last executing test programs: 4.071091369s ago: executing program 1 (id=1810): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x4000000) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)}], 0x1}, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r2, &(0x7f0000000080)={0x2, 0xe26, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) connect$inet(r2, 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_cred(r3, 0x1, 0x4d, 0x0, &(0x7f0000000040)) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000000a0605000000000000000000010000050900020073797a30000000000500010007000000080009400000000114000880100007800a00"], 0x44}, 0x1, 0x0, 0x0, 0x8040}, 0x44000) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback, 0x2}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000500)={0x0, 0x0, 0x20}, 0xc) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000080), 0x0) sendmmsg$inet6(r0, &(0x7f0000008d80)=[{{&(0x7f00000001c0)={0xa, 0x4e23, 0x9, @loopback, 0xa61}, 0x1c, &(0x7f00000039c0)=[{&(0x7f0000000300)="35ae3835d788528b9af78ad6125c5ab7020a43c69f2c7d6ab2ef804491a92bcf1c6195ed19bb9211ecdef32778f194060a4190b5845d88d6f0747a0b4696017537548474b34348b273f114044fc4ce927df7b2c7267209b0dc0ec0b273bb975abb51b8baf893577a9e2d3632eacd40210e10457fe5c2d548c41be3e8d9dab42fc923b68003eafa563044adc3c237a5f273aa9f912d87b3ed4be51924ce857787942e976d", 0xa4}, {&(0x7f0000000540)="4a2ec41cc66977a00eaa560ea441d8bbbe01973c5c51fc5ab34b8a5b3660ae19c64bee15bf8d15ec48d389f7a2e9e4fe96a084ee0b58a0bd2afa187efd2343a46ac152926aeef98753688ffd738f45ef8f5189e7621958", 0x57}, {&(0x7f00000005c0)="a445017aecdf7296ddc8f8a34b35073e6dbf2c77a4825ace81a493e5c177a9f98d3d3d1ca9ba31549264b56569ea62797416ce471cb5c8f57c3a4478db385d33775bc9ef095a8c616e13b2f02a", 0x4d}, {&(0x7f0000002780)="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", 0x1000}, {&(0x7f0000003780)="a684462984dbf3de97a4e2f590abfbffdf1405ec97969bd882dc49d4ea19d711552a2dc01db86d97601eca750d206290c43d9e46ee802f870ef8f00307cd47087c8d0cc08f6dab27a170762542e792879fdbdc19ea6cadbb976fe0951962ef557f4797db6848386c98fcd51979e05dd0970329e980d9ff3328e26638e89a433d47dddade995baf60597e3d2f352842a534d488ee51f9222f26576c06bb78546bb199d178d41b1e5461ac5ffdcc3aae0c5cd5c21c0ef8b94b95", 0xb9}, {&(0x7f0000003840)="3a341e5ad745db09ffda3c77ff39bb24d3661afc30b77906d3db53a8008315daa23990ad5e406d5d3aa14fa9187f3588b23e961c093c6eac304d9242dbfc38563ee1ee60439f45ae9631f5f2b5189881a3278ac843c109c75d55e18b19d7d8b51cc8bf9d4ef868d28337e53c4def1590885cf9d944f249ffc6399b27f1b91aefc82a8b11a1c92503302447696aae890e26dacaf259e18e2b86de52dc50cca5969f5ce4217e7aa5a38d62b513ff9d7ff5f210d56f4c371f747da0", 0xba}, {&(0x7f0000003900)="46f2db933ccae307d96bfb312e988d5b122a43f55c22bdbb66d272383ff1ff1811e9d2c56e877156d0fbe7e258d2f979001c448d900c2e9b96998512bc2185d6974f51e9e605987f002f2f0dd2ce6de3e901e8cf55f7383f51f9c58c011c5baf0d2c259bdfbf54c8c64fc37941fcb6533dee7e5c3e725b0314a1b38e4977c7ea1579fa79a0531c13ba8d1fc454", 0x8d}], 0x7, &(0x7f0000003a40)=[@rthdrdstopts={{0x18, 0x29, 0x37, {0x2b}}}], 0x18}}, {{&(0x7f0000003ac0)={0xa, 0x4e20, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c, &(0x7f0000003b40)=[{&(0x7f0000003b00)="90c9d87007d81801bba793816fea64f08405b24d9efc8a991e5ba93530b610c0bde79471769f0b130779bce98133c236", 0x30}], 0x1, &(0x7f0000003c80)=[@hopopts={{0x28, 0x29, 0x36, {0x3b, 0x1, '\x00', [@ra={0x5, 0x2, 0x4}, @pad1, @enc_lim={0x4, 0x1, 0xcc}]}}}, @hopopts_2292={{0xc8, 0x29, 0x36, {0x5c, 0x15, '\x00', [@generic={0x1, 0xa5, "20597c60b6a7864c1531103c649e4bc82762dfe36793708e362bba58f5274d33e9e654901369695a9535a77de68b76337102cd4a29ba81abb1c93246b69d9ba9e9b0090c05f74f4921ea8312933e151a3093203c6276daed3c624edd84f42950b4a0bd9c70230dc044a9f7b0a924f4d58d75cead9dd9734913453527acaff2d5d79b187e9f7e33f5f39b2261d84086f0579aa28fb162389a8b084dbfd2b417af299dd0bb55"}, @pad1, @pad1]}}}, @pktinfo={{0x24, 0x29, 0x32, {@loopback}}}, @flowinfo={{0x14}}, @hopopts_2292={{0x100, 0x29, 0x36, {0x20, 0x1c, '\x00', [@pad1, @generic={0x3, 0x61, "6f65bf26e80c139a7a6773a3decc71a996a038581416c3c9382ac435c00b7a973c41546ac3c243f89c3a95499d38d5f0a8de9583213ab47a4388acfe5a2e122cc682afdd8a6ba9e6fbfd74cf15c216aaf7f4c3c0f6c44adbf2fa90baed816789f1"}, @pad1, @calipso={0x7, 0x30, {0x1, 0xa, 0x7, 0x1, [0x8000000000000001, 0xffffffff, 0x8, 0x1, 0x7]}}, @calipso={0x7, 0x18, {0x3, 0x4, 0x5, 0x200, [0x6, 0x5]}}, @ra={0x5, 0x2, 0xe0}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @jumbo={0xc2, 0x4, 0x7ff}, @hao={0xc9, 0x10, @mcast1}, @ra={0x5, 0x2, 0x3ff}]}}}, @hopopts_2292={{0x28, 0x29, 0x36, {0xff, 0x1, '\x00', [@generic={0x0, 0xd, "ae0b8d280cf9ff44b960ac4e20"}]}}}, @flowinfo={{0x14}}, @tclass={{0x14, 0x29, 0x43, 0x400}}], 0x288}}, {{0x0, 0x0, &(0x7f0000007700)=[{&(0x7f0000003f80)="0d046c003dea2f07303f4fef7f6ada493008bd3ab79ec6a093e25ee4ede14f868a926f7236ce74d6aec83db608e69c79b8e4fa7a3b6b9b234e8e0b904bc7518bfc9c5c20c095259a448b6b1bc864f3ca6628bce8d3eb9971246d9aa82fe3e2bda48fa980261fc37e34835078c628544ebe3ff0d3c28a1603aadaf98747c30f1bb861d3777f26c5f456e32dd3dc9bd4014a67aa8d1f4d4ff3a32e050c6c9933721968f4cdc36a2779489cec04d1e655439e0c4341e3910be6e0e546b59f30095cb7788369c3f50b7a8b9d0cf205c12d957619d43b9e8fe4255397cc1f00e89441a7283b5352eb1f1b3323f411ac28a76792c96da04f637ab5b0b08cd5e9b558a16707a5d3fe98be2be6e85b78bd890eae98e35447c56222c700c0d53a12aa6fac8333e702f546f965d28315d255b17c4bb2c4519b2257d4594596b4c01e3ec4606ad27e120cbb207ec00d7a6c00b086777309b0f79a2708c87910fc15b1689c4cde7deb8521feafce322fe732e470384d8066d3a21d61b50d1c6c584121a4bed870f9f46b174b37145dd8ec264dca72eca5240ab9727c9a950a18fad7cad05f94f80eb1858019dd0ae025958efd06cf9c35b7e19e0cf94e5ddf52e56e187dd222ce7be1e9acc570d19208de418c0501217f57c529c64fe206a288b94ddd270e9406597b8333a6bff4c4d7db607a783bf4920fcfc2010dbdf3f60fade0206b9d2ba26554b802e5c49b3145faad830961f5f5124bc1ebcbe32a77218d07817b7889095fe0f155736eafef0dbad57ecc0a1cfba4c33d7b21d6214e2e2fc9f2773e498f949dad70bc29e24bb975f08ca85e2636ef2a2e45cfcff69ebe4340bbac78947cdf0aede2ca2f3908c9007c7f8cb2cd559cb7a324e79f42b09014d51334f6c2dff0d90970913863d55a226127be1e77bd6b732fd6b26e85a3686938ed9e556e880244cb4f9717df207633c23bbe9bc6bcb4f68570198a01777bcdc472e0c3732cde3708bdd07882e030caac976dcc9062bf4ea374c2c91bab8c8f25049b20ba8353ce454f8c4438ead05c95e9b12958fcb1e69ad083996222cae447faaeea545c86dd932c2987068fe3137ec776ae3c37e6a637490ecca48077fa99dd8c65186e797b0fb6f6466ec8841393c9af10efa2dd9a7e803998c247bb2cbabd130db14436f716289a3d0a454340dcf29aded112fc34ec10ea72da93d78e5fa6e549c52edcc328c603fbb6dffa3700c9ca5a1178d027cf50059130f9de031326ef3935003c9fade91d4c72c6c5626a868f7fa887308bfb6145ea7df98a1a419fec1f88493b7e80ebf7312e931dd569e97416c87738fadff3576090f01d8be52ad80a7a43a83a188420e7bc315eadb235ab2d43da0080556972dd95ef3872ec5056453c8a562a65eeabd726f498b2dcef7787c6de8d0d41c2ea214f51e4a7266648462167ae3666b3ae8d7a87b859e14dc94b1f0c3e24e98c7b86675875512cfc9a987cb718cf53fdbadf5fac5eb9879fdfaee56f34a3425e99fde8f781d2f1bbd74417491e61ce243f2d5d99231ca732f9079fc014f8f824e68e3319f32460478fc5813666b537d2d585a31f8e84116807db3fd8799daef3a92e73d76d01b97b4253647158c17c42beb5803db4b382df310b34d9c47a1acebf3f9ba0f58f55e2c5d80f3d24defcb88b2735366f7aa7e9fe135578746ac350bbeecfedd75d9015620993a88125dcaa2390695af0990a71dda55f16fb4b5eff2363984d4634c1e62b6d0c33b309f1e6a2d6b3ef129a9aab6ecd03a8fd8601175d317a8f5ed1a07b45e510c923595cd9d9ca41c584a7e3e4010e02d65e33a7803eb004f6557dcbc1113d78fe4446e2ba04fe67972321e89ac82bfa3c06bc4416c6d68beb3c84bd23c09931383e79f2cfa2d2e7b95316bba3e43040c830b93151bea250277e6a16561d4e64269ea72522abed1e172d72ecd6f5cbfd67dd9eff459e79061b1a27629dce2049b9548853a43917f6f7ea00ca698c32f6410bd642b6db80fc3c6a6e7195ece34f6bd1daa3b40cca85dfe0d281efc096eb0c7211eee62a65bb0dc5ce218c33c441313b9c30c74b71cdc925d7275a70738164d05176e13b538a475d03c0f9aa12a69cb5a8347c4b952a5eb0b0bb5066d4f53dbfaf6b36d120d03d0a533986caf7173e267e72f9498cc59865c7ba14910e5d48c3034cb43a6aba5e5069d2bbee7b51aa1076b7c767fbe163a407b276ef5417787e99b055979aeda00910723ee005b550676caaefededcb249d197434ab8678bf46803cddf0f123cb60797c04e90697eefe976ddfde3929098060b8e0a13d5aa24b8733a0a9124593685a6e866e72831637319cba25fd2665d4a1c7414bb4907e5c97e7eda1220f77c9dcbba2ada37b14a3d9fb82e3381a1f5911a06a9d8ca46364cafe894340e47804401911b542cd52c1a9e3c36cce844991d6372967739cbbcee990d9f6be483acbde536aaed4e4d9254c943496bc903efbdfe2f205dfec6a16d077f4bbe7351fee0592802975121a1bbb68f65e075740b8b13d389a1f708ba9eacf2de7187a9cf5f5dd1c1d24b6df6e9fad6f45a3c5aaf85bdbaf604e924df66f75db2b0048279765eddee4fb88cb826f7f522b4b89ff3aa3bbe10ce3adb3d768840821687d29f53d94b91abb509b18a35a16a732b7a773435e7e12ecdcf622a517ab8fe32f7e864c22c91e193b9ee82d42389e10aa69b551f436b168af89d27b476290b1e962ea91c487db7dedcef74f668abf88db628e847fa0d2ed6baccdd42bba243460988a7067beb801b3420b89ecaa76625711eaf0160fddb2a9aaf1c1ef813d72e99e71f4740649b12cf044228ecaf1ecb5333b9648df9ca416f0b068026fb593f9faad6c75cfd5554abe45b98583bf41c716f16ff453161581842b0aa2935b19141c0fd93e71fcdc50ab27d9b11a9eb5e29f731c504e909e888630e481e9c3d0eb22aeb95586c207ea48f52aebc170555ff8d852b653b3d938487beda55073fc889352742a86d82322d4314961cd94e600e2f1b05226c77804139f655794816291071145fe4dfa6497ec6dd96d7fa77147d38539c3111e3692b9379882dad28bb0b4792790d53c66b916f57d6b35505cd5867b5ec6700e533c334f342c577ce2543cdc0a8968a66adc6a433ab409f34e3de1f8435009fb13a4feca3f2996bdbcf5bf6c5976858260c8e0db8d7b157f63d8bd403936c0bad92f88872b0f2fed00647f0ff738f58318b8bacaaceae6a8cfb3520c4ed7125b7ab9ae884343c8c3a3b9cb570b81a995e367432e0ece0e61e063a6f34602a6e498971f95b8b2a7d9e6efad7ec786fe237578aed3c51917a6530fe60191ab5a65ae7101186c1fa7a9a6754dfe6bd3dfc9c5f35303e3e40357ca3c414590acc4a548aecbbe017749e60e82f6d7cfcd6f4a7e5772b34cd59d38460d8a63edf45f9b8db28d5be3b5987ff099df397318a70ca7011429b7ebae255c8beb5835089db8e919917e79858c9dcd85cbc41018e12b5eef54d6a94ad48a338ac87f3b899c548260fe105ae644ed23ccc42d1b0d6e2336b18c2b0c78c7a66726ab11608f27ee31ea9a5c23f00cc668c6c24f05c0113da7a827d7edb5ceb8c863f2048e970ae3eec4868ff5660f1b08683ec2740c90140ebdc43775eeba2a1ab4a4bb6e1a5e5c3f8e58041d900b814b7fd59a674d4c571089db412382a4948f1a2b44c6a723a23a652817d634ceaa9f4ebc53766081afaf6db7bb9defdee870bc67bdf3beeaf44a491e5ea577401d6ce64b1a8301a9a1f6f4d6a4701c16fec8aef612271d5d0ed30588573435986d2368bb43b873b66686d5a7b847a425eedee87232efc6cc8145ef7d01ce085eaaaeefde5f83bbe1c0dbbe4bdbe04619739eaf767b1736e0592f728eba2e3ecb371b3b9c0d7e888401eb6fcdd77dd98db634f652fef12c2ca5b5f0e925ade74a53571ca0d2a136cc8da847e017c75840689cef42211675cf6579dbf75b044531b10d053ffd8df63d74bf5907c143ff5a5d58e96181137d07a3b80d8703610bab7720da20fd31f39cbf24206ae580320f6f5a09bf0ed12707268799110751536fa5f80f29227cbc2a3c5bf430d402bddc9d5ef15a0a2a89bcfb685ef5fbfe66b381a23b14723e9c54ce5c8e782c2cb4d8208112d9921d29e5423816898f5718f5fdee762cbe992641d28682d94d704cdbec7c0a6a4def13d965d887ee14d7ef4ecc632be7dd05ce8f917498f361e5d26028e6ef346e0c4861296fa77d4c522a2c28f69487464986815eb1a226db90cb761244a59e8901de2411b378cbb08d16587e4f142fc5169838d4a6c919a0115b0ca7de4374d5da3eefb5a639c65a9d54f50ded68b45239f7a12e55ceb1a1a6d9cf653bd5857a86294bc0d5bd6962a888ed7d2a1d177c8f82a03d544538947b28b2129dcbec818d58e1ceaabf7c8dd58cf978361c58c5cfe365afcfae71ffbc200c3808eb13b7b9869f1800e183253b11d8e5059cb4cf16ba9dcbb82d956be9b890ce3646f6828c9df9945cb59395bd3736249f57ad41df6a81f6cc1457ad12fcad851719baf365bdc87b38af9aaf823ef77b3b395de0ad70c289d28f428c04b5d7be89cae8da9cefc3dadb93f799d826f0cc0f320ab86fb6e9571e464ced686828f5d6eda7af63a695556439f95a1128389a7affe957fdb745aae75a301255b2053767c1461e8ce2197dc424cbe7a97006ba96bca3f791bcffca74f215a6a1b6c794bd64e4cb891a50d1a0e489dfdf7210eba0d7e304030b2a362fa295e73b363e22737d1b08a8bb27562d3d6be67bc67c0a2f3d9e8eb859e68a158ad744e616f59667783e6f3b9e49de8ac70a7644eed11a3d48e8a0aef7fb5e7108a3c725956f30ce671dc84c1e5d56d84030f6779430b1a856442875295c1db4c79a13c8cca7902d5f667f69e7900890dd1ba90081a1a694403b36af8ff9236f68849c6c5edb556d9643886a6a6c2be7c88a41f2b7377afa9d3c2777f1bd206853c0234db14672dfe9c428e155f8216da7d5a3065e65176c03ab40d5a4791cd73d8769a6ed15b5a4e44cd86ad61d1d32d56f0801a37f68634e9f4ced1c748e16b785b1ba0999edaacb2ab03ff2e66f72f13e68d1cedfbd2844aa2d520a780173c7bf19ab568454903f61e4e2271cddaffa5322fe94b48e36a34232a1e18fce1f47de7c42886d5a4da31379cda70f8dc4dbe47498dc24e3fe1ccb7766dccd9ead3b68b04f13540df0c2c36fc9f9b7d01bdb6b4b4f1212994ee6e3ad4aed5cb29b11d4ac1f2aa7cd7c94d8d18157f707dc315570a0c245ddac86253562ce9660b702dcd8ca0dbaa991a7f8f4bd4ea8fa05f38ebfae4443e1f121655a43073625597d3374fa83856dc0f11fc9c470851ad5fce97d5a83d5e6ca8c2aa492624cc535c554e79fb3e37d3026f610fe9d20b2cb71ed09a79e6850ee02c5fa492d5fefad756173bed96208324b283b3bb1f750210d505ed7abd6a81fb4849a66284a04b5bedfa6d0f9c3b5aacff40ed3e760dd3b6d21d141e3f0fe547a965e9c28d20338e00da9d503cc1b507cc2cf14ba5f53f2ea2e87ed48430416f09ba435cc72837fd982852b5f70e147e2e75592b7ad6d82361b482360fef5e4d3c7c67af430e673b0c2a7818e34851669ef8b6871438af006f750739b34d60b1b22902a67e10d91b4753b879558ad56eaf560d4abac2027c17820c79b27f8f17948a6ecb9ad1a03a8bab4541d7512480feab178a05e0f668a74ab082a342ec4041995f3218d3ae270", 0x1000}, {&(0x7f0000004f80)="02130346300c938b236bdda2516f5569415a78bd6c5da5a0f7c1901a4f0e596883f3d6e7328a2f65b65947b738b6532af5535da56f739f2cf9d260a4e1319e101d1db591e4dc66f05f4a", 0x4a}, {&(0x7f0000005000)="61e50436112fb85610c9b34d04371bc2d7c8be579994e3a1530035b94605d8a7e80f4d546b2f69efc8b0ec8949760b789be9918635edd041a0db971b3be474bd4153530a1d9826f20f395f0bb92135424fc69ea7b58f3446b8a9ee97d1e0e1c7d3c03b351d6a29599b906df83f62d1cf8339d8e0f6827a1f94ef383af5a5e976280d17ab7856c921625c3c", 0x8b}, {&(0x7f00000050c0)="5c8f72c8341ba817bbb5e911a0a389c8f56ef40ac666b7c3f92cbc349fd453f9203b3693d5b0f8b1c39cd69aeceb286a6b37e1b0738fdfc0896b666e61218322df7e29396223eaeb20b5611bf448f2c784a90ebc9eab65e5f7", 0x59}, {&(0x7f00000064c0)="379cdcb2c4ebacb0d6b062144ec5393710b214a75c8d5f8c22e504e842bc886fc93d24807e00730199e8b34156ae670e67d4ffcfa908cc7f6727a88797a99c9d2e95a9f37a3a1aa6e9af5c9e7b922b0461e4d96a835cd67294672f55a254dc0704e21ff1a25464124d17c0c8681a01e321c0e8f58e571391aa8ea6090acaa454d1c19a0ac1ef70a8c307506de7eb29b04bcc4c324d005670821be50d7316c4c9bcaabd747f6bfb536d888dc039b076f414ea0fcc9078d7952933108dea827b6406d18afd79b8157599fbecce2de8b825a6e25f4300188ba92f0a8603cce62d0102cef8ba1ee0736845cc3c35ab7ecb3a1a0e42aae3589ef0d58a1cdc65685c4dd4a163f5703e5d63da14beaef4e2fe056e95ab423c3896b5da0bde2719675a2c599eecf6186c3fa98e36e84a184e4f1392341ac6d1ed56dd42f46071adb454070628641a1fb86134025afd8fba21d8025387dc602c318e459c3d0c020eee3258fe34447d4cb5fbe690b21cc1397ebbcd664e9acb7d043a68495e47781e78e4b43026f703b8651fd2e8432389ab5dcbda0e17c673b2a9ffbdfc2f37ba5cb09b1639944258aae9e9e7f7b809b54e14f15be5f88f3232c0bf4f5e8a20b4b348ead600cd0c440fdf3f763ddec344d3a32c6afbd8b16cc54c7851abb6661528c978251ee64530128452648a258c012360d6653bf774e13047ee8b14be2206560eda07db64689f3a5620d30c7da1d7914e7afcf05e695963644924c991d8b7dab1169ddac18fcc7d73cc6c65d3bca1c4ef0247178108572ef91cb3396df771b57ebcb1351556f944fb27b9012ddf81270ed04850f8efe8c42e7500e0683ff5dc47ef109e2f39a14cd8e164f5fe515ac84725420a13dba10bab411dcc949a5e7dc2ee840a8bcf19ccf106d350fda09e2786874b8930f5a10b84e587fa91cbba3248fbfa6fb70b41adcd50e86d59cdb24c88b5fdfa13ffc6b4815c7e4e260eab0a2b1bf53d04ea318696d30d661e5389cfb42b0c96e8c39a9b2371e904e3e8cd0f78f7fd2c95e2725b36f53c59fc234e015179c3f16b18933069f5d4806f33ff17e72a9210f86bf34d2b9a5b13a17f5bb7cd03eef2eb30f81712ec49061c0b8c590db380cd7b5ce31178dae320b560059f92d7bc80390590e4091cfc76ecd78887f1f00415103b2738a161627f75a2a2f080b9d7bf78c03a52e3ecfc431d0944e9835ca4e9b4ed5f2722914f149f1734d7db4d5da5497276dae38dbc6fd4266ac222737ee0f709f30d4a55cf54b5dfb3adcdd680b82451a00622ce48c8b16e4e527c8e8e73ed4a155a6db9e8e1f72185db0b4a4e814c1837723b12ec257a5bdba07ee0b3313f914b7baf67ec316be7472ac5f88243d8cf6836c0fe1c6cad977202b3695c328eec7b00bbf65a2d276d932bdb530515f309951c5bf3f16b90b680fe9d68b35834c3c37c1a51ec8d8925821408430f8b9f2a9eb40d7bf9e6335532a4a1a403bcfe2f40d756882928c961df2f8578ae587fe7213089ca859a87cb88cf18b7f6a2c66a1815366da72202edfae95d572bfc89f16b6f262c7521a27bf9b1cb88943b2717fa9172b7f87ae5f49b93637f4c03530d51c471465ae1ed56f1e6ed79271f3515efe9a74ff38f2c75ea5ac5698b00e94e38ed2afd8e3c4b2794316a7e0b960f1e969c2edcd076a732955d22c4de8663d60e44cf6e9a5021ecfdcdcb1be87ebbee641054a008eb77d52423c6c1ebc60de09cf7bccd3481ccca640a1849020d13f19c593c944f190c4bbef889fef28c2830f7ffe642f0ebf8e1a0db26d6c2bd2134b7626d43614a39420308b39a62c757fb7744d8989f129b342fad2ffe811375d1b134871ae11739bd25e6d0ae3bec7f99cb6349408c0d109771572783a4443bf2425725c62382bed5ccd949dba961ba599a810a0bed16550204e114f06824687d3f970a814017a0fe32c7b4ba7b806c1f2e0c7dbcbd1486724ea847e44dc75f361eca9e55671041f3f684beaaf96124c5faf806a3c6df66b5fddc4aca7f9b3c1186da4f8c7d04deed1715eb413d84564a707a882b1fed7fec1c18b9c7ae9374c3fe30d51e83396756c4d81a28c132f131c8479e1110dc12e298469645a1e2d001eee74d8c21e9607f7731e09902275fb3f8be28855c01885b9e3b861771e0d73e8a65b9ce24e70c7ebdac2675570fd559a7f2745a69dba615e382e967cca258a37627acc5c90bf9e35ff4a5b24259e3de077133a4878faeabbfd8502ce1cad8fa9a875aa36db47aa4c24daa2d99974dd00f9e4b1632b3393ed46941fd34de247ed6b4d2f699763bd7160d25237c074f06324c120367736dd2a2d46bb87679b0acf78595a7e4877665a2d320f53ccdaf8167a89424efeedcc9c20e3cb44cc0cb3dda3165adc5c8cc619e5b3376c6088da780ad07c4ad1f80d89fe29d7f7c649b50dbe33280a505e21a807f9805cb01a0c5876f773000708f593cb2524148f647e01b6f9691a13d52fc3c5db021468b3008ee18e4dcc86c11f4b1e1afec2f1246f650269af8fb03341db8c1ff659ed5b6e6825ad3531e45d40a4c88c70ef413fd3969fc937c46e1b1ca38aa43d42dda82f59b33f4e04696d55eed773ea8c0554a8037430682be94db6da448d642b909fad0fa80c94a8e66951b7fe8236deabacc04327ce1ad616bf63d478704a4c48bd99cc2ae4d720935ab6b85460ca637f2d9003aba67f41aa13192b97283a7a4f6137b1040c521b4f41ee7bdc957c53977c0f2d98c6eb7a6adc4a8a30beae615071a66bee53d53c41bcbd143b24c9b9b2f86cc3f8a2e47dc4e1db39f539c1900e884ca5d589fef942b7730c3c764e6cd2a38bf8f25c4df41416385ddfb5c4ba36dbc42d921135c7008f24fd887272fbd829cb7e23ea462e0a75a280a9c23ed70855cb771d851bae57bf050367189adf81298b4175778568c869c98e266b18940e544c680080da45958c34911cff0e5b6fedb70dce8bf16caa7154c8fce1041d02009433f5fc9628446ef7aa82a60482390488535b44eee319be553c7a55e7b7dc01374f7a7d74b880880dabf31efd1461d2f50c46e74177d03180a602bf84e001bd0e0726d5eef83c94df06a099f64717cf1ae036ae333d52f98e03468f7f05c8748cf9024a3a06be0eb9812e5081ec43a85f01b91dcd6c9fff2e2df68d6c8a3ea35b819518d96bb4920c0880b0c1393b0957b50f2ff84770a911904e3bca0b47cac9f67244ab3cd1d0b25931aafa90c6faa97733fced8253d6991ab0bfeee384a2a1d64e9025282607ff90ba81c9f510cd6379aa358f7bfc79670d0cf7654af98d720248e8879c71cdfd84a34a8f97f88c65f361799afe1ab54ffa6c1f13670e707ca88c1c48882db9cc72e3fba40531617596ada58c466b864a73ca890fe1dd977cadf09076d3405a531dc8fb4528e7bf97d708b231d2d39d2b98402051dabc913ca84b84ebaad526106829ed3b9a34b9b082478f01c835e36f138414c586e6c4cec2ecdb472996b4a18c957d6e2ab298c7a4c72d1040c611d331f178acda99dd7489f6803e50c756a7828eb0f0dba7ceb70728145a837ecdcda320bb3b009a62ca6bc1614b47895f24ee35ba9f618746e852bd6dbf16092c6af317d00c5b026d5687cb19292f3f10ead44f7a7991dbf1769a79330dfa09f141f4da8c11c88d5d733903a93ed2337f8593734b6447fe7586746e86ec9bb2aa2bdd3a6804b673cca9f8149740ab7d3fa2c87cef1aeb80d9fe9082d23a52fdd04a663512c2ac5afcd8831bc943d3f56089b18c5568811b68e8e22585f94f4d09e88978d19f437d3417a857e2f7d76f083e38874e8bc1b873aefb344cf1861c29ff1d493dfa3d9ac8eda67eddb746372d9df1c99896fe9b6f282a07dbbe60d7fbe12be27d253a2bf9d832123bd5a0c8d3bdc640fe8d1ebd8ee9bb6138080e8247fcaa321390f298b5d5dddd170c97185dc47e3d270242dfb542f109f49e9e3117626b7da4b057d6043feaacf7746d14c2ad9953a9cc4003616f1f958885c92e6d4ed151ac04b84537730ba352aeb29c1609c2b5abc54cd1e51272690be0af8b450fc3df4d46ac02c87bf8b909c3ce7c65035d8834f8dbb11d33ede4f229a472164a63885bd29f8e22a04d30b80a606afd70f4e80f17e379be7682c8ab35405d6c7d96a8f1a0521e9d6b31daad126b0d4a9e9bc3f87987dfd3377921f2d1028caf029a579aa59a32252c3b177cc52f3fd8ace318ed333baf006f8b4c0b2412dc8191587ac98a6496081d18ba7ebefecb2b09ba2727961ce9c3c0e0e4541ea94df46bfdf6a2c949affa3725405ce2dd34a2b026977dbdd5ac49382d6ceeef327a8761588302bdf917ae783fcc512e3552e293f7e8dbdf62f0adb90707bd383a8ee804af01f084562d77eb65afd3e94d1fd5ffdd824287bc86fc3eab200de61d8059b93a8df0bc6faf9c40d3d3a4437a0ea033457e6ebedde2fb1b2966781fdcead7682b3d84800b3917a50f071e2168c55cea89de01edae8104bd29704eb20451acf25b80f9d7a540ecf77a2c077d78bfd2ffe0d20d39aed79501d9c8b748c5152917c8f3d8befd5479db4c10729e4e323f777f896286366420c5af0d51dfc2ff7a4ed1f5db999e2877937b449fdf298366331dadd34a95dd8efa32aeb3bdfbf8a3a4828bb67b1341017c28c3dc2b7db17c3cf34c726471bd5ee56b6231d30f0723bff96491bb48ae89ffb70b1435165018892ae119f159683fc8701b7ab1f621441e86751e05fb5cd8dfcb42ed6e011e3cae559d9f0f41e517335c9da7e27b951c8021e1233510625cda1bb22c950e7b44d7f65190338c14f29d5ad862428491611ba0fa3ec694e222e5b810dae524af8860bbc4f9d4937ca8274a978cd74fc6043e3c35e2ba22d60400608c1f014e2a6b7fb7f75646a98a636f50761cb708cdbfa6df3e28a94c67439dcad38c75b53a1886900dfca4600a8867b04e3a1700548c930fcb5c020459147df66717b23ac0707f26e11dcf034c9f0a6c2689d03c85f0fcec0f5e35692348b0c4efc11ecb36873f788b054e4ae6788a9e1b94dea82cb416849de20ca696d98a0ce8375112e7a406c8e697cd5a590e153bb23f371197e160f3e46b8e9761755872feca798d113afe35be0b2affbf2db9c42f6196ac057a3aa4f856d8bf3c2c3c73a98085171e4533179faef8e1699a8a46faa16f1f95dc9d5af90f895b3a8d2259abf6a795773569047cc991c7329b29ed755915641ca42772ac5950020b680dc71e70c9e715b5d1c08ecd9f312f14af307e723c81a7d395fda8a3b5e635db3732f4c996b5a8f105153decf69c37727cf432f369509c9243c4249e07ed77af876ece6f92dc6d4f167101b90a8309164dee45191c13d7b2cc0020b8c30ff0341926639402801f85e1def938fd0cfe3512797c389633e45e50335149f292c4b1b49b00b9e310e794339ff7141870d75c88975eb7fa509d26860ca48025f5d1ec8969cb9158ba77db0f0ed73f016c265bb7f726bcb67220c5bd89fc291e6c012b567da04aef5828327d87276cc8960e2187aeb57c8f8c4ace4e97b94ae7a76b5951855b3fb7cf281f078e74fa58e18af30d4dd46dfcc8d985bbde1282b4fe9002667cdad36a23a0cb09c511bb9b45194eb4ab7ef0ec5ef3a5e7c2e3c3edf19df920616d1370a7c67fc9e78dec3fdae8d3261fa5475e2826c4a1ff440471e8bf2d3a9ddf182808d90d5e08bdf9217485aeea1eeba5bf68e09b8b4c53cbebe0971976ca0d5667467f477ab35667525d6", 0x1000}, {&(0x7f00000074c0)="f431a9cc04fb6551ff7a28554508c0fe605e1fdd05c7afe5e3005aa0d2b3c71f2d527ba479d7a940efbf91871854552ffaf00f2bac11c4d672a63937284dc58afe39bcdeeab74b70e6", 0x49}, {&(0x7f0000007540)="4a4d71097c84577fd09603e488f3a7404e48bc972027ef30c0c3ec70b7934036f7f982e7fd6069f67305197353f86a540a5709503c482415fb08912ebf9f381ba56e375fc085deb1df3d7cb69e94d82742c49d685de718f6faddb6ff21bfa7ac76155b25e2bf417faa436bd8761eca5579c28302b12cc23068463dac2f707376a581", 0x82}, {&(0x7f0000007600)="cdcc55d9fc91eb8e5cba473e91aafe6e48c34bd00700a621dfb3cdc9366089fb58cd52eb25c0a19e30d0af54659f53c49d80f1a054513671c5d9828aa829958d9d045b144cb930cfe3eccc6cd8032e96f428a62903f12fc37e321bcb29b406268041786a", 0x64}, {&(0x7f0000007680)="7f68c2187c323a808cb24ca7d8d1c7e1ffd7383b69e02bc43f62bed748d43a0475a298669b7509cd05e796c5b59a39f8281dd38c69926da2be59fdaa04fdece1f91a4dacbf82f8d27d0672c8db65e3bb5657c872d3eda60951d3cb", 0x5b}], 0x9}}, {{&(0x7f00000077c0)={0xa, 0x4e23, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7f}, 0x1c, &(0x7f0000008b40)=[{&(0x7f0000007800)="dc9a7a22b62976ee48088e8e90477daab8052c8e2ce76d2599410a0edbd9b5aca9b5b258be24fbd5ff8c25d655901300315b64b097deba17de45bb6da65e57351182cffb6c591b5fd53147b913ee5097c14807b06754fddf7e4ab0415b7b708bce1ae8ee3fcc30f96e7466b4eca37d0b6f2070a53341fa77ed6fdea015b5f5b01682b87c0a8fd1c1dbc78c0a6c186e611c0e4b301f04f61a3e7234b0e9d30fe70019411e84072d5624ae6e34b2d45d6e0b66b93d9ad3b42ccae7a1279ad568ece2ed5d749b7d3952c8ef865489c0bf1d62d3d55444ecab738033a102ee7de8e1a8b2838db2d88af58d8015385dece0c630be82de1cdf516b330048f26a6a2e210cbc98c11f9e0f2071c8e1f78f4c9f5c3c9d5d67926dbcb6243f0111768ea7e6a02b0a450180dfd779a399145f1722d9c2a4be43877dc434f0a4fa5d351515f2b11198e1673572933e200a58d603456f2c0c6086fa8e18c30c4c46a3def5ad91176b8b7388de73c834f80c33430ca833bc3661259b6e3da47014f519810d084bd7c4f96d371ecf573235ae6f4a14233e746153c07cb0b0b175a990c36af614c62f6ffa70f1c1a227eaedc6994f3d97ad67f2b99670bb78f330a639175d4861fa72677b06f7caa398189753792bc86b5c1589166066ca41b785e4bab0088fe6405fda3e130ea06c143699b0d43c6f099a2e508b555493d7612dc9eaf563222b4284070657182055f304999bbdfc387016b7d17232fa17c72df4fd327464310af85ae6a15a537466d604d1ff8409480bae5969077028bdd6379fec7787ba6969f5a5554fb8c3282d7a2e7105e807ffa201f46f4caefce066ed2c791835d0430f2209a62e16af717c61cb9bdbd6ea5ba0659643fab75af5030c093f07e70df9b951e96e8f1f4a96433c3096ea4aa9950d39a63c75904bf235ae9deea354cda24934c0445cbf1a970f86e2bc62a4b1ba8dd50f361f62c5eea121719a2f2215bfc866c850e1f963a0b5e767965b25badb53d01ae30dae47f1429107f637692e207982dfce0520ef388c1d7e12ee27c876f1034eaa0b5d1705baaa876b4999a74c560ab4706e0f5d82eafb109cfe9dcac09037a93e45a02acd4d20daa5c035936425520415460db0336a901c7b52bc34234f6dcb2f3ae646ffe7e60aa6d3ee02f22ab460ddf6b948b2b264b7b524d4739b2f99b328336b981494607a776470523621aebe8c316c4c0c00d8b60d70a7816fa04bbf670ec0836c28a1a1cdac516492424191a188fc383acd7cb0a35466ff2fd37bf5a7b2169d0eca34e12bf32060bf88bf4a3f1ddcc6bd8574cea74779581311754021cb574e325b1cd2296041995f4ca5419aa9a84039b7d61a7dce732ebef3849d29767c67a04425fb5cb0dd32c2262b95145045cd174874c6b565817d525feee4328f82d1a0ea01c70fd5581ddd3d2072491bfc1fba2ca5984d0499d63efabefd6e07decad6751ba24ab35ce62bbb029e25443c6ace6566b72e1febfeffc13adc1a76add8f2ebf074d72b5a4b1b64ae4809434986b3141e80ba7a105e0b8d5904eb324a4d2014e02da1ab87f69fddb4a1ba7f4b8ced0798fa163460a8c24dd98030bf2b841339f5d5e882d4d88c67fb3160c16134ea422c72a152b59a70409baa9811b1ba0e716d68272a0fd0682578d04560763fcb89f9a6e713fb1f03c17c2f97ed1abc2daab1ede7dc17bc67361b1c6f377ac9ca9426b7ad004a9d3ac5e3e93c52049e4346c1162165db6ce70fdcf32c49c013abdd75bbe6a7597340fccd670aa59c3703c5e663690a3323c6871f3241f2a919e126cdbe2ab38713abb24c5692abe1ebc0dc9d3fc86f1a599fa4c20fde676a7f7fbddcb1fe6f6e3739fcd6e6abd48c2dac5f6d5cef974e0c7881a009e23b66e565106a0262fff4d13d1eb25954675b4e415d9b89c953225db51641ca72fb90cc381b257c2b3e754887d687f2e65aaa19da0de23ebb4cc8c5ce1551eec63e705fefa3567028a4b7f828fa332a6c4708601cd04cd2468f54a7c524a179a1525a646d7228228cfc9daaff02d9a004b1f98ad32c03710b57663141b17f0960033926bd0560bf5e8e5e865db3f5822a2fbbe6f16b35f463fe65dddf7b568472398a3e6bc0f6646a88650b3f630584a642e6cfdde0bfa0af060818fb00460c84e66c5abc78948daae26247353cc840fd9940dc74fdf9f61e6b4de65f51f4e7003aeb1aa396f61b0e3b9ed84c2441eb855bcf0bc3a5b83961dba2315d6591ea37f0a1a376212623c27114a06b6666d398640c06cf67d779d8ba1cd10e5d91fb745086167be7f5e88e622a61577413afd151c5664253be6f308724a0048975ac3723c5787f40c5115da74ac78608f26b657316624adf172d9b82f0d25cd6433d6eb5cebb753b50064d56ed60351f288caceb9f7a794da0cacd14f33d88b4a49320503ee7926c261aa66b00297e1a31afc88b874d60b2db49423267ebee58e556448c64a5291dddd6461998d61d7b26ef9623f398afd9281e8e7958cd30b8344be41c81b258d786a6b4aa250bd9772fddfa9ea399046e667c6ac19fc97d5159377878620a709bb4a6f7690987ac423a303904d82f6064ac1881eaa886e828176e34456e7be938619ee0bb4ee32d2bcc9b90d328a5695c85902df695db288b98a7c5427eed2d9c25012c5fcec8845bb423a7553c47f31927bd58a8bbc9051983f1173cd045231e05bcdf9ebf5e9dda702080c35072d8ec9db5a9acb4c3482712d4a7cb587c72b5e1792d8f532df10f2f97a4ca040f1910c41a5a6fb4a37676e99b873cb8d8969fcacc09435d7a140fa78beeca6918f475aae2666e31ce3ecf09f8ee39eb76f0b62203eef92b8fe52183519d4ded817676f024669bc15dfabff4", 0x800}, {&(0x7f0000008800)="62db4b26a3f5b09357394fccc9fa7bbb2890242701d75f27e623cfc60def7fd3e336c6d4f08b6ec8ccb484f883f5fe5a77819644ff7fe7321f64df4cd1ad9662259c4185a595901912c4a62921bd85c17947601c882aad714b8daf8c00fec321cd8488a2a3a0ef710b34d4f0a28bc729da3928014f0d", 0x76}, {&(0x7f0000008880)="3c59cc5579ba08ae828c676e4a791d715328fa9a5b10f9c4afb270d9c27a216ce9dddb37cf5a74c9a4adc01b228ddf547281462e74e4e04cb1da8db6cfa71766ce30755932dcac498989eb3c35c0d0b30ef196f39e27251d0fadb68c2d1fe64d5c260dc9b700adb4101fe3eb127d3605dd6c0bd2a6442e96f96fc9fcd28f8228e1bf3f84abdb518cf673463997b63a74e34bd2c62b779c8da8dc9ee35050fedc34ffc1c04b55a3d7f7d92a", 