003000000050000000c00"/28], 0x50) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1d, 0x12, &(0x7f0000000100)=@raw=[@map_val={0x18, 0x7, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @jmp={0x5, 0x1, 0x5, 0x5, 0x0, 0x40, 0xfffffffffffffffc}, @alu={0x7, 0x0, 0x8, 0xb, 0x8, 0x100, 0x10}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], &(0x7f0000000000)='GPL\x00', 0xa7a, 0xcf, &(0x7f0000000280)=""/207, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x5, 0x7, 0xc, 0x3ff}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000001c0)=[0xffffffffffffffff], &(0x7f0000000200)=[{0x4, 0x1, 0x9, 0xa}, {0x1, 0x3, 0xa, 0xb}], 0x10, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000500)='snd_soc_dapm_connected\x00', r8}, 0x18) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)=ANY=[@ANYRES8, @ANYRES16=r7, @ANYBLOB="0100e8ffffff00000000260000002000018008000100", @ANYRES32, @ANYBLOB='5\x00g1\x00\x00\x00'], 0x34}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\n\x00\x00', @ANYRES16=0x0, @ANYRES64, @ANYRESDEC, @ANYRESOCT, @ANYRES32, @ANYBLOB="bcf429bf5137e52920adc77c7aff9748b9781076892e51adca999fe6451dfdb689a3607ea8184a8827e38b6a8744d333c2bb803269060a600001c2197c28df5109e1991f03ddd0a140552dbdc464c09f02a313fcdc22dfce564dedc6968ae78ddc59442d84fe25c28a37f57011d06896e9c16867b788cf89686ede6b913c6cfe009d80b6d6e733d070e871352bef97835350da959c44", @ANYRES32, @ANYRES32], 0x48) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r10}, 0x10) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r11, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$bt_BT_SECURITY(r11, 0x112, 0x4, &(0x7f0000003000)={0x2}, 0x2) sendmsg$sock(r11, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) shutdown(r11, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x0, 0x18c, 0x203, 0x300, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {}, {}, {}, {0x16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) 4.420840273s ago: executing program 2 (id=1178): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, 0x0, 0x0) ioctl$SIOCNRDECOBS(0xffffffffffffffff, 0x89e2) sendmsg$TIPC_NL_KEY_SET(r1, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) socket$inet6(0xa, 0x3, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000001300)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$inet6_sctp(0xa, 0x801, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000005940)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)=ANY=[], 0x10) 4.186268726s ago: executing program 6 (id=1179): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000b00)=ANY=[@ANYBLOB="020300000b0000000000000000000000030006000000000002000000e000000100000000000000000200010000001c000000fb18000000000300050000000000020000007f0000010000000000001000010018"], 0x58}, 0x1, 0x7}, 0x0) 3.948549622s ago: executing program 5 (id=1180): bpf$MAP_CREATE(0x2000000000000000, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0, 0x54, 0x0, 0xfffffffe, 0x0, 0x0, @void, @value}, 0x28) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000000)=0x42, 0x4) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r3, &(0x7f00000004c0)='W', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0x8}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x3, 0x0, 0x0) sendmsg$inet(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYRESDEC=r2], 0x10}, 0x20000000) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bind$packet(r4, &(0x7f0000000080)={0x11, 0x800, r5, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) syz_emit_ethernet(0x6a, &(0x7f0000000280)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x2, 0x1, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x1, "a483f184f0334b90f7455389810a695fc32c36677d0b0816", "89a1a2e06cb164e9140c6f4df2c09fa2b0d4fac08c4d603fb6907c2a6aabe251"}}}}}}, 0x0) 3.520108277s ago: executing program 9 (id=1181): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00'}, 0x10) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x890b, &(0x7f0000000080)={0xffffc0fe, 'erspan0\x00', {}, 0x20}) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002900), r1) (async) syz_emit_ethernet(0x11a, &(0x7f00000002c0)={@local, @random="be9689ce9f88", @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@ipv4={0x800, @gre={{0x8, 0x4, 0x1, 0x1, 0x108, 0x66, 0x0, 0x5, 0x2f, 0x0, @rand_addr=0x64010102, @local, {[@ssrr={0x89, 0x7, 0x3d, [@multicast1]}, @generic={0x86, 0x2}]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0xa0, 0x3, [], "5bfdba13f9eed3c0ff44bc71a9e2c4833c7aafc095c5a285475a30cf24f65ee02f3e859515c2b72ad193b7ab02f26a747fde81ee682b83bf8d05f06d41062d6340f084cfa84de40f0165c6a7d29e3cf9a217ff7aa3903cc042f57890d25571010e91d7cb089866e92e0f003e830dbb99e896cd9b315124e23eaeeb2d319018f5a332d14d88a3d83fdba061d9e65c1de60c5058ca1c59ac07baa8407edfd16b0f"}, {0x1, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [0x5, 0x5d5]}, {0x8, 0x88be, 0x4, {{0x1, 0x1, 0x7, 0x2, 0x1, 0x0, 0x2, 0xc}, 0x1, {0x1}}}, {0x8, 0x22eb, 0x6, {{0x9, 0x2, 0x6, 0x1, 0x1, 0x1, 0x1}, 0x2, {0x1, 0x100, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1}}}, {0x8, 0x6558, 0x1}}}}}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f00000032c0)={0x0, 0x0, &(0x7f0000003280)={&(0x7f0000003200)={0x34, r2, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x100000000000000}}]}, 0x34}, 0x1, 0x0, 0x0, 0x880}, 0x40c4) 3.359196601s ago: executing program 6 (id=1182): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0xffffff1f, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x35288}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e24}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000080) 3.222446647s ago: executing program 2 (id=1183): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) (fail_nth: 24) 2.543910373s ago: executing program 2 (id=1184): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x9, 0x3, 0x8001, 0x20, @mcast1, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8000, 0x10, 0xedd, 0x6}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4d, 0x4d, 0x3, [@datasec={0xc, 0x4, 0x0, 0xf, 0x1, [{0x3, 0x7f, 0x8}, {0x2, 0x2, 0x180000}, {0x5, 0x6, 0x1}, {0x2, 0x9, 0x1}], "1d"}, @var={0x2, 0x0, 0x0, 0xe, 0x2, 0x1}]}, {0x0, [0x79]}}, &(0x7f0000000140)=""/151, 0x6b, 0x97, 0x0, 0x9, 0x10000, @value}, 0x28) (async) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4d, 0x4d, 0x3, [@datasec={0xc, 0x4, 0x0, 0xf, 0x1, [{0x3, 0x7f, 0x8}, {0x2, 0x2, 0x180000}, {0x5, 0x6, 0x1}, {0x2, 0x9, 0x1}], "1d"}, @var={0x2, 0x0, 0x0, 0xe, 0x2, 0x1}]}, {0x0, [0x79]}}, &(0x7f0000000140)=""/151, 0x6b, 0x97, 0x0, 0x9, 0x10000, @value}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x9, 0x1, 0x7ff, 0x824, 0x1, 0xe, '\x00', r0, r1, 0x1, 0x5, 0x5, 0x4, @void, @value, @void, @value}, 0x50) socket$inet6_icmp(0xa, 0x2, 0x3a) (async) socket$inet6_icmp(0xa, 0x2, 0x3a) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x7, '\x00', r0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0xb, '\x00', r0, r1, 0x2, 0x3, 0x3, 0x0, @void, @value, @void, @value}, 0x50) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0xb, '\x00', r0, r1, 0x2, 0x3, 0x3, 0x0, @void, @value, @void, @value}, 0x50) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f00000003c0), &(0x7f0000000400)=0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@ipv6_newrule={0x60, 0x20, 0x300, 0x70bd2d, 0x25dfdbff, {0xa, 0x10, 0x14, 0x81, 0x9, 0x0, 0x0, 0x7, 0x14}, [@FRA_DST={0x14, 0x1, @mcast1}, @FRA_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}}, @FRA_DST={0x14, 0x1, @loopback}, @FIB_RULE_POLICY=@FRA_FWMASK={0x8, 0x10, 0x6}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x20000040) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000580)={0x1d, r0, 0x0, {0x0, 0x0, 0x3}, 0xfe}, 0x18, &(0x7f00000006c0)={&(0x7f00000005c0)="d8049bdf39c2b600f892b0cf52a69852510faf9c0efc50bcdd043537e4eb76bf87c91770f5cb54d4100e3968e89f8c2b9bc8e9fa1e0aeeaa706e8467f8a622d7d32f2ec6dc1bb1f06ae4589ee0d410110d45ff1ccf29dbe105fd3879042e35e9138a753618d4555f62f18ec68440bdfcccd6ceff4f0b3e8fc4ba930be82aac3a64df21880a2c44ac3b25e89b861e9356bc148aec26618026fab2ae0b71a8570f2c121917038443032e0e778d6b138eb05ef3629d571be733fa8b03ef90adc03190cb2b2aebb78c98d502f7c0808b6d80", 0xd0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) socket$inet6_udplite(0xa, 0x2, 0x88) (async) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000740)={@dev={0xfe, 0x80, '\x00', 0x39}, 0x80, r0}) socketpair(0x26, 0x4, 0x6, &(0x7f0000000780)) (async) socketpair(0x26, 0x4, 0x6, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) bind$can_j1939(r7, &(0x7f00000007c0)={0x1d, r0, 0x0, {0x0, 0x94ff33526c7fdbe7}, 0xff}, 0x18) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), r8) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r7, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x54, r9, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x4}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0xf6}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x3}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x50}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x3}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x6}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0xde}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0xff}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$pppoe(r7, &(0x7f0000000980)={0x18, 0x0, {0x2, @local, 'bond_slave_1\x00'}}, 0x1e) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x6, 0x1, 0x2, 0x20, r2, 0x100, '\x00', r0, r1, 0x2, 0x5, 0x1, 0x3, @void, @value, @void, @value}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x6, 0x1, 0x2, 0x20, r2, 0x100, '\x00', r0, r1, 0x2, 0x5, 0x1, 0x3, @void, @value, @void, @value}, 0x50) pwritev(r10, &(0x7f0000000b80)=[{&(0x7f0000000a40)="4b8e959469aabf569241e5b070b3edb65abf", 0x12}, {&(0x7f0000000a80)="65298c28763b976412cfafb6340a0bad2d6f5612ed51f4214dfb7bce6bba1f9dc5a28a7abf2e7ff5ee5c6cab356462abf7678428c5173c9b0845a85e2e1983034654d0abd09de7d60b507108a50ef24502d37dcc69c6e82723fa4cfbab04ddfcd20570dad7945ab1acba7f7d0bd522b84a6c4231c0ad5d3a669594209973f7f64c41dc258822ef8b1a3e22b5cb764b86d55f6ff388ba2914bdd1b07b4e77e1901e94e0fe399e885aad0b6d45c867765e8d01ed8917d83453389e07fed3369135c9f1e5da31b1145a7739aa2426e1cf4e", 0xd0}], 0x2, 0x2, 0xce) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r8, 0x80089419, &(0x7f0000000bc0)) socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f0000000c00)={0x0, 0x3, 0x8}, &(0x7f0000000c40)=0x8) (async) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f0000000c00)={0x0, 0x3, 0x8}, &(0x7f0000000c40)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r8, 0x84, 0x10, &(0x7f0000000c80)=@sack_info={r11, 0xfffff801, 0x6}, &(0x7f0000000cc0)=0xc) r12 = getuid() ioctl$SIOCAX25GETUID(r7, 0x89e0, &(0x7f0000000d00)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, r12}) (async) ioctl$SIOCAX25GETUID(r7, 0x89e0, &(0x7f0000000d00)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, r12}) socket$packet(0x11, 0x3, 0x300) sendmsg$IPSET_CMD_ADD(r10, &(0x7f0000000f00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x110, 0x9, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x9}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0xfffffffffffffffe}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_DATA={0x48, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xca44}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x5}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x40}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}]}, @IPSET_ATTR_ADT={0x7c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5f}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x58}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x2}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x8, 0x1a, '\\\'$\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x3}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x7}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}]}, 0x110}, 0x1, 0x0, 0x0, 0x1}, 0x4010) (async) sendmsg$IPSET_CMD_ADD(r10, &(0x7f0000000f00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x110, 0x9, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x9}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0xfffffffffffffffe}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_DATA={0x48, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xca44}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x5}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x40}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}]}, @IPSET_ATTR_ADT={0x7c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5f}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x58}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x2}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x8, 0x1a, '\\\'$\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x3}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x7}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}]}, 0x110}, 0x1, 0x0, 0x0, 0x1}, 0x4010) connect$rose(r7, &(0x7f0000000f40)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @null, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) 2.405186547s ago: executing program 5 (id=1185): socket$alg(0x26, 0x5, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x884c}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x308, 0x30, 0x300, 0x71bd2d, 0x25dfdbff, {}, [{0x2f4, 0x1, [@m_gact={0x24c, 0x110, 0x0, 0x0, {{0x9}, {0x4}, {0x21d, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_tunnel_key={0xa4, 0x1e, 0x0, 0x0, {{0xf}, {0x68, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x6, 0x7, 0x5, 0x7, 0x6649}, 0x2}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x9, 0x400, 0x1, 0x8, 0x3}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @mcast1}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e22}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0xd, 0x6, "9b08c654d5cc520414"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x308}, 0x1, 0x0, 0x0, 0x44001}, 0x20000800) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 2.169932526s ago: executing program 6 (id=1186): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="e4000000"], 0xe4}], 0x1}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, 0x0, 0x0) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @local}, 0xc) r5 = accept$netrom(0xffffffffffffffff, &(0x7f0000000140)={{}, [@rose, @netrom, @null, @bcast, @null, @bcast, @null, @default]}, &(0x7f0000000000)=0x48) ioctl$SIOCNRDECOBS(r5, 0x89e2) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="fa00000000000000000003000000240001800d0001007564703a73797a32000000000d000100c9a520f673737a3200000000"], 0x38}, 0x1, 0x0, 0x0, 0x48000}, 0x0) ppoll(&(0x7f0000000340)=[{r0, 0x3000}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) socket$inet6(0xa, 0x3, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000001300)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$inet6_sctp(0xa, 0x801, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)=ANY=[@ANYRES32=r6, @ANYRES32, @ANYRES64=r6], 0x10) 2.121886468s ago: executing program 9 (id=1187): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="500100001000130429bd700000000000acd8b438140000002001000065c9b84ea9cd3e8c59859b4c4608f10000000000000000000000000000001a0000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e000000100000000000000000000000000000000320000000100000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000800000000000000000008000000000081000000000000000000000000000000000000000000000005000000000000000400000000000000060000040000000000000000f9ffffff000008000000000000000000020004816800000000000000600012"], 0x150}, 0x1, 0x0, 0x0, 0x612fc0b6c779297b}, 0x0) 2.035662193s ago: executing program 2 (id=1188): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r3) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newqdisc={0x190, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x160, 0x2, [@TCA_GRED_MAX_P={0x8}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_LIMIT={0x8, 0x5, 0x10001}, @TCA_GRED_DPS={0x10, 0x3, {0x3, 0xb, 0x1, 0x4}}, @TCA_GRED_PARMS={0x38, 0x1, {0xa67, 0x7, 0x3, 0xd, 0x0, 0x0, 0x2e, 0x6, 0x58d, 0x4614, 0x1d, 0x18, 0x6, 0x8, 0x80a, 0x7}}]}}]}, 0x190}}, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r6, &(0x7f0000001e00)=[{&(0x7f0000000000)=@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000001ec0)="b9", 0x1}], 0x1, 0x0, 0x0, 0x24008020}], 0x1, 0x24000010) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000001580)={0x0, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x2, 0x8}, &(0x7f0000000380)=0x90) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd700000000000140000000c00018008000100", @ANYRES32=r5, @ANYBLOB="080600000400"/16], 0x30}, 0x1, 0x0, 0x0, 0x2000c804}, 0x0) 1.951302034s ago: executing program 5 (id=1189): syz_80211_join_ibss(0x0, 0x0, 0x0, 0x2) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001180)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x22, 0x1, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xd6ce}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xa4}}, 0x1000000000000000) 1.650105268s ago: executing program 9 (id=1190): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x9) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000143f128009000100626f6e64000000000400028008000a00", @ANYRES32=r2, @ANYBLOB="22bab952fab3277da701ee04e68d57eed7bed89472df1647e072766a40ca9ddb005e700cc08123f4718eb3088ab53d05335dcc6b0624aab7162771f7acea6286fda3594ac1b60384570a1df9e9f0ccdd4fe156f01155a721cf9a727e4f5ca15c6252e51304a5bd22793737df607c66e183f883a12533c8ad12b348b0f9e375b6b646353617275f9c1f5361cda71d182fdac2e1463852e417d97e00c526cacaf90cf85c922355ebc29a1ea9ec28adbd6729a7c4e9f4a957791b412f45cf7d655dce9ee777855c67d5fa9473246d3b26f1b123ad7e1ff72d7d06c8cd94bae0c35a1962141740dd3648dc22fad5e6474414"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 1.507345126s ago: executing program 5 (id=1191): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc///\x00\x82q\xee\x00!