0xab}, {&(0x7f0000008940)="ae8a96585c319062b41195fe763df13e88ac76e36fd389547ede1fc51b2ffac8518ceaf531dcd3add5834094ecae7cca4a2d038973a52d139f2271e7a3704be454396c67bea9212886825ba43f4b07d2b6e03b83296b5fe91f2af268cd9d395a", 0x60}, {&(0x7f00000089c0)="d2f48b4b1f7b56ab675b57b6f37f05e3e4e81bca0a9c72ee718d3bc1d88e31dd7153d2c06457ad9e3066663a219144f387b3710ace1e4d9b0372", 0x3a}, {&(0x7f0000008a00)="15b3914ed209aaf8ee4370cff20ba531784f156fbb8c67eae47c3526589e313f9e83083bbf3e5f907f6dbe9c20b5404af542cee63f179b230693cd827240c81319c75f7571535cf65e3e0c8dc92782af290d5376ace48d501c909d692f1caf9ce9eb460ba275b7af380c52774f215af81fe02870740decd49927aea076ec0331cd8c31da77af2946caa9bc1fff805fb08550895d1fc41a490fb1ce6638e15e0f21847cd0536d21e83c304699e87ad072cb77083374ae29f50bbd482f94cbb9cf9f6a6533061f6aba61", 0xc9}, {&(0x7f0000008b00)="674d856b79356487a4a222ae451797310df1e7cf0644ab0c06a6a08b83e4d30bf9b7e833231be069715196e231dc3540d3", 0x31}], 0x7, &(0x7f0000000640)=[@rthdr_2292={{0x88, 0x29, 0x39, {0x6c, 0xe, 0x2, 0x6, 0x0, [@dev={0xfe, 0x80, '\x00', 0x36}, @empty, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, @loopback, @mcast2]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x4}}, @hopopts_2292={{0x18, 0x29, 0x36, {0x33}}}, @rthdr={{0x48, 0x29, 0x39, {0x3c, 0x6, 0x0, 0x8, 0x0, [@local, @private1={0xfc, 0x1, '\x00', 0x1}, @remote]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x7}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @pktinfo={{0x24, 0x29, 0x32, {@private2}}}], 0x158}}], 0x4, 0x8020) 3.699927579s ago: executing program 4 (id=1815): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4a61, 0x2, @loopback, 0xaa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "8aee8aad3300", "000000dfffffff00", '\x00\t\x00', "2300ff0400"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) close(0x3) 3.628618447s ago: executing program 4 (id=1817): syz_emit_ethernet(0x46, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x2, 0xb, 0x38, 0x6a, 0x0, 0x8, 0x1, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x17}}, @redirect={0x5, 0xbfea782ca9645394, 0x0, @remote, {0x5, 0x4, 0x3, 0x3f, 0x505, 0x66, 0x7ef, 0x48, 0x1, 0x9, @broadcast, @loopback}, '\x00\x00\x00\x00\x00\x00\x00\x00'}}}}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x20, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0x6}, {0xfff1, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 3.506515911s ago: executing program 4 (id=1820): sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYRES16=0x0, @ANYBLOB="000229bd7000fedbdf25040000004000078008000100a40f00000c00040007000000000000000c00030002080000000000000c000400000c000077000000080001007400000008000100050000002c0005801400028008000200040000000800010001000000140002800800020010000000080001"], 0x80}, 0x1, 0x0, 0x0, 0x200008c0}, 0xcc00) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)=ANY=[@ANYBLOB="180100002f000100000000"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) 3.411480342s ago: executing program 4 (id=1821): socket$inet6_udp(0xa, 0x2, 0x0) (async) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'ip6tnl0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'ip6tnl0\x00'}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = getpid() ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000180)=r2) syz_open_procfs$namespace(r2, &(0x7f0000000380)='ns/time\x00') unshare(0x6a040000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x3ffffffe}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @generic={0xc4, 0x8, 0x0, 0x0, 0x2000}, @initr0, @exit, @exit]}, &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x3ffffffe}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @generic={0xc4, 0x8, 0x0, 0x0, 0x2000}, @initr0, @exit, @exit]}, &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) socket$kcm(0x1e, 0x1, 0x0) (async) r4 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r4, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) (async) sendmsg$kcm(r4, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c000000140021010000e0ffffff000023"], 0x2c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x48, 0xd, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0) 3.386538319s ago: executing program 2 (id=1823): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x21) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0x1e, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x600000}, 0x94) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7000000000000007b5af8ff00000000bfa200000000000007020000d6ffffffb703000008000000b704000000000000850000001400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0xcc03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe67, 0x0, 0x0, 0x0}, 0x94) r3 = socket$igmp6(0xa, 0x3, 0x2) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001c00)={r1, 0x58, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmmsg$inet6(r3, &(0x7f0000002cc0)=[{{&(0x7f00000000c0)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x311}, 0x1c, &(0x7f0000001b00)=[{&(0x7f0000000340)="135be1d4ec039502e52bddc88155fac561e09e3a9c70e21ad99a9def8cb43a75da47cdbd2c8e6c55f190cb09fcfb839694a489fc590f35998fe2c1ac49e0d3b855597b866f3528cce9e4559823aa6bbd154b69ba005be71c1a32308600e39475b93a9edd40da72bf96c3a6155615f223e35a857462963ea7da577c1a3080c9d794361782b8c16f302d4c3d4d9f40b4e3e59d6faad9a5ec6add66ada92d98cf650c2eb581e3f38473389dbbd9577c74d6b5a6d84fad1121030e8d847834a9365f40b7045cfa61451b0e44121cafd44ecc794e6fb932979c0a04d61eb15c436cbe3b1a26a556331bf31eea8b6a4ceadaae757b", 0xf2}, {&(0x7f0000000440)="d70da816e22682482fcf65a65c245518ed50fa4d20ce", 0x16}, {&(0x7f0000000a00)="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", 0x1000}, {&(0x7f0000001a00)="a6b4a581ffc581903ef824455aef32583f8785ba0bdececdaf63d94af87770ee41703c888b37f26721861cc526eeab3f1332095bf00f6386354d8a97ec0e9ad81e3e069c13dd89f24d", 0x49}, {&(0x7f0000001a80)="72a480b00e9d5e2828a122e1ef9f2525af7fac3eb8b2367c689bc3edd67a31f1ad2628ddc999a6a211d0ad4a2064678d2f0e9b47370abe24c8a771e193754058be0b9097dde9ca76eda2bb99aa13cecea4bcb6c030c0f0743652e782443f63fa4d23e0c1", 0x64}], 0x5, &(0x7f0000001c40)=[@tclass={{0x14, 0x29, 0x43, 0x6}}, @tclass={{0x14, 0x29, 0x43, 0x2}}, @dstopts_2292={{0x30, 0x29, 0x4, {0x67, 0x2, '\x00', [@hao={0xc9, 0x10, @private2}, @padn={0x1, 0x1, [0x0]}]}}}, @hopopts_2292={{0x98, 0x29, 0x36, {0x4, 0x10, '\x00', [@calipso={0x7, 0x18, {0x1, 0x4, 0x0, 0x2, [0x920, 0xfffffffffffffff9]}}, @jumbo={0xc2, 0x4, 0x40}, @generic={0x0, 0x22, "7c594b21d4eab5aa5e67314f683a9c43386dce8ddaf2ab251235019c8bc62cf76f05"}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @pad1, @calipso={0x7, 0x20, {0x0, 0x6, 0x4, 0x5, [0x7, 0x73b, 0x3b1]}}]}}}, @hopopts_2292={{0xa0, 0x29, 0x36, {0x88, 0x10, '\x00', [@generic={0x1, 0x80, "242b5c5f04842983513f683f24e087ddda016b4d65d4dc75539d5a9af16847d1a5c0826bdce46238cda3fdd320ee82c61eb08363e3e8a2a7f8fcfd31899dcb0a9168bf80e4bba705f584cbb2997e5d41fa19557c05cad9c68eec3c28b6fea70b9818da7d50a34680ce71067eb5a8a1e7eaaf268c5c4873aba39696678824d004"}, @enc_lim={0x4, 0x1, 0x7}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x9}}, @pktinfo={{0x24, 0x29, 0x32, {@empty, r4}}}, @rthdrdstopts={{0x70, 0x29, 0x37, {0x4d, 0xa, '\x00', [@calipso={0x7, 0x28, {0x1, 0x8, 0x4, 0x7fff, [0x5, 0x8000000000000001, 0x8, 0x3]}}, @calipso={0x7, 0x10, {0x1, 0x2, 0x1, 0x9, [0x3]}}, @enc_lim={0x4, 0x1, 0x6}, @jumbo={0xc2, 0x4, 0x100}, @jumbo={0xc2, 0x4, 0xf75}, @ra={0x5, 0x2, 0x1}, @ra={0x5, 0x2, 0x7}]}}}], 0x248}}, {{&(0x7f0000001ec0)={0xa, 0x4e21, 0x40, @mcast1, 0x7}, 0x1c, &(0x7f0000002180)=[{&(0x7f0000001f00)="b8667b4f47687c1b12278a95a4a7a2d1cc974f154c79ad0bcfe8c6f3abb349af2009e05784a2c38365d0fbc6dcbe062cf737bb87ecb7c905c25ca0b9db4563fae2b831768f69b83e8873cc6a8f5b91b9029ca032b7342e7450539bbda7cf0d451f3bfc53cbcdfae486955024709eba0f59e14f41ebe857a53f6cee180010e78d49f528e5dcdeac1aac112aa0c7654629842e2bda44447784bed826b0970efe1820dd03395e43f77b7d278de794314f69e3c6e444fde72f", 0xb7}, {&(0x7f0000001fc0)="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", 0xff}, {&(0x7f00000020c0)="1f604acdbed68eebd9ea6d6bbf8ddaf0e7b66e548201da588a7aa8b8e7b57e52d7e04467b1d83b993d70fa56300d32bbf5736f1857a35757c0b26ff8e016efc0e8d78acb0a", 0x45}, {&(0x7f0000002140)="52dfeeb5498094196e652d148ed7133931cc742c7a5a7bcf9abfa56d39", 0x1d}], 0x4, &(0x7f00000021c0)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast2}}}, @dstopts={{0x290, 0x29, 0x37, {0x2c, 0x4e, '\x00', [@calipso={0x7, 0x28, {0x3, 0x8, 0x0, 0x6, [0x8001, 0xfffffffffffffff8, 0xffffffff, 0x2]}}, @generic={0x7, 0x92, "bce38b0cf0ba9013dbc0359fd80f0adf6f1670fce11ec5959b19e4645eaab30844f213f694b99495f82ed36a44a053cc94d570ef620506600f21e5d590b78870e1a6f43f122a92039f50fc54444c8408327839a74322b7e86ef79033a88fb5e3d96fa3af0e187ad4308facd7aea5db01ce44b74aabe7b736369555ca115645b81d0ac895ddb27fdeb4f4b82e56bec9c9f38b"}, @generic={0x6, 0xec, "206dfe84f137406d91eefa1b04828e33b4357bda19b11b05cb894c31bc39a4099a9c10756b2ae385b080616fdb2e61e8beb1e46574f4a4ac9c24a634e0b78c54c3b1e223343e150e4480f789072fc40dd672279265bdc28f7ca5a47292f4753cfb0cb837209a89b2da7ee741e0043df19ea95160170bd4275a65e500b417ac55b510c32e13f3bc4abb8913b4b278827dd0123371fb14b0f3e7a3a3dddbe7b49cdd988b1ab17dd3b5b5e1621f939de94df00f7ad29b3056489983ac594769566218b27172eb58247801e835fb4d680359740af2cc7bff9948d657ed46a2e53e33934f34d6b68f067647c0a23e"}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @generic={0x6, 0xc0, "7cc070ad245a89b59d460c8fe4fce45fd25fe17650c9a455865766b21ee43c05ff4420dad30571ed4ec08f25629187069d07a6e2d7ac65f18bbf18efe756af91945dec1a9ee0d58491f6f06dd9d9e40dfb4ff47b67e750b06c6bb271cafabe0a20c4629d4a68f6e50e8d6b8b95f892d251668fdfd53f0721f09776db52f6c507c3bc70039695908ab5eb2a957ddc23508523866fb1ceef2c282df0e7a04627c9e84c27120679480bca4acfd5d6a3d0f39e8ebdb3b1de91076bce1fa6dadcc7e7"}, @pad1]}}}, @tclass={{0x14, 0x29, 0x43, 0x1}}, @tclass={{0x14, 0x29, 0x43, 0xf}}], 0x2e8}}, {{&(0x7f00000024c0)={0xa, 0x4e23, 0xfffffff9, @loopback, 0x3}, 0x1c, &(0x7f00000026c0)=[{&(0x7f0000002500)="ca96674d68b81ebdfb106e138fdd8fec833fd1b8a87834a3006a8cfff6d94dc6024ebc796de85b4c9888d99e008eeb02b1c3aa8609e293919716751e071582985fbfc034882ee61c96f853e0b40e5c9aae04941ec5fc666a2731d63f5049ee5e190d41babb9d155ea70560782771106cf853d58eb3e8b5ba37cd647403562cab161f163dd1da6a3763023b2c9b0ebe7da2ccf7299a440945a54713989edab3c09c0ee310bb8ca8ec467dd94bb843", 0xae}, {&(0x7f00000025c0)="c4f7794866d08f097280cfeda9caba4f695b44efd90f131cdf5c360d6944b11a363e56e13c72623a94655f6f44323046a654cd02778756c6756579c1f7f88bfacef32d8a9457f2061863a715c71e54c8d6e15c5506fe56d0449e4d84aa6dd4604219e51e7bec90b90fc061fa32816dc86bf36d9641034f547e3e41b4d73b6c599f370a6a7d632de8c8de2238833a44491a1a0d9ebc53067def3bed1fef4a7de6c8c21aa89221b39796919cb60cfba33d9442c8b215303c20b6374c8611eb2cf9aca69a5d7fc4bc9151c6dc39971f34c6820873d4c07799b71b2d36d3e5cc7c", 0xdf}], 0x2, &(0x7f0000002700)=[@rthdr={{0x28, 0x29, 0x39, {0x3a, 0x2, 0x2, 0x6, 0x0, [@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}]}}}], 0x28}}, {{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002740)}, {&(0x7f0000002780)="7b9043f60e6ea8a45dbcc0b549887039d3aa68ed807b1fe22531a2a01ac7afa24bda0edbe97cfa6f078e19101c4ce44dc7075acd67b7c6ff2308704dc844657953da4c8c7d283531fb8e218b58a818b429d4cf2a69e9cb9c36d022b703098a46ed9e9df80d879aabbc744ea94ee32fee50c23389035fefb8e6334b59725e3cb5e7de2b1b65b752fef10522948b230ffc6c70bb6783405b8c97fa7951ba1148c679a4e87fb85c483e9e15144d152ad3c6501cc405a9217a46f97ee20e4deb40e6b831a7acb62e25d3d7ee7ab5261383b8cc5c446b", 0xd4}, {&(0x7f0000002880)="249ad0f87108125568510fb02c39344c557e2c3b35eefdcb7b5423816f80bc49cc56989617337f415094919dad6c9ffa8da3d698aebcbc0ce5332295a46e36e0b910560f9643fd7125f40b78cd6183d24b8d3c50b8ddeba219daaedd4907858bb9eca95b103ab690ed936d", 0x6b}, {&(0x7f0000002900)="059279bfc017535e83d10d669a5726d7356c5311db531804a10ee94433474ff95693955686397dfcf3e39959097dfa2e1af1de5cd7ab8c00301fa1518a5799e973a322e92cdaa02775d6c30bae53919527af4b8aecd315c116b766ee72891f0f990879e05f", 0x65}, {&(0x7f0000002980)="1017461d4ae886cd3d07b513fe582d3234a6bf570a2b8567a454fcb3c1e9d67ce32c44350db0e6ee6a056140318db2bf9091e6e5b425238d284aa668e3eb127ea7cfa86eceffec1a582496d364f4fd509790ec2febba120c37c84470932cd8e0e594728db547d5faf2b0e5ba9c833e491a3bd1a1c5745c81a7ceffedd7d9180918bde8bfac26a50435699fc702f7c55572232fa2f54fe4847740744b6fbe155624dffa596a9a9d1f054a4f032cc1", 0xae}, {&(0x7f0000002a40)="584c9da990669480daca0fd2909ca174dae293ac21c7cb1838b8c6f9275345ab952e7468e46776298af86d76e7", 0x2d}, {&(0x7f0000002a80)="7de7a9ab57be50b072c72a597aa2e48cee2a9d573bd0b9cb59abdaab772bbddacae13bbd9cf208da353f4a0317d464385605e5bb42f60e67e8c42a61a8a6116222f6828a942ee4565c3a2fff1b5c34b89814226128159d4169f76663c619d5ce8cfd56a11ca863e8b5e1a0e134a523c76d484d564eb8486297c2ace7b20a28235ee108f4f16334867ec1c352a279c421cc4da43562fd0320c688d33552a952ccd2072ee6306423eccc68cfe549e12a5e810ef870d860da508ae7cb0338e5c320ee77522465d0a0cd44970ce287f1959775748cf718063d1993ee259bdb7ed3d0138b6f33", 0xe4}, {&(0x7f0000002b80)="7439eb201f68d499129acfed0b7a834a9d64c6f517b1053fe7c56fdd51b1ecec02e276a1c987227d6ad21054f91abdc3e229328742add826b59954c4f47e1306261e6b862ec47cccccc30e14820d96489b6f8cc6848013c747d2b00f63b57010ff46449bd5eea8d631047380d9247da28779456709a042d10b7ba3c276f2bd3d4d8df3e33a78882f8d357b70e0c12b426c629541723ce2b53b0e8a93", 0x9c}], 0x8}}], 0x4, 0x40000d1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x2f000000, 0xe, 0x0, &(0x7f0000000740)="000000000000c000ee6e3e20630c", 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000006c0), r5) sendmsg$L2TP_CMD_SESSION_MODIFY(r5, &(0x7f0000002e40)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002e00)={&(0x7f0000000700)={0x28, r6, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x2055}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x44010}, 0x814) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x1c, r8, 0x705, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40008d4}, 0x0) r9 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r9, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) setsockopt$inet_msfilter(r9, 0x0, 0x29, &(0x7f0000000180)=ANY=[@ANYBLOB="e0000002ac1414aa0100000002"], 0x18) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x63, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2}}}}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'ip6tnl0\x00', r4, 0x0, 0x1, 0x60, 0x2, 0x60, @ipv4={'\x00', '\xff\xff', @empty}, @local, 0x8, 0x20, 0x101, 0x7}}) r11 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x5}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0x6358}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000089c) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f0000000580)={'syztnl0\x00', r4, 0x2f, 0x2, 0x6, 0x9, 0x20, @loopback, @remote, 0x7800, 0x80, 0xe4d, 0x200}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r5, &(0x7f0000002dc0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002740)={&(0x7f0000000780)={0x180, r8, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0x8c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xa009ba8bee834073}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x24000804}, 0x404e842) socket$netlink(0x10, 0x3, 0x0) 3.160196237s ago: executing program 1 (id=1825): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e73"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001000010700000000000000000a000000060001001700000008000a"], 0x24}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000000)) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00000003c0)={0x33}, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000003c0), &(0x7f0000000080)=@udp=r1, 0x1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r2, r4, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x16, &(0x7f0000000340)=ANY=[], 0x0) 3.146052103s ago: executing program 2 (id=1826): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000140)={r1, 0x1, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @random="790c7edd3d8d"}, 0x10) close(r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYRESHEX=0x0], 0x50}, 0x1, 0x0, 0x0, 0x4800}, 0x24040841) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0x1, 0xfffffffc}, 0x50) 3.010989567s ago: executing program 1 (id=1828): r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write(r1, 0x0, 0x2b) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207"], 0x10}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a48000000060a010400000000000000000a0000050900020073797a32000000001c000480180001800d00010073796e70726f787900c72b00040002800900010073797a31000000001400"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0xe0}}, 0x0) close(r2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) sendfile(0xffffffffffffffff, r4, 0x0, 0xffffffff000) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x6, 0x4, 0x2, 0x60c, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x0, 0x4, 0x0, 0xf}, 0x50) close(r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB], 0x38}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000ec0)={'wpan0\x00'}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@delneigh={0x30, 0x1d, 0x1, 0x70bd25, 0x25dfdbfb, {0xa, 0x0, 0x0, 0x0, 0x80, 0x28, 0x1}, [@NDA_DST_IPV6={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x2b}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x4002094) socket$nl_route(0x10, 0x3, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000480)) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$NFC_CMD_ACTIVATE_TARGET(r6, 0x0, 0x11) 2.927579972s ago: executing program 2 (id=1829): r0 = socket(0x23, 0x801, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x30, r3, 0x21, 0x72bd25, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x14, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x10, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x4]}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r3, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r4, 0x21, 0x85, 0xcf, &(0x7f0000000000)="fae68670fef1c45ff0634fe72a6253b4357c978887379648e34b8e43761f35000437ab851cde4821ce97abc68f6a1c3593e2a7a267f78fff0e9e1743899a7dc5c1d2ecae353bd4bcdb61c053b1d7b1223331d664596d93a54d408700062455bf71027a99387a4c190aa0098ed6ed8951ff86c092399a8d11b76c5e00"/133, &(0x7f00000008c0)=""/206, 0x1000, 0x0, 0x1a, 0x64, 0xfffffffffffffffe, &(0x7f00000000c0)="d5231f25b5f85be12036902ce1a29123e3c1d41aa6d9c06ff230c473bf3c", 0x0, 0x8000}, 0x48) 2.814943431s ago: executing program 2 (id=1830): syz_emit_ethernet(0x46, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x2, 0xb, 0x38, 0x6a, 0x0, 0x8, 0x1, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x17}}, @redirect={0x5, 0xbfea782ca9645394, 0x0, @remote, {0x5, 0x4, 0x3, 0x3f, 0x505, 0x66, 0x7ef, 0x48, 0x1, 0x9, @broadcast, @loopback}, '\x00\x00\x00\x00\x00\x00\x00\x00'}}}}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x20, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0x6}, {0xfff1, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2.730107873s ago: executing program 2 (id=1833): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0xd) r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@ip_retopts={{0x18, 0x0, 0x7, {[@rr={0x7, 0x7, 0x6, [@empty]}]}}}], 0x18}}], 0x1, 0x8000004) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00005200060005000100000008000800", @ANYRES32=r3], 0x2c}}, 0x40080) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x30, r6, 0x1, 0x72bd29, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TX_RATES={0x14, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x10, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x5, 0x1}]}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r9 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r9, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0x0, 0xfffffffd}, 0x20) connect$l2tp6(r9, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x6, 0x4}, 0x20) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r10, 0x84, 0x6d, &(0x7f0000000240), &(0x7f0000000700)=0x8) sendmmsg$inet6(r9, &(0x7f0000001780)=[{{&(0x7f00000001c0)={0xa, 0x4e24, 0x1, @private2, 0x2}, 0x1c, 0x0, 0x0, &(0x7f00000017c0)=[@hopopts={{0x18, 0x29, 0x36, {0x2c}}}], 0x18}}], 0x1, 0x4000010) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x2f, 0x8e, 0xe4, 0x5, 0x3, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x40, 0x1, 0x80000000}}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x5c, r8, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x5c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x5, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r0}]}, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb01001800000000000000400000004000000002000000000000000000000d0400000000000000000000010500000008000000000000000000000300000000010000000200000004000000000000000000000b"], 0x0, 0x5a}, 0x28) 2.033165258s ago: executing program 1 (id=1840): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) (async) close(0xffffffffffffffff) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r3, 0x800448d2, &(0x7f0000000800)={0x8, &(0x7f0000000340)=[{}, {@fixed}, {}, {@none}, {}, {}, {@fixed}, {}]}) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async, rerun: 32) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000851}, 0x40) (async, rerun: 32) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x3, 0x4}, 0x6) 1.850493856s ago: executing program 1 (id=1842): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x3, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x1}, 0xe) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000280)={0x1, 0xd}, 0x2) ppoll(&(0x7f0000001080)=[{}], 0x13, &(0x7f0000000340)={0x0, 0xff}, 0x0, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f0000000240)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f00000005c0)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000d00)="27050200590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9d9bf1174bbf47ef74d55a99ad39d207cb572bb63dfc8f6098e3251eb181ebb55a0e82b5aa114e78f51a1e0eec04a10c2897204a66afab94dd8de001923467692f87653809bdac2ecd596160bec5c8869a08ecc5bf1561bb7ebf3468a2a212c7107d3c03418321ff77586b723dbfb3f03212aaf9150914bb989ef324957cea1707943a287afd6aa759a30e50f215292e54ebadd", 0xcb}, {&(0x7f0000000940)="1c393502dda1a67d93b1ceccbe972c4fef9c33ecf2d824f3a33513f45f472bbdc8e3a2275f2587f0da0b3ae419bed996116448f90d113ce98aa985f3430858f5cb9a668a1800bf2354b33cdff83033de518580a3080d7f4cc2406e071138439e1566dd17983ee053ab672f362d3292e24a9952f18ec3d8b37bb3391096c1d4442a754899299321c03cbcfb98a26994b2a072c2b9d9c70d619545e5f61b050e40166d2ff57dcc008f24fd5339e7bc21e25863f80d2487c30b6bf781608a31d68e9319ab1712d8f5bdde849c040417c864cbfd3923dcb9fc6bdc2ea53334184b03efcb631dc68f0a7b6e13eea4b80d4237120e32932ca4e2b50bad0735496d36a191d91f03b477b9587bc0ba489932e34f819fa1524ebad53a3d94b46c6aeff4f42fa067729fbb2862c09d337a75e0c8429d4bfe0dee2e1e23e8c22787178600ecca135623cd1e4701f35bd4e7c936a8ee274120e7662328a5aba1161b05889b045696721c79bff0547efe051f3c5de77fdd3c77afd41a1a7747a982b7efb013c9d6bac7d3ad1f9b7c3a5a1448b35696f03bca1c875e346edc55b7a271c3e5f3c0df72c8e4e6d444abb4b4d18460161fe953fce793ca2b322b9addbb68d840d61301c79514e7dd4ff3b34845781b5a49c39ca1a917f7cb493148827061eace555605257c32e3404cf49898c374b74887745e2fad69e3375f493e8d7c87903e58cb10b87d6d96619a1096f2e70a0e2a604b8e1a989d2c616658e5a3781b35c0775866bec169328e4541366803aa500289dd5ae51dd815bc0c7dc524dd81e27e68bc469e8334fa64d804ab87117927b58077a8fa16555c786d7d48cf591435f5e4edd8cf9feea235ae599c73e6", 0x26b}, {&(0x7f0000000040)="e23305ca5e3ff47787bd5e9916", 0xd}, {&(0x7f0000000180)="5b40223e12c649d3cda5623235ab5c7ff02187522d193b1be19545f0e5a2d1f413dcd188811c24561c292b", 0x2b}, {&(0x7f00000007c0)="d4f76ae42318901392806a248ff0f1de0ffb2f9e3fc263a6c737f4f767771b4df348476dee03033bd0dd6591f45437ad999ee7473a1396a48e6a747026f5ab324c1aa46dff7b15f46b422a97a52d4d053be96156f0efa82c7fdc846b34acd928bf", 0x61}], 0x5}, 0x9cdc2384056b48b8) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = accept(r1, 0x0, &(0x7f0000000640)) setsockopt$CAN_RAW_JOIN_FILTERS(r4, 0x65, 0x6, &(0x7f0000000780), 0x4) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a6c000000060a0b0400000000000000000000000044000480400001800800010066776400340002800800034000000000080003400000000a080003400000000a08000340000000020800034000000002080001400000000808000940000000000900020073797a3200000000140000001100010000000000000000000000000afd11bf1dfd669b27233b6f54bad59cd0e89c04f0777f554f326a3f"], 0x94}}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r5 = accept4(r3, 0x0, 0x0, 0x0) r6 = socket$inet6(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400090527bd7000fddbdf25021f00cb", @ANYRES32=r8, @ANYBLOB="0800040064010104080008000001000008000200e00000020800090006000000080001df7f000001080009"], 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000"], 0x18}}, 0x0) sendto$inet6(r6, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1a, 0x4, &(0x7f0000000140)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x64, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYRESDEC=r9, @ANYRES64=r9], 0x34}, 0x1, 0x0, 0x0, 0x4c001}, 0xc004) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r5) 1.328905429s ago: executing program 0 (id=1849): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @private0}], 0x2c) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f00000003c0)=[@in={0x2, 0x0, @loopback}], 0x10) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000040)) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="180200000000000000000000000000008500000017000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x40008, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.275133076s ago: executing program 3 (id=1850): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'veth0_vlan\x00', 0x0}) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000)=0x4011, 0x4) connect$can_bcm(0xffffffffffffffff, &(0x7f00000005c0), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x1402, 0x1, 0x70bd27, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x44018}, 0x4000044) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xd, 0x20000000ec071, 0xffffffffffffffff, 0x0) r3 = gettid() r4 = socket(0x10, 0x803, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000000)=0x10001, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x403, 0xfffffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, r1, 0x59808, 0x55007}, [@IFLA_NET_NS_PID={0x8, 0x13, r3}]}, 0x28}, 0x1, 0x0, 0x0, 0x4802}, 0x4000010) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x540, 0x0, 0x540, 0x540, 0x540, 0x1d0, 0x610, 0x610, 0x610, 0x610, 0x610, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [0xffffffff, 0xff000000], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21}, 0x0, 0xa8, 0xf0, 0x0, {0x7a00000010000000}}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@private=0xa000000, @ipv4=@empty, 0xa, 0x30, 0x1}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0x0, 0x0, 0xffffff00], [], '\x00', 'bond_slave_0\x00', {}, {}, 0x2f, 0x9}, 0x0, 0xa8, 0xe0, 0x48000000}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x6, 0x5}, {0xffffffffffffffff, 0x6, 0x1}, {0x0, 0x4, 0x2}, 0xfffffffe}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback, 0x0, 0xfe}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r7, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r8, 0x100, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x80000) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @none, 0xb, 0x1}, 0xe) getpeername(r5, 0x0, &(0x7f0000000180)) 955.513179ms ago: executing program 3 (id=1851): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000e00000000000000000000000000e5000300000000000600000000000000250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) 955.236609ms ago: executing program 4 (id=1852): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f00000002c0), 0x4) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) (fail_nth: 81) 915.120116ms ago: executing program 0 (id=1853): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x7fff}, 0x1c) (async) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @mcast2, 0x2}, 0x1c) (async) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000480), 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r2}) sendto$inet6(r3, &(0x7f0000000080)="24d60a843349b0df8dcf8253b30b4636624cbdef96a0dd83f4c52f8dbf937e52ade0c9e711886f8443e98d77ee9f8e5a4b24adc8ad490eaf847b4bc507a97868259f65c2bdc0febd35d28d0ca8ef903f33f1db3796d55054d17c5ad2d60cf9189ee1821cbbd6bbe86d692233f4ec3a6f047eb5e12eabb2307699b346aa7871cbf79d0add2b3ccdefd7cf1eeeb3e633a1a2d3fc256b543c744cee5306adc3ca08e4030bc9024aa3c63545f83256b37f787439e368c017293156beeb0a4d9b3bbee757d8332e18912e048b6389538db0cf5f06f9c45745efcd223e20d345c6c5e7993f", 0xe2, 0x20000040, 0x0, 0x0) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x3c8, 0x0, 0x11, 0x148, 0x0, 0x0, 0x330, 0x2a8, 0x2a8, 0x330, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x2, 0x3, 0x2, 0x1}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x3}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00', {}, {}, 0x2e, 0x2, 0x2}, 0x0, 0xf8, 0x220, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x4, 0x2000, 0x2}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0xffffffffffffffff}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x4, 'system_u:object_r:systemd_logind_sessions_t:s0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYRESOCT=r4, @ANYRES8], 0x98}, 0x1, 0x0, 0x0, 0x30000010}, 0x24000040) 902.34093ms ago: executing program 1 (id=1854): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000100)={r1, &(0x7f0000000000)='\x00', 0x2a8a01, &(0x7f0000000040)={@_ha_fsid={[0x80000000, 0x290c3f62]}, {0xef, 0x2, 0x2, 0x6}}, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x6}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000140)={0x2, 0x82, "e33f26", 0x9, 0x1}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r4, 0x40086e81, &(0x7f0000000180)=0x7) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000001040)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001000)={&(0x7f0000000240)={0xd6c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x54, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x5b}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x18}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x80}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x5cc, 0x11d, 0x0, 0x1, [{0x44c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x1e8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x24, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x6c, 0x5, 0x30, 0x18, 0x24, 0x6, 0x26, 0x6, 0xb, 0x18, 0x4, 0x2, 0x30, 0x30, 0x12, 0x4, 0x18, 0x9, 0x1, 0x6c, 0x3, 0x1, 0x6, 0xb, 0x2, 0x1b]}]}, @NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x50, 0x2, [{0x2, 0x4}, {0x2, 0x8}, {0x1, 0x6}, {0x5, 0x3}, {0x2, 0x4}, {0x2, 0x8}, {0x5, 0x9}, {0x0, 0x6}, {0x0, 0x9}, {0x0, 0x3}, {0x1, 0x9}, {0x7, 0x6}, {0x0, 0xa}, {0x5, 0xa}, {0x5, 0x6}, {0x6, 0x3}, {0x7, 0x9}, {0x0, 0x5}, {0x5, 0x6}, {0x4, 0x7}, {0x0, 0x2}, {0x1, 0x7}, {0x3, 0x5}, {0x1, 0x3}, {0x6, 0xa}, {0x2, 0xa}, {0x3, 0x9}, {0x7, 0xa}, {0x1, 0x7}, {0x3, 0x7}, {0x2, 0x5}, {0x3}, {0x1, 0xa}, {0x4, 0x5}, {0x7, 0xa}, {0x3, 0x3}, {0x0, 0x2}, {0x3, 0x3}, {0x7, 0x4}, {0x3}, {0x6, 0x5}, {0x5, 0x6}, {0x1, 0x1}, {0x0, 0x2}, {0x4, 0x2}, {0x4, 0x5}, {0x7, 0x7}, {0x7, 0x5}, {0x1, 0x7}, {0x5, 0x8}, {0x4, 0x7}, {0x3, 0x2}, {0x5}, {0x1, 0x8}, {0x1, 0x8}, {0x7, 0x2}, {0x2, 0x5}, {0x7, 0x9}, {0x6, 0x3}, {0x3, 0x2}, {0x7, 0x2}, {0x4, 0x1}, {0x0, 0x2}, {0x4, 0x9}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x7}, {0x4, 0x4}, {0x5, 0x8}, {0x4}, {0x5, 0x9}, {0x3, 0xa}, {0x7, 0x8}, {0x4, 0xa}, {0x0, 0x2}]}]}, @NL80211_BAND_6GHZ={0xb0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x12, 0x36, 0x2, 0x48, 0x2, 0x1, 0x6, 0x12, 0x1b, 0xa, 0x30, 0x2, 0x18, 0x48, 0x4, 0xc, 0x36, 0x1b, 0x9, 0x9, 0x16, 0x0, 0x9, 0x30, 0x1, 0x48, 0x6]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x9, 0x0, 0x101, 0x1, 0xc2b9, 0x6, 0x81]}}, @NL80211_TXRATE_HT={0x20, 0x2, [{0x6, 0x9}, {0x2, 0x8}, {0x6, 0x7}, {0x0, 0xa}, {0x3, 0x8}, {0x0, 0x3}, {0x5, 0x3}, {0x5, 0x9}, {0x4, 0x5}, {0x6, 0x8}, {0x3, 0x8}, {0x1, 0x1}, {0x7, 0x5}, {0x6, 0x4}, {0x0, 0x3}, {0x2, 0xa}, {0x7, 0x1}, {0x0, 0x4}, {0x2, 0x5}, {0x7, 0x8}, {0x4, 0x7}, {0x0, 0x6}, {0x2, 0x4}, {0x6, 0x5}, {0x4, 0x7}, {0x0, 0x3}, {0x7, 0x8}, {0x1, 0x9}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x60, 0x16, 0x4, 0xb, 0x0, 0x5, 0x1, 0x2, 0x1, 0x2, 0x1b, 0x60, 0x12, 0x6, 0x9, 0x36, 0x16, 0x1]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x2, 0x245d, 0x8, 0x2, 0x4e96, 0x0, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x6, 0x401, 0x9, 0x3, 0x1, 0x6, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x7c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3e, 0x2, [{0x6, 0x8}, {0x3, 0xa}, {0x5, 0x1}, {0x3, 0x6}, {0x6, 0x2}, {0x1, 0x4}, {0x4, 0x8}, {0x7}, {0x7}, {0x6, 0x19}, {0x7}, {0x5, 0x8}, {0x6, 0x5}, {0x2, 0xa}, {0x1, 0x8}, {0x2, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x0, 0x4}, {0x7, 0x4}, {0x1, 0x4}, {0x0, 0x7}, {0x2, 0x1}, {0x3, 0xa}, {0x5, 0x7}, {0x3, 0x9}, {0x6, 0x2}, {0x6, 0x3}, {0x5, 0x6}, {0x1, 0x8}, {0x4, 0x8}, {0x7, 0x8}, {0x1, 0x4}, {0x1}, {0x3, 0xa}, {0x0, 0x8}, {0x1}, {0x0, 0x5}, {0x0, 0x1}, {0x1, 0x2}, {0x1, 0x8}, {0x1, 0x3}, {0x0, 0x5}, {0x7, 0x5}, {0x1}, {0x7, 0x5}, {0x5, 0x6}, {0x4, 0x8}, {0x6, 0x2}, {0x5, 0x5}, {0x0, 0x7}, {0x0, 0x5}, {0x6}, {0x7, 0x7}, {0x5, 0x7}, {0x3, 0x6}, {0x0, 0x6}, {0x6, 0x5}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x18, 0x1, 0x1b, 0x30, 0x36, 0x12, 0x18, 0x18, 0x3, 0x5, 0x16, 0x30, 0x1b, 0x12, 0x18, 0xb, 0xc, 0xc, 0x60, 0xb, 0x18, 0xb, 0x1, 0xc, 0x12, 0x0]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x40, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x12, 0x30, 0x0, 0x5, 0xb]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffe, 0x9, 0x9, 0x7465, 0x6, 0x6, 0x3ff, 0x1000]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x7, 0x4, 0x2, 0x200, 0x2, 0xc7f3, 0xfff]}}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x33ae05e}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x22c, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xac, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffd, 0x2, 0x0, 0x1, 0x6, 0xe88, 0x6, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x9, 0x30, 0xb, 0x1, 0x48]}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x4, 0x69, 0x18, 0x6, 0xb, 0x8, 0x16, 0x9, 0x4, 0xc, 0x24, 0x18, 0x12, 0x16, 0x4, 0x3, 0x24, 0xc, 0x24, 0x30, 0x12, 0x16, 0x48, 0x2, 0x30, 0x30, 0xc0, 0x20]}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x1, 0x5}, {0x0, 0x4}, {0x0, 0x9}, {0x2, 0x3}, {0x7, 0x4}, {0x4}, {0x7, 0x5}, {0x1, 0x3}, {0x0, 0x5}, {0x6, 0x7}, {0x4, 0x6}, {0x7, 0x1}, {0x1, 0x4}, {0x3, 0x7}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x0, 0x0, 0x4, 0x4, 0x7, 0x800, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0x26db, 0x12, 0x65c, 0x3, 0x81, 0x6, 0xffff]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff01, 0x1, 0xb, 0x0, 0x8, 0x5, 0x5]}}]}, @NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x3, 0x2}, {0x6}, {0x6, 0x1}, {0x1, 0xa}, {0x3, 0x7}, {0x1, 0x1}, {0x4, 0x3}, {0x7, 0x8}, {0x1, 0x6}, {0x0, 0x6}, {0x1, 0x8}, {0x7, 0x3}, {0x4, 0x6}, {0x7, 0x8}, {0x7, 0x6}, {0x4, 0x8}, {0x6, 0xa}, {0x6, 0x5}, {0x5, 0xa}, {0x1, 0xa}, {0x4, 0xa}, {0x1, 0x2}, {0x4, 0xa}, {0x5, 0x9}, {0x3, 0x3}, {0x7, 0x5}, {0x2, 0x2}, {0x7, 0x9}, {0x1, 0x3}, {0x1, 0xa}, {0x1, 0x5}, {0x1, 0xa}, {0x5, 0x6}, {0x3, 0x5}, {0x1, 0x4}, {0x5, 0xa}, {0x0, 0x2}, {0x3}, {0x1, 0x5}, {0x6, 0x2}, {0x1, 0xa}, {0x6, 0x7}, {0x0, 0x2}, {0x1, 0x2}, {}, {0x4, 0x5}, {0x5, 0x2}, {0x2, 0x1}, {0x0, 0x6}, {0x0, 0x3}, {0x0, 0x5}, {0x1, 0x2}, {0x4}, {0x4, 0x8}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0xd0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x40, 0x2, [{0x4, 0x1}, {0x3}, {0x5, 0x6}, {0x0, 0x6}, {0x1, 0x1}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x5, 0x4}, {0x0, 0x5}, {}, {0x7, 0xa}, {0x6, 0x8}, {0x5, 0x5}, {0x7, 0x5}, {0x6, 0x5}, {0x5, 0xa}, {0x1, 0x2}, {0x7, 0x7}, {0x0, 0x3}, {0x3, 0x1}, {0x6, 0x1}, {0x5, 0x8}, {0x2, 0x3}, {0x6, 0x9}, {0x4, 0xa}, {0x5, 0x1}, {0x2, 0x7}, {0x0, 0x2}, {0x1, 0x8}, {0x6, 0x7}, {0x7, 0x6}, {0x7, 0x9}, {0x0, 0x8}, {0x4, 0x3}, {0x5, 0x1}, {0x6, 0x8}, {0x6, 0x1}, {0x6, 0x6}, {0x6, 0x9}, {0x2, 0x6}, {0x0, 0xa}, {0x0, 0x8}, {0x6, 0x8}, {0x5}, {0x6, 0x12}, {0x7, 0x7}, {0x6, 0x9}, {0x5, 0x3}, {0x4, 0xa}, {0x4, 0x1}, {0x4, 0x8}, {0x5, 0x1}, {0x3, 0x3}, {0x0, 0x7}, {0x1, 0x1}, {0x0, 0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x7}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x7, 0x2, 0x294, 0x2, 0x2, 0x4]}}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x0, 0x9, 0x7, 0x48, 0x16, 0x6, 0xb, 0x60, 0x16, 0x60, 0xfc51c43979e8dabb, 0x2, 0x24, 0x1b, 0x6c, 0xc, 0xc, 0x1, 0x16, 0x4, 0x1b, 0x1b, 0x9, 0x4, 0x6, 0x9, 0x6c, 0x16, 0x2f, 0x16, 0x1b, 0x18]}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x5, 0x48, 0x4, 0x6c, 0x2, 0xb, 0x3d, 0x60, 0x4, 0x2, 0x9, 0x12, 0xc, 0x3, 0xc, 0x12, 0x12, 0x18, 0x48, 0xc, 0x6, 0x6c, 0x0, 0x1, 0x5, 0xb, 0x48, 0x6]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0xa0, 0x1, 0x2, 0x8a5, 0xfffb, 0xf, 0x2]}}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x8, 0x5, 0x7f, 0xffff, 0xe26, 0x2, 0x4]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x5, 0x4, 0x16, 0x2, 0x16, 0x18, 0x3, 0x5, 0x9, 0x48, 0x36, 0x24, 0x4]}]}, @NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xfffffffffffffffa}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x14c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x13c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x1b, 0x6c, 0x48, 0x48, 0x0, 0x60, 0x4, 0x6, 0xb, 0x3, 0x5, 0x5, 0x14, 0x24, 0x9, 0x61, 0x2, 0xc, 0x16, 0x16, 0x0, 0x6c, 0xb, 0x5, 0x4, 0x24]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x74, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x6, 0x2}, {0x2, 0x8}, {0x2}, {0x5, 0x9}, {0x4, 0x8}, {0x1, 0x1}, {0x6, 0x5}, {0x7, 0x5}, {0x4, 0x3}, {0x3, 0x1}, {0x4, 0x4}, {0x1, 0x2}, {0x0, 0xa}, {0x4, 0x4}, {0x4, 0x1}, {0x3, 0x8}, {0x7}, {0x5, 0x9}, {0x5, 0x1}, {0x5, 0x5}, {0x5, 0x2}, {0x3, 0x1}, {0x2, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x0, 0x7}, {0x4, 0x6}, {0x1, 0x6}, {0x7, 0x1}, {0x5, 0x2}, {0x1, 0x9}, {0x3, 0x9}, {0x6, 0x9}, {0x2, 0x2}, {0x1, 0x6}, {0x0, 0x6}, {0x7, 0x2}, {0x1, 0x2}, {0x6, 0x6}, {0x3, 0x8}, {0x4, 0x4}, {0x2, 0x7}, {0x7, 0x1}, {0x1, 0x1}, {0x1, 0x6}, {0x0, 0x2}, {0x0, 0xa}, {0x7, 0x3}, {0x3, 0x9}, {0x5, 0x5}, {0x1, 0x2}, {0x5, 0x1}, {0x1, 0x7}, {0x6, 0x9}, {0x5}, {0x0, 0x8}, {0x5, 0x4}, {0x6, 0x1}, {0x6, 0x7}, {0x1, 0x6}, {0x5, 0x2}, {0x3, 0x5}, {0x3}, {0x7, 0x1}, {0x6}, {0x7, 0x8}, {0x4, 0x1}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0xb, 0xd, 0x9, 0x18, 0x1, 0x9, 0x16, 0x24]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x67, 0x82, 0xfff7, 0x9, 0xa, 0x3]}}]}, @NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x6c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xfffe, 0x40, 0x8, 0x14e, 0x0, 0xca6a, 0x100]}}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x3, 0x2, 0x48, 0x9, 0x3, 0x30, 0xb, 0x2, 0x1, 0x1]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x7fff, 0x6, 0x6, 0xff, 0x6, 0x4, 0x3]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x1b, 0x24, 0x4, 0x12, 0x60, 0x5, 0x3, 0xd5, 0x30, 0x1b, 0x6c, 0x30, 0x6, 0x16, 0x60, 0x48, 0x12, 0x16, 0x36, 0x1, 0xb, 0xc, 0x60, 0x17, 0x9, 0x35, 0x16]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}]}]}, @NL80211_ATTR_TID_CONFIG={0x20c, 0x11d, 0x0, 0x1, [{0x208, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x204, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x16, 0x1, [0x3, 0x16, 0x2, 0x0, 0x3, 0x0, 0x0, 0x4, 0x3, 0x6, 0x5, 0x18, 0xb, 0x6c, 0x18, 0x60, 0x4, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x0, 0x2, 0xf, 0xf07b, 0x1ff, 0x9, 0x8]}}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x4, 0xa}, {0x2, 0x5}, {0x6, 0x2}, {0x5, 0xa}, {0x5, 0x9}, {0x4, 0x8}, {0x5, 0x4}, {0x4, 0x3}]}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x2, 0x8, 0x0, 0x7ff, 0x8, 0x4, 0x3]}}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x3, 0x6c, 0x6e, 0x2, 0x6, 0x36, 0x12, 0x24, 0x9, 0x3, 0x2, 0x2, 0x6c, 0x48, 0x4, 0x48, 0x9, 0x12, 0xc, 0xc]}]}, @NL80211_BAND_2GHZ={0x44, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x647, 0x35, 0x4, 0x847e, 0xfe7c, 0x40, 0x7f]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x800, 0x3ff, 0xd4f, 0x35d, 0x6, 0x7, 0x35]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x5, 0x30, 0x18, 0x18, 0x6c, 0x6]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x1, 0x0, 0x1000, 0x3, 0x0, 0x7d]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0xe8ce, 0x6, 0xd24f, 0xde49, 0x8, 0xa, 0x8]}}]}, @NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x4, 0x12]}]}, @NL80211_BAND_2GHZ={0x78, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x9aa, 0x80, 0x2, 0x5, 0x8, 0x8, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xac, 0xd, 0x0, 0xffff, 0x47a, 0x4, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x8, 0xffff, 0x4, 0x30, 0xffff, 0x2, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x2, 0x1f9, 0x4a, 0x2, 0x6d2, 0x8, 0x400]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x1, 0xc0, 0xa, 0x7f, 0x101, 0x3, 0x1]}}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0xb]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}]}]}]}]}, @NL80211_ATTR_TID_CONFIG={0x4cc, 0x11d, 0x0, 0x1, [{0x4bc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x490, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x48, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0xffff, 0x6, 0x6, 0x9, 0x9, 0x4, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x30, 0x6c, 0x6c, 0x4, 0x24, 0x2, 0xb, 0x1, 0x24, 0x24, 0x12, 0x9, 0x6, 0x5, 0x36, 0x12, 0x5, 0x2, 0x16, 0x36, 0x16, 0x6, 0x5, 0x0, 0xb, 0xb]}]}, @NL80211_BAND_2GHZ={0xf8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x13, 0x1, [0x2, 0x6, 0xc, 0xc, 0x12, 0x1, 0x12, 0x18, 0x1f, 0xb, 0x30, 0x5, 0x1, 0x36, 0xb]}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x2, 0x5}, {0x5, 0x6}, {0x3, 0x5}, {0x6, 0x6}, {0x7, 0x2}, {0x0, 0xa}, {0x5, 0x6}, {0x1, 0x2}, {0x2, 0x8}, {0x3, 0x6}, {0x5, 0x3}, {0x5, 0x6}, {0x5, 0x7}, {}, {0x4}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x4}, {0x0, 0x9}, {0x4, 0x4}, {0x1, 0xa}, {0x2, 0x6}, {0x0, 0x7}, {0x0, 0x5}, {0x7, 0x7}, {0x7}, {0x7, 0x2}, {0x0, 0x7}, {}, {0x0, 0x7}, {0x2, 0x7}, {0x4, 0x3}, {0x0, 0x3}, {0x4}, {0x3}, {0x1, 0xa}, {0x7, 0x3}, {0x6, 0xa}, {}, {0x0, 0x8}, {0x1, 0x1}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x6c, 0x4, 0x2, 0x34, 0x18, 0x12, 0xb, 0x4, 0x24, 0x18, 0x9]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x8c2, 0x1, 0x1, 0x5, 0x5, 0x2, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffc, 0x5, 0x0, 0xffff, 0x8, 0xd8, 0x94, 0x401]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8001, 0x6, 0x7ff, 0x7, 0x367c, 0x6, 0x51f, 0xfff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2d68, 0x8000, 0x8000, 0x6, 0x9, 0x6, 0x200, 0xc]}}, @NL80211_TXRATE_HT={0x48, 0x2, [{0x3, 0x9}, {0x6, 0x6}, {0x1, 0xa}, {0x5, 0x5}, {0x5, 0x5}, {0x1}, {0x2, 0x7}, {0x6, 0x3}, {0x2, 0x8}, {0x6, 0x3}, {0x2, 0x4}, {0x0, 0x8}, {0x7, 0x9}, {0x3, 0x6}, {0x5, 0x8}, {0x0, 0x7}, {0x5, 0x8}, {0x2, 0xa}, {0x1, 0x8}, {0x1, 0xa}, {0x6, 0x4}, {0x0, 0x1b}, {0x4}, {0x2, 0xa}, {0x0, 0x2}, {0x7, 0x3}, {0x1, 0x4}, {0x2, 0x9}, {0x1, 0x4}, {0x1}, {0x3, 0xa}, {0x5, 0x3}, {0x5, 0x3}, {0x0, 0x7}, {0x4, 0x2}, {0x0, 0x8}, {0x0, 0x2}, {0x5, 0x6}, {0x4, 0xa}, {0x4}, {0x1, 0x8}, {0x2, 0x4}, {0x0, 0x5}, {0x0, 0x6}, {0x6, 0x2}, {0x4, 0x2}, {}, {0x7, 0x1}, {0x1, 0x5}, {0x1, 0x3}, {0x1, 0x6}, {0x3, 0x5}, {0x6, 0x8}, {0x0, 0x4}, {0x1, 0x5}, {0x5, 0x6}, {0x2, 0x3}, {0x7, 0x3}, {0x6, 0x1}, {0x0, 0x4}, {0x3, 0x7}, {0x7, 0x9}, {0x1, 0x8}, {0x6, 0x1}, {0x1, 0x4}, {0x3, 0xa}, {0x3, 0x5}, {0x1, 0x3}]}]}, @NL80211_BAND_60GHZ={0xb8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x1ff, 0x3c7, 0x7, 0x6, 0x0, 0xd70a, 0x2]}}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x9, 0xbb374516ba57283, 0x5, 0x30, 0x16, 0x9, 0x556459e913edcbb4, 0x18, 0x3, 0x18, 0x6c, 0x18, 0x2, 0x16, 0x4, 0x12, 0x9, 0x1, 0x30, 0x6, 0x30, 0xa, 0x24, 0x9]}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x2, 0x1}, {0x7, 0x6}, {0x3, 0xa}, {0x6, 0x2}, {0x1, 0x8}, {0x7, 0x1}, {0x1, 0xa}, {0x5, 0xa}, {0x1, 0x4}, {0x3, 0x4}, {0x5}, {0x4, 0x9}, {0x1, 0xa}, {0x7, 0x3}, {0x0, 0x4}, {0x5, 0x4}, {0x4, 0x8}, {0x4, 0x6}, {0x6, 0x8}, {0x5, 0xa}, {0x6, 0x9}, {}, {0x3, 0x6}, {0x0, 0x7}, {0x4, 0x2}, {0x1}]}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x0, 0x9}, {0x1, 0x8}, {0x1, 0x5}, {0x3, 0x9}, {0x3, 0x9}, {0x1, 0x7}, {0x7, 0x8}, {0x5, 0x6}, {0x4, 0x5}, {0x7, 0x4}, {0x2}, {0x1, 0x8}, {0x0, 0x1}, {0x4, 0x2}, {0x1, 0x4}, {0x0, 0x3}, {0x7, 0xa}, {0x6, 0xa}, {0x0, 0x1}, {0x3, 0x5}, {0x2, 0x9}, {0x2, 0x7}, {0x3, 0x7}, {0x6, 0x3}, {0x1, 0x6}, {0x6, 0xa}, {0x0, 0x1}, {0x5, 0x6}, {0x0, 0x5}, {0x1, 0x5}, {0x2, 0x7}, {0x3, 0x2}, {0x2, 0x5}, {0x3, 0x9}, {0x4, 0x4}, {0x7, 0x2}, {0x6, 0x1}, {0x4, 0x7}, {0x3, 0x8}, {0x7, 0x7}, {0x0, 0x9}, {0x7, 0x9}, {0x6}, {0x3, 0x7}, {0x2, 0x1}, {0x6, 0x2}, {0x3, 0x4}, {0x1, 0xa}, {0x6, 0x1}, {0x4, 0xa}, {0x0, 0x2}, {0x3, 0x8}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x1}, {}, {0x0, 0x7}, {0x2, 0x7}, {0x0, 0x6}, {0x4}, {0x6, 0x8}, {0x5}, {0x3, 0x7}, {0x4, 0x2}, {0x3, 0x4}, {0x2, 0xa}, {0x2, 0x3}, {0x4, 0x4}, {0x1, 0x6}, {0x0, 0x7}, {0x6, 0x4}, {0x0, 0xa}, {0x1, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x651b, 0x9, 0x6760, 0x4, 0x4, 0x0, 0x5, 0x7]}}]}, @NL80211_BAND_5GHZ={0xec, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0xbb46, 0xbb67, 0x8, 0x4, 0x8001, 0x1ff, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x6, 0x2}, {0x1, 0x3}, {0x0, 0x1}, {0x5, 0x9}, {0x2, 0x3}, {0x2, 0x1}, {0x1, 0x1}, {0x6}, {0x6, 0x4}, {0x3, 0x2}, {0x7, 0x1}, {0x7, 0x8}, {0x0, 0x9}, {0x0, 0x7}, {0x6, 0x1}, {0x2, 0x1}, {0x3, 0x5}, {0x1, 0x9}, {0x4, 0x2}, {0x4, 0x8}, {0x4, 0x4}, {0x7, 0x9}, {0x0, 0x8}, {0x0, 0xa}, {0x7, 0x3}, {0x7, 0xa}, {0x7, 0x5}, {0x3, 0x7}, {0x3, 0x2}, {0x6, 0x7}, {0x0, 0x2}, {0x1, 0x6}, {0x1, 0x6}, {0x5, 0x2}, {0x7, 0xa}, {0x3, 0x6}, {0x0, 0x6}, {0x4, 0x4}, {0x6, 0x3}, {0x4, 0xa}, {0x7, 0x2}, {0x3}, {0x2}, {0x4, 0x2}, {0x4, 0x5}, {0x3, 0x4}, {0x5}, {0x6, 0x3}]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x1b, 0x2, 0x9, 0x18, 0x31, 0x4, 0x36, 0x16, 0xc5f489fc2a7f4b15, 0x1, 0x6, 0x16, 0x1, 0xc, 0x48, 0x30, 0x18, 0x1, 0x4, 0x4, 0x18, 0x1b, 0x1, 0x1b, 0x0, 0x30, 0x48, 0x6, 0x0, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x40, 0x8, 0x4, 0x8, 0x3ff, 0x0, 0x7f]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x2, 0x3}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x0, 0x9}, {0x3, 0x1}, {0x0, 0x3}, {0x5, 0x4}, {0x6, 0x5}, {0x2, 0xa}, {0x1, 0x8}, {0x6, 0x6}, {0x6, 0x5}, {0x3, 0x3}, {0x5, 0x8}, {0x3, 0x9}, {0x5, 0xa}, {}, {0x3, 0x1}, {0x4, 0x9}, {0x6, 0x9}, {0x4}, {0x2, 0x2}, {0x5, 0x8}, {0x1, 0x1}, {0x1, 0x2}, {0x4}, {0x2, 0x9}, {0x3, 0x5}, {0x5}, {0x6, 0x6}, {0x1, 0x2}, {0x3, 0x7}, {0x4, 0x6}, {0x0, 0x7}, {0x1}, {0x0, 0x9}, {0x7, 0x7}, {0x0, 0x5}, {0x7, 0x5}, {0x0, 0x8}, {0x7, 0x9}, {0x2, 0x5}, {0x1, 0x6}, {0x6, 0xa}, {0x0, 0x5}, {0x4, 0x2}, {0x0, 0xa}, {0x6, 0x5}, {0x7, 0x3}, {0x1, 0x5}, {0x1, 0x3}, {0x5, 0x1}, {0x6}, {0x1, 0x3}, {0x1, 0x8}, {0x1, 0x9}, {0x3}, {0x0, 0x5}, {0x6, 0x5}, {0x5, 0x3}, {0x1, 0x5}, {0x0, 0x5}, {0x7, 0x2}]}]}, @NL80211_BAND_6GHZ={0x74, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x13, 0x1, [0xe, 0x9, 0x60, 0x16, 0x1, 0x1b, 0xe, 0x36, 0x24, 0x30, 0x6c, 0x2, 0x5, 0x48, 0x2]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x60, 0x19, 0x24, 0x36, 0x1b, 0x1, 0x3, 0x36, 0x1b, 0x36]}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x7}, {0x0, 0x5}, {0x3, 0x5}, {0x1, 0x4}, {0x6, 0x5}, {0x3, 0x2}, {0x3, 0x8}, {0x1}, {0x4}, {0x0, 0x9}, {0x2, 0x2}, {0x5, 0xa}, {0x2, 0x8}, {0x6, 0x1}, {0x7, 0x9}, {0x4, 0x5}, {0x0, 0x5}, {0x2, 0x8}, {0x0, 0x6}, {0x0, 0x4}, {0x6, 0x7}, {0x6, 0x2}, {0x4, 0x8}, {0x5, 0xa}, {0x7, 0x1}, {0x5, 0x9}, {0x6, 0x1}, {0x0, 0x9}, {0x5}, {0x7, 0x8}, {0x3, 0x4}, {0x4, 0x1}, {0x7, 0x5}, {0x4, 0x1}, {0x4, 0xa}, {0x0, 0x1}, {0x5, 0xa}, {0x4, 0x5}, {0x0, 0x4}, {0x3}, {0x6, 0x8}, {0x6, 0x7}, {0x7, 0x6}, {0x4, 0x9}, {0x1, 0x8}, {0x7}, {0x7, 0x5}, {0x7, 0x8}, {0x5, 0x3}, {0x2, 0x8}, {0x2, 0x5}, {0x4, 0x1}, {0x0, 0x2}, {0x0, 0x2}, {0x6, 0x2}, {0x2, 0x7}, {0x0, 0xa}, {0x0, 0x9}, {0x7, 0x2}, {0x4, 0x2}, {0x1, 0x6}, {0x6, 0x6}, {0x1, 0x6}, {0x7, 0x5}, {0x7, 0x5}, {0x2, 0x2}, {0x7, 0x8}, {0x5, 0x6}, {0x2}, {0x2, 0x7}, {0x2, 0x6}, {0x2, 0x2}]}]}, @NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x100, 0x8, 0x2, 0x8, 0xc, 0x81, 0xb8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff7, 0x5, 0x100, 0xf3b, 0xffff, 0x7, 0x800, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x53c205299b0c006e}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0xcc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xf, 0x101, 0x8, 0x80, 0x1000, 0x2, 0x839, 0x7fff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x5}, {0x6, 0x1}, {0x6, 0x1}, {0x6, 0x6}, {0x0, 0xa}, {0x5, 0x3}, {0x2, 0x7}, {0x5, 0x1}, {0x5, 0x8}, {0x5}, {0x3, 0x7}, {0x5, 0x1}, {0x5, 0x9}, {0x3, 0x6}, {0x2, 0x6}, {0x4, 0x5}, {0x2, 0x5}, {0x4, 0x5}, {0x0, 0x7}, {0x2, 0x4}, {0x2, 0x6}, {0x7, 0x3}, {0x0, 0x8}, {0x1, 0x7}, {0x7, 0x7}, {0x0, 0x4}, {0x1}, {0x5, 0x9}, {0x1, 0x1}, {0x5}, {0x0, 0x6}, {0x5, 0x9}, {0x4, 0x3}, {0x1, 0x9}, {0x1, 0x2}, {0x5, 0x1}, {0x0, 0x7}, {0x5, 0x9}, {0x4, 0xa}, {0x1}, {0x5, 0x3}, {0x7, 0x5}, {0x0, 0x9}, {0x0, 0x1}, {0x7, 0x4}, {0x5, 0x8}, {0x0, 0x1}, {0x2}, {0x2, 0x7}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x4, 0x7fff, 0x800, 0x2, 0xa, 0x5, 0x6]}}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x9, 0x16, 0x0, 0x3, 0x12, 0x1, 0xb, 0x36, 0x48, 0xc, 0xc, 0x18, 0x0]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x80, 0x3, 0x40, 0x80, 0x5, 0x6, 0x7]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x6, 0x12, 0x6, 0x30, 0x60, 0x2, 0x1b, 0x1, 0x6c, 0x60, 0x1b, 0x24, 0x18, 0x2, 0x12, 0xc, 0x48, 0xc, 0x6c, 0x5, 0x36, 0x9, 0x3, 0x60, 0x24, 0x0, 0x60, 0x24]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x7}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x80}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x7b}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x4}, @NL80211_ATTR_TID_CONFIG={0x54, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xe8b}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x3c}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xc8}]}]}]}, 0xd6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000080) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000010c0), r3) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x3c, r6, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x101}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x80}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x3c}}, 0x4000) sendmsg$AUDIT_TRIM(r2, &(0x7f0000001280)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x10, 0x3f6, 0x100, 0x70bd29, 0x25dfdbfe}, 0x10}}, 0x4000000) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r7, &(0x7f00000012c0)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x12) connect$inet(0xffffffffffffffff, &(0x7f0000001300)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000001340)=0x1, 0x4) ioctl$SIOCX25SSUBSCRIP(r7, 0x89e1, &(0x7f0000001380)={'ipvlan0\x00', 0x4, 0x3}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000001800)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000017c0)={&(0x7f00000014c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELOBJ={0x6c, 0x14, 0xa, 0x0, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_OBJ_USERDATA={0x35, 0x8, "79ab4f946cb55a936eddfe514d1701be5b6a4bf32e032a4b8462d6b790a21a8f0a982ab64a98cdcb5f02d146a2c1a46bad"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSET={0x1a8, 0xb, 0xa, 0x500, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_SET_USERDATA={0xe8, 0xd, 0x1, 0x0, "645134538d8f0a97f8bb14ba9607136fd5bea048f3d453f62155700cde03a17eea4a4709ef644233a226ba86fb5450e6ed74eaa4409c56c92012977ede9cdcade78bcee7d98bf7b7e510287d39816030af4e75d041c7384104b439caaa036bb32d144bf69e278f0f930f880137376ee27f4e2fda5cd1320b2af0687e5da467c7499f876340f870d1cf29c7c351ac28fd903f20e6952443dded384f5b1777f9c7bf006142836c920818ab2407ed004be4df07928cb7ae2409b6a24a1bd3ce892330167f11c618dbcbbeb7fc98f14f677438400139a9711434ee9cc9ba0d0eb37fb2581f8e"}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}, @NFTA_SET_EXPRESSIONS={0x8c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}, {0x50, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x3}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x1}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x6}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0xb}]}}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}, {0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}]}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x7}]}, @NFT_MSG_DELRULE={0x48, 0x8, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_ID={0x8}]}, @NFT_MSG_DELTABLE={0x30, 0x2, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWTABLE={0x34, 0x0, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x2e8}, 0x1, 0x0, 0x0, 0x800}, 0x20008080) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000001840)={0x0, 0x1ff}, &(0x7f0000001880)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f00000018c0)={r9, 0x100}, &(0x7f0000001900)=0x8) ioctl$OCFS2_IOC_RESVSP(r4, 0x40305828, &(0x7f0000001940)={0x2, 0x2, 0x7f, 0x1e5740000, 0x6, 0x1}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000019c0), r3) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000001a80)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001a40)={&(0x7f0000001a00)={0x1c, r10, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x53}, @void, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x2004c001) ioctl$XFS_IOC_START_COMMIT(r8, 0x80585882, &(0x7f0000001ac0)={0xffffffffffffffff}) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f0000002d00)=0x0, &(0x7f0000002d40)=0x4) bpf$PROG_LOAD(0x5, &(0x7f0000002ec0)={0xd, 0x2d, &(0x7f0000001b40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, [@map_idx_val={0x18, 0xb, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r11}}, @exit, @generic={0x3, 0x0, 0x3, 0x1, 0x2}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffff8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x1}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}]}, &(0x7f0000001cc0)='syzkaller\x00', 0x8, 0x1000, &(0x7f0000001d00)=""/4096, 0x41000, 0x18, '\x00', r12, @fallback=0x32, r1, 0x8, &(0x7f0000002d80)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000002dc0)={0x1, 0x4, 0x380, 0x20000000}, 0x10, 0x0, 0xffffffffffffffff, 0x3, &(0x7f0000002e40)=[r8], &(0x7f0000002e80)=[{0x5, 0x5, 0x6, 0xc}, {0x1, 0x1, 0x1, 0xc}, {0x4, 0x4, 0x8, 0xaebc976eb6c0c4ac}], 0x10, 0x49a}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000002f80)={r4}) setsockopt$inet6_buf(r13, 0x29, 