\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) sendmmsg$inet6(r0, &(0x7f0000001800)=[{{&(0x7f00000000c0)={0xa, 0x4e22, 0xfffd, @local, 0x9}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000600)="11", 0x1}], 0x1, 0x0, 0x0, 0xf5}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="d88e06706564c804d033b6b51f935ab12eb4e3b2e6955aea6fa94f44f6824623e801370212a236dc0ec0a6", 0x2b}], 0x1, &(0x7f0000001940)=[@tclass={{0x14}}, @dstopts_2292={{0x118, 0x29, 0x4, {0x3c, 0x1f, '\x00', [@hao={0xc9, 0x10, @local}, @enc_lim={0x4, 0x1, 0x75}, @generic={0x6, 0xa3, "bf41ea6848bf4da1d55df7a1fd35d6726102562b48cc28191b7dbcf8d503a1a65d477465f828ea1a0b8af94a82b220beba00c422572e8ed2889a497ac0378dcd35cb3db8d677218c4d9b51c4c2ccac60a3246823cef9374875954f077e4dfbc7a9f39a6c5dfdc5b9ffb0a2a2e2777ac7bed2fdd2af5e377f7f5651fe19432cd57afde2c870fa62322841e47b1eefdfeaae644d16f2cd5a29165c2d02a4fd4396395606"}, @jumbo={0xc2, 0x4, 0x4}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x28, {0x3, 0x8, 0xf9, 0x7fff, [0x7, 0x40, 0x5, 0x6]}}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x10}}, @rthdr={{0x78, 0x29, 0x39, {0x3b, 0xc, 0x1, 0x3, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x2d}, @local, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, @mcast1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x21, 0x0, '\x00', [@ra={0x5, 0x2, 0x5}]}}}], 0x1f8}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000003c0)="2f4f66d1c192fbeae9379e7435df0e17e9f1445494791d9ae697150e6b1be5f9953baa1261395b1239e6", 0x2a}], 0x1}}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)="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", 0xfb}], 0x1, &(0x7f0000000580)}}, {{&(0x7f00000005c0)={0xa, 0x4e24, 0x2, @local, 0x9}, 0x1c, &(0x7f0000001780)=[{&(0x7f0000000640)="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", 0x1000}, {&(0x7f0000001640)="59d92bfcbf446bb2f89f6da68d03e2e33d5138162a1d570539f053ec6ffe924de24bbe0aec5091961704505b2e18b3d865660057d3ae20e3f2322a547b974262bcc5d506d65a071befccf910173d00170d37f2f5a05739e3c418e1ffb193cebd1eebf0cb0aef7f62d0078fb69bc343956de8a703b9dd0153978f7bbd6498", 0x7e}, {&(0x7f00000016c0)="e35dd7db35baed2f53be66bad224ec6e7da1c94c327d7cd9cfb0e0d8fb0420c77562b0ed8c2e3dff3052ec9a5c66e59cc4e4395e77c02e", 0x37}, {&(0x7f0000001700)="88edf276d8de9977d4e48c99a9c503e47a3cf2adec068b31a3cd628b9667ab6f9726f71d8d67c4787a32392dc91056764bbd45b1c4cb91bd1125ab72deff282ce6f7439aa839029b884da276d32465c4", 0x50}], 0x4, &(0x7f00000017c0)=[@rthdr={{0x28, 0x29, 0x39, {0x3b, 0x2, 0x2, 0xf, 0x0, [@mcast1]}}}], 0x28}}], 0x5, 0x2004c040) 1.180826402s ago: executing program 8 (id=1192): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB="8400000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000005c0012800b00010067726574617000154c000280050016000200000006000e000100000008000700ac1414aa080007007f00000106000e000000000008000100", @ANYRES32, @ANYBLOB="050016000100000008001500acb8060006000200", @ANYRES32], 0x84}, 0x1, 0x0, 0x0, 0x813}, 0x0) 1.118088772s ago: executing program 6 (id=1193): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x80805, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet(0x2, 0x4000000805, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) socket(0xa, 0x3, 0x3a) socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988002000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) 905.824372ms ago: executing program 9 (id=1194): unshare(0x62040200) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000c00000000000000000000000067bd047a549741f54d2b4e3500"/40], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b70300001b0000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b9af8ff00000000b5090500000000007baaf0ff00000000bda804000000000007080000f8ffffffbfa4000000000000070000000800ffffb7020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000046000000760000006d00ffff00000000bf"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007673e16e000000000400028008000a00", @ANYRES32=r5, @ANYBLOB], 0x3c}}, 0x0) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000540), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1e001d00060000682eb26d40000000", @ANYRES32=r1, @ANYBLOB="0400"/20, @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="0200000003000000050000000c00"/28], 0x50) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1d, 0x12, &(0x7f0000000100)=@raw=[@map_val={0x18, 0x7, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @jmp={0x5, 0x1, 0x5, 0x5, 0x0, 0x40, 0xfffffffffffffffc}, @alu={0x7, 0x0, 0x8, 0xb, 0x8, 0x100, 0x10}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], &(0x7f0000000000)='GPL\x00', 0xa7a, 0xcf, &(0x7f0000000280)=""/207, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x5, 0x7, 0xc, 0x3ff}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000001c0)=[0xffffffffffffffff], &(0x7f0000000200)=[{0x4, 0x1, 0x9, 0xa}, {0x1, 0x3, 0xa, 0xb}], 0x10, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000500)='snd_soc_dapm_connected\x00', r8}, 0x18) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)=ANY=[@ANYRES8, @ANYRES16=r7, @ANYBLOB="0100e8ffffff00000000260000002000018008000100", @ANYRES32, @ANYBLOB='5\x00g1\x00\x00\x00'], 0x34}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\n\x00\x00', @ANYRES16=0x0, @ANYRES64, @ANYRESDEC, @ANYRESOCT, @ANYRES32, @ANYBLOB="bcf429bf5137e52920adc77c7aff9748b9781076892e51adca999fe6451dfdb689a3607ea8184a8827e38b6a8744d333c2bb803269060a600001c2197c28df5109e1991f03ddd0a140552dbdc464c09f02a313fcdc22dfce564dedc6968ae78ddc59442d84fe25c28a37f57011d06896e9c16867b788cf89686ede6b913c6cfe009d80b6d6e733d070e871352bef97835350da959c44", @ANYRES32, @ANYRES32], 0x48) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r10}, 0x10) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r11, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$bt_BT_SECURITY(r11, 0x112, 0x4, &(0x7f0000003000)={0x2}, 0x2) sendmsg$sock(r11, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) shutdown(r11, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x0, 0x18c, 0x203, 0x300, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {}, {}, {}, {0x16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) 889.762697ms ago: executing program 5 (id=1195): bpf$MAP_CREATE(0x2000000000000000, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0, 0x54, 0x0, 0xfffffffe, 0x0, 0x0, @void, @value}, 0x28) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000000)=0x42, 0x4) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r3, &(0x7f00000004c0)='W', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0x8}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x3, 0x0, 0x0) sendmsg$inet(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYRESDEC=r2], 0x10}, 0x20000000) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'syz_tun\x00'}) syz_emit_ethernet(0x6a, &(0x7f0000000280)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x2, 0x1, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x1, "a483f184f0334b90f7455389810a695fc32c36677d0b0816", "89a1a2e06cb164e9140c6f4df2c09fa2b0d4fac08c4d603fb6907c2a6aabe251"}}}}}}, 0x0) 830.331307ms ago: executing program 2 (id=1196): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="500100001000130429bd700000000000acd8b438140000002001000065c9b84ea9cd3e8c59859b4c4608f1000000000000000000000000000000400000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e000000100000000000000000000000000000000320000000100000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000800000000000000000008000000000081000000000000000000000000000000000000000000000005000000000000000400000000000000060000040000000000000000f9ffffff000008000000000000000000020004816800000000000000600012"], 0x150}, 0x1, 0x0, 0x0, 0x612fc0b6c779297b}, 0x0) 665.731877ms ago: executing program 6 (id=1197): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f00000001c0)={r4, 0x9}, 0x8) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000821bd5000fedbdf2568158eba"], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x7, 0x0, 0x25dfdbfd, {{0x8}, {@void, @val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000731136000000000016000000000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x4, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x440c0}, 0x20000850) 565.54488ms ago: executing program 2 (id=1198): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB='6\x00'/12, @ANYRES32, @ANYBLOB="addaced30a01a7fe46005a6cdee853229216446b411c8d9e63e3d3cdab8325cdc8faa5cb28989108c94e95a12489c73629f24aaef11a6cafca29547a05f362658b4964f4c208f68ab3815a3a918db58d9fdb302c7ff2"], 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xffe0}}}, 0x24}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000008000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb7000000000000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000600), 0x8) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000640)=0x40, 0x1) r2 = socket$alg(0x26, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004084}, 0x10) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="02180000100000000000000000000000030005000000000002000010e000000100000000000000000800120000000000000000000000000010000000000000000000000000000000ac1414bb000000000000000000000000fc010000000000000000000000000000030006000000000002"], 0x80}}, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000004c0)}}], 0x90}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xd3, &(0x7f0000000340)=""/211, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000030000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704", @ANYBLOB="4caa6dd072"], 0xfdef) 510.28074ms ago: executing program 8 (id=1199): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000000, @mcast2, 0x5}, 0x80) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000500)=ANY=[@ANYBLOB='-', @ANYRESDEC], 0x44) write(r0, &(0x7f00000000c0)="8f2a0a65bd8c2b2b0304000e0580a7b6070d63e286a5cefe", 0x5ac) 0s ago: executing program 8 (id=1200): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x8, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xb, 0x8, 0x4, 0x6, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000080000850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x2, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB="0203094771e9670c000002004f800000"], 0x10}, 0x1, 0x7}, 0x0) kernel console output (not intermixed with test programs): EEMPT(full) [ 175.518361][ T7905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 175.518373][ T7905] Call Trace: [ 175.518382][ T7905] [ 175.518390][ T7905] dump_stack_lvl+0x241/0x360 [ 175.518430][ T7905] ? __pfx_dump_stack_lvl+0x10/0x10 [ 175.518459][ T7905] ? __pfx__printk+0x10/0x10 [ 175.518486][ T7905] ? __pfx___might_resched+0x10/0x10 [ 175.518535][ T7905] should_fail_ex+0x424/0x570 [ 175.518581][ T7905] should_failslab+0xac/0x100 [ 175.518604][ T7905] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 175.518627][ T7905] ? __alloc_skb+0x1c2/0x480 [ 175.518666][ T7905] __alloc_skb+0x1c2/0x480 [ 175.518693][ T7905] ? __pfx___alloc_skb+0x10/0x10 [ 175.518716][ T7905] ? netlink_autobind+0xd6/0x2f0 [ 175.518734][ T7905] ? netlink_autobind+0x2b0/0x2f0 [ 175.518757][ T7905] netlink_sendmsg+0x638/0xcd0 [ 175.518800][ T7905] ? __pfx_netlink_sendmsg+0x10/0x10 [ 175.518835][ T7905] ? aa_sock_msg_perm+0x91/0x160 [ 175.518865][ T7905] ? __pfx_netlink_sendmsg+0x10/0x10 [ 175.518893][ T7905] __sock_sendmsg+0x221/0x270 [ 175.518923][ T7905] ____sys_sendmsg+0x523/0x860 [ 175.518955][ T7905] ? __pfx_____sys_sendmsg+0x10/0x10 [ 175.518975][ T7905] ? __fget_files+0x2a/0x420 [ 175.518997][ T7905] ? __fget_files+0x2a/0x420 [ 175.519022][ T7905] __sys_sendmsg+0x271/0x360 [ 175.519051][ T7905] ? __pfx___sys_sendmsg+0x10/0x10 [ 175.519129][ T7905] ? do_syscall_64+0xb6/0x210 [ 175.519151][ T7905] do_syscall_64+0xf3/0x210 [ 175.519171][ T7905] ? clear_bhb_loop+0x45/0xa0 [ 175.519194][ T7905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.519212][ T7905] RIP: 0033:0x7fc63ff8e169 [ 175.519230][ T7905] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.519246][ T7905] RSP: 002b:00007fc640def038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 175.519267][ T7905] RAX: ffffffffffffffda RBX: 00007fc6401b5fa0 RCX: 00007fc63ff8e169 [ 175.519290][ T7905] RDX: 00000000000040c4 RSI: 00002000000032c0 RDI: 0000000000000006 [ 175.519302][ T7905] RBP: 00007fc640def090 R08: 0000000000000000 R09: 0000000000000000 [ 175.519314][ T7905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.519326][ T7905] R13: 0000000000000000 R14: 00007fc6401b5fa0 R15: 00007fff9bb1aeb8 [ 175.519357][ T7905] [ 176.189011][ T7915] netlink: 20 bytes leftover after parsing attributes in process `syz.1.563'. [ 176.407502][ T7920] netlink: 'syz.5.565': attribute type 23 has an invalid length. [ 176.556315][ T7926] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 176.670994][ T7924] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 176.983469][ T7934] netlink: 4 bytes leftover after parsing attributes in process `syz.4.570'. [ 177.233332][ T7943] netlink: 'syz.5.572': attribute type 1 has an invalid length. [ 177.440711][ T7949] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 177.542315][ T7943] 8021q: adding VLAN 0 to HW filter on device bond1 [ 177.561342][ T7949] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 177.682839][ T7956] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 178.161117][ T7962] netlink: 8 bytes leftover after parsing attributes in process `syz.4.577'. [ 178.254237][ T7962] netlink: 24 bytes leftover after parsing attributes in process `syz.4.577'. [ 178.499978][ T7962] geneve2: entered promiscuous mode [ 178.516733][ T7962] geneve2: entered allmulticast mode [ 178.787014][ T7969] netlink: 'syz.0.580': attribute type 1 has an invalid length. [ 178.884788][ T7973] netlink: 'syz.5.582': attribute type 23 has an invalid length. [ 179.218087][ T7975] 8021q: adding VLAN 0 to HW filter on device bond14 [ 179.229870][ T7975] bond13: (slave bond14): making interface the new active one [ 179.240319][ T7975] bond13: (slave bond14): Enslaving as an active interface with an up link [ 179.351662][ T7981] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 179.427036][ T7989] netlink: 8 bytes leftover after parsing attributes in process `syz.1.584'. [ 179.899844][ T8000] netlink: 56 bytes leftover after parsing attributes in process `syz.1.587'. [ 180.453045][ T55] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 180.469403][ T55] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 180.479173][ T55] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 180.494015][ T55] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 180.532365][ T55] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 181.292098][ T8033] netlink: 8 bytes leftover after parsing attributes in process `syz.1.597'. [ 181.489850][ T8036] netlink: 12 bytes leftover after parsing attributes in process `syz.0.598'. [ 181.593311][ T8036] vlan2: entered promiscuous mode [ 181.603446][ T8036] hsr0: entered promiscuous mode [ 181.793982][ T8043] netlink: 788 bytes leftover after parsing attributes in process `syz.1.601'. [ 182.057060][ T8045] bond0: entered promiscuous mode [ 182.063335][ T8045] bond_slave_0: entered promiscuous mode [ 182.072285][ T8045] bond_slave_1: entered promiscuous mode [ 182.081645][ T8045] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 182.092146][ T8045] bond0: left promiscuous mode [ 182.099466][ T8045] bond_slave_0: left promiscuous mode [ 182.107655][ T8045] bond_slave_1: left promiscuous mode [ 182.181021][ T8047] netlink: 20 bytes leftover after parsing attributes in process `syz.5.603'. [ 182.265727][ T8049] veth0_to_bridge: entered promiscuous mode [ 182.464049][ T8048] veth0_to_bridge: left promiscuous mode [ 182.606669][ T55] Bluetooth: hci6: command tx timeout [ 182.943203][ T8011] chnl_net:caif_netlink_parms(): no params data found [ 183.042520][ T8069] netlink: 4 bytes leftover after parsing attributes in process `syz.0.612'. [ 183.072602][ T8065] netlink: 20 bytes leftover after parsing attributes in process `syz.5.610'. [ 183.873387][ T8093] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 183.888186][ T8093] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 183.936504][ T8011] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.944255][ T8011] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.992316][ T8011] bridge_slave_0: entered allmulticast mode [ 184.029442][ T8011] bridge_slave_0: entered promiscuous mode [ 184.155418][ T8011] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.182213][ T8011] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.223047][ T8011] bridge_slave_1: entered allmulticast mode [ 184.249775][ T8011] bridge_slave_1: entered promiscuous mode [ 184.316369][ T8098] vlan2: entered promiscuous mode [ 184.687704][ T5842] Bluetooth: hci6: command tx timeout [ 184.714727][ T8011] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.959860][ T8011] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.329722][ T8011] team0: Port device team_slave_0 added [ 185.401204][ T8011] team0: Port device team_slave_1 added [ 185.845493][ T8011] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 185.853078][ T8011] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.913839][ T8011] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 186.062199][ T8011] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 186.090182][ T8128] netlink: 4 bytes leftover after parsing attributes in process `syz.4.628'. [ 186.096910][ T8011] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.211218][ T8011] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 186.563219][ T8011] hsr_slave_0: entered promiscuous mode [ 186.586981][ T8011] hsr_slave_1: entered promiscuous mode [ 186.599279][ T8011] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 186.609073][ T8011] Cannot create hsr debugfs directory [ 186.765614][ T5842] Bluetooth: hci6: command 0x040f tx timeout [ 187.203963][ T8150] netlink: 52 bytes leftover after parsing attributes in process `syz.4.636'. [ 187.221942][ T8150] netlink: 14 bytes leftover after parsing attributes in process `syz.4.636'. [ 187.262248][ T8150] netlink: 52 bytes leftover after parsing attributes in process `syz.4.636'. [ 187.299517][ T8150] netlink: 14 bytes leftover after parsing attributes in process `syz.4.636'. [ 187.355274][ T8150] netlink: 52 bytes leftover after parsing attributes in process `syz.4.636'. [ 187.703804][ T8160] syz.5.639 (8160) used obsolete PPPIOCDETACH ioctl [ 187.822438][ T8163] netlink: 48 bytes leftover after parsing attributes in process `syz.5.639'. [ 187.842343][ T8163] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 187.873413][ T8161] FAULT_INJECTION: forcing a failure. [ 187.873413][ T8161] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 187.890813][ T8161] CPU: 0 UID: 0 PID: 8161 Comm: syz.4.641 Not tainted 6.15.0-rc2-syzkaller-00657-g0e0a7e3719bc #0 PREEMPT(full) [ 187.890843][ T8161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 187.890856][ T8161] Call Trace: [ 187.890864][ T8161] [ 187.890872][ T8161] dump_stack_lvl+0x241/0x360 [ 187.890918][ T8161] ? __pfx_dump_stack_lvl+0x10/0x10 [ 187.890947][ T8161] ? __pfx__printk+0x10/0x10 [ 187.890988][ T8161] should_fail_ex+0x424/0x570 [ 187.891018][ T8161] _copy_from_iter+0x211/0x1c70 [ 187.891064][ T8161] ? __pfx__copy_from_iter+0x10/0x10 [ 187.891101][ T8161] ? skb_put+0x114/0x1f0 [ 187.891126][ T8161] hci_sock_sendmsg+0x4f1/0x11f0 [ 187.891163][ T8161] ? __pfx_aa_sk_perm+0x10/0x10 [ 187.891186][ T8161] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 187.891215][ T8161] ? __pfx_aa_file_perm+0x10/0x10 [ 187.891241][ T8161] ? aa_sock_msg_perm+0x91/0x160 [ 187.891273][ T8161] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 187.891300][ T8161] __sock_sendmsg+0x221/0x270 [ 187.891333][ T8161] sock_write_iter+0x2d9/0x3f0 [ 187.891364][ T8161] ? __pfx_sock_write_iter+0x10/0x10 [ 187.891403][ T8161] ? bpf_lsm_file_permission+0x9/0x10 [ 187.891456][ T8161] vfs_write+0x70f/0xd10 [ 187.891493][ T8161] ? __pfx_sock_write_iter+0x10/0x10 [ 187.891523][ T8161] ? __pfx_vfs_write+0x10/0x10 [ 187.891554][ T8161] ? __fget_files+0x2a/0x420 [ 187.891576][ T8161] ? __fget_files+0x2a/0x420 [ 187.891606][ T8161] ksys_write+0x19d/0x2d0 [ 187.891637][ T8161] ? __pfx_ksys_write+0x10/0x10 [ 187.891670][ T8161] ? do_syscall_64+0xb6/0x210 [ 187.891695][ T8161] do_syscall_64+0xf3/0x210 [ 187.891716][ T8161] ? clear_bhb_loop+0x45/0xa0 [ 187.891740][ T8161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.891760][ T8161] RIP: 0033:0x7f473198e169 [ 187.891798][ T8161] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.891814][ T8161] RSP: 002b:00007f4732780038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 187.891839][ T8161] RAX: ffffffffffffffda RBX: 00007f4731bb5fa0 RCX: 00007f473198e169 [ 187.891854][ T8161] RDX: 0000000000000006 RSI: 0000200000000080 RDI: 000000000000000d [ 187.891867][ T8161] RBP: 00007f4732780090 R08: 0000000000000000 R09: 0000000000000000 [ 187.891879][ T8161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.891890][ T8161] R13: 0000000000000000 R14: 00007f4731bb5fa0 R15: 00007fffe1e619d8 [ 187.891920][ T8161] [ 188.259556][ T8011] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 188.302812][ T8011] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 188.411902][ T8011] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 188.527900][ T8011] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 188.847114][ T55] Bluetooth: hci6: command 0x040f tx timeout [ 188.911725][ T8178] netlink: 4 bytes leftover after parsing attributes in process `syz.4.646'. [ 189.034288][ T8179] vlan2: entered promiscuous mode [ 189.562094][ T8197] FAULT_INJECTION: forcing a failure. [ 189.562094][ T8197] name failslab, interval 1, probability 0, space 0, times 0 [ 189.594136][ T8011] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.636353][ T8197] CPU: 0 UID: 0 PID: 8197 Comm: syz.0.650 Not tainted 6.15.0-rc2-syzkaller-00657-g0e0a7e3719bc #0 PREEMPT(full) [ 189.636385][ T8197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 189.636398][ T8197] Call Trace: [ 189.636407][ T8197] [ 189.636416][ T8197] dump_stack_lvl+0x241/0x360 [ 189.636454][ T8197] ? __pfx_dump_stack_lvl+0x10/0x10 [ 189.636483][ T8197] ? __pfx__printk+0x10/0x10 [ 189.636518][ T8197] ? __pfx___might_resched+0x10/0x10 [ 189.636557][ T8197] should_fail_ex+0x424/0x570 [ 189.636587][ T8197] should_failslab+0xac/0x100 [ 189.636611][ T8197] __kmalloc_noprof+0xdf/0x4d0 [ 189.636631][ T8197] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 189.636656][ T8197] ? apparmor_capable+0x13b/0x1b0 [ 189.636692][ T8197] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 189.636727][ T8197] genl_rcv_msg+0x819/0xf00 [ 189.636762][ T8197] ? __pfx_genl_rcv_msg+0x10/0x10 [ 189.636783][ T8197] ? stack_trace_save+0x11a/0x1d0 [ 189.636811][ T8197] ? __pfx_stack_trace_save+0x10/0x10 [ 189.636837][ T8197] ? stack_depot_save_flags+0x44/0x940 [ 189.636859][ T8197] ? __pfx_stack_trace_save+0x1/0x10 [ 189.636898][ T8197] ? __lock_acquire+0xad5/0xd80 [ 189.636929][ T8197] ? __pfx_ieee802154_add_iface+0x10/0x10 [ 189.636973][ T8197] netlink_rcv_skb+0x208/0x480 [ 189.637006][ T8197] ? __pfx_genl_rcv_msg+0x10/0x10 [ 189.637032][ T8197] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 189.637095][ T8197] ? netlink_deliver_tap+0x2e/0x1b0 [ 189.637135][ T8197] genl_rcv+0x28/0x40 [ 189.637157][ T8197] netlink_unicast+0x7f8/0x9a0 [ 189.637208][ T8197] ? __pfx_netlink_unicast+0x10/0x10 [ 189.637238][ T8197] ? skb_put+0x114/0x1f0 [ 189.637265][ T8197] netlink_sendmsg+0x8c3/0xcd0 [ 189.637310][ T8197] ? __pfx_netlink_sendmsg+0x10/0x10 [ 189.637346][ T8197] ? aa_sock_msg_perm+0x91/0x160 [ 189.637378][ T8197] ? __pfx_netlink_sendmsg+0x10/0x10 [ 189.637407][ T8197] __sock_sendmsg+0x221/0x270 [ 189.637439][ T8197] ____sys_sendmsg+0x523/0x860 [ 189.637473][ T8197] ? __pfx_____sys_sendmsg+0x10/0x10 [ 189.637494][ T8197] ? __fget_files+0x2a/0x420 [ 189.637516][ T8197] ? __fget_files+0x2a/0x420 [ 189.637545][ T8197] __sys_sendmsg+0x271/0x360 [ 189.637575][ T8197] ? __pfx___sys_sendmsg+0x10/0x10 [ 189.637660][ T8197] ? do_syscall_64+0xb6/0x210 [ 189.637685][ T8197] do_syscall_64+0xf3/0x210 [ 189.637705][ T8197] ? clear_bhb_loop+0x45/0xa0 [ 189.637729][ T8197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.637748][ T8197] RIP: 0033:0x7ff5b9d8e169 [ 189.637766][ T8197] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.637781][ T8197] RSP: 002b:00007ff5bab6d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 189.637803][ T8197] RAX: ffffffffffffffda RBX: 00007ff5b9fb5fa0 RCX: 00007ff5b9d8e169 [ 189.637817][ T8197] RDX: 00000000000040c4 RSI: 00002000000032c0 RDI: 0000000000000006 [ 189.637830][ T8197] RBP: 00007ff5bab6d090 R08: 0000000000000000 R09: 0000000000000000 [ 189.637842][ T8197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.637854][ T8197] R13: 0000000000000000 R14: 00007ff5b9fb5fa0 R15: 00007ffde7e0cd38 [ 189.637885][ T8197] [ 189.727658][ T8011] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.064820][ T1322] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.073205][ T1322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.181376][ T3006] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.189917][ T3006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.890635][ T8220] netlink: 'syz.1.659': attribute type 1 has an invalid length. [ 190.928541][ T55] Bluetooth: hci6: command 0x040f tx timeout [ 191.442527][ T8220] 8021q: adding VLAN 0 to HW filter on device bond11 [ 191.692389][ T8241] netlink: 4 bytes leftover after parsing attributes in process `syz.4.664'. [ 191.914128][ T8011] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.814595][ T8268] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 192.898826][ T8268] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 192.979259][ T8011] veth0_vlan: entered promiscuous mode [ 193.010448][ T8271] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 193.066255][ T8011] veth1_vlan: entered promiscuous mode [ 193.093922][ T8275] netlink: 24 bytes leftover after parsing attributes in process `syz.5.671'. [ 193.245645][ T55] Bluetooth: hci6: command 0x040f tx timeout [ 193.303883][ T8011] veth0_macvtap: entered promiscuous mode [ 193.398479][ T8011] veth1_macvtap: entered promiscuous mode [ 193.479974][ T8011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.497657][ T8011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.509881][ T8011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.523045][ T8011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.535474][ T8011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.575318][ T8011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.589564][ T8011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.602647][ T8011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.616932][ T8011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.629870][ T8011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.649978][ T8011] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 193.684125][ T8011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.697329][ T8011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.711369][ T8011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.724350][ T8011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.742387][ T8011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.755570][ T8011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.772137][ T8011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.783947][ T8011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.818799][ T8011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.862039][ T8011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.879969][ T8011] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 193.916535][ T8011] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.957372][ T8011] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.985660][ T8011] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.986080][ T8280] netlink: 'syz.1.673': attribute type 23 has an invalid length. [ 193.995273][ T8011] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.212958][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.220549][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.349829][ T8284] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 194.391422][ T8289] netlink: 8 bytes leftover after parsing attributes in process `syz.4.676'. [ 194.590147][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.636029][ T8292] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 194.639808][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.851791][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.886440][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.948135][ T8294] netlink: 4 bytes leftover after parsing attributes in process `syz.1.678'. [ 195.474454][ T8309] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 195.632062][ T8312] netlink: 20 bytes leftover after parsing attributes in process `syz.5.683'. [ 195.946134][ T8316] bridge_slave_0: left allmulticast mode [ 195.971603][ T8316] bridge_slave_0: left promiscuous mode [ 195.991242][ T8316] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.057459][ T8316] bridge_slave_1: left allmulticast mode [ 196.063661][ T8316] bridge_slave_1: left promiscuous mode [ 196.089841][ T8316] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.151830][ T8316] bond0: (slave bond_slave_0): Releasing backup interface [ 196.217424][ T8316] bond0: (slave bond_slave_1): Releasing backup interface [ 196.250397][ T8326] netlink: 'syz.6.687': attribute type 23 has an invalid length. [ 196.280235][ T8316] team0: Port device team_slave_0 removed [ 196.323663][ T8316] team0: Port device team_slave_1 removed [ 196.341020][ T8316] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.373823][ T8316] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 196.394864][ T8316] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 196.414374][ T8316] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 196.427708][ T8330] FAULT_INJECTION: forcing a failure. [ 196.427708][ T8330] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 196.442401][ T8330] CPU: 1 UID: 0 PID: 8330 Comm: syz.1.688 Not tainted 6.15.0-rc2-syzkaller-00657-g0e0a7e3719bc #0 PREEMPT(full) [ 196.442428][ T8330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 196.442440][ T8330] Call Trace: [ 196.442449][ T8330] [ 196.442457][ T8330] dump_stack_lvl+0x241/0x360 [ 196.442494][ T8330] ? __pfx_dump_stack_lvl+0x10/0x10 [ 196.442523][ T8330] ? __pfx__printk+0x10/0x10 [ 196.442563][ T8330] should_fail_ex+0x424/0x570 [ 196.442592][ T8330] _copy_from_user+0x2d/0xb0 [ 196.442625][ T8330] copy_msghdr_from_user+0xb3/0x580 [ 196.442662][ T8330] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 196.442689][ T8330] ? __fget_files+0x2a/0x420 [ 196.442712][ T8330] ? __fget_files+0x2a/0x420 [ 196.442740][ T8330] __sys_sendmsg+0x20a/0x360 [ 196.442770][ T8330] ? __pfx___sys_sendmsg+0x10/0x10 [ 196.442860][ T8330] ? do_syscall_64+0xb6/0x210 [ 196.442884][ T8330] do_syscall_64+0xf3/0x210 [ 196.442904][ T8330] ? clear_bhb_loop+0x45/0xa0 [ 196.442932][ T8330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.442951][ T8330] RIP: 0033:0x7fc63ff8e169 [ 196.442970][ T8330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.442986][ T8330] RSP: 002b:00007fc640def038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 196.443008][ T8330] RAX: ffffffffffffffda RBX: 00007fc6401b5fa0 RCX: 00007fc63ff8e169 [ 196.443023][ T8330] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 196.443036][ T8330] RBP: 00007fc640def090 R08: 0000000000000000 R09: 0000000000000000 [ 196.443048][ T8330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.443059][ T8330] R13: 0000000000000000 R14: 00007fc6401b5fa0 R15: 00007fff9bb1aeb8 [ 196.443091][ T8330] [ 196.454303][ T8330] netlink: 20 bytes leftover after parsing attributes in process `syz.1.688'. [ 197.108097][ T8339] netlink: 'syz.1.690': attribute type 8 has an invalid length. [ 197.154593][ T8328] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 197.615482][ T8348] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 197.746264][ T8352] netlink: 4 bytes leftover after parsing attributes in process `syz.6.696'. [ 197.820913][ T8349] syzkaller1: entered promiscuous mode [ 197.828072][ T8349] syzkaller1: entered allmulticast mode [ 198.250324][ T8364] netlink: 8 bytes leftover after parsing attributes in process `syz.4.699'. [ 198.863028][ T8376] netlink: 'syz.6.703': attribute type 1 has an invalid length. [ 199.107315][ T8376] 8021q: adding VLAN 0 to HW filter on device bond1 [ 199.119057][ T8376] team0: Port device bond1 added [ 199.266942][ T8385] netlink: 'syz.4.706': attribute type 23 has an invalid length. [ 199.287741][ T8387] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.320609][ T8387] veth0_to_bridge: entered promiscuous mode [ 199.491586][ T8386] veth0_to_bridge: left promiscuous mode [ 199.733790][ T8393] 8021q: adding VLAN 0 to HW filter on device bond4 [ 199.787361][ T8393] geneve2: left promiscuous mode [ 199.792904][ T8393] geneve2: left allmulticast mode [ 199.921488][ T8402] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 200.228388][ T8405] team_slave_0: entered promiscuous mode [ 200.234607][ T8405] team_slave_1: entered promiscuous mode [ 200.240910][ T8405] batadv1: entered promiscuous mode [ 200.246957][ T8405] batadv2: entered promiscuous mode [ 200.252681][ T8405] batadv3: entered promiscuous mode [ 200.258436][ T8405] batadv4: entered promiscuous mode [ 200.264143][ T8405] batadv5: entered promiscuous mode [ 200.269966][ T8405] batadv6: entered promiscuous mode [ 200.275737][ T8405] batadv7: entered promiscuous mode [ 200.314056][ T8405] vlan2: entered promiscuous mode [ 200.322908][ T8405] team0: entered promiscuous mode [ 200.473166][ T8407] FAULT_INJECTION: forcing a failure. [ 200.473166][ T8407] name failslab, interval 1, probability 0, space 0, times 0 [ 200.488835][ T8407] CPU: 0 UID: 0 PID: 8407 Comm: syz.4.713 Not tainted 6.15.0-rc2-syzkaller-00657-g0e0a7e3719bc #0 PREEMPT(full) [ 200.488866][ T8407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 200.488879][ T8407] Call Trace: [ 200.488887][ T8407] [ 200.488896][ T8407] dump_stack_lvl+0x241/0x360 [ 200.488933][ T8407] ? __pfx_dump_stack_lvl+0x10/0x10 [ 200.488962][ T8407] ? __pfx__printk+0x10/0x10 [ 200.488989][ T8407] ? __lock_acquire+0xad5/0xd80 [ 200.489019][ T8407] ? __pfx___might_resched+0x10/0x10 [ 200.489055][ T8407] should_fail_ex+0x424/0x570 [ 200.489084][ T8407] should_failslab+0xac/0x100 [ 200.489107][ T8407] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 200.489130][ T8407] ? __alloc_skb+0x1c2/0x480 [ 200.489157][ T8407] __alloc_skb+0x1c2/0x480 [ 200.489178][ T8407] ? __mutex_unlock_slowpath+0x229/0x800 [ 200.489202][ T8407] ? __pfx___alloc_skb+0x10/0x10 [ 200.489226][ T8407] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 200.489249][ T8407] ? __pfx_get_current_settings+0x10/0x10 [ 200.489284][ T8407] mgmt_cmd_complete+0x49/0x580 [ 200.489313][ T8407] ? append_eir_data_to_buf+0x33b/0x530 [ 200.489339][ T8407] read_ext_controller_info+0x2a2/0x4b0 [ 200.489369][ T8407] ? __pfx_read_ext_controller_info+0x10/0x10 [ 200.489394][ T8407] ? kmem_cache_free+0x197/0x410 [ 200.489467][ T8407] ? hci_dev_get+0xdc/0x1a0 [ 200.489494][ T8407] ? __pfx_mgmt_init_hdev+0x10/0x10 [ 200.489515][ T8407] ? mgmt_init_hdev+0x453/0x470 [ 200.489547][ T8407] hci_mgmt_cmd+0xa2e/0xf20 [ 200.489591][ T8407] hci_sock_sendmsg+0x7b8/0x11f0 [ 200.489624][ T8407] ? __pfx_aa_sk_perm+0x10/0x10 [ 200.489648][ T8407] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 200.489676][ T8407] ? __pfx_aa_file_perm+0x10/0x10 [ 200.489700][ T8407] ? aa_sock_msg_perm+0x91/0x160 [ 200.489733][ T8407] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 200.489758][ T8407] __sock_sendmsg+0x221/0x270 [ 200.489792][ T8407] sock_write_iter+0x2d9/0x3f0 [ 200.489821][ T8407] ? __pfx_sock_write_iter+0x10/0x10 [ 200.489862][ T8407] ? bpf_lsm_file_permission+0x9/0x10 [ 200.489898][ T8407] vfs_write+0x70f/0xd10 [ 200.489933][ T8407] ? __pfx_sock_write_iter+0x10/0x10 [ 200.489962][ T8407] ? __pfx_vfs_write+0x10/0x10 [ 200.489992][ T8407] ? __fget_files+0x2a/0x420 [ 200.490014][ T8407] ? __fget_files+0x2a/0x420 [ 200.490043][ T8407] ksys_write+0x19d/0x2d0 [ 200.490074][ T8407] ? __pfx_ksys_write+0x10/0x10 [ 200.490109][ T8407] ? do_syscall_64+0xb6/0x210 [ 200.490137][ T8407] do_syscall_64+0xf3/0x210 [ 200.490157][ T8407] ? clear_bhb_loop+0x45/0xa0 [ 200.490181][ T8407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.490200][ T8407] RIP: 0033:0x7f473198e169 [ 200.490218][ T8407] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.490235][ T8407] RSP: 002b:00007f4732780038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 200.490257][ T8407] RAX: ffffffffffffffda RBX: 00007f4731bb5fa0 RCX: 00007f473198e169 [ 200.490272][ T8407] RDX: 0000000000000006 RSI: 0000200000000080 RDI: 000000000000000d [ 200.490286][ T8407] RBP: 00007f4732780090 R08: 0000000000000000 R09: 0000000000000000 [ 200.490298][ T8407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 200.490310][ T8407] R13: 0000000000000000 R14: 00007f4731bb5fa0 R15: 00007fffe1e619d8 [ 200.490343][ T8407] [ 201.379321][ T8427] bond0: entered promiscuous mode [ 201.385432][ T8427] bond_slave_0: entered promiscuous mode [ 201.392643][ T8427] bond_slave_1: entered promiscuous mode [ 201.402304][ T8427] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 201.439471][ T8427] bond0: left promiscuous mode [ 201.450386][ T8427] bond_slave_0: left promiscuous mode [ 201.457518][ T8427] bond_slave_1: left promiscuous mode [ 201.783232][ T8432] netlink: 'syz.4.723': attribute type 23 has an invalid length. [ 202.101773][ T8437] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 202.368579][ T8442] lo: entered promiscuous mode [ 202.374617][ T8441] lo: left promiscuous mode [ 202.626720][ T8444] FAULT_INJECTION: forcing a failure. [ 202.626720][ T8444] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 202.666877][ T8444] CPU: 0 UID: 0 PID: 8444 Comm: syz.6.727 Not tainted 6.15.0-rc2-syzkaller-00657-g0e0a7e3719bc #0 PREEMPT(full) [ 202.666912][ T8444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 202.666923][ T8444] Call Trace: [ 202.666929][ T8444] [ 202.666937][ T8444] dump_stack_lvl+0x241/0x360 [ 202.666971][ T8444] ? __pfx_dump_stack_lvl+0x10/0x10 [ 202.666996][ T8444] ? __pfx__printk+0x10/0x10 [ 202.667032][ T8444] should_fail_ex+0x424/0x570 [ 202.667059][ T8444] _copy_from_user+0x2d/0xb0 [ 202.667089][ T8444] move_addr_to_kernel+0x7f/0x170 [ 202.667118][ T8444] __sys_connect+0xb8/0x2d0 [ 202.667135][ T8444] ? __fget_files+0x2a/0x420 [ 202.667150][ T8444] ? __pfx___sys_connect+0x10/0x10 [ 202.667190][ T8444] __x64_sys_connect+0x7a/0x90 [ 202.667208][ T8444] do_syscall_64+0xf3/0x210 [ 202.667229][ T8444] ? clear_bhb_loop+0x45/0xa0 [ 202.667249][ T8444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.667266][ T8444] RIP: 0033:0x7f918f58e169 [ 202.667284][ T8444] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.667299][ T8444] RSP: 002b:00007f91903fc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 202.667325][ T8444] RAX: ffffffffffffffda RBX: 00007f918f7b5fa0 RCX: 00007f918f58e169 [ 202.667340][ T8444] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000003 [ 202.667351][ T8444] RBP: 00007f91903fc090 R08: 0000000000000000 R09: 0000000000000000 [ 202.667361][ T8444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 202.667371][ T8444] R13: 0000000000000000 R14: 00007f918f7b5fa0 R15: 00007ffff5d3b508 [ 202.667401][ T8444] [ 202.897083][ T8447] vlan2: entered promiscuous mode [ 203.589164][ T8460] netlink: 24 bytes leftover after parsing