0x20, &(0x7f0000002fc0)="88d951cbb9ac2bf2923bbdb0e59ce969ba0b22f336fab63af3738068d5379ad98e4d0cd430d10e790cfe4535d2be59b9f47be0d18b8ad81d93923a010da4a936fdd93938606e2490ec57a2ef503c462090659e0842c61baafddc3b4eea59271dde9630ec2167bc759a1396c11bf477c3c217bfb85ba0c96dcbe0c563725fad44e796145f7e5e11afe93191430238c0d35d9146e08a3068eca27a7b041a14f43f6c34a7b7d93c430c71a0febc1cb027055f9e6cfe7290d33b627c36ac0b18f40ededa4ba93c383cc4dc6c4b8b518472340dce2c7308a9b6da11bc4903d9fba0ca7707b6362753a1ec4b3a9b3887", 0xed) 631.451796ms ago: executing program 3 (id=1855): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x80, 0x16, 0xa, 0x1, 0x2000000, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x54, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'pim6reg1\x00'}]}]}]}], {0x14, 0x10}}, 0xc8}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 607.644827ms ago: executing program 3 (id=1856): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x20, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0x6}, {0xfff1, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 557.630869ms ago: executing program 2 (id=1857): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="840000000001010400000000000000000200000024000180140001"], 0x84}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000002e00090027bd7000fedbdf250400000008001a8004"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001600010325bd7000fcffffff20000000080003"], 0x1c}, 0x1, 0x0, 0x0, 0x440d3}, 0x0) unshare(0x8040600) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="b7063addee71", @ANYRESDEC=r1, @ANYRES32, @ANYBLOB="abd9fcf69e1a23fdb85f1b0bebe26e7af4fb645d4e2a5c3cd19f2ca7bb71041de64eae88c48a311a0ba7112a68a1e87b65e6272c79857c73fc997c4c1024a66bf166368ffe676bbf2ffc400c6bf28a7bf964a758", @ANYRESHEX], 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000bc0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000008000000060000000100001304000000040000000e000000f7ffffff00305f0061052e"], 0x0, 0x38, 0x0, 0x1, 0x6}, 0x28) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) syz_80211_inject_frame(&(0x7f0000000200)=@device_b, &(0x7f0000000340)=@data_frame={@a_msdu=@type01={{0x0, 0x2, 0x7, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x1}, @device_b, @initial, @random="0fd4e5617024", {0x0, 0x7}, "", @void, @value=@ver_80211n={0x0, 0xd, 0x2, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1}}, @a_msdu=[{@device_a, @broadcast, 0xc2, "fee1a80e9a00a655bfa0c22e2d04614a3fc37ece62a2d27ae7ed356bdd202be1c7c1eb6f8c35cbcbe80a2c913f90d30ff3f0a4844f0a76d69ca0e5381807cc6b4fb17ff73611c041c8e370183df76356368c319eb97cd9b103e3a43f68e899c69312ea673a5e49be59b2f40dab54e7a473cb0162e458a4bba3cf36736b0006b501a43f788ef3ed6e9042ef6aff80596b1e33d1fa576b8e713d419243f9c202e7cf61eee84f4a2fd0e4443755a96c5c9a5b93f6bd105bb8c35aba4c1e720ec3c55d01"}]}, 0xec) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r3, &(0x7f0000000080), 0x2, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000100)) mkdirat$cgroup(r3, &(0x7f0000000040)='syz0\x00', 0x1ff) 503.762155ms ago: executing program 4 (id=1858): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000000000008500000017000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 503.583579ms ago: executing program 0 (id=1859): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001000010700000000000000000a000000060001001700000008000a"], 0x24}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00000003c0)={0x33}, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000003c0), &(0x7f0000000080)=@udp=r1, 0x1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r2, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x16, &(0x7f0000000340)=ANY=[], 0x0) 417.960021ms ago: executing program 3 (id=1860): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xf00000000000000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c) 398.319739ms ago: executing program 0 (id=1861): bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x0, @val=@tracing={0x0, 0x1}}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="11"], 0x20) r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r0, &(0x7f0000000400)=@name={0x1e, 0x2, 0x2, {{0x42, 0x2}, 0x3}}, 0x10) bind$tipc(r1, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8000}, 0x8) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_genetlink_get_family_id$nfc(&(0x7f0000000080), 0xffffffffffffffff) getsockopt$bt_hci(r2, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="020000000400000008000000010000", @ANYRES32=0x0, @ANYRES32=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xd, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000000000000000002000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b70300002bb91a008500000008000000bc0900000000000045090100002000009500000000000000850000000c000000bf9800000000000056090000000400008500000084000000b7000000000000009500000000000000309b"], &(0x7f0000000980)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x6b, '\x00', 0x0, @sock_ops=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) 118.257963ms ago: executing program 0 (id=1862): r0 = socket$igmp(0x2, 0x3, 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0xc0) setsockopt$MRT_FLUSH(r0, 0x0, 0xd1, &(0x7f0000000000)=0x9, 0x4) (fail_nth: 3) 118.139269ms ago: executing program 3 (id=1863): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x46, &(0x7f0000000000)=0xf, 0x4) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (fail_nth: 75) 0s ago: executing program 0 (id=1864): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x3, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x1}, 0xe) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000280)={0x1, 0xd}, 0x2) ppoll(&(0x7f0000001080)=[{}], 0x13, &(0x7f0000000340)={0x0, 0xff}, 0x0, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f0000000240)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f00000005c0)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000d00)="27050200590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9d9bf1174bbf47ef74d55a99ad39d207cb572bb63dfc8f6098e3251eb181ebb55a0e82b5aa114e78f51a1e0eec04a10c2897204a66afab94dd8de001923467692f87653809bdac2ecd596160bec5c8869a08ecc5bf1561bb7ebf3468a2a212c7107d3c03418321ff77586b723dbfb3f03212aaf9150914bb989ef324957cea1707943a287afd6aa759a30e50f215292e54ebadd", 0xcb}, {&(0x7f0000000940)="1c393502dda1a67d93b1ceccbe972c4fef9c33ecf2d824f3a33513f45f472bbdc8e3a2275f2587f0da0b3ae419bed996116448f90d113ce98aa985f3430858f5cb9a668a1800bf2354b33cdff83033de518580a3080d7f4cc2406e071138439e1566dd17983ee053ab672f362d3292e24a9952f18ec3d8b37bb3391096c1d4442a754899299321c03cbcfb98a26994b2a072c2b9d9c70d619545e5f61b050e40166d2ff57dcc008f24fd5339e7bc21e25863f80d2487c30b6bf781608a31d68e9319ab1712d8f5bdde849c040417c864cbfd3923dcb9fc6bdc2ea53334184b03efcb631dc68f0a7b6e13eea4b80d4237120e32932ca4e2b50bad0735496d36a191d91f03b477b9587bc0ba489932e34f819fa1524ebad53a3d94b46c6aeff4f42fa067729fbb2862c09d337a75e0c8429d4bfe0dee2e1e23e8c22787178600ecca135623cd1e4701f35bd4e7c936a8ee274120e7662328a5aba1161b05889b045696721c79bff0547efe051f3c5de77fdd3c77afd41a1a7747a982b7efb013c9d6bac7d3ad1f9b7c3a5a1448b35696f03bca1c875e346edc55b7a271c3e5f3c0df72c8e4e6d444abb4b4d18460161fe953fce793ca2b322b9addbb68d840d61301c79514e7dd4ff3b34845781b5a49c39ca1a917f7cb493148827061eace555605257c32e3404cf49898c374b74887745e2fad69e3375f493e8d7c87903e58cb10b87d6d96619a1096f2e70a0e2a604b8e1a989d2c616658e5a3781b35c0775866bec169328e4541366803aa500289dd5ae51dd815bc0c7dc524dd81e27e68bc469e8334fa64d804ab87117927b58077a8fa16555c786d7d48cf591435f5e4edd8cf9feea235ae599c73e6", 0x26b}, {&(0x7f0000000040)="e23305ca5e3ff47787bd5e9916", 0xd}, {&(0x7f0000000180)="5b40223e12c649d3cda5623235ab5c7ff02187522d193b1be19545f0e5a2d1f413dcd188811c24561c292b", 0x2b}, {&(0x7f00000007c0)="d4f76ae42318901392806a248ff0f1de0ffb2f9e3fc263a6c737f4f767771b4df348476dee03033bd0dd6591f45437ad999ee7473a1396a48e6a747026f5ab324c1aa46dff7b15f46b422a97a52d4d053be96156f0efa82c7fdc846b34acd928bf", 0x61}], 0x5}, 0x9cdc2384056b48b8) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = accept(r1, 0x0, &(0x7f0000000640)) setsockopt$CAN_RAW_JOIN_FILTERS(r4, 0x65, 0x6, &(0x7f0000000780), 0x4) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a6c000000060a0b0400000000000000000000000044000480400001800800010066776400340002800800034000000000080003400000000a080003400000000a08000340000000020800034000000002080001400000000808000940000000000900020073797a3200000000140000001100010000000000000000000000000afd11bf1dfd669b27233b6f54bad59cd0e89c04f0777f554f326a3f"], 0x94}}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r5 = accept4(r3, 0x0, 0x0, 0x0) r6 = socket$inet6(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400090527bd7000fddbdf25021f00cb", @ANYRES32=r8, @ANYBLOB="0800040064010104080008000001000008000200e00000020800090006000000080001df7f000001080009"], 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000"], 0x18}}, 0x0) sendto$inet6(r6, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1a, 0x4, &(0x7f0000000140)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x64, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYRESDEC=r9, @ANYRES64=r9], 0x34}, 0x1, 0x0, 0x0, 0x4c001}, 0xc004) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r5) kernel console output (not intermixed with test programs): ype=1107 audit(1778883191.779:2): pid=7274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 134.521132][ T7275] tipc: Enabling of bearer rejected, failed to enable media [ 134.536805][ T7275] netlink: 4 bytes leftover after parsing attributes in process `syz.2.483'. [ 134.589111][ T7275] netlink: 348 bytes leftover after parsing attributes in process `syz.2.483'. [ 134.617609][ T7275] netlink: 4 bytes leftover after parsing attributes in process `syz.2.483'. [ 134.645628][ T7275] netlink: 348 bytes leftover after parsing attributes in process `syz.2.483'. [ 134.658206][ T7285] syzkaller1: entered promiscuous mode [ 134.669749][ T7275] netlink: 4 bytes leftover after parsing attributes in process `syz.2.483'. [ 134.686849][ T7285] syzkaller1: entered allmulticast mode [ 134.969390][ T7287] netlink: 8 bytes leftover after parsing attributes in process `syz.3.484'. [ 135.161163][ T7295] netlink: 44 bytes leftover after parsing attributes in process `syz.2.488'. [ 135.202859][ T7295] netlink: 24 bytes leftover after parsing attributes in process `syz.2.488'. [ 135.650740][ T7320] syzkaller0: entered promiscuous mode [ 135.657449][ T7320] syzkaller0: entered allmulticast mode [ 137.730039][ T7337] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 138.015563][ T7357] openvswitch: netlink: Actions may not be safe on all matching packets [ 138.133614][ T7364] FAULT_INJECTION: forcing a failure. [ 138.133614][ T7364] name failslab, interval 1, probability 0, space 0, times 0 [ 138.155576][ T7364] CPU: 0 UID: 0 PID: 7364 Comm: syz.3.511 Not tainted syzkaller #0 PREEMPT(full) [ 138.155599][ T7364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 138.155608][ T7364] Call Trace: [ 138.155614][ T7364] [ 138.155621][ T7364] dump_stack_lvl+0xe8/0x150 [ 138.155644][ T7364] should_fail_ex+0x412/0x560 [ 138.155670][ T7364] should_failslab+0xa8/0x100 [ 138.155694][ T7364] __kmalloc_noprof+0xe8/0x760 [ 138.155715][ T7364] ? sock_kmalloc+0xd6/0x160 [ 138.155729][ T7364] ? hash_recvmsg+0x130/0x840 [ 138.155753][ T7364] sock_kmalloc+0xd6/0x160 [ 138.155772][ T7364] hash_recvmsg+0x1d4/0x840 [ 138.155797][ T7364] ? __pfx_hash_recvmsg+0x10/0x10 [ 138.155818][ T7364] sock_recvmsg_nosec+0x10c/0x140 [ 138.155841][ T7364] ____sys_recvmsg+0x3e3/0x4a0 [ 138.155865][ T7364] ? __pfx_____sys_recvmsg+0x10/0x10 [ 138.155896][ T7364] ? import_iovec+0x73/0xa0 [ 138.155922][ T7364] ___sys_recvmsg+0x215/0x590 [ 138.155943][ T7364] ? __pfx____sys_recvmsg+0x10/0x10 [ 138.155964][ T7364] ? __fget_files+0x2a/0x420 [ 138.156011][ T7364] do_recvmmsg+0x334/0x800 [ 138.156034][ T7364] ? __pfx_do_recvmmsg+0x10/0x10 [ 138.156062][ T7364] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 138.156102][ T7364] __x64_sys_recvmmsg+0x198/0x250 [ 138.156122][ T7364] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 138.156147][ T7364] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.156163][ T7364] do_syscall_64+0x15f/0xf80 [ 138.156184][ T7364] ? trace_irq_disable+0x3b/0x140 [ 138.156205][ T7364] ? clear_bhb_loop+0x40/0x90 [ 138.156223][ T7364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.156237][ T7364] RIP: 0033:0x7f581399ce59 [ 138.156249][ T7364] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.156260][ T7364] RSP: 002b:00007f58147ca028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 138.156275][ T7364] RAX: ffffffffffffffda RBX: 00007f5813c15fa0 RCX: 00007f581399ce59 [ 138.156284][ T7364] RDX: 0000000000000600 RSI: 0000200000003700 RDI: 0000000000000004 [ 138.156291][ T7364] RBP: 00007f58147ca090 R08: 0000000000000000 R09: 0000000000000000 [ 138.156299][ T7364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 138.156306][ T7364] R13: 00007f5813c16038 R14: 00007f5813c15fa0 R15: 00007fff1acda478 [ 138.156334][ T7364] [ 139.804328][ T7419] __nla_validate_parse: 3 callbacks suppressed [ 139.804343][ T7419] netlink: 44 bytes leftover after parsing attributes in process `syz.1.527'. [ 139.865031][ T7419] netlink: 24 bytes leftover after parsing attributes in process `syz.1.527'. [ 139.971432][ T7424] netlink: 8 bytes leftover after parsing attributes in process `syz.0.529'. [ 140.046255][ T7414] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.054469][ T7414] bridge0: port 1(1¾x9ÿ) entered disabled state [ 140.174521][ T7431] netlink: 16 bytes leftover after parsing attributes in process `syz.0.531'. [ 140.253622][ T7414] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.263594][ T7414] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.388553][ T7421] ip6gre1: entered allmulticast mode [ 140.401470][ T7421] team0: Device ip6gre1 is of different type [ 140.440920][ T7431] ip6erspan1: entered allmulticast mode [ 140.446856][ T155] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.469317][ T155] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.542339][ T155] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.564174][ T155] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.930142][ T7456] netlink: 44 bytes leftover after parsing attributes in process `syz.2.540'. [ 140.944564][ T7456] netlink: 24 bytes leftover after parsing attributes in process `syz.2.540'. [ 141.061608][ T7434] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 141.099502][ T7460] netlink: 'syz.4.541': attribute type 6 has an invalid length. [ 141.468573][ T7478] netlink: 12 bytes leftover after parsing attributes in process `syz.3.549'. [ 141.604104][ T7488] netlink: 44 bytes leftover after parsing attributes in process `syz.1.552'. [ 141.642137][ T7488] netlink: 24 bytes leftover after parsing attributes in process `syz.1.552'. [ 141.862333][ T7502] xt_hashlimit: size too large, truncated to 1048576 [ 141.946998][ T7507] veth1: entered promiscuous mode [ 141.968286][ T7507] veth1: entered allmulticast mode [ 142.246104][ T5640] Bluetooth: hci2: command 0x0401 tx timeout [ 142.442714][ T7526] netlink: 44 bytes leftover after parsing attributes in process `syz.3.566'. [ 142.810986][ T7540] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.820540][ T7540] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.021243][ T7556] netlink: 'syz.0.576': attribute type 1 has an invalid length. [ 143.099654][ T7559] netlink: 'syz.3.578': attribute type 1 has an invalid length. [ 143.103969][ T7556] sctp: [Deprecated]: syz.0.576 (pid 7556) Use of struct sctp_assoc_value in delayed_ack socket option. [ 143.103969][ T7556] Use struct sctp_sack_info instead [ 143.139738][ T7559] netlink: 'syz.3.578': attribute type 1 has an invalid length. [ 143.239705][ T7563] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 143.962093][ T7589] xt_connbytes: Forcing CT accounting to be enabled [ 143.971657][ T7589] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 144.023331][ T7591] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_hsr, syncid = 1, id = 0 [ 144.442468][ T7613] FAULT_INJECTION: forcing a failure. [ 144.442468][ T7613] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 144.465490][ T7613] CPU: 1 UID: 0 PID: 7613 Comm: syz.4.599 Not tainted syzkaller #0 PREEMPT(full) [ 144.465512][ T7613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 144.465520][ T7613] Call Trace: [ 144.465527][ T7613] [ 144.465533][ T7613] dump_stack_lvl+0xe8/0x150 [ 144.465557][ T7613] should_fail_ex+0x412/0x560 [ 144.465580][ T7613] _copy_from_user+0x2d/0xb0 [ 144.465607][ T7613] ___sys_recvmsg+0x175/0x590 [ 144.465627][ T7613] ? __pfx____sys_recvmsg+0x10/0x10 [ 144.465645][ T7613] ? __fget_files+0x2a/0x420 [ 144.465686][ T7613] do_recvmmsg+0x334/0x800 [ 144.465710][ T7613] ? __pfx_do_recvmmsg+0x10/0x10 [ 144.465737][ T7613] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 144.465774][ T7613] __x64_sys_recvmmsg+0x198/0x250 [ 144.465793][ T7613] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 144.465817][ T7613] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.465832][ T7613] do_syscall_64+0x15f/0xf80 [ 144.465852][ T7613] ? trace_irq_disable+0x3b/0x140 [ 144.465873][ T7613] ? clear_bhb_loop+0x40/0x90 [ 144.465890][ T7613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.465904][ T7613] RIP: 0033:0x7fc833d9ce59 [ 144.465919][ T7613] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.465931][ T7613] RSP: 002b:00007fc831ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 144.465947][ T7613] RAX: ffffffffffffffda RBX: 00007fc834015fa0 RCX: 00007fc833d9ce59 [ 144.465958][ T7613] RDX: 0000000000000600 RSI: 0000200000003700 RDI: 0000000000000004 [ 144.465966][ T7613] RBP: 00007fc831ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 144.465975][ T7613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 144.465984][ T7613] R13: 00007fc834016038 R14: 00007fc834015fa0 R15: 00007fff990d2ca8 [ 144.466009][ T7613] [ 144.681233][ T7579] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 144.734778][ T7619] netlink: 'syz.1.602': attribute type 11 has an invalid length. [ 144.978289][ T7630] __nla_validate_parse: 3 callbacks suppressed [ 144.978306][ T7630] netlink: 8 bytes leftover after parsing attributes in process `syz.4.607'. [ 145.594685][ T7656] bond1 (unregistering): Released all slaves [ 145.636029][ T7659] syzkaller0: entered promiscuous mode [ 145.641709][ T7659] syzkaller0: entered allmulticast mode [ 145.765945][ T5640] Bluetooth: hci2: command 0x0401 tx timeout [ 145.772138][ T7650] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 145.899572][ T7663] netlink: 12 bytes leftover after parsing attributes in process `syz.3.620'. [ 146.450981][ T7698] netlink: 104 bytes leftover after parsing attributes in process `syz.2.632'. [ 146.514823][ T7699] syzkaller0: entered promiscuous mode [ 146.532369][ T7699] syzkaller0: entered allmulticast mode [ 147.418009][ T7744] syzkaller0: entered promiscuous mode [ 147.442244][ T7744] syzkaller0: entered allmulticast mode [ 147.510823][ T7747] vlan0: entered allmulticast mode [ 147.526440][ T7747] geneve1: entered allmulticast mode [ 147.783916][ T7757] netlink: 'syz.4.656': attribute type 9 has an invalid length. [ 147.845342][ T5640] Bluetooth: hci2: command 0x0401 tx timeout [ 147.959858][ T7770] netlink: 'syz.2.658': attribute type 8 has an invalid length. [ 147.983834][ T7771] netlink: 'syz.0.659': attribute type 1 has an invalid length. [ 148.037456][ T7771] sctp: [Deprecated]: syz.0.659 (pid 7771) Use of struct sctp_assoc_value in delayed_ack socket option. [ 148.037456][ T7771] Use struct sctp_sack_info instead [ 148.124395][ T7775] xt_CT: No such helper "syz1" [ 148.266983][ T7788] syzkaller0: entered promiscuous mode [ 148.275779][ T7788] syzkaller0: entered allmulticast mode [ 148.529258][ T7799] netlink: 'syz.4.669': attribute type 1 has an invalid length. [ 148.571115][ T7799] netlink: 'syz.4.669': attribute type 1 has an invalid length. [ 148.584593][ T7799] sctp: [Deprecated]: syz.4.669 (pid 7799) Use of struct sctp_assoc_value in delayed_ack socket option. [ 148.584593][ T7799] Use struct sctp_sack_info instead [ 148.637550][ T7802] netlink: 8 bytes leftover after parsing attributes in process `syz.1.671'. [ 148.646640][ T7802] netlink: 8 bytes leftover after parsing attributes in process `syz.1.671'. [ 148.671857][ T7762] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 148.968933][ T7810] netlink: 28 bytes leftover after parsing attributes in process `syz.2.675'. [ 149.023827][ T7816] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 149.033553][ T7808] xt_CT: No such helper "syz1" [ 149.179856][ T7818] netlink: 'syz.0.678': attribute type 8 has an invalid length. [ 149.470664][ T7832] FAULT_INJECTION: forcing a failure. [ 149.470664][ T7832] name failslab, interval 1, probability 0, space 0, times 0 [ 149.484767][ T7832] CPU: 0 UID: 0 PID: 7832 Comm: syz.2.685 Not tainted syzkaller #0 PREEMPT(full) [ 149.484789][ T7832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 149.484798][ T7832] Call Trace: [ 149.484805][ T7832] [ 149.484811][ T7832] dump_stack_lvl+0xe8/0x150 [ 149.484838][ T7832] should_fail_ex+0x412/0x560 [ 149.484871][ T7832] should_failslab+0xa8/0x100 [ 149.484895][ T7832] __kmalloc_noprof+0xe8/0x760 [ 149.484916][ T7832] ? sock_kmalloc+0xd6/0x160 [ 149.484930][ T7832] ? hash_recvmsg+0x130/0x840 [ 149.484954][ T7832] sock_kmalloc+0xd6/0x160 [ 149.484973][ T7832] hash_recvmsg+0x1d4/0x840 [ 149.484997][ T7832] ? __pfx_hash_recvmsg+0x10/0x10 [ 149.485017][ T7832] sock_recvmsg_nosec+0x10c/0x140 [ 149.485036][ T7832] ____sys_recvmsg+0x3e3/0x4a0 [ 149.485069][ T7832] ? __pfx_____sys_recvmsg+0x10/0x10 [ 149.485099][ T7832] ? import_iovec+0x73/0xa0 [ 149.485123][ T7832] ___sys_recvmsg+0x215/0x590 [ 149.485142][ T7832] ? __pfx____sys_recvmsg+0x10/0x10 [ 149.485161][ T7832] ? __fget_files+0x2a/0x420 [ 149.485204][ T7832] do_recvmmsg+0x334/0x800 [ 149.485229][ T7832] ? __pfx_do_recvmmsg+0x10/0x10 [ 149.485256][ T7832] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 149.485294][ T7832] __x64_sys_recvmmsg+0x198/0x250 [ 149.485313][ T7832] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 149.485337][ T7832] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.485353][ T7832] do_syscall_64+0x15f/0xf80 [ 149.485373][ T7832] ? trace_irq_disable+0x3b/0x140 [ 149.485394][ T7832] ? clear_bhb_loop+0x40/0x90 [ 149.485413][ T7832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.485428][ T7832] RIP: 0033:0x7f1c3619ce59 [ 149.485443][ T7832] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.485455][ T7832] RSP: 002b:00007f1c343f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 149.485471][ T7832] RAX: ffffffffffffffda RBX: 00007f1c36415fa0 RCX: 00007f1c3619ce59 [ 149.485481][ T7832] RDX: 0000000000000600 RSI: 0000200000003700 RDI: 0000000000000004 [ 149.485490][ T7832] RBP: 00007f1c343f6090 R08: 0000000000000000 R09: 0000000000000000 [ 149.485499][ T7832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 149.485508][ T7832] R13: 00007f1c36416038 R14: 00007f1c36415fa0 R15: 00007fffb9707e98 [ 149.485534][ T7832] [ 150.609676][ T5640] block nbd2: Receive control failed (result -32) [ 150.788311][ T5649] block nbd2: NBD_DISCONNECT [ 150.799501][ T5649] block nbd2: Send disconnect failed -32 [ 150.813956][ T5649] block nbd2: shutting down sockets [ 150.938308][ T7864] netlink: 64 bytes leftover after parsing attributes in process `syz.1.694'. [ 150.994449][ T7864] netlink: 64 bytes leftover after parsing attributes in process `syz.1.694'. [ 151.223338][ T5630] udevd[5630]: inotify_add_watch(7, /dev/nbd2, 10) failed: No such file or directory [ 151.513088][ T7892] netlink: 28 bytes leftover after parsing attributes in process `syz.4.705'. [ 151.543570][ T7889] xt_CT: No such helper "syz1" [ 151.800064][ T7906] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.706'. [ 151.821119][ T7906] netlink: 24 bytes leftover after parsing attributes in process `syz.1.706'. [ 152.730958][ T7929] bond0: entered promiscuous mode [ 152.742974][ T7929] bond_slave_0: entered promiscuous mode [ 152.754676][ T7929] bond_slave_1: entered promiscuous mode [ 152.765401][ T7929] batadv0: entered promiscuous mode [ 152.785793][ T7929] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 153.049727][ T7942] xt_CT: No such helper "syz1" [ 153.103436][ T7952] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 153.576613][ T7934] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 153.607198][ T7980] netlink: 'syz.0.728': attribute type 1 has an invalid length. [ 153.617364][ T7980] sctp: [Deprecated]: syz.0.728 (pid 7980) Use of struct sctp_assoc_value in delayed_ack socket option. [ 153.617364][ T7980] Use struct sctp_sack_info instead [ 153.697123][ T7982] FAULT_INJECTION: forcing a failure. [ 153.697123][ T7982] name failslab, interval 1, probability 0, space 0, times 0 [ 153.730399][ T7982] CPU: 0 UID: 0 PID: 7982 Comm: syz.0.731 Not tainted syzkaller #0 PREEMPT(full) [ 153.730422][ T7982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 153.730431][ T7982] Call Trace: [ 153.730437][ T7982] [ 153.730444][ T7982] dump_stack_lvl+0xe8/0x150 [ 153.730469][ T7982] should_fail_ex+0x412/0x560 [ 153.730495][ T7982] should_failslab+0xa8/0x100 [ 153.730529][ T7982] __kmalloc_cache_noprof+0x88/0x660 [ 153.730551][ T7982] ? sctp_add_bind_addr+0x8c/0x370 [ 153.730580][ T7982] sctp_add_bind_addr+0x8c/0x370 [ 153.730604][ T7982] sctp_copy_local_addr_list+0x314/0x4f0 [ 153.730628][ T7982] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 153.730648][ T7982] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 153.730670][ T7982] ? sctp_v6_is_any+0x64/0x80 [ 153.730692][ T7982] ? sctp_copy_one_addr+0x93/0x360 [ 153.730715][ T7982] sctp_bind_addr_copy+0xb3/0x3c0 [ 153.730736][ T7982] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 153.730758][ T7982] sctp_connect_new_asoc+0x2ff/0x6b0 [ 153.730777][ T7982] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 153.730799][ T7982] ? __local_bh_enable_ip+0xd0/0x130 [ 153.730814][ T7982] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 153.730835][ T7982] ? security_sctp_bind_connect+0x7e/0x2c0 [ 153.730855][ T7982] sctp_sendmsg+0x1576/0x2c50 [ 153.730892][ T7982] ? __pfx_sctp_sendmsg+0x10/0x10 [ 153.730918][ T7982] ? aa_sk_perm+0x6d5/0x900 [ 153.730945][ T7982] ? __pfx_aa_sk_perm+0x10/0x10 [ 153.730967][ T7982] ? sock_rps_record_flow+0x19/0x350 [ 153.730990][ T7982] ? inet_sendmsg+0x2f4/0x370 [ 153.731013][ T7982] ____sys_sendmsg+0x80a/0x9f0 [ 153.731038][ T7982] ? __pfx_____sys_sendmsg+0x10/0x10 [ 153.731062][ T7982] ? import_iovec+0x73/0xa0 [ 153.731087][ T7982] ___sys_sendmsg+0x2a5/0x360 [ 153.731102][ T7982] ? __lock_acquire+0x6b5/0x2cf0 [ 153.731124][ T7982] ? __pfx____sys_sendmsg+0x10/0x10 [ 153.731144][ T7982] ? kstrtouint+0x6e/0xe0 [ 153.731189][ T7982] ? __fget_files+0x2a/0x420 [ 153.731206][ T7982] ? __fget_files+0x3a0/0x420 [ 153.731233][ T7982] __sys_sendmmsg+0x27c/0x4e0 [ 153.731252][ T7982] ? __pfx___sys_sendmmsg+0x10/0x10 [ 153.731265][ T7982] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 153.731309][ T7982] ? ksys_write+0x242/0x270 [ 153.731331][ T7982] ? __pfx_ksys_write+0x10/0x10 [ 153.731357][ T7982] __x64_sys_sendmmsg+0xa0/0xc0 [ 153.731373][ T7982] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.731389][ T7982] do_syscall_64+0x15f/0xf80 [ 153.731410][ T7982] ? trace_irq_disable+0x3b/0x140 [ 153.731432][ T7982] ? clear_bhb_loop+0x40/0x90 [ 153.731451][ T7982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.731467][ T7982] RIP: 0033:0x7f342679ce59 [ 153.731482][ T7982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.731494][ T7982] RSP: 002b:00007f3427669028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 153.731518][ T7982] RAX: ffffffffffffffda RBX: 00007f3426a15fa0 RCX: 00007f342679ce59 [ 153.731529][ T7982] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 0000000000000003 [ 153.731538][ T7982] RBP: 00007f3427669090 R08: 0000000000000000 R09: 0000000000000000 [ 153.731547][ T7982] R10: 0000000020048040 R11: 0000000000000246 R12: 0000000000000002 [ 153.731556][ T7982] R13: 00007f3426a16038 R14: 00007f3426a15fa0 R15: 00007ffe5ffa28b8 [ 153.731583][ T7982] [ 154.219140][ T7988] syzkaller0: entered promiscuous mode [ 154.230919][ T7988] syzkaller0: entered allmulticast mode [ 154.681248][ T8014] xt_ecn: cannot match TCP bits for non-tcp packets [ 154.688270][ T8013] netlink: 'syz.4.742': attribute type 1 has an invalid length. [ 154.699359][ T8014] netlink: 96 bytes leftover after parsing attributes in process `syz.1.741'. [ 154.807206][ T5640] Bluetooth: hci2: command 0x0401 tx timeout [ 154.862600][ T8013] 8021q: adding VLAN 0 to HW filter on device bond2 [ 154.914053][ T8029] netlink: 12 bytes leftover after parsing attributes in process `syz.3.745'. [ 155.120413][ T8041] netlink: 'syz.0.748': attribute type 1 has an invalid length. [ 155.153524][ T8041] 8021q: adding VLAN 0 to HW filter on device bond1 [ 155.371114][ T8046] vxcan3: entered allmulticast mode [ 155.542785][ T8062] netlink: 92 bytes leftover after parsing attributes in process `syz.2.755'. [ 155.579316][ T8062] netlink: 92 bytes leftover after parsing attributes in process `syz.2.755'. [ 155.634790][ T8062] netlink: 92 bytes leftover after parsing attributes in process `syz.2.755'. [ 156.031626][ T8079] netlink: 'syz.3.762': attribute type 27 has an invalid length. [ 156.272147][ T8091] xt_CT: No such helper "syz1" [ 156.607623][ T8115] __nla_validate_parse: 62 callbacks suppressed [ 156.607640][ T8115] netlink: 4 bytes leftover after parsing attributes in process `syz.3.775'. [ 156.843338][ T8128] FAULT_INJECTION: forcing a failure. [ 156.843338][ T8128] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 156.907263][ T8128] CPU: 1 UID: 0 PID: 8128 Comm: syz.2.781 Not tainted syzkaller #0 PREEMPT(full) [ 156.907285][ T8128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 156.907294][ T8128] Call Trace: [ 156.907301][ T8128] [ 156.907308][ T8128] dump_stack_lvl+0xe8/0x150 [ 156.907332][ T8128] should_fail_ex+0x412/0x560 [ 156.907357][ T8128] _copy_from_user+0x2d/0xb0 [ 156.907380][ T8128] sctp_getsockopt_peer_addrs+0xef/0x6a0 [ 156.907404][ T8128] ? do_raw_spin_lock+0x12b/0x2f0 [ 156.907423][ T8128] ? lock_sock_nested+0x6a/0x100 [ 156.907444][ T8128] ? __pfx_sctp_getsockopt_peer_addrs+0x10/0x10 [ 156.907473][ T8128] ? __local_bh_enable_ip+0xd0/0x130 [ 156.907494][ T8128] sctp_getsockopt+0x9be/0xb90 [ 156.907518][ T8128] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 156.907537][ T8128] do_sock_getsockopt+0x51d/0x7e0 [ 156.907573][ T8128] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 156.907611][ T8128] ? __fget_files+0x3a0/0x420 [ 156.907628][ T8128] ? __fget_files+0x2a/0x420 [ 156.907653][ T8128] __x64_sys_getsockopt+0x1a4/0x240 [ 156.907681][ T8128] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.907698][ T8128] do_syscall_64+0x15f/0xf80 [ 156.907719][ T8128] ? trace_irq_disable+0x3b/0x140 [ 156.907741][ T8128] ? clear_bhb_loop+0x40/0x90 [ 156.907760][ T8128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.907775][ T8128] RIP: 0033:0x7f1c3619ce59 [ 156.907790][ T8128] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.907802][ T8128] RSP: 002b:00007f1c343f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 156.907819][ T8128] RAX: ffffffffffffffda RBX: 00007f1c36415fa0 RCX: 00007f1c3619ce59 [ 156.907830][ T8128] RDX: 000000000000006c RSI: 0000000000000084 RDI: 0000000000000004 [ 156.907839][ T8128] RBP: 00007f1c343f6090 R08: 0000200000000400 R09: 0000000000000000 [ 156.907848][ T8128] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000001 [ 156.907857][ T8128] R13: 00007f1c36416038 R14: 00007f1c36415fa0 R15: 00007fffb9707e98 [ 156.907884][ T8128] [ 157.320961][ T8138] netlink: 16 bytes leftover after parsing attributes in process `syz.3.786'. [ 157.362902][ T8138] geneve2: entered promiscuous mode [ 157.376829][ T8145] netlink: 332 bytes leftover after parsing attributes in process `syz.2.788'. [ 157.390349][ T8145] netlink: 'syz.2.788': attribute type 9 has an invalid length. [ 157.400524][ T8145] netlink: 108 bytes leftover after parsing attributes in process `syz.2.788'. [ 157.409869][ T8145] netlink: 32 bytes leftover after parsing attributes in process `syz.2.788'. [ 157.494815][ T8144] veth1: left promiscuous mode [ 157.508424][ T8144] veth1: left allmulticast mode [ 157.946454][ T8174] FAULT_INJECTION: forcing a failure. [ 157.946454][ T8174] name failslab, interval 1, probability 0, space 0, times 0 [ 157.972100][ T8174] CPU: 0 UID: 0 PID: 8174 Comm: syz.3.800 Not tainted syzkaller #0 PREEMPT(full) [ 157.972122][ T8174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 157.972131][ T8174] Call Trace: [ 157.972138][ T8174] [ 157.972145][ T8174] dump_stack_lvl+0xe8/0x150 [ 157.972169][ T8174] should_fail_ex+0x412/0x560 [ 157.972192][ T8174] should_failslab+0xa8/0x100 [ 157.972215][ T8174] __kmalloc_cache_noprof+0x88/0x660 [ 157.972235][ T8174] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 157.972254][ T8174] ? sctp_add_bind_addr+0x8c/0x370 [ 157.972279][ T8174] sctp_add_bind_addr+0x8c/0x370 [ 157.972303][ T8174] sctp_copy_local_addr_list+0x314/0x4f0 [ 157.972326][ T8174] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 157.972346][ T8174] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 157.972370][ T8174] ? sctp_v4_is_any+0x35/0x60 [ 157.972389][ T8174] ? sctp_copy_one_addr+0x93/0x360 [ 157.972411][ T8174] sctp_bind_addr_copy+0xb3/0x3c0 [ 157.972432][ T8174] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 157.972454][ T8174] sctp_connect_new_asoc+0x2ff/0x6b0 [ 157.972473][ T8174] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 157.972494][ T8174] ? __local_bh_enable_ip+0xd0/0x130 [ 157.972515][ T8174] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 157.972535][ T8174] ? security_sctp_bind_connect+0x7e/0x2c0 [ 157.972555][ T8174] sctp_sendmsg+0x1576/0x2c50 [ 157.972593][ T8174] ? __pfx_sctp_sendmsg+0x10/0x10 [ 157.972619][ T8174] ? aa_sk_perm+0x6d5/0x900 [ 157.972637][ T8174] ? __might_fault+0xaf/0x130 [ 157.972662][ T8174] ? __pfx_aa_sk_perm+0x10/0x10 [ 157.972684][ T8174] ? sock_rps_record_flow+0x19/0x350 [ 157.972707][ T8174] ? inet_sendmsg+0x2f4/0x370 [ 157.972731][ T8174] ____sys_sendmsg+0x80a/0x9f0 [ 157.972755][ T8174] ? __pfx_____sys_sendmsg+0x10/0x10 [ 157.972779][ T8174] ? import_iovec+0x73/0xa0 [ 157.972804][ T8174] ___sys_sendmsg+0x2a5/0x360 [ 157.972818][ T8174] ? __lock_acquire+0x6b5/0x2cf0 [ 157.972839][ T8174] ? __pfx____sys_sendmsg+0x10/0x10 [ 157.972860][ T8174] ? kstrtouint+0x6e/0xe0 [ 157.972900][ T8174] ? __fget_files+0x2a/0x420 [ 157.972918][ T8174] ? __fget_files+0x3a0/0x420 [ 157.972944][ T8174] __sys_sendmmsg+0x27c/0x4e0 [ 157.972964][ T8174] ? __pfx___sys_sendmmsg+0x10/0x10 [ 157.972977][ T8174] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 157.973022][ T8174] ? ksys_write+0x242/0x270 [ 157.973044][ T8174] ? __pfx_ksys_write+0x10/0x10 [ 157.973068][ T8174] __x64_sys_sendmmsg+0xa0/0xc0 [ 157.973082][ T8174] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.973098][ T8174] do_syscall_64+0x15f/0xf80 [ 157.973118][ T8174] ? trace_irq_disable+0x3b/0x140 [ 157.973139][ T8174] ? clear_bhb_loop+0x40/0x90 [ 157.973159][ T8174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.973173][ T8174] RIP: 0033:0x7f581399ce59 [ 157.973187][ T8174] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.973198][ T8174] RSP: 002b:00007f58147ca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 157.973214][ T8174] RAX: ffffffffffffffda RBX: 00007f5813c15fa0 RCX: 00007f581399ce59 [ 157.973224][ T8174] RDX: 0000000000000001 RSI: 00002000000032c0 RDI: 0000000000000003 [ 157.973233][ T8174] RBP: 00007f58147ca090 R08: 0000000000000000 R09: 0000000000000000 [ 157.973242][ T8174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 157.973251][ T8174] R13: 00007f5813c16038 R14: 00007f5813c15fa0 R15: 00007fff1acda478 [ 157.973277][ T8174] [ 158.376658][ T8178] tipc: Started in network mode [ 158.382742][ T8178] tipc: Node identity 4, cluster identity 4711 [ 158.389552][ T8178] tipc: Node number set to 4 [ 158.635286][ T8168] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 159.007314][ T8215] netlink: 8 bytes leftover after parsing attributes in process `syz.0.812'. [ 159.065560][ T8217] netlink: 24 bytes leftover after parsing attributes in process `syz.3.815'. [ 159.142398][ T8215] : entered promiscuous mode [ 159.184394][ T8217] netlink: 'syz.3.815': attribute type 2 has an invalid length. [ 159.314247][ T8229] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 159.845431][ T5640] Bluetooth: hci2: command 0x0401 tx timeout [ 159.993585][ T8255] netlink: 'syz.1.826': attribute type 1 has an invalid length. [ 160.002592][ T8255] netlink: 248 bytes leftover after parsing attributes in process `syz.1.826'. [ 160.059600][ T8255] netlink: 220 bytes leftover after parsing attributes in process `syz.1.826'. [ 160.068802][ T8255] netlink: 'syz.1.826': attribute type 2 has an invalid length. [ 161.294242][ T8260] netlink: 8 bytes leftover after parsing attributes in process `syz.4.828'. [ 161.608252][ T8272] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 161.742136][ T8284] netlink: 16 bytes leftover after parsing attributes in process `syz.2.837'. [ 161.774680][ T8272] syzkaller0: entered promiscuous mode [ 161.797434][ T8272] syzkaller0: entered allmulticast mode [ 161.897843][ T8291] FAULT_INJECTION: forcing a failure. [ 161.897843][ T8291] name failslab, interval 1, probability 0, space 0, times 0 [ 161.946373][ T8291] CPU: 0 UID: 0 PID: 8291 Comm: syz.0.839 Not tainted syzkaller #0 PREEMPT(full) [ 161.946396][ T8291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 161.946404][ T8291] Call Trace: [ 161.946411][ T8291] [ 161.946417][ T8291] dump_stack_lvl+0xe8/0x150 [ 161.946442][ T8291] should_fail_ex+0x412/0x560 [ 161.946468][ T8291] should_failslab+0xa8/0x100 [ 161.946493][ T8291] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 161.946522][ T8291] ? __alloc_skb+0x186/0x7d0 [ 161.946544][ T8291] ? __alloc_skb+0x1d0/0x7d0 [ 161.946563][ T8291] ? __local_bh_enable_ip+0xd0/0x130 [ 161.946585][ T8291] __alloc_skb+0x1d0/0x7d0 [ 161.946609][ T8291] netlink_sendmsg+0x5d4/0xb40 [ 161.946634][ T8291] ? __pfx_netlink_sendmsg+0x10/0x10 [ 161.946653][ T8291] ? aa_sock_msg_perm+0xf1/0x1b0 [ 161.946674][ T8291] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 161.946697][ T8291] ____sys_sendmsg+0x972/0x9f0 [ 161.946713][ T8291] ? __might_fault+0xaf/0x130 [ 161.946739][ T8291] ? __pfx_____sys_sendmsg+0x10/0x10 [ 161.946762][ T8291] ? import_iovec+0x73/0xa0 [ 161.946787][ T8291] ___sys_sendmsg+0x2a5/0x360 [ 161.946801][ T8291] ? __lock_acquire+0x6b5/0x2cf0 [ 161.946821][ T8291] ? __pfx____sys_sendmsg+0x10/0x10 [ 161.946872][ T8291] ? __fget_files+0x2a/0x420 [ 161.946889][ T8291] ? __fget_files+0x3a0/0x420 [ 161.946918][ T8291] __x64_sys_sendmsg+0x1bd/0x2a0 [ 161.946937][ T8291] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 161.946961][ T8291] ? __pfx_ksys_write+0x10/0x10 [ 161.946990][ T8291] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.947007][ T8291] do_syscall_64+0x15f/0xf80 [ 161.947027][ T8291] ? trace_irq_disable+0x3b/0x140 [ 161.947048][ T8291] ? clear_bhb_loop+0x40/0x90 [ 161.947066][ T8291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.947084][ T8291] RIP: 0033:0x7f342679ce59 [ 161.947099][ T8291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.947111][ T8291] RSP: 002b:00007f3427669028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 161.947128][ T8291] RAX: ffffffffffffffda RBX: 00007f3426a15fa0 RCX: 00007f342679ce59 [ 161.947139][ T8291] RDX: 0000000024000804 RSI: 0000200000000540 RDI: 0000000000000004 [ 161.947149][ T8291] RBP: 00007f3427669090 R08: 0000000000000000 R09: 0000000000000000 [ 161.947158][ T8291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.947168][ T8291] R13: 00007f3426a16038 R14: 00007f3426a15fa0 R15: 00007ffe5ffa28b8 [ 161.947195][ T8291] [ 162.284877][ T8304] netlink: 4 bytes leftover after parsing attributes in process `syz.2.841'. [ 163.844873][ T8325] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 163.864337][ T8325] syzkaller1: linktype set to 260 [ 164.043983][ T8343] netlink: 8 bytes leftover after parsing attributes in process `syz.2.851'. [ 164.080543][ T8343] gretap0: entered promiscuous mode [ 164.088573][ T8343] macvlan0: entered allmulticast mode [ 164.094206][ T8343] gretap0: entered allmulticast mode [ 164.581847][ T8371] xt_hashlimit: size too large, truncated to 1048576 [ 164.707184][ T8383] netlink: 'syz.0.863': attribute type 1 has an invalid length. [ 164.744533][ T8383] netlink: 224 bytes leftover after parsing attributes in process `syz.0.863'. [ 164.780501][ T8377] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.807781][ T5634] Bluetooth: hci4: command 0x0405 tx timeout [ 164.899597][ T8377] bridge_slave_0 (unregistering): left allmulticast mode [ 164.934609][ T8386] netlink: 20 bytes leftover after parsing attributes in process `syz.0.863'. [ 164.956738][ T8377] bridge_slave_0 (unregistering): left promiscuous mode [ 164.975016][ T8377] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.351304][ T8404] netlink: 8 bytes leftover after parsing attributes in process `syz.1.871'. [ 165.385520][ T8404] netlink: 4 bytes leftover after parsing attributes in process `syz.1.871'. [ 165.447819][ T8426] netlink: 8 bytes leftover after parsing attributes in process `syz.1.871'. [ 165.449100][ T8404] netlink: 8 bytes leftover after parsing attributes in process `syz.1.871'. [ 165.514455][ T8408] netlink: 'syz.4.872': attribute type 11 has an invalid length. [ 165.572508][ T8408] netlink: 'syz.4.872': attribute type 11 has an invalid length. [ 165.579450][ T8404] netlink: 4 bytes leftover after parsing attributes in process `syz.1.871'. [ 165.924946][ T8447] openvswitch: netlink: IPv4 tun info is not correct [ 166.224134][ T8461] FAULT_INJECTION: forcing a failure. [ 166.224134][ T8461] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 166.259518][ T8461] CPU: 0 UID: 0 PID: 8461 Comm: syz.4.882 Not tainted syzkaller #0 PREEMPT(full) [ 166.259540][ T8461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 166.259548][ T8461] Call Trace: [ 166.259555][ T8461] [ 166.259562][ T8461] dump_stack_lvl+0xe8/0x150 [ 166.259597][ T8461] should_fail_ex+0x412/0x560 [ 166.259624][ T8461] _copy_from_user+0x2d/0xb0 [ 166.259647][ T8461] ___sys_recvmsg+0x175/0x590 [ 166.259670][ T8461] ? __pfx____sys_recvmsg+0x10/0x10 [ 166.259691][ T8461] ? __fget_files+0x2a/0x420 [ 166.259737][ T8461] do_recvmmsg+0x334/0x800 [ 166.259760][ T8461] ? __pfx_do_recvmmsg+0x10/0x10 [ 166.259789][ T8461] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 166.259826][ T8461] __x64_sys_recvmmsg+0x198/0x250 [ 166.259853][ T8461] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 166.259876][ T8461] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.259892][ T8461] do_syscall_64+0x15f/0xf80 [ 166.259913][ T8461] ? trace_irq_disable+0x3b/0x140 [ 166.259934][ T8461] ? clear_bhb_loop+0x40/0x90 [ 166.259954][ T8461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.259969][ T8461] RIP: 0033:0x7fc833d9ce59 [ 166.259984][ T8461] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.259995][ T8461] RSP: 002b:00007fc831ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 166.260011][ T8461] RAX: ffffffffffffffda RBX: 00007fc834015fa0 RCX: 00007fc833d9ce59 [ 166.260022][ T8461] RDX: 000000000000045b RSI: 0000200000008880 RDI: 0000000000000003 [ 166.260031][ T8461] RBP: 00007fc831ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 166.260040][ T8461] R10: 0000000044000102 R11: 0000000000000246 R12: 0000000000000002 [ 166.260049][ T8461] R13: 00007fc834016038 R14: 00007fc834015fa0 R15: 00007fff990d2ca8 [ 166.260074][ T8461] [ 166.450752][ T8466] netlink: 'syz.2.883': attribute type 8 has an invalid length. [ 166.615872][ T8470] xt_hashlimit: size too large, truncated to 1048576 [ 166.742684][ T8478] veth1: entered promiscuous mode [ 166.786571][ T8478] veth1: entered allmulticast mode [ 167.671994][ T8509] __nla_validate_parse: 3 callbacks suppressed [ 167.672010][ T8509] netlink: 44 bytes leftover after parsing attributes in process `syz.2.899'. [ 167.701447][ T8509] netlink: 24 bytes leftover after parsing attributes in process `syz.2.899'. [ 167.919991][ T8524] netlink: 24 bytes leftover after parsing attributes in process `syz.2.904'. [ 168.072838][ T8531] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.906'. [ 168.273776][ T8546] netlink: 44 bytes leftover after parsing attributes in process `syz.4.913'. [ 168.291941][ T8546] netlink: 24 bytes leftover after parsing attributes in process `syz.4.913'. [ 168.436344][ T8550] netlink: 4 bytes leftover after parsing attributes in process `syz.0.917'. [ 168.474279][ T8555] bridge0: port 4(vlan1) entered blocking state [ 168.494049][ T8555] bridge0: port 4(vlan1) entered disabled state [ 168.535739][ T8555] vlan1: entered allmulticast mode [ 168.568122][ T8555] vlan1: entered promiscuous mode [ 168.622051][ T8562] netlink: 'syz.3.920': attribute type 1 has an invalid length. [ 168.909995][ T8562] 8021q: adding VLAN 0 to HW filter on device bond1 [ 169.619437][ T8592] netlink: 44 bytes leftover after parsing attributes in process `syz.0.928'. [ 169.646950][ T8592] netlink: 24 bytes leftover after parsing attributes in process `syz.0.928'. [ 170.259818][ T8432] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.269154][ T8432] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.717372][ T8627] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.742880][ T8627] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.771220][ T8631] netlink: 12 bytes leftover after parsing attributes in process `syz.3.942'. [ 170.775413][ T8627] bridge0: port 3(netdevsim1) entered disabled state [ 170.880382][ T8631] SET target dimension over the limit! [ 171.419549][ T8652] 8021q: VLANs not supported on ip6tnl0 [ 171.861697][ T8666] bond3: Unable to set down delay as MII monitoring is disabled [ 171.885584][ T8666] bond3 (unregistering): Released all slaves [ 172.101373][ T8686] FAULT_INJECTION: forcing a failure. [ 172.101373][ T8686] name failslab, interval 1, probability 0, space 0, times 0 [ 172.114561][ T8686] CPU: 1 UID: 0 PID: 8686 Comm: syz.3.960 Not tainted syzkaller #0 PREEMPT(full) [ 172.114577][ T8686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 172.114582][ T8686] Call Trace: [ 172.114587][ T8686] [ 172.114591][ T8686] dump_stack_lvl+0xe8/0x150 [ 172.114607][ T8686] should_fail_ex+0x412/0x560 [ 172.114622][ T8686] should_failslab+0xa8/0x100 [ 172.114638][ T8686] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 172.114650][ T8686] ? __alloc_skb+0x186/0x7d0 [ 172.114663][ T8686] ? __alloc_skb+0x1d0/0x7d0 [ 172.114673][ T8686] ? __local_bh_enable_ip+0xd0/0x130 [ 172.114686][ T8686] __alloc_skb+0x1d0/0x7d0 [ 172.114700][ T8686] alloc_skb_with_frags+0xc8/0x760 [ 172.114713][ T8686] ? __lock_acquire+0x6b5/0x2cf0 [ 172.114727][ T8686] sock_alloc_send_pskb+0x878/0x990 [ 172.114740][ T8686] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 172.114757][ T8686] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 172.114769][ T8686] ? dev_get_by_index+0x22/0x2e0 [ 172.114779][ T8686] ? dev_get_by_index+0x22/0x2e0 [ 172.114792][ T8686] raw_sendmsg+0x319/0xf90 [ 172.114807][ T8686] ? __pfx_raw_sendmsg+0x10/0x10 [ 172.114821][ T8686] ? aa_sock_msg_perm+0xf1/0x1b0 [ 172.114834][ T8686] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 172.114848][ T8686] ____sys_sendmsg+0x972/0x9f0 [ 172.114862][ T8686] ? __pfx_____sys_sendmsg+0x10/0x10 [ 172.114875][ T8686] ? import_iovec+0x73/0xa0 [ 172.114889][ T8686] ___sys_sendmsg+0x2a5/0x360 [ 172.114898][ T8686] ? __lock_acquire+0x6b5/0x2cf0 [ 172.114909][ T8686] ? __pfx____sys_sendmsg+0x10/0x10 [ 172.114934][ T8686] ? __fget_files+0x2a/0x420 [ 172.114945][ T8686] ? __fget_files+0x3a0/0x420 [ 172.114960][ T8686] __x64_sys_sendmsg+0x1bd/0x2a0 [ 172.114970][ T8686] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 172.114983][ T8686] ? __pfx_ksys_write+0x10/0x10 [ 172.114999][ T8686] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.115009][ T8686] do_syscall_64+0x15f/0xf80 [ 172.115029][ T8686] ? trace_irq_disable+0x3b/0x140 [ 172.115043][ T8686] ? clear_bhb_loop+0x40/0x90 [ 172.115054][ T8686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.115063][ T8686] RIP: 0033:0x7f581399ce59 [ 172.115072][ T8686] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.115079][ T8686] RSP: 002b:00007f58147ca028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 172.115092][ T8686] RAX: ffffffffffffffda RBX: 00007f5813c15fa0 RCX: 00007f581399ce59 [ 172.115101][ T8686] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000004 [ 172.115110][ T8686] RBP: 00007f58147ca090 R08: 0000000000000000 R09: 0000000000000000 [ 172.115118][ T8686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.115129][ T8686] R13: 00007f5813c16038 R14: 00007f5813c15fa0 R15: 00007fff1acda478 [ 172.115153][ T8686] [ 172.563861][ T8665] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 172.785201][ T8676] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 173.278128][ T8731] netlink: 4 bytes leftover after parsing attributes in process `syz.0.973'. [ 173.684649][ T8715] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.719011][ T8715] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.765487][ T5640] Bluetooth: hci2: command 0x0401 tx timeout [ 174.201421][ T5779] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 174.245115][ T5779] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.302961][ T5779] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 174.338405][ T5779] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.368713][ T5779] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 174.388787][ T5779] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.431533][ T5779] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 174.463633][ T5779] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.480826][ T8752] netlink: 8 bytes leftover after parsing attributes in process `syz.2.978'. [ 174.543532][ T8752] netlink: 8 bytes leftover after parsing attributes in process `syz.2.978'. [ 174.823920][ T8772] netlink: 8 bytes leftover after parsing attributes in process `syz.4.985'. [ 174.852587][ T8767] netlink: 24 bytes leftover after parsing attributes in process `syz.2.984'. [ 175.086517][ T8793] netlink: 44 bytes leftover after parsing attributes in process `syz.4.990'. [ 175.151758][ T8800] FAULT_INJECTION: forcing a failure. [ 175.151758][ T8800] name failslab, interval 1, probability 0, space 0, times 0 [ 175.159331][ T8793] netlink: 24 bytes leftover after parsing attributes in process `syz.4.990'. [ 175.178239][ T8786] netlink: 24 bytes leftover after parsing attributes in process `syz.2.992'. [ 175.187282][ T8800] CPU: 1 UID: 0 PID: 8800 Comm: syz.0.991 Not tainted syzkaller #0 PREEMPT(full) [ 175.187304][ T8800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 175.187313][ T8800] Call Trace: [ 175.187319][ T8800] [ 175.187325][ T8800] dump_stack_lvl+0xe8/0x150 [ 175.187349][ T8800] should_fail_ex+0x412/0x560 [ 175.187374][ T8800] should_failslab+0xa8/0x100 [ 175.187399][ T8800] __kmalloc_noprof+0xe8/0x760 [ 175.187419][ T8800] ? sock_kmalloc+0xd6/0x160 [ 175.187434][ T8800] ? hash_recvmsg+0x130/0x840 [ 175.187457][ T8800] sock_kmalloc+0xd6/0x160 [ 175.187476][ T8800] hash_recvmsg+0x1d4/0x840 [ 175.187501][ T8800] ? __pfx_hash_recvmsg+0x10/0x10 [ 175.187521][ T8800] sock_recvmsg_nosec+0x10c/0x140 [ 175.187547][ T8800] ____sys_recvmsg+0x3e3/0x4a0 [ 175.187572][ T8800] ? __pfx_____sys_recvmsg+0x10/0x10 [ 175.187602][ T8800] ? import_iovec+0x73/0xa0 [ 175.187627][ T8800] ___sys_recvmsg+0x215/0x590 [ 175.187657][ T8800] ? __pfx____sys_recvmsg+0x10/0x10 [ 175.187676][ T8800] ? __fget_files+0x2a/0x420 [ 175.187718][ T8800] do_recvmmsg+0x334/0x800 [ 175.187742][ T8800] ? __pfx_do_recvmmsg+0x10/0x10 [ 175.187769][ T8800] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 175.187808][ T8800] __x64_sys_recvmmsg+0x198/0x250 [ 175.187827][ T8800] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 175.187850][ T8800] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.187867][ T8800] do_syscall_64+0x15f/0xf80 [ 175.187888][ T8800] ? trace_irq_disable+0x3b/0x140 [ 175.187909][ T8800] ? clear_bhb_loop+0x40/0x90 [ 175.187928][ T8800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.187943][ T8800] RIP: 0033:0x7f342679ce59 [ 175.187959][ T8800] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.187971][ T8800] RSP: 002b:00007f3427669028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 175.187988][ T8800] RAX: ffffffffffffffda RBX: 00007f3426a15fa0 RCX: 00007f342679ce59 [ 175.187998][ T8800] RDX: 0000000000000600 RSI: 0000200000003700 RDI: 0000000000000004 [ 175.188007][ T8800] RBP: 00007f3427669090 R08: 0000000000000000 R09: 0000000000000000 [ 175.188017][ T8800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 175.188025][ T8800] R13: 00007f3426a16038 R14: 00007f3426a15fa0 R15: 00007ffe5ffa28b8 [ 175.188051][ T8800] [ 175.744773][ T8823] netlink: 'syz.4.999': attribute type 1 has an invalid length. [ 175.797011][ T8823] netlink: 'syz.4.999': attribute type 1 has an invalid length. [ 175.845297][ T5640] Bluetooth: hci2: command 0x0401 tx timeout [ 175.887714][ T8823] sctp: [Deprecated]: syz.4.999 (pid 8823) Use of struct sctp_assoc_value in delayed_ack socket option. [ 175.887714][ T8823] Use struct sctp_sack_info instead [ 176.003937][ T8825] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1001'. [ 176.240747][ T8845] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1008'. [ 177.348511][ T8887] xt_CT: No such helper "syz1" [ 177.354520][ T8887] FAULT_INJECTION: forcing a failure. [ 177.354520][ T8887] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 177.367770][ T8887] CPU: 1 UID: 0 PID: 8887 Comm: syz.1.1026 Not tainted syzkaller #0 PREEMPT(full) [ 177.367791][ T8887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 177.367800][ T8887] Call Trace: [ 177.367805][ T8887] [ 177.367811][ T8887] dump_stack_lvl+0xe8/0x150 [ 177.367835][ T8887] should_fail_ex+0x412/0x560 [ 177.367855][ T8887] _copy_from_user+0x2d/0xb0 [ 177.367875][ T8887] __copy_msghdr+0x3c5/0x5b0 [ 177.367895][ T8887] ___sys_sendmsg+0x213/0x360 [ 177.367916][ T8887] ? __pfx____sys_sendmsg+0x10/0x10 [ 177.367956][ T8887] ? irqentry_exit+0x218/0x760 [ 177.367979][ T8887] ? lockdep_hardirqs_on+0x7a/0x110 [ 177.368014][ T8887] ? __x64_sys_sendmsg+0x1a2/0x2a0 [ 177.368035][ T8887] __x64_sys_sendmsg+0x1bd/0x2a0 [ 177.368052][ T8887] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 177.368077][ T8887] ? __pfx_ksys_write+0x10/0x10 [ 177.368106][ T8887] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.368120][ T8887] do_syscall_64+0x15f/0xf80 [ 177.368139][ T8887] ? trace_irq_disable+0x3b/0x140 [ 177.368158][ T8887] ? clear_bhb_loop+0x40/0x90 [ 177.368176][ T8887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.368189][ T8887] RIP: 0033:0x7f976379ce59 [ 177.368204][ T8887] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 177.368216][ T8887] RSP: 002b:00007f9764716028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 177.368232][ T8887] RAX: ffffffffffffffda RBX: 00007f9763a15fa0 RCX: 00007f976379ce59 [ 177.368243][ T8887] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000006 [ 177.368252][ T8887] RBP: 00007f9764716090 R08: 0000000000000000 R09: 0000000000000000 [ 177.368260][ T8887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.368269][ T8887] R13: 00007f9763a16038 R14: 00007f9763a15fa0 R15: 00007ffc2c806778 [ 177.368293][ T8887] [ 178.347380][ T8933] netlink: 'syz.0.1038': attribute type 3 has an invalid length. [ 178.367108][ T8933] __nla_validate_parse: 4 callbacks suppressed [ 178.367125][ T8933] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1038'. [ 178.407651][ T8907] ipip0: entered promiscuous mode [ 178.429964][ T8907] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ipip0 [ 178.453807][ T8907] gretap2: entered promiscuous mode [ 178.467098][ T8907] gretap2: entered allmulticast mode [ 178.809288][ T8950] FAULT_INJECTION: forcing a failure. [ 178.809288][ T8950] name failslab, interval 1, probability 0, space 0, times 0 [ 178.842859][ T8950] CPU: 0 UID: 0 PID: 8950 Comm: syz.1.1041 Not tainted syzkaller #0 PREEMPT(full) [ 178.842882][ T8950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 178.842891][ T8950] Call Trace: [ 178.842897][ T8950] [ 178.842904][ T8950] dump_stack_lvl+0xe8/0x150 [ 178.842929][ T8950] should_fail_ex+0x412/0x560 [ 178.842953][ T8950] should_failslab+0xa8/0x100 [ 178.842976][ T8950] ? skb_ext_add+0x148/0x8f0 [ 178.842997][ T8950] kmem_cache_alloc_noprof+0x87/0x650 [ 178.843022][ T8950] skb_ext_add+0x148/0x8f0 [ 178.843043][ T8950] ? dev_get_by_index+0x22/0x2e0 [ 178.843067][ T8950] raw_sendmsg+0x33a/0xf90 [ 178.843093][ T8950] ? __pfx_raw_sendmsg+0x10/0x10 [ 178.843115][ T8950] ? aa_sock_msg_perm+0xf1/0x1b0 [ 178.843137][ T8950] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 178.843162][ T8950] ____sys_sendmsg+0x972/0x9f0 [ 178.843186][ T8950] ? __pfx_____sys_sendmsg+0x10/0x10 [ 178.843210][ T8950] ? import_iovec+0x73/0xa0 [ 178.843233][ T8950] ___sys_sendmsg+0x2a5/0x360 [ 178.843247][ T8950] ? __lock_acquire+0x6b5/0x2cf0 [ 178.843268][ T8950] ? __pfx____sys_sendmsg+0x10/0x10 [ 178.843310][ T8950] ? __fget_files+0x2a/0x420 [ 178.843326][ T8950] ? __fget_files+0x3a0/0x420 [ 178.843352][ T8950] __x64_sys_sendmsg+0x1bd/0x2a0 [ 178.843369][ T8950] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 178.843393][ T8950] ? __pfx_ksys_write+0x10/0x10 [ 178.843421][ T8950] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.843437][ T8950] do_syscall_64+0x15f/0xf80 [ 178.843457][ T8950] ? trace_irq_disable+0x3b/0x140 [ 178.843479][ T8950] ? clear_bhb_loop+0x40/0x90 [ 178.843499][ T8950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.843512][ T8950] RIP: 0033:0x7f976379ce59 [ 178.843528][ T8950] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.843540][ T8950] RSP: 002b:00007f9764716028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 178.843555][ T8950] RAX: ffffffffffffffda RBX: 00007f9763a15fa0 RCX: 00007f976379ce59 [ 178.843565][ T8950] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000004 [ 178.843574][ T8950] RBP: 00007f9764716090 R08: 0000000000000000 R09: 0000000000000000 [ 178.843584][ T8950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.843593][ T8950] R13: 00007f9763a16038 R14: 00007f9763a15fa0 R15: 00007ffc2c806778 [ 178.843617][ T8950] [ 179.265451][ T8964] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1048'. [ 179.274631][ T8964] netlink: 'syz.1.1048': attribute type 2 has an invalid length. [ 179.416160][ T8968] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1047'. [ 179.440775][ T8977] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1046'. [ 179.454620][ T8976] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1051'. [ 179.464381][ T8968] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1047'. [ 179.562367][ T8982] FAULT_INJECTION: forcing a failure. [ 179.562367][ T8982] name failslab, interval 1, probability 0, space 0, times 0 [ 179.599873][ T8982] CPU: 1 UID: 0 PID: 8982 Comm: syz.4.1053 Not tainted syzkaller #0 PREEMPT(full) [ 179.599897][ T8982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 179.599906][ T8982] Call Trace: [ 179.599920][ T8982] [ 179.599927][ T8982] dump_stack_lvl+0xe8/0x150 [ 179.599951][ T8982] should_fail_ex+0x412/0x560 [ 179.599976][ T8982] should_failslab+0xa8/0x100 [ 179.600002][ T8982] __kmalloc_noprof+0xe8/0x760 [ 179.600023][ T8982] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 179.600051][ T8982] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 179.600080][ T8982] genl_family_rcv_msg_doit+0xd9/0x330 [ 179.600100][ T8982] ? __asan_memcpy+0x40/0x70 [ 179.600122][ T8982] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 179.600151][ T8982] ? apparmor_capable+0x126/0x170 [ 179.600169][ T8982] ? bpf_lsm_capable+0x9/0x20 [ 179.600184][ T8982] ? security_capable+0x7e/0x2c0 [ 179.600209][ T8982] genl_rcv_msg+0x61c/0x7a0 [ 179.600235][ T8982] ? __pfx_genl_rcv_msg+0x10/0x10 [ 179.600253][ T8982] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 179.600271][ T8982] ? __pfx_nl802154_set_llsec_params+0x10/0x10 [ 179.600292][ T8982] ? __pfx_nl802154_post_doit+0x10/0x10 [ 179.600325][ T8982] netlink_rcv_skb+0x232/0x4b0 [ 179.600342][ T8982] ? __pfx_genl_rcv_msg+0x10/0x10 [ 179.600363][ T8982] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 179.600395][ T8982] ? down_read+0x270/0x2e0 [ 179.600409][ T8982] ? genl_rcv+0xd/0x40 [ 179.600429][ T8982] genl_rcv+0x28/0x40 [ 179.600447][ T8982] netlink_unicast+0x75c/0x8e0 [ 179.600480][ T8982] netlink_sendmsg+0x813/0xb40 [ 179.600505][ T8982] ? __pfx_netlink_sendmsg+0x10/0x10 [ 179.600525][ T8982] ? aa_sock_msg_perm+0xf1/0x1b0 [ 179.600546][ T8982] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 179.600569][ T8982] ____sys_sendmsg+0x972/0x9f0 [ 179.600585][ T8982] ? __might_fault+0xaf/0x130 [ 179.600610][ T8982] ? __pfx_____sys_sendmsg+0x10/0x10 [ 179.600635][ T8982] ? import_iovec+0x73/0xa0 [ 179.600660][ T8982] ___sys_sendmsg+0x2a5/0x360 [ 179.600675][ T8982] ? __lock_acquire+0x6b5/0x2cf0 [ 179.600696][ T8982] ? __pfx____sys_sendmsg+0x10/0x10 [ 179.600747][ T8982] ? __fget_files+0x2a/0x420 [ 179.600765][ T8982] ? __fget_files+0x3a0/0x420 [ 179.600793][ T8982] __x64_sys_sendmsg+0x1bd/0x2a0 [ 179.600821][ T8982] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 179.600846][ T8982] ? __pfx_ksys_write+0x10/0x10 [ 179.600877][ T8982] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.600894][ T8982] do_syscall_64+0x15f/0xf80 [ 179.600921][ T8982] ? trace_irq_disable+0x3b/0x140 [ 179.600946][ T8982] ? clear_bhb_loop+0x40/0x90 [ 179.600966][ T8982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.600981][ T8982] RIP: 0033:0x7fc833d9ce59 [ 179.600997][ T8982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.601010][ T8982] RSP: 002b:00007fc831ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 179.601027][ T8982] RAX: ffffffffffffffda RBX: 00007fc834015fa0 RCX: 00007fc833d9ce59 [ 179.601037][ T8982] RDX: 0000000024000804 RSI: 0000200000000540 RDI: 0000000000000004 [ 179.601045][ T8982] RBP: 00007fc831ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 179.601055][ T8982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.601064][ T8982] R13: 00007fc834016038 R14: 00007fc834015fa0 R15: 00007fff990d2ca8 [ 179.601088][ T8982] [ 180.173721][ T8999] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1057'. [ 180.248082][ T9001] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1058'. [ 180.467705][ T9015] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1064'. [ 180.531762][ T9014] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1062'. [ 180.747837][ T9030] netlink: 'syz.2.1069': attribute type 1 has an invalid length. [ 180.851935][ T9030] bond5: entered promiscuous mode [ 180.858220][ T9030] 8021q: adding VLAN 0 to HW filter on device bond5 [ 180.868865][ T9034] bond5: entered allmulticast mode [ 180.887273][ T9036] syzkaller0: entered promiscuous mode [ 180.892930][ T9036] syzkaller0: entered allmulticast mode [ 181.472206][ T9062] syzkaller1: entered promiscuous mode [ 181.489201][ T9062] syzkaller1: entered allmulticast mode [ 181.596951][ T9067] vlan2: entered allmulticast mode [ 181.613884][ T9067] geneve1: entered allmulticast mode [ 181.856416][ T9077] syzkaller1: entered promiscuous mode [ 181.862003][ T9077] syzkaller1: entered allmulticast mode [ 181.902344][ T9046] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 182.054193][ T9089] FAULT_INJECTION: forcing a failure. [ 182.054193][ T9089] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 182.095617][ T9089] CPU: 0 UID: 0 PID: 9089 Comm: syz.3.1090 Not tainted syzkaller #0 PREEMPT(full) [ 182.095638][ T9089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 182.095648][ T9089] Call Trace: [ 182.095655][ T9089] [ 182.095661][ T9089] dump_stack_lvl+0xe8/0x150 [ 182.095687][ T9089] should_fail_ex+0x412/0x560 [ 182.095712][ T9089] _copy_to_user+0x31/0xb0 [ 182.095737][ T9089] simple_read_from_buffer+0xe1/0x170 [ 182.095760][ T9089] proc_fail_nth_read+0x1bb/0x230 [ 182.095783][ T9089] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 182.095805][ T9089] ? rw_verify_area+0x2a6/0x4d0 [ 182.095825][ T9089] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 182.095845][ T9089] vfs_read+0x20c/0xa70 [ 182.095870][ T9089] ? __pfx___mutex_lock+0x10/0x10 [ 182.095886][ T9089] ? __pfx_vfs_read+0x10/0x10 [ 182.095908][ T9089] ? __fget_files+0x2a/0x420 [ 182.095948][ T9089] ? __fget_files+0x3a0/0x420 [ 182.095971][ T9089] ? __fget_files+0x2a/0x420 [ 182.095996][ T9089] ksys_read+0x150/0x270 [ 182.096018][ T9089] ? __pfx_ksys_read+0x10/0x10 [ 182.096044][ T9089] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.096061][ T9089] do_syscall_64+0x15f/0xf80 [ 182.096082][ T9089] ? trace_irq_disable+0x3b/0x140 [ 182.096104][ T9089] ? clear_bhb_loop+0x40/0x90 [ 182.096123][ T9089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.096137][ T9089] RIP: 0033:0x7f581395d68e [ 182.096151][ T9089] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 182.096163][ T9089] RSP: 002b:00007f58147c9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 182.096180][ T9089] RAX: ffffffffffffffda RBX: 00007f58147ca6c0 RCX: 00007f581395d68e [ 182.096190][ T9089] RDX: 000000000000000f RSI: 00007f58147ca0a0 RDI: 0000000000000004 [ 182.096198][ T9089] RBP: 00007f58147ca090 R08: 0000000000000000 R09: 0000000000000000 [ 182.096207][ T9089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.096216][ T9089] R13: 00007f5813c16038 R14: 00007f5813c15fa0 R15: 00007fff1acda478 [ 182.096242][ T9089] [ 182.924897][ T9117] openvswitch: netlink: Invalid VLAN frame [ 183.131665][ T5640] Bluetooth: hci2: command 0x0401 tx timeout [ 183.953086][ T9156] syzkaller0: entered promiscuous mode [ 183.963814][ T9156] syzkaller0: entered allmulticast mode [ 184.279762][ T9169] Bluetooth: MGMT ver 1.23 [ 184.721172][ T9183] netlink: 'syz.2.1124': attribute type 1 has an invalid length. [ 184.855362][ T9183] 8021q: adding VLAN 0 to HW filter on device bond6 [ 185.124656][ T9195] SET target dimension over the limit! [ 185.504834][ T9181] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 185.977492][ T9214] __nla_validate_parse: 9 callbacks suppressed [ 185.977511][ T9214] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1133'. [ 186.352886][ T9224] netlink: 'syz.1.1138': attribute type 1 has an invalid length. [ 186.378461][ T9224] netlink: 'syz.1.1138': attribute type 1 has an invalid length. [ 186.412307][ T9224] sctp: [Deprecated]: syz.1.1138 (pid 9224) Use of struct sctp_assoc_value in delayed_ack socket option. [ 186.412307][ T9224] Use struct sctp_sack_info instead [ 186.725287][ T5640] Bluetooth: hci2: command 0x0401 tx timeout [ 186.732045][ T9234] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 186.930621][ T9238] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1142'. [ 187.643481][ T9254] pim6reg: entered allmulticast mode [ 187.739776][ T9249] pim6reg: left allmulticast mode [ 187.836190][ T9262] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1147'. [ 187.910389][ T9256] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1146'. [ 188.205035][ T9265] xt_CT: No such helper "syz1" [ 188.712707][ T9285] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1153'. [ 188.805367][ T5640] Bluetooth: hci2: command 0x0401 tx timeout [ 188.813000][ T9282] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 189.492359][ T9309] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1160'. [ 189.583458][ T9312] xt_hashlimit: size too large, truncated to 1048576 [ 189.693409][ T9313] veth1: entered promiscuous mode [ 189.722040][ T9316] netlink: 'syz.1.1163': attribute type 1 has an invalid length. [ 189.727645][ T9313] veth1: entered allmulticast mode [ 189.799878][ T9319] FAULT_INJECTION: forcing a failure. [ 189.799878][ T9319] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 189.844487][ T9319] CPU: 0 UID: 0 PID: 9319 Comm: syz.3.1164 Not tainted syzkaller #0 PREEMPT(full) [ 189.844511][ T9319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 189.844521][ T9319] Call Trace: [ 189.844527][ T9319] [ 189.844534][ T9319] dump_stack_lvl+0xe8/0x150 [ 189.844559][ T9319] should_fail_ex+0x412/0x560 [ 189.844587][ T9319] _copy_from_user+0x2d/0xb0 [ 189.844610][ T9319] ___sys_sendmsg+0x1c6/0x360 [ 189.844627][ T9319] ? __lock_acquire+0x6b5/0x2cf0 [ 189.844648][ T9319] ? __pfx____sys_sendmsg+0x10/0x10 [ 189.844703][ T9319] ? __fget_files+0x2a/0x420 [ 189.844722][ T9319] ? __fget_files+0x3a0/0x420 [ 189.844749][ T9319] __x64_sys_sendmsg+0x1bd/0x2a0 [ 189.844768][ T9319] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 189.844792][ T9319] ? __pfx_ksys_write+0x10/0x10 [ 189.844821][ T9319] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.844838][ T9319] do_syscall_64+0x15f/0xf80 [ 189.844859][ T9319] ? trace_irq_disable+0x3b/0x140 [ 189.844881][ T9319] ? clear_bhb_loop+0x40/0x90 [ 189.844901][ T9319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.844916][ T9319] RIP: 0033:0x7f581399ce59 [ 189.844932][ T9319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 189.844945][ T9319] RSP: 002b:00007f58147ca028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 189.844962][ T9319] RAX: ffffffffffffffda RBX: 00007f5813c15fa0 RCX: 00007f581399ce59 [ 189.844973][ T9319] RDX: 0000000004000000 RSI: 0000200000000280 RDI: 0000000000000005 [ 189.844983][ T9319] RBP: 00007f58147ca090 R08: 0000000000000000 R09: 0000000000000000 [ 189.844993][ T9319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.845002][ T9319] R13: 00007f5813c16038 R14: 00007f5813c15fa0 R15: 00007fff1acda478 [ 189.845029][ T9319] [ 190.219448][ T9324] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1165'. [ 190.468772][ T9336] netlink: 'syz.0.1168': attribute type 21 has an invalid length. [ 190.507951][ T9336] IPv6: NLM_F_CREATE should be specified when creating new route [ 190.800399][ T9345] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1173'. [ 190.886448][ T5640] Bluetooth: hci2: command 0x0401 tx timeout [ 191.198843][ T9359] pimreg9: entered allmulticast mode [ 191.306022][ T9363] openvswitch: netlink: IPv4 tun info is not correct [ 191.474622][ T9366] pimreg9: entered allmulticast mode [ 191.953659][ T9380] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1180'. [ 191.970478][ T9384] hmó3)óÿ: entered promiscuous mode [ 192.234287][ T9394] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1185'. [ 192.253999][ T9394] netlink: 'syz.2.1185': attribute type 2 has an invalid length. [ 192.761307][ T9402] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 192.791909][ T9402] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 192.816868][ T9402] xfrm1: left allmulticast mode [ 192.847538][ T9402] geneve2: left promiscuous mode [ 192.861130][ T9402] 8021q: adding VLAN 0 to HW filter on device bond2 [ 193.139131][ T9417] openvswitch: netlink: Actions may not be safe on all matching packets [ 193.449749][ T9429] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 193.466720][ T9429] bond3 (unregistering): Released all slaves [ 193.792244][ T9446] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1198'. [ 193.800271][ T9442] netlink: 'syz.0.1199': attribute type 1 has an invalid length. [ 193.801879][ T9446] netlink: 'syz.1.1198': attribute type 2 has an invalid length. [ 193.847067][ T9442] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 194.043765][ T9458] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1202'. [ 194.101585][ T9451] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1200'. [ 194.294693][ T9465] Bluetooth: MGMT ver 1.23 [ 194.506765][ T9465] syzkaller0: entered promiscuous mode [ 194.516894][ T9465] syzkaller0: entered allmulticast mode [ 195.341631][ T9502] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1210'. [ 195.488733][ T9505] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1212'. [ 196.441779][ T9521] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1219'. [ 197.164232][ T9529] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1221'. [ 197.964588][ T9553] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1232'. [ 198.000426][ T9553] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1232'. [ 198.035929][ T9551] syzkaller0: entered promiscuous mode [ 198.053387][ T9553] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1232'. [ 198.062241][ T9551] syzkaller0: entered allmulticast mode [ 198.095609][ T9560] xt_hashlimit: size too large, truncated to 1048576 [ 198.158318][ T9556] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1232'. [ 198.183875][ T9564] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 199.567672][ T9579] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 199.703472][ T9618] netlink: 248 bytes leftover after parsing attributes in process `syz.3.1253'. [ 199.742952][ T9619] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1250'. [ 200.806481][ T5640] Bluetooth: hci2: command 0x0401 tx timeout [ 200.900821][ T9651] xt_policy: neither incoming nor outgoing policy selected [ 201.109133][ T9655] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1264'. [ 201.428159][ T9666] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1269'. [ 201.442419][ T9666] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1269'. [ 201.446271][ T5634] Bluetooth: hci0: command 0x0406 tx timeout [ 201.459076][ T5634] Bluetooth: hci1: command 0x0406 tx timeout [ 201.466250][ T5634] Bluetooth: hci3: command 0x0406 tx timeout [ 201.472136][ T9664] ip6gre1: entered allmulticast mode [ 201.511988][ T9664] team0: Device ip6gre1 is of different type [ 201.790596][ T9682] FAULT_INJECTION: forcing a failure. [ 201.790596][ T9682] name failslab, interval 1, probability 0, space 0, times 0 [ 201.821492][ T9682] CPU: 0 UID: 0 PID: 9682 Comm: syz.1.1272 Not tainted syzkaller #0 PREEMPT(full) [ 201.821515][ T9682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 201.821525][ T9682] Call Trace: [ 201.821532][ T9682] [ 201.821539][ T9682] dump_stack_lvl+0xe8/0x150 [ 201.821564][ T9682] should_fail_ex+0x412/0x560 [ 201.821590][ T9682] should_failslab+0xa8/0x100 [ 201.821614][ T9682] __kmalloc_noprof+0xe8/0x760 [ 201.821635][ T9682] ? unwind_next_frame+0xa6/0x2550 [ 201.821653][ T9682] ? sctp_bind_addrs_to_raw+0x10a/0x380 [ 201.821679][ T9682] sctp_bind_addrs_to_raw+0x10a/0x380 [ 201.821698][ T9682] ? unwind_next_frame+0xa6/0x2550 [ 201.821718][ T9682] ? is_bpf_text_address+0x26/0x2b0 [ 201.821735][ T9682] ? __pfx_sctp_bind_addrs_to_raw+0x10/0x10 [ 201.821768][ T9682] sctp_make_init+0x174/0xe00 [ 201.821787][ T9682] ? is_bpf_text_address+0x292/0x2b0 [ 201.821802][ T9682] ? is_bpf_text_address+0x26/0x2b0 [ 201.821824][ T9682] ? __kernel_text_address+0xd/0x30 [ 201.821845][ T9682] ? __pfx_sctp_make_init+0x10/0x10 [ 201.821877][ T9682] ? stack_trace_save+0xa9/0x100 [ 201.821899][ T9682] ? __pfx_stack_trace_save+0x10/0x10 [ 201.821919][ T9682] ? do_raw_spin_lock+0x12b/0x2f0 [ 201.821943][ T9682] sctp_sf_do_prm_asoc+0xd2/0x3f0 [ 201.821966][ T9682] sctp_do_sm+0x238/0x5cf0 [ 201.821982][ T9682] ? __pfx_sctp_pname+0x10/0x10 [ 201.821999][ T9682] ? kasan_save_track+0x4f/0x80 [ 201.822017][ T9682] ? kasan_save_track+0x3e/0x80 [ 201.822034][ T9682] ? __kmalloc_cache_noprof+0x31c/0x660 [ 201.822054][ T9682] ? sctp_sendmsg+0x1b85/0x2c50 [ 201.822073][ T9682] ? __x64_sys_sendto+0xde/0x100 [ 201.822098][ T9682] ? do_syscall_64+0x15f/0xf80 [ 201.822119][ T9682] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.822141][ T9682] ? __pfx_sctp_do_sm+0x10/0x10 [ 201.822195][ T9682] ? __sk_mem_raise_allocated+0x290/0x1290 [ 201.822213][ T9682] ? __genradix_ptr+0x1e1/0x220 [ 201.822242][ T9682] sctp_primitive_ASSOCIATE+0x95/0xc0 [ 201.822263][ T9682] sctp_sendmsg_to_asoc+0x143d/0x1900 [ 201.822300][ T9682] ? irqentry_exit+0x218/0x760 [ 201.822328][ T9682] ? irqentry_exit+0x218/0x760 [ 201.822351][ T9682] ? trace_irq_disable+0x3b/0x140 [ 201.822383][ T9682] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 201.822414][ T9682] ? sctp_sendmsg+0x1581/0x2c50 [ 201.822441][ T9682] sctp_sendmsg+0x1b85/0x2c50 [ 201.822478][ T9682] ? __pfx_sctp_sendmsg+0x10/0x10 [ 201.822498][ T9682] ? lockdep_hardirqs_on+0x7a/0x110 [ 201.822524][ T9682] ? aa_sk_perm+0x6d5/0x900 [ 201.822551][ T9682] ? __pfx_aa_sk_perm+0x10/0x10 [ 201.822573][ T9682] ? sock_rps_record_flow+0x19/0x350 [ 201.822594][ T9682] ? __pfx_inet_sendmsg+0x10/0x10 [ 201.822615][ T9682] ? inet_sendmsg+0x2f4/0x370 [ 201.822636][ T9682] ? __pfx_inet_sendmsg+0x10/0x10 [ 201.822657][ T9682] __sys_sendto+0x5de/0x710 [ 201.822682][ T9682] ? __pfx___sys_sendto+0x10/0x10 [ 201.822701][ T9682] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 201.822735][ T9682] ? __fget_files+0x3a0/0x420 [ 201.822764][ T9682] ? ksys_write+0x242/0x270 [ 201.822783][ T9682] ? __irq_exit_rcu+0xca/0x220 [ 201.822801][ T9682] ? __pfx_ksys_write+0x10/0x10 [ 201.822820][ T9682] ? handle_softirqs+0x715/0x840 [ 201.822841][ T9682] __x64_sys_sendto+0xde/0x100 [ 201.822862][ T9682] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.822883][ T9682] do_syscall_64+0x15f/0xf80 [ 201.822906][ T9682] ? clear_bhb_loop+0x40/0x90 [ 201.822925][ T9682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.822941][ T9682] RIP: 0033:0x7f976379ce59 [ 201.822957][ T9682] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 201.822970][ T9682] RSP: 002b:00007f9764716028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 201.822987][ T9682] RAX: ffffffffffffffda RBX: 00007f9763a15fa0 RCX: 00007f976379ce59 [ 201.822999][ T9682] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000003 [ 201.823009][ T9682] RBP: 00007f9764716090 R08: 000020000005ffe4 R09: 000000000000001c [ 201.823019][ T9682] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000002 [ 201.823028][ T9682] R13: 00007f9763a16038 R14: 00007f9763a15fa0 R15: 00007ffc2c806778 [ 201.823056][ T9682] [ 202.654614][ T9693] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1278'. [ 202.848590][ T9698] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1280'. [ 202.885711][ T5643] Bluetooth: hci2: command 0x0401 tx timeout [ 202.894608][ T9698] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1280'. [ 203.208255][ T9715] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1286'. [ 203.242954][ T9715] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1286'. [ 203.276879][ T9715] netlink: 'syz.0.1286': attribute type 12 has an invalid length. [ 203.338131][ T9719] xt_CT: No such helper "syz1" [ 203.482691][ T9723] FAULT_INJECTION: forcing a failure. [ 203.482691][ T9723] name failslab, interval 1, probability 0, space 0, times 0 [ 203.485471][ T9715] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1286'. [ 203.515639][ T9723] CPU: 1 UID: 0 PID: 9723 Comm: syz.1.1288 Not tainted syzkaller #0 PREEMPT(full) [ 203.515662][ T9723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 203.515672][ T9723] Call Trace: [ 203.515678][ T9723] [ 203.515685][ T9723] dump_stack_lvl+0xe8/0x150 [ 203.515711][ T9723] should_fail_ex+0x412/0x560 [ 203.515736][ T9723] should_failslab+0xa8/0x100 [ 203.515760][ T9723] __kmalloc_cache_noprof+0x88/0x660 [ 203.515782][ T9723] ? sctp_add_bind_addr+0x8c/0x370 [ 203.515815][ T9723] sctp_add_bind_addr+0x8c/0x370 [ 203.515839][ T9723] sctp_copy_local_addr_list+0x314/0x4f0 [ 203.515864][ T9723] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 203.515884][ T9723] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 203.515908][ T9723] ? sctp_v4_is_any+0x35/0x60 [ 203.515927][ T9723] ? sctp_copy_one_addr+0x93/0x360 [ 203.515949][ T9723] sctp_bind_addr_copy+0xb3/0x3c0 [ 203.515969][ T9723] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 203.515992][ T9723] sctp_connect_new_asoc+0x2ff/0x6b0 [ 203.516017][ T9723] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 203.516039][ T9723] ? __local_bh_enable_ip+0xd0/0x130 [ 203.516055][ T9723] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 203.516076][ T9723] ? security_sctp_bind_connect+0x7e/0x2c0 [ 203.516097][ T9723] sctp_sendmsg+0x1576/0x2c50 [ 203.516135][ T9723] ? __pfx_sctp_sendmsg+0x10/0x10 [ 203.516161][ T9723] ? aa_sk_perm+0x6d5/0x900 [ 203.516179][ T9723] ? __might_fault+0xaf/0x130 [ 203.516205][ T9723] ? __pfx_aa_sk_perm+0x10/0x10 [ 203.516227][ T9723] ? sock_rps_record_flow+0x19/0x350 [ 203.516251][ T9723] ? inet_sendmsg+0x2f4/0x370 [ 203.516274][ T9723] ____sys_sendmsg+0x80a/0x9f0 [ 203.516299][ T9723] ? __pfx_____sys_sendmsg+0x10/0x10 [ 203.516324][ T9723] ? import_iovec+0x73/0xa0 [ 203.516348][ T9723] ___sys_sendmsg+0x2a5/0x360 [ 203.516363][ T9723] ? __lock_acquire+0x6b5/0x2cf0 [ 203.516386][ T9723] ? __pfx____sys_sendmsg+0x10/0x10 [ 203.516407][ T9723] ? kstrtouint+0x6e/0xe0 [ 203.516451][ T9723] ? __fget_files+0x2a/0x420 [ 203.516469][ T9723] ? __fget_files+0x3a0/0x420 [ 203.516497][ T9723] __sys_sendmmsg+0x27c/0x4e0 [ 203.516517][ T9723] ? __pfx___sys_sendmmsg+0x10/0x10 [ 203.516529][ T9723] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 203.516577][ T9723] ? ksys_write+0x242/0x270 [ 203.516600][ T9723] ? __pfx_ksys_write+0x10/0x10 [ 203.516627][ T9723] __x64_sys_sendmmsg+0xa0/0xc0 [ 203.516643][ T9723] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.516658][ T9723] do_syscall_64+0x15f/0xf80 [ 203.516677][ T9723] ? trace_irq_disable+0x3b/0x140 [ 203.516701][ T9723] ? clear_bhb_loop+0x40/0x90 [ 203.516720][ T9723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.516735][ T9723] RIP: 0033:0x7f976379ce59 [ 203.516751][ T9723] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.516764][ T9723] RSP: 002b:00007f9764716028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 203.516782][ T9723] RAX: ffffffffffffffda RBX: 00007f9763a15fa0 RCX: 00007f976379ce59 [ 203.516799][ T9723] RDX: 0000000000000001 RSI: 00002000000032c0 RDI: 0000000000000003 [ 203.516809][ T9723] RBP: 00007f9764716090 R08: 0000000000000000 R09: 0000000000000000 [ 203.516818][ T9723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 203.516828][ T9723] R13: 00007f9763a16038 R14: 00007f9763a15fa0 R15: 00007ffc2c806778 [ 203.516856][ T9723] [ 203.529829][ T9715] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1286'. [ 203.895810][ T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.905810][ T9715] netlink: 