attributes in process `syz.4.734'. [ 203.641240][ T8460] Bluetooth: MGMT ver 1.23 [ 203.788486][ T8462] netlink: 'syz.5.735': attribute type 23 has an invalid length. [ 203.901842][ T8465] netlink: 4 bytes leftover after parsing attributes in process `syz.6.736'. [ 203.927335][ T8467] netlink: 12 bytes leftover after parsing attributes in process `syz.4.737'. [ 203.952429][ T8465] netlink: 12 bytes leftover after parsing attributes in process `syz.6.736'. [ 203.978751][ T8462] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 204.021444][ T8467] vlan2: entered promiscuous mode [ 204.027915][ T8467] hsr0: entered promiscuous mode [ 204.119650][ T8470] netlink: 8 bytes leftover after parsing attributes in process `syz.6.736'. [ 204.785734][ T8484] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 204.908705][ T8484] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 205.039661][ T8484] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 205.047200][ T8492] netlink: 44 bytes leftover after parsing attributes in process `syz.5.744'. [ 205.236254][ T8492] netlink: 620 bytes leftover after parsing attributes in process `syz.5.744'. [ 205.296756][ T8492] trusted_key: syz.5.744 sent an empty control message without MSG_MORE. [ 205.458262][ T8496] netlink: 28 bytes leftover after parsing attributes in process `syz.6.746'. [ 205.469413][ T8496] netlink: 28 bytes leftover after parsing attributes in process `syz.6.746'. [ 205.920828][ T8503] netlink: 'syz.4.748': attribute type 23 has an invalid length. [ 206.215540][ T8506] netlink: 'syz.5.750': attribute type 4 has an invalid length. [ 206.563024][ T8515] FAULT_INJECTION: forcing a failure. [ 206.563024][ T8515] name failslab, interval 1, probability 0, space 0, times 0 [ 206.609097][ T8515] CPU: 1 UID: 0 PID: 8515 Comm: syz.4.754 Not tainted 6.15.0-rc2-syzkaller-00657-g0e0a7e3719bc #0 PREEMPT(full) [ 206.609133][ T8515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 206.609146][ T8515] Call Trace: [ 206.609154][ T8515] [ 206.609163][ T8515] dump_stack_lvl+0x241/0x360 [ 206.609201][ T8515] ? __pfx_dump_stack_lvl+0x10/0x10 [ 206.609229][ T8515] ? __pfx__printk+0x10/0x10 [ 206.609262][ T8515] ? __pfx___might_resched+0x10/0x10 [ 206.609300][ T8515] should_fail_ex+0x424/0x570 [ 206.609328][ T8515] should_failslab+0xac/0x100 [ 206.609352][ T8515] __kvmalloc_node_noprof+0x170/0x5a0 [ 206.609373][ T8515] ? alloc_netdev_mqs+0x92c/0x1210 [ 206.609407][ T8515] alloc_netdev_mqs+0x92c/0x1210 [ 206.609442][ T8515] ieee802154_if_add+0x11c/0x1160 [ 206.609475][ T8515] ? __pfx_ieee802154_if_add+0x10/0x10 [ 206.609494][ T8515] ? skb_put+0x114/0x1f0 [ 206.609515][ T8515] ? __pfx___mutex_lock+0x10/0x10 [ 206.609547][ T8515] ? genlmsg_put+0x145/0x2e0 [ 206.609577][ T8515] ieee802154_add_iface_deprecated+0x44/0x70 [ 206.609607][ T8515] ieee802154_add_iface+0x462/0x830 [ 206.609640][ T8515] ? __pfx_ieee802154_add_iface+0x10/0x10 [ 206.609667][ T8515] ? genl_family_rcv_msg_attrs_parse+0x1d4/0x290 [ 206.609702][ T8515] genl_rcv_msg+0xb38/0xf00 [ 206.609736][ T8515] ? __pfx_genl_rcv_msg+0x10/0x10 [ 206.609758][ T8515] ? stack_trace_save+0x11a/0x1d0 [ 206.609783][ T8515] ? __pfx_stack_trace_save+0x10/0x10 [ 206.609810][ T8515] ? stack_depot_save_flags+0x44/0x940 [ 206.609831][ T8515] ? __pfx_stack_trace_save+0x1/0x10 [ 206.609869][ T8515] ? __lock_acquire+0xad5/0xd80 [ 206.609898][ T8515] ? __pfx_ieee802154_add_iface+0x10/0x10 [ 206.609941][ T8515] netlink_rcv_skb+0x208/0x480 [ 206.609973][ T8515] ? __pfx_genl_rcv_msg+0x10/0x10 [ 206.609998][ T8515] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 206.610058][ T8515] ? netlink_deliver_tap+0x2e/0x1b0 [ 206.610096][ T8515] genl_rcv+0x28/0x40 [ 206.610117][ T8515] netlink_unicast+0x7f8/0x9a0 [ 206.610155][ T8515] ? __pfx_netlink_unicast+0x10/0x10 [ 206.610185][ T8515] ? skb_put+0x114/0x1f0 [ 206.610212][ T8515] netlink_sendmsg+0x8c3/0xcd0 [ 206.610257][ T8515] ? __pfx_netlink_sendmsg+0x10/0x10 [ 206.610292][ T8515] ? aa_sock_msg_perm+0x91/0x160 [ 206.610324][ T8515] ? __pfx_netlink_sendmsg+0x10/0x10 [ 206.610353][ T8515] __sock_sendmsg+0x221/0x270 [ 206.610386][ T8515] ____sys_sendmsg+0x523/0x860 [ 206.610421][ T8515] ? __pfx_____sys_sendmsg+0x10/0x10 [ 206.610442][ T8515] ? __fget_files+0x2a/0x420 [ 206.610465][ T8515] ? __fget_files+0x2a/0x420 [ 206.610520][ T8515] __sys_sendmsg+0x271/0x360 [ 206.610551][ T8515] ? __pfx___sys_sendmsg+0x10/0x10 [ 206.610639][ T8515] ? do_syscall_64+0xb6/0x210 [ 206.610672][ T8515] do_syscall_64+0xf3/0x210 [ 206.610693][ T8515] ? clear_bhb_loop+0x45/0xa0 [ 206.610720][ T8515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.610741][ T8515] RIP: 0033:0x7f473198e169 [ 206.610761][ T8515] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.610779][ T8515] RSP: 002b:00007f4732780038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 206.610801][ T8515] RAX: ffffffffffffffda RBX: 00007f4731bb5fa0 RCX: 00007f473198e169 [ 206.610817][ T8515] RDX: 00000000000040c4 RSI: 00002000000032c0 RDI: 0000000000000006 [ 206.610831][ T8515] RBP: 00007f4732780090 R08: 0000000000000000 R09: 0000000000000000 [ 206.610845][ T8515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 206.610857][ T8515] R13: 0000000000000000 R14: 00007f4731bb5fa0 R15: 00007fffe1e619d8 [ 206.610890][ T8515] [ 207.548445][ T8524] netlink: 68 bytes leftover after parsing attributes in process `syz.5.758'. [ 207.637542][ T8529] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 207.699937][ T5842] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 207.716155][ T5842] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 207.736650][ T5842] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 207.747600][ T8533] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.758813][ T8533] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.770102][ T8533] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.783942][ T8533] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.797215][ T8529] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 207.816078][ T5842] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 207.833557][ T5842] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 207.925567][ T8529] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 208.138799][ T8539] netlink: 'syz.5.762': attribute type 23 has an invalid length. [ 208.345966][ T8543] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 208.766290][ T3006] wlan1: Trigger new scan to find an IBSS to join [ 208.813750][ T8550] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 209.172778][ T8532] chnl_net:caif_netlink_parms(): no params data found [ 209.377695][ T8560] __nla_validate_parse: 3 callbacks suppressed [ 209.377737][ T8560] netlink: 12 bytes leftover after parsing attributes in process `syz.4.768'. [ 209.452805][ T8560] netlink: 8 bytes leftover after parsing attributes in process `syz.4.768'. [ 209.885684][ T8569] Bluetooth: hci7: command tx timeout [ 210.060429][ T8532] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.100906][ T8532] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.140701][ T8532] bridge_slave_0: entered allmulticast mode [ 210.167173][ T8532] bridge_slave_0: entered promiscuous mode [ 210.256186][ T8532] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.297606][ T8532] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.335662][ T8532] bridge_slave_1: entered allmulticast mode [ 210.392306][ T8532] bridge_slave_1: entered promiscuous mode [ 210.749246][ T8532] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.832803][ T8532] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.079980][ T8589] veth0_to_bridge: entered promiscuous mode [ 211.093343][ T8532] team0: Port device team_slave_0 added [ 211.117828][ T8588] veth0_to_bridge: left promiscuous mode [ 211.125874][ T8592] netlink: 20 bytes leftover after parsing attributes in process `syz.5.775'. [ 211.194096][ T8532] team0: Port device team_slave_1 added [ 211.537289][ T8532] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.645849][ T8569] Bluetooth: hci1: command 0x0406 tx timeout [ 211.656360][ T8569] Bluetooth: hci2: command 0x0406 tx timeout [ 211.663647][ T8568] Bluetooth: hci0: command 0x0406 tx timeout [ 211.672860][ T8568] Bluetooth: hci3: command 0x0406 tx timeout [ 211.675220][ T8532] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.776181][ T8532] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.806739][ T6839] wlan1: Trigger new scan to find an IBSS to join [ 211.850803][ T8532] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.865765][ T8532] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.896830][ T8532] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.925698][ T8605] vlan2: entered promiscuous mode [ 211.965391][ T8566] Bluetooth: hci7: command tx timeout [ 212.228724][ T8532] hsr_slave_0: entered promiscuous mode [ 212.250611][ T8532] hsr_slave_1: entered promiscuous mode [ 212.284953][ T8532] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 212.335347][ T8532] Cannot create hsr debugfs directory [ 212.709198][ T8620] netlink: 788 bytes leftover after parsing attributes in process `syz.5.783'. [ 212.748988][ T64] wlan1: Creating new IBSS network, BSSID ee:8e:16:65:4e:d4 [ 213.866355][ T8639] netlink: 4 bytes leftover after parsing attributes in process `syz.5.790'. [ 214.045840][ T8566] Bluetooth: hci7: command tx timeout [ 215.800332][ T8532] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 215.829585][ T8652] FAULT_INJECTION: forcing a failure. [ 215.829585][ T8652] name failslab, interval 1, probability 0, space 0, times 0 [ 215.869127][ T8532] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 215.898941][ T8652] CPU: 0 UID: 0 PID: 8652 Comm: syz.5.792 Not tainted 6.15.0-rc2-syzkaller-00657-g0e0a7e3719bc #0 PREEMPT(full) [ 215.898976][ T8652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 215.898990][ T8652] Call Trace: [ 215.898999][ T8652] [ 215.899008][ T8652] dump_stack_lvl+0x241/0x360 [ 215.899047][ T8652] ? __pfx_dump_stack_lvl+0x10/0x10 [ 215.899077][ T8652] ? __pfx__printk+0x10/0x10 [ 215.899107][ T8652] ? __pfx___might_resched+0x10/0x10 [ 215.899142][ T8652] should_fail_ex+0x424/0x570 [ 215.899167][ T8652] should_failslab+0xac/0x100 [ 215.899190][ T8652] __kmalloc_cache_noprof+0x73/0x370 [ 215.899208][ T8652] ? sctp_auth_asoc_copy_shkeys+0x13b/0x580 [ 215.899233][ T8652] sctp_auth_asoc_copy_shkeys+0x13b/0x580 [ 215.899275][ T8652] sctp_association_new+0x15ad/0x2540 [ 215.899321][ T8652] sctp_connect_new_asoc+0x31c/0x700 [ 215.899355][ T8652] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 215.899379][ T8652] ? sctp_endpoint_lookup_assoc+0x7c/0x250 [ 215.899413][ T8652] ? sctp_endpoint_lookup_assoc+0x7c/0x250 [ 215.899434][ T8652] ? sctp_endpoint_lookup_assoc+0x217/0x250 [ 215.899457][ T8652] ? sctp_endpoint_lookup_assoc+0x7c/0x250 [ 215.899483][ T8652] __sctp_connect+0x6ab/0xe60 [ 215.899517][ T8652] ? __local_bh_enable_ip+0x168/0x200 [ 215.899549][ T8652] ? __pfx___sctp_connect+0x10/0x10 [ 215.899572][ T8652] ? sctp_inet_connect+0xa7/0x1f0 [ 215.899591][ T8652] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 215.899617][ T8652] ? do_raw_spin_unlock+0x13c/0x8b0 [ 215.899647][ T8652] sctp_inet_connect+0x149/0x1f0 [ 215.899669][ T8652] __sys_connect+0x28c/0x2d0 [ 215.899689][ T8652] ? __fget_files+0x2a/0x420 [ 215.899705][ T8652] ? __pfx___sys_connect+0x10/0x10 [ 215.899746][ T8652] __x64_sys_connect+0x7a/0x90 [ 215.899764][ T8652] do_syscall_64+0xf3/0x210 [ 215.899782][ T8652] ? clear_bhb_loop+0x45/0xa0 [ 215.899806][ T8652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.899822][ T8652] RIP: 0033:0x7f5d3958e169 [ 215.899839][ T8652] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 215.899856][ T8652] RSP: 002b:00007f5d3a3a9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 215.899874][ T8652] RAX: ffffffffffffffda RBX: 00007f5d397b5fa0 RCX: 00007f5d3958e169 [ 215.899888][ T8652] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000003 [ 215.899902][ T8652] RBP: 00007f5d3a3a9090 R08: 0000000000000000 R09: 0000000000000000 [ 215.899913][ T8652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.899923][ T8652] R13: 0000000000000000 R14: 00007f5d397b5fa0 R15: 00007ffc68809b08 [ 215.899951][ T8652] [ 216.205008][ T8532] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 216.223210][ T8566] Bluetooth: hci7: command tx timeout [ 216.315933][ T8532] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 216.662321][ T8656] netlink: 20 bytes leftover after parsing attributes in process `syz.5.795'. [ 217.026381][ T8532] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.132960][ T55] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 217.150782][ T55] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 217.179209][ T8668] netlink: 'syz.6.798': attribute type 3 has an invalid length. [ 217.188470][ T55] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 217.200323][ T8532] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.222668][ T55] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 217.238587][ T55] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 217.249873][ T6839] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.257718][ T6839] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.358983][ T6839] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.367456][ T6839] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.537685][ T8670] netlink: 'syz.6.799': attribute type 23 has an invalid length. [ 217.854359][ T8674] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 217.895340][ T8677] netlink: 'syz.5.801': attribute type 23 has an invalid length. [ 218.109467][ T8680] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 218.677478][ T8665] chnl_net:caif_netlink_parms(): no params data found [ 219.070750][ T8532] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.363066][ T8665] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.384758][ T8665] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.405810][ T8566] Bluetooth: hci8: command tx timeout [ 219.438313][ T8665] bridge_slave_0: entered allmulticast mode [ 219.462827][ T8665] bridge_slave_0: entered promiscuous mode [ 219.495348][ T8665] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.515449][ T8665] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.533667][ T8665] bridge_slave_1: entered allmulticast mode [ 219.559721][ T8665] bridge_slave_1: entered promiscuous mode [ 219.787100][ T8665] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 219.882010][ T8665] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 220.055444][ T8716] netlink: 4 bytes leftover after parsing attributes in process `syz.5.808'. [ 220.168658][ T8665] team0: Port device team_slave_0 added [ 220.211855][ T8665] team0: Port device team_slave_1 added [ 220.413235][ T8665] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 220.442263][ T8665] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.540814][ T8665] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 220.556385][ T8665] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 220.564510][ T8665] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.595702][ T8665] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 220.624868][ T8727] netlink: 'syz.6.810': attribute type 10 has an invalid length. [ 220.721893][ T1089] wlan1: Selected IBSS BSSID ee:8e:16:65:4e:d4 based on configured SSID [ 220.741797][ T8727] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 220.902972][ T8665] hsr_slave_0: entered promiscuous mode [ 220.922943][ T8665] hsr_slave_1: entered promiscuous mode [ 220.947680][ T8665] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 220.976931][ T8665] Cannot create hsr debugfs directory [ 221.012159][ T8532] veth0_vlan: entered promiscuous mode [ 221.060504][ T8731] netlink: 12 bytes leftover after parsing attributes in process `syz.5.811'. [ 221.181500][ T8733] netlink: 52 bytes leftover after parsing attributes in process `syz.6.812'. [ 221.190736][ T8731] vlan2: entered promiscuous mode [ 221.190787][ T8731] hsr0: entered promiscuous mode [ 221.203594][ T8733] netlink: 14 bytes leftover after parsing attributes in process `syz.6.812'. [ 221.215923][ T8733] netlink: 52 bytes leftover after parsing attributes in process `syz.6.812'. [ 221.226031][ T8733] netlink: 14 bytes leftover after parsing attributes in process `syz.6.812'. [ 221.254509][ T8733] netlink: 52 bytes leftover after parsing attributes in process `syz.6.812'. [ 221.384418][ T8532] veth1_vlan: entered promiscuous mode [ 221.486088][ T8566] Bluetooth: hci8: command tx timeout [ 221.814687][ T8532] veth0_macvtap: entered promiscuous mode [ 221.857572][ T8532] veth1_macvtap: entered promiscuous mode [ 222.058756][ T8532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.088424][ T8745] netlink: 'syz.6.816': attribute type 1 has an invalid length. [ 222.097615][ T8532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.110397][ T8532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.122749][ T8532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.134613][ T8532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.147015][ T8532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.159089][ T8532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.175160][ T8532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.195614][ T8532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.209914][ T8532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.224768][ T8532] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.448908][ T8745] 8021q: adding VLAN 0 to HW filter on device bond2 [ 222.531494][ T8752] netlink: 'syz.5.817': attribute type 3 has an invalid length. [ 222.753106][ T8665] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 222.878965][ T8532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.913243][ T8532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.966134][ T8532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.970590][ T8756] Driver unsupported XDP return value 0 on prog (id 333) dev N/A, expect packet loss! [ 223.001486][ T8532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.014681][ T8532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.028440][ T8532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.059743][ T8532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.082214][ T8532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.100809][ T8532] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.114993][ T8755] !: renamed from dummy0 (while UP) [ 223.139237][ T8665] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 223.183502][ T8665] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 223.211288][ T8665] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 223.494529][ T8532] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.535172][ T8532] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.546317][ T8532] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.556700][ T8532] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.565678][ T8566] Bluetooth: hci8: command tx timeout [ 223.588017][ T8765] tipc: Started in network mode [ 223.594225][ T8766] netlink: 16 bytes leftover after parsing attributes in process `syz.5.821'. [ 223.639867][ T8765] tipc: Node identity e0000001, cluster identity 4711 [ 223.651748][ T8765] tipc: Enabling of bearer rejected, failed to enable media [ 224.086894][ T8771] netlink: 'syz.6.822': attribute type 10 has an invalid length. [ 224.207469][ T3006] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.232670][ T3006] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.333070][ T8776] FAULT_INJECTION: forcing a failure. [ 224.333070][ T8776] name failslab, interval 1, probability 0, space 0, times 0 [ 224.355968][ T8776] CPU: 0 UID: 0 PID: 8776 Comm: syz.5.824 Not tainted 6.15.0-rc2-syzkaller-00657-g0e0a7e3719bc #0 PREEMPT(full) [ 224.356002][ T8776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 224.356015][ T8776] Call Trace: [ 224.356024][ T8776] [ 224.356032][ T8776] dump_stack_lvl+0x241/0x360 [ 224.356070][ T8776] ? __pfx_dump_stack_lvl+0x10/0x10 [ 224.356098][ T8776] ? __pfx__printk+0x10/0x10 [ 224.356130][ T8776] ? __pfx___might_resched+0x10/0x10 [ 224.356167][ T8776] should_fail_ex+0x424/0x570 [ 224.356221][ T8776] should_failslab+0xac/0x100 [ 224.356245][ T8776] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 224.356269][ T8776] ? __alloc_skb+0x1c2/0x480 [ 224.356295][ T8776] __alloc_skb+0x1c2/0x480 [ 224.356314][ T8776] ? sock_def_readable+0xd7/0x5a0 [ 224.356349][ T8776] ? __pfx___alloc_skb+0x10/0x10 [ 224.356376][ T8776] ? netlink_sendskb+0xf6/0x140 [ 224.356405][ T8776] ? netlink_ack_tlv_len+0x7a/0x200 [ 224.356439][ T8776] netlink_ack+0x147/0xa70 [ 224.356473][ T8776] ? __pfx_netlink_unicast+0x10/0x10 [ 224.356503][ T8776] ? security_capable+0x7e/0x2d0 [ 224.356543][ T8776] audit_receive+0x89c/0x39d0 [ 224.356574][ T8776] ? trace_sched_exit_tp+0x3c/0x120 [ 224.356630][ T8776] ? __pfx_audit_receive+0x10/0x10 [ 224.356653][ T8776] ? __kasan_slab_alloc+0x66/0x80 [ 224.356685][ T8776] ? __pfx___schedule+0x10/0x10 [ 224.356713][ T8776] ? ____sys_sendmsg+0x523/0x860 [ 224.356741][ T8776] ? __lock_acquire+0xad5/0xd80 [ 224.356798][ T8776] ? __lock_acquire+0xad5/0xd80 [ 224.356847][ T8776] ? netlink_deliver_tap+0x2e/0x1b0 [ 224.356881][ T8776] ? netlink_deliver_tap+0x2e/0x1b0 [ 224.356915][ T8776] netlink_unicast+0x7f8/0x9a0 [ 224.356954][ T8776] ? __pfx_netlink_unicast+0x10/0x10 [ 224.356985][ T8776] ? skb_put+0x114/0x1f0 [ 224.357019][ T8776] netlink_sendmsg+0x8c3/0xcd0 [ 224.357066][ T8776] ? __pfx_netlink_sendmsg+0x10/0x10 [ 224.357103][ T8776] ? aa_sock_msg_perm+0x91/0x160 [ 224.357136][ T8776] ? __pfx_netlink_sendmsg+0x10/0x10 [ 224.357165][ T8776] __sock_sendmsg+0x221/0x270 [ 224.357199][ T8776] ____sys_sendmsg+0x523/0x860 [ 224.357234][ T8776] ? __pfx_____sys_sendmsg+0x10/0x10 [ 224.357256][ T8776] ? __fget_files+0x2a/0x420 [ 224.357279][ T8776] ? __fget_files+0x2a/0x420 [ 224.357308][ T8776] __sys_sendmsg+0x271/0x360 [ 224.357338][ T8776] ? __pfx___sys_sendmsg+0x10/0x10 [ 224.357421][ T8776] ? do_syscall_64+0xb6/0x210 [ 224.357444][ T8776] do_syscall_64+0xf3/0x210 [ 224.357463][ T8776] ? clear_bhb_loop+0x45/0xa0 [ 224.357489][ T8776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.357509][ T8776] RIP: 0033:0x7f5d3958e169 [ 224.357534][ T8776] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 224.357553][ T8776] RSP: 002b:00007f5d3a3a9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 224.357575][ T8776] RAX: ffffffffffffffda RBX: 00007f5d397b5fa0 RCX: 00007f5d3958e169 [ 224.357591][ T8776] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 224.357603][ T8776] RBP: 00007f5d3a3a9090 R08: 0000000000000000 R09: 0000000000000000 [ 224.357616][ T8776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 224.357629][ T8776] R13: 0000000000000000 R14: 00007f5d397b5fa0 R15: 00007ffc68809b08 [ 224.357663][ T8776] [ 224.360732][ T8776] netlink: 20 bytes leftover after parsing attributes in process `syz.5.824'. [ 224.453683][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.782126][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.916036][ T8779] netlink: 'syz.5.825': attribute type 8 has an invalid length. [ 225.156605][ T8665] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.306019][ T8665] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.358850][ T8784] netlink: 4 bytes leftover after parsing attributes in process `syz.5.827'. [ 225.410377][ T6840] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.418303][ T6840] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.474735][ T6840] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.482568][ T6840] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.648498][ T8566] Bluetooth: hci8: command tx timeout [ 225.684134][ T8787] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 225.731317][ T8787] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 226.458979][ T8804] netlink: 24 bytes leftover after parsing attributes in process `syz.7.830'. [ 226.592331][ T8809] netlink: 28 bytes leftover after parsing attributes in process `syz.6.832'. [ 226.628066][ T8809] netlink: 28 bytes leftover after parsing attributes in process `syz.6.832'. [ 226.691122][ T8809] netlink: 52 bytes leftover after parsing attributes in process `syz.6.832'. [ 226.906611][ T8665] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.728825][ T8566] Bluetooth: hci8: command tx timeout [ 227.943044][ T5888] IPVS: starting estimator thread 0... [ 228.075971][ T8837] IPVS: using max 27 ests per chain, 64800 per kthread [ 228.180325][ T8665] veth0_vlan: entered promiscuous mode [ 228.244941][ T8665] veth1_vlan: entered promiscuous mode [ 228.322583][ T8842] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 228.408945][ T8665] veth0_macvtap: entered promiscuous mode [ 228.458853][ T8665] veth1_macvtap: entered promiscuous mode [ 228.550053][ T8665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.593479][ T8665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.629610][ T8665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.707806][ T8665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.748108][ T8665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.804307][ T8665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.844419][ T8665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.895328][ T8665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.918966][ T8665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.949822][ T8665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.976828][ T8665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.035423][ T8665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.085041][ T8665] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.158563][ T8844] batadv0: entered promiscuous mode [ 229.215955][ T8844] vlan2: entered promiscuous mode [ 229.358347][ T8665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.419871][ T8665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.427396][ T55] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 229.442592][ T55] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 229.454845][ T55] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 229.467169][ T55] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 229.478822][ T8665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.479327][ T55] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 229.506987][ T8665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.549156][ T8665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.562738][ T8665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.574693][ T8665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.589626][ T8665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.601171][ T8665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.614153][ T8665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.630967][ T8665] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.681787][ T8856] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 229.744320][ T8665] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.805559][ T8665] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.842475][ T8665] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.863025][ T8665] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.847474][ T8877] netlink: 108 bytes leftover after parsing attributes in process `syz.6.854'. [ 230.932026][ T8878] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 231.019638][ T8875] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 231.054461][ T6840] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.074403][ T6840] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.459126][ T8875] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 231.530705][ T1322] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.548752][ T1322] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.567187][ T8566] Bluetooth: hci9: command tx timeout [ 231.681665][ T8853] chnl_net:caif_netlink_parms(): no params data found [ 231.829148][ T8893] FAULT_INJECTION: forcing a failure. [ 231.829148][ T8893] name failslab, interval 1, probability 0, space 0, times 0 [ 231.892894][ T8893] CPU: 0 UID: 0 PID: 8893 Comm: syz.6.858 Not tainted 6.15.0-rc2-syzkaller-00657-g0e0a7e3719bc #0 PREEMPT(full) [ 231.892931][ T8893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 231.892945][ T8893] Call Trace: [ 231.892953][ T8893] [ 231.892962][ T8893] dump_stack_lvl+0x241/0x360 [ 231.893016][ T8893] ? __pfx_dump_stack_lvl+0x10/0x10 [ 231.893046][ T8893] ? __pfx__printk+0x10/0x10 [ 231.893088][ T8893] should_fail_ex+0x424/0x570 [ 231.893118][ T8893] should_failslab+0xac/0x100 [ 231.893141][ T8893] __kmalloc_cache_noprof+0x73/0x370 [ 231.893162][ T8893] ? sctp_add_bind_addr+0x89/0x3a0 [ 231.893190][ T8893] sctp_add_bind_addr+0x89/0x3a0 [ 231.893217][ T8893] sctp_copy_local_addr_list+0x313/0x500 [ 231.893251][ T8893] ? sctp_copy_local_addr_list+0xad/0x500 [ 231.893273][ T8893] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 231.893300][ T8893] ? sctp_v6_is_any+0x60/0x70 [ 231.893325][ T8893] ? sctp_copy_one_addr+0x94/0x360 [ 231.893352][ T8893] sctp_bind_addr_copy+0xad/0x3b0 [ 231.893374][ T8893] ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190 [ 231.893409][ T8893] sctp_connect_new_asoc+0x337/0x700 [ 231.893440][ T8893] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 231.893468][ T8893] ? sctp_endpoint_lookup_assoc+0x7c/0x250 [ 231.893498][ T8893] ? sctp_endpoint_lookup_assoc+0x7c/0x250 [ 231.893524][ T8893] ? sctp_endpoint_lookup_assoc+0x217/0x250 [ 231.893548][ T8893] ? sctp_endpoint_lookup_assoc+0x7c/0x250 [ 231.893578][ T8893] __sctp_connect+0x6ab/0xe60 [ 231.893615][ T8893] ? __local_bh_enable_ip+0x168/0x200 [ 231.893645][ T8893] ? __pfx___sctp_connect+0x10/0x10 [ 231.893670][ T8893] ? sctp_inet_connect+0xa7/0x1f0 [ 231.893693][ T8893] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 231.893722][ T8893] ? do_raw_spin_unlock+0x13c/0x8b0 [ 231.893755][ T8893] sctp_inet_connect+0x149/0x1f0 [ 231.893781][ T8893] __sys_connect+0x28c/0x2d0 [ 231.893806][ T8893] ? __pfx___sys_connect+0x10/0x10 [ 231.893851][ T8893] __x64_sys_connect+0x7a/0x90 [ 231.893873][ T8893] do_syscall_64+0xf3/0x210 [ 231.893892][ T8893] ? clear_bhb_loop+0x45/0xa0 [ 231.893917][ T8893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.893937][ T8893] RIP: 0033:0x7f918f58e169 [ 231.893956][ T8893] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 231.893973][ T8893] RSP: 002b:00007f91903fc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 231.893995][ T8893] RAX: ffffffffffffffda RBX: 00007f918f7b5fa0 RCX: 00007f918f58e169 [ 231.894011][ T8893] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000003 [ 231.894024][ T8893] RBP: 00007f91903fc090 R08: 0000000000000000 R09: 0000000000000000 [ 231.894036][ T8893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 231.894048][ T8893] R13: 0000000000000000 R14: 00007f918f7b5fa0 R15: 00007ffff5d3b508 [ 231.894081][ T8893] [ 232.404942][ T8895] FAULT_INJECTION: forcing a failure. [ 232.404942][ T8895] name failslab, interval 1, probability 0, space 0, times 0 [ 232.421065][ T8895] CPU: 0 UID: 0 PID: 8895 Comm: syz.8.794 Not tainted 6.15.0-rc2-syzkaller-00657-g0e0a7e3719bc #0 PREEMPT(full) [ 232.421098][ T8895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 232.421112][ T8895] Call Trace: [ 232.421120][ T8895] [ 232.421128][ T8895] dump_stack_lvl+0x241/0x360 [ 232.421167][ T8895] ? __pfx_dump_stack_lvl+0x10/0x10 [ 232.421197][ T8895] ? __pfx__printk+0x10/0x10 [ 232.421230][ T8895] ? __pfx___might_resched+0x10/0x10 [ 232.421277][ T8895] should_fail_ex+0x424/0x570 [ 232.421308][ T8895] should_failslab+0xac/0x100 [ 232.421331][ T8895] __kvmalloc_node_noprof+0x170/0x5a0 [ 232.421353][ T8895] ? alloc_netdev_mqs+0x92c/0x1210 [ 232.421388][ T8895] alloc_netdev_mqs+0x92c/0x1210 [ 232.421425][ T8895] ieee802154_if_add+0x11c/0x1160 [ 232.421458][ T8895] ? __pfx_ieee802154_if_add+0x10/0x10 [ 232.421480][ T8895] ? __pfx___mutex_lock+0x10/0x10 [ 232.421513][ T8895] ? genlmsg_put+0x145/0x2e0 [ 232.421543][ T8895] ieee802154_add_iface_deprecated+0x44/0x70 [ 232.421573][ T8895] ieee802154_add_iface+0x462/0x830 [ 232.421609][ T8895] ? __pfx_ieee802154_add_iface+0x10/0x10 [ 232.421637][ T8895] ? genl_family_rcv_msg_attrs_parse+0x1d4/0x290 [ 232.421672][ T8895] genl_rcv_msg+0xb38/0xf00 [ 232.421720][ T8895] ? __pfx_genl_rcv_msg+0x10/0x10 [ 232.421740][ T8895] ? stack_trace_save+0x11a/0x1d0 [ 232.421776][ T8895] ? __pfx_stack_trace_save+0x10/0x10 [ 232.421801][ T8895] ? stack_depot_save_flags+0x44/0x940 [ 232.421821][ T8895] ? __pfx_stack_trace_save+0x1/0x10 [ 232.421857][ T8895] ? __lock_acquire+0xad5/0xd80 [ 232.421885][ T8895] ? __pfx_ieee802154_add_iface+0x10/0x10 [ 232.421925][ T8895] netlink_rcv_skb+0x208/0x480 [ 232.421955][ T8895] ? __pfx_genl_rcv_msg+0x10/0x10 [ 232.421980][ T8895] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 232.422030][ T8895] ? netlink_deliver_tap+0x2e/0x1b0 [ 232.422066][ T8895] genl_rcv+0x28/0x40 [ 232.422086][ T8895] netlink_unicast+0x7f8/0x9a0 [ 232.422121][ T8895] ? __pfx_netlink_unicast+0x10/0x10 [ 232.422149][ T8895] ? skb_put+0x114/0x1f0 [ 232.422174][ T8895] netlink_sendmsg+0x8c3/0xcd0 [ 232.422216][ T8895] ? __pfx_netlink_sendmsg+0x10/0x10 [ 232.422258][ T8895] ? aa_sock_msg_perm+0x91/0x160 [ 232.422288][ T8895] ? __pfx_netlink_sendmsg+0x10/0x10 [ 232.422314][ T8895] __sock_sendmsg+0x221/0x270 [ 232.422344][ T8895] ____sys_sendmsg+0x523/0x860 [ 232.422376][ T8895] ? __pfx_____sys_sendmsg+0x10/0x10 [ 232.422406][ T8895] ? __fget_files+0x2a/0x420 [ 232.422426][ T8895] ? __fget_files+0x2a/0x420 [ 232.422450][ T8895] __sys_sendmsg+0x271/0x360 [ 232.422476][ T8895] ? __pfx___sys_sendmsg+0x10/0x10 [ 232.422547][ T8895] ? do_syscall_64+0xb6/0x210 [ 232.422569][ T8895] do_syscall_64+0xf3/0x210 [ 232.422587][ T8895] ? clear_bhb_loop+0x45/0xa0 [ 232.422609][ T8895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.422627][ T8895] RIP: 0033:0x7fc01018e169 [ 232.422643][ T8895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 232.422658][ T8895] RSP: 002b:00007fc010f38038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 232.422677][ T8895] RAX: ffffffffffffffda RBX: 00007fc0103b5fa0 RCX: 00007fc01018e169 [ 232.422691][ T8895] RDX: 00000000000040c4 RSI: 00002000000032c0 RDI: 0000000000000006 [ 232.422702][ T8895] RBP: 00007fc010f38090 R08: 0000000000000000 R09: 0000000000000000 [ 232.422713][ T8895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 232.422724][ T8895] R13: 0000000000000000 R14: 00007fc0103b5fa0 R15: 00007ffe162c04c8 [ 232.422752][ T8895] [ 233.000281][ T8905] netlink: 'syz.5.859': attribute type 4 has an invalid length. [ 233.099459][ T8853] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.107844][ T8853] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.118886][ T8853] bridge_slave_0: entered allmulticast mode [ 233.129219][ T8853] bridge_slave_0: entered promiscuous mode [ 233.140049][ T8853] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.148512][ T8853] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.180589][ T8853] bridge_slave_1: entered allmulticast mode [ 233.190712][ T8853] bridge_slave_1: entered promiscuous mode [ 233.299840][ T8910] netlink: 76 bytes leftover after parsing attributes in process `syz.5.859'. [ 233.499019][ T8853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.553131][ T8853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 233.653825][ T8566] Bluetooth: hci9: command tx timeout [ 233.821108][ T8920] team0 (unregistering): Port device team_slave_0 removed [ 233.866563][ T8920] team0 (unregistering): Port device team_slave_1 removed [ 233.941102][ T8928] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 234.174592][ T8853] team0: Port device team_slave_0 added [ 234.250192][ T8931] netlink: 12 bytes leftover after parsing attributes in process `syz.6.868'. [ 234.251407][ T8853] team0: Port device team_slave_1 added [ 234.346818][ T8931] vlan2: entered promiscuous mode [ 234.370725][ T8931] hsr0: entered promiscuous mode [ 234.452220][ T8936] netlink: 8 bytes leftover after parsing attributes in process `syz.8.870'. [ 234.689025][ T8853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.724047][ T8938] FAULT_INJECTION: forcing a failure. [ 234.724047][ T8938] name failslab, interval 1, probability 0, space 0, times 0 [ 234.735032][ T8853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.746540][ T8938] CPU: 0 UID: 0 PID: 8938 Comm: syz.6.871 Not tainted 6.15.0-rc2-syzkaller-00657-g0e0a7e3719bc #0 PREEMPT(full) [ 234.746577][ T8938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 234.746591][ T8938] Call Trace: [ 234.746601][ T8938] [ 234.746610][ T8938] dump_stack_lvl+0x241/0x360 [ 234.746651][ T8938] ? __pfx_dump_stack_lvl+0x10/0x10 [ 234.746683][ T8938] ? __pfx__printk+0x10/0x10 [ 234.746719][ T8938] ? __pfx___might_resched+0x10/0x10 [ 234.746760][ T8938] should_fail_ex+0x424/0x570 [ 234.746793][ T8938] should_failslab+0xac/0x100 [ 234.746831][ T8938] __kmalloc_noprof+0xdf/0x4d0 [ 234.746854][ T8938] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 234.746882][ T8938] ? apparmor_capable+0x13b/0x1b0 [ 234.746920][ T8938] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 234.746957][ T8938] genl_rcv_msg+0x819/0xf00 [ 234.746993][ T8938] ? __pfx_genl_rcv_msg+0x10/0x10 [ 234.747016][ T8938] ? __dev_queue_xmit+0x1780/0x3f60 [ 234.747043][ T8938] ? kasan_save_track+0x3f/0x80 [ 234.747069][ T8938] ? __kasan_slab_alloc+0x66/0x80 [ 234.747107][ T8938] ? do_syscall_64+0xf3/0x210 [ 234.747151][ T8938] ? __lock_acquire+0xad5/0xd80 [ 234.747182][ T8938] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 234.747210][ T8938] ? __pfx_nl80211_set_power_save+0x10/0x10 [ 234.747240][ T8938] ? __pfx_nl80211_post_doit+0x10/0x10 [ 234.747285][ T8938] netlink_rcv_skb+0x208/0x480 [ 234.747319][ T8938] ? __pfx_genl_rcv_msg+0x10/0x10 [ 234.747347][ T8938] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 234.747406][ T8938] ? netlink_deliver_tap+0x2e/0x1b0 [ 234.747448][ T8938] genl_rcv+0x28/0x40 [ 234.747470][ T8938] netlink_unicast+0x7f8/0x9a0 [ 234.747511][ T8938] ? __pfx_netlink_unicast+0x10/0x10 [ 234.747545][ T8938] ? skb_put+0x114/0x1f0 [ 234.747574][ T8938] netlink_sendmsg+0x8c3/0xcd0 [ 234.747623][ T8938] ? __pfx_netlink_sendmsg+0x10/0x10 [ 234.747663][ T8938] ? aa_sock_msg_perm+0x91/0x160 [ 234.747697][ T8938] ? __pfx_netlink_sendmsg+0x10/0x10 [ 234.747729][ T8938] __sock_sendmsg+0x221/0x270 [ 234.747764][ T8938] ____sys_sendmsg+0x523/0x860 [ 234.747800][ T8938] ? __pfx_____sys_sendmsg+0x10/0x10 [ 234.747830][ T8938] ? __fget_files+0x2a/0x420 [ 234.747855][ T8938] ? __fget_files+0x2a/0x420 [ 234.747887][ T8938] __sys_sendmsg+0x271/0x360 [ 234.747919][ T8938] ? __pfx___sys_sendmsg+0x10/0x10 [ 234.747980][ T8938] ? ksys_write+0x1aa/0x2d0 [ 234.748007][ T8938] ? ksys_write+0x1bd/0x2d0 [ 234.748062][ T8938] ? do_syscall_64+0xb6/0x210 [ 234.748086][ T8938] do_syscall_64+0xf3/0x210 [ 234.748108][ T8938] ? clear_bhb_loop+0x45/0xa0 [ 234.748136][ T8938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.748157][ T8938] RIP: 0033:0x7f918f58e169 [ 234.748178][ T8938] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 234.748197][ T8938] RSP: 002b:00007f91903fc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 234.748223][ T8938] RAX: ffffffffffffffda RBX: 00007f918f7b5fa0 RCX: 00007f918f58e169 [ 234.748241][ T8938] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 234.748255][ T8938] RBP: 00007f91903fc090 R08: 0000000000000000 R09: 0000000000000000 [ 234.748270][ T8938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 234.748283][ T8938] R13: 0000000000000000 R14: 00007f918f7b5fa0 R15: 00007ffff5d3b508 [ 234.748318][ T8938] [ 235.188110][ T8853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.203722][ T8853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 235.214171][ T8853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.470288][ T8853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.655897][ T8948] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 235.727817][ T8566] Bluetooth: hci9: command tx timeout [ 235.756131][ T8951] netlink: 12 bytes leftover after parsing attributes in process `syz.6.876'. [ 235.989567][ T8951] vlan2: entered promiscuous mode [ 236.274048][ T8853] hsr_slave_0: entered promiscuous mode [ 236.313869][ T8853] hsr_slave_1: entered promiscuous mode [ 236.340866][ T8957] netlink: 20 bytes leftover after parsing attributes in process `syz.8.878'. [ 236.351515][ T8853] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 236.405309][ T8853] Cannot create hsr debugfs directory [ 236.607900][ T8956] netlink: 'syz.8.878': attribute type 1 has an invalid length. [ 236.635713][ T8956] netlink: 'syz.8.878': attribute type 2 has an invalid length. [ 236.659479][ T8962] x_tables: duplicate underflow at hook 1 [ 237.794630][ T976] IPVS: starting estimator thread 0... [ 237.806049][ T8566] Bluetooth: hci9: command tx timeout [ 237.915481][ T8980] IPVS: using max 27 ests per chain, 64800 per kthread [ 238.717193][ T8853] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 238.787568][ T8853] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 238.872972][ T8853] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 239.012530][ T8853] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 239.826840][ T3006] wlan1: Trigger new scan to find an IBSS to join [ 239.976336][ T9001] bond0: entered promiscuous mode [ 240.017002][ T9001] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 240.130759][ T9001] bond0: left promiscuous mode [ 241.388547][ T8853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.415945][ T9030] FAULT_INJECTION: forcing a failure. [ 241.415945][ T9030] name failslab, interval 1, probability 0, space 0, times 0 [ 241.495564][ T9030] CPU: 1 UID: 0 PID: 9030 Comm: syz.8.900 Not tainted 6.15.0-rc2-syzkaller-00657-g0e0a7e3719bc #0 PREEMPT(full) [ 241.495606][ T9030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 241.495620][ T9030] Call Trace: [ 241.495628][ T9030] [ 241.495636][ T9030] dump_stack_lvl+0x241/0x360 [ 241.495674][ T9030] ? __pfx_dump_stack_lvl+0x10/0x10 [ 241.495703][ T9030] ? __pfx__printk+0x10/0x10 [ 241.495745][ T9030] should_fail_ex+0x424/0x570 [ 241.495775][ T9030] should_failslab+0xac/0x100 [ 241.495797][ T9030] __kmalloc_cache_noprof+0x73/0x370 [ 241.495818][ T9030] ? sctp_add_bind_addr+0x89/0x3a0 [ 241.495844][ T9030] sctp_add_bind_addr+0x89/0x3a0 [ 241.495871][ T9030] sctp_copy_local_addr_list+0x313/0x500 [ 241.495896][ T9030] ? sctp_copy_local_addr_list+0xad/0x500 [ 241.495919][ T9030] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 241.495945][ T9030] ? sctp_v6_is_any+0x60/0x70 [ 241.495969][ T9030] ? sctp_copy_one_addr+0x94/0x360 [ 241.495996][ T9030] sctp_bind_addr_copy+0xad/0x3b0 [ 241.496018][ T9030] ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190 [ 241.496054][ T9030] sctp_connect_new_asoc+0x337/0x700 [ 241.496086][ T9030] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 241.496115][ T9030] ? sctp_endpoint_lookup_assoc+0x7c/0x250 [ 241.496147][ T9030] ? sctp_endpoint_lookup_assoc+0x7c/0x250 [ 241.496171][ T9030] ? sctp_endpoint_lookup_assoc+0x217/0x250 [ 241.496198][ T9030] ? sctp_endpoint_lookup_assoc+0x7c/0x250 [ 241.496229][ T9030] __sctp_connect+0x6ab/0xe60 [ 241.496269][ T9030] ? __pfx___sctp_connect+0x10/0x10 [ 241.496294][ T9030] ? sctp_inet_connect+0xa7/0x1f0 [ 241.496316][ T9030] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 241.496346][ T9030] ? do_raw_spin_unlock+0x13c/0x8b0 [ 241.496381][ T9030] sctp_inet_connect+0x149/0x1f0 [ 241.496408][ T9030] __sys_connect+0x28c/0x2d0 [ 241.496430][ T9030] ? __fget_files+0x2a/0x420 [ 241.496448][ T9030] ? __pfx___sys_connect+0x10/0x10 [ 241.496496][ T9030] __x64_sys_connect+0x7a/0x90 [ 241.496519][ T9030] do_syscall_64+0xf3/0x210 [ 241.496540][ T9030] ? clear_bhb_loop+0x45/0xa0 [ 241.496564][ T9030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.496584][ T9030] RIP: 0033:0x7fc01018e169 [ 241.496609][ T9030] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.496626][ T9030] RSP: 002b:00007fc010f38038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 241.496649][ T9030] RAX: ffffffffffffffda RBX: 00007fc0103b5fa0 RCX: 00007fc01018e169 [ 241.496665][ T9030] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000003 [ 241.496678][ T9030] RBP: 00007fc010f38090 R08: 0000000000000000 R09: 0000000000000000 [ 241.496691][ T9030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 241.496703][ T9030] R13: 0000000000000000 R14: 00007fc0103b5fa0 R15: 00007ffe162c04c8 [ 241.496736][ T9030] [ 241.829754][ T8853] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.871359][ T8853] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 241.881753][ T8853] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 241.910593][ T1322] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.917783][ T1322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.945457][ T1322] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.952678][ T1322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.522888][ T9045] netlink: 'syz.8.904': attribute type 1 has an invalid length. [ 242.743762][ T64] wlan1: Selected IBSS BSSID ee:8e:16:65:4e:d4 based on configured SSID [ 242.823834][ T8853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 242.941020][ T9054] netlink: 52 bytes leftover after parsing attributes in process `syz.5.906'. [ 243.060369][ T9054] netlink: 14 bytes leftover after parsing attributes in process `syz.5.906'. [ 243.141249][ T9054] netlink: 52 bytes leftover after parsing attributes in process `syz.5.906'. [ 243.265257][ T9054] netlink: 14 bytes leftover after parsing attributes in process `syz.5.906'. [ 243.355332][ T9054] netlink: 52 bytes leftover after parsing attributes in process `syz.5.906'. [ 243.869245][ T9064] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 243.942013][ T9069] hsr0: entered promiscuous mode [ 244.544081][ T9074] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615) [ 244.593812][ T9074] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 244.721383][ T9078] team0: Mode changed to "loadbalance" [ 244.770041][ T6842] wlan1: Trigger new scan to find an IBSS to join [ 244.785814][ T9079] team0: Unable to change to the same mode the team is in [ 244.859142][ T8566] Bluetooth: hci9: command tx timeout [ 244.884049][ T9087] netlink: 'syz.6.913': attribute type 27 has an invalid length. [ 245.206208][ T8853] veth0_vlan: entered promiscuous mode [ 245.262480][ T8853] veth1_vlan: entered promiscuous mode [ 245.519511][ T8853] veth0_macvtap: entered promiscuous mode [ 245.609523][ T8853] veth1_macvtap: entered promiscuous mode [ 245.700189][ T8853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.737591][ T8853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.787470][ T6842] wlan1: Creating new IBSS network, BSSID 4a:05:5a:0f:ae:e7 [ 245.805727][ T8853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.847453][ T8853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.882097][ T8853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.919553][ T8853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.985170][ T8853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.043330][ T8853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.119165][ T8853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.183773][ T8853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.199780][ T8853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.206941][ T9103] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 246.213478][ T8853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.231619][ T8853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.249101][ T8853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.266940][ T8853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.379654][ T8853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.435251][ T8853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.501458][ T8853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.565416][ T8853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.606616][ T8853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.643542][ T8853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.656091][ T8853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.674517][ T8853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.703398][ T8853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.735277][ T8853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.778941][ T8853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.825293][ T8853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.848847][ T8853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.987121][ T64] wlan1: Selected IBSS BSSID ee:8e:16:65:4e:d4 based on configured SSID [ 247.035696][ T8853] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.039199][ T9110] netlink: 12 bytes leftover after parsing attributes in process `syz.6.922'. [ 247.115538][ T8853] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.163825][ T8853] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.186351][ T8853] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.227400][ T9117] netlink: 76 bytes leftover after parsing attributes in process `syz.8.923'. [ 247.566337][ T9122] netlink: 'syz.5.924': attribute type 1 has an invalid length. [ 247.617057][ T9122] netlink: 224 bytes leftover after parsing attributes in process `syz.5.924'. [ 247.710102][ T9122] netlink: 8 bytes leftover after parsing attributes in process `syz.5.924'. [ 248.102439][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.168384][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.367612][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.419138][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.539122][ T9137] FAULT_INJECTION: forcing a failure. [ 248.539122][ T9137] name failslab, interval 1, probability 0, space 0, times 0 [ 248.612041][ T9137] CPU: 0 UID: 0 PID: 9137 Comm: syz.8.929 Not tainted 6.15.0-rc2-syzkaller-00657-g0e0a7e3719bc #0 PREEMPT(full) [ 248.612076][ T9137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 248.612089][ T9137] Call Trace: [ 248.612104][ T9137] [ 248.612113][ T9137] dump_stack_lvl+0x241/0x360 [ 248.612151][ T9137] ? __pfx_dump_stack_lvl+0x10/0x10 [ 248.612181][ T9137] ? __pfx__printk+0x10/0x10 [ 248.612222][ T9137] should_fail_ex+0x424/0x570 [ 248.612251][ T9137] should_failslab+0xac/0x100 [ 248.612273][ T9137] __kmalloc_cache_noprof+0x73/0x370 [ 248.612294][ T9137] ? sctp_add_bind_addr+0x89/0x3a0 [ 248.612321][ T9137] sctp_add_bind_addr+0x89/0x3a0 [ 248.612347][ T9137] sctp_copy_local_addr_list+0x313/0x500 [ 248.612371][ T9137] ? sctp_copy_local_addr_list+0xad/0x500 [ 248.612395][ T9137] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 248.612419][ T9137] ? sctp_get_af_specific+0x1a/0x80 [ 248.612439][ T9137] ? sctp_copy_one_addr+0x94/0x360 [ 248.612467][ T9137] sctp_bind_addr_copy+0xad/0x3b0 [ 248.612488][ T9137] ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190 [ 248.612523][ T9137] sctp_connect_new_asoc+0x337/0x700 [ 248.612555][ T9137] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 248.612584][ T9137] ? sctp_endpoint_lookup_assoc+0x7c/0x250 [ 248.612616][ T9137] ? sctp_endpoint_lookup_assoc+0x7c/0x250 [ 248.612642][ T9137] ? sctp_endpoint_lookup_assoc+0x217/0x250 [ 248.612667][ T9137] ? sctp_endpoint_lookup_assoc+0x7c/0x250 [ 248.612697][ T9137] __sctp_connect+0x6ab/0xe60 [ 248.612735][ T9137] ? __local_bh_enable_ip+0x168/0x200 [ 248.612765][ T9137] ? __pfx___sctp_connect+0x10/0x10 [ 248.612789][ T9137] ? sctp_inet_connect+0xa7/0x1f0 [ 248.612812][ T9137] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 248.612841][ T9137] ? do_raw_spin_unlock+0x13c/0x8b0 [ 248.612875][ T9137] sctp_inet_connect+0x149/0x1f0 [ 248.612902][ T9137] __sys_connect+0x28c/0x2d0 [ 248.612923][ T9137] ? __fget_files+0x2a/0x420 [ 248.612942][ T9137] ? __pfx___sys_connect+0x10/0x10 [ 248.612998][ T9137] __x64_sys_connect+0x7a/0x90 [ 248.613019][ T9137] do_syscall_64+0xf3/0x210 [ 248.613038][ T9137] ? clear_bhb_loop+0x45/0xa0 [ 248.613062][ T9137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.613080][ T9137] RIP: 0033:0x7fc01018e169 [ 248.613097][ T9137] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.613121][ T9137] RSP: 002b:00007fc010f38038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 248.613142][ T9137] RAX: ffffffffffffffda RBX: 00007fc0103b5fa0 RCX: 00007fc01018e169 [ 248.613156][ T9137] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000003 [ 248.613169][ T9137] RBP: 00007fc010f38090 R08: 0000000000000000 R09: 0000000000000000 [ 248.613180][ T9137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 248.613192][ T9137] R13: 0000000000000000 R14: 00007fc0103b5fa0 R15: 00007ffe162c04c8 [ 248.613222][ T9137] [ 249.287104][ T9151] netlink: 28 bytes leftover after parsing attributes in process `syz.8.932'. [ 249.398126][ T9147] netlink: 12 bytes leftover after parsing attributes in process `syz.6.930'. [ 249.489518][ T9147] xt_hashlimit: size too large, truncated to 1048576 [ 249.912100][ T9157] netlink: 20 bytes leftover after parsing attributes in process `syz.9.933'. [ 250.038643][ T5212] udevd[5212]: worker [5851] terminated by signal 33 (Unknown signal 33) [ 250.895539][ T9187] netlink: 8 bytes leftover after parsing attributes in process `syz.8.937'. [ 251.185823][ T9187] netlink: 88 bytes leftover after parsing attributes in process `syz.8.937'. [ 251.783466][ T9201] netlink: 28 bytes leftover after parsing attributes in process `syz.8.940'. [ 251.841320][ T9201] netlink: 28 bytes leftover after parsing attributes in process `syz.8.940'. [ 251.869956][ T9201] bridge0: entered promiscuous mode [ 251.879115][ T9201] batadv_slave_1: entered promiscuous mode [ 251.888278][ T9201] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 251.942776][ T9201] Cannot create hsr debugfs directory [ 252.358402][ T9209] netlink: 348 bytes leftover after parsing attributes in process `syz.9.942'. [ 253.062690][ T9222] netlink: 20 bytes leftover after parsing attributes in process `syz.6.950'. [ 253.137440][ T9224] netlink: 8 bytes leftover after parsing attributes in process `syz.6.950'. [ 253.312191][ T9228] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 253.418259][ T9228] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 253.545014][ T9228] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 254.277429][ T9248] netlink: 'syz.5.958': attribute type 8 has an invalid length. [ 254.710427][ T9256] __nla_validate_parse: 1 callbacks suppressed [ 254.710474][ T9256] netlink: 64 bytes leftover after parsing attributes in process `syz.8.961'. [ 254.784547][ T9256] netlink: 64 bytes leftover after parsing attributes in process `syz.8.961'. [ 254.967559][ T9261] netlink: 52 bytes leftover after parsing attributes in process `syz.9.964'. [ 255.040920][ T9261] netlink: 14 bytes leftover after parsing attributes in process `syz.9.964'. [ 255.097982][ T9261] netlink: 52 bytes leftover after parsing attributes in process `syz.9.964'. [ 255.115644][ T9261] netlink: 14 bytes leftover after parsing attributes in process `syz.9.964'. [ 255.169315][ T9261] netlink: 52 bytes leftover after parsing attributes in process `syz.9.964'. [ 255.224261][ T9267] netlink: 'syz.5.967': attribute type 1 has an invalid length. [ 255.321416][ T9266] syzkaller1: entered promiscuous mode [ 255.329615][ T9266] syzkaller1: entered allmulticast mode [ 255.575962][ T9269] 8021q: adding VLAN 0 to HW filter on device bond3 [ 255.606872][ T9269] bond2: (slave bond3): making interface the new active one [ 255.629073][ T9269] bond2: (slave bond3): Enslaving as an active interface with an up link [ 255.662223][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.669815][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.238585][ T9286] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 256.355070][ T9286] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 256.490343][ T9286] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 257.528646][ T9302] FAULT_INJECTION: forcing a failure. [ 257.528646][ T9302] name failslab, interval 1, probability 0, space 0, times 0 [ 257.596482][ T9302] CPU: 0 UID: 0 PID: 9302 Comm: syz.6.978 Not tainted 6.15.0-rc2-syzkaller-00657-g0e0a7e3719bc #0 PREEMPT(full) [ 257.596517][ T9302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 257.596530][ T9302] Call Trace: [ 257.596538][ T9302] [ 257.596547][ T9302] dump_stack_lvl+0x241/0x360 [ 257.596585][ T9302] ? __pfx_dump_stack_lvl+0x10/0x10 [ 257.596616][ T9302] ? __pfx__printk+0x10/0x10 [ 257.596672][ T9302] should_fail_ex+0x424/0x570 [ 257.596700][ T9302] should_failslab+0xac/0x100 [ 257.596724][ T9302] kmem_cache_alloc_noprof+0x78/0x390 [ 257.596744][ T9302] ? skb_clone+0x20c/0x390 [ 257.596775][ T9302] skb_clone+0x20c/0x390 [ 257.596804][ T9302] __netlink_deliver_tap+0x3c4/0x7f0 [ 257.596848][ T9302] ? netlink_deliver_tap+0x2e/0x1b0 [ 257.596877][ T9302] netlink_deliver_tap+0x19d/0x1b0 [ 257.596909][ T9302] netlink_unicast+0x7c6/0x9a0 [ 257.596948][ T9302] ? __pfx_netlink_unicast+0x10/0x10 [ 257.596979][ T9302] ? skb_put+0x114/0x1f0 [ 257.597006][ T9302] netlink_sendmsg+0x8c3/0xcd0 [ 257.597051][ T9302] ? __pfx_netlink_sendmsg+0x10/0x10 [ 257.597087][ T9302] ? aa_sock_msg_perm+0x91/0x160 [ 257.597119][ T9302] ? __pfx_netlink_sendmsg+0x10/0x10 [ 257.597148][ T9302] __sock_sendmsg+0x221/0x270 [ 257.597192][ T9302] ____sys_sendmsg+0x523/0x860 [ 257.597226][ T9302] ? __pfx_____sys_sendmsg+0x10/0x10 [ 257.597248][ T9302] ? __fget_files+0x2a/0x420 [ 257.597270][ T9302] ? __fget_files+0x2a/0x420 [ 257.597300][ T9302] __sys_sendmsg+0x271/0x360 [ 257.597330][ T9302] ? __pfx___sys_sendmsg+0x10/0x10 [ 257.597414][ T9302] ? do_syscall_64+0xb6/0x210 [ 257.597450][ T9302] do_syscall_64+0xf3/0x210 [ 257.597469][ T9302] ? clear_bhb_loop+0x45/0xa0 [ 257.597492][ T9302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.597511][ T9302] RIP: 0033:0x7f918f58e169 [ 257.597527][ T9302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 257.597544][ T9302] RSP: 002b:00007f91903fc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 257.597564][ T9302] RAX: ffffffffffffffda RBX: 00007f918f7b5fa0 RCX: 00007f918f58e169 [ 257.597578][ T9302] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 257.597590][ T9302] RBP: 00007f91903fc090 R08: 0000000000000000 R09: 0000000000000000 [ 257.597603][ T9302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 257.597615][ T9302] R13: 0000000000000000 R14: 00007f918f7b5fa0 R15: 00007ffff5d3b508 [ 257.597645][ T9302] [ 258.485693][ T9316] netlink: 8 bytes leftover after parsing attributes in process `syz.6.982'. [ 258.791820][ T9326] x_tables: ip6_tables: ipcomp match: only valid for protocol 108 [ 259.969657][ T9340] netlink: 'syz.5.990': attribute type 1 has an invalid length. [ 260.113696][ T9345] FAULT_INJECTION: forcing a failure. [ 260.113696][ T9345] name failslab, interval 1, probability 0, space 0, times 0 [ 260.133100][ T9345] CPU: 0 UID: 0 PID: 9345 Comm: syz.8.991 Not tainted 6.15.0-rc2-syzkaller-00657-g0e0a7e3719bc #0 PREEMPT(full) [ 260.133136][ T9345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 260.133150][ T9345] Call Trace: [ 260.133158][ T9345] [ 260.133167][ T9345] dump_stack_lvl+0x241/0x360 [ 260.133205][ T9345] ? __pfx_dump_stack_lvl+0x10/0x10 [ 260.133233][ T9345] ? __pfx__printk+0x10/0x10 [ 260.133285][ T9345] should_fail_ex+0x424/0x570 [ 260.133317][ T9345] should_failslab+0xac/0x100 [ 260.133339][ T9345] __kmalloc_cache_noprof+0x73/0x370 [ 260.133361][ T9345] ? sctp_add_bind_addr+0x89/0x3a0 [ 260.133388][ T9345] sctp_add_bind_addr+0x89/0x3a0 [ 260.133416][ T9345] sctp_copy_local_addr_list+0x313/0x500 [ 260.133442][ T9345] ? sctp_copy_local_addr_list+0xad/0x500 [ 260.133465][ T9345] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 260.133486][ T9345] ? sctp_association_new+0x184a/0x2540 [ 260.133516][ T9345] ? sctp_v6_is_any+0x60/0x70 [ 260.133543][ T9345] ? sctp_copy_one_addr+0x94/0x360 [ 260.133570][ T9345] sctp_bind_addr_copy+0xad/0x3b0 [ 260.133593][ T9345] ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190 [ 260.133630][ T9345] sctp_connect_new_asoc+0x337/0x700 [ 260.133662][ T9345] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 260.133692][ T9345] ? __pfx_sctp_hash_key+0x10/0x10 [ 260.133723][ T9345] ? sctp_endpoint_lookup_assoc+0x189/0x250 [ 260.133761][ T9345] __sctp_connect+0x6ab/0xe60 [ 260.133800][ T9345] ? __local_bh_enable_ip+0x168/0x200 [ 260.133831][ T9345] ? __pfx___sctp_connect+0x10/0x10 [ 260.133857][ T9345] ? sctp_inet_connect+0xa7/0x1f0 [ 260.133880][ T9345] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 260.133911][ T9345] ? do_raw_spin_unlock+0x13c/0x8b0 [ 260.133946][ T9345] sctp_inet_connect+0x149/0x1f0 [ 260.133974][ T9345] __sys_connect+0x28c/0x2d0 [ 260.133996][ T9345] ? __fget_files+0x2a/0x420 [ 260.134016][ T9345] ? __pfx___sys_connect+0x10/0x10 [ 260.134066][ T9345] __x64_sys_connect+0x7a/0x90 [ 260.134088][ T9345] do_syscall_64+0xf3/0x210 [ 260.134110][ T9345] ? clear_bhb_loop+0x45/0xa0 [ 260.134135][ T9345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.134156][ T9345] RIP: 0033:0x7fc01018e169 [ 260.134175][ T9345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 260.134193][ T9345] RSP: 002b:00007fc010f38038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 260.134215][ T9345] RAX: ffffffffffffffda RBX: 00007fc0103b5fa0 RCX: 00007fc01018e169 [ 260.134231][ T9345] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000003 [ 260.134250][ T9345] RBP: 00007fc010f38090 R08: 0000000000000000 R09: 0000000000000000 [ 260.134263][ T9345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 260.134275][ T9345] R13: 0000000000000000 R14: 00007fc0103b5fa0 R15: 00007ffe162c04c8 [ 260.134309][ T9345] [ 260.847617][ T5842] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 260.863910][ T5842] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 260.876672][ T5842] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 260.904111][ T9340] 8021q: adding VLAN 0 to HW filter on device bond4 [ 260.913850][ T5842] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 260.928080][ T5842] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 261.014186][ T9354] netlink: 52 bytes leftover after parsing attributes in process `syz.8.993'. [ 261.110774][ T9354] netlink: 14 bytes leftover after parsing attributes in process `syz.8.993'. [ 261.195726][ T9354] netlink: 52 bytes leftover after parsing attributes in process `syz.8.993'. [ 261.326700][ T9354] netlink: 14 bytes leftover after parsing attributes in process `syz.8.993'. [ 261.395325][ T9354] netlink: 52 bytes leftover after parsing attributes in process `syz.8.993'. [ 261.532038][ T9314] batman_adv: batadv0: Adding interface: dummy0 [ 261.549143][ T9314] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.607162][ T9314] batman_adv: batadv0: Interface activated: dummy0 [ 262.093937][ T9367] netlink: 1672 bytes leftover after parsing attributes in process `syz.9.997'. [ 262.129659][ T9367] netlink: 1672 bytes leftover after parsing attributes in process `syz.9.997'. [ 262.445369][ T9372] netlink: 8 bytes leftover after parsing attributes in process `syz.9.998'. [ 262.687488][ T9374] netlink: 'syz.6.999': attribute type 8 has an invalid length. [ 262.853552][ T5842] Bluetooth: hci4: command 0x0406 tx timeout [ 262.972073][ T9348] chnl_net:caif_netlink_parms(): no params data found [ 263.009577][ T8566] Bluetooth: hci10: command tx timeout [ 263.188615][ T9385] Bluetooth: MGMT ver 1.23 [ 263.468512][ T9391] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1004'. [ 263.547033][ T9377] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 263.922453][ T9397] bond2: (slave bond3): Releasing backup interface [ 263.982515][ T9348] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.998130][ T9348] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.012203][ T9348] bridge_slave_0: entered allmulticast mode [ 264.032867][ T9348] bridge_slave_0: entered promiscuous mode [ 264.107670][ T9348] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.129872][ T9348] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.156320][ T9348] bridge_slave_1: entered allmulticast mode [ 264.199998][ T9348] bridge_slave_1: entered promiscuous mode [ 264.532790][ T9348] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.622202][ T9348] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.665540][ T9416] netlink: 'syz.5.1011': attribute type 1 has an invalid length. [ 264.941255][ T9422] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1013'. [ 265.095453][ T8566] Bluetooth: hci10: command tx timeout [ 265.242927][ T9416] 8021q: adding VLAN 0 to HW filter on device bond5 [ 265.542009][ T9348] team0: Port device team_slave_0 added [ 265.675417][ T9348] team0: Port device team_slave_1 added [ 266.064475][ T9348] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 266.093836][ T9348] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.181105][ T9348] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 266.317870][ T9449] netlink: 'syz.9.1019': attribute type 11 has an invalid length. [ 266.328876][ T9449] __nla_validate_parse: 1 callbacks suppressed [ 266.328893][ T9449] netlink: 224 bytes leftover after parsing attributes in process `syz.9.1019'. [ 266.382605][ T9348] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 266.391991][ T9348] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.425186][ T9348] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 266.689823][ T9444] syz.9.1019 (9444) used greatest stack depth: 18232 bytes left [ 266.805737][ T9448] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 266.819219][ T9348] hsr_slave_0: entered promiscuous mode [ 266.844223][ T9348] hsr_slave_1: entered promiscuous mode [ 266.874432][ T9348] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 266.905323][ T9348] Cannot create hsr debugfs directory [ 267.166044][ T5842] Bluetooth: hci10: command tx timeout [ 267.307079][ T9462] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1024'. [ 267.350086][ T9462] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1024'. [ 267.806775][ T6840] wlan1: Trigger new scan to find an IBSS to join [ 267.971571][ T9469] netlink: 'syz.5.1027': attribute type 23 has an invalid length. [ 267.983693][ T9348] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.687876][ T9348] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.896413][ T9469] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 269.246141][ T8566] Bluetooth: hci10: command tx timeout [ 269.265054][ T9348] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.577304][ T9348] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.734170][ T9482] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1030'. [ 270.344113][ T9492] bond0: entered promiscuous mode [ 270.350329][ T9492] bond_slave_0: entered promiscuous mode [ 270.357481][ T9492] bond_slave_1: entered promiscuous mode [ 270.366246][ T9492] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 270.388166][ T9492] bond0: left promiscuous mode [ 270.409608][ T9492] bond_slave_0: left promiscuous mode [ 270.426951][ T9492] bond_slave_1: left promiscuous mode [ 270.968219][ T9348] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 271.032049][ T9348] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 271.146309][ T9348] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 271.222270][ T9348] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 271.325470][ T8566] Bluetooth: hci10: command tx timeout [ 271.526245][ T9497] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 272.159173][ T9348] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.348792][ T9348] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.421039][ T6836] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.429612][ T6836] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.550261][ T6836] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.558637][ T6836] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.577647][ T9513] netlink: 'syz.8.1043': attribute type 1 has an invalid length. [ 272.765611][ T1322] wlan1: Trigger new scan to find an IBSS to join [ 273.011262][ T9515] 8021q: adding VLAN 0 to HW filter on device bond2 [ 273.025997][ T9515] bond1: (slave bond2): making interface the new active one [ 273.035927][ T9515] bond1: (slave bond2): Enslaving as an active interface with an up link [ 273.616578][ T9533] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1048'. [ 273.629008][ T9530] xt_l2tp: v2 tid > 0xffff: 4294967295 [ 273.744546][ T6840] wlan1: Creating new IBSS network, BSSID 56:4a:74:71:b8:b2 [ 274.356434][ T9543] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 274.424761][ T9544] batadv0: entered promiscuous mode [ 274.441165][ T9544] vlan2: entered promiscuous mode [ 274.481638][ T9543] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 274.585506][ T9548] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 274.783034][ T9348] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 275.017183][ T9552] netlink: 'syz.8.1055': attribute type 15 has an invalid length. [ 275.062950][ T9552] netlink: 'syz.8.1055': attribute type 3 has an invalid length. [ 275.105440][ T9552] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1055'. [ 275.203708][ T9348] veth0_vlan: entered promiscuous mode [ 275.288609][ T9348] veth1_vlan: entered promiscuous mode [ 275.508789][ T9348] veth0_macvtap: entered promiscuous mode [ 275.564106][ T9348] veth1_macvtap: entered promiscuous mode [ 275.708626][ T9348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.759808][ T9348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.793974][ T9348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.866997][ T145] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 275.881615][ T9348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.935285][ T9348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.988250][ T9348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.005846][ T9348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.058569][ T9348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.115708][ T9348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.157654][ T9348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.187359][ T9348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.200929][ T9348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.215240][ T9348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.229157][ T9348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.242135][ T9348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.255749][ T9348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.273041][ T9348] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 276.411994][ T9348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.507746][ T9348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.566417][ T9348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.625190][ T9348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.667371][ T9348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.682752][ T9348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.698575][ T9348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.714245][ T9348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.730130][ T9348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.745004][ T9348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.759055][ T9348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.827172][ T9348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.868794][ T9348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.905194][ T9348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.952504][ T9348] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 277.018982][ T9348] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.045544][ T9348] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.073037][ T9348] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.101851][ T9348] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.797811][ T6832] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.845375][ T6832] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.208684][ T6833] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.248546][ T6833] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.515782][ T9621] batadv0: entered promiscuous mode [ 279.560295][ T9621] vlan0: entered promiscuous mode [ 279.934695][ T9628] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1079'. [ 280.078850][ T9628] netlink: 'syz.2.1079': attribute type 1 has an invalid length. [ 280.614123][ T9635] netlink: 'syz.2.1081': attribute type 1 has an invalid length. [ 280.957312][ T9644] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1084'. [ 281.489561][ T10] IPVS: starting estimator thread 0... [ 281.585226][ T9655] bond0: entered promiscuous mode [ 281.601740][ T9653] IPVS: using max 25 ests per chain, 60000 per kthread [ 281.616397][ T9655] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 282.556082][ T9655] bond0: left promiscuous mode [ 282.672613][ T9660] team_slave_0: entered promiscuous mode [ 282.679458][ T9660] team_slave_1: entered promiscuous mode [ 282.691239][ T9660] vlan0: entered promiscuous mode [ 282.705603][ T9660] team0: entered promiscuous mode [ 283.486669][ T9679] netlink: 'syz.9.1095': attribute type 39 has an invalid length. [ 283.497035][ T9678] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 283.563217][ T9681] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1097'. [ 283.633769][ T9678] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 283.956633][ T9678] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 284.223988][ T9685] netlink: 'syz.8.1098': attribute type 1 has an invalid length. [ 284.508071][ T9687] 8021q: adding VLAN 0 to HW filter on device bond4 [ 284.520115][ T9687] bond3: (slave bond4): making interface the new active one [ 284.530706][ T9687] bond3: (slave bond4): Enslaving as an active interface with an up link [ 286.068892][ T9718] netlink: 'syz.9.1108': attribute type 1 has an invalid length. [ 286.298803][ T9723] netlink: 'syz.8.1110': attribute type 8 has an invalid length. [ 286.584214][ T9719] 8021q: adding VLAN 0 to HW filter on device bond2 [ 286.648273][ T9719] bond1: (slave bond2): making interface the new active one [ 286.678909][ T9719] bond1: (slave bond2): Enslaving as an active interface with an up link [ 289.277947][ T9761] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 289.452658][ T9762] pim6reg: entered allmulticast mode [ 289.477788][ T9763] pim6reg: left allmulticast mode [ 289.504736][ T9766] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1121'. [ 289.814827][ T9766] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.824101][ T9766] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.711363][ T9784] netdevsim netdevsim9 netdevsim0: entered promiscuous mode [ 291.468514][ T9793] team_slave_0: entered promiscuous mode [ 291.476512][ T9793] team_slave_1: entered promiscuous mode [ 291.556231][ T9793] vlan2: entered promiscuous mode [ 291.595296][ T9793] team0: entered promiscuous mode [ 291.702012][ T9796] netlink: 'syz.9.1131': attribute type 1 has an invalid length. [ 291.833563][ T9802] netlink: 'syz.2.1133': attribute type 23 has an invalid length. [ 292.406665][ T9796] 8021q: adding VLAN 0 to HW filter on device bond3 [ 292.653959][ T9811] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 292.921758][ T9818] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1135'. [ 293.121922][ T9821] vlan2: entered promiscuous mode [ 293.605874][ T9823] batadv0: entered promiscuous mode [ 293.658335][ T9823] batadv0: left promiscuous mode [ 294.508605][ T9831] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1140'. [ 294.693623][ T9840] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1142'. [ 294.757600][ T9839] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1142'. [ 295.159338][ T9831] team_slave_0: left promiscuous mode [ 295.233186][ T9831] team0 (unregistering): Port device team_slave_0 removed [ 295.242371][ T9831] team_slave_1: left promiscuous mode [ 295.293697][ T9831] team0 (unregistering): Port device team_slave_1 removed [ 295.500509][ T9838] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 296.530229][ T30] audit: type=1800 audit(1745397533.355:4): pid=9857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1147" name="1" dev="tmpfs" ino=450 res=0 errno=0 [ 296.791711][ T9861] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1149'. [ 296.828500][ T9861] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1149'. [ 296.917325][ T9861] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1149'. [ 296.986888][ T9861] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1149'. [ 297.065069][ T9861] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1149'. [ 297.634176][ T9875] bond0: entered promiscuous mode [ 297.696419][ T9875] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 297.756968][ T9875] bond0: left promiscuous mode [ 298.039015][ T9879] geneve2: entered promiscuous mode [ 298.084113][ T9883] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1156'. [ 298.555975][ T9887] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 299.222289][ T9901] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 301.726529][ T9929] sctp: [Deprecated]: syz.2.1173 (pid 9929) Use of int in maxseg socket option. [ 301.726529][ T9929] Use struct sctp_assoc_value instead [ 302.604718][ T9909] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 303.019112][ T9948] netlink: 'syz.8.1177': attribute type 1 has an invalid length. [ 303.805741][ T5842] Bluetooth: hci5: command 0x0406 tx timeout [ 303.921553][ T9948] 8021q: adding VLAN 0 to HW filter on device bond5 [ 304.024287][ T9971] FAULT_INJECTION: forcing a failure. [ 304.024287][ T9971] name failslab, interval 1, probability 0, space 0, times 0 [ 304.060980][ T9971] CPU: 0 UID: 0 PID: 9971 Comm: syz.2.1183 Not tainted 6.15.0-rc2-syzkaller-00657-g0e0a7e3719bc #0 PREEMPT(full) [ 304.061016][ T9971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 304.061040][ T9971] Call Trace: [ 304.061055][ T9971] [ 304.061064][ T9971] dump_stack_lvl+0x241/0x360 [ 304.061106][ T9971] ? __pfx_dump_stack_lvl+0x10/0x10 [ 304.061135][ T9971] ? __pfx__printk+0x10/0x10 [ 304.061178][ T9971] should_fail_ex+0x424/0x570 [ 304.061208][ T9971] should_failslab+0xac/0x100 [ 304.061232][ T9971] __kmalloc_cache_noprof+0x73/0x370 [ 304.061252][ T9971] ? sctp_add_bind_addr+0x89/0x3a0 [ 304.061281][ T9971] sctp_add_bind_addr+0x89/0x3a0 [ 304.061308][ T9971] sctp_copy_local_addr_list+0x313/0x500 [ 304.061335][ T9971] ? sctp_copy_local_addr_list+0xad/0x500 [ 304.061358][ T9971] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 304.061385][ T9971] ? sctp_v6_is_any+0x60/0x70 [ 304.061410][ T9971] ? sctp_copy_one_addr+0x94/0x360 [ 304.061437][ T9971] sctp_bind_addr_copy+0xad/0x3b0 [ 304.061461][ T9971] ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190 [ 304.061497][ T9971] sctp_connect_new_asoc+0x337/0x700 [ 304.061529][ T9971] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 304.061559][ T9971] ? sctp_endpoint_lookup_assoc+0x7c/0x250 [ 304.061591][ T9971] ? sctp_endpoint_lookup_assoc+0x7c/0x250 [ 304.061617][ T9971] ? sctp_endpoint_lookup_assoc+0x217/0x250 [ 304.061643][ T9971] ? sctp_endpoint_lookup_assoc+0x7c/0x250 [ 304.061675][ T9971] __sctp_connect+0x6ab/0xe60 [ 304.061714][ T9971] ? __local_bh_enable_ip+0x168/0x200 [ 304.061745][ T9971] ? __pfx___sctp_connect+0x10/0x10 [ 304.061770][ T9971] ? sctp_inet_connect+0xa7/0x1f0 [ 304.061792][ T9971] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 304.061824][ T9971] ? do_raw_spin_unlock+0x13c/0x8b0 [ 304.061858][ T9971] sctp_inet_connect+0x149/0x1f0 [ 304.061887][ T9971] __sys_connect+0x28c/0x2d0 [ 304.061908][ T9971] ? __fget_files+0x2a/0x420 [ 304.061927][ T9971] ? __pfx___sys_connect+0x10/0x10 [ 304.061976][ T9971] __x64_sys_connect+0x7a/0x90 [ 304.061999][ T9971] do_syscall_64+0xf3/0x210 [ 304.062020][ T9971] ? clear_bhb_loop+0x45/0xa0 [ 304.062046][ T9971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.062073][ T9971] RIP: 0033:0x7fe748f8e169 [ 304.062093][ T9971] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 304.062111][ T9971] RSP: 002b:00007fe749e07038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 304.062134][ T9971] RAX: ffffffffffffffda RBX: 00007fe7491b5fa0 RCX: 00007fe748f8e169 [ 304.062151][ T9971] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000003 [ 304.062164][ T9971] RBP: 00007fe749e07090 R08: 0000000000000000 R09: 0000000000000000 [ 304.062177][ T9971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 304.062190][ T9971] R13: 0000000000000000 R14: 00007fe7491b5fa0 R15: 00007ffdc67a0fd8 [ 304.062224][ T9971] [ 304.855627][ T9973] sctp: [Deprecated]: syz.2.1184 (pid 9973) Use of int in max_burst socket option. [ 304.855627][ T9973] Use struct sctp_assoc_value instead [ 305.513747][ T9985] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1188'. [ 305.676624][ T9993] netlink: 'syz.9.1190': attribute type 1 has an invalid length. [ 305.749262][ T9995] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1190'. [ 306.258636][ T145] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 306.338655][T10001] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1192'. [ 306.725713][T10008] netlink: 'syz.9.1194': attribute type 1 has an invalid length. [ 307.002036][ T36] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 307.487570][ T31] INFO: task syz.3.501:7679 blocked for more than 143 seconds. [ 307.524944][ T31] Not tainted 6.15.0-rc2-syzkaller-00657-g0e0a7e3719bc #0 [ 307.589021][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 307.639972][ T31] task:syz.3.501 state:D stack:27304 pid:7679 tgid:7678 ppid:5846 task_flags:0x400140 flags:0x00000004 [ 307.689572][ T31] Call Trace: [ 307.693917][ T31] [ 307.725720][ T31] __schedule+0x1b88/0x5240 [ 307.731624][ T31] ? schedule+0x163/0x360 [ 307.747382][ T31] ? __pfx___schedule+0x10/0x10 [ 307.753721][ T31] ? schedule+0x90/0x360 [ 307.779873][ T31] ? schedule+0x90/0x360 [ 307.795259][ T31] schedule+0x163/0x360 [ 307.815182][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 307.835478][ T31] schedule_preempt_disabled+0x13/0x30 [ 307.855037][ T31] __mutex_lock+0x805/0x10c0 [ 307.865286][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 307.871493][ T31] ? nfsd_nl_threads_get_doit+0x1c7/0x7e0 [ 307.915651][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 307.949239][ T31] ? genlmsg_put+0x145/0x2e0 [ 307.963980][ T31] nfsd_nl_threads_get_doit+0x1c7/0x7e0 [ 307.983789][ T31] ? irqentry_exit+0x63/0x90 [ 308.000387][ T31] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 308.033886][ T31] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 308.048182][ T31] genl_rcv_msg+0xb38/0xf00 [ 308.054147][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 308.061643][ T31] ? stack_trace_save+0x11a/0x1d0 [ 308.070777][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 308.082320][ T31] ? stack_depot_save_flags+0x44/0x940 [ 308.095294][ T31] ? __pfx_stack_trace_save+0x1/0x10 [ 308.102215][ T31] ? __lock_acquire+0xad5/0xd80 [ 308.139116][ T31] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 308.183733][ T31] netlink_rcv_skb+0x208/0x480 [ 308.200614][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 308.215452][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 308.237664][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 308.255035][ T31] genl_rcv+0x28/0x40 [ 308.260338][ T31] netlink_unicast+0x7f8/0x9a0 [ 308.284585][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 308.305201][ T31] ? skb_put+0x114/0x1f0 [ 308.310779][ T31] netlink_sendmsg+0x8c3/0xcd0 [ 308.317914][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 308.325015][ T31] ? aa_sock_msg_perm+0x91/0x160 [ 308.333961][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 308.340739][ T31] __sock_sendmsg+0x221/0x270 [ 308.347964][ T31] ____sys_sendmsg+0x523/0x860 [ 308.354054][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 308.371186][ T31] ? __fget_files+0x2a/0x420 [ 308.385217][ T31] ? __fget_files+0x2a/0x420 [ 308.405594][ T31] __sys_sendmsg+0x271/0x360 [ 308.411589][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 308.435409][ T31] ? do_syscall_64+0xb6/0x210 [ 308.451914][ T31] do_syscall_64+0xf3/0x210 [ 308.462031][ T31] ? clear_bhb_loop+0x45/0xa0 [ 308.484356][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.492576][ T31] RIP: 0033:0x7f919f58e169 [ 308.503600][ T31] RSP: 002b:00007f91a0470038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 308.545330][ T31] RAX: ffffffffffffffda RBX: 00007f919f7b5fa0 RCX: 00007f919f58e169 [ 308.575185][ T31] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 308.606154][ T31] RBP: 00007f919f610a68 R08: 0000000000000000 R09: 0000000000000000 [ 308.624799][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 308.675658][ T31] R13: 0000000000000000 R14: 00007f919f7b5fa0 R15: 00007ffcb628dfa8 [ 308.715572][ T31] [ 308.719816][ T31] [ 308.719816][ T31] Showing all locks held in the system: [ 308.825772][ T31] 3 locks held by kworker/0:1/10: [ 308.832160][ T31] #0: ffff88801b080d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 308.897613][T10008] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 308.918546][ T31] #1: ffff8880b8623b08 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x41f/0x7a0 [ 308.948273][ T31] #2: ffff8880b8625558 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x24c/0x10f0 [ 308.960685][ T31] 1 lock held by khungtaskd/31: [ 308.968215][ T31] #0: ffffffff8ed3df20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x30/0x180 [ 308.985031][ T31] 1 lock held by dhcpcd/5506: [ 309.008786][ T31] #0: ffffffff900fe988 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_deladdr+0x1a3/0x7d0 [ 309.021033][ T31] 2 locks held by getty/5598: [ 309.027003][ T31] #0: ffff88803609a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 309.039296][ T31] #1: ffffc90002fee2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x5bb/0x1700 [ 309.053943][ T31] 2 locks held by syz.2.228/6682: [ 309.061158][ T31] #0: ffffffff90163650 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 309.071942][ T31] #1: ffffffff8f0139c8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1870 [ 309.087537][ T31] 3 locks held by kworker/u8:24/6839: [ 309.094920][ T31] 3 locks held by kworker/u8:25/6840: [ 309.103810][ T31] 2 locks held by syz.3.501/7679: [ 309.110521][ T31] #0: ffffffff90163650 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 309.120970][ T31] #1: ffffffff8f0139c8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_get_doit+0x1c7/0x7e0 [ 309.134041][ T31] 2 locks held by syz.0.666/8246: [ 309.140513][ T31] #0: ffffffff90163650 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 309.152413][ T31] #1: ffffffff8f0139c8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1870 [ 309.167446][ T31] 2 locks held by syz.1.718/8416: [ 309.174557][ T31] #0: ffffffff90163650 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 309.185523][ T31] #1: ffffffff8f0139c8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1870 [ 309.199925][ T31] 2 locks held by syz.4.785/8622: [ 309.207918][ T31] #0: ffffffff90163650 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 309.219282][ T31] #1: ffffffff8f0139c8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1870 [ 309.233325][ T31] 2 locks held by syz.7.910/9074: [ 309.240235][ T31] #0: ffffffff90163650 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 309.254475][ T31] #1: ffffffff8f0139c8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1870 [ 309.267694][ T31] 2 locks held by syz.9.1194/10005: [ 309.274396][ T31] #0: ffffffff900f1e50 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x328/0x570 [ 309.287861][ T31] #1: ffffffff900fe988 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2a7/0x810 [ 309.300741][ T31] 1 lock held by syz.9.1194/10019: [ 309.309526][ T31] #0: ffffffff900fe988 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xd68/0x1fe0 [ 309.323262][ T31] 2 locks held by syz.6.1197/10012: [ 309.330037][ T31] #0: ffffffff90163650 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 309.340600][ T31] #1: ffffffff8ed43300 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 309.355532][ T31] 2 locks held by syz.2.1198/10017: [ 309.362965][ T31] #0: ffffffff900fe988 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3b/0x1b0 [ 309.375387][ T31] #1: ffffffff8ed43438 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x384/0x830 [ 309.390944][ T31] 1 lock held by syz.2.1198/10021: [ 309.397929][ T31] #0: ffffffff900fe988 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x34e/0x1d80 [ 309.430451][ T31] [ 309.433916][ T31] ============================================= [ 309.433916][ T31] [ 309.445163][ T31] NMI backtrace for cpu 0 [ 309.445181][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc2-syzkaller-00657-g0e0a7e3719bc #0 PREEMPT(full) [ 309.445207][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 309.445221][ T31] Call Trace: [ 309.445230][ T31] [ 309.445239][ T31] dump_stack_lvl+0x241/0x360 [ 309.445277][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 309.445305][ T31] ? __pfx__printk+0x10/0x10 [ 309.445346][ T31] nmi_cpu_backtrace+0x4ab/0x4e0 [ 309.445381][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 309.445406][ T31] ? _printk+0xd5/0x120 [ 309.445442][ T31] ? __wake_up_klogd+0xcc/0x110 [ 309.445467][ T31] ? __pfx__printk+0x10/0x10 [ 309.445499][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 309.445532][ T31] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 309.445565][ T31] watchdog+0x1058/0x10a0 [ 309.445593][ T31] ? watchdog+0x1ea/0x10a0 [ 309.445625][ T31] ? __pfx_watchdog+0x10/0x10 [ 309.445650][ T31] kthread+0x7b7/0x940 [ 309.445676][ T31] ? __pfx_watchdog+0x10/0x10 [ 309.445701][ T31] ? __pfx_kthread+0x10/0x10 [ 309.445722][ T31] ? __pfx_kthread+0x10/0x10 [ 309.445744][ T31] ? __pfx_kthread+0x10/0x10 [ 309.445764][ T31] ? __pfx_kthread+0x10/0x10 [ 309.445799][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 309.445824][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 309.445853][ T31] ? __pfx_kthread+0x10/0x10 [ 309.445876][ T31] ret_from_fork+0x4b/0x80 [ 309.445894][ T31] ? __pfx_kthread+0x10/0x10 [ 309.445916][ T31] ret_from_fork_asm+0x1a/0x30 [ 309.445950][ T31] [ 309.445958][ T31] Sending NMI from CPU 0 to CPUs 1: [ 309.661202][ C1] NMI backtrace for cpu 1 [ 309.661224][ C1] CPU: 1 UID: 0 PID: 6839 Comm: kworker/u8:24 Not tainted 6.15.0-rc2-syzkaller-00657-g0e0a7e3719bc #0 PREEMPT(full) [ 309.661246][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 309.661258][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 309.661289][ C1] RIP: 0010:__lock_acquire+0x5f/0xd80 [ 309.661315][ C1] Code: 2a 94 48 39 c8 0f 84 d7 0a 00 00 41 89 d6 8b 0d 57 83 22 0d 48 c7 c2 c0 f6 2a 94 31 ff 48 39 d0 44 0f 44 c7 85 c9 44 0f 44 c1 <83> fe 01 77 0c 89 f0 49 8b 44 c7 08 48 85 c0 75 22 4c 89 ff 31 d2 [ 309.661330][ C1] RSP: 0018:ffffc9000f197308 EFLAGS: 00000002 [ 309.661344][ C1] RAX: ffffffff9a76adc0 RBX: ffffffff8ed3df20 RCX: 0000000000000001 [ 309.661356][ C1] RDX: ffffffff942af6c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 309.661367][ C1] RBP: ffff88805858da00 R08: 0000000000000000 R09: 0000000000000000 [ 309.661378][ C1] R10: ffffc9000f197560 R11: fffff52001e32eb8 R12: 0000000000000002 [ 309.661390][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: ffffffff8ed3df20 [ 309.661401][ C1] FS: 0000000000000000(0000) GS:ffff8881250aa000(0000) knlGS:0000000000000000 [ 309.661415][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 309.661426][ C1] CR2: 00005648f02b6131 CR3: 000000000eb38000 CR4: 00000000003526f0 [ 309.661442][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 309.661452][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 309.661463][ C1] Call Trace: [ 309.661469][ C1] [ 309.661482][ C1] lock_acquire+0x116/0x2f0 [ 309.661503][ C1] ? unwind_next_frame+0xb8/0x23b0 [ 309.661527][ C1] ? __unwind_start+0xf8/0x740 [ 309.661544][ C1] ? unwind_next_frame+0xb8/0x23b0 [ 309.661561][ C1] unwind_next_frame+0xd5/0x23b0 [ 309.661578][ C1] ? unwind_next_frame+0xb8/0x23b0 [ 309.661598][ C1] ? chacha_permute+0x529/0x1050 [ 309.661627][ C1] ? get_stack_info_noinstr+0x1a/0x130 [ 309.661652][ C1] ? __unwind_start+0xf8/0x740 [ 309.661676][ C1] __unwind_start+0x59a/0x740 [ 309.661707][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 309.661731][ C1] arch_stack_walk+0xe7/0x150 [ 309.661767][ C1] ? __unwind_start+0xf8/0x740 [ 309.661790][ C1] stack_trace_save+0x11a/0x1d0 [ 309.661812][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 309.661833][ C1] ? do_raw_spin_lock+0x151/0x370 [ 309.661859][ C1] kasan_save_track+0x3f/0x80 [ 309.661914][ C1] kasan_save_free_info+0x40/0x50 [ 309.661935][ C1] __kasan_slab_free+0x59/0x70 [ 309.661963][ C1] kfree+0x198/0x430 [ 309.661977][ C1] ? skb_release_data+0x6a3/0x8b0 [ 309.661998][ C1] ? lockdep_hardirqs_on+0x9d/0x150 [ 309.662027][ C1] skb_release_data+0x6a3/0x8b0 [ 309.662054][ C1] consume_skb+0x9f/0xf0 [ 309.662073][ C1] nsim_dev_trap_report_work+0x7d1/0xb50 [ 309.662109][ C1] ? process_scheduled_works+0x9cb/0x18e0 [ 309.662137][ C1] process_scheduled_works+0xac3/0x18e0 [ 309.662179][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 309.662222][ C1] ? assign_work+0x367/0x3d0 [ 309.662249][ C1] worker_thread+0x870/0xd50 [ 309.662282][ C1] ? __kthread_parkme+0x1a8/0x200 [ 309.662301][ C1] ? __pfx_worker_thread+0x10/0x10 [ 309.662327][ C1] kthread+0x7b7/0x940 [ 309.662346][ C1] ? __pfx_worker_thread+0x10/0x10 [ 309.662373][ C1] ? __pfx_kthread+0x10/0x10 [ 309.662390][ C1] ? __pfx_kthread+0x10/0x10 [ 309.662408][ C1] ? __pfx_kthread+0x10/0x10 [ 309.662426][ C1] ? __pfx_kthread+0x10/0x10 [ 309.662444][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 309.662468][ C1] ? lockdep_hardirqs_on+0x9d/0x150 [ 309.662494][ C1] ? __pfx_kthread+0x10/0x10 [ 309.662513][ C1] ret_from_fork+0x4b/0x80 [ 309.662528][ C1] ? __pfx_kthread+0x10/0x10 [ 309.662547][ C1] ret_from_fork_asm+0x1a/0x30 [ 309.662570][ C1] [ 310.110129][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 310.117042][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc2-syzkaller-00657-g0e0a7e3719bc #0 PREEMPT(full) [ 310.128880][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 310.138967][ T31] Call Trace: [ 310.142267][ T31] [ 310.145217][ T31] dump_stack_lvl+0x241/0x360 [ 310.149939][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 310.155173][ T31] ? __pfx__printk+0x10/0x10 [ 310.159811][ T31] ? vscnprintf+0x5d/0x90 [ 310.164184][ T31] panic+0x349/0x880 [ 310.168112][ T31] ? __pfx_preempt_schedule+0x10/0x10 [ 310.173528][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 310.179721][ T31] ? __pfx_panic+0x10/0x10 [ 310.184166][ T31] ? tick_nohz_tick_stopped+0x82/0xb0 [ 310.189585][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 310.194990][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 310.201271][ T31] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 310.207471][ T31] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 310.213661][ T31] watchdog+0x1097/0x10a0 [ 310.218015][ T31] ? watchdog+0x1ea/0x10a0 [ 310.222449][ T31] ? __pfx_watchdog+0x10/0x10 [ 310.227138][ T31] kthread+0x7b7/0x940 [ 310.231237][ T31] ? __pfx_watchdog+0x10/0x10 [ 310.235935][ T31] ? __pfx_kthread+0x10/0x10 [ 310.240622][ T31] ? __pfx_kthread+0x10/0x10 [ 310.245229][ T31] ? __pfx_kthread+0x10/0x10 [ 310.249860][ T31] ? __pfx_kthread+0x10/0x10 [ 310.254487][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 310.259715][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 310.264943][ T31] ? __pfx_kthread+0x10/0x10 [ 310.269552][ T31] ret_from_fork+0x4b/0x80 [ 310.273987][ T31] ? __pfx_kthread+0x10/0x10 [ 310.278606][ T31] ret_from_fork_asm+0x1a/0x30 [ 310.283411][ T31] [ 310.286814][ T31] Kernel Offset: disabled [ 310.291155][ T31] Rebooting in 86400 seconds..