'syz.0.1286': attribute type 12 has an invalid length. [ 203.916422][ T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.957096][ T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.975330][ T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.112395][ T9747] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 206.126001][ T9747] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 206.238668][ T9747] gretap0: left allmulticast mode [ 206.296157][ T8432] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.338396][ T8432] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.382815][ T8432] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.430334][ T8432] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.466836][ T9775] netlink: 'syz.2.1304': attribute type 13 has an invalid length. [ 206.493213][ T9775] gretap0: refused to change device tx_queue_len [ 206.501934][ T9775] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 207.026368][ T9798] netlink: 'syz.1.1311': attribute type 1 has an invalid length. [ 207.196922][ T9798] 8021q: adding VLAN 0 to HW filter on device bond2 [ 207.276142][ T9807] Bluetooth: MGMT ver 1.23 [ 207.291341][ T9807] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1313'. [ 207.308639][ T9808] netlink: 'syz.3.1312': attribute type 2 has an invalid length. [ 207.324198][ T9808] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1312'. [ 207.348704][ T9808] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1312'. [ 208.235675][ T9818] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1317'. [ 208.289762][ T9822] netlink: 'syz.4.1319': attribute type 21 has an invalid length. [ 208.307796][ T9822] IPv6: NLM_F_CREATE should be specified when creating new route [ 208.318421][ T9818] veth1_macvtap: left promiscuous mode [ 208.627625][ T9830] openvswitch: netlink: IP tunnel TTL not specified. [ 208.669133][ T9830] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1323'. [ 208.759565][ T9833] netlink: 332 bytes leftover after parsing attributes in process `syz.4.1324'. [ 208.777635][ T9833] netlink: 'syz.4.1324': attribute type 9 has an invalid length. [ 208.826457][ T9833] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1324'. [ 208.891174][ T9833] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1324'. [ 209.187688][ T9847] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 210.048845][ T9859] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1333'. [ 210.785070][ T9875] syzkaller0: entered promiscuous mode [ 210.801587][ T9875] syzkaller0: entered allmulticast mode [ 211.494265][ T9889] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1345'. [ 213.275082][ T9938] bridge0: port 3(netdevsim1) entered blocking state [ 213.283864][ T9938] bridge0: port 3(netdevsim1) entered disabled state [ 213.297374][ T9938] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 213.314002][ T9938] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 213.988573][ T9965] netlink: 'syz.1.1373': attribute type 2 has an invalid length. [ 214.057836][ T9965] netlink: 'syz.1.1373': attribute type 2 has an invalid length. [ 214.170901][ T9970] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1377'. [ 214.177032][ T9968] macsec1: entered promiscuous mode [ 214.226443][ T9972] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1378'. [ 214.348205][ T29] audit: type=1804 audit(1778883271.639:3): pid=9978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1379" name="/newroot/278/memory.events" dev="tmpfs" ino=1419 res=1 errno=0 [ 214.393115][ T29] audit: type=1800 audit(1778883271.639:4): pid=9978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1379" name="memory.events" dev="tmpfs" ino=1419 res=0 errno=0 [ 217.208234][ T9979] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 219.036125][T10043] FAULT_INJECTION: forcing a failure. [ 219.036125][T10043] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 219.058557][T10043] CPU: 0 UID: 0 PID: 10043 Comm: syz.1.1397 Not tainted syzkaller #0 PREEMPT(full) [ 219.058583][T10043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 219.058592][T10043] Call Trace: [ 219.058599][T10043] [ 219.058616][T10043] dump_stack_lvl+0xe8/0x150 [ 219.058640][T10043] should_fail_ex+0x412/0x560 [ 219.058667][T10043] core_sys_select+0x8dd/0xc30 [ 219.058702][T10043] ? __pfx_core_sys_select+0x10/0x10 [ 219.058743][T10043] ? __pfx_set_user_sigmask+0x10/0x10 [ 219.058770][T10043] __se_sys_pselect6+0x267/0x320 [ 219.058794][T10043] ? __pfx___se_sys_pselect6+0x10/0x10 [ 219.058811][T10043] ? __pfx_ksys_write+0x10/0x10 [ 219.058831][T10043] ? handle_softirqs+0x715/0x840 [ 219.058853][T10043] ? __x64_sys_pselect6+0x21/0xf0 [ 219.058870][T10043] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.058887][T10043] do_syscall_64+0x15f/0xf80 [ 219.058913][T10043] ? clear_bhb_loop+0x40/0x90 [ 219.058933][T10043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.058949][T10043] RIP: 0033:0x7f976379ce59 [ 219.058965][T10043] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.058978][T10043] RSP: 002b:00007f97646d4028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 219.058995][T10043] RAX: ffffffffffffffda RBX: 00007f9763a16180 RCX: 00007f976379ce59 [ 219.059006][T10043] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 219.059016][T10043] RBP: 00007f97646d4090 R08: 0000000000000000 R09: 0000000000000000 [ 219.059026][T10043] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 219.059035][T10043] R13: 00007f9763a16218 R14: 00007f9763a16180 R15: 00007ffc2c806778 [ 219.059063][T10043] [ 219.620018][T10060] netlink: 8752 bytes leftover after parsing attributes in process `syz.1.1402'. [ 220.720532][T10068] xt_limit: Overflow, try lower: 28676/2147483648 [ 220.843345][T10073] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1407'. [ 220.950156][T10077] syzkaller0: entered promiscuous mode [ 220.964960][T10077] syzkaller0: entered allmulticast mode [ 221.538869][T10065] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 221.760978][T10099] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1416'. [ 221.809234][T10098] IPv6: NLM_F_CREATE should be specified when creating new route [ 222.128040][T10113] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1421'. [ 222.728295][ T5643] Bluetooth: hci2: command 0x0401 tx timeout [ 222.793867][T10139] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1430'. [ 223.011628][T10138] vlan2: entered promiscuous mode [ 223.019341][T10138] erspan0: entered promiscuous mode [ 223.478436][T10151] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1434'. [ 223.704606][T10148] netlink: 248 bytes leftover after parsing attributes in process `syz.3.1435'. [ 225.725014][T10204] netlink: 'syz.3.1453': attribute type 33 has an invalid length. [ 225.748323][T10205] netlink: 'syz.3.1453': attribute type 33 has an invalid length. [ 225.880537][T10215] FAULT_INJECTION: forcing a failure. [ 225.880537][T10215] name failslab, interval 1, probability 0, space 0, times 0 [ 225.904984][T10215] CPU: 0 UID: 0 PID: 10215 Comm: syz.3.1456 Not tainted syzkaller #0 PREEMPT(full) [ 225.905008][T10215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 225.905018][T10215] Call Trace: [ 225.905025][T10215] [ 225.905032][T10215] dump_stack_lvl+0xe8/0x150 [ 225.905058][T10215] should_fail_ex+0x412/0x560 [ 225.905084][T10215] should_failslab+0xa8/0x100 [ 225.905110][T10215] __kmalloc_cache_noprof+0x88/0x660 [ 225.905131][T10215] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 225.905151][T10215] ? sctp_add_bind_addr+0x8c/0x370 [ 225.905176][T10215] sctp_add_bind_addr+0x8c/0x370 [ 225.905198][T10215] sctp_copy_local_addr_list+0x314/0x4f0 [ 225.905228][T10215] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 225.905247][T10215] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 225.905269][T10215] ? sctp_v6_is_any+0x64/0x80 [ 225.905288][T10215] ? sctp_copy_one_addr+0x93/0x360 [ 225.905311][T10215] sctp_bind_addr_copy+0xb3/0x3c0 [ 225.905331][T10215] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 225.905353][T10215] sctp_connect_new_asoc+0x2ff/0x6b0 [ 225.905372][T10215] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 225.905393][T10215] ? __local_bh_enable_ip+0xd0/0x130 [ 225.905408][T10215] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 225.905429][T10215] ? security_sctp_bind_connect+0x7e/0x2c0 [ 225.905446][T10215] sctp_sendmsg+0x1576/0x2c50 [ 225.905490][T10215] ? __pfx_sctp_sendmsg+0x10/0x10 [ 225.905516][T10215] ? aa_sk_perm+0x6d5/0x900 [ 225.905534][T10215] ? __might_fault+0xaf/0x130 [ 225.905558][T10215] ? __pfx_aa_sk_perm+0x10/0x10 [ 225.905579][T10215] ? sock_rps_record_flow+0x19/0x350 [ 225.905600][T10215] ? __pfx_inet_sendmsg+0x10/0x10 [ 225.905620][T10215] ? inet_sendmsg+0x2f4/0x370 [ 225.905639][T10215] ? __pfx_inet_sendmsg+0x10/0x10 [ 225.905658][T10215] __sys_sendto+0x5de/0x710 [ 225.905682][T10215] ? __pfx___sys_sendto+0x10/0x10 [ 225.905701][T10215] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 225.905735][T10215] ? __fget_files+0x3a0/0x420 [ 225.905764][T10215] ? ksys_write+0x242/0x270 [ 225.905787][T10215] ? __pfx_ksys_write+0x10/0x10 [ 225.905811][T10215] __x64_sys_sendto+0xde/0x100 [ 225.905833][T10215] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.905850][T10215] do_syscall_64+0x15f/0xf80 [ 225.905870][T10215] ? trace_irq_disable+0x3b/0x140 [ 225.905893][T10215] ? clear_bhb_loop+0x40/0x90 [ 225.905913][T10215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.905928][T10215] RIP: 0033:0x7f581399ce59 [ 225.905944][T10215] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.905957][T10215] RSP: 002b:00007f58147ca028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 225.905974][T10215] RAX: ffffffffffffffda RBX: 00007f5813c15fa0 RCX: 00007f581399ce59 [ 225.905985][T10215] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000003 [ 225.905995][T10215] RBP: 00007f58147ca090 R08: 000020000005ffe4 R09: 000000000000001c [ 225.906004][T10215] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000002 [ 225.906017][T10215] R13: 00007f5813c16038 R14: 00007f5813c15fa0 R15: 00007fff1acda478 [ 225.906044][T10215] [ 226.534859][T10211] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 226.698506][T10233] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1462'. [ 226.899327][T10240] netlink: 'syz.3.1463': attribute type 1 has an invalid length. [ 227.765381][ T5643] Bluetooth: hci2: command 0x0401 tx timeout [ 227.853746][T10268] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1467'. [ 228.236979][T10283] FAULT_INJECTION: forcing a failure. [ 228.236979][T10283] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 228.273623][T10283] CPU: 0 UID: 0 PID: 10283 Comm: syz.1.1470 Not tainted syzkaller #0 PREEMPT(full) [ 228.273646][T10283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 228.273655][T10283] Call Trace: [ 228.273662][T10283] [ 228.273669][T10283] dump_stack_lvl+0xe8/0x150 [ 228.273694][T10283] should_fail_ex+0x412/0x560 [ 228.273719][T10283] _copy_from_user+0x2d/0xb0 [ 228.273743][T10283] ___sys_recvmsg+0x175/0x590 [ 228.273765][T10283] ? __pfx____sys_recvmsg+0x10/0x10 [ 228.273785][T10283] ? __fget_files+0x2a/0x420 [ 228.273831][T10283] do_recvmmsg+0x334/0x800 [ 228.273856][T10283] ? __pfx_do_recvmmsg+0x10/0x10 [ 228.273891][T10283] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 228.273930][T10283] __x64_sys_recvmmsg+0x198/0x250 [ 228.273948][T10283] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 228.273972][T10283] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.273989][T10283] do_syscall_64+0x15f/0xf80 [ 228.274012][T10283] ? clear_bhb_loop+0x40/0x90 [ 228.274029][T10283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.274045][T10283] RIP: 0033:0x7f976379ce59 [ 228.274060][T10283] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 228.274073][T10283] RSP: 002b:00007f9764716028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 228.274090][T10283] RAX: ffffffffffffffda RBX: 00007f9763a15fa0 RCX: 00007f976379ce59 [ 228.274101][T10283] RDX: 000000000400023e RSI: 0000200000002740 RDI: 0000000000000005 [ 228.274119][T10283] RBP: 00007f9764716090 R08: 0000000000000000 R09: 0000000000000000 [ 228.274128][T10283] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000002 [ 228.274138][T10283] R13: 00007f9763a16038 R14: 00007f9763a15fa0 R15: 00007ffc2c806778 [ 228.274165][T10283] [ 228.573185][T10290] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1475'. [ 230.485260][T10287] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 230.485361][ T5643] Bluetooth: hci2: command 0x0401 tx timeout [ 231.183221][T10315] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1482'. [ 231.702940][T10321] lo speed is unknown, defaulting to 1000 [ 231.731061][T10321] lo speed is unknown, defaulting to 1000 [ 231.825911][T10316] veth0_virt_wifi: mtu greater than device maximum [ 231.890177][T10321] lo speed is unknown, defaulting to 1000 [ 232.028624][T10331] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1485'. [ 232.110076][T10331] netlink: 8752 bytes leftover after parsing attributes in process `syz.2.1485'. [ 232.859413][T10321] infiniband sqz0: set active [ 232.869805][ T5745] lo speed is unknown, defaulting to 1000 [ 232.879892][T10321] infiniband sqz0: added lo [ 232.898764][T10321] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 232.909053][T10321] infiniband sqz0: Couldn't open port 1 [ 232.925119][T10321] smbdirect: ib_dev[sqz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 232.942450][T10321] smbdirect: ib_dev[sqz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 232.983470][T10321] smbdirect: ib_dev[sqz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 233.178493][T10321] RDS/IB: sqz0: added [ 233.186906][T10321] smc: adding ib device sqz0 with port count 1 [ 233.194094][T10321] smc: ib device sqz0 port 1 has no pnetid [ 234.725870][ T5643] Bluetooth: hci2: command 0x0401 tx timeout [ 234.733204][T10346] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 235.874196][ T5745] lo speed is unknown, defaulting to 1000 [ 235.943332][T10321] lo speed is unknown, defaulting to 1000 [ 236.218257][T10363] sctp: [Deprecated]: syz.2.1494 (pid 10363) Use of struct sctp_assoc_value in delayed_ack socket option. [ 236.218257][T10363] Use struct sctp_sack_info instead [ 236.755095][T10321] lo speed is unknown, defaulting to 1000 [ 237.144111][T10321] lo speed is unknown, defaulting to 1000 [ 237.903445][T10321] lo speed is unknown, defaulting to 1000 [ 238.549438][T10321] lo speed is unknown, defaulting to 1000 [ 239.344831][T10441] pim6reg0: tun_chr_ioctl cmd 1074812118 [ 239.555798][T10445] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1521'. [ 239.577049][T10445] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1521'. [ 239.769524][T10448] netlink: 'syz.1.1522': attribute type 1 has an invalid length. [ 239.947167][T10448] 8021q: adding VLAN 0 to HW filter on device bond3 [ 240.009675][T10448] netlink: 'syz.1.1522': attribute type 10 has an invalid length. [ 240.041192][T10448] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1522'. [ 240.289527][T10454] bond3: (slave veth7): Enslaving as an active interface with a down link [ 240.356096][T10460] bond3: (slave dummy0): making interface the new active one [ 240.388849][T10460] dummy0: entered promiscuous mode [ 240.404869][T10460] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 240.444618][T10448] bond3: (slave dummy0): Releasing active interface [ 240.533798][T10461] netlink: 'syz.4.1526': attribute type 4 has an invalid length. [ 240.569289][T10456] lo speed is unknown, defaulting to 1000 [ 240.588965][T10461] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1526'. [ 241.907794][T10531] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1543'. [ 242.370546][T10545] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1549'. [ 242.376494][T10539] netlink: 8772 bytes leftover after parsing attributes in process `syz.3.1548'. [ 242.884863][T10557] syzkaller1: entered promiscuous mode [ 242.921981][T10557] syzkaller1: entered allmulticast mode [ 242.960400][T10562] netlink: 284 bytes leftover after parsing attributes in process `syz.1.1554'. [ 243.282522][T10569] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1556'. [ 243.411924][T10573] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1558'. [ 244.342500][T10590] lo speed is unknown, defaulting to 1000 [ 244.358293][T10600] FAULT_INJECTION: forcing a failure. [ 244.358293][T10600] name failslab, interval 1, probability 0, space 0, times 0 [ 244.403893][T10600] CPU: 0 UID: 0 PID: 10600 Comm: syz.0.1567 Not tainted syzkaller #0 PREEMPT(full) [ 244.403915][T10600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 244.403925][T10600] Call Trace: [ 244.403931][T10600] [ 244.403939][T10600] dump_stack_lvl+0xe8/0x150 [ 244.403964][T10600] should_fail_ex+0x412/0x560 [ 244.403990][T10600] should_failslab+0xa8/0x100 [ 244.404015][T10600] __kmalloc_cache_noprof+0x88/0x660 [ 244.404036][T10600] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 244.404056][T10600] ? sctp_add_bind_addr+0x8c/0x370 [ 244.404082][T10600] sctp_add_bind_addr+0x8c/0x370 [ 244.404106][T10600] sctp_copy_local_addr_list+0x314/0x4f0 [ 244.404128][T10600] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 244.404148][T10600] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 244.404171][T10600] ? sctp_v4_is_any+0x35/0x60 [ 244.404191][T10600] ? sctp_copy_one_addr+0x93/0x360 [ 244.404213][T10600] sctp_bind_addr_copy+0xb3/0x3c0 [ 244.404233][T10600] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 244.404255][T10600] sctp_connect_new_asoc+0x2ff/0x6b0 [ 244.404274][T10600] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 244.404296][T10600] ? __local_bh_enable_ip+0xd0/0x130 [ 244.404312][T10600] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 244.404334][T10600] ? security_sctp_bind_connect+0x7e/0x2c0 [ 244.404355][T10600] sctp_sendmsg+0x1576/0x2c50 [ 244.404392][T10600] ? __pfx_sctp_sendmsg+0x10/0x10 [ 244.404418][T10600] ? aa_sk_perm+0x6d5/0x900 [ 244.404436][T10600] ? __might_fault+0xaf/0x130 [ 244.404462][T10600] ? __pfx_aa_sk_perm+0x10/0x10 [ 244.404484][T10600] ? sock_rps_record_flow+0x19/0x350 [ 244.404507][T10600] ? inet_sendmsg+0x2f4/0x370 [ 244.404530][T10600] ____sys_sendmsg+0x80a/0x9f0 [ 244.404563][T10600] ? __pfx_____sys_sendmsg+0x10/0x10 [ 244.404592][T10600] ? import_iovec+0x73/0xa0 [ 244.404618][T10600] ___sys_sendmsg+0x2a5/0x360 [ 244.404632][T10600] ? __lock_acquire+0x6b5/0x2cf0 [ 244.404654][T10600] ? __pfx____sys_sendmsg+0x10/0x10 [ 244.404675][T10600] ? kstrtouint+0x6e/0xe0 [ 244.404714][T10600] ? __fget_files+0x2a/0x420 [ 244.404733][T10600] ? __fget_files+0x3a0/0x420 [ 244.404759][T10600] __sys_sendmmsg+0x27c/0x4e0 [ 244.404781][T10600] ? __pfx___sys_sendmmsg+0x10/0x10 [ 244.404794][T10600] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 244.404842][T10600] ? ksys_write+0x242/0x270 [ 244.404865][T10600] ? __pfx_ksys_write+0x10/0x10 [ 244.404892][T10600] __x64_sys_sendmmsg+0xa0/0xc0 [ 244.404908][T10600] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.404923][T10600] do_syscall_64+0x15f/0xf80 [ 244.404943][T10600] ? trace_irq_disable+0x3b/0x140 [ 244.404964][T10600] ? clear_bhb_loop+0x40/0x90 [ 244.404983][T10600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.404998][T10600] RIP: 0033:0x7f342679ce59 [ 244.405013][T10600] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 244.405024][T10600] RSP: 002b:00007f3427669028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 244.405041][T10600] RAX: ffffffffffffffda RBX: 00007f3426a15fa0 RCX: 00007f342679ce59 [ 244.405051][T10600] RDX: 0000000000000001 RSI: 00002000000032c0 RDI: 0000000000000003 [ 244.405059][T10600] RBP: 00007f3427669090 R08: 0000000000000000 R09: 0000000000000000 [ 244.405069][T10600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 244.405078][T10600] R13: 00007f3426a16038 R14: 00007f3426a15fa0 R15: 00007ffe5ffa28b8 [ 244.405104][T10600] [ 244.745061][T10603] syzkaller0: entered promiscuous mode [ 244.750643][T10603] syzkaller0: entered allmulticast mode [ 244.848122][T10606] __nla_validate_parse: 1 callbacks suppressed [ 244.848156][T10606] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1569'. [ 245.006679][T10610] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1570'. [ 245.117148][T10612] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1571'. [ 245.585554][T10634] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1579'. [ 245.597313][T10631] PKCS7: Unknown OID: [4] (bad) [ 245.632437][T10631] PKCS7: Only support pkcs7_signedData type [ 245.658164][T10635] netlink: 'syz.0.1579': attribute type 8 has an invalid length. [ 245.867061][T10634] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 246.421224][T10653] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1585'. [ 246.465075][T10654] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1583'. [ 246.679915][T10665] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1586'. [ 247.047384][T10675] FAULT_INJECTION: forcing a failure. [ 247.047384][T10675] name failslab, interval 1, probability 0, space 0, times 0 [ 247.110895][T10675] CPU: 0 UID: 0 PID: 10675 Comm: syz.0.1590 Not tainted syzkaller #0 PREEMPT(full) [ 247.110917][T10675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 247.110927][T10675] Call Trace: [ 247.110934][T10675] [ 247.110941][T10675] dump_stack_lvl+0xe8/0x150 [ 247.110965][T10675] should_fail_ex+0x412/0x560 [ 247.110991][T10675] should_failslab+0xa8/0x100 [ 247.111015][T10675] ? skb_clone+0x212/0x3a0 [ 247.111032][T10675] kmem_cache_alloc_noprof+0x87/0x650 [ 247.111053][T10675] ? __netlink_lookup+0xc6/0x8b0 [ 247.111075][T10675] skb_clone+0x212/0x3a0 [ 247.111094][T10675] __netlink_deliver_tap+0x404/0x850 [ 247.111121][T10675] ? netlink_deliver_tap+0x2e/0x1b0 [ 247.111142][T10675] netlink_deliver_tap+0x19c/0x1b0 [ 247.111159][T10675] netlink_unicast+0x730/0x8e0 [ 247.111199][T10675] netlink_sendmsg+0x813/0xb40 [ 247.111225][T10675] ? __pfx_netlink_sendmsg+0x10/0x10 [ 247.111245][T10675] ? aa_sock_msg_perm+0xf1/0x1b0 [ 247.111267][T10675] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 247.111291][T10675] ____sys_sendmsg+0x972/0x9f0 [ 247.111307][T10675] ? __might_fault+0xaf/0x130 [ 247.111331][T10675] ? __pfx_____sys_sendmsg+0x10/0x10 [ 247.111355][T10675] ? import_iovec+0x73/0xa0 [ 247.111381][T10675] ___sys_sendmsg+0x2a5/0x360 [ 247.111395][T10675] ? __lock_acquire+0x6b5/0x2cf0 [ 247.111417][T10675] ? __pfx____sys_sendmsg+0x10/0x10 [ 247.111465][T10675] ? __fget_files+0x2a/0x420 [ 247.111482][T10675] ? __fget_files+0x3a0/0x420 [ 247.111509][T10675] __x64_sys_sendmsg+0x1bd/0x2a0 [ 247.111527][T10675] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 247.111551][T10675] ? __pfx_ksys_write+0x10/0x10 [ 247.111581][T10675] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.111599][T10675] do_syscall_64+0x15f/0xf80 [ 247.111621][T10675] ? trace_irq_disable+0x3b/0x140 [ 247.111644][T10675] ? clear_bhb_loop+0x40/0x90 [ 247.111664][T10675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.111680][T10675] RIP: 0033:0x7f342679ce59 [ 247.111696][T10675] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 247.111708][T10675] RSP: 002b:00007f3427669028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 247.111725][T10675] RAX: ffffffffffffffda RBX: 00007f3426a15fa0 RCX: 00007f342679ce59 [ 247.111735][T10675] RDX: 0000000000000840 RSI: 0000200000000200 RDI: 0000000000000003 [ 247.111744][T10675] RBP: 00007f3427669090 R08: 0000000000000000 R09: 0000000000000000 [ 247.111753][T10675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 247.111763][T10675] R13: 00007f3426a16038 R14: 00007f3426a15fa0 R15: 00007ffe5ffa28b8 [ 247.111790][T10675] [ 247.835692][T10694] batman_adv: batadv0: Adding interface: macvtap1 [ 247.852631][T10694] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 247.923759][T10694] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 247.938718][T10679] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 248.154567][T10705] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1603'. [ 248.191867][T10706] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1603'. [ 249.193348][T10755] syzkaller0: entered promiscuous mode [ 249.206564][ T5643] Bluetooth: hci2: command 0x0401 tx timeout [ 249.213496][T10735] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 249.228117][T10755] syzkaller0: entered allmulticast mode [ 249.470895][T10766] FAULT_INJECTION: forcing a failure. [ 249.470895][T10766] name failslab, interval 1, probability 0, space 0, times 0 [ 249.490472][T10766] CPU: 0 UID: 0 PID: 10766 Comm: syz.2.1620 Not tainted syzkaller #0 PREEMPT(full) [ 249.490496][T10766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 249.490506][T10766] Call Trace: [ 249.490512][T10766] [ 249.490522][T10766] dump_stack_lvl+0xe8/0x150 [ 249.490548][T10766] should_fail_ex+0x412/0x560 [ 249.490573][T10766] should_failslab+0xa8/0x100 [ 249.490598][T10766] __kmalloc_cache_noprof+0x88/0x660 [ 249.490617][T10766] ? sctp_v6_to_sk_saddr+0x100/0x1c0 [ 249.490638][T10766] ? sctp_association_new+0x89/0x25e0 [ 249.490654][T10766] ? __asan_memcpy+0x40/0x70 [ 249.490674][T10766] sctp_association_new+0x89/0x25e0 [ 249.490690][T10766] ? sctp_do_bind+0x661/0x9d0 [ 249.490717][T10766] sctp_connect_new_asoc+0x2e4/0x6b0 [ 249.490735][T10766] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 249.490756][T10766] ? sctp_get_af_specific+0x29/0x80 [ 249.490775][T10766] ? sctp_inet6_send_verify+0x80/0x300 [ 249.490793][T10766] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 249.490811][T10766] __sctp_connect+0x5cb/0xdc0 [ 249.490837][T10766] ? __pfx___sctp_connect+0x10/0x10 [ 249.490851][T10766] ? sctp_setsockopt+0x21c/0x12c0 [ 249.490871][T10766] ? security_sctp_bind_connect+0x7e/0x2c0 [ 249.490893][T10766] ? __sctp_setsockopt_connectx+0xc7/0x190 [ 249.490915][T10766] sctp_setsockopt+0x708/0x12c0 [ 249.490936][T10766] ? sock_common_setsockopt+0x36/0xc0 [ 249.490956][T10766] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 249.490975][T10766] do_sock_setsockopt+0x17c/0x1b0 [ 249.491000][T10766] __x64_sys_setsockopt+0x13d/0x1b0 [ 249.491024][T10766] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.491041][T10766] do_syscall_64+0x15f/0xf80 [ 249.491062][T10766] ? trace_irq_disable+0x3b/0x140 [ 249.491091][T10766] ? clear_bhb_loop+0x40/0x90 [ 249.491111][T10766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.491125][T10766] RIP: 0033:0x7f1c3619ce59 [ 249.491141][T10766] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 249.491154][T10766] RSP: 002b:00007f1c343f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 249.491171][T10766] RAX: ffffffffffffffda RBX: 00007f1c36415fa0 RCX: 00007f1c3619ce59 [ 249.491182][T10766] RDX: 000000000000006e RSI: 0000000000000084 RDI: 0000000000000003 [ 249.491190][T10766] RBP: 00007f1c343f6090 R08: 0000000000000010 R09: 0000000000000000 [ 249.491200][T10766] R10: 00002000000005c0 R11: 0000000000000246 R12: 0000000000000001 [ 249.491209][T10766] R13: 00007f1c36416038 R14: 00007f1c36415fa0 R15: 00007fffb9707e98 [ 249.491237][T10766] [ 249.919428][T10771] netlink: zone id is out of range [ 249.924736][T10771] netlink: zone id is out of range [ 249.930587][T10771] netlink: zone id is out of range [ 249.937879][T10771] netlink: zone id is out of range [ 249.943013][T10771] netlink: zone id is out of range [ 249.948584][T10771] netlink: zone id is out of range [ 249.953784][T10771] netlink: zone id is out of range [ 249.963403][T10771] netlink: zone id is out of range [ 249.969055][T10771] netlink: zone id is out of range [ 249.983154][T10771] netlink: zone id is out of range [ 250.800093][T10793] netlink: 'syz.2.1630': attribute type 19 has an invalid length. [ 250.827828][T10793] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1630'. [ 250.848910][T10802] xt_connbytes: Forcing CT accounting to be enabled [ 250.875300][T10802] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 250.898688][T10793] netlink: 'syz.2.1630': attribute type 19 has an invalid length. [ 250.901860][T10795] syzkaller0: entered promiscuous mode [ 250.980419][T10793] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1630'. [ 251.016168][T10795] syzkaller0: entered allmulticast mode [ 251.100524][ T8421] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 251.139325][T10811] syzkaller0: entered promiscuous mode [ 251.149540][T10811] syzkaller0: entered allmulticast mode [ 251.158145][ T8421] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 251.178888][ T8421] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 251.209967][ T8421] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 251.285448][ T5643] Bluetooth: hci2: command 0x0401 tx timeout [ 251.302274][T10817] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 252.042984][T10850] : entered promiscuous mode [ 252.069915][T10850] netlink: 'syz.4.1649': attribute type 58 has an invalid length. [ 252.127698][T10850] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1649'. [ 252.659933][T10863] syzkaller0: entered promiscuous mode [ 252.673331][T10863] syzkaller0: entered allmulticast mode [ 253.084947][T10880] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1657'. [ 253.365341][ T5643] Bluetooth: hci2: command 0x0401 tx timeout [ 253.424112][T10892] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1664'. [ 253.454764][T10897] netlink: 8752 bytes leftover after parsing attributes in process `syz.4.1662'. [ 253.831520][T10912] syzkaller0: entered promiscuous mode [ 253.837357][T10912] syzkaller0: entered allmulticast mode [ 254.093169][T10919] netlink: 'syz.3.1671': attribute type 1 has an invalid length. [ 254.273130][T10930] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1676'. [ 254.307991][T10900] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 254.971443][T10954] tipc: Enabling of bearer rejected, failed to enable media [ 255.006702][T10953] syzkaller0: entered promiscuous mode [ 255.019105][T10953] syzkaller0: entered allmulticast mode [ 255.041047][T10954] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1683'. [ 255.197062][T10962] netlink: 27 bytes leftover after parsing attributes in process `syz.3.1686'. [ 255.456199][T10975] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1690'. [ 255.525373][ T5643] Bluetooth: hci2: command 0x0401 tx timeout [ 255.532442][T10966] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 255.840597][T10981] lo speed is unknown, defaulting to 1000 [ 256.158367][T10993] syzkaller0: entered promiscuous mode [ 256.187167][T10993] syzkaller0: entered allmulticast mode [ 256.624508][T11007] __nla_validate_parse: 2 callbacks suppressed [ 256.624525][T11007] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1702'. [ 256.694044][T11007] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1702'. [ 257.078558][T11019] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1705'. [ 257.191439][T11026] bond7: (slave bridge1): Enslaving as an active interface with an up link [ 257.207772][T11031] netlink: 27 bytes leftover after parsing attributes in process `syz.3.1709'. [ 257.605343][ T5643] Bluetooth: hci2: command 0x0401 tx timeout [ 258.376877][T11038] syzkaller0: entered promiscuous mode [ 258.382393][T11038] syzkaller0: entered allmulticast mode [ 258.453367][T11061] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 261.217781][T11087] lo speed is unknown, defaulting to 1000 [ 261.959016][T11089] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 262.200716][T11099] lo speed is unknown, defaulting to 1000 [ 262.262700][T11117] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1730'. [ 262.484070][T11120] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1732'. [ 262.775320][T11129] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1736'. [ 262.842484][T11129] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1736'. [ 262.978505][T11127] syzkaller0: entered promiscuous mode [ 263.001181][T11127] syzkaller0: entered allmulticast mode [ 263.205277][ T5643] Bluetooth: hci2: command 0x0401 tx timeout [ 266.346232][T11175] sch_tbf: burst 0 is lower than device lo mtu (32783) ! [ 266.385081][T11175] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1750'. [ 266.574012][T11181] netlink: 'syz.0.1754': attribute type 10 has an invalid length. [ 266.624080][T11181] team0: Port device dummy0 added [ 266.651111][T11181] netlink: 'syz.0.1754': attribute type 10 has an invalid length. [ 266.806888][T11181] team0: Port device dummy0 removed [ 266.828871][T11181] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 267.144242][T11198] lo speed is unknown, defaulting to 1000 [ 267.386340][T11205] xt_CT: No such helper "syz1" [ 267.752887][T11223] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1768'. [ 267.781534][T11223] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1768'. [ 267.793755][T11223] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1768'. [ 267.816825][T11223] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1768'. [ 267.868050][T11223] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1768'. [ 267.895965][T11223] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1768'. [ 268.356000][T11247] netlink: 'syz.3.1775': attribute type 8 has an invalid length. [ 268.440082][T11251] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1776'. [ 268.500019][T11251] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1776'. [ 269.083342][T11258] syzkaller0: entered promiscuous mode [ 269.143650][T11258] syzkaller0: entered allmulticast mode [ 269.380889][T11286] FAULT_INJECTION: forcing a failure. [ 269.380889][T11286] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 269.437616][T11286] CPU: 0 UID: 0 PID: 11286 Comm: syz.0.1786 Not tainted syzkaller #0 PREEMPT(full) [ 269.437640][T11286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 269.437650][T11286] Call Trace: [ 269.437656][T11286] [ 269.437663][T11286] dump_stack_lvl+0xe8/0x150 [ 269.437688][T11286] should_fail_ex+0x412/0x560 [ 269.437712][T11286] _copy_from_user+0x2d/0xb0 [ 269.437736][T11286] ___sys_sendmsg+0x1c6/0x360 [ 269.437757][T11286] ? __pfx____sys_sendmsg+0x10/0x10 [ 269.437771][T11286] ? __lock_acquire+0x6b5/0x2cf0 [ 269.437830][T11286] __sys_sendmmsg+0x27c/0x4e0 [ 269.437849][T11286] ? __pfx___sys_sendmmsg+0x10/0x10 [ 269.437862][T11286] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 269.437908][T11286] ? ksys_write+0x242/0x270 [ 269.437939][T11286] ? __pfx_ksys_write+0x10/0x10 [ 269.437973][T11286] __x64_sys_sendmmsg+0xa0/0xc0 [ 269.437987][T11286] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.438004][T11286] do_syscall_64+0x15f/0xf80 [ 269.438024][T11286] ? trace_irq_disable+0x3b/0x140 [ 269.438045][T11286] ? clear_bhb_loop+0x40/0x90 [ 269.438065][T11286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.438079][T11286] RIP: 0033:0x7f342679ce59 [ 269.438096][T11286] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 269.438108][T11286] RSP: 002b:00007f3427669028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 269.438127][T11286] RAX: ffffffffffffffda RBX: 00007f3426a15fa0 RCX: 00007f342679ce59 [ 269.438141][T11286] RDX: 0000000000000299 RSI: 0000200000003dc0 RDI: 0000000000000005 [ 269.438152][T11286] RBP: 00007f3427669090 R08: 0000000000000000 R09: 0000000000000000 [ 269.438162][T11286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 269.438172][T11286] R13: 00007f3426a16038 R14: 00007f3426a15fa0 R15: 00007ffe5ffa28b8 [ 269.438199][T11286] [ 270.230841][T11299] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1790'. [ 270.519408][T11301] lo speed is unknown, defaulting to 1000 [ 270.694284][T11321] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 270.704548][T11321] IPv6: NLM_F_CREATE should be set when creating new route [ 271.278155][T11321] bridge0: port 3(netdevsim1) entered disabled state [ 271.287352][T11321] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.468409][T11334] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1800'. [ 271.706570][T11325] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 271.747914][T11321] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 271.801459][T11321] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 272.202911][ T58] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 272.227177][ T58] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.241153][ T58] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 272.270387][ T58] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.314774][ T58] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 272.329209][ T58] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.350786][ T58] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 272.381938][ T58] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.965344][ T5643] Bluetooth: hci2: command 0x0401 tx timeout [ 273.450829][T11397] lo speed is unknown, defaulting to 1000 [ 273.461975][T11396] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1822'. [ 273.687075][T11408] syzkaller0: entered promiscuous mode [ 273.696529][T11408] syzkaller0: entered allmulticast mode [ 273.713039][T11412] veth0: entered promiscuous mode [ 273.729574][T11412] veth0: left promiscuous mode [ 274.050825][T11427] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1831'. [ 274.401437][T11432] lo speed is unknown, defaulting to 1000 [ 274.586575][T11446] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 274.938035][T11461] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1842'. [ 275.202186][T11468] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1845'. [ 275.312688][T11348] IPVS: starting estimator thread 0... [ 275.407735][T11474] IPVS: using max 34 ests per chain, 81600 per kthread [ 275.825568][T11493] FAULT_INJECTION: forcing a failure. [ 275.825568][T11493] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 275.854211][T11493] CPU: 0 UID: 0 PID: 11493 Comm: syz.4.1852 Not tainted syzkaller #0 PREEMPT(full) [ 275.854235][T11493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 275.854244][T11493] Call Trace: [ 275.854251][T11493] [ 275.854258][T11493] dump_stack_lvl+0xe8/0x150 [ 275.854281][T11493] should_fail_ex+0x412/0x560 [ 275.854306][T11493] _copy_from_user+0x2d/0xb0 [ 275.854329][T11493] ___sys_recvmsg+0x175/0x590 [ 275.854350][T11493] ? __pfx____sys_recvmsg+0x10/0x10 [ 275.854370][T11493] ? __fget_files+0x2a/0x420 [ 275.854409][T11493] do_recvmmsg+0x334/0x800 [ 275.854433][T11493] ? __pfx_do_recvmmsg+0x10/0x10 [ 275.854460][T11493] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 275.854499][T11493] __x64_sys_recvmmsg+0x198/0x250 [ 275.854519][T11493] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 275.854543][T11493] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.854560][T11493] do_syscall_64+0x15f/0xf80 [ 275.854581][T11493] ? trace_irq_disable+0x3b/0x140 [ 275.854603][T11493] ? clear_bhb_loop+0x40/0x90 [ 275.854623][T11493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.854638][T11493] RIP: 0033:0x7fc833d9ce59 [ 275.854654][T11493] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 275.854668][T11493] RSP: 002b:00007fc831ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 275.854692][T11493] RAX: ffffffffffffffda RBX: 00007fc834015fa0 RCX: 00007fc833d9ce59 [ 275.854703][T11493] RDX: 000000000000045b RSI: 0000200000008880 RDI: 0000000000000003 [ 275.854713][T11493] RBP: 00007fc831ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 275.854723][T11493] R10: 0000000044000102 R11: 0000000000000246 R12: 0000000000000002 [ 275.854733][T11493] R13: 00007fc834016038 R14: 00007fc834015fa0 R15: 00007fff990d2ca8 [ 275.854760][T11493] [ 276.290008][T11505] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 276.418582][T11516] FAULT_INJECTION: forcing a failure. [ 276.418582][T11516] name failslab, interval 1, probability 0, space 0, times 0 [ 276.431536][T11516] CPU: 0 UID: 0 PID: 11516 Comm: syz.0.1862 Not tainted syzkaller #0 PREEMPT(full) [ 276.431558][T11516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 276.431568][T11516] Call Trace: [ 276.431575][T11516] [ 276.431582][T11516] dump_stack_lvl+0xe8/0x150 [ 276.431606][T11516] should_fail_ex+0x412/0x560 [ 276.431632][T11516] should_failslab+0xa8/0x100 [ 276.431656][T11516] __kvmalloc_node_noprof+0x178/0x8a0 [ 276.431679][T11516] ? rhashtable_init_noprof+0x52e/0xad0 [ 276.431700][T11516] ? rhashtable_init_noprof+0x12d/0xad0 [ 276.431725][T11516] rhashtable_init_noprof+0x52e/0xad0 [ 276.431752][T11516] rhltable_init_noprof+0x1e/0x60 [ 276.431772][T11516] mr_table_alloc+0xf1/0x300 [ 276.431792][T11516] ? __pfx_ipmr_new_table_set+0x10/0x10 [ 276.431809][T11516] ? __pfx_ipmr_expire_process+0x10/0x10 [ 276.431831][T11516] ip_mroute_setsockopt+0xed1/0x10d0 [ 276.431857][T11516] ? __pfx_ip_mroute_setsockopt+0x10/0x10 [ 276.431876][T11516] ? get_pid_task+0x20/0x1f0 [ 276.431910][T11516] ? __lock_acquire+0x6b5/0x2cf0 [ 276.431932][T11516] do_ip_setsockopt+0xf1e/0x2ea0 [ 276.431962][T11516] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 276.431984][T11516] ? aa_sk_perm+0x6d5/0x900 [ 276.432004][T11516] ? __fget_files+0x2a/0x420 [ 276.432027][T11516] ? __pfx_aa_sk_perm+0x10/0x10 [ 276.432047][T11516] ? __fget_files+0x2a/0x420 [ 276.432062][T11516] ? aa_sock_opt_perm+0xff/0x1a0 [ 276.432085][T11516] ip_setsockopt+0x66/0x110 [ 276.432099][T11516] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 276.432122][T11516] do_sock_setsockopt+0x17c/0x1b0 [ 276.432155][T11516] __x64_sys_setsockopt+0x13d/0x1b0 [ 276.432180][T11516] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.432197][T11516] do_syscall_64+0x15f/0xf80 [ 276.432218][T11516] ? trace_irq_disable+0x3b/0x140 [ 276.432241][T11516] ? clear_bhb_loop+0x40/0x90 [ 276.432261][T11516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.432276][T11516] RIP: 0033:0x7f342679ce59 [ 276.432292][T11516] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 276.432305][T11516] RSP: 002b:00007f3427669028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 276.432323][T11516] RAX: ffffffffffffffda RBX: 00007f3426a15fa0 RCX: 00007f342679ce59 [ 276.432333][T11516] RDX: 00000000000000d1 RSI: 0000000000000000 RDI: 0000000000000003 [ 276.432342][T11516] RBP: 00007f3427669090 R08: 0000000000000004 R09: 0000000000000000 [ 276.432351][T11516] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 276.432361][T11516] R13: 00007f3426a16038 R14: 00007f3426a15fa0 R15: 00007ffe5ffa28b8 [ 276.432389][T11516] [ 276.701423][T11518] FAULT_INJECTION: forcing a failure. [ 276.701423][T11518] name failslab, interval 1, probability 0, space 0, times 0 [ 276.737860][T11518] CPU: 1 UID: 0 PID: 11518 Comm: syz.3.1863 Not tainted syzkaller #0 PREEMPT(full) [ 276.737884][T11518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 276.737893][T11518] Call Trace: [ 276.737899][T11518] [ 276.737906][T11518] dump_stack_lvl+0xe8/0x150 [ 276.737931][T11518] should_fail_ex+0x412/0x560 [ 276.737954][T11518] should_failslab+0xa8/0x100 [ 276.737978][T11518] __kmalloc_cache_noprof+0x88/0x660 [ 276.737997][T11518] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 276.738017][T11518] ? sctp_add_bind_addr+0x8c/0x370 [ 276.738043][T11518] sctp_add_bind_addr+0x8c/0x370 [ 276.738066][T11518] sctp_copy_local_addr_list+0x314/0x4f0 [ 276.738089][T11518] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 276.738109][T11518] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 276.738131][T11518] ? sctp_v6_is_any+0x64/0x80 [ 276.738153][T11518] ? sctp_copy_one_addr+0x93/0x360 [ 276.738176][T11518] sctp_bind_addr_copy+0xb3/0x3c0 [ 276.738197][T11518] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 276.738220][T11518] sctp_connect_new_asoc+0x2ff/0x6b0 [ 276.738239][T11518] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 276.738261][T11518] ? __local_bh_enable_ip+0xd0/0x130 [ 276.738277][T11518] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 276.738299][T11518] ? security_sctp_bind_connect+0x7e/0x2c0 [ 276.738320][T11518] sctp_sendmsg+0x1576/0x2c50 [ 276.738356][T11518] ? __pfx_sctp_sendmsg+0x10/0x10 [ 276.738382][T11518] ? aa_sk_perm+0x6d5/0x900 [ 276.738401][T11518] ? __might_fault+0xaf/0x130 [ 276.738425][T11518] ? __pfx_aa_sk_perm+0x10/0x10 [ 276.738448][T11518] ? sock_rps_record_flow+0x19/0x350 [ 276.738467][T11518] ? __pfx_inet_sendmsg+0x10/0x10 [ 276.738489][T11518] ? inet_sendmsg+0x2f4/0x370 [ 276.738509][T11518] ? __pfx_inet_sendmsg+0x10/0x10 [ 276.738530][T11518] __sys_sendto+0x5de/0x710 [ 276.738554][T11518] ? __pfx___sys_sendto+0x10/0x10 [ 276.738573][T11518] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 276.738618][T11518] ? __fget_files+0x3a0/0x420 [ 276.738648][T11518] ? ksys_write+0x242/0x270 [ 276.738670][T11518] ? __pfx_ksys_write+0x10/0x10 [ 276.738692][T11518] __x64_sys_sendto+0xde/0x100 [ 276.738712][T11518] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.738727][T11518] do_syscall_64+0x15f/0xf80 [ 276.738749][T11518] ? trace_irq_disable+0x3b/0x140 [ 276.738771][T11518] ? clear_bhb_loop+0x40/0x90 [ 276.738791][T11518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.738806][T11518] RIP: 0033:0x7f581399ce59 [ 276.738822][T11518] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 276.738835][T11518] RSP: 002b:00007f58147ca028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 276.738852][T11518] RAX: ffffffffffffffda RBX: 00007f5813c15fa0 RCX: 00007f581399ce59 [ 276.738863][T11518] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000003 [ 276.738873][T11518] RBP: 00007f58147ca090 R08: 000020000005ffe4 R09: 000000000000001c [ 276.738883][T11518] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000002 [ 276.738892][T11518] R13: 00007f5813c16038 R14: 00007f5813c15fa0 R15: 00007fff1acda478 [ 276.738920][T11518] [ 277.058998][T11520] netlink: 27 bytes leftover after parsing attributes in process `syz.0.1864'. [ 277.076106][ T30] INFO: task kworker/0:0H:11 blocked for more than 143 seconds. [ 277.083859][ T30] Not tainted syzkaller #0 [ 277.096819][T11496] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 277.149053][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 277.163844][ T30] task:kworker/0:0H state:D stack:25248 pid:11 tgid:11 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 277.178081][ T30] Workqueue: kblockd blk_mq_requeue_work [ 277.183875][ T30] Call Trace: [ 277.187457][ T30] [ 277.190485][ T30] __schedule+0x1821/0x5740 [ 277.195045][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 277.200218][ T30] ? __pfx___schedule+0x10/0x10 [ 277.205188][ T30] ? schedule+0x90/0x360 [ 277.209715][ T30] schedule+0x164/0x360 [ 277.213902][ T30] schedule_timeout+0x158/0x2c0 [ 277.219684][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 277.225102][ T30] ? __pfx_process_timeout+0x10/0x10 [ 277.230430][ T30] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 277.236523][ T30] ? prepare_to_wait_event+0x436/0x480 [ 277.242032][ T30] nbd_queue_rq+0x857/0x1100 [ 277.246734][ T30] ? __pfx_nbd_queue_rq+0x10/0x10 [ 277.251780][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 277.257947][ T30] ? lockdep_hardirqs_on+0x7a/0x110 [ 277.263197][ T30] ? irqentry_exit+0x218/0x760 [ 277.275221][ T30] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 277.281139][ T30] ? sbitmap_get+0x229/0x390 [ 277.286232][ T30] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 277.292290][ T30] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 277.300034][ T30] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 277.306896][ T30] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 277.313703][ T30] ? blk_mq_hw_queue_need_run+0x13c/0x680 [ 277.319779][ T30] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 277.325108][ T30] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 277.330866][ T30] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 277.337382][ T30] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 277.342710][ T30] blk_mq_run_hw_queue+0x348/0x4f0 [ 277.347906][ T30] blk_mq_run_hw_queues+0x26c/0x3f0 [ 277.353131][ T30] blk_mq_requeue_work+0x71c/0x780 [ 277.358394][ T30] ? __pfx_blk_mq_requeue_work+0x10/0x10 [ 277.364104][ T30] ? process_scheduled_works+0xa70/0x1860 [ 277.369944][ T30] ? process_scheduled_works+0xa70/0x1860 [ 277.375827][ T30] process_scheduled_works+0xb5d/0x1860 [ 277.381401][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 277.387461][ T30] ? assign_work+0x3d5/0x5e0 [ 277.392078][ T30] worker_thread+0xa53/0xfc0 [ 277.396825][ T30] kthread+0x389/0x470 [ 277.400922][ T30] ? __pfx_worker_thread+0x10/0x10 [ 277.406970][ T30] ? __pfx_kthread+0x10/0x10 [ 277.411598][ T30] ret_from_fork+0x514/0xb70 [ 277.416323][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 277.421459][ T30] ? __switch_to+0xc79/0x1410 [ 277.426325][ T30] ? __pfx_kthread+0x10/0x10 [ 277.430942][ T30] ret_from_fork_asm+0x1a/0x30 [ 277.435845][ T30] [ 277.440299][ T30] [ 277.440299][ T30] Showing all locks held in the system: [ 277.449676][ T30] 4 locks held by kworker/0:0H/11: [ 277.454807][ T30] #0: ffff88801ea83d40 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 277.471026][ T30] #1: ffffc90000107c40 ((work_completion)(&(&q->requeue_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 277.484129][ T30] #2: ffff8880266d5018 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x31f/0x4f0 [ 277.493801][ T30] #3: ffff888069dc5738 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc6/0x1100 [ 277.502838][ T30] 1 lock held by khungtaskd/30: [ 277.508099][ T30] #0: ffffffff8e95cda0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 277.518190][ T30] 2 locks held by getty/5380: [ 277.522893][ T30] #0: ffff8880361570a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 277.532834][ T30] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 277.543187][ T30] 1 lock held by udevd/5623: [ 277.547816][ T30] #0: ffff888026c3e350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 277.557194][ T30] [ 277.559546][ T30] ============================================= [ 277.559546][ T30] [ 277.568016][ T30] NMI backtrace for cpu 0 [ 277.568029][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 277.568044][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 277.568052][ T30] Call Trace: [ 277.568067][ T30] [ 277.568072][ T30] dump_stack_lvl+0xe8/0x150 [ 277.568094][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 277.568112][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 277.568132][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 277.568153][ T30] sys_info+0x135/0x170 [ 277.568170][ T30] watchdog+0xfd3/0x1030 [ 277.568199][ T30] ? watchdog+0x1c9/0x1030 [ 277.568225][ T30] kthread+0x389/0x470 [ 277.568245][ T30] ? __pfx_watchdog+0x10/0x10 [ 277.568264][ T30] ? __pfx_kthread+0x10/0x10 [ 277.568284][ T30] ret_from_fork+0x514/0xb70 [ 277.568305][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 277.568321][ T30] ? __switch_to+0xc79/0x1410 [ 277.568345][ T30] ? __pfx_kthread+0x10/0x10 [ 277.568365][ T30] ret_from_fork_asm+0x1a/0x30 [ 277.568398][ T30] [ 277.568404][ T30] Sending NMI from CPU 0 to CPUs 1: [ 277.678089][ C1] NMI backtrace for cpu 1 [ 277.678107][ C1] CPU: 1 UID: 0 PID: 5610 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 277.678124][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 277.678134][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x8/0x70 [ 277.678161][ C1] Code: 8b 3d b4 0b 61 0c 48 89 de 5b e9 23 ed 5f 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 <65> 48 8b 0d 98 9b 74 11 65 8b 15 b9 9b 74 11 81 e2 00 01 ff 00 74 [ 277.678174][ C1] RSP: 0018:ffffc900039bfae0 EFLAGS: 00000246 [ 277.678188][ C1] RAX: ffffffff8463954c RBX: 0000000000000040 RCX: 0000000000000000 [ 277.678199][ C1] RDX: ffff88803511dc40 RSI: 0000000000000000 RDI: 0000000000000000 [ 277.678208][ C1] RBP: 0000000000000004 R08: ffff8880127ea700 R09: 0000000000000000 [ 277.678218][ C1] R10: ffffc900039bfbf8 R11: fffff52000737f81 R12: 0000000000000000 [ 277.678228][ C1] R13: 0000000000000040 R14: ffffc900039bfba0 R15: ffff888075caf840 [ 277.678239][ C1] FS: 000055556c78a540(0000) GS:ffff88812537a000(0000) knlGS:0000000000000000 [ 277.678252][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 277.678262][ C1] CR2: 00007f5813bea2f8 CR3: 0000000074e96000 CR4: 00000000003526f0 [ 277.678276][ C1] Call Trace: [ 277.678285][ C1] [ 277.678290][ C1] security_socket_recvmsg+0x26c/0x2c0 [ 277.678319][ C1] sock_recvmsg+0x53/0x1b0 [ 277.678338][ C1] ? sock_read_iter+0x23d/0x320 [ 277.678355][ C1] sock_read_iter+0x251/0x320 [ 277.678372][ C1] ? __pfx_sock_read_iter+0x10/0x10 [ 277.678393][ C1] ? bpf_lsm_file_permission+0x9/0x20 [ 277.678416][ C1] ? security_file_permission+0x75/0x260 [ 277.678435][ C1] vfs_read+0x582/0xa70 [ 277.678455][ C1] ? debug_object_free+0x2d7/0x490 [ 277.678477][ C1] ? __pfx_vfs_read+0x10/0x10 [ 277.678512][ C1] ksys_read+0x150/0x270 [ 277.678533][ C1] ? __pfx_ksys_read+0x10/0x10 [ 277.678557][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.678573][ C1] do_syscall_64+0x15f/0xf80 [ 277.678597][ C1] ? trace_irq_disable+0x3b/0x140 [ 277.678618][ C1] ? clear_bhb_loop+0x40/0x90 [ 277.678635][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.678650][ C1] RIP: 0033:0x7fca03357fd7 [ 277.678663][ C1] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 277.678676][ C1] RSP: 002b:00007ffd1542ae40 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 277.678690][ C1] RAX: ffffffffffffffda RBX: 000055556c78a540 RCX: 00007fca03357fd7 [ 277.678701][ C1] RDX: 0000000000000004 RSI: 00007ffd1542ae9c RDI: 0000000000000003 [ 277.678710][ C1] RBP: 00007ffd1542b340 R08: 0000000000000000 R09: 0000000000000000 [ 277.678719][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000004 [ 277.678728][ C1] R13: 00007ffd1542ae9c R14: 00007ffd1542af30 R15: 0000000000000000 [ 277.678746][ C1] [ 277.966720][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 277.973615][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 277.982716][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 277.992770][ T30] Call Trace: [ 277.996042][ T30] [ 277.998965][ T30] vpanic+0x56c/0xa60 [ 278.002938][ T30] ? __pfx___schedule+0x10/0x10 [ 278.007777][ T30] ? __pfx_vpanic+0x10/0x10 [ 278.012363][ T30] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 278.018506][ T30] panic+0xc5/0xd0 [ 278.022214][ T30] ? __pfx_panic+0x10/0x10 [ 278.026628][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 278.032003][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 278.038143][ T30] watchdog+0x102c/0x1030 [ 278.042472][ T30] ? watchdog+0x1c9/0x1030 [ 278.046913][ T30] kthread+0x389/0x470 [ 278.050973][ T30] ? __pfx_watchdog+0x10/0x10 [ 278.055652][ T30] ? __pfx_kthread+0x10/0x10 [ 278.060249][ T30] ret_from_fork+0x514/0xb70 [ 278.064838][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 278.069957][ T30] ? __switch_to+0xc79/0x1410 [ 278.074721][ T30] ? __pfx_kthread+0x10/0x10 [ 278.079298][ T30] ret_from_fork_asm+0x1a/0x30 [ 278.084060][ T30] [ 278.087573][ T30] Kernel Offset: disabled [ 278.091892][ T30] Rebooting in 86400 seconds..